last executing test programs: 1m51.256657645s ago: executing program 4 (id=2357): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 1m51.012487486s ago: executing program 4 (id=2361): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000040)="2a000000010000", 0x7) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) (async) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) 1m50.856942786s ago: executing program 4 (id=2365): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1m50.306756719s ago: executing program 4 (id=2370): syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a6970006d616300000005000400000000000900020073797a3100000000200007800c00018008000140000000000800080000000000080006400000000005000500020000000500010006"], 0x6c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e20f00", 0x28, 0x11, 0x0, @remote, @local, {[], {0x4e22, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x1, 0x1b5a, "5d0719656701ba4d2a43d88e945401b9"}}}}}}}, 0x0) 1m50.244931592s ago: executing program 4 (id=2371): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="38000000010003", 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x81}}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0xdd}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131}], 0x0, &(0x7f00000004c0)=""/205}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20}, {&(0x7f0000000640)=""/194}, {&(0x7f0000000440)=""/50}, {&(0x7f0000000740)=""/206}, {&(0x7f0000000840)=""/55}, {&(0x7f0000000880)=""/111}]}, 0x2}], 0x2, 0x0, 0x0) 1m50.022361553s ago: executing program 4 (id=2377): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x44) 1m37.032562528s ago: executing program 3 (id=2579): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e, 0x10}]}, 0x38}}, 0x8000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) 1m36.929845315s ago: executing program 3 (id=2581): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004090}, 0x4000010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', r4, 0x10, 0x80, 0xfffffff8, 0x9, {{0x12, 0x4, 0x3, 0x1, 0x48, 0x66, 0x0, 0xbf, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @noop, @noop, @end, @lsrr={0x83, 0xf, 0xff, [@local, @loopback, @rand_addr=0x64010102]}, @end, @noop, @timestamp={0x44, 0x10, 0xeb, 0x0, 0x2, [0x9, 0x9b3, 0x1818fe0b]}, @timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0xf, [{@empty, 0x8e}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x138, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) sendto$packet(r0, &(0x7f0000001540)="028988a8", 0x4, 0x8000050, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0xfb}, 0x14) 1m36.885301678s ago: executing program 3 (id=2582): syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m36.827618178s ago: executing program 3 (id=2583): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'wlan0\x00', &(0x7f0000000200)=@ethtool_stats={0x1d, 0x37}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 1m36.737885909s ago: executing program 3 (id=2585): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="200000006800010000000000000000000a0000000400000008000500", @ANYRES32=r2, @ANYBLOB="506f710b1d88b77bafbafadbb81542dd276530ae203ade63e933233d70a853f3d021ea7a6ee96c5a88d591716e7720c22eadfeb7b3ac0afbd9209a6d01e3a32ae74b9e035c16331233307ba20a8b2f29bdcc024b26a80ae74cc3d07c0018663c105f593e"], 0x20}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000240), 0x0, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00002abd7000fbdbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000100"/24], 0x34}, 0x1, 0x0, 0x0, 0x2404c810}, 0x240400c4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff004}, {0x16, 0x0, 0x6, 0xfffffffe}]}) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x7c}}, 0x0) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) listen(r10, 0x8) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000b8d45216a945002400048020000180070001006374000014000280080001400000000a080002400000f20e140000001110010000000000f6ff"], 0x78}}, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000290000000"], 0x0) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0xff, 0xc2, @vifc_lcl_addr=@loopback, @local}, 0x10) r11 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040)=0x60, 0x0) recvfrom(r11, &(0x7f0000000a00)=""/212, 0xffffffffffffff92, 0x121, &(0x7f0000000bc0)=@llc={0x1a, 0x306, 0x5, 0x2, 0x4, 0x2, @link_local}, 0x80) 1m36.642810411s ago: executing program 3 (id=2587): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xe5, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa050000af1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200e22"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7e}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m35.387853509s ago: executing program 1 (id=2604): r0 = socket$inet(0x10, 0x6, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2]}}]}}]}, 0x8c}}, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x3, &(0x7f00000005c0)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x102}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f0000000380)='GPL\x00'}, 0x94) (async) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000100)={@local, 0x77, r7}) (async) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x1f) (async) r12 = socket$rds(0x15, 0x5, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) (async) bind$rds(r12, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000001600)={&(0x7f0000000640)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0x9}, &(0x7f0000000680)=0x7fff, &(0x7f00000007c0)=0x2, 0x3450, 0x5, 0x4, 0x10000000008, 0x1, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x8e3}, &(0x7f0000000800)=0x4, &(0x7f0000000880)=0x4, 0x7ff, 0x8, 0x2d, 0x5, 0x2, 0x6730}}, @fadd={0x58, 0x114, 0x6, {{0x9e4, 0x1}, &(0x7f00000008c0)=0x9d, &(0x7f0000000900)=0x5, 0xe48d, 0x1, 0x3, 0x0, 0x5, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0x6}, &(0x7f0000000940)=0x10001, &(0x7f0000000980)=0x7f, 0x7f, 0x5, 0x40, 0x2, 0x10, 0xfffffffffffffc00}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x6}, &(0x7f00000009c0)=0xfff, &(0x7f0000000a00)=0x71, 0xfffffffffffffffd, 0x1, 0xfff, 0x3, 0x0, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0x6}, &(0x7f0000000a40)=0x3, &(0x7f0000000a80)=0xa68c, 0x0, 0x824c, 0xa, 0x6, 0x20, 0x800}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000b40)=""/177, 0xb1}, &(0x7f0000000ac0), 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/4096, 0x1000}, &(0x7f0000000f40)}}], 0x288}, 0x80010) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="245ad4f9063e2085f0de1401df01b227b485e815494f701344da7b377a3dabe344f0ce1371e174e811f2babc6a14a941d92b2ddbd6abc20679b9a369f0732e0bcb93f1fb50a1051fa147a2180d4bfb04b25e491ef6069b96173fe7082d0420e2a28f6712a57cd1a1c9c73857e6187225025eef0afec27bfbb847f67990e4cbea959b2ff1177b6a49f13468"], 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1403, 0x800, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) (async) read(r9, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x90) 1m35.173010336s ago: executing program 1 (id=2609): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, 0x0, 0x4008040) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000140)={@remote, 0x0}, &(0x7f0000000180)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', r6, 0x8, 0x8000, 0x4, 0x2, {{0x1b, 0x4, 0x1, 0x12, 0x6c, 0x66, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0xc1, [@private=0xa010101]}, @timestamp={0x44, 0xc, 0x23, 0x0, 0x3, [0x5, 0x2]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xd, "9384535c5a8648360dcbf3"}, @timestamp={0x44, 0xc, 0x3c, 0x0, 0x7, [0x3, 0x2a8]}, @noop, @lsrr={0x83, 0x17, 0xe5, [@loopback, @local, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}]}, @ssrr={0x89, 0xf, 0xe4, [@rand_addr=0x64010102, @loopback, @broadcast]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)={0x364, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x12}, {0x19, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6c33d2bc}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x7f}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x10c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_hash_to_port_mapping={{{}, {}, {0x0, 0x4, r10}}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf8}}}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x40}, 0x1) r11 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r12 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) recvmmsg$unix(r12, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f00000009c0)=""/139, 0x8b}], 0x9}}], 0x1, 0x10000, 0x0) write(r12, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r11, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x82}, {&(0x7f0000000100)=""/120, 0x78}], 0x3}, 0xa1}], 0x1, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) splice(r1, &(0x7f00000001c0)=0x6, r1, &(0x7f0000000200)=0x4, 0x5c, 0x4) 1m34.928820946s ago: executing program 32 (id=2377): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x44) 1m34.238674105s ago: executing program 1 (id=2617): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x1, @default, @bpq0, 0x2, 'syz0\x00', @null, 0xa, 0x1, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1008000, 0x7fffffff, 0x8000, 0x5, 0xffffffff, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000fc7f20009600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fc0e0000000000000000000000000000000000000002042e8fe4eb3429550fb443d0ef653fb6dec3009d94683496ed7b4b27486f84a7921a86ae096e9b118d45dcaaeb2c7050b4e04eb07d62bd85c32421ac1108b7410178115d20fbcec189f9fc234403849bd47e56fab7d674178bc146bfdc16478d9fdd1c34f61a6c20b1492cf4a84a1c93b3ae4c25af010f0eed6c1f1554d0520980b64c3099463c563ad589eaeaf5b8bc631c8d5544431c4549a8c6855d9c485282135e92cef48bc4e20ea3b84b7d2fd66825273feb4e62"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6004002}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x70, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) 1m33.225980795s ago: executing program 1 (id=2629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000000) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc002806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000090780000011187d5c9ed7eed4e6de58079eef72628000000520c6e0a5ed8a2fdb2c9f194cfe47c0a47dc130c1f8c9a2adf2ef72929c7da750006c269261307c4fe65dc39a3"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, [0x9, 0x5, 0x7, 0x1, 0x4, 0x6, 0x6, 0x4, 0xc35, 0x5, 0x2, 0x0, 0xe, 0x6, 0xcec3]}, &(0x7f0000000140)=0x100) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="01020000010006", 0x7) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x24c, r6, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x75}}}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x12, 0x36, 0xc, 0x16, 0xc, 0x60, 0x18, 0x48, 0x24, 0xc, 0x49, 0x9, 0x0, 0x2, 0x6, 0x4, 0x6e, 0x48, 0xb, 0x18, 0x2, 0x6b]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7e6, 0x333, 0x5, 0x2, 0x1, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x24, 0x0, 0x18, 0x18, 0x48, 0x16, 0xc, 0x48, 0x12, 0x30, 0x1, 0x30, 0x21, 0x24, 0x9, 0xb, 0x36, 0x6, 0x5, 0x16, 0x5, 0x0, 0x24, 0x9, 0x60, 0x24, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfceb, 0x2, 0xb, 0x7, 0xfffa, 0x1299, 0x0, 0xb35]}}]}, @NL80211_BAND_6GHZ={0x12c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0xa}, {0x5, 0x6}, {0x7}, {0x3, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x6, 0x9}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x9}, {0x6, 0x6}, {0x1, 0x7}, {0x5, 0x1d}, {0x2, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x9}, {}, {0x5, 0x5}, {0x4}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x9}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x6, 0x4}, {0x4}, {0x1, 0x5}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x8}, {0x4, 0x6}, {0x5, 0xa}, {0x7, 0x1}, {0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x5}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {}, {0x0, 0x3}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x6}, {0x7, 0x6}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x8}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0xa}, {0x0, 0xa}, {0x5, 0xa}, {0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x4, 0x4}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0xa}, {0x5, 0x9}, {0x2, 0x5}, {0x7, 0x9}, {0x3, 0x5}, {0x4, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x8}, {0x2, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x6, 0x4}, {0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x3}, {}, {0x5}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x4, 0x2}, {0x5, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x7}, {0x1, 0x6}, {0x2}, {0x7, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x0, 0x1, 0x1b, 0xc, 0x0, 0x48, 0x9, 0x36, 0x60, 0x4, 0xb, 0x5, 0x1, 0x12, 0x4, 0x12, 0x12, 0x4, 0x2, 0x6c, 0x16, 0x58, 0x5, 0x30, 0x48, 0xb]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x7}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x6, 0x7}, {0x5}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x3, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x17}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x2}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x9}, {0x3, 0x5}, {0x7, 0x3}, {0x6, 0x6}, {0x4}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x3, 0x2}, {0x0, 0x7}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x4, 0xca88, 0xfc01, 0xff81, 0x5, 0xe509, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x4, 0x4932, 0x7, 0xdd1, 0x0, 0xde]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x6, 0x24, 0x6c, 0x6f, 0x5, 0x60, 0x3, 0x4, 0x5, 0x48, 0x6c, 0x48, 0x30, 0x24, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcc, 0xd, 0x7fff, 0x2, 0x0, 0x1, 0x8, 0x3]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x6, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x9}, {0x4}, {0x4, 0xa}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x44000}, 0x20048044) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x1d0, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff410}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x46a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}]}]}, 0x1d0}}, 0xc1) 1m33.167960386s ago: executing program 1 (id=2630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m33.030409022s ago: executing program 1 (id=2632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7, 0x80, 0xd5, 0x4, {{0x21, 0x4, 0x2, 0x0, 0x84, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @remote, {[@end, @lsrr={0x83, 0x13, 0x6f, [@broadcast, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x5a, 0x0, [{0x0, 0x11, "2782bbbc828b2c08812be1f00c94ca"}, {0x0, 0xf, "f8debce8c32eb8cb8f5722533e"}, {0x0, 0xd, "73330f28578255af4b9ab7"}, {0x0, 0xc, "d9f434b847a3887e25e2"}, {0x6, 0x7, "b3c59b8d45"}, {0x0, 0x5, "59b15c"}, {0x0, 0xf, "6f0f6d2c1d58fb602123a1a1ff"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@private0, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x40, 0x20, 0x1, 0x8, {{0x24, 0x4, 0x2, 0x7, 0x90, 0x67, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "279a8e26dc94"}]}, @rr={0x7, 0xf, 0x52, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x34}]}, @ssrr={0x89, 0x23, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @multicast2, @multicast1, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @lsrr={0x83, 0x23, 0xa1, [@empty, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast]}, @ssrr={0x89, 0x7, 0x90, [@multicast2]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x7, 0x2, {{0x38, 0x4, 0x0, 0x5, 0xe0, 0x64, 0x0, 0x21, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xe, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0x1}, {@private=0xa010100, 0xa3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x97b}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@local, 0x74}, {@empty, 0x4}]}, @timestamp={0x44, 0xc, 0x63, 0x0, 0x0, [0x1ff, 0xfffffffa]}, @rr={0x7, 0xb, 0x83, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @lsrr={0x83, 0x7, 0xc5, [@loopback]}, @noop, @lsrr={0x83, 0xb, 0x42, [@broadcast, @dev={0xac, 0x14, 0x14, 0x31}]}, @cipso={0x86, 0x2a, 0x2, [{0x0, 0xa, "23b179f8b2d7aec4"}, {0x1, 0x12, "25ebf1df815a6ffb7630ebb8fc7a1e6f"}, {0x7, 0x8, "8e340d9c07e5"}]}, @timestamp={0x44, 0xc, 0xfd, 0x0, 0x6, [0x8, 0x6]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0xe, [{@multicast2, 0x5}, {@loopback, 0x4}, {@rand_addr=0x64010100, 0x6}, {@rand_addr=0x64010102, 0x2}]}, @noop]}}}}}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1b0, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) 1m21.42994753s ago: executing program 33 (id=2587): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xe5, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa050000af1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200e22"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7e}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m18.017381091s ago: executing program 34 (id=2632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7, 0x80, 0xd5, 0x4, {{0x21, 0x4, 0x2, 0x0, 0x84, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @remote, {[@end, @lsrr={0x83, 0x13, 0x6f, [@broadcast, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x5a, 0x0, [{0x0, 0x11, "2782bbbc828b2c08812be1f00c94ca"}, {0x0, 0xf, "f8debce8c32eb8cb8f5722533e"}, {0x0, 0xd, "73330f28578255af4b9ab7"}, {0x0, 0xc, "d9f434b847a3887e25e2"}, {0x6, 0x7, "b3c59b8d45"}, {0x0, 0x5, "59b15c"}, {0x0, 0xf, "6f0f6d2c1d58fb602123a1a1ff"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@private0, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x40, 0x20, 0x1, 0x8, {{0x24, 0x4, 0x2, 0x7, 0x90, 0x67, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "279a8e26dc94"}]}, @rr={0x7, 0xf, 0x52, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x34}]}, @ssrr={0x89, 0x23, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @multicast2, @multicast1, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @lsrr={0x83, 0x23, 0xa1, [@empty, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast]}, @ssrr={0x89, 0x7, 0x90, [@multicast2]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x7, 0x2, {{0x38, 0x4, 0x0, 0x5, 0xe0, 0x64, 0x0, 0x21, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xe, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0x1}, {@private=0xa010100, 0xa3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x97b}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@local, 0x74}, {@empty, 0x4}]}, @timestamp={0x44, 0xc, 0x63, 0x0, 0x0, [0x1ff, 0xfffffffa]}, @rr={0x7, 0xb, 0x83, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @lsrr={0x83, 0x7, 0xc5, [@loopback]}, @noop, @lsrr={0x83, 0xb, 0x42, [@broadcast, @dev={0xac, 0x14, 0x14, 0x31}]}, @cipso={0x86, 0x2a, 0x2, [{0x0, 0xa, "23b179f8b2d7aec4"}, {0x1, 0x12, "25ebf1df815a6ffb7630ebb8fc7a1e6f"}, {0x7, 0x8, "8e340d9c07e5"}]}, @timestamp={0x44, 0xc, 0xfd, 0x0, 0x6, [0x8, 0x6]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0xe, [{@multicast2, 0x5}, {@loopback, 0x4}, {@rand_addr=0x64010100, 0x6}, {@rand_addr=0x64010102, 0x2}]}, @noop]}}}}}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1b0, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) 43.69545649s ago: executing program 5 (id=3239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_deladdr={0x4c, 0x15, 0x2, 0x70bd2d, 0x25dfdbfb, {0xa, 0x38, 0x4, 0xfe, r8}, [@IFA_FLAGS={0x8, 0x8, 0x204}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 43.075052981s ago: executing program 5 (id=3249): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/mnt\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d4881, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') unshare(0x6a040000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r6, 0xff, 0x30}, 0xc) socket(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r9, 0x1, 0x19, 0x0, &(0x7f0000003080)) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) 40.415009119s ago: executing program 5 (id=3283): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe6aa0a9f27214269) r2 = socket$kcm(0x2, 0x3, 0x73) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) getsockname$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) listen(r1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe6aa0a9f27214269) (async) socket$kcm(0x2, 0x3, 0x73) (async) pipe(&(0x7f0000000040)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) shutdown(r4, 0x1) (async) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) (async) getsockname$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) 40.184999658s ago: executing program 5 (id=3287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000e4000000e4000000060000000f000000000000000009000000000000000001000006040000000600004b6168014ed200c4000000000008000084050000000200000002000000000000001000000002000000070000000f00000000000000070000000c00000004000000050000000c00000003000000020000000400000002000000030000000300000003000000030000000c0000000000000001000000040000000000000700000000010000000000001008000000000000000500000d000000000200000005000000100000000200000010000000030000000600000001000000070000000300000000302e617100000000000000"], &(0x7f0000000440)=""/2, 0x102, 0x2, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0x10001, 0xff, 0x50, r4, 0x8, '\x00', r2, r5, 0x0, 0x1, 0x0, 0x5}, 0x50) 40.045553303s ago: executing program 5 (id=3289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000140)=@getae={0x4c, 0x1f, 0x101, 0x70bd2a, 0x25dfdbfb, {{@in6=@empty, 0x4d5, 0xa, 0x6c}, @in6=@private2, 0xfffffc01, 0x3504}, [@mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x22008040) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 39.774806923s ago: executing program 5 (id=3294): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.75534707s ago: executing program 35 (id=3294): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.985000068s ago: executing program 7 (id=3505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000ec055344f8a28d2c3919b858afcce3514941e43ab066a5c271bad3a59fe491bb65399a846d536269018f1202331b16914445f5afb55de6b6b4132a1c6c1de5b86bdcf07e9e920e5eebb6ec30215bac85c462a5d7181e43f8"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r4, 0x0, 0x2, 0x5}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r0}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r11, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r11, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) recvfrom$inet(r11, 0x0, 0xa8fe, 0x40000002, 0x0, 0x0) sendto$inet(r11, &(0x7f00000003c0)="e14a97c24b2dc90ae41f83441e9b42a80ab14942a6096a408f102245681e742487095b95ad3fd42580d9c45d3fa4a4e3938c68f967bbdce0c774d98bb8e5d205a005f3562d45fdd343107d95563731de457d0fb2fd41c2db5b666353eac086e46868b296811606421ae1bd02cb4db0efcbcb842d06ddaaea287479c74b59fd4144675ff850fa04c27ef1f30990ea574a7614f603b357dea1fc2cfc1e6ba51b654659faf7e380b3fb8e7cca68f2ed6ebdeec2f9bfe801841894d2de8fe791babc7c06b7491e978957", 0xfffffffffffffdef, 0x40000, 0x0, 0x36) splice(r11, 0x0, r10, 0x0, 0xfea8, 0xa) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r12, r13, 0x26, 0x0, @void}, 0x10) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x80, 0xc, &(0x7f00000002c0)=""/12, 0x41100, 0x6b, '\x00', r7, 0x1c, r6, 0x8, &(0x7f0000000440)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x2}, 0x10, 0x143b1, 0xffffffffffffffff, 0x1, &(0x7f0000000600)=[r13, r8, r9, r10], &(0x7f0000000640)=[{0x3, 0x3, 0x0, 0xc}], 0x10, 0x6}, 0x94) r15 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r14}, 0x8) close(r15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r14, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.274857538s ago: executing program 2 (id=3514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='/a\x00', @ANYRES32=r4, @ANYBLOB="0c00990000010000460000000a000600ffffffffffff00000a00060008021100000100000500d200080000000a000600ffffffffffff00000500d200000000000500d2000e0000000a00060008021100000100000a0006000802110000010000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30"], 0xf8}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB="050003"], 0x28}}, 0x80) r7 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) connect$pppl2tp(r7, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @multicast2}, 0x2, 0xfffffffe, 0x0, 0x2}}, 0x2e) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01080000000000000000010000000900030073797a5de111e9000900010073797a310000000028000480080002401886c3010800014000000005140003007767300000000000000000000000000028000000000a05000000000000000000010000080900010073797a31c30000000800024000000001140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x2, 0x0, 0x0, 0xf, 0x3}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000020000000000000900000000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r12, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) writev(r11, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 2.269771977s ago: executing program 6 (id=3515): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) listen(r1, 0x4) 2.269217682s ago: executing program 0 (id=3516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x558}, 0x20) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000080)={0x7, 0x6e, 0x0, 0xffffffffffffff80, 0x8, 0x7, 0xb, 0x5}, &(0x7f0000000100)={0x10, 0x80000001, 0x2, 0x6, 0x2, 0x8000, 0x4, 0x13c}, &(0x7f0000000140)={0x8, 0xffffffffffffbeb3, 0x7, 0x0, 0x5, 0x1c3, 0x6, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0xa]}, 0x8}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x558}, 0x20) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x12, 0xffffffffffffffff, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) pselect6(0x40, &(0x7f0000000080)={0x7, 0x6e, 0x0, 0xffffffffffffff80, 0x8, 0x7, 0xb, 0x5}, &(0x7f0000000100)={0x10, 0x80000001, 0x2, 0x6, 0x2, 0x8000, 0x4, 0x13c}, &(0x7f0000000140)={0x8, 0xffffffffffffbeb3, 0x7, 0x0, 0x5, 0x1c3, 0x6, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0xa]}, 0x8}) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) (async) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) 2.207288395s ago: executing program 2 (id=3517): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x2}, 0x20}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x20, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x20, 0x11, 0x1, 0xffffffef, 0x0, {0x7, 0x0, 0x0, 0x0, 0xc440, 0x40000}}, 0x20}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x4010744d, &(0x7f0000000000)=0x20000002) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x1d, &(0x7f0000000000), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r8, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1}}], 0x1, 0x20080058) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000100)=0x6, 0x4) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000040)={@local, @empty, @void, {@generic={0x7, "c03ea896"}}}, 0x0) r10 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x4048810) 2.031725305s ago: executing program 7 (id=3518): bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f00000000c0)=""/102}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437, 0x80000000, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x44629}}, 0x20}, 0x1, 0x0, 0x0, 0x200480c5}, 0x0) 1.674993233s ago: executing program 7 (id=3519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r2, 0x0, r1}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0xae}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r5, 0x5}, &(0x7f00000001c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004b00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) 1.672900727s ago: executing program 6 (id=3520): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delqdisc={0x1fc, 0x25, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x13, 0x5}, {0xfff2, 0x10}, {0xffff, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x2, 0x7ff, 0x0, 0xffff, 0x8, 0x3}}, {0xa, 0x2, [0x8, 0xfff, 0x2]}}, {{0x1c, 0x1, {0x10, 0x0, 0xedb0, 0x4, 0x2, 0xf, 0x8, 0x1}}, {0x6, 0x2, [0xb4]}}, {{0x1c, 0x1, {0x2, 0x8, 0x7, 0x5, 0x0, 0x800, 0x1, 0x2}}, {0x8, 0x2, [0x9, 0x3]}}, {{0x1c, 0x1, {0x1, 0x17, 0x401, 0x100, 0x0, 0x3, 0x8, 0x6}}, {0x10, 0x2, [0x7, 0x5, 0x0, 0x0, 0x81, 0x5]}}, {{0x1c, 0x1, {0x3a, 0x8d, 0x8cc1, 0x2, 0x2, 0x7, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0xc040, 0xb]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x9, 0x7fffffff, 0x1, 0x7, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0xba, 0x5]}}]}, @TCA_EGRESS_BLOCK={0xfffffffffffffe42, 0xe, 0x3d}, @TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xa, 0x0, 0xfffffffe, 0x2, 0x101, 0x1, 0x2}}, {0x8, 0x2, [0x3, 0x7f]}}, {{0x1c, 0x1, {0x3, 0xf0, 0x7fff, 0x40, 0x1, 0x81, 0x25, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x9, 0x7c, 0x7, 0x8d, 0x1, 0x7, 0x6, 0x4}}, {0xc, 0x2, [0x9, 0x8001, 0x3, 0x7]}}, {{0x1c, 0x1, {0xe, 0x5, 0x7, 0x3, 0x0, 0xcd34, 0xffff, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x1fc}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x40047452, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = accept4$inet(r2, &(0x7f00000008c0)={0x2, 0x0, @dev}, &(0x7f0000000900)=0x10, 0x0) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f0000000940)=0x2, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xfffffe20) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1000, 0x3}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x174, 0x3f, 0x400, 0x70bd28, 0x25dfdbff, {0x17}, [@generic="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", @typed={0x8, 0x10a, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x14f, 0x0, 0x0, @pid=r6}, @generic="af69724f9d1b9948b31c6db772541a863977feaaf93849ce36011cd8d7e1f5dfd88444b6fecbf7b1f6b203bddb27d3a54f59cf6a621ad918624dbb", @typed={0x8, 0x13, 0x0, 0x0, @fd=r4}, @nested={0xc, 0x1e, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @uid=r8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x88c0) 1.575792687s ago: executing program 2 (id=3521): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.462839724s ago: executing program 6 (id=3522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001080)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) unshare(0x400) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r8, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000010c0)=0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_rdma(0x10, 0x3, 0x14) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r14, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r12, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x38}}, 0x4800) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2b}, @void, @val={0xc, 0x99, {0x1, 0x11}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x4f}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x7f}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x804) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x308, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xe0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0xc, 0x36, 0x1b, 0x5, 0x48, 0x12, 0xc, 0x0, 0x20, 0x30, 0x4d, 0x6, 0x60, 0x3, 0x4, 0x1b, 0x48, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x45, 0x2, 0x2a, 0x70fe, 0x7, 0x3]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x4}, {0x5, 0x6}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x9}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x2, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x5}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x3}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0xff, 0x9, 0x2, 0x2, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x400, 0xffff, 0x4, 0x7f, 0x0, 0xbf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0xb, 0x6, 0x3, 0x6, 0x5, 0x3, 0x16, 0x9, 0x1e, 0x6c, 0x48, 0x5, 0x5, 0x16, 0x24, 0x5, 0x8, 0x3c, 0x2, 0x48, 0x0, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x40, 0xfff, 0x4, 0xfffe, 0x3f, 0xb, 0x7]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0xa}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0x7}, {0x7, 0x5}, {0x0, 0x2}, {0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x8}, {0x2, 0x6}, {0x3, 0x9}, {0x6}, {0x4, 0x5}, {0x2, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9f9, 0x7, 0xac, 0xd2a0, 0x2, 0x8b, 0x2]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8f1, 0x5, 0x0, 0x7ff, 0x2, 0x2, 0xf]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xc69, 0x1, 0xe0d, 0x9, 0x7, 0x2, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0xd51dfb220dc6f4fa, 0x3, 0x48, 0x48, 0x48, 0x36, 0x6, 0x3, 0x9, 0x29, 0x0, 0x16, 0x4, 0x6, 0x31]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa7, 0x3, 0x81, 0xd, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77, 0x7f, 0xffff, 0xe, 0xb3f, 0x9, 0x0, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x3}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0xa}, {}, {0x2, 0x7}, {0x5, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x6}, {0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x0, 0x4}, {0x2}, {0x4, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x285, 0x9, 0xf6, 0x89, 0x10, 0x7, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8bba, 0x3, 0x9f1, 0x7fff, 0x3, 0x3, 0x33, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8055, 0xffff, 0xb, 0x0, 0x3, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x0, 0xbfa, 0x3, 0xa, 0x53]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x3, 0x3, 0x32, 0x9, 0xc, 0x6, 0x4, 0x37, 0x60, 0x5c, 0x2, 0x2, 0x60, 0x48, 0x69, 0x1b, 0x60, 0x36, 0xb, 0x30, 0x37, 0x1b, 0x6, 0x9, 0x9, 0x6c]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x2, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x12, 0x12, 0x0, 0x60, 0x30, 0x6, 0x9, 0x1b, 0x6c, 0x18, 0x2, 0x36, 0x3, 0x2, 0x36, 0x1b, 0x35, 0xb, 0x4a, 0x24, 0x30, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003a000701fcfffffffddbdf25027c0000040036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 1.414843017s ago: executing program 0 (id=3523): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @private2, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @local}}}, 0x108) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000013180)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_deladdr={0x18, 0x15, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x59, 0x30, 0xfe, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 1.414374099s ago: executing program 7 (id=3524): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r1, 0x0, 0x0, 0x80000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff2c, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d708}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 1.242983959s ago: executing program 0 (id=3525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_ID={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x26}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x585}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008040}, 0x20004894) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 64) 925.465162ms ago: executing program 2 (id=3526): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000001c0)=0x10, 0x100000) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f6dc38a8d4e715114c3888479ec07e15fb1c5fc5bcd5758129d88fa61ec4d05610319a1341a6055752309b62827d65d7f063e3534e5a5852d078f4e5105bc0d9a984364b2993c7364b9f129082883ab6df955850d304e64268b0bef10fbe62d927494a30d", 0x65, 0x8040, &(0x7f0000000180)={0x11, 0x1a, r3, 0x1, 0xa2}, 0x14) 807.135822ms ago: executing program 0 (id=3527): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c090000", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f00000004c0)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0xe}], 0x1}, 0x20044001) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f00000000c0)="ea57368525dade7cba72d5325c3fed8847d83ca26d591905bb9a4e17854c7e7579c0320557525aefd48ade19dcb0073a928f559d07b8080a6dbae1d9aa85cf3b424df13a9efb8961a51c528909ffba791001518f44495042200f9330863f92f44c59") 718.935446ms ago: executing program 6 (id=3528): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000280)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40201, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x8000}) (async) listen(r4, 0x3) (async) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000100)=0x3fc, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, 0x0, 0x40}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffc, 0x2}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000880) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x20, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @exit, @generic={0xfa, 0xe, 0x6, 0x6, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ldst={0x1, 0x3, 0x3, 0x0, 0x9, 0xfffffffffffffff4, 0xa}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, &(0x7f0000000640), 0x40f00, 0x4, '\x00', r3, 0x0, r10, 0x8, &(0x7f00000006c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[r11, r12, 0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x2, 0x3, 0xc}]}, 0x94) (async, rerun: 64) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r13, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2044080}, 0x10) 678.415393ms ago: executing program 2 (id=3529): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) listen(r1, 0x4) 546.946822ms ago: executing program 0 (id=3530): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) socket$pptp(0x18, 0x1, 0x2) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x1, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x64, 0x0, 0x6d, 0x2f, 0x0, @loopback, @loopback}}}}) unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x2f, &(0x7f0000000040), 0x3b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 474.35027ms ago: executing program 7 (id=3531): socket$caif_seqpacket(0x25, 0x5, 0x1) (async) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x2e, "fc1a521f29e841c1edbd0fc6ce75641f"}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='sit0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x80000001}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x80000001}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)) r4 = socket$unix(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2404c044}, 0x48044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x1, 0x3}, 0x6) accept4$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10, 0x80800) socket$can_j1939(0x1d, 0x2, 0x7) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000480), 0x4) (async) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000480), 0x4) sendmmsg$sock(r5, &(0x7f0000001140)=[{{&(0x7f00000004c0)=@xdp={0x2c, 0x9, 0x0, 0x5}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)="0a2475041cb1a2811d00d8771f5f20dcbca05197ced4105fec123c5d5c47dfe476afac83bd7f6b626b39bd1cb15d923ecdcec8748cd14229a4cfff43eef74f43c26a7c2654188ca551e5dc1c1d3be8b0bf356a991abeddda4d8289a364222aa2639975ee1c1924ac327b5600538378f3deb6aabbe3670f00e170df58c4e451f8aabd25f4119cc0235d3c059cff4feea866a4f2deae49a8abd23a22e0291fce39350298fe6d10aa94d72a4d230fd3cc092a16920a0f509cebfd907340866666f51221309bcbbd342c8682c9ba3d3b1467fbd18044241433eac96b958bc8fcd2cf6f656b48afc5de9a12e6ce53b8017cb037c2150eb222", 0xf6}, {&(0x7f0000000640)="aa8accf0ca42da8c78e3b80a575772da3ec2a14b9d1bacbd918c67913be05c5d6d897c9528aa5bdd882b74aff2c3775d77369f51875b3cef3e19ee547b", 0x3d}, {&(0x7f0000000680)="5b9dd25c8bacd7b6b9b8bbc8cf653acb98ebd53724e7d1c0b974da40ae402fac113687cc6b8364b1e23b2c4939056d0ea883074ceb50b4d4159004bc42ba8450262ce1b5738c38632bcc0b1ebae8c0e892905f1030f2a9", 0x57}, {&(0x7f0000000700)="5af0efea2ac8a1eaf7", 0x9}, {&(0x7f0000000740)="c388ba05df9e9f44a167c0716fe2e311919713ab1506b5b07d243184346f609aee709ba985c00dcd718992b1fccd4e41ef515bf15e97f8dbee272667c689bcb97798edc2ba2601710aed5c03d9d8524b90c95525af1f77120c20fd33c071c2130694e5ee77a97eb0dce9dd176390265201853de8d8a33f279cae8d40085b52158a79b270e32e54e0741402981ab77580734cecb36bb0cb59e7e722cce9560a32a47f421baca13607047856456cca49c64141c9b6bc44b4d6152e80c8424e5a1af2f636bd908b", 0xc6}, {&(0x7f0000000840)="30848956e7ec484005027909005a99f27f4b05e04f2cd0c66380994e8428a526be0d42de3e47b259072c9f59dd60e48d90e8d67e565f73b41359515d727d953b0fa5be073328a086f8f2531f9d7b7a9224f064d6920c86742a0d01c72f2a", 0x5e}, {&(0x7f00000008c0)="7b31d8b7e75378a51a578deccf0dafe268ea76e11f47ecad764f02fa571b392b2cc366167764201b8bcb7003cfad4445103c2cf8a68c8092625492bfca0ce9376e2143933dcc3e1c27effec84569ad6c5c1e9ecaf71c6522b6d9b496d86cae1e78477d446fba115cf9f694f8623fa9e0a98e60178945f0d8b73562318e666cceb57585ebd2ba6a669450cdcf75d145ae022336360d2453b92581c1149c26b054f02214e06a06d884839e4fcb6b3f8dccb9001e7e914726c8317729fcc3d1f669b6ea5768aa68bf047d6feecac9d7fd815be09e69eb1f6812bfe76729439bb0267cbe0ea33e31346d8734910cb2ac414c452c8a72b78d526834", 0xf9}], 0x7, &(0x7f0000000a40)=[@mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xee81}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x9c2}}], 0xd8}}, {{&(0x7f0000000b40)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="785b487047301abba290a42d2b3cdac6adaf0b95b7f23f1d59ebed0ce76dc0131570ac71c693d4863ed139fde652fe1eb31d956a6c2d06e38366b2621a0e", 0x3e}], 0x1, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0xb9}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xd8}}, {{&(0x7f0000000d40)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x1, 0x1, 0x4, 0x3}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)="31286b2b18bf743b11dcc5d59c1476baf79254e23d1ff7f39468d4408847de92a824da240a97e6b00f6dbf4c049c2efd9c27e343cb03d62d6321df18f11e5b1a87dc7d681443bd86219188991d572bf86234e02f4008e58ada95056a8d112b957e63319506a786a95441ac4c945977f8a6d0563153997f1945995b2a943a0b34f894e410160fc8c7abf2c097ed54499e1e01deca8eb7ec43afb13d430f7b0c3ee3ac719a90261fe62dd2f48a450824153cf5763e53d43fb52cbe1740642f", 0xbe}, {&(0x7f0000000ec0)="31606a5694fd6dea574d85113dec2006517981885f2fe356c0fd1dc4eb41d9efde4b48deceb65bc1796e8ebb8b121b05b57c52edf986f6177c5277fdfdb80c84e686b38b90c842b0adba52039f766f97b5ab097ae32bb3c8dd96c6f41aa5bee0bfc4cc0b39e3c8e9fd1ebe97f0f14751ada24913d460bead91c89feb6e874d66afe7cbabf44671dd899e9d26955c8c4ff564b1f920f66ac86ed7b5248f0fb84bcb68ffcc9aaace13153dfe1b4ff4ecf0091e44541190355b5e670933e09c97af4a427ca69c6f1010860c23263a0dd3580f4ab45008f54bab8708e49a4431848bf92249349f005d57b468bc621f85", 0xee}, {&(0x7f0000000fc0)="ebe9f6d8966717478e971bea364f5116bc23ee5e6af7a86cdc702c513b92e6af4575db0206c301bedd8c574b3bd273056f2d9f1ec99b105ca48084774e5be836dcb29eb91151e12b7be374048aeb6a540a894c3979d8b13942b82b5b87c6b6158885d88ccc0118ee42b3cf69956bee22aa12d61e8f0b0758", 0x78}], 0x4, &(0x7f0000001080)=[@mark={{0x14, 0x1, 0x24, 0xb421}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}, @timestamping={{0x14, 0x1, 0x25, 0x2fa}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x90}}], 0x3, 0x404c800) syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r2) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r2) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001240)=""/46, 0x2e}, {&(0x7f0000001280)=""/59, 0x3b}], 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000001b80)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f00000013c0)={0x750, r7, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x26f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0x9, 0xf4}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0xfffffffffffffffe, @default, 0x41c1, @void, @void, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0xc, 0x0, 0x7, 0x7ff}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0xfe}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0xa, 0x24, 0x4f}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x69, 0x40, 0x29f5}}, [{0xdd, 0xd0, "ee785784b4e944b44c7e885f216af5fcfce73df0315b3a45c27ba50ec7d8620321b1dd490fcdc8028d2992276324eeac2d7d88369d27bdabb80bde43717f10637aef7539bea6f11013257453f59b039de5eab92db50a02d282d619aaf443c6466f25b886b16dd1ac22e86add9e0580bcc88397127339a7f82368bb253d8c5ce12099fb7537f2cc9e2c8efea12c9543513ba013427085fa7ea51b4b406550dad440fa3d7c84d305f3d3fd7fe40034f1f43fb9def8ec18a3b114c9973823ba2590c1c221948fa931e5928cec0eed7299ba"}, {0xdd, 0x1e, "7e2647d2c2a81aab1e02705fb96e910e787114a4e64278708617806f78a4"}, {0xdd, 0xdd, "89fa056a78e15fdd62095700f76529b5d52d3654e72bc35fac91f9dfddf5bfe4c828b3dffe53ca280dc789b8893c1e2446f8a035275f8d6f3cf0b49dc4c253f8f37b732ae0c7e826b571a46b7500af77d69b693e004ebcb4bad0771ef291cca95ae3e3b64da7dedf7c58ed1cc7c1dd174cabd89187867eadb8e5d343c95bcd7c1bd35d648eff091326aec3ee3478149baae3e5df7e578f85e5981100abd250bdcc02d36d88856250702b7bd0b3b4ed61e223828c34d724a511d32998757f1e133346bf9e0c9ade61775e927de3e551a77293007a858bc1aeb802d4fb8a"}, {0xdd, 0x47, "08e39aed6f2e4955b220e49fbdd6752df52c9e9225b3a3495b1da00915c09afd09615db5fbd36e1b2cd24650a6621368e8df87074b9b7c942a66fe180a9db21f16512a5752d26f"}]}}, @NL80211_ATTR_BEACON_HEAD={0x483, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_a, @device_a, @from_mac=@device_b, {0x8, 0x5}}, 0x12048816, @default, 0x1800, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x6c}, @void, @val={0x6, 0x2, 0xfffe}, @val={0x5, 0x8a, {0xfe, 0x95, 0x6, "d5eb8e21266c37145bf16cbdafb2c2678e9eea5d9b0005f5fc8cf0210b0e64bd12e693fcd958ec73c960ba6de2a26be5f604624e8218e8d81a99bd2e05cf8104f2e18777787c67f81a5b017af8c4e1198c24e240b0ff3a14e3f59586ee5279d482c67b6dcf75ebf671203fd019e6b3f0ab43ae71f3099a35f2e004533c1ed00e5431b27bb76f50"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x40}}, @val={0x76, 0x6, {0xeb, 0x5, 0x1b}}, [{0xdd, 0xfa, "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"}, {0xdd, 0xfa, "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"}, {0xdd, 0x95, "a217d7907c2f522b5a8e4f224e6d8716eedc91233e9f1e7d7157cf243ac66c2fbb937582c9fecae3d0350d34b436d771a5c0a59b09ba24875b837ec2588d1d6246a73d1855649e1547b484ee8229bf09167ae223dd769daab9be185ebe81467511926702384ad8868a513d016813e8a58321f9a835aa38faf2e4eab6bfcbae0a7358da1f48f25dbd0f946a592831c0b3122e7d6eea"}, {0xdd, 0xe4, "34570d6e41091605b0c6518a796c43489f84f5c27d39e6efecc6c147e37be78443fbe91917e71de2587ec6c02ad9e9bdf8da5217408795c7ded752c463e43a6e0f3713b23b06c8d5df2a215a1d6f2a18b714e1c64ce29d7a50b1758ed2fb43e6501371c8c3cda441e3b9e11e720ac78ba7952c244f823bb13e03e3696dacfd35c704f9aa501b01081c050424b4cb4143c9f490c5d873ebcf63617fa1175c7b453f91edc28c2b64590e8fd386c8acf50f85f0593613dada02875c6cfd1b63f7a759e4a8f1f50d86ffc956e4e1f20bf0349eb2c79c01a6051c07547b09365f182c54958473"}, {0xdd, 0x30, "490f3be29681c985a65b61c38b4cb3f765f6a6cc7dfc694281e75f7515607a536d13fc09e073b7ae2ce60e445b087a2b"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x23, 0x7f, [@ht={0x2d, 0x1a, {0x800, 0x3, 0x6, 0x0, {0xd, 0x2, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x8, 0x7fff, 0x5}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x20}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}]}, 0x750}, 0x1, 0x0, 0x0, 0x4044005}, 0x840) socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000001e00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x1b0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0xb4, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_virt_wifi\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x53a4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xca}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfeff}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x142}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x33}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '!.)[-[\x00'}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) accept(r4, &(0x7f0000001e40)=@rc={0x1f, @none}, &(0x7f0000001ec0)=0x80) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r7, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) (async) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r7, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$rxrpc(0x21, 0x2, 0x2) writev(r10, &(0x7f0000002080)=[{&(0x7f0000002000)="a41c7468e5b2ddd6636706d875850a38ca3c46d46047664d67c239bbb1d7431abde14476a4fd965ba6fdbdedd32ee28cd994f2ba2d46c87c54b3ab4860d028ef084af10af3052a250a2dc5312a4d69a2eea3a91cfbc818a98f6d7e588cdc1ae5c1c6a4e2c003b12ac72b794a8b42098c43f6a0ef470d932b738a4116e7be2391", 0x80}], 0x1) (async) writev(r10, &(0x7f0000002080)=[{&(0x7f0000002000)="a41c7468e5b2ddd6636706d875850a38ca3c46d46047664d67c239bbb1d7431abde14476a4fd965ba6fdbdedd32ee28cd994f2ba2d46c87c54b3ab4860d028ef084af10af3052a250a2dc5312a4d69a2eea3a91cfbc818a98f6d7e588cdc1ae5c1c6a4e2c003b12ac72b794a8b42098c43f6a0ef470d932b738a4116e7be2391", 0x80}], 0x1) 424.191668ms ago: executing program 6 (id=3532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pB \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 112.857995ms ago: executing program 7 (id=3533): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) clock_gettime(0xa, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x59, @loopback, 0xffffff31}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x8}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x8}], 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}], {0x14}}, 0xa4}}, 0xc800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00033ebd7000fc0000000a00060008021100e60000000a000600080211010000000000000000030000000500"/54], 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) socket$inet6_sctp(0xa, 0x1, 0x84) (async) clock_gettime(0xa, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x59, @loopback, 0xffffff31}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x8}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x8}], 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}], {0x14}}, 0xa4}}, 0xc800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00033ebd7000fc0000000a00060008021100e60000000a000600080211010000000000000000030000000500"/54], 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) (async) 51.100233ms ago: executing program 6 (id=3534): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='caif0\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x8, 0x46) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x5, @loopback}], 0x1c) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 50.243016ms ago: executing program 0 (id=3535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRES32=0x1, @ANYRESOCT=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000001f0038b5fb7e6914dfc093235457f25725b8100ee5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bb1f961b91b1386587ad48dfbc4a1afb5e"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x9}, 0x8) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)="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", &(0x7f0000000040)="9b3b37b72dc52799c7c860c729acc3c1c03da6c53782253f37c0f99ea9f60027fa8b52494a047ad1a09bd6c3a921d5f0d21b44050a9d41b688e7a59e4c9e2cf61e74289b8e8230f124d4f51fdd9a7764752d", 0x1000, r1}, 0x38) r6 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2d706973202d726c696d69fe607e136572665f6576656e742000"], 0x1a) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98000000100003040000000000f1000000000000", @ANYRES32=0x0, @ANYBLOB="05220000000000003400128009000100766c616e00000000240002800c0002000000000000000000100003800c000100030000000800000004000480440012800b000100697036677265000034000280060010004e2300000800040009000000060011004e20000008000d000500000006000f000600000008001400ff070000"], 0x98}, 0x1, 0xba01}, 0x0) 0s ago: executing program 2 (id=3536): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x3}, 0x10, 0x0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/98, 0x62, 0x0, &(0x7f00000002c0)=""/187, 0xbb}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000340)) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x4b, @any, 0x1, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES16=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) kernel console output (not intermixed with test programs): .0.1662'. [ 227.388018][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 227.519691][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 227.910161][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 227.925950][T12111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.157736][T12114] bond6: entered promiscuous mode [ 228.498332][T12144] netlink: 'syz.2.1677': attribute type 11 has an invalid length. [ 228.656676][T12151] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 228.731128][T12157] netlink: 'syz.2.1683': attribute type 25 has an invalid length. [ 228.760507][T12157] netlink: 'syz.2.1683': attribute type 28 has an invalid length. [ 228.824759][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 230.816940][T12271] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 230.960055][T12282] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 230.985349][T12271] bond4: entered promiscuous mode [ 230.991061][T12271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.088588][T12285] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 231.135978][T12293] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 231.325033][T12301] pim6reg1: entered promiscuous mode [ 231.331173][T12301] pim6reg1: entered allmulticast mode [ 231.437994][T12311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.474892][T12311] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 231.516549][T12311] delete_channel: no stack [ 232.474279][T12372] __nla_validate_parse: 12 callbacks suppressed [ 232.474297][T12372] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1750'. [ 232.550638][T12375] syzkaller1: entered promiscuous mode [ 232.565909][T12375] syzkaller1: entered allmulticast mode [ 232.590378][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 232.604323][T12381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1755'. [ 232.614292][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 232.625335][T12381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1755'. [ 232.634335][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1753'. [ 232.916472][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1760'. [ 232.959390][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 232.969387][T12402] bridge_slave_0: left allmulticast mode [ 232.975631][T12402] bridge_slave_0: left promiscuous mode [ 232.982600][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.188959][T12413] netlink: 'syz.0.1762': attribute type 9 has an invalid length. [ 233.274761][T12410] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 233.522975][T12440] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1771'. [ 233.524479][T12439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.539604][T12439] IPv6: NLM_F_CREATE should be set when creating new route [ 233.675049][T12445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1774'. [ 234.059086][T12474] netlink: 'syz.4.1781': attribute type 1 has an invalid length. [ 234.100282][T12479] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 234.599720][T12509] netlink: 'syz.3.1794': attribute type 5 has an invalid length. [ 234.635358][T12509] geneve2: entered promiscuous mode [ 234.664456][T12509] geneve2: entered allmulticast mode [ 234.680002][ T49] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 234.701016][ T49] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 234.743568][ T49] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 234.755612][ T49] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 235.060076][T12536] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 235.100312][T12536] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 236.640076][T12638] netlink: 'syz.1.1830': attribute type 11 has an invalid length. [ 236.687873][T12641] netlink: 'syz.1.1830': attribute type 11 has an invalid length. [ 237.258076][T12671] IPVS: Error connecting to the multicast addr [ 238.199525][T12778] __nla_validate_parse: 20 callbacks suppressed [ 238.199545][T12778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1849'. [ 238.335834][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 238.385281][T12784] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1851'. [ 238.394981][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1851'. [ 238.935654][T12808] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.016575][T12811] bond9 (unregistering): Released all slaves [ 239.024495][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1860'. [ 239.037239][T12815] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 239.090255][T12817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1860'. [ 239.103707][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 239.115231][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 239.289907][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1866'. [ 239.300711][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1866'. [ 239.377108][T12830] bridge0: port 3(vlan2) entered blocking state [ 239.386399][T12830] bridge0: port 3(vlan2) entered disabled state [ 239.393367][T12830] vlan2: entered allmulticast mode [ 239.399222][T12830] bridge0: entered allmulticast mode [ 239.440945][T12830] vlan2: left allmulticast mode [ 239.464668][T12830] bridge0: left allmulticast mode [ 239.823861][T12855] netlink: 'syz.2.1874': attribute type 1 has an invalid length. [ 240.025697][T12867] ip6gre1: entered allmulticast mode [ 240.485448][T12858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.514953][T12858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.817341][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.851995][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 240.862803][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.873905][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 240.958108][T12904] xt_limit: Overflow, try lower: 604999516/4200216962 [ 240.977881][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.009731][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 241.038397][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.055476][ T5848] Bluetooth: hci0: command tx timeout [ 241.068485][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 241.457399][T12941] xt_limit: Overflow, try lower: 271964/0 [ 242.441245][T12994] Unknown options in mask b7f2 [ 242.458158][T12995] Unknown options in mask b7f2 [ 242.543231][T12997] bond6: (slave gretap0): Device is not bonding slave [ 242.575397][T12997] bond6: option active_slave: invalid value (gretap0) [ 242.595022][T12997] bond6 (unregistering): Released all slaves [ 242.624876][T13002] netlink: 'syz.0.1915': attribute type 10 has an invalid length. [ 243.113507][T13033] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 243.198484][T13041] netlink: 'syz.2.1927': attribute type 7 has an invalid length. [ 243.201390][T13038] IPv6: sit1: Disabled Multicast RS [ 243.206740][T13041] netlink: 'syz.2.1927': attribute type 3 has an invalid length. [ 243.213239][T13038] sit1: entered allmulticast mode [ 243.378914][T13050] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 243.408992][T13050] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 243.414216][T13052] __nla_validate_parse: 42 callbacks suppressed [ 243.414237][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'. [ 243.431318][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 243.484466][T13052] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.515002][T13057] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.526683][T13057] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 243.550617][T13057] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 243.698939][T13057] bond8: entered promiscuous mode [ 244.109858][ T24] IPVS: starting estimator thread 0... [ 244.146734][T13099] netlink: 'syz.2.1941': attribute type 1 has an invalid length. [ 244.158275][T13099] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1941'. [ 244.173731][T13094] veth0_to_team: entered promiscuous mode [ 244.179563][T13094] veth0_to_team: entered allmulticast mode [ 244.211845][T13095] IPVS: using max 26 ests per chain, 62400 per kthread [ 244.313626][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 244.432467][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 244.461310][T13120] netlink: 'syz.0.1947': attribute type 64 has an invalid length. [ 244.480100][T13120] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1947'. [ 244.973843][T13154] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1957'. [ 245.001949][T13154] netlink: zone id is out of range [ 245.035137][T13154] netlink: get zone limit has 8 unknown bytes [ 245.101527][T13161] netlink: 'syz.3.1962': attribute type 10 has an invalid length. [ 245.121421][T13161] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 245.201374][T13167] sctp: [Deprecated]: syz.0.1964 (pid 13167) Use of int in maxseg socket option. [ 245.201374][T13167] Use struct sctp_assoc_value instead [ 245.235252][T13169] sctp: [Deprecated]: syz.0.1964 (pid 13169) Use of int in maxseg socket option. [ 245.235252][T13169] Use struct sctp_assoc_value instead [ 245.267004][T13172] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1963'. [ 245.350376][T13176] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 245.421324][T13176] 8021q: adding VLAN 0 to HW filter on device bond9 [ 245.557421][T13187] team0: Device vti0 is of different type [ 245.766673][T13199] pim6reg1: entered promiscuous mode [ 245.775953][T13199] pim6reg1: entered allmulticast mode [ 245.937579][T13207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.271070][T13227] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1982'. [ 246.643208][T13241] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1987'. [ 246.839680][T13255] bond10: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 246.854968][T13255] bond10 (unregistering): Released all slaves [ 246.979696][T13263] ip6gre1: entered allmulticast mode [ 247.049371][T13255] bond10: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 247.076528][T13255] bond10 (unregistering): Released all slaves [ 248.140616][T13255] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 248.194747][T13280] veth7: entered allmulticast mode [ 248.338722][T13300] nbd: device at index 3 is going down [ 248.408728][T13308] delete_channel: no stack [ 248.454227][T13308] __nla_validate_parse: 2 callbacks suppressed [ 248.454247][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 248.493221][T13309] netlink: 'syz.0.2007': attribute type 3 has an invalid length. [ 248.519126][T10245] udevd[10245]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 248.521006][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2006'. [ 248.553344][T11203] udevd[11203]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 249.356311][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2021'. [ 249.639510][T13369] bond9: Unable to set up delay as MII monitoring is disabled [ 249.648337][T13376] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2026'. [ 249.665520][T13369] bond9 (unregistering): Released all slaves [ 249.859763][T13390] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2031'. [ 250.044722][T13398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2033'. [ 250.106659][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'. [ 250.120452][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2038'. [ 250.222860][T13417] netlink: 'syz.4.2040': attribute type 10 has an invalid length. [ 250.349668][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'. [ 250.384114][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2041'. [ 250.842504][T13451] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 250.902105][T13451] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 251.106679][T13464] bond8: option resend_igmp: invalid value (32767) [ 251.115261][T13464] bond8: option resend_igmp: allowed values 0 - 255 [ 251.125250][T13464] bond8 (unregistering): Released all slaves [ 251.427006][T13494] lo: entered promiscuous mode [ 251.432469][T13494] tunl0: entered promiscuous mode [ 251.437754][T13494] gre0: entered promiscuous mode [ 251.448119][T13494] gretap0: entered promiscuous mode [ 251.454912][T13494] erspan0: entered promiscuous mode [ 251.461405][T13494] ip_vti0: entered promiscuous mode [ 251.468133][T13494] ip6_vti0: entered promiscuous mode [ 251.482805][T13494] sit0: entered promiscuous mode [ 251.492362][T13494] ip6tnl0: entered promiscuous mode [ 251.506962][T13494] ip6gre0: entered promiscuous mode [ 251.545900][T13494] syz_tun: entered promiscuous mode [ 251.576467][T13494] ip6gretap0: entered promiscuous mode [ 251.582876][T13494] vcan0: entered promiscuous mode [ 251.593440][T13494] bond0: entered promiscuous mode [ 251.599152][T13494] bond_slave_0: entered promiscuous mode [ 251.605422][T13494] bond_slave_1: entered promiscuous mode [ 251.613641][T13494] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 251.621338][T13494] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 251.633141][T13494] bridge_slave_1: entered promiscuous mode [ 251.639420][T13494] team0: entered promiscuous mode [ 251.648348][T13494] team_slave_0: entered promiscuous mode [ 251.659853][T13494] team_slave_1: entered promiscuous mode [ 251.666298][T13494] dummy0: entered promiscuous mode [ 251.673975][T13494] nlmon0: entered promiscuous mode [ 251.689627][T13494] batadv0: entered promiscuous mode [ 251.710138][T13494] veth1: entered promiscuous mode [ 251.724272][T13494] wg1: left allmulticast mode [ 251.729094][T13494] wg2: entered promiscuous mode [ 251.734889][T13494] veth0_to_bridge: entered promiscuous mode [ 251.742666][T13494] : entered promiscuous mode [ 251.748067][T13494] veth1_to_bridge: entered promiscuous mode [ 251.756296][T13494] veth0_to_bond: entered promiscuous mode [ 251.762975][T13494] veth1_to_bond: entered promiscuous mode [ 251.769229][T13494] veth0_to_team: entered promiscuous mode [ 251.776094][T13494] veth1_to_team: entered promiscuous mode [ 251.782502][T13494] veth0_to_batadv: entered promiscuous mode [ 251.788901][T13494] batadv_slave_0: entered promiscuous mode [ 251.795072][T13494] veth1_to_batadv: entered promiscuous mode [ 251.801898][T13494] batadv_slave_1: entered promiscuous mode [ 251.808007][T13494] xfrm0: entered promiscuous mode [ 251.813537][T13494] veth0_to_hsr: entered promiscuous mode [ 251.819583][T13494] veth1_to_hsr: entered promiscuous mode [ 251.826061][T13494] hsr0: entered promiscuous mode [ 251.831305][T13494] veth1_virt_wifi: entered promiscuous mode [ 251.838238][T13494] veth0_virt_wifi: entered promiscuous mode [ 251.844708][T13494] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 251.853035][T13494] vlan0: entered promiscuous mode [ 251.858860][T13494] vlan1: entered promiscuous mode [ 251.865420][T13494] macvlan0: entered promiscuous mode [ 251.871010][T13494] macvlan1: entered promiscuous mode [ 251.879069][T13494] ipvlan0: entered promiscuous mode [ 251.886572][T13494] ipvlan1: entered promiscuous mode [ 251.893842][T13494] macvtap0: entered promiscuous mode [ 251.899954][T13494] macsec0: entered promiscuous mode [ 251.905417][T13494] geneve0: entered promiscuous mode [ 251.910860][T13494] geneve1: entered promiscuous mode [ 251.916888][T13494] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 251.924673][T13494] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 251.933434][T13494] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 251.941000][T13494] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 251.948226][T13494] vlan2: entered promiscuous mode [ 251.953867][T13494] vlan2: left allmulticast mode [ 251.958735][T13494] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 251.965877][T13494] ip6tnl1: entered promiscuous mode [ 251.972057][T13494] bond1: entered promiscuous mode [ 251.977108][T13494] macvlan2: entered promiscuous mode [ 251.983868][T13494] gtp0: entered promiscuous mode [ 251.989327][T13494] veth2: entered promiscuous mode [ 251.994687][T13494] veth3: entered promiscuous mode [ 251.999902][T13494] veth3: left allmulticast mode [ 252.005211][T13494] vxlan0: entered promiscuous mode [ 252.010815][T13494] bridge1: entered promiscuous mode [ 252.017439][T13494] bond2: entered promiscuous mode [ 252.022758][T13494] gretap1: entered promiscuous mode [ 252.028323][T13494] bridge2: entered promiscuous mode [ 252.034508][T13494] syztnl2: entered promiscuous mode [ 252.039987][T13494] syztnl1: entered promiscuous mode [ 252.046027][T13494] veth4: entered promiscuous mode [ 252.051219][T13494] veth5: entered promiscuous mode [ 252.056619][T13494] ip6tnl2: entered promiscuous mode [ 252.062328][T13494] bond3: entered promiscuous mode [ 252.067642][T13494] veth6: entered promiscuous mode [ 252.073267][T13494] wireguard0: entered promiscuous mode [ 252.079338][T13494] pimreg: entered promiscuous mode [ 252.086537][T13494] bridge3: entered promiscuous mode [ 252.092069][T13494] bridge4: entered promiscuous mode [ 252.098774][T13494] bond4: entered promiscuous mode [ 252.104213][T13494] bridge5: entered promiscuous mode [ 252.109549][T13494] bridge6: entered promiscuous mode [ 252.116202][T13494] bridge7: left allmulticast mode [ 252.122084][T13494] ipvlan3: entered promiscuous mode [ 252.127964][T13494] ipvlan4: entered promiscuous mode [ 252.133643][T13494] ipvlan5: entered promiscuous mode [ 252.139155][T13494] ipvlan6: entered promiscuous mode [ 252.145958][T13494] ipvlan7: entered promiscuous mode [ 252.151730][T13494] ipvlan8: entered promiscuous mode [ 252.158566][T13494] ipvlan9: entered promiscuous mode [ 252.164267][T13494] ipvlan10: entered promiscuous mode [ 252.170145][T13494] ipvlan11: entered promiscuous mode [ 252.176781][T13494] ipvlan12: entered promiscuous mode [ 252.182311][T13494] ipvlan13: entered promiscuous mode [ 252.190311][T13494] ipvlan14: entered promiscuous mode [ 252.196871][T13494] ipvlan15: entered promiscuous mode [ 252.203597][T13494] ipvlan16: entered promiscuous mode [ 252.209334][T13494] ipvlan17: entered promiscuous mode [ 252.216208][T13494] ipvlan18: entered promiscuous mode [ 252.222087][T13494] ipvlan19: entered promiscuous mode [ 252.227528][T13494] ipvlan20: entered promiscuous mode [ 252.233642][T13494] ipvlan21: entered promiscuous mode [ 252.239116][T13494] ipvlan22: entered promiscuous mode [ 252.245198][T13494] ipvlan23: entered promiscuous mode [ 252.250667][T13494] ipvlan24: entered promiscuous mode [ 252.256615][T13494] ipvlan25: entered promiscuous mode [ 252.262878][T13494] ipvlan26: entered promiscuous mode [ 252.270350][T13494] ipvlan27: entered promiscuous mode [ 252.277094][T13494] ipvlan28: entered promiscuous mode [ 252.282928][T13494] ipvlan29: entered promiscuous mode [ 252.288388][T13494] ipvlan30: entered promiscuous mode [ 252.294219][T13494] ipvlan31: entered promiscuous mode [ 252.299717][T13494] ipvlan32: entered promiscuous mode [ 252.305422][T13494] ipvlan33: entered promiscuous mode [ 252.310911][T13494] ipvlan34: entered promiscuous mode [ 252.317554][T13494] ipvlan35: entered promiscuous mode [ 252.324280][T13494] ipvlan36: entered promiscuous mode [ 252.329854][T13494] ipvlan37: entered promiscuous mode [ 252.335963][T13494] ipvlan38: entered promiscuous mode [ 252.341588][T13494] ipvlan39: entered promiscuous mode [ 252.348321][T13494] ipvlan40: entered promiscuous mode [ 252.354126][T13494] ipvlan41: entered promiscuous mode [ 252.359818][T13494] ipvlan42: entered promiscuous mode [ 252.365467][T13494] ipvlan43: entered promiscuous mode [ 252.370928][T13494] ipvlan44: entered promiscuous mode [ 252.376980][T13494] ipvlan45: entered promiscuous mode [ 252.382641][T13494] bridge8: entered promiscuous mode [ 252.387943][T13494] veth8: entered promiscuous mode [ 252.393109][T13494] veth9: entered promiscuous mode [ 252.398121][T13494] veth9: left allmulticast mode [ 252.403251][T13494] bridge0: entered promiscuous mode [ 252.408545][T13494] gre1: entered promiscuous mode [ 252.413767][T13494] bridge9: entered promiscuous mode [ 252.419168][T13494] bond5: entered promiscuous mode [ 252.424382][T13494] bond6: entered promiscuous mode [ 252.429502][T13494] bond7: entered promiscuous mode [ 252.434687][T13494] geneve2: left allmulticast mode [ 252.439896][T13494] batadv1: entered promiscuous mode [ 252.674491][T13525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.774031][T13534] lo speed is unknown, defaulting to 1000 [ 252.785324][T13534] lo speed is unknown, defaulting to 1000 [ 252.794075][T13534] lo speed is unknown, defaulting to 1000 [ 252.816060][T13534] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 252.885023][T13534] lo speed is unknown, defaulting to 1000 [ 252.910384][T13534] lo speed is unknown, defaulting to 1000 [ 252.927148][T13534] lo speed is unknown, defaulting to 1000 [ 252.962502][T13534] lo speed is unknown, defaulting to 1000 [ 252.989079][T13534] lo speed is unknown, defaulting to 1000 [ 253.032892][T13548] vcan0 (unregistering): left allmulticast mode [ 253.302380][T13569] netlink: 'syz.0.2081': attribute type 4 has an invalid length. [ 253.489495][T13585] __nla_validate_parse: 43 callbacks suppressed [ 253.489513][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.552218][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.584507][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.624141][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.676598][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.697327][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.731970][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.755710][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.780757][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.810853][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.850711][T13597] netlink: 'syz.3.2089': attribute type 7 has an invalid length. [ 253.873149][T13597] netlink: 'syz.3.2089': attribute type 8 has an invalid length. [ 253.884222][T13597] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 254.259450][T13616] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 254.292700][T13616] bond10 (unregistering): Released all slaves [ 254.368647][T13625] netlink: 'syz.0.2099': attribute type 10 has an invalid length. [ 254.621660][T13647] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 254.777786][T13655] bridge_slave_0: left allmulticast mode [ 254.800136][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.867703][T13655] bridge_slave_1: left allmulticast mode [ 254.908209][T13655] bridge_slave_1: left promiscuous mode [ 254.933571][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.090155][T13655] bond0: (slave bond_slave_0): Releasing backup interface [ 255.107750][T13655] team0: Port device team_slave_0 removed [ 255.124180][T13655] team0: Port device team_slave_1 removed [ 255.134691][T13655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.142844][T13655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.153993][T13655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.162106][T13655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.172638][T13655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.293607][T13673] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 255.558307][T13687] block nbd0: Unsupported socket: should be TCP or UNIX. [ 255.857475][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.880682][T13710] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 256.557801][T13738] syzkaller0: entered promiscuous mode [ 256.581683][T13738] syzkaller0: entered allmulticast mode [ 256.585777][T13757] netlink: 'syz.3.2141': attribute type 1 has an invalid length. [ 256.622646][T13757] netlink: 'syz.3.2141': attribute type 2 has an invalid length. [ 256.684539][T13741] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 256.725968][T13747] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 256.828238][T13750] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 257.225094][T13791] sctp: [Deprecated]: syz.3.2147 (pid 13791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.225094][T13791] Use struct sctp_sack_info instead [ 257.242181][T13790] sctp: [Deprecated]: syz.3.2147 (pid 13790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.242181][T13790] Use struct sctp_sack_info instead [ 257.379000][ T5848] Bluetooth: hci0: command tx timeout [ 259.004778][T13800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.027500][T13800] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.038535][T13800] batman_adv: batadv0: Interface activated: team0 [ 259.067301][T13800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.090595][T13814] __nla_validate_parse: 63 callbacks suppressed [ 259.090617][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'. [ 259.113829][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 259.122027][T13800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.136863][T13800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.152607][T13800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.166293][T13800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.190387][T13821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2152'. [ 259.206915][T13800] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 259.236383][T13810] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 259.406294][T13804] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.416664][T13804] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.428229][T13823] netlink: 'syz.1.2154': attribute type 2 has an invalid length. [ 259.437590][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2154'. [ 259.529436][T13826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'. [ 259.568714][T13804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.767696][T13831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2156'. [ 259.788842][T13831] openvswitch: netlink: ufid size 200 bytes exceeds the range (1, 16) [ 259.811725][T13831] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 259.845758][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.876870][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.926391][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.979322][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.028793][T13839] tipc: Enabling of bearer rejected, already enabled [ 260.054031][T13839] syzkaller0: entered promiscuous mode [ 260.061294][T13845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2161'. [ 260.082284][T13839] syzkaller0: entered allmulticast mode [ 260.089988][T13846] netlink: 'syz.1.2160': attribute type 10 has an invalid length. [ 260.092895][T13839] tipc: Resetting bearer [ 260.173618][T13839] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 260.339136][T13856] tipc: Resetting bearer [ 260.403737][T13862] netlink: 'syz.3.2161': attribute type 10 has an invalid length. [ 260.501893][T13862] geneve1: left promiscuous mode [ 260.526199][T13862] geneve1: entered promiscuous mode [ 260.542451][T13862] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 260.554337][T13493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.579569][T13869] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2165'. [ 260.594478][T13869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.619695][ T3013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.647783][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2164'. [ 260.756210][ T3013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.790993][ T3013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.958404][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 261.189071][T13908] netlink: 'syz.0.2175': attribute type 15 has an invalid length. [ 261.572257][T13930] pimreg3: entered allmulticast mode [ 261.710674][T13936] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 261.943535][T13945] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 261.952392][T13945] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 261.964448][T13946] block nbd0: Unsupported socket: should be TCP or UNIX. [ 262.125776][T13956] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 262.203342][T13961] geneve2: entered promiscuous mode [ 262.219874][T13961] geneve2: entered allmulticast mode [ 262.242424][ T3013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.271826][ T5848] Bluetooth: hci2: command tx timeout [ 262.278539][ T3013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.320998][ T3013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.330853][ T3013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.475255][T13972] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 262.641317][T13987] netlink: 'syz.3.2199': attribute type 39 has an invalid length. [ 262.934438][T13996] bond9: Invalid ad_actor_system MAC address. [ 262.942573][T13996] bond9: option ad_actor_system: invalid value (1) [ 262.955266][T13996] bond9 (unregistering): Released all slaves [ 263.205253][T14016] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 263.329912][T14016] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.493650][T14024] bond9: (slave veth7): Enslaving as an active interface with a down link [ 263.513266][T14026] bond7: (slave veth0_to_bond): Releasing active interface [ 263.529778][T14026] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 263.544928][T14033] netlink: 'syz.4.2212': attribute type 4 has an invalid length. [ 263.565288][T14034] veth0: entered promiscuous mode [ 263.575653][T14032] delete_channel: no stack [ 263.592267][T14034] veth0: left promiscuous mode [ 263.624368][T14038] netlink: 'syz.2.2214': attribute type 4 has an invalid length. [ 263.792316][T14044] netlink: 'syz.2.2217': attribute type 10 has an invalid length. [ 263.800616][T14044] veth0_vlan: entered allmulticast mode [ 263.809579][T14044] veth0_vlan: left promiscuous mode [ 263.819811][T14044] veth0_vlan: entered promiscuous mode [ 263.830473][T14044] team0: Device veth0_vlan failed to register rx_handler [ 263.887324][T14050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.890820][T14048] pim6reg1: entered promiscuous mode [ 263.910276][T14048] pim6reg1: entered allmulticast mode [ 263.969515][T14054] netlink: 'syz.4.2222': attribute type 5 has an invalid length. [ 264.064371][T14056] tipc: Enabled bearer , priority 0 [ 264.093331][T14056] syzkaller0: entered promiscuous mode [ 264.100078][T14056] syzkaller0: entered allmulticast mode [ 264.166460][T14063] __nla_validate_parse: 16 callbacks suppressed [ 264.166482][T14063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2225'. [ 264.308209][T14073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 264.545700][T14083] syzkaller0: entered promiscuous mode [ 264.557018][T14083] syzkaller0: entered allmulticast mode [ 264.639805][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 264.647304][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 264.659435][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2236'. [ 264.877317][T14111] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2240'. [ 264.926700][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2239'. [ 264.927722][T14107] bond7: (slave gretap6): making interface the new active one [ 264.946050][T14107] bond7: (slave gretap6): Enslaving as an active interface with an up link [ 264.955404][T14055] tipc: Resetting bearer [ 264.985238][T14055] tipc: Disabling bearer [ 265.008755][T14115] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.299491][T14135] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 265.502805][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'. [ 265.538700][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2248'. [ 265.596125][T14145] pim6reg1: entered promiscuous mode [ 265.631931][T14145] pim6reg1: entered allmulticast mode [ 266.793019][T14206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2265'. [ 267.077597][T14229] validate_nla: 2 callbacks suppressed [ 267.077618][T14229] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 267.106476][T14227] tipc: Disabling bearer [ 267.368199][T14241] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 267.413925][T14241] bond6: entered promiscuous mode [ 267.444227][T14241] bond6: entered allmulticast mode [ 267.460903][T14241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.518437][T14238] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 267.693609][T14268] netlink: 'syz.2.2280': attribute type 39 has an invalid length. [ 267.760492][T14273] netlink: 'syz.2.2280': attribute type 39 has an invalid length. [ 268.018041][T14290] batadv_slave_0: entered promiscuous mode [ 268.396522][T14306] netlink: 'syz.1.2290': attribute type 11 has an invalid length. [ 268.421893][T14293] infiniband syz0: set down [ 268.435805][T14293] infiniband syz0: added ipvlan1 [ 268.598677][T14293] RDS/IB: syz0: added [ 268.825327][T14319] bond7: entered allmulticast mode [ 268.863278][T14319] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.896157][T14319] bridge0: port 3(bond7) entered blocking state [ 268.928023][T14319] bridge0: port 3(bond7) entered disabled state [ 268.962001][T14319] bond7: entered promiscuous mode [ 269.129492][T14334] netlink: 'syz.1.2299': attribute type 20 has an invalid length. [ 269.137806][T14337] netlink: 'syz.3.2301': attribute type 10 has an invalid length. [ 269.192823][T14339] veth0_to_bridge: entered promiscuous mode [ 269.200412][T14336] veth0_to_bridge: left promiscuous mode [ 269.313394][T14334] __nla_validate_parse: 12 callbacks suppressed [ 269.313415][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'. [ 269.329800][T14334] netlink: 'syz.1.2299': attribute type 20 has an invalid length. [ 269.410457][T14342] syzkaller1: entered allmulticast mode [ 269.680584][T14351] tipc: Enabling of bearer rejected, failed to enable media [ 269.893052][T14368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.273690][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 270.326191][T14387] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2310'. [ 270.368406][T14387] xfrm0: left promiscuous mode [ 270.544079][T14398] netlink: 'syz.2.2315': attribute type 21 has an invalid length. [ 270.558927][T14398] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2315'. [ 270.578366][T14398] gretap0: entered promiscuous mode [ 270.590953][T14398] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2315'. [ 270.612034][T14404] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2317'. [ 270.642349][T14398] 0{X: renamed from gretap0 [ 270.658936][T14398] 0{X: left promiscuous mode [ 270.686831][T14398] 0{X: entered allmulticast mode [ 270.703551][T14398] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 271.030775][T14426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2321'. [ 271.073200][T14414] nbd: must specify an index to disconnect [ 271.484560][T14450] netlink: 'syz.3.2328': attribute type 58 has an invalid length. [ 271.492792][T14450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2328'. [ 271.532241][T14446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2327'. [ 271.748046][T14462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2331'. [ 272.088197][T14479] 8021q: VLANs not supported on ip6_vti0 [ 272.150641][T14481] 8021q: VLANs not supported on ip6_vti0 [ 272.446254][T14491] syzkaller0: entered allmulticast mode [ 272.806637][T14517] netlink: 'syz.2.2341': attribute type 39 has an invalid length. [ 272.831223][T14519] Bluetooth: MGMT ver 1.23 [ 273.160102][T14529] netlink: 'syz.0.2344': attribute type 7 has an invalid length. [ 273.177107][T14529] netlink: 'syz.0.2344': attribute type 8 has an invalid length. [ 274.601341][T14550] netlink: 'syz.0.2350': attribute type 23 has an invalid length. [ 274.685184][T14526] __nla_validate_parse: 9 callbacks suppressed [ 274.685211][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2343'. [ 275.074699][T14563] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2356'. [ 275.416488][T14589] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2364'. [ 275.527190][T14607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2364'. [ 275.554842][T14605] ksmbd: Unknown IPC event: 8, ignore. [ 275.762490][T14612] netlink: 'syz.0.2367': attribute type 62 has an invalid length. [ 275.806504][T14615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2368'. [ 275.964338][T14619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2369'. [ 276.350783][T14650] netlink: 'syz.2.2375': attribute type 32 has an invalid length. [ 276.410462][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 276.438765][T14650] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 276.613569][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'. [ 276.775299][T14675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2388'. [ 276.827801][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2390'. [ 276.922417][T14688] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 277.001233][T14688] 8021q: adding VLAN 0 to HW filter on device bond9 [ 277.010620][T14688] bond8: (slave bond9): making interface the new active one [ 277.019154][T14688] bond8: (slave bond9): Enslaving as an active interface with an up link [ 277.035199][T14688] 8021q: adding VLAN 0 to HW filter on device bond8 [ 277.117074][T14698] netlink: 'syz.0.2395': attribute type 29 has an invalid length. [ 277.125881][T14699] netlink: 'syz.0.2395': attribute type 29 has an invalid length. [ 277.333332][T14711] bond10: Invalid ad_actor_system MAC address. [ 277.339612][T14711] bond10: option ad_actor_system: invalid value (1) [ 277.348431][T14711] bond10 (unregistering): Released all slaves [ 277.530288][T14724] block nbd0: not configured, cannot reconfigure [ 278.159810][T14761] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002 [ 278.699910][T14779] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 278.709167][T14779] bond8: option packets_per_slave: allowed values 0 - 65535 [ 278.748633][T14779] bond8 (unregistering): Released all slaves [ 278.780745][T14787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.789208][T14787] batadv_slave_1: entered allmulticast mode [ 278.809242][T14789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.323377][T14825] veth0_to_bond: left promiscuous mode [ 279.341531][T14825] veth0_to_bond: entered allmulticast mode [ 279.505343][T14835] tipc: Enabled bearer , priority 10 [ 279.537161][T14835] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 279.547752][T14835] tipc: Enabled bearer , priority 10 [ 279.554076][T14837] sctp: [Deprecated]: syz.1.2440 (pid 14837) Use of int in max_burst socket option deprecated. [ 279.554076][T14837] Use struct sctp_assoc_value instead [ 279.695835][T14846] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 279.708057][T14845] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 279.710066][T14846] netlink: 'syz.3.2442': attribute type 2 has an invalid length. [ 279.724875][T14845] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 279.724923][T14845] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 279.736046][T14844] __nla_validate_parse: 11 callbacks suppressed [ 279.736065][T14844] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2441'. [ 279.792078][T14849] netlink: 'syz.1.2443': attribute type 23 has an invalid length. [ 279.916214][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2444'. [ 279.956187][T14852] netlink: 'syz.3.2444': attribute type 30 has an invalid length. [ 279.988555][T14852] bond8: option arp_missed_max: invalid value (0) [ 279.995200][T14852] bond8: option arp_missed_max: allowed values 1 - 255 [ 280.004923][T14852] bond8 (unregistering): Released all slaves [ 280.360008][T14856] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2445'. [ 280.622438][ T24] tipc: Node number set to 3750899592 [ 280.735185][T14880] syzkaller0: entered promiscuous mode [ 280.742260][T14880] syzkaller0: entered allmulticast mode [ 280.954998][T14894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2456'. [ 281.027447][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2456'. [ 281.092269][T14902] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2456'. [ 281.214340][T14907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2456'. [ 282.640861][T14920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2465'. [ 282.705305][T14927] netlink: 'syz.2.2468': attribute type 1 has an invalid length. [ 282.727644][T14927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.764042][T14927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.909590][T14944] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2473'. [ 282.919924][T14941] netlink: 'syz.0.2472': attribute type 1 has an invalid length. [ 282.983560][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 283.000200][T14941] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 283.013152][T14941] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 283.043127][T14948] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.070099][T14948] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.077651][T14948] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 283.090924][T14948] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 283.358715][T14966] macvtap3: entered promiscuous mode [ 283.364148][T14966] macvtap3: entered allmulticast mode [ 283.383507][T14964] tipc: Enabled bearer , priority 0 [ 283.391179][T14964] syzkaller0: entered promiscuous mode [ 283.397834][T14964] syzkaller0: entered allmulticast mode [ 283.418591][T14964] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.474274][T14964] tipc: Resetting bearer [ 283.496604][T14963] tipc: Resetting bearer [ 283.515397][T14963] tipc: Disabling bearer [ 283.616537][T14980] Unsupported ieee802154 address type: 0 [ 284.500559][T15032] sock: sock_set_timeout: `syz.0.2502' (pid 15032) tries to set negative timeout [ 284.673244][T15039] netlink: 'syz.2.2505': attribute type 1 has an invalid length. [ 284.714219][T15039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 284.769871][T15043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 284.777842][T15043] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 284.790486][T15043] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 285.989272][T15101] __nla_validate_parse: 8 callbacks suppressed [ 285.989291][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2524'. [ 286.187406][T15113] macsec0: entered promiscuous mode [ 286.194629][T15113] macsec0: entered allmulticast mode [ 286.208919][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 286.249356][T15114] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 286.269208][T15114] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2527'. [ 286.375304][T15113] tipc: Enabling of bearer rejected, already enabled [ 286.669333][T15140] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2535'. [ 287.259754][T15192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2546'. [ 287.287388][T15195] tipc: Resetting bearer [ 287.295952][T15195] netlink: 'syz.2.2547': attribute type 10 has an invalid length. [ 287.304327][T15195] bridge0: port 4(team0) entered blocking state [ 287.319740][T15195] bridge0: port 4(team0) entered disabled state [ 287.327001][T15195] team0: entered allmulticast mode [ 287.332484][T15195] team_slave_0: entered allmulticast mode [ 287.338908][T15195] team_slave_1: entered allmulticast mode [ 287.349652][T15195] team0: entered promiscuous mode [ 287.355433][T15195] team_slave_0: entered promiscuous mode [ 287.361745][T15195] team_slave_1: entered promiscuous mode [ 287.377631][T15193] tipc: Resetting bearer [ 287.390489][T15197] tipc: Enabled bearer , priority 0 [ 287.409510][T15197] syzkaller0: entered promiscuous mode [ 287.421333][T15197] syzkaller0: entered allmulticast mode [ 287.455922][T15197] tipc: Resetting bearer [ 287.479781][T15196] tipc: Resetting bearer [ 287.536789][T15196] tipc: Disabling bearer [ 287.705978][T14358] tipc: Resetting bearer [ 287.714832][T15220] netlink: 'syz.2.2554': attribute type 21 has an invalid length. [ 287.723270][T15220] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.731236][T15220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.739486][T15220] IPv6: NLM_F_CREATE should be set when creating new route [ 287.746952][T15226] netlink: 'syz.3.2556': attribute type 62 has an invalid length. [ 287.749488][T15220] IPv6: NLM_F_CREATE should be set when creating new route [ 287.764691][T15220] IPv6: NLM_F_CREATE should be set when creating new route [ 287.877511][T15228] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 287.912503][T15228] bond9 (unregistering): Released all slaves [ 288.101091][T15232] netlink: 'syz.0.2558': attribute type 1 has an invalid length. [ 288.110347][T15232] netlink: 'syz.0.2558': attribute type 1 has an invalid length. [ 288.275987][T15245] netlink: 'syz.3.2562': attribute type 1 has an invalid length. [ 288.552718][T15265] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 288.849878][T15287] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2573'. [ 289.069585][T15294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.083298][T15295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.115657][T15300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2577'. [ 289.170767][T15302] netlink: 'syz.1.2578': attribute type 10 has an invalid length. [ 289.189491][T15302] openvswitch: netlink: Flow key attr not present in new flow. [ 289.273565][T15309] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 289.479502][T15322] dvmrp0: entered allmulticast mode [ 289.529936][T15327] bond11: entered promiscuous mode [ 289.535535][T15327] bond11: entered allmulticast mode [ 289.541203][T15327] 8021q: adding VLAN 0 to HW filter on device bond11 [ 289.733366][T15340] tipc: Enabling of bearer rejected, already enabled [ 289.776675][T15347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2590'. [ 289.786839][T15347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2590'. [ 289.814691][T15340] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2589'. [ 290.077765][T15357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.163510][T15357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.206780][T15357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.299334][T15357] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 290.311076][T15357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.436365][ T59] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.465627][T14358] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.504416][T14358] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.520322][T14358] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.543277][T15378] netlink: 'syz.1.2597': attribute type 21 has an invalid length. [ 290.669625][T15384] netlink: 'syz.0.2600': attribute type 10 has an invalid length. [ 290.690247][T15384] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 290.699944][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.708847][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.729011][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.747834][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.061027][T15407] team0: Device wireguard0 is of different type [ 291.368427][T15419] sock: sock_timestamping_bind_phc: sock not bind to device [ 291.410886][T15422] __nla_validate_parse: 4 callbacks suppressed [ 291.410905][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 291.683474][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.687403][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 291.704869][T15430] hsr_slave_0: left promiscuous mode [ 291.704917][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.717928][T15430] hsr_slave_1: left promiscuous mode [ 291.720024][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.737695][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.747297][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.770451][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.783051][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.793802][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.807199][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.835355][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.880668][T15434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2615'. [ 291.910794][T15428] lo speed is unknown, defaulting to 1000 [ 291.943702][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2616'. [ 292.100233][T15444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2617'. [ 292.195730][T15450] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2621'. [ 292.284894][T15455] tipc: Resetting bearer [ 292.349178][T15454] tipc: Resetting bearer [ 292.476763][T15464] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2624'. [ 292.559591][T15428] chnl_net:caif_netlink_parms(): no params data found [ 292.613619][ T5949] hid-generic 0005:0D45:0002.0002: item fetching failed at offset 0/1 [ 292.627879][ T5949] hid-generic 0005:0D45:0002.0002: probe with driver hid-generic failed with error -22 [ 292.707074][T15474] netlink: 'syz.0.2626': attribute type 13 has an invalid length. [ 292.716807][T15474] netlink: 'syz.0.2626': attribute type 58 has an invalid length. [ 292.725339][T15474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2626'. [ 292.764017][ T36] tipc: Resetting bearer [ 292.831643][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.840278][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.848688][T15428] bridge_slave_0: entered allmulticast mode [ 292.857473][T15428] bridge_slave_0: entered promiscuous mode [ 292.867868][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.875493][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.883251][T15428] bridge_slave_1: entered allmulticast mode [ 292.894594][T15428] bridge_slave_1: entered promiscuous mode [ 292.955892][T15428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.988542][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 292.989574][T15428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.115212][T15428] team0: Port device team_slave_0 added [ 293.160522][T15428] team0: Port device team_slave_1 added [ 293.209253][T15428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.216707][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.250925][T15428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.260762][T15496] netlink: 'syz.0.2634': attribute type 2 has an invalid length. [ 293.266342][T15428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.277342][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.304020][T15428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.419100][T15428] hsr_slave_0: entered promiscuous mode [ 293.438053][T15428] hsr_slave_1: entered promiscuous mode [ 293.446265][T15428] debugfs: 'hsr0' already exists in 'hsr' [ 293.453330][T15428] Cannot create hsr debugfs directory [ 293.672975][T15512] xfrm0: mtu less than device minimum [ 293.843393][T15518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2642'. [ 293.879266][T15428] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.901342][T15428] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.926610][T15428] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.937027][ T5848] Bluetooth: hci5: command tx timeout [ 293.950823][T15428] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.976425][T15523] sctp: [Deprecated]: syz.2.2643 (pid 15523) Use of int in maxseg socket option. [ 293.976425][T15523] Use struct sctp_assoc_value instead [ 294.100615][T15428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.125723][T15428] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.156060][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.163309][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.180568][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.187798][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.338414][T15539] netlink: 'syz.0.2645': attribute type 1 has an invalid length. [ 294.628673][T15428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.736036][T15560] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 294.948803][T15568] gretap0: entered promiscuous mode [ 294.956716][T15568] 0{X: renamed from gretap0 [ 294.963758][T15568] 0{X: left promiscuous mode [ 294.968829][T15568] 0{X: entered allmulticast mode [ 294.976994][T15568] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 295.015394][T15428] veth0_vlan: entered promiscuous mode [ 295.027467][T15428] veth1_vlan: entered promiscuous mode [ 295.074803][T15428] veth0_macvtap: entered promiscuous mode [ 295.088790][T15428] veth1_macvtap: entered promiscuous mode [ 295.118984][T15428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.147925][T15428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.167807][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.198548][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.230087][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.240559][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.328612][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.350943][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.410195][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.419904][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.848846][T15609] tipc: Enabling of bearer rejected, already enabled [ 296.012304][ T5848] Bluetooth: hci5: command tx timeout [ 296.145665][T15628] tipc: Started in network mode [ 296.160873][T15628] tipc: Node identity , cluster identity 4711 [ 296.168906][T15628] tipc: Failed to set node id, please configure manually [ 296.187410][T15628] tipc: Enabling of bearer rejected, failed to enable media [ 296.485828][T15642] __nla_validate_parse: 9 callbacks suppressed [ 296.485846][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2674'. [ 296.512714][T15641] netlink: 'syz.5.2675': attribute type 28 has an invalid length. [ 296.520768][T15641] netlink: 'syz.5.2675': attribute type 3 has an invalid length. [ 296.529713][T15641] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2675'. [ 296.634768][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2676'. [ 296.647347][T15642] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2674'. [ 296.856584][T15655] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2679'. [ 296.868464][T15655] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2679'. [ 296.878916][T15655] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2679'. [ 296.889311][T15655] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2679'. [ 296.900333][T15655] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2679'. [ 296.913754][T15655] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2679'. [ 297.194786][T15669] xt_l2tp: unknown flags: 10 [ 297.285603][T15673] IPVS: length: 216 != 8 [ 297.684887][T15702] netlink: 'syz.0.2695': attribute type 4 has an invalid length. [ 297.693362][T15702] netlink: 'syz.0.2695': attribute type 4 has an invalid length. [ 297.709521][ T24] lo speed is unknown, defaulting to 1000 [ 297.718275][ T24] syz2: Port: 1 Link ACTIVE [ 298.094707][ T5848] Bluetooth: hci5: command tx timeout [ 298.276088][T15736] syzkaller0: entered promiscuous mode [ 298.282355][T15736] syzkaller0: entered allmulticast mode [ 299.016697][T15764] xt_bpf: check failed: parse error [ 299.035259][T15765] xt_bpf: check failed: parse error [ 299.164452][T15769] syzkaller1: entered promiscuous mode [ 299.170031][T15769] syzkaller1: entered allmulticast mode [ 299.301368][T15776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.344330][T15776] veth0: entered promiscuous mode [ 299.365026][T15776] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 300.079410][T15817] netlink: 'syz.2.2726': attribute type 11 has an invalid length. [ 300.181576][ T5848] Bluetooth: hci5: command tx timeout [ 300.204932][T15822] netlink: 'syz.2.2727': attribute type 11 has an invalid length. [ 300.214464][T15823] netlink: 'syz.2.2727': attribute type 11 has an invalid length. [ 301.300232][T15852] Bluetooth: hci1: too big key_count value 32778 [ 301.412460][T15856] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 301.646051][T15864] netlink: 'syz.5.2740': attribute type 32 has an invalid length. [ 301.654779][T15864] __nla_validate_parse: 46 callbacks suppressed [ 301.654800][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2740'. [ 301.700566][T15864] bond2: option coupled_control: invalid value (6) [ 301.713341][T15864] bond2 (unregistering): Released all slaves [ 301.740691][T15868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2741'. [ 301.915446][T15875] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 301.961224][T15875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2743'. [ 302.016728][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 302.080852][T15870] team0: Port device dummy0 removed [ 302.113335][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2747'. [ 302.117264][T15888] lo: entered allmulticast mode [ 302.206288][T15887] lo: left allmulticast mode [ 302.329364][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2750'. [ 302.500118][T15902] netlink: 'syz.5.2753': attribute type 10 has an invalid length. [ 302.533054][T15902] team0: Device veth1_macvtap failed to register rx_handler [ 302.657415][T15912] Unsupported ieee802154 address type: 0 [ 302.954270][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2762'. [ 303.053100][T15937] netlink: 'syz.5.2765': attribute type 1 has an invalid length. [ 303.065108][T15937] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 303.074177][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2765'. [ 303.180568][T15940] netlink: 'syz.5.2766': attribute type 11 has an invalid length. [ 303.189949][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2766'. [ 303.203343][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2766'. [ 303.276880][T15942] netlink: 'syz.5.2767': attribute type 10 has an invalid length. [ 303.285473][T15942] dummy0: entered promiscuous mode [ 303.293718][T15942] bridge0: port 3(dummy0) entered blocking state [ 303.300261][T15942] bridge0: port 3(dummy0) entered disabled state [ 303.307309][T15942] dummy0: entered allmulticast mode [ 303.314928][T15942] bridge0: port 3(dummy0) entered blocking state [ 303.321469][T15942] bridge0: port 3(dummy0) entered forwarding state [ 303.372449][T15947] netlink: 'syz.5.2768': attribute type 1 has an invalid length. [ 303.380395][T15947] netlink: 'syz.5.2768': attribute type 2 has an invalid length. [ 303.389735][T15947] netlink: 'syz.5.2768': attribute type 2 has an invalid length. [ 303.568561][T15957] netlink: 'syz.5.2771': attribute type 11 has an invalid length. [ 303.972571][T15985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.545200][T16001] syzkaller1: entered promiscuous mode [ 304.550847][T16001] syzkaller1: entered allmulticast mode [ 304.568731][T16001] netlink: 'syz.5.2786': attribute type 10 has an invalid length. [ 304.590348][T16001] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.598544][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.601030][T16001] bond0: (slave team0): Enslaving as an active interface with an up link [ 304.609288][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.629977][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.640487][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.650211][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.686980][T16002] lo speed is unknown, defaulting to 1000 [ 305.295903][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.306570][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.315781][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.326441][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.335433][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.409588][T16019] lo speed is unknown, defaulting to 1000 [ 305.508827][T16027] can: request_module (can-proto-5) failed. [ 305.527885][T16002] chnl_net:caif_netlink_parms(): no params data found [ 305.695253][T16039] tipc: Enabling of bearer rejected, failed to enable media [ 305.938959][T16002] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.962471][T16002] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.971163][T16002] bridge_slave_0: entered allmulticast mode [ 306.001124][T16002] bridge_slave_0: entered promiscuous mode [ 306.036210][T16002] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.046576][T16002] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.057881][T16002] bridge_slave_1: entered allmulticast mode [ 306.067651][T16002] bridge_slave_1: entered promiscuous mode [ 306.154120][T16002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.189878][T16002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.252316][T16059] tipc: Resetting bearer [ 306.268829][T16002] team0: Port device team_slave_0 added [ 306.277111][T16058] hsr0: entered allmulticast mode [ 306.282862][T16058] hsr_slave_0: entered allmulticast mode [ 306.288525][T16058] hsr_slave_1: entered allmulticast mode [ 306.299305][T16002] team0: Port device team_slave_1 added [ 306.350819][T16002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.358614][T16002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.386013][T16002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.400347][T16059] tipc: Enabling of bearer rejected, already enabled [ 306.415129][T16002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.422806][T16002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.449599][T16002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.462378][T16062] net veth1_virt_wifi .: renamed from virt_wifi0 [ 306.485918][T16057] tipc: Resetting bearer [ 306.585314][T16002] hsr_slave_0: entered promiscuous mode [ 306.593620][T16002] hsr_slave_1: entered promiscuous mode [ 306.600888][T16002] debugfs: 'hsr0' already exists in 'hsr' [ 306.608583][T16002] Cannot create hsr debugfs directory [ 306.734542][ T51] Bluetooth: hci4: command tx timeout [ 306.786931][T16019] chnl_net:caif_netlink_parms(): no params data found [ 306.806376][T16075] C: renamed from team_slave_0 [ 306.814811][T16075] netlink: 'syz.2.2806': attribute type 1 has an invalid length. [ 306.823297][T16075] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 307.035769][T16019] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.049343][T16019] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.063557][T16090] __nla_validate_parse: 10 callbacks suppressed [ 307.063576][T16090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2809'. [ 307.085274][T16019] bridge_slave_0: entered allmulticast mode [ 307.094499][T16019] bridge_slave_0: entered promiscuous mode [ 307.105348][T16019] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.113194][T16019] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.120844][T16019] bridge_slave_1: entered allmulticast mode [ 307.128701][T16019] bridge_slave_1: entered promiscuous mode [ 307.139014][ T59] tipc: Resetting bearer [ 307.158928][T16002] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.171714][T16002] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.242526][T16094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2810'. [ 307.262264][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'. [ 307.286950][T16002] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.298025][T16002] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.313668][T16097] netlink: 'syz.2.2810': attribute type 9 has an invalid length. [ 307.341140][T16019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.372244][ T51] Bluetooth: hci6: command tx timeout [ 307.384009][T16019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.395220][T16002] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.407072][T16002] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.450335][T16019] team0: Port device team_slave_0 added [ 307.462807][T16019] team0: Port device team_slave_1 added [ 307.529186][T16002] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.539952][T16002] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.560608][T16019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.568913][T16019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.595968][T16019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.609248][T16019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.616595][T16019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.642913][T16019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.811271][T16019] hsr_slave_0: entered promiscuous mode [ 307.819362][T16019] hsr_slave_1: entered promiscuous mode [ 307.827771][T16019] debugfs: 'hsr0' already exists in 'hsr' [ 307.834878][T16019] Cannot create hsr debugfs directory [ 308.030791][T16002] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.089659][T16108] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2814'. [ 308.100611][T16002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.122867][T16002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.213538][T16002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.357404][T16115] lo speed is unknown, defaulting to 1000 [ 308.420473][T16019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.451283][T16019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.502865][T16019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.535414][T16019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.690792][T16002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.763178][T16002] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.788996][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.796233][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.813834][ T51] Bluetooth: hci4: command tx timeout [ 308.867618][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.888401][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.902579][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.913333][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.922407][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.064373][T14359] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.071624][T14359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.208540][T16019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.218364][T16141] lo speed is unknown, defaulting to 1000 [ 309.269477][T16019] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.311467][T14365] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.318636][T14365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.349977][T14365] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.357303][T14365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.454452][ T51] Bluetooth: hci6: command tx timeout [ 309.806638][T16002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.028782][T16163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2824'. [ 310.090351][T16019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.213941][T16002] veth0_vlan: entered promiscuous mode [ 310.240376][T16002] veth1_vlan: entered promiscuous mode [ 310.305922][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2826'. [ 310.344698][T16171] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2826'. [ 310.538571][T16002] veth0_macvtap: entered promiscuous mode [ 310.573167][T16002] veth1_macvtap: entered promiscuous mode [ 310.587262][T16179] netlink: 'syz.2.2828': attribute type 5 has an invalid length. [ 310.628512][T16179] netlink: 'syz.2.2828': attribute type 4 has an invalid length. [ 310.668306][T16141] chnl_net:caif_netlink_parms(): no params data found [ 310.696249][T16002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.716815][T16002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.839130][T14365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.852214][T14365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.892691][ T51] Bluetooth: hci4: command tx timeout [ 310.917875][T14365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.972034][ T51] Bluetooth: hci7: command tx timeout [ 310.981124][T14365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.997942][T16189] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 311.018687][T16141] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.027491][T16141] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.035524][T16141] bridge_slave_0: entered allmulticast mode [ 311.043440][T16141] bridge_slave_0: entered promiscuous mode [ 311.096823][T16141] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.105400][T16141] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.113441][T16141] bridge_slave_1: entered allmulticast mode [ 311.120862][T16141] bridge_slave_1: entered promiscuous mode [ 311.211320][T16199] netlink: 'syz.5.2833': attribute type 10 has an invalid length. [ 311.280921][T16141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.294176][T16019] veth0_vlan: entered promiscuous mode [ 311.306243][T16141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.361065][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.379835][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.430931][T16141] team0: Port device team_slave_0 added [ 311.451223][T16141] team0: Port device team_slave_1 added [ 311.460954][T16019] veth1_vlan: entered promiscuous mode [ 311.533025][ T51] Bluetooth: hci6: command tx timeout [ 311.594411][T16141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.603008][T16141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.635531][T16141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.662166][T16215] : entered promiscuous mode [ 311.670710][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.683865][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.710157][T16141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.732441][T16141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.761053][T16141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.928042][T16019] veth0_macvtap: entered promiscuous mode [ 311.948678][T16141] hsr_slave_0: entered promiscuous mode [ 311.957330][T16141] hsr_slave_1: entered promiscuous mode [ 311.965316][T16141] debugfs: 'hsr0' already exists in 'hsr' [ 311.971214][T16141] Cannot create hsr debugfs directory [ 311.979366][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'. [ 311.988195][T16231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2842'. [ 312.124181][T16019] veth1_macvtap: entered promiscuous mode [ 312.148376][T16234] openvswitch: netlink: Actions may not be safe on all matching packets [ 312.349224][T16019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.397769][T16019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.429746][ T2970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.462328][ T2970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.484748][ T2970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.520013][ T2970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.728775][T16141] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 312.766732][T16141] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 312.785152][T16141] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 312.799978][T14372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.825492][T14372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.836950][T16259] xt_l2tp: missing protocol rule (udp|l2tpip) [ 312.878144][T16141] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 312.939186][T14372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.949655][T14372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.974188][ T51] Bluetooth: hci4: command tx timeout [ 313.052369][ T51] Bluetooth: hci7: command tx timeout [ 313.141350][T16141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.250173][T16141] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.275835][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.283046][T14372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.320304][T14365] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.327655][T14365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.505222][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2860'. [ 313.517299][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2860'. [ 313.613864][ T51] Bluetooth: hci6: command tx timeout [ 313.668659][T16301] netlink: 'syz.6.2862': attribute type 2 has an invalid length. [ 313.819715][T16304] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2864'. [ 313.887388][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2866'. [ 314.374538][T16336] lo speed is unknown, defaulting to 1000 [ 314.430659][T16141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.440193][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2873'. [ 314.827416][T16366] bond1: option miimon: invalid value (18446744073709551585) [ 314.856327][T16366] bond1: option miimon: allowed values 0 - 2147483647 [ 314.883479][T16366] bond1 (unregistering): Released all slaves [ 315.084693][T16376] tipc: Invalid UDP bearer configuration [ 315.084753][T16376] tipc: Enabling of bearer rejected, failed to enable media [ 315.132227][ T51] Bluetooth: hci7: command tx timeout [ 315.206241][T16378] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2881'. [ 315.228263][T16380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.338040][T16141] veth0_vlan: entered promiscuous mode [ 315.396818][T16141] veth1_vlan: entered promiscuous mode [ 315.510044][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2882'. [ 315.674333][T16141] veth0_macvtap: entered promiscuous mode [ 315.722111][ T59] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xcc [ 315.734143][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'. [ 315.750687][T16141] veth1_macvtap: entered promiscuous mode [ 315.841146][T16141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.868295][T16141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.889095][T14358] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.898969][T14358] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.909220][T14358] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.934600][T14358] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.523642][T14358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.551980][T14358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.568914][T16413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2889'. [ 316.634749][T14372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.649944][T14372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.786069][T16420] tipc: Started in network mode [ 316.791121][T16420] tipc: Node identity , cluster identity 4711 [ 316.813053][T16420] tipc: Failed to obtain node identity [ 316.818589][T16420] tipc: Enabling of bearer rejected, failed to enable media [ 317.218788][ T51] Bluetooth: hci7: command tx timeout [ 317.299281][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.334562][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2898'. [ 317.460635][T16449] netlink: 'syz.5.2901': attribute type 1 has an invalid length. [ 318.076326][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.095505][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.107467][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.136761][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.146624][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.253047][T16480] lo speed is unknown, defaulting to 1000 [ 318.506587][T16499] sctp: [Deprecated]: syz.6.2918 (pid 16499) Use of int in max_burst socket option deprecated. [ 318.506587][T16499] Use struct sctp_assoc_value instead [ 318.820114][T16513] __nla_validate_parse: 6 callbacks suppressed [ 318.820134][T16513] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2921'. [ 318.837888][T16513] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2921'. [ 319.169473][T16480] chnl_net:caif_netlink_parms(): no params data found [ 319.198786][T16534] pim6reg: entered allmulticast mode [ 319.220070][T16534] pim6reg: left allmulticast mode [ 319.282478][T16537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.493330][T16480] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.502114][T16480] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.510088][T16480] bridge_slave_0: entered allmulticast mode [ 319.525966][T16480] bridge_slave_0: entered promiscuous mode [ 319.547155][T16480] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.572390][T16480] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.586660][T16480] bridge_slave_1: entered allmulticast mode [ 319.594987][T16480] bridge_slave_1: entered promiscuous mode [ 319.670049][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2932'. [ 319.704388][T16480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.716700][T16553] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 319.725531][T16552] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 319.742281][T16552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.745510][T16480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.769617][T16553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.894100][T16561] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2935'. [ 319.938195][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2933'. [ 319.946248][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2935'. [ 319.977753][T16480] team0: Port device team_slave_0 added [ 320.047501][T16480] team0: Port device team_slave_1 added [ 320.244520][T16573] veth0_to_bridge: entered promiscuous mode [ 320.259302][T16480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.269511][ T51] Bluetooth: hci2: command tx timeout [ 320.296500][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.338902][T16480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.354443][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.370002][T16480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.387343][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.447244][T16480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.653962][T16590] netlink: 'syz.5.2941': attribute type 22 has an invalid length. [ 320.665610][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2941'. [ 320.687532][T16480] hsr_slave_0: entered promiscuous mode [ 320.699037][T16480] hsr_slave_1: entered promiscuous mode [ 320.708891][T16480] debugfs: 'hsr0' already exists in 'hsr' [ 320.715548][T16480] Cannot create hsr debugfs directory [ 320.718505][T16602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2944'. [ 320.756923][T16590] netlink: 'syz.5.2941': attribute type 22 has an invalid length. [ 320.765594][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2941'. [ 320.808875][T14372] netdevsim netdevsim5 : set [0, 0] type 1 family 0 port 8472 - 0 [ 320.822700][T14372] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.843667][T14372] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.872380][T14372] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.086431][T16480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.238614][T16617] team0: Device ip6gre1 is of different type [ 321.293734][T16480] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 321.307004][T16480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.332875][T16616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2952'. [ 321.420035][T16480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.564881][T16480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.592961][T16632] syzkaller0: entered promiscuous mode [ 321.599315][T16632] syzkaller0: entered allmulticast mode [ 321.737454][T16634] vlan2: entered allmulticast mode [ 321.745096][T16634] bond0: entered allmulticast mode [ 321.750324][T16634] bond_slave_0: entered allmulticast mode [ 321.759641][T16634] bond_slave_1: entered allmulticast mode [ 321.882697][T16480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.900495][T16480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.942071][T16480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.954727][T16480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.058726][T16652] erspan0: entered promiscuous mode [ 322.083610][T16652] erspan0: left promiscuous mode [ 322.284535][T16480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.332262][ T51] Bluetooth: hci2: command tx timeout [ 322.381820][T16480] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.395583][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.402796][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.477337][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.484564][T14358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.578433][T16671] !: renamed from bond_slave_0 (while UP) [ 323.251168][T16480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.264594][T16715] netlink: 'syz.7.2980': attribute type 4 has an invalid length. [ 323.303214][T16712] netlink: 'syz.7.2980': attribute type 4 has an invalid length. [ 323.311099][T16715] netlink: 'syz.7.2980': attribute type 4 has an invalid length. [ 323.385321][T16480] veth0_vlan: entered promiscuous mode [ 323.405280][T16480] veth1_vlan: entered promiscuous mode [ 323.459333][T16480] veth0_macvtap: entered promiscuous mode [ 323.488537][T16480] veth1_macvtap: entered promiscuous mode [ 323.527604][T16480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.567200][T16480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.614948][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.632643][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.685287][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.705721][T16723] lo speed is unknown, defaulting to 1000 [ 323.729276][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.916819][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.938108][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.034036][T16740] __nla_validate_parse: 9 callbacks suppressed [ 324.034057][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2987'. [ 324.050370][T14365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.074305][T14365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.413805][ T51] Bluetooth: hci2: command tx timeout [ 324.428670][T16746] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 324.441188][T16746] bond1 (unregistering): Released all slaves [ 324.717168][T14358] nci: nci_rsp_packet: unknown rsp opcode 0xd06 [ 324.727187][T16765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.756921][T16775] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2997'. [ 324.996646][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2999'. [ 325.064631][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.077808][T16785] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.337075][T16793] openvswitch: netlink: Message has 5368 unknown bytes. [ 325.345102][T16793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.710254][T16818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3004'. [ 325.722358][T16818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3004'. [ 325.731333][T16818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3004'. [ 326.165669][T16817] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3009'. [ 326.285656][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3009'. [ 326.360849][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3009'. [ 326.494356][ T51] Bluetooth: hci2: command tx timeout [ 326.687627][T16842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.984067][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3021'. [ 327.273449][T16873] tipc: Started in network mode [ 327.286714][T16873] tipc: Node identity 12f02bedafb4, cluster identity 4711 [ 327.319077][T16873] tipc: Enabled bearer , priority 0 [ 327.554085][T16871] tipc: Disabling bearer [ 328.102427][T16900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.477403][T16918] veth3: entered promiscuous mode [ 328.555116][T16931] netlink: zone id is out of range [ 328.597101][T16931] netlink: zone id is out of range [ 328.597397][T16921] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 328.627069][T16931] netlink: zone id is out of range [ 328.652754][T16931] netlink: zone id is out of range [ 328.658632][T16931] netlink: zone id is out of range [ 328.673587][T16931] netlink: zone id is out of range [ 328.917387][T16921] bond1 (unregistering): Released all slaves [ 329.059477][T16945] netlink: 'syz.5.3045': attribute type 7 has an invalid length. [ 329.085418][T16945] __nla_validate_parse: 2 callbacks suppressed [ 329.085438][T16945] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3045'. [ 329.264907][T16956] netlink: 'syz.7.3048': attribute type 1 has an invalid length. [ 329.282583][T16956] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3048'. [ 329.404281][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3049'. [ 329.497171][T16969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3049'. [ 329.542922][T16966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3049'. [ 329.675435][T16974] lo speed is unknown, defaulting to 1000 [ 330.130580][T16996] netlink: 'syz.2.3057': attribute type 21 has an invalid length. [ 330.145933][T16997] netlink: 'syz.6.3058': attribute type 1 has an invalid length. [ 330.698686][T17024] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 330.726015][T17024] bond3 (unregistering): Released all slaves [ 330.790810][T17029] netlink: 'syz.6.3066': attribute type 2 has an invalid length. [ 330.820116][T17031] netlink: 'syz.6.3066': attribute type 2 has an invalid length. [ 331.029005][T17042] net_ratelimit: 10 callbacks suppressed [ 331.029027][T17042] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 331.030531][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3070'. [ 331.355867][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 331.377173][T17059] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3077'. [ 331.402730][T17059] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3077'. [ 331.571182][T17071] wg1: entered promiscuous mode [ 331.577840][T17071] wg1: entered allmulticast mode [ 331.651763][T17070] nbd2: detected capacity change from 0 to 127 [ 331.660695][ T51] block nbd2: Receive control failed (result -32) [ 331.673678][T11203] block nbd2: Dead connection, failed to find a fallback [ 331.681174][T11203] block nbd2: shutting down sockets [ 331.696094][T11203] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.726103][T11203] Buffer I/O error on dev nbd2, logical block 0, async page read [ 331.748145][T11203] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.765377][T17079] netlink: 'syz.2.3081': attribute type 10 has an invalid length. [ 331.780005][T17079] bridge0: port 3(team0) entered blocking state [ 331.787412][T17079] bridge0: port 3(team0) entered disabled state [ 331.789354][T11203] Buffer I/O error on dev nbd2, logical block 1, async page read [ 331.794371][T17079] team0: entered allmulticast mode [ 331.807894][T17079] team_slave_0: entered allmulticast mode [ 331.813884][T17079] team_slave_1: entered allmulticast mode [ 331.825499][T17079] team0: entered promiscuous mode [ 331.830764][T17079] team_slave_0: entered promiscuous mode [ 331.836492][T11203] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.836527][T11203] Buffer I/O error on dev nbd2, logical block 2, async page read [ 331.836672][T11203] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.836697][T11203] Buffer I/O error on dev nbd2, logical block 3, async page read [ 331.836851][T11203] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.836874][T11203] Buffer I/O error on dev nbd2, logical block 0, async page read [ 331.847441][T11203] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.884171][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3082'. [ 331.908695][T11203] Buffer I/O error on dev nbd2, logical block 1, async page read [ 331.923402][T11203] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.927164][T17079] team_slave_1: entered promiscuous mode [ 331.936225][T11203] Buffer I/O error on dev nbd2, logical block 2, async page read [ 331.979321][T11203] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.998820][T17079] bridge0: port 3(team0) entered blocking state [ 331.999711][T11203] Buffer I/O error on dev nbd2, logical block 3, async page read [ 332.005367][T17079] bridge0: port 3(team0) entered forwarding state [ 332.044193][T11203] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.053413][T11203] Buffer I/O error on dev nbd2, logical block 0, async page read [ 332.079816][T11203] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.097665][T11203] Buffer I/O error on dev nbd2, logical block 1, async page read [ 332.155575][T11203] ldm_validate_partition_table(): Disk read failed. [ 332.167805][T11203] Dev nbd2: unable to read RDB block 0 [ 332.176927][T11203] nbd2: unable to read partition table [ 332.290821][T11203] ldm_validate_partition_table(): Disk read failed. [ 332.335149][T11203] Dev nbd2: unable to read RDB block 0 [ 332.359098][T11203] nbd2: unable to read partition table [ 333.045119][T17146] tipc: Started in network mode [ 333.050032][T17146] tipc: Node identity 1a3f4c7c9496, cluster identity 4711 [ 333.122767][T17146] tipc: Enabled bearer , priority 0 [ 333.140503][T17156] syzkaller0: entered promiscuous mode [ 333.165155][T17156] syzkaller0: entered allmulticast mode [ 333.267624][T17155] netlink: 'syz.7.3103': attribute type 1 has an invalid length. [ 333.343846][T17170] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.514194][T17146] tipc: Resetting bearer [ 333.557453][T17144] tipc: Resetting bearer [ 333.666897][T17144] tipc: Disabling bearer [ 333.713339][T17178] netem: change failed [ 333.779634][T17184] syz_tun: entered allmulticast mode [ 333.884120][T17190] netlink: 'syz.2.3114': attribute type 6 has an invalid length. [ 333.886672][T17184] syz_tun: left allmulticast mode [ 333.898297][T17193] netlink: 'syz.5.3116': attribute type 1 has an invalid length. [ 333.978356][T17193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.233549][T17201] bond3: (slave veth3): Enslaving as an active interface with a down link [ 334.391382][T17216] bond3: (slave veth0_to_bond): making interface the new active one [ 334.445182][T17216] veth0_to_bond: entered promiscuous mode [ 334.452358][T17216] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 334.605774][T17232] __nla_validate_parse: 9 callbacks suppressed [ 334.605794][T17232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3125'. [ 334.673738][T17239] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3126'. [ 334.898852][T17251] tipc: Started in network mode [ 334.915930][T17251] tipc: Node identity 0200000000000000ff07, cluster identity 4711 [ 334.952461][T17254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'. [ 335.007974][T17258] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3133'. [ 335.097541][T17256] tipc: Started in network mode [ 335.103393][T17256] tipc: Node identity 3293e214aac, cluster identity 4711 [ 335.130052][T17256] tipc: Enabled bearer , priority 0 [ 335.169400][T17256] syzkaller0: entered promiscuous mode [ 335.178725][T17256] syzkaller0: entered allmulticast mode [ 335.240457][T17266] validate_nla: 2 callbacks suppressed [ 335.240477][T17266] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 335.265505][T17266] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3135'. [ 335.388440][T17255] tipc: Resetting bearer [ 335.462531][T17255] tipc: Disabling bearer [ 336.013589][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3149'. [ 336.024196][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3149'. [ 336.036654][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3149'. [ 336.144156][T17309] bond1: Unable to set up delay as MII monitoring is disabled [ 336.179995][T17309] bond1 (unregistering): Released all slaves [ 336.273276][T17320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.622220][T17350] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3160'. [ 336.903791][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'. [ 336.906395][T17369] netlink: 'syz.7.3165': attribute type 21 has an invalid length. [ 337.004498][T17374] sch_fq: defrate 0 ignored. [ 337.272784][T17380] tipc: Enabled bearer , priority 0 [ 337.280745][T17395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.293812][T17385] syzkaller0: entered promiscuous mode [ 337.299293][T17385] syzkaller0: entered allmulticast mode [ 337.315269][T17396] pim6reg: entered allmulticast mode [ 337.332210][T17380] tipc: Resetting bearer [ 337.346847][T17377] tipc: Resetting bearer [ 337.379917][T17377] tipc: Disabling bearer [ 337.896242][T17419] veth3: entered promiscuous mode [ 338.208777][T17433] netlink: 'syz.6.3185': attribute type 2 has an invalid length. [ 338.523255][T17453] netlink: 'syz.2.3191': attribute type 3 has an invalid length. [ 338.609851][T17453] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 338.667945][T17453] bond1 (unregistering): Released all slaves [ 339.236396][T17481] bond1: Unable to set down delay as MII monitoring is disabled [ 339.273832][T17481] bond1 (unregistering): Released all slaves [ 339.432125][T17500] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 339.646339][T17505] __nla_validate_parse: 12 callbacks suppressed [ 339.646361][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3204'. [ 339.678986][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3204'. [ 339.691326][T17505] netlink: 'syz.7.3204': attribute type 14 has an invalid length. [ 339.709857][T17505] netlink: 'syz.7.3204': attribute type 13 has an invalid length. [ 339.737527][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3206'. [ 339.781127][T17508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.923771][T17508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.503485][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3218'. [ 340.551833][T17551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.916441][T17551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.188229][T17557] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 341.317901][T17567] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3223'. [ 341.555179][T17573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3224'. [ 341.877166][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 341.994183][T17598] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3233'. [ 342.390865][T17614] tipc: Enabled bearer , priority 0 [ 342.409931][T17613] tipc: Enabling of bearer rejected, already enabled [ 342.432391][T17614] syzkaller0: entered promiscuous mode [ 342.437912][T17614] syzkaller0: entered allmulticast mode [ 342.489037][T17617] tipc: Resetting bearer [ 342.541148][T17617] tipc: Disabling bearer [ 342.575960][T17627] netlink: 'syz.5.3239': attribute type 1 has an invalid length. [ 342.658117][T17627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.766417][T17634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.793807][T17634] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 342.823417][T17634] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 342.959065][T17627] veth5: entered promiscuous mode [ 343.000783][T17655] sctp: [Deprecated]: syz.7.3247 (pid 17655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.000783][T17655] Use struct sctp_sack_info instead [ 343.007394][T17627] bond4: (slave veth5): Enslaving as an active interface with a down link [ 343.054230][T17655] sctp: [Deprecated]: syz.7.3247 (pid 17655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.054230][T17655] Use struct sctp_sack_info instead [ 343.373100][ T30] audit: type=1804 audit(1759587777.555:3): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3252" name="/newroot/85/cgroup.controllers" dev="tmpfs" ino=456 res=1 errno=0 [ 343.432455][ T30] audit: type=1800 audit(1759587777.555:4): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3252" name="cgroup.controllers" dev="tmpfs" ino=456 res=0 errno=0 [ 343.610882][T17667] lo speed is unknown, defaulting to 1000 [ 343.835553][T17682] netlink: 'syz.6.3256': attribute type 1 has an invalid length. [ 344.065307][T17682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.130868][T17689] bond2: (slave gretap1): making interface the new active one [ 344.140673][T17689] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 344.154744][T17696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3259'. [ 344.168157][T17696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3259'. [ 344.746943][T17718] veth0_to_bridge: entered promiscuous mode [ 344.825072][T17722] bond1: option min_links: invalid value (18446744073709551614) [ 344.841077][T17722] bond1: option min_links: allowed values 0 - 2147483647 [ 344.851852][T17722] bond1 (unregistering): Released all slaves [ 344.890877][T17733] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3271'. [ 344.925055][T17714] veth0_to_bridge: left promiscuous mode [ 345.246314][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3275'. [ 345.262089][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3275'. [ 345.285162][T17735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.312290][T17742] netlink: 'syz.7.3275': attribute type 20 has an invalid length. [ 345.429646][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3275'. [ 345.461004][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3275'. [ 345.492663][T17742] netlink: 'syz.7.3275': attribute type 20 has an invalid length. [ 345.732318][T17760] netlink: 'syz.7.3280': attribute type 9 has an invalid length. [ 345.844548][T17767] Unsupported ieee802154 address type: 0 [ 345.873514][T14358] veth0_to_bond: left promiscuous mode [ 346.290024][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3291'. [ 346.346214][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3290'. [ 346.554985][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3296'. [ 346.564754][T17803] netlink: 'syz.7.3296': attribute type 4 has an invalid length. [ 346.696337][T17814] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 346.743424][T17814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3298'. [ 346.774178][T17814] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 346.813927][T17820] openvswitch: netlink: Duplicate or invalid key (type 0). [ 346.824917][T17820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.127568][T17834] bridge0: port 3(batadv1) entered blocking state [ 347.172972][T17834] bridge0: port 3(batadv1) entered disabled state [ 347.180510][T17834] batadv1: entered allmulticast mode [ 347.196586][T17834] batadv1: entered promiscuous mode [ 347.573896][T14358] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 347.584409][T14358] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 347.604448][T17848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3308'. [ 348.472582][T17879] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 348.536186][T17875] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 349.316574][T17904] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 349.508282][T17910] netlink: 'syz.6.3326': attribute type 10 has an invalid length. [ 349.575952][T17914] netlink: 'syz.2.3327': attribute type 11 has an invalid length. [ 349.912931][T17926] netlink: 'syz.2.3331': attribute type 3 has an invalid length. [ 350.275240][T17954] syzkaller0: entered promiscuous mode [ 350.280861][T17954] syzkaller0: entered allmulticast mode [ 350.288604][T17952] tipc: Enabled bearer , priority 0 [ 350.327311][T17954] tipc: Resetting bearer [ 350.368078][T17954] tipc: Disabling bearer [ 350.408923][T17960] veth1_macvtap: left promiscuous mode [ 350.415339][T17960] macsec0: entered promiscuous mode [ 350.805993][T17981] veth0: entered promiscuous mode [ 350.923860][T17981] veth0: left promiscuous mode [ 351.056878][T18002] netlink: 'syz.6.3355': attribute type 1 has an invalid length. [ 351.185060][T17995] veth3: entered promiscuous mode [ 351.841242][T18041] netlink: 'syz.2.3365': attribute type 1 has an invalid length. [ 352.030684][T18055] netlink: 'syz.6.3371': attribute type 1 has an invalid length. [ 352.188773][T18065] __nla_validate_parse: 8 callbacks suppressed [ 352.188793][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3374'. [ 352.374834][T18070] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.385534][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3376'. [ 352.470729][T18076] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.484905][T18076] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.599038][T18079] can: request_module (can-proto-4) failed. [ 352.610032][T18085] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3382'. [ 352.767800][ T30] audit: type=1107 audit(1759587786.965:5): pid=18095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='T*?2i"AW HtFȍB+XtC#o0^{}k0Un}%fJ?PƇbjyֳUMBPP[(1[1jYP{*ʇHp \PCej[p]@7KrN -Tc h, priority 6 [ 356.232313][T18226] xt_l2tp: missing protocol rule (udp|l2tpip) [ 356.464416][T18236] netlink: 'syz.6.3422': attribute type 10 has an invalid length. [ 356.760802][T18250] tipc: Enabled bearer , priority 0 [ 356.790666][T18250] syzkaller0: entered promiscuous mode [ 356.797203][T18253] netlink: 'syz.2.3427': attribute type 3 has an invalid length. [ 356.805045][T18250] syzkaller0: entered allmulticast mode [ 356.849436][T18250] syzkaller1: entered promiscuous mode [ 356.864189][T18250] syzkaller1: entered allmulticast mode [ 356.896041][ T51] Bluetooth: hci2: command tx timeout [ 357.057007][T18269] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 357.117561][T18269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.136710][T18249] tipc: Resetting bearer [ 357.157563][T18249] tipc: Disabling bearer [ 357.177014][T18270] bond2: entered allmulticast mode [ 357.295723][T18274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.338904][T18278] veth0: entered promiscuous mode [ 357.349583][T18278] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 357.619211][T18306] netlink: 'syz.7.3439': attribute type 13 has an invalid length. [ 357.782524][ T981] tipc: Node number set to 3175361517 [ 357.884525][T18322] netlink: 'syz.6.3443': attribute type 1 has an invalid length. [ 357.904695][T18322] __nla_validate_parse: 3 callbacks suppressed [ 357.904716][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3443'. [ 357.974481][T18306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.991331][T18325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3444'. [ 358.005334][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3443'. [ 358.175140][T18331] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3447'. [ 358.186930][T18331] netlink: 'syz.7.3447': attribute type 7 has an invalid length. [ 358.203399][T18331] netlink: 'syz.7.3447': attribute type 8 has an invalid length. [ 358.213601][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3447'. [ 358.230694][T18331] gretap0: entered promiscuous mode [ 358.238836][T18331] batadv_slave_1: entered promiscuous mode [ 358.246345][T18331] batadv_slave_1: left promiscuous mode [ 358.257688][T18331] gretap0: left promiscuous mode [ 358.479851][T18343] team0: No ports can be present during mode change [ 358.876985][T18361] bond1: Unable to set down delay as MII monitoring is disabled [ 358.887362][T18361] bond1 (unregistering): Released all slaves [ 358.888764][T18369] netlink: 'syz.6.3457': attribute type 1 has an invalid length. [ 358.903777][T18369] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3457'. [ 359.500661][T18398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3468'. [ 359.617588][T18398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3468'. [ 359.733100][T18415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3470'. [ 360.282309][T18449] syzkaller1: entered promiscuous mode [ 360.289472][T18449] syzkaller1: entered allmulticast mode [ 360.443496][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3479'. [ 378.739465][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.477520][T18506] netlink: 'syz.2.3489': attribute type 10 has an invalid length. [ 381.578396][T18508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.585813][T18508] IPv6: NLM_F_CREATE should be set when creating new route [ 381.593141][T18508] IPv6: NLM_F_CREATE should be set when creating new route [ 381.600378][T18508] IPv6: NLM_F_CREATE should be set when creating new route [ 381.697121][T18521] __nla_validate_parse: 1 callbacks suppressed [ 381.697139][T18521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3492'. [ 382.072056][T18531] bond3: option min_links: invalid value (18446744073709551614) [ 382.079733][T18531] bond3: option min_links: allowed values 0 - 2147483647 [ 382.092698][T18531] bond3 (unregistering): Released all slaves [ 382.149573][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 382.174382][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 382.185196][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 382.194425][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 382.203074][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 382.291029][T18538] lo speed is unknown, defaulting to 1000 [ 382.365926][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3498'. [ 382.450615][T18542] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3498'. [ 383.143785][T18564] netlink: 'syz.7.3502': attribute type 1 has an invalid length. [ 383.276405][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3505'. [ 383.294162][T18567] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.487538][T18573] ip6gre1: entered allmulticast mode [ 383.686886][T18591] netlink: 'syz.2.3509': attribute type 1 has an invalid length. [ 383.703296][T18587] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3510'. [ 383.703643][T18538] chnl_net:caif_netlink_parms(): no params data found [ 384.000661][T18538] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.021073][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.035757][T18538] bridge_slave_0: entered allmulticast mode [ 384.045276][T18538] bridge_slave_0: entered promiscuous mode [ 384.054540][T18538] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.061819][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.069199][T18538] bridge_slave_1: entered allmulticast mode [ 384.077551][T18538] bridge_slave_1: entered promiscuous mode [ 384.175915][T18538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.216231][T18538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.251883][ T51] Bluetooth: hci8: command tx timeout [ 384.434924][T18616] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 384.557265][T18538] team0: Port device team_slave_0 added [ 384.567143][T18538] team0: Port device team_slave_1 added [ 384.597831][T18621] netlink: 'syz.6.3520': attribute type 5 has an invalid length. [ 384.675852][T18538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.685851][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.715731][T18538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.770964][T18538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.779936][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.827435][T18538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.859455][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3521'. [ 384.946573][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3521'. [ 385.036804][T18538] hsr_slave_0: entered promiscuous mode [ 385.070905][T18538] hsr_slave_1: entered promiscuous mode [ 385.098402][T18538] debugfs: 'hsr0' already exists in 'hsr' [ 385.116263][T18538] Cannot create hsr debugfs directory [ 385.128453][T14359] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.163846][T14359] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.196279][T14359] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.308940][T14359] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.735453][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3530'. [ 385.810912][T18669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.818255][T18669] IPv6: NLM_F_CREATE should be set when creating new route [ 385.930135][T18538] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 386.046485][T18538] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 386.122033][T18538] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 386.147830][T18538] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 386.252399][ T5949] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 386.264328][ T5949] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 386.272775][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 386.282332][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.285377][T18538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.292390][ T5949] Workqueue: events l2cap_info_timeout [ 386.292434][ T5949] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 386.310309][ T5949] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 37 12 09 cc 66 66 66 66 66 66 2e [ 386.329923][ T5949] RSP: 0018:ffffc90004cd77a8 EFLAGS: 00010206 [ 386.335986][ T5949] RAX: dffffc0000000000 RBX: ffffffff8919b8c8 RCX: c61f66f26f7fe400 [ 386.343948][ T5949] RDX: 0000000000000000 RSI: ffffffff8919b8c8 RDI: 000000000000004b [ 386.351996][ T5949] RBP: ffffffff8a449815 R08: 0000000000000001 R09: 0000000000000000 [ 386.359954][ T5949] R10: dffffc0000000000 R11: ffffffff8a4497d0 R12: 0000000000000000 [ 386.367998][ T5949] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 386.375990][ T5949] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 386.384931][ T5949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.391507][ T5949] CR2: 00007f015dde7dac CR3: 0000000077490000 CR4: 00000000003526f0 [ 386.399479][ T5949] Call Trace: [ 386.402763][ T5949] [ 386.405782][ T5949] __kasan_check_byte+0x12/0x40 [ 386.410643][ T5949] lock_acquire+0x8d/0x360 [ 386.415050][ T5949] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.420253][ T5949] ? __cancel_work+0x254/0x2e0 [ 386.425016][ T5949] lock_sock_nested+0x48/0x100 [ 386.429780][ T5949] ? l2cap_sock_ready_cb+0x45/0x140 [ 386.434978][ T5949] l2cap_sock_ready_cb+0x45/0x140 [ 386.440002][ T5949] l2cap_conn_start+0x76a/0xe50 [ 386.444849][ T5949] ? __pfx_l2cap_conn_start+0x10/0x10 [ 386.450274][ T5949] ? __lock_acquire+0xab9/0xd20 [ 386.455128][ T5949] ? __pfx___mutex_lock+0x10/0x10 [ 386.460154][ T5949] ? process_scheduled_works+0x9ef/0x17b0 [ 386.465874][ T5949] l2cap_info_timeout+0x68/0xa0 [ 386.470727][ T5949] ? process_scheduled_works+0x9ef/0x17b0 [ 386.476442][ T5949] process_scheduled_works+0xade/0x17b0 [ 386.481997][ T5949] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.487977][ T5949] worker_thread+0x8a0/0xda0 [ 386.492580][ T5949] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.499528][ T5949] ? __kthread_parkme+0x7b/0x200 [ 386.504486][ T5949] kthread+0x711/0x8a0 [ 386.508644][ T5949] ? __pfx_worker_thread+0x10/0x10 [ 386.513754][ T5949] ? __pfx_kthread+0x10/0x10 [ 386.518340][ T5949] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.523532][ T5949] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.528722][ T5949] ? __pfx_kthread+0x10/0x10 [ 386.533304][ T5949] ret_from_fork+0x436/0x7d0 [ 386.537884][ T5949] ? __pfx_ret_from_fork+0x10/0x10 [ 386.542988][ T5949] ? __switch_to_asm+0x39/0x70 [ 386.547746][ T5949] ? __switch_to_asm+0x33/0x70 [ 386.552502][ T5949] ? __pfx_kthread+0x10/0x10 [ 386.557083][ T5949] ret_from_fork_asm+0x1a/0x30 [ 386.561843][ T5949] [ 386.564854][ T5949] Modules linked in: [ 386.571413][ T5949] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 386.626799][ T51] Bluetooth: hci8: command tx timeout [ 386.634002][ T5949] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 386.639939][ T5949] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 37 12 09 cc 66 66 66 66 66 66 2e [ 386.645512][T18538] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.661338][ T5949] RSP: 0018:ffffc90004cd77a8 EFLAGS: 00010206 [ 386.673836][ T5949] RAX: dffffc0000000000 RBX: ffffffff8919b8c8 RCX: c61f66f26f7fe400 [ 386.682892][ T5949] RDX: 0000000000000000 RSI: ffffffff8919b8c8 RDI: 000000000000004b [ 386.692050][ T5949] RBP: ffffffff8a449815 R08: 0000000000000001 R09: 0000000000000000 [ 386.700062][ T5949] R10: dffffc0000000000 R11: ffffffff8a4497d0 R12: 0000000000000000 [ 386.719773][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.726935][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.755860][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.763004][T14358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.832405][ T5949] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 386.840435][ T5949] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 386.901520][ T5949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.908144][ T5949] CR2: 00007f015e917d60 CR3: 0000000033420000 CR4: 00000000003526f0 [ 386.952557][ T5949] Kernel panic - not syncing: Fatal exception [ 386.958949][ T5949] Kernel Offset: disabled [ 386.963261][ T5949] Rebooting in 86400 seconds..