last executing test programs: 26m34.552258597s ago: executing program 0 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x658, 0x762095f7, &(0x7f0000000100)=""/97, &(0x7f00000001c0)=0x61) (async) r1 = socket(0x15, 0x2, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) bind(r1, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010100}, 0x1, 0x4, 0x4, 0x4}}, 0x80) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) (async) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x67, @broadcast, 0x4e20, 0x4, 'wrr\x00', 0x5, 0x7, 0x4a}, 0x2c) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r1, 0x100000001, 0x1d9f, 0x3}) (async) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) close(r4) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r6 = accept4$rose(r3, &(0x7f00000004c0)=@full={0xb, @remote, @null, 0x0, [@default, @remote, @default, @null, @default, @rose]}, &(0x7f0000000500)=0x40, 0x0) sendmsg$inet(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000540)="b23e560b5f90998360e4c4abc74f37fb2cd219b0fb802628da578c5a7514", 0x1e}, {&(0x7f0000000580)="afb02c75883c753c0ab29ae185763dde8150019d5de5e26430a43a81adfea00c3b0da7bc65fb4ce47c4f26d7bf181377d2bafa73dc7531410c2344bb7b3e48144f5b398aeac861432a994512c5e9dfa948ebfbc97eb7a206b849928854de59f0c7e93c777eae225a608cf1a8cb3e8d8008d4c8c91419", 0x76}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="70521a7f236a2c44ef3f246dcad4bc47f3875904028c7869cee7422606bec6cb6d437c35aad3332fc9919dec658288dc861735cff9225a4ea75ae1c4b41c98d91634b074685b591871cd18", 0x4b}, {&(0x7f0000001680)="849765e9fbcbde690a424f52cf9b0e395e50ac814a958cf729659efd5772050d79caa261641f69a6b62469e2f589156210410bac12dbc0d6d11042065420c98cdc64dd711dbdbb6194c231a9d480f8fd5f93547eb8330ac369735a91a623f5fd5046c80eafe2dc48c096ef76d57ff61ef9e2ecb14cfa02a7ac57d4a50d74748ab013320a49e7fec36a", 0x89}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="c25f983fb20d72635d3640e03a7f683ca67766b39f8235264f8a472285bdb56db7794a8a2341c7da96e91736dfa043876f1f2ba60bc82fb8de2664425e568a814f337ad805eaa3bfafa54881a04d13a1d6009742582bee37f84cb7b795257191846a357d6f93ff72082de8da7827733dfd4f6f4236cef72128159ed8c355db9366c05e63ea3fb7ac2b72f975d41b99f12ee1b512609bc80839496c24bc98cd6bf3bee67751a155741a21187e29f16f2e4afcb8062b9e8fa5a87b54db32571f9121396b1be9b4a623e0cc9bff81903973cf9fd1565e900921d1849726cab351d34eec130d757405a5b539aef281111b47e0e980c1c89506bcad", 0xf9}], 0x7, &(0x7f00000028c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x48}, 0x0) (async) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000091}, 0x40000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000040000701feffffff00000004017c0000040042800c00018006000600800a00000c0002800400148004002980", @ANYRES32=r1, @ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 26m34.30840445s ago: executing program 0 (id=704): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x3, 0x8}}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x63) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 26m33.33793561s ago: executing program 0 (id=723): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x7, 0xc85, {{0x1e, 0x4, 0x1, 0x29, 0x78, 0x68, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "df3e38b9f373a4e4e4"}]}, @generic={0x82, 0xe, "198aa74bd1e68e5a9cd29a6c"}, @timestamp_addr={0x44, 0x44, 0x99, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2815}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@local}, {@multicast1, 0x401}, {@multicast2, 0x3}, {@empty, 0x3800000}, {@dev={0xac, 0x14, 0x14, 0x2c}}, {@broadcast, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x7, 0x7800, 0x6, 0xa, {{0x18, 0x4, 0x3, 0x6, 0x60, 0x64, 0x0, 0xbc, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@noop, @noop, @end, @timestamp_addr={0x44, 0x2c, 0xa4, 0x1, 0xa, [{@empty, 0x31}, {@broadcast, 0x5}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x1, [{@multicast1, 0x3}, {@multicast1, 0x81}, {@broadcast}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c040000", @ANYRES16=r3, @ANYBLOB="00032bbd7000fbdbdf250f0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="280001801400020070696d72656730000000000000000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="04000180"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r7, 0x2}, 0x8) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x83, &(0x7f0000000080)={r11, 0x2}, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000900)={r0, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x6, 0xe, 0xc, 0x8, 0x800, 0x0, 0x1, 'syz1\x00'}) 26m33.179136132s ago: executing program 0 (id=727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000080000000000000000000000005200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 26m33.118056369s ago: executing program 0 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0x7fffffff, 0x10}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f000000fa00)=0x9) socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="67e25cd8152496c600003900000008000100", @ANYRES32=r4, @ANYBLOB="ac005a80a800038005000600010000003800020018423e09068738371834222f080035293a0d2a293c424820132b072d44163f154f1901513801cb26083b0051022b2628374215150500070002000000050006000100000005000600000000004b0002001a45252c1c26330854411b4c383f184553454f101a3f3b3e1408360e0e293f19484d0f033e3d3010322647322e2822011433473c0442331335131c20173c390c16005130501d4000"], 0xc8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f00000007c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@getneightbl={0x14, 0x42, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) 26m33.075233434s ago: executing program 4 (id=729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x6, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x9, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0xfffffffffffffc83, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:systemd_passwd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG]}, 0x60}, 0x1, 0x0, 0x0, 0x80040c1}, 0x81) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0) r8 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r8, 0x29, 0xcf, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@bridge_dellink={0x130, 0x11, 0x400, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x204aa}, [@IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "b339a899caa8d9247a74"}, @IFLA_EVENT={0x8, 0x2c, 0x400}, @IFLA_PROP_LIST={0xcc, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}, {0x14, 0x35, 'pimreg1\x00'}, {0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'sit0\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'wg2\x00'}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_GROUP={0x8}, @IFLA_LINK={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1fdb3}]}, 0x130}, 0x1, 0x0, 0x0, 0x40050}, 0x90) 26m33.059479085s ago: executing program 3 (id=730): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000040)={0x0, 0x0}, 0xffffff7e) 26m32.961399849s ago: executing program 3 (id=732): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000c3e100000000002400000024000000030000000000000000000009030000000100000000001200000000000000000000000202000000005f0000"], 0x0, 0x3f}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000040)={{r1}, {@val={r2}, @max}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x100, 0x9b, 0xfffa, 0xe, 0x401]}}]}]}]}, 0x38}}, 0x2400c090) (rerun: 64) 26m32.90336698s ago: executing program 4 (id=733): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000400c2801400018006000600843b000006001700843b0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90240002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4bf69bbb681885dc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8011) 26m32.81119402s ago: executing program 4 (id=735): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)="0c6c07d2f78deef59e4df95997b5bad1f87305491af24918d6dc1715e2e539cb7cf75405aff7233c8431411d0cb4e3367147436e00a48b3b6e257bf600d2bf551649d49e7bf2db977135a914", 0x4c}, {&(0x7f0000000640)="1d8b95211ac9cbd87414bd5f63a1c9c0fcde67e9464dcc185df49ca03b941988176b5a2e01bfafcb5d1d99b64ed9f22c9afd7807a4d26a0203a43ff6bd60852a093c992bdeeaf9756f906ef0846e340ea7db49a66a079f1934a43eba1dc12dc079f678514f725ca2c05c96f58980788ac5c05834b8bf084c4770465ff828ff5339e0b7735d26341b3cb62097d8587460c8ffb292e5bc0ba0561df4b8bdf4e6b4236c4ee15af8d892fb8033e5c58140ff44153ba5183c77a455f6aae3db71166f728ddd39490d272376", 0xc9}], 0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="08010000000000000100000000800000e42472e1b73ea18219da99d2a3d9aa4521c34a96e60c85c7f34dc8e28c40d0d722b87a6038843c7116d365e83019ef66ab897173060f730e34dff793b8171506ed3ccb8e203788809ec489c800555b74f7a6b14a23ff937438db48b62be430ccf6ef355296b8acd33b1b58a5d0ab5f53035f50326384045a84ab6b99f9bb46f5f792deb71361a91fdcb0de94f4cc81982128ff9445684585b3ee2d3c0ae4806f25c1a2676e23ceaa08645182dfda03ee190e36ab39dc7bafe15f4e0cfdab1c76185dcfcda681b125def47b5f0c8461dde6bac26ce2f8a8c580db2d1542fc544c2611f863af1e0123d309ec8343a6020ff7fb122a96d80000f00000000000000016010000070000009ee8cf1c25166f98d4c4b02f79d8951d98d97f30f6ed2e73109b969a91c7bc0a7db1cc392f3219f1cec64456d081de1ed17c50301a0a7cb0765fee573148efcb7ec06b57add28b6b62398fefb7f49c46480b48807256a8cfc40cc52d543cc481f0eda784097915dc48d6573a91c25665750afede1bb44342f455e4247e44bf1cb2660119f260636c44caf937b256afe3963326f73f2bcd044dde708d6052e91a4e7001f2c1df65be8d57c0973e0d89c066e22128e6b7fc7322ccdbeaf84e6b72de9d7c6abae1b8c4564b67ee25314f5a30351efc8e20772a772e67000000000008010000000000008a6d9bac1e3af8b6e9ffb996302f219e7f5d22a6d053878b5fd728915a8f9ad3bae1a5945cddb6d04983bd792fbc89c27558c9025d5abf2f3a026a1928d80e3fe7bd67ed5822e3a8a2c0f62a18d36c79472ccb4668230e4d3a22acaa97052319bdf22c4a3e1edf12212d8813858ce44202eb806bbaedffbf13d8c1a95ddf6806fe81e6453a848e908f400840234b737a6299781ef06a3662582559155a3d153d6dab6aa524da0828666e974b3c5eb14fc75c9d1f61c1472fc8ab6bc9d6a670e3bbc6e0c100bb25f155549d9ad50eeb7c6fd97faf9b35b8e03e4b9b832f8c1ff558a16ed22fd0e0efbe3b3c70c2e56000480000000000000004010000050000003f53db55c25ba382650220d20480a33d2e6bf02875a51ae2f9925c4e85a81b8593071ee8b30ffb7bd7aa07d9ec85f2dd7953a9bca26d7630dd7b8d63060fb988e0668c460010000000000000000000000078000000c71b149fc2c3b9ef5d26b5ec2066d16530f9f90cedfd280f95c5e06f9cc38ee60f630989a90b637b473815c7634979548fcf5ff781c5c827cd012c26946507b8bed4eedecc15b53be482b33f63607a26bcb22e369b4c9ddbbeb03a4a2cf337b725fa80ba50e87bc1356cb7a0d60071f70e8d770f9368d4686f1c2b3dc838f31f2a60a5228105d246a2594a764aafea2c7034d31e7623fcaeae645cbd79a1aefad0a07ae2e7393b25ff810aa59e7a76e5baf8f177249c9a00"/1052], 0x358}}], 0x1, 0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4b, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4000004}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socket$netlink(0x10, 0x3, 0x9) sendmmsg$inet(r3, &(0x7f0000000080), 0x0, 0x4004040) connect$llc(r3, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) writev(r2, &(0x7f0000000dc0)=[{&(0x7f0000000b40)="bbd202aac593ff179b16137c5624c75993b9e7c339968039ca69e7c9989115195b44f681b9014cc4b406bcd81f835aeaeae3edee87e95d40f87030c308fe971174b4c0a9800fce6f67886559806bf46f208541df089bb904b16f5d2d38292b117b87dab4d1d1d0da2b15a6ec0da4a868e1349dd8976f788e04faaca83db6ce6984c49e06329c74f110a0aed2d54f89ae7a516c238140f068530a64b57554d4d448c240522a800769fa97b6594ebd7a13062d5c2b3b8d324be322ad8d9db37321c4c56009fbbbc3b0bfb4b2a3a260757e76171f7bed6aee6d32ac5d66154c14ad48366e1bcb65", 0xe6}, {&(0x7f0000000c40)="8bbe964a602f2060b8a3aeace69019cb8f95ee1a26afbf00c1e670d9fabde17d9fa5782fe002b3df72bb01645cc42f383a96709efdf41ae01e19beebcaf00fd49e23c96e2cedf2d02b8e793f3330094d767b15a122e1b4aa191def58a012364f3758ee2af656baf41c5681a0ab27a2dbe1d09125c7d3187e6dc0638cb333bf27cb2c4f5a826849f08ea9083ce5565dbe6e18916d785e9567a148769a41cc57f70af82d8e82f153f71453de0f5cad2cd58a02484af43ff4e4dda9927d979a2e7d9077101f1a78afdc7128afe976bc", 0xce}, {&(0x7f0000000d40)="5e12f76e1f3c5a36f508970564d9bcc7de746e5eb32e46b51ab4a79691d29c3c238c2252fcab3657556a1671997b8d2804ffd4e87be48d37f4aa583b28ea4f78f7e5de366f1c52bef0", 0x49}], 0x3) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r7, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r7, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0x76, 0x45, "f060adf550f5b2a862c42ff11b2dc15354249a5234e8a5e6388c458170ded7c591090bc4efbbc0f395f9834adc3328b47a436e46237a7028acde25b8a6e8b262ee9ed3e1671be6e2adbc2641a07b1ffa681610b19afd0172a6990413abcee16687dda760b7a9816ba088fc0585b0f62f6715"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x880}, 0x4081) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x8, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r10, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x0, [0xc1, 0x1, 0x7ff]}, &(0x7f0000000100)=0x44) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000000000000000006001c004e230000"], 0x24}}, 0x0) 26m32.701299047s ago: executing program 3 (id=736): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x9, 0x42, @remote}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) accept4$llc(r1, 0x0, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 26m32.70026852s ago: executing program 4 (id=737): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="51226726aa4f6efa8328eb1a084ad61bee1cbb8793257d63d543e9f239a7d7abe9240118695afdb9a6a1080476425a5ec3e8aa4db95490e34f4d8eb588e7aa1cc57e02a91ca251418862bc88730e6f9cd6585e9b164b77899dd9722d223e1b8dfbc9ad9d145705ab", 0x68}, {&(0x7f0000000100)="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", 0xfc}, {&(0x7f0000000200)}], 0x3, &(0x7f0000000980)=[{0x1010, 0x104, 0x57, "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"}, {0x1010, 0x1b, 0x8, "9cae753ef17b564f494aa5f5615f3863acb55c4418f623a824f989d9acd3e52043e04b219010b0aa144132ba0a92adedf1594f7f132bab9fbd58714b105ab5b36e076110ab85b07a6bfdcf3f88ad61029fa7e9a06317a03af118a8d215bbbfc5444bdfd08fa46527dcd271953a37365df455e2645f0121c285dfb2cffa9a53dd95109b644bf0865a6704db10fd1ef19afaacf0fd3a7ed61b5602955aca8c5b8b0e66a46ab2f37979f946fda31e0823013cc4bace8451ed021be7aeed7580c25acabba66574a18105a65737bbfb04a864547a4b7f17e65ac9fc3618a8bae5015a6c0f37d15fb889dda06e941b0f6559611496e16800b39917c023ba48fdab1fad32439c7bc0a34e804a8a07b9e39ea775b15e2e2860364800293a9c8b3c9b71a8a4e6e420667b63a530f13cb50c7ad7b73bde46b4e1d5d549b6d0b2e21a3167ed305dd71a4a3f228d7ede8e9590ffc70861d9a3a5e736c2d340ecad038ae6198299fdf0e074be9e06b38d6ea4c3ee948fff4cf854a69c8f748c0ff3d73389a7280c07498fc6debf56672b96c65f07ca34691916ac7504f5d91977702be35210f7ddb4431c87322e35a1f3829a1ca570f09a6960beb1a07a8152bfdb45d5bd9bbcd6f73e9054332d897e5c65c040398abf7c4896df12b170292a6f0842bdf99d0b4db6a94c75f491cf2e33d3c8258e05f93810e7315673d572679f1ed2effde31b39bf4a9027f5d56dd1c21662adddce82baeb2319c6847924e805fec0596660a4c466fc4616b080fba8ba88a6d0275fc2397f58133d1a377de10526fbad0a13fdb5e889371424d9d5f5e747c26184edfc26376ad482752cec69c54daf3e3cdd64b7d61894203e850c1de6e10f63c349c637f54108d69766c3003d661a77a90ed8704b6e89645646a3b5bfc9fe6ae17798825c875dbb717e7cafd976a62014ba393cca29c232257e60d6e8b7f8d84555b09ec654a634286d204d49c59755db6bb43b793af06216c75653c355167c0c1a9011b95b9e9176f5b269302b5f5b94161fcf17ace1cf990bd72e067f0560af9398b73eb4e3ca4b10e7d1c38d9d55811a135fdc7b9924cfedcfb965433dda13ff1fdff48dcfe215f8f0547fb08ce26f38983d615097bb488a1f7b1fc0f9c401cbb41e10e5142c717a7d32c163438cd282ccd17151b7cbc6f7d8ec76213561066b289496518aebad3b99f9b030446e80322040c3b22a78d1f67676717e314ee6b18ec2e5ff78cb693fae47ba711eaad46ceead1b15a8833a3d97b43cf272944e6049b7b7ff505f3a9ffc7468a1e32fd2cea7f55976d29dddfffd5b3d6f07a6e81d1c13df6f11f8f4f9bf4c83eb42def2c7eeae8fa6c964d32e20adbbed8985ea6b6b0034cee08cf28a5466479b889f233426985b48227c51cc5dddfff78b6625c87f38e6c422e5c572244f9e31635871a6714cfa5a3b16f981b1db545ea942c571b57dc09b2c3a9f513f8e95aa19fa76cfd5161e84e1020f9f764db93ff1c56d2fb4e1d34063492b71b48e84617ef2620c186ac75c5b09bd40a8b0058989d292cbbaddb8a2a72ba1395e780a4811324422a5e7df27797fc01a0c5c0f13dd213c02ec0b64dd79aff1f5de7c7531d798ae8a75f5bf2b15294c64e869cf6141450a96a56d052f53c2bbb71f9ddb37a07da84c153141ef1474390f95e4bb2a02681dcff5df5f2ef947c9ca68c2a9edad43834dd4f32b7490507d0117a52e924f0528b9ffe4f0987d60cb962f5e13d6653293c2dbb66fbd3336d39540132f46066a16bbb68320b80393fbce7c3754a6189f215f054a62a8f7476425490d06960aa8ae224537a1a18f638319cefaa1ebb385ae79ad2fb7b0fe4301f6a503e3ab27251407e08f72bc1658f8c208a778199a85dc8cffcc8db510fd5403a0ba0e8ac22d86fac4561fab27a719a5126c3da2de0aeda52a975952c7771970f2c3bb4823243163029974ae098e78b16f8b0c9bf64d59d5404d5cfb98c2391171fd3c6ef6d96363a886dbd35887a3c996a9cd13ed13c7d76817bebdfa19b993a396be1099a6e8d0e1ab82cbdac2afd2084514ff98839a3d10b8928aa6ca3e4040da41da3b94f41210b9f2a43ff98f2c48d1164c3d237216661bfa981cb79e634b6b50866bb493dd7993b6bf1d6dd6d00aa8b41276d838beb110f9f256e192f829baa65b4c00bc3e72e4ba74a1eb412372ccf94975fd709cd0d4de6a056292a4c68ae82a719ef0197ae1fd973df0cd555cec9f6c4b4a593ba03bd79439682555a0079e0380c04e5cc5e691af9bd57079523eec72e334d4f747bfb15ac12028ca8166cae7e5a47ca222ea33858c67c859fe886dd4429af3077a201e56b1192eeefe29cbfd61637d0db6148ec045c333ee9ff55fbb6158e67cce70e336dc16c74c799c3356e67fdf82b521b966e89b53180baedfd043ddc98db8c0d3fc4b9addbc2f1859f221d586874974950b3a98c01cbcb60c1873ea1f6a07cfe508cd8b5e78961832589148ba17846c4a4d5ad76fbe0026a2f1031401a80eba82ca34567d6cb5c5d3b77a93a82e9d113ff33a1fabfbbbd2a7549fd04e90319d584bc41eec59c8a05f484f9eb67081c16c5bcbd1f8c102da604e5d0560ccd0e99f30ce11860e698b33a5d6620610bec1f4db283436a18cf4adb6a3a12053a7288f88f7fffab98659d5f71b91561a2fe96140be4439f6c522527e6c941d29d1d99b31c88e5d6d5ce23395f957a2d496ecdd34aea9dc3696774266833ef07dd944c99ebd99c6d3a8ad8021e9e753aad3ed1b0addf5bcdab9b73f1260d325091a0e7381dd020c45dbc6f702f47541cb262c6fdd8ac34c4c483bb44f407aaac6d5a6702ecd73a9311af92402f1d64ec7f0e2a23d8f7154f521632c206c5920222e43294566136b1354be363b98ece5e25491855c8ce42986b1cac56c3b15d1b8e6309be6be7860ecd6fcade3e894e25e4a23419744544b352adfec9d6cc1b41d8c7b5988136a34432d5360cc02f0e2da5f86a9bd9ea5e290b71e9ea97e0f20b820b8b34abdba2d5f5b3250fab760e09237619c307339226c8680a24bf48b2e27ef0d5367a251e80081ae4dc31c5dad970bcf71d92296e4ba5afb4e7edf539342106e81169cd3fe7c3e357ac227d19bb6636af364732d121912951f6355bddf9a6a8548dc2b05c03d40839e24b6dd7547f44d9400e8a65b0ace499b3a9de87cbbec458321f7b9b24a76133915b2be8860da6366b5f20161492779b4855bd7521c38d4197f5457becd9154b912a04bdbd644e8a912e1ba2b76c2338f7a1961799da3278dd0f769a0589e0abde641c19c1b2c7c3bd57e7e951ca2e21420ce07feea2d2f2c0f23a3cce24d5d377ee626d93889d7c8b4608328346acf4464e10399f195e251dd131b1197568ad5183d263dbec95facee6a68b6e8320386efca05f0113090ac614f6092eb0ce6c8f2e9abfcafe85b691f389b13ebdae2fcaac87d297e81abff40eaa9a54d458da125e1e6635203054aa94bd3758b70eceb1d64472442def3f3eb646de79973e78c3bf4acd80e84cbc5072164fc855f93020bb8d3064721907f5d8e4613b7ed01de95923fbd13a8ca7931cad3f048c1b97abc54a33b62a4a401244eb9d50af7a79a9e6cae82250a53def67410317785d0671ae5c655f5e4b76a8714edff073db93683ef5a2da0ca1305189444b6e8945259fd61ec8771c19cab094928b0af16c6e406f71ccfefcdd06dbb817898ee45797ea3d80749077cb31d2fc8cb977df3a10bdc50c6e6ed831a3fdec13da1c3611bf7102e0edf24ee64456a67ca548ce4e0e66f83ac633b357228f1b59b95bdcaf98335b39dc9892b42e47c896cdf403e3baefe9baa5789042a689ee6cc395c6be4371f34019e840bb75007647833d0bdc0e6a37e44da5ca47a23662487da6d19153281c622d4c71cd73268580a657d33ad561f69666b12169369a1f473006eb33b80bee82581cd812ae11605c94f2e7d3c7ca18def599fcd9809755161d2e7a0170af05b4c49ecaa523009fc344d72fb23f51df75b0e4a4279b8532d6ff8cd51d9f3d36c6b161ae54d34fcd1468f2dfccd680cbbe94c62d528519d0bab71d728cb4b3fde493807c3e64fc1133f462a42ff8b1fefb3dd8ef025c5fee9f44259b1821b253eca64891511eb3648619540ce1e0139d2ca290ba02a3ac4e9fce7f76ff901b4768297916b61814c95827de31a01786a5c8cd65360f3f64500b2a1491082a08f02359cec6b56087cb9f76490e741fd744671c067e4b7a6bb6f1b6165d344b0b1a96e560aed51dc73c7b772e753e2071b2dc3d2bc2385f76a046cf53f602f571f9c92e4edbd16d4544a99c046fc546161a54b7885d3cbd32ce97a55c01b695ae0e9b2323792c0846de238fb45cf2d52ff9d345acdb87059526ef8baad05fd2faef1fea330dac2d646994127e5cf306e8612297ebfe45f7fffcfc18e50e67689bdaff74cf107d74ca056e1b5687fc369b8ee616f435ba2ddc4d244b6cbfaaa1a71e544a9c2455aaddaece9fb8013e7060a806b6a2e9d1a297f7aff4a2993281c63255a3ceba84c3483ec99acfebd5300f8d045716461d81d02c42d70c25c99a55071a69452067d23bf11972f95ea1c5ff156e8231f07aa35c9b95bbac6abde522b822695aecc2a220d86c4a84646bab3335d0caa8b7c1542920e5d743ce0d718bbb9f64cfdff080280d7e3ac347b0e2ef3caf41be91726b5ba2184f62c2b3374956343d0843c23d338a51c4b1381020cd825c30fd6b2b627a8f4bda6155b02af192171fb76a5ead9b25cd376ed5a5c1c98155d10bac34463caba9ab0db2150ee56ac94f700eac57585c91ff00c8d621817ac08971989104c9e0229c8567f8ab4c505384d1a958babd9f91fb6b2eff0c711cdf38eec3bfdaeda4ae4b74d5907bb727596854f7cd117fbc6092c46f7fc34d84d71bc1113fae9402e5d71d5c90993de41094d344ab19a30420a58b3c2e8b894034f348478cc7c0db353f0e01806419dbbba723930f3e17d2b4f9c88e5ad1724f5ac3136d906ee0b0a6dbb173f476e2ab5f59e15edfe61d7148b408e3e59427447904aadf0f64d0233792dbdb71b9e312866e1874020a36eb18514dd6e28a7bb0723abb43ce3de435306821f5732b3b5477bcefc278e2aee6067a4faf8631ddcdcf32e1efc9c55dd1e5213d71db27bb92bfa4aced19898ae637be1ac2f82b194a22419cbcbbdf15f001ee00b75e74302cade402ada0d7e2ed7fe6f9883d18951f96006068aefde1ad2b3cdbcb01f9eb910702369ae1144471c72c9877dc78dcd9cf4566aaffbd1e6bd545a12bc81b9e4d09963c3e8609b4021e4c6f19933c2823fb14ca8d627756c75f8d6535ddc5a9ed9ad117adf25a768f7aed304c81e10c10925e80f535a735c7c757930b001103d7e3197da820e8adba5b76c796a403f3f6f2759ffee0a012605844e9d28e4a9b41adce3502a14b55e99620e17d9160cf5194c85e93175e95dca6c4cc0bcc0532ae19cd278de5ef06407fb4dc8d90b6611c2f1074a126a20384bd4a385d1101ed7d329f02d27fe1d2dc1cb868fe54ca646ae47e362f48652ba3359a70cdfa41715d873a856ee9ef6977c4c31610e82c069c6dab5f2e001b673ec7d13ca9a32eaabc2f5d7abf064a23aee49a12718ccb8b316202be7ad12dbffe2cc4dead76c1e396294f4402f25819b06ae61e875d59866ed67b3edd434ff9d69ea3b457b4df8c7ba8dcbe23482016e8c2babc54325ee279267994d778d00f14caefc2d0b839186588f7565e1"}, {0xf0, 0x84, 0x9, "5dae3b43abd46c4eb839178c3683fe1e8149bd5ca4b1893a43305e381086e178ad034f615b1da62168b28a43271e1bb4c8af8b85b6dd13f215ac66f5316dd4e549d613d3ab7fcd6afbd2c3128c1048351b066107f449744235c48c63e2de138466671dd6e124740050a6ee883dab847dcfac8fce248298f504404737163487601f388427e53acde2499eff6b8994c13807e594d7dc810af016da90780b2eb80fc79ef014d3484641c18c0220bed99486e3ad61effc8046c03f7ac3787d6d8900c15e7c5fc0fe218481bae6bad6d0b9d763442d918dfa5263d69c"}, {0xa8, 0x1, 0x2, "56d1129dd32259e85be4e2defe98b6d0485ebcd51c63163679f599512e7aaff92461b251138ec1bb79f1e5caaaf712ff2b0c70ac6f9dff08256945815e33966632cc27f6af3c06b195ede07f515a15c94081c40f1817858e0b452eddbded989bd910506f6f8a2596a6337e11647b6eee56ba09a810b23f3d7dcc5088a5435f61f6ff4a9a47ba12298bc687c79f424b6e01f6d9"}, {0x48, 0x1, 0x800000, "7900996cf5bf708c08f3d788b141bc0bfc06432a32e945ebc74494fad2fbf9ecdfe946a2433cea7d15491c4d8fe3f18f1e3b"}], 0x2200}, 0x44091) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) write(r0, 0x0, 0x0) 26m32.647533612s ago: executing program 3 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000008000"/20, @ANYRES32, @ANYBLOB="daaf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 26m32.604687248s ago: executing program 3 (id=739): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000000)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x8000, 0x6, 0x1ff, {{0x13, 0x4, 0x3, 0x26, 0x4c, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@end, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x17, 0x9c, [@loopback, @multicast1, @broadcast, @private=0xa010100, @empty]}, @ssrr={0x89, 0x13, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x26}]}, @end, @ssrr={0x89, 0x7, 0x4e, [@broadcast]}]}}}}}) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xdc, 0x7, 0xfffffeff, 0x60, @local, @local, 0x20, 0x10, 0xfffffff7, 0x9}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x260, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r7}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5a}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x54}, 0x20000080) 26m32.458497879s ago: executing program 4 (id=740): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x2, 0x5, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000090000007497d28bb4bd6000f000000000000000000000000000000005592f873b8602c42bf95ce259ab5b5d28f66122d2df218e301fad9b5fbfee69be4bf055cfdd118a4d5d66e9f8d31be15c0f21af4d5b036184e0b5fc73b760a651c107fae078db0fbb0e195dd52fb26da984ae5032"], 0x208}}], 0x1, 0x8000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00'], 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) 26m32.240152403s ago: executing program 3 (id=741): r0 = syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x4, 0x0, @void, @value=r8}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r13, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x21, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x1, 0x1, 0x2, 0xa, 0x9, 0x18, 0x9bd624e7a5b679c0}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2be}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x800, 0xea, &(0x7f0000000300)=""/234, 0x41100, 0x2, '\x00', 0x0, @cgroup_device=0x6, r8, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[r11, r12, r13, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x2, 0xec, 0xc}, {0x0, 0x2, 0xb, 0x2}], 0x10, 0x7}, 0x94) 26m31.813158161s ago: executing program 32 (id=741): r0 = syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x4, 0x0, @void, @value=r8}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r13, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x21, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x1, 0x1, 0x2, 0xa, 0x9, 0x18, 0x9bd624e7a5b679c0}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2be}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x800, 0xea, &(0x7f0000000300)=""/234, 0x41100, 0x2, '\x00', 0x0, @cgroup_device=0x6, r8, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[r11, r12, r13, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x2, 0xec, 0xc}, {0x0, 0x2, 0xb, 0x2}], 0x10, 0x7}, 0x94) 26m31.79266673s ago: executing program 0 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x2, 0x4) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x10) 26m31.502177602s ago: executing program 33 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x2, 0x4) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x10) 26m31.461044431s ago: executing program 4 (id=746): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}, {0x0}], 0x2}, 0x8084) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000210000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8, 0xde2f}, 0x28) 26m31.460513662s ago: executing program 34 (id=746): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}, {0x0}], 0x2}, 0x8084) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000210000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8, 0xde2f}, 0x28) 4.019540549s ago: executing program 2 (id=14465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x18, 0xc0, 0x2, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0xffbb, 0x0, 0x0, 0x10001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}}]}, 0x4c}}, 0x24044094) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.684589947s ago: executing program 2 (id=14471): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x801c581f, 0x30000002000005c) bind$tipc(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x33, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000040000000000feff0000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) 2.580618223s ago: executing program 2 (id=14485): syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080046000520000000830377110090780000057600"/46], 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x20040084) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r13 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) sendto$packet(r13, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) (async) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r11, @ANYRES16=r14, @ANYBLOB="3a9d2dbd7000ffdbdf25010000000800030007000000080002000000000008000400d60000002000018014000400fc00000000000000000000000000000005000200800000000500050005000000080003000500000008000200060000002400068008000300ffffffff08000700", @ANYRES32=r5, @ANYRESOCT=r6, @ANYRES32=r5, @ANYRES16=r1], 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f00000022c0)={0x0, r15, "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", "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"}) (async) shutdown(r0, 0x2) 2.290781201s ago: executing program 5 (id=14489): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x73, 0x0, 0x48}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x60010000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@state={{0x28}, {0x5d0e4fb0}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x7f, 0xa, 0xe, 0xb, 0x153b, 0xd4, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 1.971009917s ago: executing program 2 (id=14494): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x9d4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x68c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x83, 0x14}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x94}, @NL80211_ATTR_CSA_IES={0x61c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x1, 0x0, 0x4, 0x7, 0x200, 0x400, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x1, 0x5]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x61, 0x7f, [@tim={0x5, 0x5b, {0x8, 0xe9, 0x9, "43f453298a70c6982912f3658adc3ef55fbe9c7fe6acc1cadff890d9702e4ed65201d6b2334d5e89ba7143b63cc3c9a02534f73d4af3fb599d6c7fca60400749ac2d77f9572ad88c0c06cbced88c8f9b3733c2eaeee28378"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x20, 0x7f, [@ht={0x2d, 0x1a, {0x2, 0x0, 0x1, 0x0, {0x8, 0x9, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0xfbd6, 0x5}}]}, @NL80211_ATTR_PROBE_RESP={0x18, 0x91, "2fe6055e0ff0ce97bc6bf06ecee13d31dc22c6b5"}, @NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@link_id={0x65, 0x12}]}, @NL80211_ATTR_BEACON_TAIL={0x29b, 0xf, [@preq={0x82, 0x36, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x7, 0x8, 0x8001, @broadcast, 0x9, @value=@broadcast, 0x7, 0x8, 0x2, [{{0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, @device_b, 0x40}]}}, @random_vendor={0xdd, 0xf5, "e23a7ada22cec1b93f085fa1659c194ac8f9c558564ccf93053a215dfdd21cbad7d6eda4d275cc062ada28d61c9cc5b0fe82a9d6ef19c2de3f486de89427fe23639efd35611b8dbd4e73cfcf456f1d78d34eb7943aee97f4cedef5853b3ff07ca8299140ab93976945e6f0b5ccded033d6e1e92aa8716c63eb35e31a6ba574756b40c61a66b022db97822eaa6e808a160f7cf9de6943a9697480d6f6012519fe134d68e4f62cdb5d9cf9a7d99c09854cb63e989bcd9d54538e1f3c5ebb9aec4acbfc01b7e6e7c1cb50b4b9d8becf351e9afbefe957e27bfb4ee2657dcc3a496edb733cecb3df5dd925de39ee48f9b48dc884c5812a"}, @perr={0x84, 0x22, {0x7, 0x2, [{{0x0, 0x1}, @device_a, 0xf, @value=@device_b, 0x2d}, {{}, @broadcast, 0xea4e, @void, 0x20}]}}, @fast_bss_trans={0x37, 0x99, {0x9, 0x2, "c2ca05dee143bd1e094e1525877c2721", "4c027f9d23330e1608c9b83481be39f289ee7b3b2bc1da293d3520919a2468ae", "066b8cf06da6022c540ef5b03433e4ec5ae1d1c88fa68fdaec0e6a4b4ffe3722", [{0x2, 0x25, "404343cc55b59ee3e4c68664b223097f6df08c9d85d3c295b5c41c8f4fda29f320c90c2a8b"}, {0x1, 0x1e, "83e10a4ca68d0c88591019940e165ae7fd6b5ab99e253698d86e7e33989b"}]}}, @random={0x6, 0xa4, "c1c6abe25440746e9ad205d9cbe20acef1103afbeb93911ee431933768b8841afb6963708de51c91c8fd37aa854cef96e71a4780f9333a00e2a71b2c46bf11251541afe700ae139cf92b6267eb81231d051534113298cba9616cc5d73e1c20d5d6d9e89a73390b9c00be5751ab938511f9f041760a861ec00bd41c2c04c99d0aed7b1a329cd6862db36e30a7169bd2523a20f5a8c76029262aaf880a2189bfcfadd7f369"}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_IE={0x29, 0x2a, [@ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x0, 0xe}, 0x6, 0x3, @device_b, 0x73c, 0x7, 0x1}}, @supported_rates={0x1, 0x8, [{0x6}, {0x1b}, {0x30}, {0x48}, {0x24, 0x1}, {0xb}, {0xb}, {0x6}]}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xf3, 0x80, [@peer_mgmt={0x75, 0x14, {0x1, 0x100, @void, @void, @val="16f3a0108f924d7d7b4de56706d6a3d8"}}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xaf, 0x20}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @fast_bss_trans={0x37, 0xc3, {0x7, 0x5, "308e694ddea8c81ec3fd7be6f7886e80", "51453144194c3ba7e3ffadb41d9825fe597ca5ef4b6c99687826f0ce8aefd396", "6364d95d67bf0fb0c03ffeda8036b42ea7e8932961763174dc97e55cae87bda8", [{0x2, 0x4, "ca14950a"}, {0x1, 0x16, "9892b5a403b2ac2bba34ef57ba08256b8da862f37dcd"}, {0x1, 0x27, "5b3a2713f11e779092aac7601117ba01fb9f7c7e22ec4a636a6f3021e930d26da01320343c17fe"}, {0x3, 0xd, "eb41d2b8aea72714b5d926a6dc"}, {0x4, 0x19, "42fe20c837f879afa88608f4a3957e8b80b4cb5a0c84d09fa3"}]}}]}, @NL80211_ATTR_PROBE_RESP={0x187, 0x91, "d0a7c4c7a70bef03fed3ac2b8c278dc339f7a581c3f8cea03f57b608cc856eb37ea2065d70b5f293892cd71713e0d7562b355ac3462e02bfb88839c529c7f787926b659f353efe53a33dba96ea310b00c784598125c7e936db70c709fc0af584dc7fdcfdf9c76dba48f7e1b704bc98c8df7b940898e2e59381136fa9550e38f86d1965846e0c6a718d2ceb4d5dc5db2617e21ec7a9f98597ef1229f1bc4053ed207494fbe9c44a5b1fb9b18cde26128f8a021e565445176e8cccf1bab0960c9aab7da08cbd12d2eb92652b86601580238502f577ac2e155b73af063f838190e55175c1e97cebd777e3f6dfc4f7a188434892f7a3742398312ebb4e3ba0e1c955e33320c794de75dad5a41143dcb832007fe137561425863ce966da83ce655c903f1732b8cce4d994ff2e8c01a58ccc0370d64d19b98f957b64d24b20a5077a71da0548ab59e4ef29d04cca95c0e3825d9b7212c27b9d43a79d67de60ff9066ed713615b9831ba5d4270cfe3156dab2bea39f7c57e4f14fdb3a0e5f2f0949eedde22bb7"}]]}]}, 0x68c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x4810) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r4, 0x1, 0xffffeffe, 0x0, {{}, {0x0, 0x410c}, {0x14, 0x14, {0xfffffff0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.8629485s ago: executing program 2 (id=14499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) socketpair(0x2c, 0x6, 0xffffff4f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="90188b87b6405b909c2f11c201ec2d31", 0x10) (async) sendmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000e40)='P', 0x1}], 0x1, &(0x7f0000000400)=ANY=[], 0x10}}], 0x1, 0x5d2dd0c54751f8e3) 1.72196227s ago: executing program 6 (id=14500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x398, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x318, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x17c, 0xe, 0x0, 0x1, [{0x7c, 0x0, "c89df926fd8c3ccb362807c65d42d16382f91746fc7f33cd54562c157da64489ec874527daab8b1448150689d3190a95b56dda05911258d934c6ba18e48b490f6cf4b154f30ab36007d19daddaa82d93a1ffff1bafdb5471081d121b686fe62a9a3be820bd49a8e451c8aff62caba73dae01fcb341aa4d6f"}, {0x7, 0x0, "218357"}, {0xf2, 0x0, "a35f223258cdd4f45f78efd924fe296b0a64c863e1da9343c8722e2414892b0150d1325de925fe8b088fe2d07a34eb9bc1eb4a62b984f99088a98183304de9ccfbd158795b29e3df8f07138649f43d7a4de09d01e70bbc5d60efaf5e91351ad2be2ab90f8e7e1b208c1bdfb50babafea2725847f2af40587b73167b5e1df346f128d8b970f8f630aad0602b2f6ab172457cd4bb33f6726cba3e51526c813a146db172f6b40e081e27e0b3f1c15ae6beac7b27ff62b9c20d57e7d07f06895b62cd1e60eb516110bb97d7de4cd99a21f971cda871ee0ea0c606c8f01a46adcf7f13f96a567d44e74b672806ac860fc"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x190, 0xe, 0x0, 0x1, [{0xb0, 0x0, "142fd13db5fcd7c6cfb9deecfa3bb7f07e49edeb82d47c4d07d8a0da9d99f3a24e123633148b25a839ff42468f627a3f5a674f1b238ab14ee2c8039c42b3800820fc3b576d7f439ed4f81e06b43c624d622a775a7105919979dbc8781860a2a0ca83bb9bf025e6511295d32c381e98fe39c7554cf28c42e663161f83e3334fdc2a3e130620e7f0a9a8fb01a0d98f3f13814f99bac08ab0529f5ff5e7f64c0922d40c5edc9446446cea0629ab"}, {0xd9, 0x0, "41b7b2fbde3dfaf0deb5730afde0531301408c37822ae115a8d321604514a2b52d905832405cba4a5ff1c1b3686e0436f64582c7bf9fabd3e710af26a6474f31cf11fabbb1d876250ceafb93e9cb1afbfc6df20d88d60be90820593f757532b7a9e43e17ba8de91fa9eea4a6121f433a8db6e19cd6c8870068e071784b739bd0e2b33533303a01fdaa076058abcbea2685028b044348fbf7c61acb4b38df2cb05dab3d5421c0edec44574c953d3f84d0baca10c5c9f334f89b0d2046ed550218b95cdf991a91f1b6daf9b507cb62617167eb6ad61d"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x10}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.676069067s ago: executing program 5 (id=14502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x10000}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 1.538525946s ago: executing program 6 (id=14504): getgid() socketpair(0x1f, 0x6, 0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) getgid() (async) socketpair(0x1f, 0x6, 0xf, &(0x7f00000000c0)) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}}, 0x4000080) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) 1.497252209s ago: executing program 1 (id=14505): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r0 = socket(0x80000000000000c, 0xa, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) 1.318570761s ago: executing program 6 (id=14507): r0 = socket$key(0xf, 0x3, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8000000000000000, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x6, &(0x7f0000000640)=[{0xd, 0x53, 0x4e, 0x10001}, {0x4, 0x7, 0x80, 0x5}, {0x8, 0x1, 0xd4, 0x2}, {0xf, 0x5, 0x1, 0xb2}, {0x2, 0x9, 0x9, 0x3ff}, {0x0, 0xfc, 0x3, 0x6}]}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="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"], 0x9fa8}}, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000003500000000000000950000000000000018"], 0x0, 0x5, 0x95, &(0x7f00000006c0)=""/149, 0x0, 0x70, '\x00', 0x0, @fallback, r1}, 0x94) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_vlan\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x6, 0x4, {{0x16, 0x4, 0x2, 0x2, 0x58, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, {[@end, @generic={0x83, 0xa, "58bc8dd10b65e4d9"}, @timestamp_prespec={0x44, 0x14, 0x74, 0x3, 0xd, [{@broadcast, 0x7}, {@broadcast, 0x95}]}, @ssrr={0x89, 0xb, 0xf8, [@rand_addr=0x64010102, @private=0xa010102]}, @rr={0x7, 0x17, 0x3a, [@private=0xa010102, @loopback, @loopback, @remote, @private=0xa010100]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="a200ad83aaf960f00b92f7d8e6a44138daafde50", 0x14, 0x880, &(0x7f00000004c0)={0x11, 0x8, r6, 0x1, 0x80, 0x6, @random="62f540a5ae88"}, 0x14) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000380)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) 1.283576431s ago: executing program 1 (id=14509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) close(r0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30e) 1.146479188s ago: executing program 7 (id=14510): syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo={0x8, 0x0, 0x0, 0x9, 0x9}}}}}, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000140)) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x2b0, r0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc98}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x742}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x65}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x118, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x214a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8490}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000d1) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 1.04939259s ago: executing program 1 (id=14511): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fe}, 0xffa0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1.001258739s ago: executing program 7 (id=14512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 930.967094ms ago: executing program 6 (id=14513): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x76, r2}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 907.225766ms ago: executing program 2 (id=14514): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0xd, {0x2, 0x0, @empty}}, 0x24) (async) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0xd, {0x2, 0x0, @empty}}, 0x24) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x6a, 0x40000007}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="6dff000000000000791008000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 871.110802ms ago: executing program 1 (id=14515): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x228, 0x190, 0x190, 0x228, 0xc0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x640100fe, 0x17e7fffff, 0xff000000, 'veth1_virt_wifi\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x1d, 0x2, 0x51}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg0\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100, 0x11, 0x3]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x4, 0x2]}}}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0xff000000, 'nicvf0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x29, 0x3, 0x6a}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 869.400594ms ago: executing program 5 (id=14516): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000000)={0x1000, 0x9, 0xd, 0x7}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 794.770123ms ago: executing program 7 (id=14517): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x50) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=r1, @ANYRES32=r2], 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 676.426771ms ago: executing program 1 (id=14518): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000400)) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r8, 0x21, 0x70bd2f, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@FRA_SRC={0x8, 0x2, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x0) 538.990979ms ago: executing program 5 (id=14519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x12}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) 512.079971ms ago: executing program 7 (id=14520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, 0x3}, @l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000080)='veth0_virt_wifi\x00', 0x3, 0x3, 0x2}) 510.880484ms ago: executing program 6 (id=14521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r1 = socket$inet6(0xa, 0x800, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x20000}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) (rerun: 64) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x22}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x800) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000001001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000007c0)=0x1, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "85d6b1d93fe648d5", "6c748151b9d6f425d95008ffe08b3516b0dcd7b741139fa8a7939a4adece6282", "0dfa32e5", "3f00ac619913924b"}, 0x38) (async, rerun: 64) shutdown(r0, 0x1) (async) r7 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@rose, @null, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000080)=0x48, 0x80800) accept$netrom(r7, 0x0, &(0x7f0000000180)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r9, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x10, 0x4000001) (async) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async, rerun: 32) sendfile(r0, r8, 0x0, 0xffffffff004) (async, rerun: 32) close(0x3) 314.954524ms ago: executing program 5 (id=14522): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x20, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='vlan0\x00', 0x0, 0x1, 0x6}) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x28, 0x20, 0x1, 0x401}, &(0x7f0000000280)=0x18) 312.895032ms ago: executing program 7 (id=14523): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x1d8, 0x0, 0x38}, 0x8) close(r1) 273.828646ms ago: executing program 1 (id=14524): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1f000000000000000000000000800000000000007318618c6e7038e79fe8", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x1000000, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010841000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e200200000400000c334958368e850c002b8008000100c6f46dd471fea4518646340e18db517b7b855552f89c7eb868c9b88cbd9b240fa12cd83faf1506043c16e025c7e21530c4f9668c65e02aec7c5af4c31c210dc9e9e21271af1b840b67e4d565391d660463ef9a57dfea772c506d5eeaf5264a6882", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100"], 0x74}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 196.132856ms ago: executing program 6 (id=14525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4c22, 0x0, @empty, 0xfffffff8}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe49, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) listen(r0, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r10) 2.881374ms ago: executing program 7 (id=14526): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x15, 0x6, 0xfffffffd, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x7ff, 0xfffb, 0x8, 0x5, 0x3, [0xe, 0xff]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3b, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000000000}, 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipmr_delroute={0x1c, 0x19, 0x2, 0x70bd29, 0x25dfdbfe, {0x80, 0x0, 0x10, 0x1, 0xfd, 0x3, 0x0, 0x0, 0xc00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000057}, 0x4000) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000080)=""/132, &(0x7f0000000140)=0x84) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x15, 0x6, 0xfffffffd, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x7ff, 0xfffb, 0x8, 0x5, 0x3, [0xe, 0xff]}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3b, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000000000}, 0x48) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) getsockopt$llc_int(r2, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipmr_delroute={0x1c, 0x19, 0x2, 0x70bd29, 0x25dfdbfe, {0x80, 0x0, 0x10, 0x1, 0xfd, 0x3, 0x0, 0x0, 0xc00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000057}, 0x4000) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000080)=""/132, &(0x7f0000000140)=0x84) (async) 0s ago: executing program 5 (id=14527): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r1, 0x0, 0x0, 0x80800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000049a08e6d02930db2a85f945302d00c57b5a8d74781c87094757f2c529b8c15c33fbb1ef7fe5199559c54ca74161981ba8150b5ff336be0cecea5b2096938728458ee93a272c364ddf779f57af4a22e33706cc4e4f9a7b8e5e383a5dc02c14ae62c1dd2b0c6cdb99628904f", @ANYRES16=r3, @ANYBLOB="060427bd7000fddbdf250e000000340007800c00030001000000010000000c00030001000000000000000c00040003000000000000000c00030004000000000000000c0003800800020010000000"], 0x54}}, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r2, 0x0, 0x7fffffff}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x70, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x4}}]}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): T30] audit: type=1800 audit(1768176970.380:15): pid=18168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12496" name="memory.events" dev="tmpfs" ino=672 res=0 errno=0 [ 1512.889979][ T30] audit: type=1804 audit(1768176970.410:16): pid=18168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.12496" name="/newroot/128/memory.events" dev="tmpfs" ino=672 res=1 errno=0 [ 1513.234452][T18186] nbd: device at index 64 is going down [ 1513.274744][T18189] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1513.611282][T18197] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1513.670671][T18200] bridge0: port 1(wlan0) entered blocking state [ 1513.692285][T18200] bridge0: port 1(wlan0) entered disabled state [ 1513.740468][T18200] mac80211_hwsim hwsim103 wlan0: entered allmulticast mode [ 1513.803636][T18224] __nla_validate_parse: 12 callbacks suppressed [ 1513.803657][T18224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12506'. [ 1513.831396][T18200] mac80211_hwsim hwsim103 wlan0: entered promiscuous mode [ 1513.945317][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12510'. [ 1514.142469][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12514'. [ 1514.389520][T18254] netlink: 14736 bytes leftover after parsing attributes in process `syz.1.12515'. [ 1514.749226][T18272] syzkaller0: entered promiscuous mode [ 1514.754976][T18272] syzkaller0: entered allmulticast mode [ 1514.889722][T18273] block nbd10: server does not support multiple connections per device. [ 1514.908594][T18273] block nbd10: shutting down sockets [ 1514.915552][T18278] netlink: 'syz.7.12525': attribute type 1 has an invalid length. [ 1514.937922][T18278] netlink: 224 bytes leftover after parsing attributes in process `syz.7.12525'. [ 1514.965187][T18278] workqueue: Failed to create a rescuer kthread for wq "phy6-mac-cmds": -EINTR [ 1515.043085][T18293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1515.072730][T18293] netlink: 'syz.2.12527': attribute type 2 has an invalid length. [ 1515.114769][T18292] netlink: 'syz.5.12528': attribute type 4 has an invalid length. [ 1515.170697][T18296] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12530'. [ 1515.207368][T18296] netlink: 'syz.7.12530': attribute type 10 has an invalid length. [ 1515.243874][T18299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12531'. [ 1515.263819][T18296] team0: Device dummy0 is of different type [ 1515.266087][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12530'. [ 1515.340204][T18302] syzkaller1: entered promiscuous mode [ 1515.345856][T18302] syzkaller1: entered allmulticast mode [ 1515.850810][T18330] gre0: entered promiscuous mode [ 1515.855853][T18330] gre0: entered allmulticast mode [ 1515.936465][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12541'. [ 1516.037704][T18341] netlink: 'syz.6.12542': attribute type 5 has an invalid length. [ 1516.045746][T18341] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12542'. [ 1516.196283][T18344] syzkaller1: entered promiscuous mode [ 1516.213982][T18344] syzkaller1: entered allmulticast mode [ 1516.354493][T18356] syzkaller0: entered promiscuous mode [ 1516.378550][T18356] syzkaller0: entered allmulticast mode [ 1516.526759][T18370] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1516.827102][T18385] netlink: 'syz.2.12557': attribute type 1 has an invalid length. [ 1516.871861][T18396] No such timeout policy "syz0" [ 1516.905329][T18385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1516.975765][T18385] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1517.065787][T18385] bond4: entered allmulticast mode [ 1517.144069][T18388] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1517.285335][T18412] netlink: 'syz.5.12563': attribute type 7 has an invalid length. [ 1517.809539][T18448] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1518.474322][T18511] sctp: [Deprecated]: syz.2.12594 (pid 18511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1518.474322][T18511] Use struct sctp_sack_info instead [ 1519.056417][T18538] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1519.120136][T18534] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1519.128993][T18534] syzkaller1: linktype set to 823 [ 1519.303582][T18548] __nla_validate_parse: 13 callbacks suppressed [ 1519.303604][T18548] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12602'. [ 1519.402151][T18552] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.12603'. [ 1519.605892][T18566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1519.680936][T18568] C speed is unknown, defaulting to 1000 [ 1519.972191][T18581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12612'. [ 1520.029083][T18585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12615'. [ 1520.494585][T18611] xt_ecn: cannot match TCP bits for non-tcp packets [ 1520.617096][T18623] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12625'. [ 1520.685688][T18623] pim6reg: entered allmulticast mode [ 1520.863995][T18631] netlink: 232 bytes leftover after parsing attributes in process `syz.5.12627'. [ 1521.163520][T18568] wlan0 speed is unknown, defaulting to 1000 [ 1521.225317][T18648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1521.521637][T18660] netlink: 'syz.6.12640': attribute type 1 has an invalid length. [ 1521.894238][T18675] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.12644'. [ 1521.931131][T18675] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1521.969904][T18673] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1522.232835][T18692] erspan0: entered promiscuous mode [ 1522.246132][T18695] netlink: 7 bytes leftover after parsing attributes in process `syz.2.12650'. [ 1522.258789][T18692] vlan2: entered promiscuous mode [ 1522.403804][T18703] openvswitch: netlink: IP tunnel dst address not specified [ 1522.642278][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12656'. [ 1522.956313][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12660'. [ 1523.339742][T18735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1523.376485][T18735] dvmrp6: entered allmulticast mode [ 1523.546877][T18752] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 1523.599158][T18753] netlink: 'syz.7.12668': attribute type 10 has an invalid length. [ 1523.852053][T18769] IPv4: Oversized IP packet from 127.202.26.0 [ 1524.044348][T18774] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 1524.056608][T18774] bond11 (unregistering): Released all slaves [ 1524.111362][T18779] bond5: (slave vlan1): Opening slave failed [ 1524.173126][T18790] netlink: 'syz.1.12678': attribute type 83 has an invalid length. [ 1524.386894][T18801] __nla_validate_parse: 7 callbacks suppressed [ 1524.386917][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12681'. [ 1524.444454][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12681'. [ 1525.406621][T18858] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1525.450607][T18858] bond5: (slave lo): Enslaving as a backup interface with an up link [ 1525.463099][T18858] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1525.482324][T18862] netlink: 'syz.7.12701': attribute type 3 has an invalid length. [ 1525.491438][T18862] netlink: 766 bytes leftover after parsing attributes in process `syz.7.12701'. [ 1525.864660][T18868] team0 (unregistering): Port device ip6gre1 removed [ 1525.920960][T18868] team0 (unregistering): Port device ip6gre2 removed [ 1526.112771][T18900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12713'. [ 1526.385900][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12719'. [ 1526.400496][T18923] netlink: 'syz.6.12716': attribute type 1 has an invalid length. [ 1526.668402][T18934] netlink: 'syz.2.12723': attribute type 2 has an invalid length. [ 1526.721127][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1526.739384][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1526.756148][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1526.765366][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1526.773654][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1526.831351][T18935] C speed is unknown, defaulting to 1000 [ 1526.841091][T18940] x_tables: duplicate underflow at hook 1 [ 1527.012330][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1527.061097][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1527.099858][T18945] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1527.154351][T18945] netlink: 404 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1527.546354][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12732'. [ 1527.652684][T18967] netlink: 'syz.5.12735': attribute type 11 has an invalid length. [ 1527.847224][T18935] wlan0 speed is unknown, defaulting to 1000 [ 1528.084021][T18980] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1528.294227][T18935] chnl_net:caif_netlink_parms(): no params data found [ 1528.411803][T18996] bridge0: port 3(batadv3) entered blocking state [ 1528.429788][T18996] bridge0: port 3(batadv3) entered disabled state [ 1528.446766][T18996] batadv3: entered allmulticast mode [ 1528.457745][T18996] batadv3: entered promiscuous mode [ 1528.661776][T18935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.695235][T18935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.704205][T18935] bridge_slave_0: entered allmulticast mode [ 1528.714253][T18935] bridge_slave_0: entered promiscuous mode [ 1528.753434][T18935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.764242][T18935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.772803][T18935] bridge_slave_1: entered allmulticast mode [ 1528.817154][T18935] bridge_slave_1: entered promiscuous mode [ 1528.870838][ T52] Bluetooth: hci1: command tx timeout [ 1528.898372][T17779] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1528.907685][T17779] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1528.971467][T18935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.985555][T18935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.105605][T18935] team0: Port device team_slave_0 added [ 1529.145119][T18935] team0: Port device team_slave_1 added [ 1529.280573][T18935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.287733][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.315058][T18935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.346037][T18935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.354717][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.406330][T18935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.431204][T19051] __nla_validate_parse: 4 callbacks suppressed [ 1529.431225][T19051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12759'. [ 1529.451051][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12758'. [ 1529.508659][T19048] syzkaller1: entered promiscuous mode [ 1529.514262][T19048] syzkaller1: entered allmulticast mode [ 1529.687479][T18935] hsr_slave_0: entered promiscuous mode [ 1529.699156][T18935] hsr_slave_1: entered promiscuous mode [ 1529.706335][T18935] debugfs: 'hsr0' already exists in 'hsr' [ 1529.713985][T18935] Cannot create hsr debugfs directory [ 1529.791054][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12763'. [ 1529.792003][T19066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12762'. [ 1529.835693][T19068] veth15: entered promiscuous mode [ 1529.841369][T19068] veth15: entered allmulticast mode [ 1530.078511][T19079] netlink: 'syz.2.12766': attribute type 16 has an invalid length. [ 1530.120090][T19079] netlink: 'syz.2.12766': attribute type 17 has an invalid length. [ 1530.226478][T18935] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.264919][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12769'. [ 1530.356024][T19079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.372932][T19079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.393060][T19079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1530.552558][T18935] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.582716][T19103] tc_dump_action: action bad kind [ 1530.662492][T18935] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.681281][T19110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12772'. [ 1530.784754][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12775'. [ 1530.809973][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12775'. [ 1530.900980][T18935] netdevsim netdevsim7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.947071][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12779'. [ 1530.962136][ T52] Bluetooth: hci1: command tx timeout [ 1531.290040][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12782'. [ 1531.359123][T18935] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1531.417390][T18935] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1531.455296][T18935] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1531.486742][T18935] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1531.619924][T19172] netlink: 'syz.2.12786': attribute type 4 has an invalid length. [ 1531.628923][ T30] audit: type=1800 audit(1768176989.180:17): pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12786" name="memory.events" dev="tmpfs" ino=1276 res=0 errno=0 [ 1531.670161][T19151] netlink: 'syz.2.12786': attribute type 4 has an invalid length. [ 1531.742140][ T30] audit: type=1804 audit(1768176989.180:18): pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.12786" name="/newroot/247/memory.events" dev="tmpfs" ino=1276 res=1 errno=0 [ 1531.917015][T19179] netlink: 'syz.1.12794': attribute type 11 has an invalid length. [ 1531.976960][T18935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.116161][T18935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.192305][T10450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.199573][T10450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.241198][T21667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.248525][T21667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.017410][T18935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.029607][ T52] Bluetooth: hci1: command tx timeout [ 1533.408349][T19268] netlink: 'syz.5.12813': attribute type 2 has an invalid length. [ 1533.577476][T18935] veth0_vlan: entered promiscuous mode [ 1533.612893][T18935] veth1_vlan: entered promiscuous mode [ 1533.731110][T18935] veth0_macvtap: entered promiscuous mode [ 1533.760807][T18935] veth1_macvtap: entered promiscuous mode [ 1533.789516][T18935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.832569][T18935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.883683][T17706] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.920598][T17706] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.973709][T17706] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.992442][T17706] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.330177][T19299] C speed is unknown, defaulting to 1000 [ 1534.336101][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.370457][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.519390][ T7394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.527550][ T7394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.620970][T19315] __nla_validate_parse: 46 callbacks suppressed [ 1534.623812][T19315] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12828'. [ 1534.685336][T19316] : entered promiscuous mode [ 1534.853199][T19321] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1534.989577][T19327] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1535.110450][ T52] Bluetooth: hci1: command tx timeout [ 1535.279157][T19337] netlink: 'syz.7.12834': attribute type 2 has an invalid length. [ 1535.521154][T19299] wlan0 speed is unknown, defaulting to 1000 [ 1535.829156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.014498][T19369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12846'. [ 1536.094021][T19369] netlink: 'syz.5.12846': attribute type 21 has an invalid length. [ 1536.110807][T19369] IPv6: NLM_F_CREATE should be specified when creating new route [ 1536.132947][T19369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1536.140267][T19369] IPv6: NLM_F_CREATE should be set when creating new route [ 1536.147620][T19369] IPv6: NLM_F_CREATE should be set when creating new route [ 1536.154906][T19369] IPv6: NLM_F_CREATE should be set when creating new route [ 1536.166355][T19375] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12848'. [ 1536.195594][T19375] nbd: socks must be embedded in a SOCK_ITEM attr [ 1536.415097][T19384] netlink: 'syz.7.12850': attribute type 2 has an invalid length. [ 1536.628933][T19386] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12851'. [ 1536.647189][T19398] netlink: 'syz.5.12853': attribute type 17 has an invalid length. [ 1536.668572][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12853'. [ 1536.679801][T19396] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1536.725784][T19398] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12853'. [ 1536.760574][T19400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12853'. [ 1536.977705][T19411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12858'. [ 1537.023629][T19415] netlink: 272 bytes leftover after parsing attributes in process `syz.7.12860'. [ 1537.383032][T19436] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1537.421773][T19436] bond8 (unregistering): Released all slaves [ 1537.569111][T19450] team0: Device ip6gre1 is of different type [ 1537.822182][T19463] netlink: 'syz.2.12873': attribute type 4 has an invalid length. [ 1537.879591][T19463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1538.008632][T19471] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12875'. [ 1538.009492][T19473] tipc: Enabling of bearer rejected, failed to enable media [ 1538.073226][T19472] netlink: 'syz.5.12875': attribute type 3 has an invalid length. [ 1538.111888][T19481] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1538.586365][T19518] xt_ecn: cannot match TCP bits for non-tcp packets [ 1538.646725][T19522] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20000 [ 1538.913473][T19539] netlink: 'syz.1.12895': attribute type 21 has an invalid length. [ 1538.933314][T19539] IPv6: NLM_F_CREATE should be specified when creating new route [ 1539.085404][T19548] team0: Device ip6gre1 is of different type [ 1539.315799][T19562] netlink: 'syz.1.12905': attribute type 21 has an invalid length. [ 1539.353343][T19563] netlink: 'syz.6.12904': attribute type 1 has an invalid length. [ 1539.369754][T19567] netlink: 'syz.1.12905': attribute type 21 has an invalid length. [ 1539.491983][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077a6ac00: rx timeout, send abort [ 1539.709159][T19587] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1539.732054][T19593] __nla_validate_parse: 6 callbacks suppressed [ 1539.732079][T19593] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.12912'. [ 1539.854307][T19600] netlink: 'syz.6.12914': attribute type 29 has an invalid length. [ 1539.863489][T19600] netlink: 'syz.6.12914': attribute type 29 has an invalid length. [ 1539.893138][T19600] netlink: 500 bytes leftover after parsing attributes in process `syz.6.12914'. [ 1539.950114][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12913'. [ 1539.992109][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046e20c00: rx timeout, send abort [ 1540.001681][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077a6ac00: abort rx timeout. Force session deactivation [ 1540.317604][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12922'. [ 1540.345962][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12922'. [ 1540.360599][T19630] netlink: 'syz.7.12922': attribute type 1 has an invalid length. [ 1540.368740][T19630] netlink: 224 bytes leftover after parsing attributes in process `syz.7.12922'. [ 1540.500439][ C0] vcan0: j1939_tp_rxtimer: 0xffff888046e20c00: abort rx timeout. Force session deactivation [ 1540.662759][T19643] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12927'. [ 1540.738491][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12929'. [ 1540.790111][T19633] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12923'. [ 1540.895683][T19653] pim6reg: entered allmulticast mode [ 1540.925204][T19653] pim6reg: left allmulticast mode [ 1541.051763][T19658] syzkaller0: entered promiscuous mode [ 1541.078898][T19658] syzkaller0: entered allmulticast mode [ 1541.163885][T19669] delete_channel: no stack [ 1541.168980][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12937'. [ 1541.627303][T19700] netlink: 'syz.2.12946': attribute type 2 has an invalid length. [ 1542.041752][T19728] bond0: entered allmulticast mode [ 1542.047047][T19728] bond_slave_0: entered allmulticast mode [ 1542.053409][T19728] bond_slave_1: entered allmulticast mode [ 1542.114618][T19731] Cannot find set identified by id 0 to match [ 1542.202285][T19734] netlink: 'syz.7.12954': attribute type 8 has an invalid length. [ 1542.265016][T19734] bond0: entered promiscuous mode [ 1542.278431][T19734] bond_slave_0: entered promiscuous mode [ 1542.295952][T19734] bond_slave_1: entered promiscuous mode [ 1542.327350][T19734] gretap0: entered promiscuous mode [ 1542.357427][T19734] veth0: entered promiscuous mode [ 1542.373857][T19734] debugfs: 'hsr1' already exists in 'hsr' [ 1542.385577][T19734] Cannot create hsr debugfs directory [ 1542.394511][T19734] hsr1: entered promiscuous mode [ 1542.739606][T19768] netlink: 'syz.6.12965': attribute type 29 has an invalid length. [ 1542.874508][T19768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1543.296870][T19810] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1543.853328][T19838] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1544.349353][T19880] dvmrp0: entered allmulticast mode [ 1544.494508][T19885] sctp: [Deprecated]: syz.1.13001 (pid 19885) Use of int in max_burst socket option. [ 1544.494508][T19885] Use struct sctp_assoc_value instead [ 1544.535687][T19888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1544.641060][T19891] validate_nla: 3 callbacks suppressed [ 1544.641081][T19891] netlink: 'syz.5.13003': attribute type 1 has an invalid length. [ 1544.745140][T19897] netlink: 'syz.2.13005': attribute type 9 has an invalid length. [ 1544.778815][T19897] netlink: 'syz.2.13005': attribute type 11 has an invalid length. [ 1544.811069][T19897] netlink: 'syz.2.13005': attribute type 12 has an invalid length. [ 1544.842042][T19897] __nla_validate_parse: 45 callbacks suppressed [ 1544.842063][T19897] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.13005'. [ 1544.888795][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13005'. [ 1544.964792][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13012'. [ 1545.136756][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13014'. [ 1545.169433][T19925] C speed is unknown, defaulting to 1000 [ 1545.189653][T19932] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13015'. [ 1545.222391][T19932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13015'. [ 1545.311310][T19937] netlink: 'syz.6.13017': attribute type 27 has an invalid length. [ 1545.524995][T19944] netlink: 596 bytes leftover after parsing attributes in process `syz.2.13019'. [ 1545.793210][T19953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13023'. [ 1545.903236][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13024'. [ 1545.931250][T19961] netlink: 19 bytes leftover after parsing attributes in process `syz.7.13024'. [ 1546.045755][T19963] bond2: Invalid ad_actor_system MAC address. [ 1546.067003][T19963] bond2: option ad_actor_system: invalid value (1) [ 1546.132841][T19963] bond2 (unregistering): Released all slaves [ 1546.170292][T19925] wlan0 speed is unknown, defaulting to 1000 [ 1546.204667][T19980] netlink: 'syz.6.13032': attribute type 3 has an invalid length. [ 1546.225368][T19980] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1546.317366][T19977] C speed is unknown, defaulting to 1000 [ 1546.550055][T19987] netlink: 'syz.1.13033': attribute type 3 has an invalid length. [ 1546.826566][T19998] team1: entered promiscuous mode [ 1546.832548][T19998] team1: entered allmulticast mode [ 1547.131679][T20015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1547.216000][T19977] wlan0 speed is unknown, defaulting to 1000 [ 1547.320193][T20021] netlink: 'syz.6.13047': attribute type 2 has an invalid length. [ 1547.420220][T20024] tipc: Started in network mode [ 1547.425143][T20024] tipc: Node identity , cluster identity 4711 [ 1547.432826][T20024] tipc: Failed to obtain node identity [ 1547.438564][T20024] tipc: Enabling of bearer rejected, failed to enable media [ 1547.533571][T20024] syzkaller0: entered promiscuous mode [ 1547.539330][T20024] syzkaller0: entered allmulticast mode [ 1547.705669][T20024] netlink: 'syz.7.13046': attribute type 6 has an invalid length. [ 1547.744046][T20024] netlink: 'syz.7.13046': attribute type 5 has an invalid length. [ 1550.366498][T20055] __nla_validate_parse: 11 callbacks suppressed [ 1550.366521][T20055] netlink: 128 bytes leftover after parsing attributes in process `syz.7.13056'. [ 1550.531760][T20070] validate_nla: 2 callbacks suppressed [ 1550.531780][T20070] netlink: 'syz.6.13062': attribute type 1 has an invalid length. [ 1550.671534][T20088] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13064'. [ 1550.699097][T20070] netlink: 'syz.6.13062': attribute type 5 has an invalid length. [ 1550.720654][T20089] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1550.761817][T20089] bond8: (slave bond9): making interface the new active one [ 1550.783693][T20089] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1550.805121][T20099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13062'. [ 1550.979164][T20103] xt_HMARK: spi-set and port-set can't be combined [ 1551.053450][T20115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1551.350013][T20133] IPVS: Error connecting to the multicast addr [ 1551.527595][T20148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13080'. [ 1551.546770][T20148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13080'. [ 1551.556773][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13080'. [ 1618.054163][T20171] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13087'. [ 1618.077042][T20164] pim6reg527: entered allmulticast mode [ 1618.211418][T20179] Unsupported ieee802154 address type: 0 [ 1618.239549][T20179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1618.394135][T20192] netlink: 'syz.6.13092': attribute type 39 has an invalid length. [ 1618.413127][T20195] netlink: 'syz.6.13092': attribute type 4 has an invalid length. [ 1618.430712][T20195] netlink: 17 bytes leftover after parsing attributes in process `syz.6.13092'. [ 1618.431014][T20197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13090'. [ 1618.471891][T20187] bond12 (unregistering): Released all slaves [ 1618.511439][T20198] can: request_module (can-proto-0) failed. [ 1618.797179][T20217] openvswitch: netlink: Missing valid actions attribute. [ 1618.805244][T20217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1619.006439][T20224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13103'. [ 1619.042990][T20229] netlink: 'syz.7.13105': attribute type 10 has an invalid length. [ 1619.058757][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13103'. [ 1619.080382][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13103'. [ 1619.105225][T20227] syzkaller0: entered promiscuous mode [ 1619.118144][T20227] syzkaller0: entered allmulticast mode [ 1619.209084][T20233] netlink: 'syz.1.13102': attribute type 15 has an invalid length. [ 1619.237480][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13102'. [ 1619.238856][T20238] netlink: 'syz.7.13107': attribute type 16 has an invalid length. [ 1619.278553][T20238] netlink: 'syz.7.13107': attribute type 3 has an invalid length. [ 1619.296868][T20238] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13107'. [ 1619.325245][ T7103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1619.356708][ T7103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1619.464063][ T7103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1619.532201][ T7103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1619.635529][T20262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1619.642914][T20262] IPv6: NLM_F_CREATE should be set when creating new route [ 1619.650241][T20262] IPv6: NLM_F_CREATE should be set when creating new route [ 1619.657481][T20262] IPv6: NLM_F_CREATE should be set when creating new route [ 1619.676293][T20262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1619.683974][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13113'. [ 1619.811987][T20268] netlink: 'syz.7.13117': attribute type 1 has an invalid length. [ 1619.821763][T20268] netlink: 'syz.7.13117': attribute type 3 has an invalid length. [ 1619.830117][T20268] netlink: 172 bytes leftover after parsing attributes in process `syz.7.13117'. [ 1619.841307][T20268] NCSI netlink: No device for ifindex 813332851 [ 1620.441247][T20299] netlink: 'syz.2.13125': attribute type 1 has an invalid length. [ 1620.497516][T20298] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1620.516623][T20298] bond6 (unregistering): Released all slaves [ 1620.551780][T20292] hsr_slave_0: left promiscuous mode [ 1620.564698][T20292] hsr_slave_1: left promiscuous mode [ 1620.654696][T20299] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1620.819488][T20316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1621.026848][T20334] netlink: 'syz.2.13137': attribute type 12 has an invalid length. [ 1621.089233][T20332] nbd10: detected capacity change from 0 to 127 [ 1621.103024][T20334] bond6: option primary_reselect: invalid value (255) [ 1621.113302][ T52] block nbd10: Receive control failed (result -32) [ 1621.141502][T20334] bond6 (unregistering): Released all slaves [ 1621.577332][T20364] bridge_slave_1: left allmulticast mode [ 1621.584397][T20364] bridge_slave_1: left promiscuous mode [ 1621.592266][T20364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.603283][T20364] bridge_slave_0: left allmulticast mode [ 1621.609292][T20364] bridge_slave_0: left promiscuous mode [ 1621.615240][T20364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.775866][T20362] bond2: entered promiscuous mode [ 1621.784115][T20362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1621.905529][T20376] bond2: (slave xfrm1): refused to change device type [ 1623.205898][T20445] __nla_validate_parse: 14 callbacks suppressed [ 1623.205919][T20445] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13169'. [ 1623.226451][T20446] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13169'. [ 1623.560181][T20459] netlink: 'syz.5.13174': attribute type 1 has an invalid length. [ 1623.593141][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13174'. [ 1623.723074][T20467] netlink: 52 bytes leftover after parsing attributes in process `syz.7.13179'. [ 1623.827205][T20472] netlink: 'syz.1.13181': attribute type 1 has an invalid length. [ 1623.858183][T20472] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13181'. [ 1623.869763][ T4049] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1623.893043][ T4049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1623.902052][ T4049] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1623.912543][ T4049] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1623.921835][ T4049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1623.954295][T20476] syzkaller1: entered promiscuous mode [ 1623.971650][T20479] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.13182'. [ 1623.981669][T20479] openvswitch: netlink: Flow actions attr not present in new flow. [ 1624.009552][T20476] syzkaller1: entered allmulticast mode [ 1624.081041][T20474] C speed is unknown, defaulting to 1000 [ 1624.376017][T20492] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13186'. [ 1624.659444][T20500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1624.667579][T20500] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1624.712886][T20500] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1625.091131][T20474] wlan0 speed is unknown, defaulting to 1000 [ 1625.254173][T20544] netlink: 'syz.7.13200': attribute type 27 has an invalid length. [ 1625.267174][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13198'. [ 1625.278826][T20540] netlink: 'syz.7.13200': attribute type 7 has an invalid length. [ 1625.423495][T20552] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13203'. [ 1625.607403][T20474] chnl_net:caif_netlink_parms(): no params data found [ 1625.772573][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13207'. [ 1625.985987][T20474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.994344][ T52] Bluetooth: hci5: command tx timeout [ 1626.004242][T20474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.012406][T20474] bridge_slave_0: entered allmulticast mode [ 1626.022283][T20474] bridge_slave_0: entered promiscuous mode [ 1626.052102][T20474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.063688][T20474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.076748][T20474] bridge_slave_1: entered allmulticast mode [ 1626.085249][T20474] bridge_slave_1: entered promiscuous mode [ 1626.099650][T20590] erspan0: entered allmulticast mode [ 1626.151144][T20592] netlink: 'syz.5.13214': attribute type 11 has an invalid length. [ 1626.189919][T20474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.199919][T20592] netlink: 'syz.5.13214': attribute type 11 has an invalid length. [ 1626.209526][T20590] sctp: [Deprecated]: syz.7.13213 (pid 20590) Use of int in maxseg socket option. [ 1626.209526][T20590] Use struct sctp_assoc_value instead [ 1626.223663][T20474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.352429][T20474] team0: Port device team_slave_0 added [ 1626.363564][T20474] team0: Port device team_slave_1 added [ 1626.462016][T20474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.470945][T20474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.497759][T20474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.511500][T20474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.518536][T20474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.544872][T20474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.616828][T20614] netlink: 'syz.7.13219': attribute type 4 has an invalid length. [ 1626.626957][T20613] netlink: 'syz.7.13219': attribute type 4 has an invalid length. [ 1626.646503][T20474] hsr_slave_0: entered promiscuous mode [ 1626.653880][T20474] hsr_slave_1: entered promiscuous mode [ 1626.661505][T20474] debugfs: 'hsr0' already exists in 'hsr' [ 1626.668666][T20616] netlink: 'syz.7.13219': attribute type 4 has an invalid length. [ 1626.676574][T20474] Cannot create hsr debugfs directory [ 1626.864295][T20350] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1626.878990][T20350] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1626.905025][T20350] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1626.914766][T20350] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1627.015384][T20621] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1627.027050][T20621] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1627.040298][T20621] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.205608][T20621] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1627.226557][T20621] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1627.239949][T20621] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.298845][T20645] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1627.310529][T20645] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1627.325415][T20645] gretap1: entered promiscuous mode [ 1627.330718][T20645] gretap1: entered allmulticast mode [ 1627.399613][T20621] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1627.411076][T20621] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1627.422038][T20621] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.538916][T20474] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1627.549709][T20474] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.561373][T20474] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1627.638857][T20621] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1627.649859][T20621] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1627.660886][T20621] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.727206][T20474] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1627.738757][T20474] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.749545][T20474] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1627.855720][T20474] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1627.867122][T20474] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.878950][T20474] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1628.003539][T20474] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.014643][T20474] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.029126][T20474] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1628.068164][ T4049] Bluetooth: hci5: command tx timeout [ 1628.107262][T25227] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1628.131113][T25227] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1628.169190][T25227] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.230191][T25227] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1628.262293][T25227] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1628.277844][T25227] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.550874][ T3559] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1628.566483][ T3559] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1628.619607][ T3559] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.677311][ T3559] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1628.695981][ T3559] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1628.718527][ T3559] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.897618][T20474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1628.971499][T20474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1628.994622][T20679] __nla_validate_parse: 8 callbacks suppressed [ 1628.994642][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13238'. [ 1629.013702][T20681] netlink: 412 bytes leftover after parsing attributes in process `syz.7.13239'. [ 1629.124225][T20676] syzkaller0: entered promiscuous mode [ 1629.130314][T20676] syzkaller0: entered allmulticast mode [ 1629.139903][T20474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1629.533422][T20703] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13245'. [ 1629.548029][T20704] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13245'. [ 1630.071195][ T4049] Bluetooth: hci2: command 0x0406 tx timeout [ 1630.148163][ T52] Bluetooth: hci5: command tx timeout [ 1631.294338][T20474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1631.306593][T20691] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1631.525469][T20720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1631.582145][T20474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.609508][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13248'. [ 1631.654504][T20474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.700868][T19322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.708109][T19322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.721516][T19322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.728786][T19322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.759428][T20729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1631.839288][T20729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1632.150040][T20748] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13254'. [ 1632.229216][ T52] Bluetooth: hci5: command tx timeout [ 1632.323142][T20474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.477991][T20759] team_slave_0: entered promiscuous mode [ 1632.483748][T20759] team_slave_1: entered promiscuous mode [ 1632.501085][T20765] netlink: 'syz.5.13259': attribute type 2 has an invalid length. [ 1632.527514][T20759] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1632.536908][T20759] team0: Device macvtap1 is already an upper device of the team interface [ 1632.554910][T20759] team_slave_0: left promiscuous mode [ 1632.562255][T20759] team_slave_1: left promiscuous mode [ 1632.655035][T20765] 9: entered promiscuous mode [ 1632.834052][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13261'. [ 1632.916439][T20791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13263'. [ 1632.950833][T20784] macvtap1: entered promiscuous mode [ 1632.958691][T20784] macvtap1: entered allmulticast mode [ 1633.296834][T20805] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1633.369356][T20805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13267'. [ 1633.461095][T20474] veth0_vlan: entered promiscuous mode [ 1633.503307][T20474] veth1_vlan: entered promiscuous mode [ 1633.683909][T20803] syzkaller0: entered promiscuous mode [ 1633.699998][T20803] syzkaller0: entered allmulticast mode [ 1633.709576][T20815] syzkaller0: entered promiscuous mode [ 1633.715532][T20815] syzkaller0: entered allmulticast mode [ 1633.807524][T20827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13273'. [ 1633.809742][T20825] netlink: 'syz.5.13272': attribute type 10 has an invalid length. [ 1635.970380][T20474] veth0_macvtap: entered promiscuous mode [ 1636.004677][T20831] : entered promiscuous mode [ 1636.019907][T20839] syzkaller1: entered promiscuous mode [ 1636.027578][T20839] syzkaller1: entered allmulticast mode [ 1636.127210][T20856] ip6t_REJECT: ECHOREPLY is not supported [ 1636.142370][T20856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1636.247203][T20474] veth1_macvtap: entered promiscuous mode [ 1636.283260][T20861] batadv1: entered allmulticast mode [ 1636.315102][T20863] __nla_validate_parse: 1 callbacks suppressed [ 1636.315133][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13280'. [ 1636.410157][T20474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.424465][T20474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1636.444696][T25223] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.489735][T25223] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.520774][T25223] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.553870][T25223] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.587472][T20869] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1636.597543][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13284'. [ 1636.972447][T20894] x_tables: duplicate underflow at hook 1 [ 1637.023445][T21667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.045566][T20891] ip6gre1: entered allmulticast mode [ 1637.048924][T21667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.310526][ T7006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.333142][ T7006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.600618][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13175'. [ 1637.644366][T20914] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13175'. [ 1638.175459][T20943] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13303'. [ 1638.229648][T20947] netlink: 'syz.2.13305': attribute type 1 has an invalid length. [ 1638.305622][T20951] netlink: 'syz.7.13306': attribute type 23 has an invalid length. [ 1638.372335][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13305'. [ 1638.373491][T20953] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1638.394990][T20953] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1638.406024][T20953] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1638.567014][T20956] xfrm1: entered allmulticast mode [ 1638.599647][T20963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1638.615624][T20963] netlink: 'syz.1.13309': attribute type 2 has an invalid length. [ 1638.774848][ T4049] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1638.793763][ T4049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1638.807160][ T4049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1638.819644][ T4049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1638.827509][ T4049] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1638.906279][T20966] C speed is unknown, defaulting to 1000 [ 1638.916692][T20972] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1638.981443][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13310'. [ 1639.029174][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13310'. [ 1639.414399][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13317'. [ 1639.435592][T20994] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13317'. [ 1639.576517][T20995] C speed is unknown, defaulting to 1000 [ 1639.867569][T20966] wlan0 speed is unknown, defaulting to 1000 [ 1640.443643][T21031] netlink: 'syz.2.13327': attribute type 39 has an invalid length. [ 1640.527178][T21033] x_tables: duplicate underflow at hook 4 [ 1640.554317][T20966] chnl_net:caif_netlink_parms(): no params data found [ 1640.594612][ T52] block nbd11: Receive control failed (result -32) [ 1640.682274][T21037] netlink: 'syz.1.13330': attribute type 23 has an invalid length. [ 1640.749594][T20995] wlan0 speed is unknown, defaulting to 1000 [ 1640.872119][ T52] Bluetooth: hci4: command tx timeout [ 1641.040711][T20966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.059207][T20966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.077115][T20966] bridge_slave_0: entered allmulticast mode [ 1641.098227][T20966] bridge_slave_0: entered promiscuous mode [ 1641.204986][T20966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.217617][T20966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.226855][T20966] bridge_slave_1: entered allmulticast mode [ 1641.235276][T20966] bridge_slave_1: entered promiscuous mode [ 1641.387478][T20966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.456732][T20966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.674733][T21073] netlink: 'syz.7.13340': attribute type 3 has an invalid length. [ 1641.701457][T21070] veth3: entered allmulticast mode [ 1641.845974][T20966] team0: Port device team_slave_0 added [ 1641.930396][T20966] team0: Port device team_slave_1 added [ 1642.091929][T20966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.099485][T20966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.129000][T20966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.162666][T20966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.170525][T20966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.223787][T20966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.352259][T21087] veth0: entered promiscuous mode [ 1642.377495][T20966] hsr_slave_0: entered promiscuous mode [ 1642.410562][T20966] hsr_slave_1: entered promiscuous mode [ 1642.431786][T20966] debugfs: 'hsr0' already exists in 'hsr' [ 1642.437612][T20966] Cannot create hsr debugfs directory [ 1642.484799][T21087] veth0: left promiscuous mode [ 1642.494212][T21086] siw: device registration error -23 [ 1642.633277][T21102] __nla_validate_parse: 4 callbacks suppressed [ 1642.633297][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13349'. [ 1642.672633][T21105] netlink: 'syz.7.13352': attribute type 1 has an invalid length. [ 1642.690144][T21100] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1642.722630][T21105] netlink: 280 bytes leftover after parsing attributes in process `syz.7.13352'. [ 1642.811201][T21112] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1642.822675][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13354'. [ 1642.835196][T21102] bond7: Invalid ad_actor_system MAC address. [ 1642.841586][T21102] bond7: option ad_actor_system: invalid value (1) [ 1642.852480][T21102] bond7 (unregistering): Released all slaves [ 1642.861880][T21112] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13353'. [ 1642.916394][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13353'. [ 1642.953456][ T52] Bluetooth: hci4: command tx timeout [ 1643.152599][T21112] team0: Port device team_slave_0 removed [ 1643.286123][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13359'. [ 1643.441812][T21122] syzkaller0: entered promiscuous mode [ 1643.447426][T21122] syzkaller0: entered allmulticast mode [ 1643.533587][T21138] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13360'. [ 1643.546520][T21141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1643.847008][T21156] block nbd12: Unsupported socket: should be TCP or UNIX. [ 1645.028431][ T52] Bluetooth: hci4: command tx timeout [ 1646.204335][T21186] netlink: 44 bytes leftover after parsing attributes in process `syz.7.13376'. [ 1646.269393][T21173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.277225][T21173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.306518][T27003] IPVS: starting estimator thread 0... [ 1646.352220][T21188] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1646.404193][T21188] bond3: (slave lo): Enslaving as a backup interface with an up link [ 1646.413190][T21192] IPVS: using max 39 ests per chain, 93600 per kthread [ 1646.423169][T21188] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1646.441422][T21194] xt_time: unknown flags 0xf4 [ 1646.540359][T21185] syzkaller0: entered promiscuous mode [ 1646.545909][T21185] syzkaller0: entered allmulticast mode [ 1646.650639][T20966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1646.982113][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13383'. [ 1647.003097][T21220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13385'. [ 1647.113275][ T52] Bluetooth: hci4: command tx timeout [ 1648.939106][T20966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1649.041182][T20966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1649.109550][T20966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1649.203714][T21236] netlink: 'syz.1.13387': attribute type 21 has an invalid length. [ 1649.212890][T21236] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13387'. [ 1649.424452][T20966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.474053][T20966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.502655][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.509874][ T6589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.560137][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.567378][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.789901][T21269] netlink: 'syz.6.13394': attribute type 33 has an invalid length. [ 1649.809259][T21269] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13394'. [ 1649.932339][T21273] vlan0: entered promiscuous mode [ 1649.937441][T21273] bridge0: entered promiscuous mode [ 1649.944200][T21274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13395'. [ 1650.136298][T21284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13397'. [ 1650.190183][T21286] netlink: 'syz.2.13398': attribute type 10 has an invalid length. [ 1650.203199][T20966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.209693][T21286] netlink: 'syz.2.13398': attribute type 1 has an invalid length. [ 1650.452116][T21291] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1650.471447][T21296] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13399'. [ 1650.534012][T21291] bond7: (slave lo): Enslaving as a backup interface with an up link [ 1650.594167][T21291] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1650.975212][T21322] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1651.131993][T20966] veth0_vlan: entered promiscuous mode [ 1651.174269][T20966] veth1_vlan: entered promiscuous mode [ 1651.193318][T21329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1651.213821][T21329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1651.270355][T20966] veth0_macvtap: entered promiscuous mode [ 1651.301783][T20966] veth1_macvtap: entered promiscuous mode [ 1651.374554][T20966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1651.414912][T20966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1651.465965][ T4871] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.492115][ T4871] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.502322][T21346] netlink: 9 bytes leftover after parsing attributes in process `syz.6.13413'. [ 1651.523207][ T4871] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.569652][T21353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13413'. [ 1651.596567][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13413'. [ 1651.666045][ T4871] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.701806][T21354] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1651.711388][T21360] netlink: 'syz.2.13416': attribute type 1 has an invalid length. [ 1651.719286][T21354] team0: Port device batadv1 added [ 1651.733162][T21353] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1651.742869][T21353] team0: Port device batadv2 added [ 1651.792556][T21360] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1651.865398][T21360] netlink: 'syz.2.13416': attribute type 1 has an invalid length. [ 1651.934354][T21364] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1651.942544][T21364] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1651.955616][T21364] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 1652.156734][T21364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13416'. [ 1652.212322][T21371] bond9 (unregistering): Released all slaves [ 1652.331579][T21360] bond8: (slave gretap2): making interface the new active one [ 1652.355913][T21360] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1652.366616][T21375] mac80211_hwsim hwsim126 wlan0: entered promiscuous mode [ 1652.390727][T21375] bond8: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1652.723184][T21667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.752394][T21411] syz.1.13426: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1652.753604][T21667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.798827][T21411] CPU: 0 UID: 0 PID: 21411 Comm: syz.1.13426 Not tainted syzkaller #0 PREEMPT(full) [ 1652.798880][T21411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1652.798897][T21411] Call Trace: [ 1652.798907][T21411] [ 1652.798919][T21411] dump_stack_lvl+0xe8/0x150 [ 1652.798962][T21411] warn_alloc+0x214/0x310 [ 1652.799001][T21411] ? stack_trace_save+0x9c/0xe0 [ 1652.799042][T21411] ? __pfx_warn_alloc+0x10/0x10 [ 1652.799075][T21411] ? kasan_save_track+0x4f/0x80 [ 1652.799097][T21411] ? kasan_save_track+0x3e/0x80 [ 1652.799118][T21411] ? __kasan_kmalloc+0x93/0xb0 [ 1652.799141][T21411] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1652.799163][T21411] ? xskq_create+0x56/0x170 [ 1652.799197][T21411] ? xsk_setsockopt+0x4dc/0x8d0 [ 1652.799226][T21411] ? do_sock_setsockopt+0x17c/0x1b0 [ 1652.799251][T21411] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1652.799276][T21411] ? do_syscall_64+0xec/0xf80 [ 1652.799304][T21411] __vmalloc_node_range_noprof+0x134/0x16a0 [ 1652.799365][T21411] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1652.799397][T21411] ? __kasan_kmalloc+0x93/0xb0 [ 1652.799429][T21411] vmalloc_user_noprof+0xad/0xf0 [ 1652.799452][T21411] ? xskq_create+0xbf/0x170 [ 1652.799487][T21411] xskq_create+0xbf/0x170 [ 1652.799526][T21411] xsk_init_queue+0xb0/0x110 [ 1652.799562][T21411] xsk_setsockopt+0x4dc/0x8d0 [ 1652.799598][T21411] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1652.799631][T21411] ? __pfx_aa_sk_perm+0x10/0x10 [ 1652.799664][T21411] ? aa_sock_opt_perm+0xff/0x1a0 [ 1652.799698][T21411] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1652.799720][T21411] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1652.799754][T21411] do_sock_setsockopt+0x17c/0x1b0 [ 1652.799786][T21411] __x64_sys_setsockopt+0x13f/0x1b0 [ 1652.799819][T21411] do_syscall_64+0xec/0xf80 [ 1652.799843][T21411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.799865][T21411] ? trace_irq_disable+0x37/0x100 [ 1652.799896][T21411] ? clear_bhb_loop+0x60/0xb0 [ 1652.799924][T21411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.799947][T21411] RIP: 0033:0x7f3c8a78f749 [ 1652.799969][T21411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1652.799997][T21411] RSP: 002b:00007f3c8b680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1652.800022][T21411] RAX: ffffffffffffffda RBX: 00007f3c8a9e5fa0 RCX: 00007f3c8a78f749 [ 1652.800040][T21411] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1652.800054][T21411] RBP: 00007f3c8a813f91 R08: 0000000000000004 R09: 0000000000000000 [ 1652.800070][T21411] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1652.800085][T21411] R13: 00007f3c8a9e6038 R14: 00007f3c8a9e5fa0 R15: 00007ffd4e44ef68 [ 1652.800124][T21411] [ 1652.800134][T21411] Mem-Info: [ 1653.082569][T21419] openvswitch: netlink: IP tunnel dst address not specified [ 1653.128940][T21411] active_anon:3854 inactive_anon:0 isolated_anon:0 [ 1653.128940][T21411] active_file:3259 inactive_file:40387 isolated_file:0 [ 1653.128940][T21411] unevictable:778 dirty:55 writeback:0 [ 1653.128940][T21411] slab_reclaimable:16709 slab_unreclaimable:221691 [ 1653.128940][T21411] mapped:30110 shmem:1381 pagetables:1173 [ 1653.128940][T21411] sec_pagetables:0 bounce:0 [ 1653.128940][T21411] kernel_misc_reclaimable:0 [ 1653.128940][T21411] free:1179847 free_pcp:22438 free_cma:0 [ 1653.192522][T19322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.213436][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13427'. [ 1653.218059][T21411] Node 0 active_anon:15516kB inactive_anon:0kB active_file:13036kB inactive_file:161344kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:18136kB dirty:216kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21344kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1653.234140][T19322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.338050][T21411] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102304kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1653.446465][T21411] Node 0 DMA free:11216kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 1653.537253][T21411] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 1653.559871][T21411] Node 0 DMA32 free:1179396kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15516kB inactive_anon:0kB active_file:13036kB inactive_file:161344kB unevictable:1576kB writepending:216kB zspages:0kB present:3129332kB managed:2559500kB mlocked:40kB bounce:0kB free_pcp:35480kB local_pcp:19832kB free_cma:0kB [ 1653.628169][T21411] lowmem_reserve[]: 0 0 1 1 1 [ 1653.632985][T21411] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1653.677319][T21411] lowmem_reserve[]: 0 0 0 0 0 [ 1653.696491][T21411] Node 1 Normal free:3528680kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54224kB local_pcp:30532kB free_cma:0kB [ 1653.772392][T21411] lowmem_reserve[]: 0 0 0 0 0 [ 1653.777327][T21411] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11216kB [ 1653.797160][T21411] Node 0 DMA32: 9477*4kB (U) 10928*8kB (UM) 5879*16kB (UM) 258*32kB (UME) 151*64kB (UME) 282*128kB (UM) 707*256kB (UME) 404*512kB (UM) 360*1024kB (UM) 73*2048kB (UME) 0*4096kB = 1179396kB [ 1653.821377][T21411] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1653.871325][T21411] Node 1 Normal: 172*4kB (UM) 63*8kB (UME) 48*16kB (UME) 254*32kB (UME) 88*64kB (UME) 19*128kB (UM) 9*256kB (UM) 6*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 853*4096kB (M) = 3528680kB [ 1653.923906][T21411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1653.934777][T21411] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1653.946016][T21411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1653.980545][T21411] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1653.994524][T21411] 45025 total pagecache pages [ 1654.000844][T21411] 0 pages in swap cache [ 1654.005055][T21411] Free swap = 124996kB [ 1654.015788][T21411] Total swap = 124996kB [ 1654.020856][T21667] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1654.030149][T21667] bond0 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ae:cf:c9:70:2f:4c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1654.050087][T21411] 2097051 pages RAM [ 1654.053944][T21411] 0 pages HighMem/MovableOnly [ 1654.058733][T21411] 425086 pages reserved [ 1654.063801][T21411] 0 pages cma reserved [ 1654.099535][T21667] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 1655.066895][T21667] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1655.087529][T21667] bond0 (unregistering): Released all slaves [ 1655.103102][T21667] bond1 (unregistering): Released all slaves [ 1655.119280][T21667] bond2 (unregistering): Released all slaves [ 1655.135988][T21667] bond3 (unregistering): Released all slaves [ 1655.283281][T21667] bond4 (unregistering): Released all slaves [ 1655.431153][T21667] bond5 (unregistering): Released all slaves [ 1655.571663][T21667] bond6 (unregistering): Released all slaves [ 1655.586200][T21667] bond7 (unregistering): Released all slaves [ 1655.602374][T21667] bond8 (unregistering): Released all slaves [ 1655.751643][T21667] bond9 (unregistering): Released all slaves [ 1655.899794][T21667] bond10 (unregistering): Released all slaves [ 1656.167365][T21667] : left promiscuous mode [ 1656.289098][T21481] __nla_validate_parse: 2 callbacks suppressed [ 1656.289116][T21481] netlink: 104 bytes leftover after parsing attributes in process `syz.6.13442'. [ 1656.409601][T21667] tipc: Disabling bearer [ 1656.464307][T21667] tipc: Disabling bearer [ 1656.494175][T21667] tipc: Left network mode [ 1656.814844][T21496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13448'. [ 1656.832274][T21505] IPVS: set_ctl: invalid protocol: 255 172.30.0.7:20000 [ 1657.399928][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13460'. [ 1657.485587][ T1953] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1657.607743][T21545] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13465'. [ 1657.680144][ T1953] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1657.703803][ T1953] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1657.714802][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13466'. [ 1657.745298][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13466'. [ 1657.769208][ T1953] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1657.920577][T21559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13468'. [ 1657.938482][T21559] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13468'. [ 1658.377161][T21574] netlink: 'syz.7.13472': attribute type 1 has an invalid length. [ 1658.595673][T21586] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1658.645035][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13475'. [ 1658.662886][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13476'. [ 1658.743471][T21667] hsr_slave_1: left promiscuous mode [ 1659.027600][T21597] xt_addrtype: ipv6 does not support BROADCAST matching [ 1659.796334][T21578] C speed is unknown, defaulting to 1000 [ 1660.019184][T21615] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1660.273352][T21618] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1660.380881][T21632] veth1_macvtap: left promiscuous mode [ 1660.926973][T21667] IPVS: stop unused estimator thread 0... [ 1661.055954][T21667] bridge_slave_1: left allmulticast mode [ 1661.064902][T21667] bridge_slave_1: left promiscuous mode [ 1661.072931][T21667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.118371][T21667] bridge_slave_0: left allmulticast mode [ 1661.124162][T21667] bridge_slave_0: left promiscuous mode [ 1661.130178][T21667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.172487][T21659] netlink: 'syz.1.13497': attribute type 2 has an invalid length. [ 1661.417109][T21667] ip6gretap0 (unregistering): left promiscuous mode [ 1661.646440][T21667] gretap0 (unregistering): left promiscuous mode [ 1661.673116][T21667] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1661.722469][T21667] bond9 (unregistering): (slave gretap3): Releasing backup interface [ 1661.847691][T21667] bridge0 (unregistering): left promiscuous mode [ 1662.204066][T21667] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 1662.212545][T21667] bridge6 (unregistering): left promiscuous mode [ 1662.421296][T21667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.434129][T21667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.444813][T21667] bond0 (unregistering): Released all slaves [ 1662.462311][T21667] bond1 (unregistering): Released all slaves [ 1662.615097][T21667] bond2 (unregistering): Released all slaves [ 1662.760466][T21667] bond3 (unregistering): Released all slaves [ 1662.776213][T21667] bond4 (unregistering): Released all slaves [ 1662.793832][T21667] bond5 (unregistering): (slave lo): Releasing backup interface [ 1662.802622][T21667] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1662.817148][T21667] bond5 (unregistering): Released all slaves [ 1662.833885][T21667] bond6 (unregistering): Released all slaves [ 1662.981886][T21667] bond7 (unregistering): Released all slaves [ 1663.122697][T21667] bond8 (unregistering): Released all slaves [ 1663.280018][T21667] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1663.289681][T21667] bond9 (unregistering): Released all slaves [ 1663.429363][T21667] bond10 (unregistering): Released all slaves [ 1663.570666][T21667] bond11 (unregistering): Released all slaves [ 1663.584511][T21578] wlan0 speed is unknown, defaulting to 1000 [ 1663.729770][T21667] 9: left promiscuous mode [ 1663.935607][T21667] tipc: Disabling bearer [ 1663.946789][T21667] tipc: Disabling bearer [ 1664.002268][T21667] tipc: Left network mode [ 1664.260711][T21713] __nla_validate_parse: 7 callbacks suppressed [ 1664.260813][T21713] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13512'. [ 1664.317304][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13512'. [ 1664.335508][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13512'. [ 1664.383367][T21715] xt_CONNSECMARK: invalid mode: 0 [ 1664.403539][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13512'. [ 1664.442850][T21714] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1664.490635][T21714] team0: Port device batadv1 added [ 1664.779561][T21730] IPv6: NLM_F_CREATE should be specified when creating new route [ 1665.093782][T21744] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13519'. [ 1665.248269][T21732] netlink: 'syz.7.13519': attribute type 12 has an invalid length. [ 1665.334276][T21755] xt_bpf: check failed: parse error [ 1666.134133][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13525'. [ 1666.215236][T21781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13527'. [ 1666.382702][T21782] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1666.465564][T21782] bond4 (unregistering): Released all slaves [ 1666.535371][T21800] netlink: 'syz.5.13531': attribute type 5 has an invalid length. [ 1666.583556][T21800] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13531'. [ 1666.627067][T21667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.710335][T21667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.896263][T21667] pim6reg (unregistering): left allmulticast mode [ 1667.406934][T21667] team0 (unregistering): Port device team_slave_1 removed [ 1667.465876][T21667] team0 (unregistering): Port device team_slave_0 removed [ 1667.846227][T21667] team0 (unregistering): Port device dummy0 removed [ 1668.731501][T21841] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1668.758324][T21841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1668.846167][T21855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1668.869912][T21667] IPVS: stop unused estimator thread 0... [ 1668.913531][T21855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1668.963822][T21859] netlink: 'syz.2.13549': attribute type 1 has an invalid length. [ 1668.980588][T21860] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13548'. [ 1669.008943][T21859] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13549'. [ 1669.022785][T21860] netlink: 'syz.5.13548': attribute type 21 has an invalid length. [ 1669.042407][T21860] netlink: 'syz.5.13548': attribute type 4 has an invalid length. [ 1669.068390][T21860] netlink: 'syz.5.13548': attribute type 5 has an invalid length. [ 1669.087216][T21863] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1669.485887][T21881] __nla_validate_parse: 3 callbacks suppressed [ 1669.485907][T21881] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13556'. [ 1669.515916][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13553'. [ 1669.549543][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13553'. [ 1669.590643][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13553'. [ 1669.626089][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13553'. [ 1669.761890][T21892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13559'. [ 1669.839636][T21900] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1669.916811][T21901] syzkaller1: entered promiscuous mode [ 1669.963818][T21901] syzkaller1: entered allmulticast mode [ 1670.040476][T21897] sctp: [Deprecated]: syz.5.13560 (pid 21897) Use of int in maxseg socket option. [ 1670.040476][T21897] Use struct sctp_assoc_value instead [ 1670.249215][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13562'. [ 1670.389807][T21921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13565'. [ 1670.409472][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13565'. [ 1670.423749][T21921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13565'. [ 1672.734262][T21933] netlink: 'syz.2.13567': attribute type 3 has an invalid length. [ 1672.756363][T21946] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1672.866755][T21948] bond0: Device is already in use. [ 1673.019884][T21958] delete_channel: no stack [ 1673.176975][T21968] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1673.291627][T21977] x_tables: duplicate entry at hook 2 [ 1673.368935][T21983] syzkaller1: entered promiscuous mode [ 1673.415876][T21983] syzkaller1: entered allmulticast mode [ 1673.717752][T21998] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1673.737586][T21998] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 1673.781272][T21998] team0: Failed to send options change via netlink (err -105) [ 1673.789304][T21998] team0: Port device batadv2 added [ 1674.286558][T22029] x_tables: duplicate underflow at hook 1 [ 1674.447300][T22025] openvswitch: netlink: Flow key attr not present in new flow. [ 1674.832261][T22060] __nla_validate_parse: 13 callbacks suppressed [ 1674.832283][T22060] netlink: 120 bytes leftover after parsing attributes in process `syz.5.13601'. [ 1674.856076][T22060] openvswitch: netlink: Flow key attr not present in new flow. [ 1674.881326][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13602'. [ 1675.216957][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13606'. [ 1675.466533][T22086] vcan1: entered promiscuous mode [ 1675.481446][T22086] vcan1: entered allmulticast mode [ 1675.597365][T22090] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1675.630054][T22090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1675.771675][T22100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13614'. [ 1675.831846][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13615'. [ 1675.845516][T22103] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13615'. [ 1675.896783][T22103] geneve2: entered promiscuous mode [ 1675.911093][T22103] geneve2: entered allmulticast mode [ 1675.995994][T22106] team0: Device ip6gre1 is of different type [ 1676.064323][T22121] netlink: 88 bytes leftover after parsing attributes in process `syz.6.13616'. [ 1676.175585][T22126] netlink: 324 bytes leftover after parsing attributes in process `syz.2.13621'. [ 1676.676828][T22145] netlink: 'syz.7.13625': attribute type 1 has an invalid length. [ 1676.742211][T22145] bond2: entered promiscuous mode [ 1676.747385][T22145] bond2: entered allmulticast mode [ 1676.754270][T22145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1676.939674][T22154] netlink: 'syz.1.13626': attribute type 12 has an invalid length. [ 1676.947668][T22154] netlink: 'syz.1.13626': attribute type 29 has an invalid length. [ 1676.994336][T22154] netlink: 148 bytes leftover after parsing attributes in process `syz.1.13626'. [ 1677.020864][T22154] netlink: 59 bytes leftover after parsing attributes in process `syz.1.13626'. [ 1677.366474][T22164] netlink: 'syz.1.13630': attribute type 9 has an invalid length. [ 1677.706475][T22168] bond1: option min_links: invalid value (18446744073709551614) [ 1677.720415][T22168] bond1: option min_links: allowed values 0 - 2147483647 [ 1677.744876][T22168] bond1 (unregistering): Released all slaves [ 1678.060247][T22193] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002 [ 1678.281177][T22203] netlink: 'syz.1.13643': attribute type 1 has an invalid length. [ 1678.293699][T22204] netlink: 'syz.1.13643': attribute type 1 has an invalid length. [ 1678.334199][T22207] netlink: 'syz.7.13642': attribute type 11 has an invalid length. [ 1678.471389][T22210] netlink: 'syz.5.13644': attribute type 1 has an invalid length. [ 1678.483650][T22213] syzkaller0: entered promiscuous mode [ 1678.495231][T22210] netlink: 'syz.5.13644': attribute type 3 has an invalid length. [ 1678.503436][T22213] syzkaller0: entered allmulticast mode [ 1678.519547][T22210] netlink: 'syz.5.13644': attribute type 7 has an invalid length. [ 1678.527689][T22210] netlink: 'syz.5.13644': attribute type 8 has an invalid length. [ 1678.554612][T22210] NCSI netlink: No device for ifindex 131092 [ 1678.596419][T22213] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 1678.665520][T22218] syzkaller0: entered promiscuous mode [ 1678.678290][T22218] syzkaller0: entered allmulticast mode [ 1678.774648][T22221] xt_socket: unknown flags 0x50 [ 1678.993650][T22226] syzkaller1: entered promiscuous mode [ 1678.999412][T22226] syzkaller1: entered allmulticast mode [ 1679.174625][T22242] netlink: 'syz.1.13655': attribute type 11 has an invalid length. [ 1679.222036][T22242] netlink: 'syz.1.13655': attribute type 4 has an invalid length. [ 1679.247918][T22242] netlink: 'syz.1.13655': attribute type 5 has an invalid length. [ 1679.278810][T22242] netlink: 'syz.1.13655': attribute type 6 has an invalid length. [ 1679.469906][T22257] openvswitch: netlink: Flow actions attr not present in new flow. [ 1679.528964][T22263] bridge0: port 3(batadv1) entered blocking state [ 1679.539510][T22263] bridge0: port 3(batadv1) entered disabled state [ 1679.547673][T22263] batadv1: entered allmulticast mode [ 1679.573073][T22263] batadv1: entered promiscuous mode [ 1679.989951][T22281] __nla_validate_parse: 9 callbacks suppressed [ 1679.989972][T22281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13665'. [ 1680.009852][ T4879] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1680.019794][ T4879] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1680.086523][T22281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13665'. [ 1680.136586][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13666'. [ 1680.236385][T22281] gretap2: entered promiscuous mode [ 1680.243535][T22281] gretap2: entered allmulticast mode [ 1680.251097][T22288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.303526][T22292] netlink: 'syz.7.13668': attribute type 17 has an invalid length. [ 1680.338848][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13668'. [ 1680.359076][T22292] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13668'. [ 1680.392373][T22288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.502787][T22296] netlink: 112 bytes leftover after parsing attributes in process `syz.1.13669'. [ 1680.527815][T22295] veth1_macvtap: left promiscuous mode [ 1680.550272][T22295] macsec0: entered promiscuous mode [ 1680.556468][T22295] macsec0: entered allmulticast mode [ 1681.133774][T22321] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13677'. [ 1681.153472][T22323] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13678'. [ 1681.585019][T22343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13685'. [ 1681.595722][T22343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1681.630661][T22345] bridge_slave_0: mtu less than device minimum [ 1681.639094][T22343] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13685'. [ 1681.801114][T22351] x_tables: duplicate underflow at hook 3 [ 1681.963308][T22355] veth0: entered promiscuous mode [ 1682.050860][T22355] veth0 (unregistering): left promiscuous mode [ 1682.193807][T22363] bridge_slave_0: left allmulticast mode [ 1682.213623][T22363] bridge_slave_0: left promiscuous mode [ 1682.234090][T22363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.295509][T22363] bridge_slave_1: left allmulticast mode [ 1682.319280][T22363] bridge_slave_1: left promiscuous mode [ 1682.338132][T22363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.380551][T22363] bond0: (slave bond_slave_0): Releasing backup interface [ 1682.429517][T22363] bond0: (slave bond_slave_1): Releasing backup interface [ 1682.450626][T22363] team0: Port device team_slave_0 removed [ 1682.468436][T22363] team0: Port device team_slave_1 removed [ 1682.475450][T22363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.494769][T22363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.516463][T22363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.525406][T22363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.556779][T22363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1683.002232][T22397] tc_dump_action: action bad kind [ 1683.211391][ T4879] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.243731][ T4879] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.320296][T22415] batman_adv: batadv0: Adding interface: netdevsim0 [ 1683.336255][T22415] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.406875][T22415] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1683.438506][ T4879] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.480106][T19322] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.564130][T22416] syzkaller1: entered promiscuous mode [ 1683.572546][T22416] syzkaller1: entered allmulticast mode [ 1683.686741][T22425] x_tables: duplicate underflow at hook 1 [ 1684.364170][ T108] IPVS: starting estimator thread 0... [ 1684.470120][T22461] IPVS: using max 24 ests per chain, 57600 per kthread [ 1684.636535][T22472] IPv6: NLM_F_CREATE should be specified when creating new route [ 1684.696639][T22476] bond3: entered promiscuous mode [ 1684.702720][T22476] bond3: entered allmulticast mode [ 1684.712864][T22476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1684.861536][T22483] openvswitch: netlink: IP tunnel dst address not specified [ 1684.937075][T22487] validate_nla: 3 callbacks suppressed [ 1684.937093][T22487] netlink: 'syz.2.13731': attribute type 12 has an invalid length. [ 1685.086592][T22494] wireguard: wg2: Could not create IPv4 socket [ 1685.571872][ T6589] tipc: Subscription rejected, illegal request [ 1685.601015][T22517] netdevsim netdevsim7: Direct firmware load for .. failed with error -2 [ 1685.614626][T22517] netdevsim netdevsim7: Falling back to sysfs fallback for: .. [ 1685.929897][T22531] syzkaller0: entered promiscuous mode [ 1685.936109][T22531] syzkaller0: entered allmulticast mode [ 1686.080685][T22535] __nla_validate_parse: 15 callbacks suppressed [ 1686.080706][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13743'. [ 1686.330974][T22544] netlink: 'syz.1.13746': attribute type 4 has an invalid length. [ 1686.341195][T22546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13747'. [ 1686.610991][T22557] netlink: 148 bytes leftover after parsing attributes in process `syz.7.13750'. [ 1686.736787][T22568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13753'. [ 1686.899817][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13754'. [ 1686.909133][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13754'. [ 1687.226195][T22578] C speed is unknown, defaulting to 1000 [ 1687.294164][T22585] netlink: 'syz.7.13758': attribute type 1 has an invalid length. [ 1687.357973][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13758'. [ 1687.367303][T22589] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13760'. [ 1687.376554][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13758'. [ 1687.376583][T22585] netlink: 'syz.7.13758': attribute type 2 has an invalid length. [ 1687.376601][T22585] netlink: 'syz.7.13758': attribute type 2 has an invalid length. [ 1687.376618][T22585] netlink: 'syz.7.13758': attribute type 2 has an invalid length. [ 1687.479574][T22592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13758'. [ 1687.506483][T22594] bond1: Unable to set down delay as MII monitoring is disabled [ 1687.562680][T22594] bond1 (unregistering): Released all slaves [ 1687.684030][T22602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1687.774336][T22602] netlink: 'syz.6.13761': attribute type 2 has an invalid length. [ 1688.132484][T22610] bridge0: entered promiscuous mode [ 1688.162266][T22610] macsec1: entered promiscuous mode [ 1688.174608][T22610] macsec1: entered allmulticast mode [ 1688.190586][T22610] bridge0: entered allmulticast mode [ 1688.203580][T22610] bridge0: port 1(macsec1) entered blocking state [ 1688.223455][T22610] bridge0: port 1(macsec1) entered disabled state [ 1688.259363][T22610] bridge0: left allmulticast mode [ 1688.282093][T22610] bridge0: left promiscuous mode [ 1688.644723][T22578] wlan0 speed is unknown, defaulting to 1000 [ 1688.804685][T22632] openvswitch: netlink: Multiple metadata blocks provided [ 1688.840635][T22635] openvswitch: netlink: Multiple metadata blocks provided [ 1688.856934][T22634] netlink: 'syz.1.13770': attribute type 12 has an invalid length. [ 1688.868625][T22634] netlink: 'syz.1.13770': attribute type 29 has an invalid length. [ 1688.898271][T22634] netlink: 'syz.1.13770': attribute type 2 has an invalid length. [ 1689.718503][T22661] tipc: Started in network mode [ 1689.724878][T22661] tipc: Node identity 84e, cluster identity 4711 [ 1689.777855][T22661] tipc: Node number set to 2126 [ 1690.851808][T22689] validate_nla: 3 callbacks suppressed [ 1690.851835][T22689] netlink: 'syz.7.13783': attribute type 10 has an invalid length. [ 1690.882768][T22689] dummy0: entered promiscuous mode [ 1690.897691][T22689] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1690.943953][T22689] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1690.954968][T22689] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1691.117180][T22700] netlink: 'syz.2.13787': attribute type 1 has an invalid length. [ 1691.151761][T22706] sctp: [Deprecated]: syz.6.13789 (pid 22706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1691.151761][T22706] Use struct sctp_sack_info instead [ 1691.184274][T22703] __nla_validate_parse: 12 callbacks suppressed [ 1691.184295][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.212662][T22706] sctp: [Deprecated]: syz.6.13789 (pid 22706) Use of int in max_burst socket option. [ 1691.212662][T22706] Use struct sctp_assoc_value instead [ 1691.226722][T22700] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1691.240889][T22700] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1691.252779][T22700] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1691.276903][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.291751][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.302959][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.313388][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.323384][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.332825][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.342200][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.351594][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.376385][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13788'. [ 1691.407326][T22708] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1691.448365][T22708] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1692.487336][T22768] bond10: Removing last arp target with arp_interval on [ 1692.584216][T22775] xt_hashlimit: invalid rate [ 1692.690270][T22779] netlink: 'syz.5.13811': attribute type 4 has an invalid length. [ 1693.361529][T22809] netlink: 'syz.2.13819': attribute type 1 has an invalid length. [ 1693.416455][T22813] rdma_rxe: rxe_newlink: failed to add lo [ 1693.519674][T22809] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1693.540734][T22810] bond11: (slave geneve2): making interface the new active one [ 1693.553514][T22810] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 1693.571580][T17725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1693.594324][T17725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1693.630597][T17725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1693.666717][T17725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1694.060602][T22839] netlink: 'syz.5.13827': attribute type 4 has an invalid length. [ 1694.852490][T22890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1694.859890][T22890] IPv6: NLM_F_CREATE should be set when creating new route [ 1694.867147][T22890] IPv6: NLM_F_CREATE should be set when creating new route [ 1695.075297][T22897] netlink: 'syz.1.13845': attribute type 1 has an invalid length. [ 1695.164161][T22897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1695.269686][T22909] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20002 [ 1695.291141][T22903] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1695.338003][T22903] bond1 (unregistering): Released all slaves [ 1695.389310][T22897] macvlan4: entered promiscuous mode [ 1695.394841][T22897] macvlan4: entered allmulticast mode [ 1695.410995][T22897] bond4: entered allmulticast mode [ 1695.438541][T22897] bond4: entered promiscuous mode [ 1695.444448][T22897] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1695.470117][T22897] team0: Port device macvlan4 added [ 1695.735111][T22933] nbd: must specify at least one socket [ 1695.763406][T22933] nbd: must specify at least one socket [ 1695.912427][T22946] netlink: 'syz.1.13860': attribute type 10 has an invalid length. [ 1696.095400][T22953] block nbd12: Unsupported socket: should be TCP or UNIX. [ 1696.219087][T22962] netlink: 'syz.2.13866': attribute type 1 has an invalid length. [ 1696.242214][T22962] netlink: 'syz.2.13866': attribute type 11 has an invalid length. [ 1696.254713][T22962] __nla_validate_parse: 73 callbacks suppressed [ 1696.254733][T22962] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13866'. [ 1696.274776][T22962] netlink: 27 bytes leftover after parsing attributes in process `syz.2.13866'. [ 1696.523119][T22984] netlink: 29 bytes leftover after parsing attributes in process `syz.7.13871'. [ 1696.593177][T22991] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.13874'. [ 1696.607999][T22992] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13873'. [ 1696.635742][T22992] netlink: 'syz.5.13873': attribute type 10 has an invalid length. [ 1696.646305][T22993] xt_hashlimit: size too large, truncated to 1048576 [ 1696.671509][T22992] batman_adv: batadv0: Adding interface: netdevsim0 [ 1696.678712][T22992] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.706803][T22992] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1696.745120][T22997] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13875'. [ 1696.754382][T22997] netlink: 'syz.7.13875': attribute type 7 has an invalid length. [ 1696.763376][T22997] netlink: 'syz.7.13875': attribute type 8 has an invalid length. [ 1696.774597][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13875'. [ 1697.224449][T23019] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.13881'. [ 1697.777125][T23042] netlink: 'syz.5.13888': attribute type 1 has an invalid length. [ 1697.857395][T23046] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.13890'. [ 1697.904523][T23046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13890'. [ 1698.157304][T23053] sctp: [Deprecated]: syz.1.13892 (pid 23053) Use of int in max_burst socket option deprecated. [ 1698.157304][T23053] Use struct sctp_assoc_value instead [ 1698.479045][T23074] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1699.220220][T23110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.406917][T23124] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1699.517731][T23127] netlink: 'syz.1.13914': attribute type 3 has an invalid length. [ 1699.686632][T23141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1699.895401][T23149] netlink: 'syz.6.13925': attribute type 1 has an invalid length. [ 1699.918798][T23149] netlink: 'syz.6.13925': attribute type 7 has an invalid length. [ 1699.939547][T23155] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1700.084953][T23164] syzkaller0: entered promiscuous mode [ 1700.091221][T23164] syzkaller0: entered allmulticast mode [ 1700.251150][T23170] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1700.283347][T23174] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1700.314361][T23177] gre3: entered promiscuous mode [ 1700.339229][T23177] gre3: entered allmulticast mode [ 1701.426523][T23243] ipt_ECN: cannot use operation on non-tcp rule [ 1701.451846][T23245] __nla_validate_parse: 15 callbacks suppressed [ 1701.451868][T23245] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13949'. [ 1701.469695][T23245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13949'. [ 1701.484169][T23247] ipt_ECN: cannot use operation on non-tcp rule [ 1701.572223][T23250] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13951'. [ 1701.621809][T23250] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13951'. [ 1701.681415][T23256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13950'. [ 1701.891356][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13957'. [ 1701.981477][T23275] openvswitch: netlink: EtherType 50a is less than min 600 [ 1702.060575][T23280] validate_nla: 1 callbacks suppressed [ 1702.060598][T23280] netlink: 'syz.2.13959': attribute type 1 has an invalid length. [ 1702.132608][T23288] netlink: 'syz.6.13960': attribute type 7 has an invalid length. [ 1702.163240][T23280] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1702.289025][T23297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13962'. [ 1702.330497][T23289] bond12: (slave geneve3): making interface the new active one [ 1702.357648][T23289] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 1702.370634][T23288] netlink: 'syz.6.13960': attribute type 7 has an invalid length. [ 1702.402819][ T7394] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1702.411898][T23300] netlink: 52 bytes leftover after parsing attributes in process `syz.5.13963'. [ 1702.423983][ T7394] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1702.501301][ T7394] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1702.524376][T23280] netlink: 'syz.2.13959': attribute type 3 has an invalid length. [ 1702.535848][T23280] netlink: 766 bytes leftover after parsing attributes in process `syz.2.13959'. [ 1702.546379][ T7394] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1702.612790][T23311] bridge1: entered promiscuous mode [ 1702.624405][T23311] bridge1: entered allmulticast mode [ 1702.624864][T23313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13966'. [ 1702.706588][T23318] netlink: 'syz.2.13967': attribute type 7 has an invalid length. [ 1702.993228][T23333] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1703.196547][T23350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1703.976081][T23404] netlink: 'syz.6.13992': attribute type 4 has an invalid length. [ 1704.054326][T23404] `: renamed from bond0 (while UP) [ 1704.297447][T23410] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1704.322435][T23410] bond5 (unregistering): Released all slaves [ 1704.403066][T23412] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1704.416430][T23412] bond5 (unregistering): Released all slaves [ 1704.872894][T23447] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1705.369224][T23465] netlink: zone id is out of range [ 1705.374417][T23465] netlink: zone id is out of range [ 1705.398240][T23465] netlink: zone id is out of range [ 1705.403427][T23465] netlink: zone id is out of range [ 1705.434388][T23465] netlink: zone id is out of range [ 1705.459471][T23465] netlink: zone id is out of range [ 1705.464659][T23465] netlink: zone id is out of range [ 1705.494114][T23465] netlink: zone id is out of range [ 1705.519072][T23465] netlink: zone id is out of range [ 1705.541901][T23465] netlink: zone id is out of range [ 1706.456752][T23515] dvmrp1: entered allmulticast mode [ 1706.546469][T23522] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1706.713121][T23538] __nla_validate_parse: 19 callbacks suppressed [ 1706.713144][T23538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14025'. [ 1706.723246][T23536] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14024'. [ 1706.830080][T23538] bond2 (unregistering): Released all slaves [ 1706.922523][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14028'. [ 1707.103894][T23557] netlink: 'syz.2.14031': attribute type 1 has an invalid length. [ 1707.145071][T23557] netlink: 760 bytes leftover after parsing attributes in process `syz.2.14031'. [ 1707.307088][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14035'. [ 1707.339900][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14035'. [ 1707.379653][T23573] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1707.512520][T23581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14037'. [ 1707.546668][T23581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14037'. [ 1707.623227][T23590] syzkaller0: entered promiscuous mode [ 1707.637947][T23590] syzkaller0: entered allmulticast mode [ 1707.804317][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14045'. [ 1708.281506][T23633] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14051'. [ 1708.930854][T23671] macvtap2: entered promiscuous mode [ 1708.945794][T23671] macvtap2: entered allmulticast mode [ 1708.961728][T23671] veth1_vlan: entered allmulticast mode [ 1708.983939][T23677] macvtap3: entered promiscuous mode [ 1708.991257][T23677] macvtap3: entered allmulticast mode [ 1709.033988][T23671] macvtap3: entered promiscuous mode [ 1709.041952][T23671] macvtap3: entered allmulticast mode [ 1709.260326][T23695] nbd: couldn't find a device at index 6 [ 1709.830510][T23728] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1709.871632][T23721] bond13: option miimon: invalid value (18446744073709551585) [ 1709.879709][T23721] bond13: option miimon: allowed values 0 - 2147483647 [ 1709.894242][T23721] bond13 (unregistering): Released all slaves [ 1709.953764][T23724] netlink: 'syz.1.14078': attribute type 9 has an invalid length. [ 1709.963218][T23730] tipc: Started in network mode [ 1709.971985][T23730] tipc: Node identity 62f444bc3756, cluster identity 4711 [ 1709.981075][T23724] netlink: 'syz.1.14078': attribute type 7 has an invalid length. [ 1709.992031][T23730] tipc: Enabled bearer , priority 0 [ 1710.009797][T23724] netlink: 'syz.1.14078': attribute type 8 has an invalid length. [ 1710.029818][T23734] syzkaller0: entered promiscuous mode [ 1710.035761][T23734] syzkaller0: entered allmulticast mode [ 1710.074752][T23730] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1710.139681][T23730] tipc: Resetting bearer [ 1710.174451][T23729] tipc: Resetting bearer [ 1710.245224][T23729] tipc: Disabling bearer [ 1710.400663][T23752] : renamed from bridge_slave_0 [ 1710.526776][T23768] netlink: 'syz.1.14086': attribute type 3 has an invalid length. [ 1710.902960][T23780] vti0: entered promiscuous mode [ 1711.120498][T23806] netlink: 'syz.5.14099': attribute type 1 has an invalid length. [ 1711.236385][T23813] netlink: 'syz.1.14103': attribute type 1 has an invalid length. [ 1711.317410][T23813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1711.377385][T23812] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1711.437240][T23826] sctp: [Deprecated]: syz.5.14106 (pid 23826) Use of int in maxseg socket option. [ 1711.437240][T23826] Use struct sctp_assoc_value instead [ 1711.472970][T23830] net_ratelimit: 51 callbacks suppressed [ 1711.472992][T23830] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1711.894913][T23845] syzkaller0: entered promiscuous mode [ 1711.919781][T23845] syzkaller0: entered allmulticast mode [ 1711.963472][T23845] 0: reclassify loop, rule prio 0, protocol 800 [ 1712.201873][T23863] netlink: 'syz.1.14122': attribute type 11 has an invalid length. [ 1712.211286][T23863] netlink: 'syz.1.14122': attribute type 11 has an invalid length. [ 1712.219442][T23863] __nla_validate_parse: 15 callbacks suppressed [ 1712.219461][T23863] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14122'. [ 1712.380177][T23862] netlink: 'syz.1.14122': attribute type 11 has an invalid length. [ 1712.395034][T23862] netlink: 'syz.1.14122': attribute type 11 has an invalid length. [ 1712.412749][T23862] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14122'. [ 1712.440248][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14127'. [ 1712.453693][T23885] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14127'. [ 1712.826874][T23897] dvmrp0: left allmulticast mode [ 1713.060828][T23900] netlink: 44 bytes leftover after parsing attributes in process `syz.7.14133'. [ 1713.130900][T23898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.352276][T23898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.424480][T23904] ip6_vti0: entered promiscuous mode [ 1713.430236][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14132'. [ 1713.473172][T23912] bridge2: entered promiscuous mode [ 1713.497971][T23912] bridge2: entered allmulticast mode [ 1713.511209][T23917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14136'. [ 1713.534294][T23905] tipc: Resetting bearer [ 1713.621117][T23925] netlink: 666 bytes leftover after parsing attributes in process `syz.5.14137'. [ 1713.667463][T23905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1713.675990][T23905] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1713.756073][T23905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1713.786411][T23905] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1713.949402][T23905] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1713.973870][T23905] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1714.055496][T23940] netlink: 'syz.1.14141': attribute type 1 has an invalid length. [ 1714.183693][T23905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1714.233190][T23905] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1714.267138][T23946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1714.571143][T23962] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14150'. [ 1714.591508][T23964] netlink: 'syz.5.14151': attribute type 1 has an invalid length. [ 1714.607456][T23961] netlink: 36 bytes leftover after parsing attributes in process `syz.7.14149'. [ 1714.636343][T23964] bond2: entered promiscuous mode [ 1714.642285][T23964] bond2: entered allmulticast mode [ 1714.648426][T23964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1714.694669][T23964] vcan1: entered promiscuous mode [ 1714.753358][T23964] vcan1: entered allmulticast mode [ 1714.813711][T23976] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1714.827271][T23976] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1714.837198][T23976] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1715.081147][T23998] tc_dump_action: action bad kind [ 1715.836994][T24045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1717.019346][T24108] netlink: 'syz.5.14191': attribute type 9 has an invalid length. [ 1717.042555][T24108] netlink: 'syz.5.14191': attribute type 11 has an invalid length. [ 1717.052424][T24108] netlink: 'syz.5.14191': attribute type 12 has an invalid length. [ 1717.180041][T24121] netlink: 'syz.5.14194': attribute type 4 has an invalid length. [ 1717.256360][T24129] __nla_validate_parse: 8 callbacks suppressed [ 1717.256380][T24129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14195'. [ 1717.285535][T24129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1717.298194][T24129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14195'. [ 1717.404879][T24129] netlink: 64 bytes leftover after parsing attributes in process `syz.7.14195'. [ 1717.764904][T24149] netlink: 'syz.1.14201': attribute type 1 has an invalid length. [ 1717.827492][T24152] team0: Device ipvlan2 failed to register rx_handler [ 1717.953513][T24159] team0: Device ipvlan2 failed to register rx_handler [ 1717.986318][T24168] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14206'. [ 1718.010734][T24168] netlink: 'syz.1.14206': attribute type 1 has an invalid length. [ 1718.047147][T24172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14208'. [ 1718.580051][T24206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14218'. [ 1718.811091][T24206] hsr_slave_1 (unregistering): left promiscuous mode [ 1718.937141][T24232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14224'. [ 1719.036295][T24238] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14224'. [ 1719.201838][T24252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14229'. [ 1719.301830][T24259] SET target dimension over the limit! [ 1719.620154][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14235'. [ 1719.895657][T24288] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1720.151727][T25227] bond0: (slave bond_slave_0): interface is now down [ 1720.178724][T25227] bond0: (slave bond_slave_1): interface is now down [ 1720.204286][T25227] bond0: now running without any active interface! [ 1720.312044][T24307] netlink: 'syz.2.14247': attribute type 1 has an invalid length. [ 1720.330177][T24307] netlink: 'syz.2.14247': attribute type 2 has an invalid length. [ 1720.350801][T24307] netlink: 'syz.2.14247': attribute type 3 has an invalid length. [ 1721.883290][T24406] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1722.024637][T24399] syzkaller0: entered promiscuous mode [ 1722.040095][T24399] syzkaller0: entered allmulticast mode [ 1722.365222][T24427] netlink: 'syz.1.14282': attribute type 1 has an invalid length. [ 1724.329391][T24431] team0: Device gtp2 is up. Set it down before adding it as a team port [ 1724.573473][T24444] netlink: 'syz.7.14288': attribute type 1 has an invalid length. [ 1724.715977][T24453] __nla_validate_parse: 5 callbacks suppressed [ 1724.716010][T24453] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14290'. [ 1724.753642][T24452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1724.776104][T24452] bond4: (slave bond5): making interface the new active one [ 1724.802476][T24452] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1724.836651][T24465] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14293'. [ 1724.842558][T24452] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14288'. [ 1724.864166][T24452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1724.918348][T24444] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 1725.183868][T24480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14296'. [ 1725.324135][T24488] netlink: 'syz.5.14299': attribute type 1 has an invalid length. [ 1725.341053][T24488] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14299'. [ 1725.371810][T24488] netlink: 'syz.5.14299': attribute type 7 has an invalid length. [ 1725.488517][T24498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1725.515520][T24497] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14301'. [ 1725.602046][T24505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14303'. [ 1725.633757][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14303'. [ 1725.665942][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14303'. [ 1726.372901][T24545] netlink: 'syz.2.14319': attribute type 4 has an invalid length. [ 1726.380940][T24545] netlink: 17 bytes leftover after parsing attributes in process `syz.2.14319'. [ 1727.082779][T24595] netlink: 'syz.7.14331': attribute type 1 has an invalid length. [ 1727.593228][T24615] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1727.676869][T24624] netlink: 'syz.2.14338': attribute type 10 has an invalid length. [ 1727.805102][T24624] team0: Port device dummy0 added [ 1727.826835][T24620] tipc: Enabled bearer , priority 0 [ 1727.949516][T24626] bond0: option all_slaves_active: invalid value (222) [ 1727.960133][T24626] bond0 (unregistering): Released all slaves [ 1728.102711][T24609] tipc: Disabling bearer [ 1728.313335][T24657] netlink: 'syz.5.14346': attribute type 1 has an invalid length. [ 1728.672538][T24678] netlink: 'syz.1.14353': attribute type 2 has an invalid length. [ 1728.743160][T24678] 9: entered promiscuous mode [ 1729.324517][T24707] pim6reg1: entered promiscuous mode [ 1729.340803][T24707] pim6reg1: entered allmulticast mode [ 1729.696830][T24729] netlink: 'syz.1.14367': attribute type 1 has an invalid length. [ 1729.839462][T24737] bond7: option mode: unable to set because the bond device has slaves [ 1729.861402][T24737] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1729.896959][T24737] __nla_validate_parse: 4 callbacks suppressed [ 1729.896980][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14368'. [ 1730.001485][T24742] netlink: 76 bytes leftover after parsing attributes in process `syz.7.14371'. [ 1730.022848][T24742] syzkaller0: entered promiscuous mode [ 1730.029558][T24742] syzkaller0: entered allmulticast mode [ 1730.046883][T24750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14375'. [ 1730.384803][T24764] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14378'. [ 1730.456965][T24773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14382'. [ 1730.640227][T24782] pim6reg: entered allmulticast mode [ 1730.651888][T24786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1730.663055][T24785] netlink: 'syz.7.14386': attribute type 32 has an invalid length. [ 1730.672264][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14386'. [ 1730.672298][T24787] netlink: 'syz.7.14386': attribute type 32 has an invalid length. [ 1730.685930][T24788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1730.739646][T24785] bond6: Setting coupled_control to off (0) [ 1730.773559][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14386'. [ 1730.945784][T24787] bond7: Setting coupled_control to off (0) [ 1731.042241][T24804] netlink: 'syz.6.14392': attribute type 32 has an invalid length. [ 1731.060399][T24801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14391'. [ 1731.087191][T24801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14391'. [ 1731.103402][T24803] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14393'. [ 1731.586748][T24827] dvmrp1: left allmulticast mode [ 1732.147086][T24864] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 1732.802686][ T7103] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1732.829081][ T7103] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1732.860615][ T7103] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1732.922673][ T7103] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1733.102940][T24930] syzkaller0: entered promiscuous mode [ 1733.113175][T24930] syzkaller0: entered allmulticast mode [ 1735.856880][T24975] __nla_validate_parse: 12 callbacks suppressed [ 1735.856903][T24975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14436'. [ 1735.942782][T24979] netlink: 'syz.7.14438': attribute type 4 has an invalid length. [ 1735.988210][T24979] netlink: 152 bytes leftover after parsing attributes in process `syz.7.14438'. [ 1736.031058][T24979] `: renamed from bond0 (while UP) [ 1736.118701][T24988] netlink: 128 bytes leftover after parsing attributes in process `syz.6.14441'. [ 1736.160338][T24993] netlink: 'syz.1.14442': attribute type 12 has an invalid length. [ 1736.275502][T24997] nbd: must specify at least one socket [ 1736.322823][T25001] ipt_ECN: cannot use operation on non-tcp rule [ 1736.379216][T25007] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14446'. [ 1736.401941][T25007] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1736.450072][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14446'. [ 1736.472180][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14446'. [ 1736.499192][T25009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14448'. [ 1736.510313][T25009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14448'. [ 1736.609234][T25012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14449'. [ 1736.736790][T25016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14451'. [ 1737.089051][T25025] netlink: 'syz.2.14453': attribute type 4 has an invalid length. [ 1737.382733][T25027] xt_CT: No such helper "pptp" [ 1737.634061][T25044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1737.673327][T25044] netlink: 'syz.5.14461': attribute type 2 has an invalid length. [ 1737.739419][T25050] netlink: 'syz.6.14463': attribute type 2 has an invalid length. [ 1737.930652][T25058] netlink: 'syz.5.14467': attribute type 28 has an invalid length. [ 1737.950240][T25058] netlink: 'syz.5.14467': attribute type 3 has an invalid length. [ 1737.970953][T25060] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 1738.171144][T25068] sit0: entered promiscuous mode [ 1738.201360][T25068] netlink: 'syz.7.14472': attribute type 1 has an invalid length. [ 1738.370626][T25076] netlink: 'syz.6.14474': attribute type 1 has an invalid length. [ 1738.851770][T25098] netlink: 'syz.7.14480': attribute type 11 has an invalid length. [ 1739.006685][T25104] netlink: 'syz.1.14482': attribute type 1 has an invalid length. [ 1739.179193][T25108] sctp: [Deprecated]: syz.7.14483 (pid 25108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1739.179193][T25108] Use struct sctp_sack_info instead [ 1739.218995][T25110] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1739.223602][T25108] sctp: [Deprecated]: syz.7.14483 (pid 25108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1739.223602][T25108] Use struct sctp_sack_info instead [ 1739.399954][T25104] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1739.452587][T25105] veth11: entered promiscuous mode [ 1739.473313][T25105] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1739.681915][T25126] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1740.970088][T25207] bond0: entered promiscuous mode [ 1740.981384][T25207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.988874][T25219] SET target dimension over the limit! [ 1741.010006][T25214] validate_nla: 1 callbacks suppressed [ 1741.010028][T25214] netlink: 'syz.7.14517': attribute type 1 has an invalid length. [ 1741.139731][T25207] bond0: (slave bridge3): making interface the new active one [ 1741.147443][T25207] bridge3: entered promiscuous mode [ 1741.154500][T25207] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 1741.462808][T25235] netlink: 'syz.6.14521': attribute type 1 has an invalid length. [ 1741.480127][T25235] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1741.570651][T25247] __nla_validate_parse: 45 callbacks suppressed [ 1741.570676][T25247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14524'. [ 1741.756520][T25247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14524'. [ 1741.793709][T25247] netlink: 'syz.1.14524': attribute type 5 has an invalid length. [ 1741.821757][T25247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14524'. [ 1741.860720][T25251] ------------[ cut here ]------------ [ 1741.866301][T25251] WARNING: net/core/flow_dissector.c:1131 at __skb_flow_dissect+0xb57/0x68b0, CPU#1: syz.1.14524/25251 [ 1741.877470][T25251] Modules linked in: [ 1741.881462][T25251] CPU: 1 UID: 0 PID: 25251 Comm: syz.1.14524 Not tainted syzkaller #0 PREEMPT(full) [ 1741.891019][T25251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1741.901159][T25251] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 1741.907111][T25251] Code: 55 00 00 80 3d 94 c5 36 06 01 0f 85 b3 55 00 00 e8 be 8d 8b f8 e9 83 f9 ff ff e8 b4 8d 8b f8 e9 b0 03 00 00 e8 aa 8d 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 9c 8d 8b f8 c6 05 5d c5 36 06 01 48 c7 [ 1741.926831][T25251] RSP: 0018:ffffc9000d43ef40 EFLAGS: 00010283 [ 1741.933001][T25251] RAX: ffffffff8935c70e RBX: 0000000000000001 RCX: 0000000000080000 [ 1741.941069][T25251] RDX: ffffc900187f7000 RSI: 00000000000005b4 RDI: 00000000000005b5 [ 1741.949136][T25251] RBP: ffffc9000d43f558 R08: ffffffff893562c8 R09: ffffffff8df41aa0 [ 1741.957174][T25251] R10: ffffc9000d43f5e0 R11: fffff52001a87ec6 R12: dffffc0000000000 [ 1741.965244][T25251] R13: ffffffff893562c8 R14: 0000000000000000 R15: ffffffff8f825fd0 [ 1741.973303][T25251] FS: 00007f3c8b65f6c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1741.982340][T25251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.989009][T25251] CR2: 0000000000000000 CR3: 00000000a5bfa000 CR4: 00000000003526f0 [ 1741.997033][T25251] Call Trace: [ 1742.000406][T25251] [ 1742.003389][T25251] ? stack_trace_save+0x9c/0xe0 [ 1742.008327][T25251] ? __pfx_stack_trace_save+0x10/0x10 [ 1742.013759][T25251] ? __lock_acquire+0x6b6/0x2cf0 [ 1742.018811][T25251] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1742.024421][T25251] ? __update_page_owner_handle+0x5a/0x570 [ 1742.030319][T25251] ? __page_table_check_zero+0x6a/0x3e0 [ 1742.035908][T25251] ? lock_acquire+0x107/0x340 [ 1742.040694][T25251] ? __page_table_check_zero+0x6a/0x3e0 [ 1742.046296][T25251] ? __page_table_check_zero+0x6a/0x3e0 [ 1742.051952][T25251] ? __page_table_check_zero+0x397/0x3e0 [ 1742.057633][T25251] ? __page_table_check_zero+0x6a/0x3e0 [ 1742.063276][T25251] ? post_alloc_hook+0x247/0x290 [ 1742.068304][T25251] ? get_page_from_freelist+0x24e0/0x2580 [ 1742.074085][T25251] ? rht_lock+0x8b/0x180 [ 1742.078426][T25251] ? __lock_acquire+0x6b6/0x2cf0 [ 1742.083424][T25251] ? rcu_is_watching+0x15/0xb0 [ 1742.088274][T25251] ? trace_mm_page_alloc+0x3e/0x140 [ 1742.093519][T25251] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 1742.099599][T25251] ? pfn_valid+0x125/0x4d0 [ 1742.104076][T25251] ? lock_acquire+0x107/0x340 [ 1742.108868][T25251] ? __lock_acquire+0x6b6/0x2cf0 [ 1742.113859][T25251] __bond_xmit_hash+0x2d7/0xba0 [ 1742.118833][T25251] ? __pfx___bond_xmit_hash+0x10/0x10 [ 1742.124289][T25251] ? pfn_valid+0x125/0x4d0 [ 1742.128795][T25251] ? lock_acquire+0x107/0x340 [ 1742.133514][T25251] ? pfn_valid+0x125/0x4d0 [ 1742.138046][T25251] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 1742.143567][T25251] xdp_master_redirect+0x13f/0x2c0 [ 1742.148776][T25251] bpf_test_run_xdp_live+0x14b8/0x1b20 [ 1742.154298][T25251] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1742.160037][T25251] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 1742.165651][T25251] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1742.171562][T25251] ? 0xffffffffa02057c0 [ 1742.175778][T25251] ? 0xffffffffa0201658 [ 1742.180037][T25251] ? 0xffffffffa02016cc [ 1742.184237][T25251] ? 0xffffffffa0201710 [ 1742.188477][T25251] ? 0xffffffffa0201858 [ 1742.192672][T25251] ? 0xffffffffa02019b4 [ 1742.196910][T25251] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1742.202922][T25251] ? _copy_from_user+0x94/0xb0 [ 1742.207784][T25251] ? bpf_test_init+0x113/0x150 [ 1742.212602][T25251] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1742.218166][T25251] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 1742.223614][T25251] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1742.229524][T25251] ? __fget_files+0x2a/0x420 [ 1742.234189][T25251] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1742.240096][T25251] bpf_prog_test_run+0x2c7/0x340 [ 1742.245103][T25251] __sys_bpf+0x562/0x860 [ 1742.249462][T25251] ? __pfx___sys_bpf+0x10/0x10 [ 1742.254305][T25251] ? rcu_is_watching+0x15/0xb0 [ 1742.259185][T25251] __x64_sys_bpf+0x7c/0x90 [ 1742.263656][T25251] do_syscall_64+0xec/0xf80 [ 1742.268262][T25251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.274388][T25251] ? trace_irq_disable+0x37/0x100 [ 1742.279531][T25251] ? clear_bhb_loop+0x60/0xb0 [ 1742.284267][T25251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.290267][T25251] RIP: 0033:0x7f3c8a78f749 [ 1742.294731][T25251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.314457][T25251] RSP: 002b:00007f3c8b65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1742.322982][T25251] RAX: ffffffffffffffda RBX: 00007f3c8a9e6090 RCX: 00007f3c8a78f749 [ 1742.331233][T25251] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1742.339305][T25251] RBP: 00007f3c8a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1742.347322][T25251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.355389][T25251] R13: 00007f3c8a9e6128 R14: 00007f3c8a9e6090 R15: 00007ffd4e44ef68 [ 1742.363479][T25251] [ 1742.366539][T25251] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1742.373868][T25251] CPU: 1 UID: 0 PID: 25251 Comm: syz.1.14524 Not tainted syzkaller #0 PREEMPT(full) [ 1742.383369][T25251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1742.393470][T25251] Call Trace: [ 1742.396778][T25251] [ 1742.399736][T25251] vpanic+0x1e0/0x670 [ 1742.403755][T25251] panic+0xb9/0xc0 [ 1742.407504][T25251] ? __pfx_panic+0x10/0x10 [ 1742.411962][T25251] __warn+0x317/0x4b0 [ 1742.415974][T25251] ? __skb_flow_dissect+0xb57/0x68b0 [ 1742.421297][T25251] ? __skb_flow_dissect+0xb57/0x68b0 [ 1742.426619][T25251] __report_bug+0x288/0x500 [ 1742.431154][T25251] ? __lock_acquire+0x6b6/0x2cf0 [ 1742.436113][T25251] ? __skb_flow_dissect+0xb57/0x68b0 [ 1742.441513][T25251] ? __pfx___report_bug+0x10/0x10 [ 1742.446560][T25251] ? __lock_acquire+0x6b6/0x2cf0 [ 1742.451527][T25251] ? unwind_next_frame+0xa5/0x23d0 [ 1742.456666][T25251] ? is_bpf_text_address+0x26/0x2b0 [ 1742.461896][T25251] ? lock_acquire+0x107/0x340 [ 1742.466594][T25251] ? __skb_flow_dissect+0xb57/0x68b0 [ 1742.471910][T25251] report_bug+0x16a/0x220 [ 1742.476276][T25251] ? __skb_flow_dissect+0xb57/0x68b0 [ 1742.481587][T25251] ? __skb_flow_dissect+0xb59/0x68b0 [ 1742.486914][T25251] handle_bug+0x98/0x200 [ 1742.491227][T25251] exc_invalid_op+0x1a/0x50 [ 1742.495771][T25251] asm_exc_invalid_op+0x1a/0x20 [ 1742.500650][T25251] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 1742.506581][T25251] Code: 55 00 00 80 3d 94 c5 36 06 01 0f 85 b3 55 00 00 e8 be 8d 8b f8 e9 83 f9 ff ff e8 b4 8d 8b f8 e9 b0 03 00 00 e8 aa 8d 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 9c 8d 8b f8 c6 05 5d c5 36 06 01 48 c7 [ 1742.526219][T25251] RSP: 0018:ffffc9000d43ef40 EFLAGS: 00010283 [ 1742.532318][T25251] RAX: ffffffff8935c70e RBX: 0000000000000001 RCX: 0000000000080000 [ 1742.540317][T25251] RDX: ffffc900187f7000 RSI: 00000000000005b4 RDI: 00000000000005b5 [ 1742.548333][T25251] RBP: ffffc9000d43f558 R08: ffffffff893562c8 R09: ffffffff8df41aa0 [ 1742.556352][T25251] R10: ffffc9000d43f5e0 R11: fffff52001a87ec6 R12: dffffc0000000000 [ 1742.564358][T25251] R13: ffffffff893562c8 R14: 0000000000000000 R15: ffffffff8f825fd0 [ 1742.572364][T25251] ? __skb_flow_dissect+0x408/0x68b0 [ 1742.577706][T25251] ? __skb_flow_dissect+0x408/0x68b0 [ 1742.583028][T25251] ? __skb_flow_dissect+0x684e/0x68b0 [ 1742.588455][T25251] ? stack_trace_save+0x9c/0xe0 [ 1742.593341][T25251] ? __pfx_stack_trace_save+0x10/0x10 [ 1742.598763][T25251] ? __lock_acquire+0x6b6/0x2cf0 [ 1742.603807][T25251] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1742.609385][T25251] ? __update_page_owner_handle+0x5a/0x570 [ 1742.615225][T25251] ? __page_table_check_zero+0x6a/0x3e0 [ 1742.620802][T25251] ? lock_acquire+0x107/0x340 [ 1742.625525][T25251] ? __page_table_check_zero+0x6a/0x3e0 [ 1742.631093][T25251] ? __page_table_check_zero+0x6a/0x3e0 [ 1742.636659][T25251] ? __page_table_check_zero+0x397/0x3e0 [ 1742.642315][T25251] ? __page_table_check_zero+0x6a/0x3e0 [ 1742.647888][T25251] ? post_alloc_hook+0x247/0x290 [ 1742.652855][T25251] ? get_page_from_freelist+0x24e0/0x2580 [ 1742.658696][T25251] ? rht_lock+0x8b/0x180 [ 1742.662984][T25251] ? __lock_acquire+0x6b6/0x2cf0 [ 1742.667961][T25251] ? rcu_is_watching+0x15/0xb0 [ 1742.672780][T25251] ? trace_mm_page_alloc+0x3e/0x140 [ 1742.678055][T25251] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 1742.684088][T25251] ? pfn_valid+0x125/0x4d0 [ 1742.688545][T25251] ? lock_acquire+0x107/0x340 [ 1742.693272][T25251] ? __lock_acquire+0x6b6/0x2cf0 [ 1742.698255][T25251] __bond_xmit_hash+0x2d7/0xba0 [ 1742.703176][T25251] ? __pfx___bond_xmit_hash+0x10/0x10 [ 1742.708633][T25251] ? pfn_valid+0x125/0x4d0 [ 1742.713096][T25251] ? lock_acquire+0x107/0x340 [ 1742.717800][T25251] ? pfn_valid+0x125/0x4d0 [ 1742.722272][T25251] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 1742.727782][T25251] xdp_master_redirect+0x13f/0x2c0 [ 1742.732937][T25251] bpf_test_run_xdp_live+0x14b8/0x1b20 [ 1742.738429][T25251] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1742.744088][T25251] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 1742.749668][T25251] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1742.755505][T25251] ? 0xffffffffa02057c0 [ 1742.759694][T25251] ? 0xffffffffa0201658 [ 1742.763957][T25251] ? 0xffffffffa02016cc [ 1742.768133][T25251] ? 0xffffffffa0201710 [ 1742.772323][T25251] ? 0xffffffffa0201858 [ 1742.776501][T25251] ? 0xffffffffa02019b4 [ 1742.780696][T25251] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1742.786633][T25251] ? _copy_from_user+0x94/0xb0 [ 1742.791425][T25251] ? bpf_test_init+0x113/0x150 [ 1742.796215][T25251] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1742.801704][T25251] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 1742.807141][T25251] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1742.812996][T25251] ? __fget_files+0x2a/0x420 [ 1742.817628][T25251] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1742.823475][T25251] bpf_prog_test_run+0x2c7/0x340 [ 1742.828459][T25251] __sys_bpf+0x562/0x860 [ 1742.832750][T25251] ? __pfx___sys_bpf+0x10/0x10 [ 1742.837559][T25251] ? rcu_is_watching+0x15/0xb0 [ 1742.842387][T25251] __x64_sys_bpf+0x7c/0x90 [ 1742.846830][T25251] do_syscall_64+0xec/0xf80 [ 1742.851358][T25251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.857442][T25251] ? trace_irq_disable+0x37/0x100 [ 1742.862496][T25251] ? clear_bhb_loop+0x60/0xb0 [ 1742.867195][T25251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.873109][T25251] RIP: 0033:0x7f3c8a78f749 [ 1742.877550][T25251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.897188][T25251] RSP: 002b:00007f3c8b65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1742.905629][T25251] RAX: ffffffffffffffda RBX: 00007f3c8a9e6090 RCX: 00007f3c8a78f749 [ 1742.913627][T25251] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1742.921623][T25251] RBP: 00007f3c8a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1742.929626][T25251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.937613][T25251] R13: 00007f3c8a9e6128 R14: 00007f3c8a9e6090 R15: 00007ffd4e44ef68 [ 1742.945626][T25251] [ 1742.949275][T25251] Kernel Offset: disabled [ 1742.953609][T25251] Rebooting in 86400 seconds..