last executing test programs: 3m26.809174807s ago: executing program 3 (id=1186): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611086005ee1bf810000000021d8e73d50636ce96c792a851c447350f2f4d078ac1ba822154f401e356a3facf1fab4dd536d028d6d4a727ef4bdf99d686f5a74c30a39fd006f7d7c66885ea9f0f602fa8aa0c8f0e8b9a5176372136050ab7af8316380354e0e74301cf5a438", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800002e1600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=@dellink={0x28, 0x11, 0x90d, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20c01}, [@IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x28}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x2) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5}) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12, @ANYBLOB="504a230f6ffb0d957f4299240ee10e5d9193ea143b8f085424b0d600c57bcb277ae574ad0ca7be2149c31cdd567756f93e9dd1457d509981b3e9796d4fbcd9df397b32123e91474602c62510abefb5d1b990af49cd99d3efa2f2bf5562db1b7a7670cd3d6c425734d469"], 0x1c}}, 0x0) write$nci(r10, &(0x7f0000000740)=ANY=[@ANYBLOB="7105b05adf31633d900c91f61b4e1baa5242e5"], 0x13) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r13) socket$unix(0x1, 0x1, 0x0) 3m26.590798823s ago: executing program 3 (id=1190): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000000)=""/96, &(0x7f0000000080)=0x60) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, &(0x7f00000000c0)="b1c6976ff73ce2f2ddaa35cfd2c2a303ce928d72efa3a8ae23e36c89587d64d98695c92a9a9d520dd79a926886ef2df2ce4b4f5d2c0c6dd6063471d94a9ab4b00be9ba52e530069c0e8965ccfea6e4340237e574656d320845dd06f393c7feea592f413448c29b35b9e120f2ab5b7a52e4e348bd47f244c98139158b26d6f26ce6463e9c37fad3ba68977b018b46eb2a46be27097a23ec8624b9bd63485a2e35b4e0472047e550e0091e111d6b7469599dd0269edfac8d419094", 0xba, 0x4008880, &(0x7f0000000180)={0xa, 0x0, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x2}, 0x20) socket$kcm(0x29, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e20, 0x1, @empty, 0x9}}, 0x9, 0x6, 0xf094, 0x6, 0x42, 0x0, 0xf}, &(0x7f0000000300)=0x9c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000003c0)={0x10, 0x1ff, 0x4, 0x5ad, 0x3, 0x0, [{0x7fffffffffffffff, 0x0, 0x0, '\x00', 0x80}, {0x0, 0xfffffffffffffffb, 0x0, '\x00', 0x1d08}, {0x9, 0x0, 0x977}]}) r6 = socket(0x1a, 0xa, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000600)={@hci, {&(0x7f00000004c0)=""/216, 0xd8}, &(0x7f00000005c0), 0x49}, 0xa0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000006c0)={0x7ff, 0x6, 0x80, 0xff}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000700)={r4, 0x48, "af7ec2332b5a48ab75d6125ec5b2e1900cf0be3d3f4e85ed655b5bc967a8817378cffb39e44bf6e59b19e4c3588102b246ceb6f93473bd567f883debdec97ef7ca769752a65bf654"}, &(0x7f0000000780)=0x50) r7 = accept$inet6(r5, 0x0, &(0x7f00000007c0)) connect$inet6(r7, &(0x7f0000000800)={0xa, 0x4e20, 0xb92, @private2, 0x949}, 0x1c) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1e, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @jmp={0x5, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff02}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @alu={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffa, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000940)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x7, 0x400, 0x10}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x1, 0x4, 0xa, 0x1}, {0x3, 0x3, 0xc, 0x8}, {0x2, 0x2, 0xc, 0x8}, {0x2, 0x3, 0xf, 0x4}, {0x2, 0x4, 0xc, 0x4}], 0x10, 0x8}, 0x94) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000b80)={0x0, @private, @broadcast}, &(0x7f0000000bc0)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000c80)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000cc0)={r8, r9, 0x25, 0xb, @val=@uprobe_multi={&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)=[0x40, 0x5], 0x0, 0x100000001, 0x2, 0x1, r10}}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x10000, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r6) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f0000000e80)=0x1c0612) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r11, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0xd}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3718}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfff8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008880}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x50, 0x140d, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44800) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 3m26.454581442s ago: executing program 3 (id=1192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140b, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040c0}, 0x42800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x2, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x600000}], &(0x7f0000000200)='GPL\x00', 0x2, 0x96, &(0x7f0000000240)=""/150, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x7, 0xfa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x10, 0x4}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="0700000000000000ab0c765e5402540adccd10ea", @ANYRES32=r9, @ANYBLOB="8000490100000100ac141427"], 0xc4}}, 0x0) 3m26.27159138s ago: executing program 3 (id=1196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r1], 0x158}, 0x1, 0xba01}, 0x44) socket(0x1d, 0x2, 0x6) (async) r2 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r2, 0x6a, 0x6, 0x0, 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/224, 0xe0}], 0x5, &(0x7f0000000640)=""/4096, 0x1000}, 0x10102) (async) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/224, 0xe0}], 0x5, &(0x7f0000000640)=""/4096, 0x1000}, 0x10102) 3m25.999753003s ago: executing program 3 (id=1202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x65}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r3, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {0xf}, {0x7, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000003, 0x10010, 0xffffffffffffffff, 0xb710f000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="e38c", 0x2}], 0x1}, 0x480c0) pipe(&(0x7f0000002740)) 3m25.703590958s ago: executing program 3 (id=1205): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3m10.489282508s ago: executing program 32 (id=1205): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b36aa89aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154be"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m33.67848004s ago: executing program 5 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r8, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000040)={@remote, r8}, 0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, 0x0) r9 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x400261f3, 0x0) 2m32.059754511s ago: executing program 5 (id=1641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) 2m31.989667111s ago: executing program 5 (id=1643): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) 2m31.346627826s ago: executing program 5 (id=1651): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000e"], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xec, "a375ae925c699bd4d91bf0be14aecb8130ece7637ed00fa6e1d3befcf88808ac941224cced0dc715f194da33d6cea3cddcd3701a2cedae724a76dbc226ab6dd08f7f5100d52258e0417150f9a5bc16374ace4bc22641e624bc6f5fdb95aa08fa17d569fa17256388eafb6be967b4fbd9628dc3fffcad3a6248ccced1e37293a6c61176ad73ea3dd63d49f9531b2889152d431ffb28889598e2de9c9a3c462b2954e8023d4a3032127bcea3d78e32b17f1b83a7dd7107f453c600f9f38d22f58968f67bf3bc9c3b93e4b20a49c1e70732b5be937b11e76cdf3545e2c78ef85f356f2dfaa939eddba52066c997"}, &(0x7f0000000040)=0xf4) syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0xfd}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r4 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={r3, 0x9}, 0x8) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)="b892822505d1619f8c868c9afcb230b6e92e31e7e850f0106a3ec7c988f9184ca9e17cb7bc2ab6c9920db07e43d48ae8db5c5b0da9cb08d90f3c9183", 0x3c}], 0x1}, 0x44000) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) getpeername$inet(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r2], 0x8) 2m30.36790539s ago: executing program 5 (id=1652): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840), 0x7) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4088, 0x995}, {&(0x7f00000014c0)=""/263, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0100000000000c000100626f6e64000000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r9, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000010140012800a000108767863616e00000004000280080023bd", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 2m29.418851272s ago: executing program 5 (id=1659): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r3, 0x62, "2c6940015e5c50ea7392ad859e136154e0c44cae3becd9661297e760911961f1f4175c54cc99853a0f69922cabc14a182a3537596767574e615c0e9540e7399d894430a8db179a0952ec55862591b80af068f58765be6bf375ee82f9b8de35744800"}, &(0x7f00000000c0)=0x6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) socket(0x0, 0x80000, 0x3) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r6], 0x3c}}, 0x10) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="34005396f43e0fd6f7595c71763a000011000100", @ANYRES32=0x0, @ANYBLOB="09000100a008000014000300776c616e3100"/28], 0x34}}, 0x4084) 2m14.369487212s ago: executing program 33 (id=1659): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r3, 0x62, "2c6940015e5c50ea7392ad859e136154e0c44cae3becd9661297e760911961f1f4175c54cc99853a0f69922cabc14a182a3537596767574e615c0e9540e7399d894430a8db179a0952ec55862591b80af068f58765be6bf375ee82f9b8de35744800"}, &(0x7f00000000c0)=0x6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) socket(0x0, 0x80000, 0x3) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r6], 0x3c}}, 0x10) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="34005396f43e0fd6f7595c71763a000011000100", @ANYRES32=0x0, @ANYBLOB="09000100a008000014000300776c616e3100"/28], 0x34}}, 0x4084) 1m51.079854651s ago: executing program 1 (id=2166): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000001fc0)={0x800000, 0x0, 0x5}, 0xc) 1m50.943608268s ago: executing program 1 (id=2169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r4], 0x7c}}, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000004c0)=0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)={{0x14}, [@NFT_MSG_NEWRULE={0x178, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x12c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x94, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x84, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x70, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "9a6929e103ce7727d1180578b854e892e550834b0ba2fa8906b02b7bab4b0f3ecaaac77ae078eb76b65c658c38f9ad405031769379407d392e399a0bf41681e77dc8f7d84a8bf305dab28ff47853612c333a5efd8e9784430f5e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}, {0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x97}, @NFTA_INNER_NUM={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}], {0x14}}, 0x1a0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x50) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) r7 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (rerun: 64) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2df1, 0x64}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24048800}, 0x800) 1m48.631828942s ago: executing program 1 (id=2178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4", 0x14}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x710fa183c0cf5d6d}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x754, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xfff2, 0x8}, {0x5, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x710, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bond_slave_1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xffff}}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x10001}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xc}}, @TCA_FW_POLICE={0x464, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x6, 0x4, 0x6, 0xc6, 0xa, 0x8, 0x2, 0x10001, 0x2, 0x3, 0x7, 0x4, 0x0, 0xffffffff, 0xfffffff9, 0xb, 0x7, 0x2, 0xffff, 0x8d, 0x0, 0x6, 0x8, 0x5, 0x6c98, 0x251, 0xaff, 0x6e, 0x1, 0x9, 0x3, 0x7fff, 0x8, 0xfffffffd, 0x4, 0x6, 0xfffffffc, 0xfffffffc, 0x3, 0x2, 0x6, 0x5, 0x2, 0x7, 0x4280, 0x940, 0xbe5, 0x18d, 0xc, 0x9, 0xcec, 0x1, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x5, 0xd, 0xca, 0x4, 0x200, 0xff, 0x1, 0x3, 0xfa3b, 0x3, 0x800, 0x7, 0x2, 0xa, 0x5, 0xd, 0x7, 0xffff, 0xb9, 0x5f78c33f, 0x4, 0xffff, 0xfffffffd, 0x400, 0x4, 0x1, 0x6a9, 0x8, 0x6, 0x81, 0x2, 0x10000, 0x3, 0xf, 0x1e, 0x3, 0x7f, 0x6, 0x7, 0x7fffffff, 0x0, 0x3, 0xc802, 0x4, 0x0, 0xb, 0x5, 0x8b3a, 0x4, 0x7, 0x5, 0x86, 0x6, 0x6, 0xfffffd6a, 0x6, 0x7f, 0xa307, 0xa2c4, 0xfffffff8, 0x5, 0x1000, 0xe, 0x5, 0x809, 0xe, 0x7, 0x10000, 0x101, 0x4, 0x80, 0x2, 0x8, 0x8, 0x2, 0x8, 0x2, 0x6, 0xffffff19, 0x8, 0x7f, 0x8, 0x6, 0x5, 0xe71, 0x9, 0xb, 0xfffff001, 0xec, 0x3, 0x8, 0x4de8, 0x7, 0x5, 0x1, 0x95e, 0x1, 0xfff, 0x4, 0xfffffff8, 0x5, 0x0, 0x7c, 0x101, 0x4, 0x400, 0x5, 0x6, 0x0, 0x9191a07c, 0x9, 0x3, 0x5, 0xb, 0x9, 0x5, 0x8, 0x40, 0x9838, 0x9, 0x10, 0x5, 0x81, 0x7f, 0x8, 0x10001, 0x80, 0x7ff, 0x8, 0x4, 0x8, 0x8, 0x2, 0xffff, 0x8001, 0x4, 0x6, 0x40, 0x80000000, 0x1, 0x2, 0xd, 0x33, 0xd13, 0x1b1, 0x3, 0xfffffffb, 0x5, 0x3, 0x7fffffff, 0x8, 0xb6, 0x6, 0x0, 0xfff, 0x2, 0x101, 0xb, 0x8, 0x7, 0x0, 0x1, 0x3, 0x8000, 0xff, 0x400, 0x3, 0xd, 0xc9, 0xffff7fff, 0x1ff, 0x1000, 0x81, 0x7, 0xe6, 0xffff, 0xfffffffc, 0x7, 0x7fffffff, 0xa47, 0x1, 0x9, 0x3, 0x1, 0xfffffffb, 0x8000, 0x20000000, 0x8, 0x7fffffff, 0x3, 0x4e9, 0x1, 0x0, 0x101, 0x7fffffff, 0x6, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x45}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x70a, 0x1, 0x8, {0x29, 0x1, 0x4, 0x8001, 0x5, 0x9}, {0x9, 0x1, 0x4, 0x84c, 0x5, 0x8}, 0x200, 0x8, 0x1f7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xd}}, @TCA_FW_ACT={0x268, 0x4, [@m_sample={0x168, 0x6, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x0, 0xc}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x101, 0x20000000, 0x80, 0x8ea}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80000001}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x200}]}, {0xe2, 0x6, "26ec5ca6fb700b66d151c45ad014eb7243ce179a719fa0890127a3dd36012086c629a8ef450733e286b1b7468b39120897510313acae32857a5d866630dd5e4e9b1b8db0ebd21f7c55d9e8846256160069fe31d9c33cde374ec13f6ce6fef1372508cd22ff5fa10a56a3e130cc4ab8cc96e3aa65327c52a68fbffe68b615852c6afed164b2d07e921ac3ad82551da6fe3bfdc616c8980266237525d4c09afeefe08ca6e2c03fa1f93d6379e53dd0fb415ca6be8eaec8d823889a5f8de11fdad2af0e65c6bfeb5ba9f610c2eb97b2b2bd68fb10c9cdd8be4572cdce611073"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x54, 0x1c, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0x10, 0x6, "44c08cc7c0fe95318525b3cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xa8, 0x4, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfbe}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe3be}]}, {0x41, 0x6, "42daa6e8b4545609ef0958c8eddba033148c33bba7417c01c541a77325d273aeb9b87243cc52659f54b00bc0394776fd09168ccebc67b440c4bcfaae94"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x17, 0x9}}]}, 0x754}, 0x1, 0x0, 0x0, 0x20004000}, 0x400d0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x38}}, 0x0) 1m48.391392242s ago: executing program 1 (id=2182): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) bind$802154_raw(r0, &(0x7f00000009c0)={0x24, @none={0x0, 0xfffc}}, 0x14) 1m48.231748485s ago: executing program 1 (id=2186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000040900010073797a31008000001c0004801800018008000100647570000c00028008000140000000020900020073797a3200000000140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1m48.122134618s ago: executing program 1 (id=2188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept4$rose(r3, &(0x7f0000000080)=@full={0xb, @remote, @default, 0x0, [@rose, @null, @null, @null, @remote, @default]}, &(0x7f0000000240)=0x40, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m32.913869392s ago: executing program 34 (id=2188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept4$rose(r3, &(0x7f0000000080)=@full={0xb, @remote, @default, 0x0, [@rose, @null, @null, @null, @remote, @default]}, &(0x7f0000000240)=0x40, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.907490249s ago: executing program 0 (id=3100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x4, 0x300) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0000003820697b9c21f30542c2717c931ff6e17b14ed72b812934ccf72a5291b48f8e0e7eb3f8b8120bbe4bfaf888f3818788c46442228589596f3723f11ae06a11297cf8a4c119f8cd00b37de46e3e0194dded6599dd5a2a40ea7aae56cea8c4c76ec8f91d6e4b336a03a0e0d8ba8a012276eefaa9c19c7a9ee4e84d932c326edd8c109fc553c382f4674470f39294d4a913ff6eb8a030a992888b42539f7e2807b71b7a25f6dd289f6b2692f166810812ddd3779bc8b686722bea867354547b349567da97713d9e18d2f00d860f3891760faa1ccba304f"], 0x3) 3.447611318s ago: executing program 0 (id=3106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async, rerun: 32) r0 = socket(0xa, 0x1, 0x0) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) (async) shutdown(r1, 0x1) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) 3.167543662s ago: executing program 0 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x25, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtaction={0x130, 0x30, 0xb, 0x0, 0x0, {}, [{0x11c, 0x1, [@m_gact={0x118, 0x12, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x0, 0x4, 0x5, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13b8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x40000000, 0x10000000, 0xffff0000, 0xfa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xc, 0x7, 0x8, 0x2}}]}, {0x98, 0x6, "4cb9d26b761e9302a74d2e759de981a31d8d2394b858056208cc04c6b5f04f4a965ee96cb2deb2204e9e3f393cf763bb97be2c48746c4770d26efa009234f19ab0315d0861b39efcb097b1397766b01f28c3fcc4464bd3890a578945226fb7c559d0bc0afe6a88ffa0b8cf8a380dab4e7648791cdeeb70351bde63064406704fb0228f28dab5222a91ce2449af8a3aa8f0234659"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x130}}, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES64=r3], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000440)=""/227, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x27}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x108, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0xd6, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180)=[{0x4, 0x203, 0x5, 0x3}], 0x10, 0x4}, 0xf6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r5, 0x0) close(r5) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) listen(0xffffffffffffffff, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') read(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000680)=0x2e, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x3a, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x7f, 0x983}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x24000041) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 2.823522721s ago: executing program 0 (id=3116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 2.767226976s ago: executing program 4 (id=3117): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1000000, 0x0, 0x0, 0xfffffffd, 0xca8}}}, 0xb8}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x1b8, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 2.763830691s ago: executing program 0 (id=3118): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000240)=0x80000000, 0x4) (async) sendmsg$inet(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000180)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x2404c014) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4c040) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) 2.659505963s ago: executing program 4 (id=3120): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1, 0x0, 0x14}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000040000000000280000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000ec000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000009800000040"], 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x20048844) 2.659055424s ago: executing program 0 (id=3121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000004c0)={0x1a8, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x18c, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, "c65f26cd1e33fca92f40ab028bd2a7dba841a0459cdcd2f5a75fe0cb48db52097c75bc025838f490ff45a307b02aced4ff37f9a180ad78e554e67804ac5b983cef78b8dedefa3d69e1722239"}, @NL80211_BAND_60GHZ={0xb4, 0x2, "18d462377f14ffbca89f07176eb834d2c744e8a3292b2a94276a9cd2cfb069cf512251b529e52ef696f2c67620e7f3bf0f48fe429ec5fef1859c4af7fdb2d2163498272827b10fe10d82afdad464e63060145ecfb6a143ebdf94f574bc0825098afaf34b29fdea12974038922008aa94b4aee420dda2c96cf53de6130766d53e915e81ca9df4b4a34c3237210814441f6f2851ceee6e3e4d6732194bf72ceb9211805716e6e4a24d4a15441f3d2f6da4"}, @NL80211_BAND_6GHZ={0x7b, 0x3, "0127eddc9fab10d44e6f27208dc5aacd207521719d6b1b7e85461473a2ba03dcffcc6c0cec0f7d8c80b42ed9deb6397e206ccdf211b9ba216811e5f5bb0062ffe294458679c53937363d094b233d88f932e690fc91aa365aef584090ce552f7b007443714a21b8108133b9e74746c2bb4ad883250f8044"}, @NL80211_BAND_2GHZ={0x7, 0x0, "961df4"}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x24004084}, 0x24001094) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xfb8, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x79, 0x7, 0x1, 0x0, "21937adbcdae99e1d79e8f9dd37f94ae6c567c2826f02ed6a499a66b02aab061c6cbc89eb3c5a62c0618f6ac508c51a16618225fb028de0374c39d2dc983dfe7909cff3b5b0cc70c3675c3dbdd907e8c69f6b8fc05b08d681cdf3929e3e11e35524129387a9c3563f77db993b734da4efd1d6eb859"}, @NFTA_RULE_EXPRESSIONS={0xf28, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_NAT_FLAGS={0xfffffffffffffddb, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1b4, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0xed, 0x3, "418a123854d815d8ea965ff2688853b519e7cbee91613f66a3c5c69580773e88f6d706e2a5aa22de82d9d7d6250e391f8149c43108f8a4ce0b166be82a0b6ce42357cd8ae9c6281a60f4b8c37132d7ca4bee1e6bc08206ef9ad9c148963bb85901b94c6ce8ea32f6da8836546d1e5606bf2d4eba97607393c1212e3931ccc5d85f298eb8ed42cb177225129388a0b3e0631c45ebdb96ff91866d01a1b752d7116007e854c5928691fc43b6188917d1429711dcd707cbbaaa2bbd0283438cf64a6da12f4ce27386a5455fc8c38ea60b48d51eda3efbccb7c2d9691c7ac2664908c7b0c22098024742fe"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x8d, 0x3, "dcb79f59470535cf444fb375ffce4a8e84a06f31ef4a558365e92b1df23217c2c15a9b685a12dc9d28314145e5ed237cc2b3da48d8fe2e0159d1818d836d555743dfbd09e34c7933a5f49d94e0746c24cd38a250b9a102118800a2718bd89ed29dac193f393cb3541a49030b2d112e539c1645d59930a049e940687ee16230045f7b5e4c2caa59d3b9"}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0xccc, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xcb8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xd4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "c332561012fbf2fbb31d3aa4395f764b05bbe9eaeffc6de73afedfc25a42ea5ac304164ed4a263cd811c2a20fb9cf7760e3f98f514da53c435b4d9e8f567d27edfa8bbf819d17c6b86be142a173f00727e75944245c49baa55995d14198f650532e40f57ac172ca0eed4b8f6d4418867d1b81d263137c6b8d039b3ff9765648efc6088a5e30ce712c7212ffb704698c52f7918804a7098738d38c51c2828de4f7c853fec020d375c594d1f8c9244b43a6560167a5b2137913a2500cf582008a1e57b8869aef3d7c3d413"}]}, @NFTA_IMMEDIATE_DATA={0xbe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "3a072a6db47ece766e8bdcb261101ceac67614d859db9649ab010a013093f461364eb9a41b7bcaa473927af6bb4e10c0e36b0378b41c1a9e9443b3ae644cea9a324769d174406466ad31e2662e7cac112ba71807c3b72283d1a24705cf2dc0fab4f75522cf0b8418e2e352a53f2a7b81dbf47b888cea49fc4f2744712e4cf45d8895f49d8f56c1291bd8794a2f3f6e02c61feee28fa882babeb1e8a66ab49d0bdff02e95e001cbf21bc7629d70dfff9b53417a3682bbc74828"}, @NFTA_DATA_VALUE={0xb19, 0x1, "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"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xfe0}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1.994802114s ago: executing program 4 (id=3130): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "7919d8c1a084855cc312bc04f13fdf4bc5cca4"}}]}, 0x150}}, 0x804) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100}, 0xe) 1.552476285s ago: executing program 4 (id=3137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019e001000036e8a5656076d4866d6db0b0c44faa50000000040200007f000000fe8000000000000000000000000000bb00000000000000000200000000005ecff560f21213bb0a46a6121f1339ba000000000000000000000089078a9b36d80874a26ff858f69756800d3abd46ea82f59569baeb48ec120c865ce498bae28f7271c9275ec7c47dd9ce703d3a09e1200591241abff63d095c", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x4048004}, 0x775da16d4ab8f94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000340)=""/136, 0x88}], 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r5, @ANYBLOB="87002dbd7000000000001e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040025}, 0x800) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_int(r2, 0x0, 0xe, 0x0, &(0x7f0000000040)) socket(0x3, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'lo\x00'}) 870.550189ms ago: executing program 4 (id=3146): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x805, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r5, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000280)=0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r0, 0xb, 0x0, 0x7, &(0x7f0000000680)=[0x0], 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000380)=[0x0], 0x0}, 0x40) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="2a0000000400000000000000", @ANYRES32=r11, @ANYBLOB, @ANYRES64=r10], 0x20) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000cf1571b7b2e0500", @ANYRES16=r13, @ANYBLOB="00082dbd7000fbdbdf2510000000080008000d0000001400018008000300020000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) r14 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r14, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) 863.554548ms ago: executing program 2 (id=3147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}], 0x20}}], 0x1, 0x8000) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 795.51083ms ago: executing program 6 (id=3149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24044014) 643.257294ms ago: executing program 4 (id=3151): r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) bpf$ITER_CREATE(0x21, &(0x7f0000001480), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0xc, 0x6, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000013c0), &(0x7f0000001400)=0x4) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, 0x0) sendmmsg$inet(r2, &(0x7f0000001380)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000040)="5f5b55c4fdc8b5a9dbc1a5ac6f856b7b2fa7ecf70e978c19c872a33de71f3969fbabba2c6563d60bd7fe9d74beeb40cf90bffbd702ca216a926bb54ec7890241b86627af948a5d8a95810f11877f80495ba29453cb3bee2ac4fe5b742707024d757974d9d8a6d036c22a71f67d28924a93232e24727b9b543b1993d53d75da52239857d2aecb19164288568d21754ef8d09bda3d11611c0743f3bf1126a7527e36c9733e8413ac14eff3e4221621f11f7be89155", 0xb4}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="066138aeb61ecf6cc4002bdbbca72defe8fabd7e1dcaaeea4389171cf664c3a22f80855e1bd2", 0x26}, {&(0x7f0000001140)="a27df40aea6948b3aec6b0e272b3608f84212324b5304adfff02ddfb", 0x1c}, {&(0x7f0000001180)="a2f3647941ee66e1f4a377ec68eac231750c1747aabb596e91a77f1716a8f24fb344a1cc09d50313082036e06b7a638dcc7887c1cf071836f00cbed0134f5946832bc594a006cceb8bee10b61fa031eefd1170c7d9af1adfe671897d08ddba622aa5d3627c0a96c61d7c5a5df227bfe9f1ea8e514f783de0439b6c02df3369a5d253c761c4e1720b6c9a574a263d9ff3af5bb252", 0x94}], 0x5, &(0x7f00000012c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@cipso={0x86, 0x7b, 0xffffffffffffffff, [{0x0, 0xe, "d3228b9cadb6390b89810a57"}, {0x7, 0xf, "f1f76ea982f230a214e5d6c8f6"}, {0x2, 0x12, "41693053e962d114315565288ffe1794"}, {0x5, 0xc, "3d5177be48d239466e5b"}, {0x6, 0xa, "cf24f86f0e689ff1"}, {0x0, 0xe, "552972e8cb7eccfcf7988ba1"}, {0x1, 0x8, "a80c87061915"}, {0x0, 0x2}, {0x5, 0xa, "c476ca8e78ce839b"}, {0x1, 0xe, "4b759c9a65dd2ee59b203cd2"}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3d}}], 0xc0}}], 0x1, 0xf45e2246ca2cd35f) read(r2, &(0x7f00000014c0)=""/4096, 0x1000) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000001440)={'batadv_slave_1\x00', @ifru_flags=0x2}) 609.314045ms ago: executing program 2 (id=3152): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000040000000000001a00000000000000002e5f00"], 0x0, 0x2b}, 0x20) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "059ddaa0b15b360c", "bc465a3b38c86a48cfeda9f42e9720bc", "6a0bced0", "7353d57082223c21"}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) ioctl$sock_ifreq(r1, 0x8911, &(0x7f0000000100)={'netdevsim0\x00', @ifru_data=&(0x7f0000000000)="8e9054c4a47e04643d3285f35c7ac87a32527a1b0de40fe5c830e3a50f2b27be"}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 527.948821ms ago: executing program 7 (id=3153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000003a5d2e2a000000000000100000007653a73ac24a85eac1e07ea55746619ea0158affbc376d88f14fc6a61bcbe2076a3831d5384a4673b36c973e7e5f639428c1e4652678bc3703becbd92fda6b8b8834e342c4363ba6d7cce62aeb4fd5fea0cdd74fbbdcdccd4b8bc814e32d15415f7466959b8df8b68fbda055a36467e7309639499730ba290b4a1c515ae2abb0253b2a8426269434aba9a8e105d9c9dcff0063e3b5a63dbc425cca879ecbc35d21cf45ca5cb6a50764c7d9d8ee39f337046280ab"]) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="1d40000000060000000800227970b4c56acd929338df84f88b3dee17ca6e753e0109c76e6eef8a74cc6080d750c71ecdf2803e4cffc768a254eed677753ac3ab64c26a5f2a9670cc7a015be3380e37fbe18ae50ebf32ce26f88c6c0577c85eb2791dc886d526a0fdd982ba402969561b0a1f2883bb72bf2ef9360faadf25fe81252ddb5d682d3b11be3f49c74dd7698efa02233f745abfb965"], 0x24}, 0x1, 0x0, 0x0, 0x48055}, 0x4000804) 495.526897ms ago: executing program 6 (id=3154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xffffff5f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f00000000c0)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) 484.857279ms ago: executing program 2 (id=3155): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000200000800040001000000", 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x144, 0x1d, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@encap={0x1c, 0x4, {0x0, 0x4e25, 0x4e21, @in=@multicast2}}, @replay_val={0x10, 0xa, {0x70bd21, 0x70b528, 0x1}}, @algo_aead={0x108, 0x12, {{'aegis128l\x00'}, 0x5e0, 0x200, "c6738cc11c526576c0682ddcc2491929975bd9b032929442ed928d29ff7ed19e80c894608505e34b6f7bde49af99f91257cbfac5fb2d34c40c1ba9bcba78be5857b8f990c26c2280eefa4b80cdf9de0dc55838f0ee8841663ab9a48a6380bce43281040a59bc1deda4afdd77446f925aa41419708c463d68cebb06b25b59513e9f901e3b15382b9cea6a1099da51e7b6553ca5ff12d861424adf21a51507a70bd6e65b826067b1eb99f8cf9d4119f84475479dea71ef3485eff491fc"}}]}, 0x144}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x144, 0x1d, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@encap={0x1c, 0x4, {0x0, 0x4e25, 0x4e21, @in=@multicast2}}, @replay_val={0x10, 0xa, {0x70bd21, 0x70b528, 0x1}}, @algo_aead={0x108, 0x12, {{'aegis128l\x00'}, 0x5e0, 0x200, "c6738cc11c526576c0682ddcc2491929975bd9b032929442ed928d29ff7ed19e80c894608505e34b6f7bde49af99f91257cbfac5fb2d34c40c1ba9bcba78be5857b8f990c26c2280eefa4b80cdf9de0dc55838f0ee8841663ab9a48a6380bce43281040a59bc1deda4afdd77446f925aa41419708c463d68cebb06b25b59513e9f901e3b15382b9cea6a1099da51e7b6553ca5ff12d861424adf21a51507a70bd6e65b826067b1eb99f8cf9d4119f84475479dea71ef3485eff491fc"}}]}, 0x144}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, &(0x7f0000000800)) clock_gettime(0x8, &(0x7f0000006500)) (async) clock_gettime(0x8, &(0x7f0000006500)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) (async) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 427.850958ms ago: executing program 7 (id=3156): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c03"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, 0x0, 0x41) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r13, 0x400, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xf01}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) socket$unix(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c2f175d", @ANYRES16=r13, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r15, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x300, r11, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2cb, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_b, @initial, {0xd, 0x10}}, 0x400, 0x9, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x18, 0x1}]}, @void, [{0xdd, 0x7c, "c9e56e38bebed215a375c0c0304e80c3b5dae2e7ed7c9e52be700bfdbe580ed96beea47a4c98ff342a11cd9d63288ddc1323197d38ab998718a474f83bfc06e47583c7bdd2a4d6a85e82029959cb9b89744708ec2446659d162ecfbfee185cdf98c416ecd50a2ef5a3fe21dd20734ddeecfe010485c63c994f1bc8e7"}, {0xdd, 0xb2, "63abd93769244c272d6a721589436c5dec6a628ed6fe5d7ddbadeffda1b34086326e9f06c0d83d6f6ee2a929b3dce243927053051c9412c891ef97bfae4a787e1b0a92046914b517e1ffa8955b6437e179a41df92ea8a2ed23c15e3e58f7940e55fa50d544d25801954c318057ce7d48eb627b1cc7adcc44100681b4ea700b6b41b19428506b52f4a7fa33d338f181b8f47f0881ac23b55343b938153be2ee35a8439fe92455ba3272e5b28405c62580cc89"}, {0xdd, 0x98, "91c229d7841e68c27c330e7704af706c796c530f2bea0e91b805f4804e68f203cf73f361bc3a0c2bdba3c57a730104f181dd500a7f509f61dfe5671ecc0d62359207768d7e394acc05f91997958d9b96b52a2754d25b1559ecd5b040d3147f104064d112326bfa2a50509a36df3341dc2457c9f0e68f2085897f3a3bd242d918817d56033b379e409768bf6cc7f855960fd694779b9b9a1f"}, {0xdd, 0x9c, "f80275d48bfdc0cb27893ecc3847d99338ab77e41e15b4237de4b737cbc957ea9e5b3d39db8997dcd9614fb77db2960e4f05d03c6d28018c3c8a418239764e1df267882188ca94b5a6f636e3c08bb7a580fa0c291a3ac5fc0ca18d28163b9df4b43ac9f14535899facf8893a4e39034fe6c2df75aebb785c7b2c59829d2cacc8512161ab0b6a6cf55c7f08b460c02b90bd66bda0b0c1a28896d77dfb"}, {0xdd, 0x34, "667b5456e9f16e202f0e7b8a4e5eb9eebfd20d7187afcd913ca19f4bd7adf593d62cbaaf0ad3424eb140f946535155f3b925c49a"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11d9}]}, 0x300}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 390.675232ms ago: executing program 2 (id=3157): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x80) socket(0x2a, 0x3, 0x1000006) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x33, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@delchain={0x34, 0x65, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0x5, 0xfff1}, {0xc, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c080000da49c81d264c70cbdd2df724f684aa41491ea55111f1e7fc9380930cd2fc4fcb65b3", @ANYRES16=0x0, @ANYBLOB="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"], 0x81c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000080c) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r3}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) accept4$unix(r4, 0x0, &(0x7f0000000080), 0x1000) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="10ffffe5000000003f00e0fbff000000a9aa0000000000002d67f3845a96fca09267ade23242f963e2ef8496773d88188953ce0514bec2af3e1a61f329835bc6328a0d5b256a379aec40c468291eef8041d144097fdcbc5a9cc31414ea97fd48927324049a10bebb8245e2b5199baa36a7382ba43cee02f8501b91be4392ffb61d94f35ef8e34c5f4e1ac63d470571eb509b05696f95463844582456d102cb160ad185e48b217a924ab700f892279a66d2a299aad5b6f820a468465181934c73ee5404b2a1071ce4892c756ed2aa7305d284cbc570207faf1bed99a22a775d"], 0x18}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) 345.334744ms ago: executing program 6 (id=3158): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x20) shutdown(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r1, 0x6, 0x3, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="ac7d04156b3868835920cacd1fa429665eb9ecdd7d6b40280c5d29002f58e1bf524a906e387935292e0d4d26159d16864ac4bcdc275ad9797e642a85", &(0x7f0000000040)=@tcp6=r1, 0x4}, 0x20) 264.003659ms ago: executing program 7 (id=3159): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021692500000000002020207b1a00fe00000000bfa100000000000047010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) 261.043217ms ago: executing program 6 (id=3160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 240.232331ms ago: executing program 7 (id=3161): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006911750000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x78}}, 0x1c}}, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast1}, 'veth1_to_hsr\x00'}) (async) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x27, 0x17, 0x0, &(0x7f0000000240)="d5add09d2297feb5aaf8ad48cc02cb29fcc000775b9fdd", 0x0, 0x7f, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 210.081818ms ago: executing program 2 (id=3162): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0xfffff9da}, {{0x0, 0x0, 0x0}, 0x51}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/233, 0xe9}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f00000000c0)=""/252, 0xfc}, {&(0x7f0000000740)=""/251, 0xfb}, {&(0x7f0000000000)=""/24, 0x18}], 0x7}, 0xb}, {{0x0, 0x0, 0x0}, 0x10005}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x7}], 0x9, 0x4022, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r1, @ANYRES64=0x0, @ANYBLOB="00ad000001"], 0x48}}, 0x4004041) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_transmit\x00', r0, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x20}, 0x0) 127.798778ms ago: executing program 6 (id=3163): syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0]}}, 0x0, 0x2f, 0x0, 0xb}, 0x20) 125.119121ms ago: executing program 7 (id=3164): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x201}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 84.908223ms ago: executing program 6 (id=3165): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 61.881279ms ago: executing program 2 (id=3166): syz_emit_ethernet(0x82, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8000088a8"], 0x0) r0 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'nr0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x81e, 0x69}}) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) 0s ago: executing program 7 (id=3167): r0 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) kernel console output (not intermixed with test programs): amed from eth3 [ 538.121889][T11269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.163495][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 538.193551][T11273] netlink: 'syz.0.1492': attribute type 10 has an invalid length. [ 538.214293][T11273] veth1_macvtap: left promiscuous mode [ 538.222154][T11273] team0: Device veth1_macvtap failed to register rx_handler [ 538.312504][T11087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.384721][T11087] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.388704][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 538.405030][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.412330][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.563758][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.571337][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.745133][T11296] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1500'. [ 538.760257][T11296] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1500'. [ 538.779523][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 538.857542][ T5892] Bluetooth: hci5: command tx timeout [ 539.220719][T11087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.246123][T11281] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.276516][T11281] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 539.340759][T11281] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 539.351756][T11281] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 539.380315][T11281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.400198][T11281] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 539.420533][T11327] netlink: 'syz.2.1505': attribute type 11 has an invalid length. [ 539.454050][T11281] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 539.471258][T11281] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 539.763042][T11343] Bluetooth: MGMT ver 1.23 [ 540.123246][T11281] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 540.140610][T11281] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 540.340946][T11087] veth0_vlan: entered promiscuous mode [ 540.382156][T11372] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 540.427453][T11087] veth1_vlan: entered promiscuous mode [ 540.596714][T11087] veth0_macvtap: entered promiscuous mode [ 540.631056][ T3013] veth0_to_bond: left promiscuous mode [ 540.731305][T11087] veth1_macvtap: entered promiscuous mode [ 540.865867][T11087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.927989][T11087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.000869][T11405] team0: Device gtp0 is of different type [ 541.230227][ T6639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.250749][ T6639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.327838][ T6639] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.351608][ T6639] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.008811][ T6632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.029011][ T6632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.093541][T11465] __nla_validate_parse: 3 callbacks suppressed [ 542.093561][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1532'. [ 542.123161][ T6628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.142620][ T6628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.164132][T11467] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1530'. [ 542.179209][T11467] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1530'. [ 542.223664][T11467] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1530'. [ 542.257996][T11471] netlink: 'syz.4.1533': attribute type 29 has an invalid length. [ 542.780077][T11490] netlink: 'syz.0.1536': attribute type 83 has an invalid length. [ 564.809042][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1541'. [ 564.857526][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1541'. [ 564.954768][T11624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1540'. [ 565.085779][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1547'. [ 565.152342][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 565.411036][T11614] infiniband syz1: set down [ 565.415681][T11614] infiniband syz1: added bridge_slave_0 [ 565.575763][T11614] RDS/IB: syz1: added [ 566.038210][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1561'. [ 566.134430][T11694] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1561'. [ 566.812584][T11707] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1564'. [ 567.387635][T11738] netlink: 'syz.4.1574': attribute type 10 has an invalid length. [ 567.419774][T11738] team0: Device veth1_macvtap failed to register rx_handler [ 567.581583][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 567.592479][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 567.715687][T11754] netlink: 'syz.1.1579': attribute type 19 has an invalid length. [ 567.767892][T11756] netlink: 'syz.4.1580': attribute type 4 has an invalid length. [ 567.774267][T11760] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 567.797537][T11756] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 568.152010][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.585807][T11791] syz_tun: entered allmulticast mode [ 568.610142][T11788] syz_tun: left allmulticast mode [ 568.805838][T11799] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 568.874320][T11805] netlink: 'syz.1.1596': attribute type 12 has an invalid length. [ 568.953425][T11808] netlink: 'syz.1.1596': attribute type 137 has an invalid length. [ 569.180548][T11822] netlink: 'syz.5.1597': attribute type 21 has an invalid length. [ 569.414732][T11824] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 569.633097][T11839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.645226][T11839] bond5: (slave bond6): making interface the new active one [ 569.654338][T11839] bond5: (slave bond6): Enslaving as an active interface with an up link [ 569.722692][T11839] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 569.804526][T11852] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 569.830213][T11842] 8021q: adding VLAN 0 to HW filter on device bond5 [ 569.935630][T11856] tipc: Enabled bearer , priority 0 [ 569.953549][T11856] syzkaller0: entered promiscuous mode [ 569.962918][T11856] syzkaller0: entered allmulticast mode [ 569.974823][T11861] __nla_validate_parse: 16 callbacks suppressed [ 569.974845][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'. [ 570.011232][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1610'. [ 570.041284][T11856] tipc: Resetting bearer [ 570.067670][T11854] tipc: Resetting bearer [ 570.114048][T11854] tipc: Disabling bearer [ 570.249130][T11873] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1615'. [ 570.533544][T11883] lo: entered allmulticast mode [ 570.590516][T11883] lo: left allmulticast mode [ 570.927227][T11917] sctp: [Deprecated]: syz.4.1627 (pid 11917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.927227][T11917] Use struct sctp_sack_info instead [ 570.961751][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1628'. [ 571.258929][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1633'. [ 571.403004][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'. [ 571.559617][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 571.607601][T11956] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 571.614489][T11956] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 571.671007][T11945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.740033][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.748651][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.755708][T11945] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1636'. [ 572.335145][T11954] veth3: left allmulticast mode [ 572.345763][T11954] geneve2: left promiscuous mode [ 572.351028][T11954] geneve2: left allmulticast mode [ 572.362208][T11954] bond1: left promiscuous mode [ 572.374403][T11954] bond1: left allmulticast mode [ 572.388993][T11954] bond2: left promiscuous mode [ 572.394016][T11954] bridge2: left promiscuous mode [ 572.432797][T11963] ip6gre1: entered allmulticast mode [ 572.475099][ T6007] vxcan1 speed is unknown, defaulting to 1000 [ 572.483481][ T6007] syz2: Port: 1 Link DOWN [ 572.538663][ T3013] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 572.564538][ T3013] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.583690][ T3013] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 572.602948][ T3013] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.678580][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1645'. [ 572.688908][ T3013] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 572.716664][ T3013] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.817382][T11995] syzkaller0: entered promiscuous mode [ 572.823013][T11995] syzkaller0: entered allmulticast mode [ 572.848629][T11990] team0: Device geneve2 is up. Set it down before adding it as a team port [ 572.989959][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 573.086093][T12019] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.092658][T12019] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 574.450066][T12030] : renamed from bridge_slave_0 (while UP) [ 574.790944][T12048] IPv6: sit2: Disabled Multicast RS [ 574.799090][T12048] sit2: entered allmulticast mode [ 574.864969][T12058] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.992857][T12064] validate_nla: 3 callbacks suppressed [ 574.992876][T12064] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 575.341386][T12056] vxcan1 speed is unknown, defaulting to 1000 [ 575.783682][T12097] __nla_validate_parse: 2 callbacks suppressed [ 575.783702][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 576.148714][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 576.166604][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1675'. [ 576.333310][T12127] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 576.713858][T12144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1683'. [ 577.134670][T12162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.194560][T12162] tipc: Enabled bearer , priority 0 [ 577.261766][T12162] tipc: Disabling bearer [ 577.548506][T12175] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1692'. [ 577.563479][T12173] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1691'. [ 577.634870][T12181] tipc: Enabling of bearer rejected, failed to enable media [ 577.645463][T12177] tipc: Enabling of bearer rejected, failed to enable media [ 577.669877][T12177] xt_bpf: check failed: parse error [ 577.804207][T12187] tipc: Enabled bearer , priority 0 [ 577.843278][T12187] syzkaller0: entered promiscuous mode [ 577.878943][T12187] syzkaller0: entered allmulticast mode [ 577.973539][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 578.253214][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'. [ 578.608461][T12186] tipc: Resetting bearer [ 578.643376][T12186] tipc: Disabling bearer [ 578.881681][T12247] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1713'. [ 578.908534][T12247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1713'. [ 579.300604][T12282] xt_bpf: check failed: parse error [ 579.381103][T12288] netlink: 'syz.0.1722': attribute type 5 has an invalid length. [ 580.138655][T12335] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 580.153792][T12332] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 580.289689][T12332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.486575][T12351] geneve1: entered promiscuous mode [ 580.496425][T12351] geneve1: entered allmulticast mode [ 580.504003][ T3013] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 580.519808][ T3013] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 580.567269][ T3013] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 580.597207][ T3013] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 580.688936][T12363] netlink: 'syz.0.1744': attribute type 1 has an invalid length. [ 580.698278][T12363] netlink: 'syz.0.1744': attribute type 1 has an invalid length. [ 580.831508][T12374] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 581.169867][T12395] __nla_validate_parse: 10 callbacks suppressed [ 581.169890][T12395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1754'. [ 581.312235][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 581.368039][T12410] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 581.377006][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1756'. [ 581.592630][T12421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1761'. [ 582.476993][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'. [ 582.507670][T12464] netlink: 'syz.4.1772': attribute type 10 has an invalid length. [ 582.530990][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 582.552323][T12473] team0: Port device team_slave_1 removed [ 582.704141][T12464] bridge_slave_1: left allmulticast mode [ 582.718142][T12464] bridge_slave_1: left promiscuous mode [ 582.731037][T12464] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.770302][T12464] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 582.816553][T12476] bridge_slave_1: left allmulticast mode [ 582.822984][T12476] bridge_slave_1: left promiscuous mode [ 582.829784][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.881015][T12476] bridge_slave_0: left allmulticast mode [ 582.887260][T12476] bridge_slave_0: left promiscuous mode [ 582.893282][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.947083][T12532] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1783'. [ 584.355983][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1789'. [ 584.397998][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1789'. [ 584.813359][T12560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1794'. [ 584.979294][T12570] sit1: entered promiscuous mode [ 584.984302][T12570] sit1: entered allmulticast mode [ 585.354063][T12602] netlink: 'syz.2.1808': attribute type 10 has an invalid length. [ 585.904732][T12643] tipc: Enabled bearer , priority 0 [ 585.913378][T12643] syzkaller0: entered promiscuous mode [ 585.920751][T12643] syzkaller0: entered allmulticast mode [ 585.994417][T12643] netlink: 'syz.4.1820': attribute type 1 has an invalid length. [ 586.034891][T12648] netlink: 'syz.2.1823': attribute type 1 has an invalid length. [ 586.063268][T12642] tipc: Resetting bearer [ 586.105149][T12642] tipc: Disabling bearer [ 586.316888][T12659] netlink: 'syz.4.1827': attribute type 21 has an invalid length. [ 586.336060][T12657] __nla_validate_parse: 8 callbacks suppressed [ 586.336081][T12657] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1826'. [ 586.360360][T12659] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1827'. [ 586.388816][T12657] ieee802154 phy0 wpan0: encryption failed: -90 [ 586.450443][T12657] vlan2: entered allmulticast mode [ 586.645150][T12669] netlink: 'syz.0.1831': attribute type 17 has an invalid length. [ 586.653595][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 586.663100][T12669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 587.739062][T12740] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1846'. [ 587.944698][T12750] tipc: Enabled bearer , priority 0 [ 587.955378][T12750] syzkaller0: entered promiscuous mode [ 587.963786][T12750] syzkaller0: entered allmulticast mode [ 588.025330][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'. [ 588.028922][T12750] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 588.058643][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1852'. [ 588.099396][T12757] xfrm1: entered promiscuous mode [ 588.105401][T12757] xfrm1: entered allmulticast mode [ 588.181223][T12749] tipc: Resetting bearer [ 588.218265][T12749] tipc: Disabling bearer [ 588.436777][T12773] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1859'. [ 588.456503][T12773] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1859'. [ 588.587696][T12781] bridge0: port 2(ipvlan2) entered blocking state [ 588.604752][T12781] bridge0: port 2(ipvlan2) entered disabled state [ 588.639599][T12781] ipvlan2: entered allmulticast mode [ 588.644960][T12781] bridge0: entered allmulticast mode [ 588.661587][T12781] ipvlan2: left allmulticast mode [ 588.681603][T12781] bridge0: left allmulticast mode [ 588.903220][T12802] dvmrp0: entered allmulticast mode [ 588.910745][T12802] dvmrp0: left allmulticast mode [ 589.009335][T12806] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 589.021560][T12806] veth1_macvtap: left promiscuous mode [ 589.131962][T12816] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 589.147877][T12816] bond8 (unregistering): Released all slaves [ 589.273643][T12821] vxcan1 speed is unknown, defaulting to 1000 [ 590.590132][ T5894] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 590.615354][ T5894] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 590.631670][ T5894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 590.646013][ T5894] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 590.654336][ T5894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 590.923398][T12860] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 591.655265][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1887'. [ 591.704027][T12866] netlink: 'syz.2.1886': attribute type 1 has an invalid length. [ 591.714742][T12869] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 591.732893][T12869] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1887'. [ 591.790840][T12866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.797820][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1889'. [ 591.812109][T12866] bond4: (slave gretap1): making interface the new active one [ 591.822473][T12866] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 591.879791][T12863] vxcan1 speed is unknown, defaulting to 1000 [ 591.881540][T12880] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1890'. [ 591.917209][T12882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1889'. [ 592.173388][T12881] macvtap1: entered allmulticast mode [ 592.197705][T12881] veth0_macvtap: entered allmulticast mode [ 592.705208][ T5894] Bluetooth: hci6: command tx timeout [ 592.749773][ T980] hid-generic 0005:04F3:0009.0002: unknown main item tag 0x0 [ 592.834316][ T980] hid-generic 0005:04F3:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 592.847465][T12904] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 593.144870][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1898'. [ 593.168169][T12918] netlink: 'syz.4.1898': attribute type 7 has an invalid length. [ 593.179959][T12918] netlink: 'syz.4.1898': attribute type 8 has an invalid length. [ 593.206939][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1898'. [ 593.401100][T12935] netlink: 'syz.4.1903': attribute type 10 has an invalid length. [ 593.758294][T12863] chnl_net:caif_netlink_parms(): no params data found [ 593.839848][T12952] IPVS: Error connecting to the multicast addr [ 594.040895][T12863] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.042281][T12963] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1910'. [ 594.063666][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.073218][T12863] bridge_slave_0: entered allmulticast mode [ 594.081788][T12863] bridge_slave_0: entered promiscuous mode [ 594.091169][T12863] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.098787][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.106497][T12863] bridge_slave_1: entered allmulticast mode [ 594.115303][T12863] bridge_slave_1: entered promiscuous mode [ 594.195406][T12863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.223904][T12863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.293079][T12976] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 594.365708][T12863] team0: Port device team_slave_0 added [ 594.474211][T12982] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 594.531109][T12976] veth7: entered promiscuous mode [ 594.558942][T12863] team0: Port device team_slave_1 added [ 594.722658][T12863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.737401][T12863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.777000][ T5894] Bluetooth: hci6: command tx timeout [ 594.825233][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1917'. [ 594.837074][T12863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.920002][T12863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.937333][T12863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.978733][T12863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.987812][T13010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1919'. [ 595.235163][T12863] hsr_slave_0: entered promiscuous mode [ 595.261683][T12863] hsr_slave_1: entered promiscuous mode [ 595.281015][T13021] netlink: 'syz.0.1921': attribute type 10 has an invalid length. [ 595.293029][T12863] debugfs: 'hsr0' already exists in 'hsr' [ 595.309699][T12863] Cannot create hsr debugfs directory [ 595.561577][T13037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.205976][T13074] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 596.253545][T12863] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 596.281938][T12863] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 596.322099][T12863] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 596.351023][T13076] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 596.370303][T12863] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 596.684642][T13094] tipc: Enabling of bearer rejected, failed to enable media [ 596.703873][T13095] tipc: Enabling of bearer rejected, failed to enable media [ 596.821291][T12863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.850631][T12863] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.858159][ T5894] Bluetooth: hci6: command tx timeout [ 596.881137][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.888407][ T6635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.902986][T13103] sctp: [Deprecated]: syz.0.1942 (pid 13103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.902986][T13103] Use struct sctp_sack_info instead [ 596.934654][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.942426][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.054435][T13111] __nla_validate_parse: 2 callbacks suppressed [ 597.054457][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 597.083176][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 597.459797][T12863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.663578][T13137] netlink: 'syz.2.1950': attribute type 1 has an invalid length. [ 597.778811][T13137] 8021q: adding VLAN 0 to HW filter on device bond5 [ 597.842607][T13139] 8021q: adding VLAN 0 to HW filter on device bond5 [ 597.870516][T13139] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 597.902414][T13139] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 598.077537][T12863] veth0_vlan: entered promiscuous mode [ 598.105860][T12863] veth1_vlan: entered promiscuous mode [ 598.119306][T13152] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 598.162190][T13154] sctp: [Deprecated]: syz.2.1953 (pid 13154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.162190][T13154] Use struct sctp_sack_info instead [ 598.166248][T13152] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1954'. [ 598.200599][T13152] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 598.223550][T12863] veth0_macvtap: entered promiscuous mode [ 598.268423][T12863] veth1_macvtap: entered promiscuous mode [ 598.294164][T12863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.327858][T12863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.353298][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'. [ 598.359927][ T6633] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.450100][T13159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 598.500873][ T6633] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.521863][ T6633] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.573988][ T6628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.751981][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.770111][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.842103][ T6633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.865460][ T6633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.948958][ T5894] Bluetooth: hci6: command tx timeout [ 598.977634][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1963'. [ 599.049917][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 599.141109][ T6007] IPVS: starting estimator thread 0... [ 599.253312][T13188] IPVS: using max 27 ests per chain, 64800 per kthread [ 599.953615][T13220] netlink: 'syz.6.1973': attribute type 6 has an invalid length. [ 599.982227][T13222] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1972'. [ 599.995570][T13225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1974'. [ 600.025365][T13220] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1973'. [ 600.067336][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1974'. [ 600.438442][T13249] net veth1_virt_wifi .: renamed from virt_wifi0 [ 600.629181][T13262] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 601.303176][T13309] nbd: must specify at least one socket [ 601.780052][T13333] veth0: entered promiscuous mode [ 601.927375][T13332] veth0: left promiscuous mode [ 602.170933][T13359] vlan2: entered promiscuous mode [ 602.190254][T13359] bridge0: entered promiscuous mode [ 602.341627][T13366] __nla_validate_parse: 6 callbacks suppressed [ 602.341649][T13366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2013'. [ 602.366532][T13366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2013'. [ 602.408791][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2013'. [ 602.452192][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2013'. [ 602.461803][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 602.533312][T13366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2013'. [ 602.548361][T13366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2013'. [ 602.886762][T13395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2019'. [ 603.381723][T13418] netlink: 'syz.0.2027': attribute type 2 has an invalid length. [ 603.655024][T13441] netlink: 'syz.4.2035': attribute type 2 has an invalid length. [ 603.674140][T13441] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2035'. [ 603.923686][T13458] netlink: 'syz.4.2037': attribute type 4 has an invalid length. [ 603.959606][T13458] netlink: 'syz.4.2037': attribute type 4 has an invalid length. [ 604.004458][T13461] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 604.021909][T13461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2037'. [ 604.172420][T13470] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 604.252290][T13470] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 604.274556][T13470] gretap2: entered promiscuous mode [ 604.284991][T13470] gretap2: entered allmulticast mode [ 604.496084][T13481] netlink: 'syz.4.2043': attribute type 33 has an invalid length. [ 604.688482][T13495] netlink: 'syz.2.2046': attribute type 4 has an invalid length. [ 604.769100][T13497] IPv6: sit1: Disabled Multicast RS [ 604.793541][T13497] sit1: entered allmulticast mode [ 605.300212][T13518] gtp0: entered promiscuous mode [ 605.309116][T13518] gtp0: entered allmulticast mode [ 605.322444][T13522] tipc: Enabled bearer , priority 0 [ 605.391610][T13522] tipc: Disabling bearer [ 605.465514][T13527] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 605.579886][T13534] tipc: Enabling of bearer rejected, failed to enable media [ 605.873690][T13543] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 606.204032][T13563] bond9: entered promiscuous mode [ 606.224339][T13563] bond9: entered allmulticast mode [ 606.230705][T13563] 8021q: adding VLAN 0 to HW filter on device bond9 [ 606.393346][T13578] netlink: 'syz.6.2077': attribute type 1 has an invalid length. [ 606.451862][T13588] macsec2: entered promiscuous mode [ 606.477033][T13588] bridge0: entered promiscuous mode [ 606.482586][T13588] macsec2: entered allmulticast mode [ 606.500342][T13588] bridge0: entered allmulticast mode [ 606.521991][T13588] bridge0: port 2(macsec2) entered blocking state [ 606.540386][T13588] bridge0: port 2(macsec2) entered disabled state [ 606.609903][T13588] bridge0: left allmulticast mode [ 606.614997][T13588] bridge0: left promiscuous mode [ 607.139901][T13626] dvmrp1: entered allmulticast mode [ 607.468220][T13644] __nla_validate_parse: 16 callbacks suppressed [ 607.468241][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 607.481499][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2097'. [ 607.505280][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2097'. [ 607.552676][T13644] batadv_slave_1: entered promiscuous mode [ 607.559103][T13644] batadv_slave_1: left promiscuous mode [ 607.599214][T13650] vlan3: entered promiscuous mode [ 607.609190][T13650] vlan3: entered allmulticast mode [ 607.614559][T13650] hsr_slave_1: entered allmulticast mode [ 607.631879][T13653] tipc: Enabled bearer , priority 0 [ 607.667037][T13650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2098'. [ 607.690356][T13653] tipc: Disabling bearer [ 607.715880][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 607.726439][T13661] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2100'. [ 607.909291][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 607.937941][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 607.949766][T13672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2101'. [ 607.961193][T13670] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2102'. [ 608.082091][T13667] 8021q: adding VLAN 0 to HW filter on device bond9 [ 608.094924][T13657] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 608.555610][T13700] validate_nla: 2 callbacks suppressed [ 608.555631][T13700] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 608.873503][T13701] syzkaller1: entered promiscuous mode [ 608.885034][T13701] syzkaller1: entered allmulticast mode [ 608.920345][T13721] netlink: 'syz.6.2115': attribute type 11 has an invalid length. [ 608.949928][T13721] netlink: 'syz.6.2115': attribute type 11 has an invalid length. [ 609.587977][T13758] dvmrp0: entered allmulticast mode [ 609.839568][T13760] syzkaller1: entered promiscuous mode [ 609.866908][T13760] syzkaller1: entered allmulticast mode [ 610.127584][T13787] Unsupported ieee802154 address type: 0 [ 610.448794][T13802] bridge_slave_1: left allmulticast mode [ 610.464740][T13802] bridge_slave_1: left promiscuous mode [ 610.492408][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.522589][T13802] bridge_slave_0: left promiscuous mode [ 610.531766][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.573944][T13818] netlink: 'syz.1.2139': attribute type 1 has an invalid length. [ 611.087077][T13841] team0: Device wireguard0 is of different type [ 612.838843][T13924] __nla_validate_parse: 12 callbacks suppressed [ 612.838863][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 612.909589][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'. [ 612.943479][ T5502] veth0_vlan: left promiscuous mode [ 612.980869][ T5502] veth0_vlan: entered promiscuous mode [ 613.031450][T13932] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 613.061138][T13932] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2162'. [ 613.090355][T13932] nbd: couldn't find device at index 1048576 [ 613.113566][T13935] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.2161'. [ 613.223611][T13940] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2164'. [ 613.528860][T13961] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2170'. [ 613.556894][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2170'. [ 613.560358][T13943] syzkaller0: entered promiscuous mode [ 613.602552][T13961] netlink: 31 bytes leftover after parsing attributes in process `syz.6.2170'. [ 613.606874][T13943] syzkaller0: entered allmulticast mode [ 613.639573][T13961] netlink: 'syz.6.2170': attribute type 3 has an invalid length. [ 613.655991][T13961] netlink: 'syz.6.2170': attribute type 2 has an invalid length. [ 613.675996][T13955] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2167'. [ 613.690899][T13961] netlink: 31 bytes leftover after parsing attributes in process `syz.6.2170'. [ 615.821265][T13999] netlink: 'syz.0.2176': attribute type 21 has an invalid length. [ 615.937392][T14006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.030071][T14010] netlink: 'syz.2.2181': attribute type 2 has an invalid length. [ 616.040078][T14007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.054889][T14010] netlink: 'syz.2.2181': attribute type 8 has an invalid length. [ 616.282856][T14033] Bluetooth: hci1: too big key_count value 32778 [ 616.495504][T14043] : renamed from hsr0 (while UP) [ 616.627002][T14047] netlink: 'syz.6.2193': attribute type 1 has an invalid length. [ 616.878235][T14059] pimreg: entered allmulticast mode [ 617.072584][T14070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.079987][T14070] IPv6: NLM_F_CREATE should be set when creating new route [ 617.218321][T14078] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 617.383370][T14092] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 617.634713][T14108] netlink: 'syz.0.2213': attribute type 1 has an invalid length. [ 617.780347][T14103] bond10 (unregistering): Released all slaves [ 617.881411][T14127] __nla_validate_parse: 11 callbacks suppressed [ 617.881431][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 617.927834][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'. [ 618.127415][T14137] netlink: 'syz.2.2223': attribute type 19 has an invalid length. [ 618.141625][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 618.141980][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2222'. [ 618.165618][T14137] netlink: 'syz.2.2223': attribute type 19 has an invalid length. [ 618.178271][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2223'. [ 618.187458][T14136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2222'. [ 618.201034][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 618.328615][T14149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'. [ 618.860930][T14179] netlink: 'syz.4.2235': attribute type 10 has an invalid length. [ 618.930836][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 618.952418][T14182] bond0: entered promiscuous mode [ 618.959396][T14182] bond_slave_0: entered promiscuous mode [ 618.991293][T14182] bond_slave_1: entered promiscuous mode [ 619.006077][T14182] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 619.047842][T14182] bond0: left promiscuous mode [ 619.052763][T14182] bond_slave_0: left promiscuous mode [ 619.079598][T14182] bond_slave_1: left promiscuous mode [ 619.085264][T14182] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 619.138908][T14192] netlink: 'syz.4.2239': attribute type 3 has an invalid length. [ 619.149119][T14192] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2239'. [ 619.453259][T14203] netlink: 'syz.0.2241': attribute type 10 has an invalid length. [ 619.495458][T14203] hsr0: mtu greater than device maximum [ 619.511032][T14207] tipc: Enabled bearer , priority 0 [ 619.554960][T14203] syzkaller0: entered promiscuous mode [ 619.573959][T14203] syzkaller0: entered allmulticast mode [ 619.684303][T14207] tipc: Resetting bearer [ 619.709421][T14197] tipc: Resetting bearer [ 619.713812][T14220] xt_l2tp: wrong L2TP version: 0 [ 619.769848][T14197] tipc: Disabling bearer [ 619.888352][T14226] syzkaller1: entered promiscuous mode [ 619.893889][T14226] syzkaller1: entered allmulticast mode [ 619.962356][T14226] netlink: 'syz.2.2248': attribute type 4 has an invalid length. [ 620.123782][T14241] bond6 (unregistering): Released all slaves [ 620.185151][T14244] tipc: Enabled bearer , priority 0 [ 620.244210][T14246] bond10: (slave gre0): Device is not bonding slave [ 620.266501][T14246] bond10: option active_slave: invalid value (gre0) [ 620.280782][T14246] bond10 (unregistering): Released all slaves [ 620.591904][T14246] tipc: Resetting bearer [ 622.028714][T14246] tipc: Disabling bearer [ 622.234780][T14295] netlink: 'syz.4.2264': attribute type 1 has an invalid length. [ 622.250813][T14295] netlink: 'syz.4.2264': attribute type 1 has an invalid length. [ 622.693110][T14330] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 622.817637][T14332] syzkaller0: entered promiscuous mode [ 622.823203][T14332] syzkaller0: entered allmulticast mode [ 622.859086][T14334] Illegal XDP return value 16128 on prog (id 521) dev syz_tun, expect packet loss! [ 622.878723][T14335] IPv6: sit1: Disabled Multicast RS [ 622.893765][T14335] sit1: entered allmulticast mode [ 622.929566][T14342] __nla_validate_parse: 44 callbacks suppressed [ 622.929586][T14342] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2275'. [ 623.808421][T14397] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2289'. [ 623.819778][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 623.857944][T14397] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2289'. [ 623.869287][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'. [ 623.904731][T14397] bridge_slave_0: left allmulticast mode [ 623.915144][T14397] bridge_slave_0: left promiscuous mode [ 623.924856][T14397] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.039039][T14405] netlink: 'syz.2.2291': attribute type 33 has an invalid length. [ 624.109025][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2292'. [ 624.155334][T14407] tipc: Failed to remove unknown binding: 66,1,1/0:542679763/542679765 [ 624.367754][T14421] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 624.374354][T14421] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 624.671196][T14436] netlink: 'syz.6.2300': attribute type 32 has an invalid length. [ 624.717588][T14429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.809118][T14429] veth0_virt_wifi: left allmulticast mode [ 624.851428][T14429] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 624.894647][ T6633] bond1: (slave ip6gretap1): link status up again after 0 ms [ 624.910150][T14429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.933403][T14429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.951268][T14429] bond_slave_0: entered promiscuous mode [ 624.957433][T14429] bond_slave_1: entered promiscuous mode [ 624.963178][T14429] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 624.978442][ T6639] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 624.981718][T14429] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 624.999916][ T6639] bond1: (slave ip6gretap1): link status up again after 0 ms [ 625.031378][T14429] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 625.039024][ T6639] bond1: (slave ip6gretap1): link status up again after 0 ms [ 625.058983][ T6622] bond1: (slave ip6gretap1): link status up again after 0 ms [ 625.083010][T14429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.100323][ T6635] bond1: (slave ip6gretap1): link status up again after 0 ms [ 625.114044][ T6635] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 625.138134][ T6635] bond1: (slave ip6gretap1): link status up again after 0 ms [ 625.148065][T14429] sit1: left promiscuous mode [ 625.152954][T14429] sit1: left allmulticast mode [ 625.183126][ T6633] bond1: (slave ip6gretap1): link status up again after 0 ms [ 625.205622][T14429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 625.217870][ T6633] bond1: (slave ip6gretap1): link status up again after 0 ms [ 625.291396][T14453] netlink: 'syz.4.2303': attribute type 6 has an invalid length. [ 625.300659][T14453] netlink: 'syz.4.2303': attribute type 1 has an invalid length. [ 625.336229][T14453] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2303'. [ 625.387176][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2305'. [ 625.505935][T14467] netlink: 'syz.2.2306': attribute type 10 has an invalid length. [ 625.670179][T14466] syzkaller1: entered allmulticast mode [ 625.677195][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 625.727153][ T6635] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.735280][ T6635] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.747195][ T980] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 626.096923][ T980] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 626.467257][ T980] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 627.547459][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 628.105789][T14600] __nla_validate_parse: 1 callbacks suppressed [ 628.105810][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'. [ 628.147754][T14600] netlink: 'syz.4.2339': attribute type 20 has an invalid length. [ 628.155998][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'. [ 628.168565][T14600] netlink: 'syz.4.2339': attribute type 20 has an invalid length. [ 628.283319][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2343'. [ 628.697020][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 629.255175][T14670] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2359'. [ 629.359635][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 629.382807][T14675] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2362'. [ 629.392151][T14675] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2362'. [ 629.405726][T14675] netlink: 'syz.6.2362': attribute type 1 has an invalid length. [ 629.464680][T14675] gretap1: entered promiscuous mode [ 629.473725][T14675] bond2: (slave gretap1): making interface the new active one [ 629.483603][T14675] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 629.498500][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2362'. [ 629.511287][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2362'. [ 629.582450][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.937068][ T6635] net_ratelimit: 40 callbacks suppressed [ 629.938088][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.061289][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.136426][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 630.177281][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.192471][T14719] tipc: Enabled bearer , priority 0 [ 630.212974][T14719] syzkaller0: entered promiscuous mode [ 630.233445][T14719] syzkaller0: entered allmulticast mode [ 630.280541][T14719] tipc: Resetting bearer [ 630.291435][T14718] tipc: Resetting bearer [ 630.322820][T14718] tipc: Disabling bearer [ 630.369307][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.526412][ T6639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.655011][ T6639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.807576][T14760] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 630.903348][T14757] bond3 (unregistering): Released all slaves [ 630.938124][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.057647][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.555811][T14775] team0 (unregistering): Port device team_slave_0 removed [ 631.568165][T14775] team0 (unregistering): Port device team_slave_1 removed [ 631.606938][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.716949][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 632.067706][T14811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.164030][T14825] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 632.214235][T14811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.271366][ T5892] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 632.294750][ T5892] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 632.308729][ T5892] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 632.321204][ T5892] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 632.331044][ T5892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 632.539816][T14832] bond11 (unregistering): Released all slaves [ 632.750910][T14829] vxcan1 speed is unknown, defaulting to 1000 [ 633.168333][T14870] __nla_validate_parse: 14 callbacks suppressed [ 633.168355][T14870] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2413'. [ 633.323875][T14867] vxcan1 speed is unknown, defaulting to 1000 [ 633.523469][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2416'. [ 633.539818][T14881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2415'. [ 634.387048][ T5894] Bluetooth: hci7: command tx timeout [ 634.395000][T14915] netlink: 'syz.2.2424': attribute type 15 has an invalid length. [ 634.403610][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2424'. [ 634.528947][T14921] netlink: 'syz.6.2425': attribute type 10 has an invalid length. [ 634.543508][T14921] veth0_virt_wifi: entered allmulticast mode [ 634.581714][T14921] team0: Port device veth0_virt_wifi added [ 634.621065][T14829] chnl_net:caif_netlink_parms(): no params data found [ 635.004450][T14829] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.027197][T14829] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.034541][T14829] bridge_slave_0: entered allmulticast mode [ 635.078473][T14829] bridge_slave_0: entered promiscuous mode [ 635.108793][T14829] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.119633][T14829] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.127650][T14829] bridge_slave_1: entered allmulticast mode [ 635.145329][T14829] bridge_slave_1: entered promiscuous mode [ 635.169750][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2430'. [ 635.324639][T14829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.339333][T14829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.458439][T14829] team0: Port device team_slave_0 added [ 635.468686][T14829] team0: Port device team_slave_1 added [ 635.557902][ T3013] net_ratelimit: 16 callbacks suppressed [ 635.557926][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.631813][T14954] sctp: [Deprecated]: syz.2.2435 (pid 14954) Use of int in max_burst socket option deprecated. [ 635.631813][T14954] Use struct sctp_assoc_value instead [ 635.701572][T14947] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2431'. [ 635.741073][T14962] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 635.761603][T14829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.775112][T14829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.822387][T14829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.884227][T14829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.894434][T14829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.924065][T14829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.075695][T14829] hsr_slave_0: entered promiscuous mode [ 636.085837][T14829] hsr_slave_1: entered promiscuous mode [ 636.097453][T14829] debugfs: 'hsr0' already exists in 'hsr' [ 636.103538][T14829] Cannot create hsr debugfs directory [ 636.142389][T14976] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2440'. [ 636.182812][T14976] nbd: must specify at least one socket [ 636.213705][T14981] netlink: 'syz.2.2442': attribute type 10 has an invalid length. [ 636.223508][T14981] netlink: 'syz.2.2442': attribute type 17 has an invalid length. [ 636.241081][T14976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2440'. [ 636.241917][T14981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.270065][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2441'. [ 636.457505][ T5894] Bluetooth: hci7: command tx timeout [ 636.514556][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2444'. [ 636.529451][ T6633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.739967][T14829] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 636.793769][T14829] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 636.838334][T14829] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 636.874405][T14829] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 636.928337][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 637.118928][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 637.149488][T14829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.209684][T14829] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.251393][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.258675][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.313970][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.321214][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.486325][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 637.607553][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 637.739745][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 637.948624][ T6633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 638.041155][T15056] netlink: 'syz.2.2459': attribute type 2 has an invalid length. [ 638.243042][T14829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.357801][T15068] __nla_validate_parse: 7 callbacks suppressed [ 638.357823][T15068] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2463'. [ 638.518257][T15076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2464'. [ 638.538343][ T5894] Bluetooth: hci7: command tx timeout [ 638.565958][T15079] netlink: 'syz.6.2466': attribute type 1 has an invalid length. [ 638.576502][T15079] netlink: 'syz.6.2466': attribute type 2 has an invalid length. [ 638.634770][T15079] pimreg: entered allmulticast mode [ 638.767320][T15092] tipc: Enabling of bearer rejected, failed to enable media [ 639.035834][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2469'. [ 639.121237][T14829] veth0_vlan: entered promiscuous mode [ 639.176572][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 639.268525][T14829] veth1_vlan: entered promiscuous mode [ 639.357588][T14829] veth0_macvtap: entered promiscuous mode [ 639.409399][T14829] veth1_macvtap: entered promiscuous mode [ 639.422527][T15121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2475'. [ 639.470139][T14829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.537911][T14829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.572217][ T3013] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.590249][ T3013] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.613232][ T3013] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.655372][ T3013] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.800558][ T6632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.829870][ T6632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.918201][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 639.928102][ T6635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.935954][ T6635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.389684][T15164] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2486'. [ 640.482522][T15167] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2488'. [ 640.605023][T15175] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.611721][ T6634] net_ratelimit: 19 callbacks suppressed [ 640.611740][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.616559][ T5894] Bluetooth: hci7: command tx timeout [ 640.767597][ T6633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.808051][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2492'. [ 640.864798][T15183] netlink: 'syz.2.2493': attribute type 3 has an invalid length. [ 640.923746][T15183] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2493'. [ 640.926089][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 640.958079][ T6633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.067600][ T6633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.178158][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.212367][T15193] batadv1: entered allmulticast mode [ 641.310926][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.427194][ T6632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.557515][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.686865][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.797265][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 643.738678][T15307] __nla_validate_parse: 5 callbacks suppressed [ 643.738699][T15307] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.2530'. [ 643.763823][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'. [ 643.799950][T15308] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2528'. [ 643.848777][T15308] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2528'. [ 643.880645][T15313] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2532'. [ 644.020267][T15321] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2535'. [ 644.039882][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 644.348383][T15345] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2542'. [ 644.379200][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2541'. [ 644.385915][T15348] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2543'. [ 644.414644][T15348] netlink: 'syz.6.2543': attribute type 1 has an invalid length. [ 644.568416][T15351] netlink: 'syz.4.2544': attribute type 2 has an invalid length. [ 644.600629][T15351] nbd: must specify a device to reconfigure [ 645.347329][T15370] tipc: Enabling of bearer rejected, failed to enable media [ 645.646886][ T6634] net_ratelimit: 25 callbacks suppressed [ 645.646909][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.788110][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.929893][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.057242][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.060382][T15427] netlink: 'syz.6.2566': attribute type 1 has an invalid length. [ 646.085555][T15427] netlink: 'syz.6.2566': attribute type 1 has an invalid length. [ 646.177312][T15430] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 646.312141][T15430] 8021q: adding VLAN 0 to HW filter on device bond6 [ 646.351096][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.417694][T15436] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 646.435460][T15430] bond6: (slave gretap2): making interface the new active one [ 646.465621][T15430] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 646.558901][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.677037][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.720690][T15462] netlink: 'syz.4.2575': attribute type 178 has an invalid length. [ 646.778750][T15465] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 2, id = 0 [ 646.788995][ T6639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.897237][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.988065][T15473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.553484][T15498] sctp: [Deprecated]: syz.7.2585 (pid 15498) Use of int in max_burst socket option deprecated. [ 647.553484][T15498] Use struct sctp_assoc_value instead [ 647.604915][T15497] syzkaller0: entered promiscuous mode [ 647.628091][T15497] syzkaller0: entered allmulticast mode [ 648.389550][T15536] netlink: 'syz.2.2600': attribute type 2 has an invalid length. [ 648.940530][T15565] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 648.975699][T15565] bond8 (unregistering): Released all slaves [ 649.162119][T15578] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 649.500263][T15589] __nla_validate_parse: 21 callbacks suppressed [ 649.500286][T15589] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2615'. [ 649.590144][T15589] vlan4: entered allmulticast mode [ 649.611629][T15589] 0{X: entered allmulticast mode [ 649.798031][T15601] tc_dump_action: action bad kind [ 650.048050][T15619] bridge_slave_0: entered promiscuous mode [ 650.153129][T15624] macvtap1: entered promiscuous mode [ 650.167343][T15624] macvtap1: entered allmulticast mode [ 650.190245][T15624] bond_slave_0: entered promiscuous mode [ 650.196383][T15624] bond_slave_1: entered promiscuous mode [ 650.229961][T15624] bond0: entered allmulticast mode [ 650.243925][T15624] bond_slave_0: entered allmulticast mode [ 650.252904][T15624] bond_slave_1: entered allmulticast mode [ 650.259241][T15624] bond0: entered promiscuous mode [ 650.268914][T15624] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 650.276828][T15624] team0: Device macvtap1 failed to register rx_handler [ 650.288075][T15624] bond0: left allmulticast mode [ 650.293000][T15624] bond_slave_0: left allmulticast mode [ 650.301830][T15624] bond_slave_1: left allmulticast mode [ 650.307903][T15624] bond0: left promiscuous mode [ 650.313863][T15624] bond_slave_0: left promiscuous mode [ 650.319417][T15624] bond_slave_1: left promiscuous mode [ 650.424955][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2628'. [ 650.578589][T15647] netlink: 'syz.6.2632': attribute type 1 has an invalid length. [ 650.688785][T15647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.757171][T15652] bond3: (slave geneve2): making interface the new active one [ 650.767024][T15652] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 650.798191][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 650.918521][T15668] netlink: 'syz.6.2637': attribute type 1 has an invalid length. [ 650.919786][ T6634] net_ratelimit: 27 callbacks suppressed [ 650.919808][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.978305][T15668] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2637'. [ 651.057984][T15674] tipc: Started in network mode [ 651.070885][T15674] tipc: Node identity c2e5bb68921f, cluster identity 4711 [ 651.093212][T15674] tipc: Enabled bearer , priority 0 [ 651.116660][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.178211][ T5894] Bluetooth: hci0: command tx timeout [ 651.229687][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.369502][T15671] tipc: Disabling bearer [ 651.394315][ T6639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.510071][ T6639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.584382][T15703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2645'. [ 651.647611][ T6639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.762135][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.875090][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2650'. [ 651.919835][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.955612][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2652'. [ 651.993727][T15716] netlink: 'syz.7.2652': attribute type 1 has an invalid length. [ 652.022469][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2652'. [ 652.046910][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.089616][T15722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2655'. [ 652.177817][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.254182][T15727] netlink: 'syz.4.2654': attribute type 4 has an invalid length. [ 652.703676][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2663'. [ 652.818347][T15755] netlink: 'syz.6.2664': attribute type 1 has an invalid length. [ 652.979883][T15764] lo: entered allmulticast mode [ 652.991246][T15764] tunl0: entered allmulticast mode [ 653.014818][T15764] gre0: entered allmulticast mode [ 653.020450][T15764] gretap0: entered allmulticast mode [ 653.026038][T15764] erspan0: entered allmulticast mode [ 653.034194][T15764] ip_vti0: entered allmulticast mode [ 653.039915][T15764] ip6_vti0: entered allmulticast mode [ 653.045503][T15764] sit0: entered allmulticast mode [ 653.054279][T15764] ip6tnl0: entered allmulticast mode [ 653.059984][T15764] ip6gre0: entered allmulticast mode [ 653.065535][T15764] syz_tun: entered allmulticast mode [ 653.071232][T15764] ip6gretap0: entered allmulticast mode [ 653.077141][T15764] bond0: entered allmulticast mode [ 653.082294][T15764] bond_slave_0: entered allmulticast mode [ 653.088503][T15764] bond_slave_1: entered allmulticast mode [ 653.095925][T15764] bridge_slave_1: entered allmulticast mode [ 653.103609][T15764] dummy0: entered allmulticast mode [ 653.109688][T15764] nlmon0: entered allmulticast mode [ 653.115262][T15764] caif0: entered allmulticast mode [ 653.120921][T15764] vxcan0: entered allmulticast mode [ 653.126788][T15764] vxcan1: entered allmulticast mode [ 653.132307][T15764] veth0: entered allmulticast mode [ 653.138522][T15764] veth1: entered allmulticast mode [ 653.143922][T15764] wg0: entered allmulticast mode [ 653.149769][T15764] wg1: entered allmulticast mode [ 653.155075][T15764] wg2: entered allmulticast mode [ 653.160872][T15764] veth0_to_bridge: entered allmulticast mode [ 653.167530][T15764] bridge_slave_0: left promiscuous mode [ 653.173301][T15764] bridge_slave_0: entered allmulticast mode [ 653.179920][T15764] veth1_to_bridge: entered allmulticast mode [ 653.186806][T15764] veth0_to_bond: entered allmulticast mode [ 653.193171][T15764] veth1_to_bond: entered allmulticast mode [ 653.201546][T15764] veth0_to_team: entered allmulticast mode [ 653.207944][T15764] team_slave_0: entered allmulticast mode [ 653.214050][T15764] veth1_to_team: entered allmulticast mode [ 653.224250][T15764] team_slave_1: entered allmulticast mode [ 653.233209][T15764] veth0_to_batadv: entered allmulticast mode [ 653.239982][T15764] batadv_slave_0: entered allmulticast mode [ 653.246498][T15764] xfrm0: entered allmulticast mode [ 653.251957][T15764] veth0_to_hsr: entered allmulticast mode [ 653.261526][T15764] hsr_slave_0: entered allmulticast mode [ 653.268546][T15764] veth1_to_hsr: entered allmulticast mode [ 653.274615][T15764] hsr_slave_1: entered allmulticast mode [ 653.281131][T15764] veth1_virt_wifi: entered allmulticast mode [ 653.287723][T15764] veth0_virt_wifi: entered allmulticast mode [ 653.294253][T15764] net veth1_virt_wifi .: entered allmulticast mode [ 653.303064][T15764] veth1_vlan: entered allmulticast mode [ 653.309274][T15764] veth0_vlan: entered allmulticast mode [ 653.315049][T15764] vlan0: entered allmulticast mode [ 653.320876][T15764] vlan1: entered allmulticast mode [ 653.327138][T15764] macvlan0: entered allmulticast mode [ 653.332816][T15764] macvlan1: entered allmulticast mode [ 653.342047][T15764] ipvlan0: entered allmulticast mode [ 653.350245][T15764] ipvlan1: entered allmulticast mode [ 653.359932][T15764] veth1_macvtap: entered allmulticast mode [ 653.366672][T15764] veth0_macvtap: entered allmulticast mode [ 653.372898][T15764] macvtap0: entered allmulticast mode [ 653.379727][T15764] macsec0: entered allmulticast mode [ 653.382805][T15774] netlink: 'syz.0.2667': attribute type 23 has an invalid length. [ 653.385429][T15764] geneve0: entered allmulticast mode [ 653.400792][T15764] geneve1: entered allmulticast mode [ 653.407495][T15764] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 653.415961][T15764] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 653.424976][T15764] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 653.433892][T15764] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 653.443237][T15764] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 653.451941][T15764] veth2: entered allmulticast mode [ 653.458586][T15764] veth3: entered allmulticast mode [ 653.464178][T15764] sit1: entered allmulticast mode [ 653.470819][T15764] ipip0: entered allmulticast mode [ 653.477374][T15764] macvlan2: entered allmulticast mode [ 653.483188][T15764] macvlan3: entered allmulticast mode [ 653.490406][T15764] veth4: entered allmulticast mode [ 653.495909][T15764] veth5: entered allmulticast mode [ 653.510628][T15764] bridge1: entered allmulticast mode [ 653.517026][T15764] ip6erspan0: entered allmulticast mode [ 653.522890][T15764] geneve2: entered allmulticast mode [ 653.529570][T15764] bond1: entered allmulticast mode [ 653.534984][T15764] ipip1: entered allmulticast mode [ 653.541220][T15764] veth6: entered allmulticast mode [ 653.547549][T15764] veth7: entered allmulticast mode [ 653.553043][T15764] bond2: entered allmulticast mode [ 653.559406][T15764] bridge2: entered allmulticast mode [ 653.565091][T15764] bond3: entered allmulticast mode [ 653.571297][T15764] gretap1: entered allmulticast mode [ 653.577965][T15764] @: entered allmulticast mode [ 653.583465][T15764] bond4: entered allmulticast mode [ 653.590317][T15764] veth8: entered allmulticast mode [ 653.595763][T15764] veth9: entered allmulticast mode [ 653.602262][T15764] macvlan4: entered allmulticast mode [ 653.609687][T15764] mac80211_hwsim hwsim19 wlan2: entered allmulticast mode [ 653.618777][T15764] veth10: entered allmulticast mode [ 653.624404][T15764] veth11: entered allmulticast mode [ 653.631048][T15764] mac80211_hwsim hwsim6 t: entered allmulticast mode [ 653.648169][T15764] bond5: entered allmulticast mode [ 653.654770][T15764] macsec1: entered allmulticast mode [ 653.661167][T15764] xfrm1: entered allmulticast mode [ 653.667058][T15764] geneve3: entered allmulticast mode [ 653.677529][T15764] sit2: entered allmulticast mode [ 653.684922][T15764] veth12: entered allmulticast mode [ 653.693815][T15764] veth13: entered allmulticast mode [ 653.708535][T15764] geneve4: entered allmulticast mode [ 653.714315][T15764] syztnl1: entered allmulticast mode [ 653.721016][T15764] bridge0: entered allmulticast mode [ 653.728253][T15764] macsec2: entered allmulticast mode [ 653.740016][T15764] bond6: entered allmulticast mode [ 653.745294][T15764] gretap2: entered allmulticast mode [ 653.777706][T15764] bridge3: entered allmulticast mode [ 653.789462][T15765] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 653.814814][T15755] bond4: (slave gretap2): making interface the new active one [ 653.837161][T15755] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 653.860805][T15769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 654.292520][T15801] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 654.561367][T15814] __nla_validate_parse: 3 callbacks suppressed [ 654.561388][T15814] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2677'. [ 654.679612][T15821] netlink: 'syz.0.2681': attribute type 21 has an invalid length. [ 654.716621][T15821] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2681'. [ 654.877917][T15828] syzkaller0: refused to change device tx_queue_len [ 654.928916][T15830] netlink: 'syz.7.2684': attribute type 10 has an invalid length. [ 654.954770][T15830] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 655.034295][T15840] netlink: 'syz.6.2686': attribute type 1 has an invalid length. [ 655.201440][T15840] 8021q: adding VLAN 0 to HW filter on device bond5 [ 655.775931][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2696'. [ 656.005942][T15880] tipc: Enabling of bearer rejected, failed to enable media [ 656.077491][ T3013] net_ratelimit: 21 callbacks suppressed [ 656.077514][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.226323][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.312616][T15882] delete_channel: no stack [ 656.338005][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.497185][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.560872][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 656.574739][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 656.583792][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 656.600280][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 656.609938][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 656.610500][T15896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2703'. [ 656.708065][ T6628] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.832954][T15892] vxcan1 speed is unknown, defaulting to 1000 [ 656.861705][ T6628] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.009724][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.096753][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.146250][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.196025][T15913] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2710'. [ 657.263766][T15919] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2711'. [ 657.451618][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.685585][T15937] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 657.972882][ T49] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 658.414973][ T49] bond1 (unregistering): Released all slaves [ 658.518777][ T49] bond2 (unregistering): Released all slaves [ 658.534602][ T49] bond3 (unregistering): Released all slaves [ 658.551602][ T49] bond4 (unregistering): Released all slaves [ 658.567887][ T49] bond0 (unregistering): Released all slaves [ 658.675577][ T49] bond5 (unregistering): (slave bond6): Releasing backup interface [ 658.685335][ T49] bond5 (unregistering): Released all slaves [ 658.699213][ T5894] Bluetooth: hci0: command tx timeout [ 658.793394][ T49] bond6 (unregistering): Released all slaves [ 658.894654][ T49] bond7 (unregistering): Released all slaves [ 658.910007][ T49] bond8 (unregistering): Released all slaves [ 659.007414][ T49] bond9 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 659.023703][ T49] bond9 (unregistering): Released all slaves [ 659.044178][ T49] bond10 (unregistering): Released all slaves [ 659.198411][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 659.421729][ T49] tipc: Disabling bearer [ 659.436530][ T49] tipc: Left network mode [ 659.632442][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 659.830311][T15987] netlink: 'syz.4.2727': attribute type 1 has an invalid length. [ 660.074953][T15980] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 660.194261][T15992] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 660.218093][T15992] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 660.232556][T15992] bond7: (slave vxcan3): making interface the new active one [ 660.244564][T15992] bond7: (slave vxcan3): Enslaving as an active interface with an up link [ 660.312417][ T6639] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 660.325346][ T6639] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 660.512136][ T6639] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 660.554846][ T6639] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 660.780766][ T5894] Bluetooth: hci0: command tx timeout [ 660.792033][T16024] sctp: [Deprecated]: syz.2.2734 (pid 16024) Use of int in max_burst socket option deprecated. [ 660.792033][T16024] Use struct sctp_assoc_value instead [ 661.096377][ T6635] net_ratelimit: 7 callbacks suppressed [ 661.096397][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.382897][ T6628] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.109470][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.179530][ T49] hsr_slave_0: left promiscuous mode [ 662.191774][ T49] hsr_slave_1: left promiscuous mode [ 662.863867][ T5894] Bluetooth: hci0: command tx timeout [ 663.296711][ T49] team0 (unregistering): Port device team_slave_1 removed [ 663.329593][T16106] netlink: 'syz.4.2748': attribute type 4 has an invalid length. [ 663.354048][ T49] team0 (unregistering): Port device team_slave_0 removed [ 664.096721][ T6632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 664.107105][T15892] chnl_net:caif_netlink_parms(): no params data found [ 664.496756][T16129] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2755'. [ 664.619337][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2755'. [ 664.804587][T16129] bond1 (unregistering): Released all slaves [ 664.928168][ T6628] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 664.974933][ T5894] Bluetooth: hci0: command tx timeout [ 665.052722][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'. [ 665.133473][T16145] netlink: 352 bytes leftover after parsing attributes in process `syz.2.2753'. [ 665.220687][T16156] Bluetooth: MGMT ver 1.23 [ 665.551964][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.633058][T16169] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2761'. [ 665.726964][ T6628] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.745903][T15892] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.806603][T15892] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.839396][T15892] bridge_slave_0: entered allmulticast mode [ 665.873025][T15892] bridge_slave_0: entered promiscuous mode [ 665.894023][T15892] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.913231][T15892] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.941335][T15892] bridge_slave_1: entered allmulticast mode [ 665.970546][T15892] bridge_slave_1: entered promiscuous mode [ 666.162695][T16169] : renamed from veth1_vlan (while UP) [ 666.220991][T16195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.267388][ T6628] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.280203][T16191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.293407][T16197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2765'. [ 666.329967][T16191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.454997][T16197] bond9 (unregistering): Released all slaves [ 666.530307][T15892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.576675][T15892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.807638][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.865627][T15892] team0: Port device team_slave_0 added [ 666.907833][T15892] team0: Port device team_slave_1 added [ 667.095852][T16221] netlink: 'syz.6.2771': attribute type 29 has an invalid length. [ 667.111540][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2771'. [ 667.200705][T15892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.236008][T15892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.274849][T15892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.303874][T16228] syzkaller0: entered promiscuous mode [ 667.331064][T16228] syzkaller0: entered allmulticast mode [ 667.389375][T15892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.413927][ T5946] IPVS: starting estimator thread 0... [ 667.437836][T15892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.505437][T15892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.534589][T16236] IPVS: using max 26 ests per chain, 62400 per kthread [ 667.559799][T16238] netlink: 'syz.2.2775': attribute type 1 has an invalid length. [ 667.576792][T16238] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2775'. [ 667.601063][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 667.941310][ T6632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 667.961399][T15892] hsr_slave_0: entered promiscuous mode [ 667.991610][T15892] hsr_slave_1: entered promiscuous mode [ 669.909646][T16277] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 669.911028][T16283] erspan0: entered promiscuous mode [ 669.925543][T16283] erspan0: entered allmulticast mode [ 669.939807][T16286] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 670.036945][ T3013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.075111][T16290] netlink: 'syz.6.2783': attribute type 4 has an invalid length. [ 670.107446][T16290] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2783'. [ 670.124312][T16293] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2784'. [ 670.216717][ T6632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.248327][T16302] netlink: 'syz.4.2786': attribute type 13 has an invalid length. [ 670.423460][T16302] macvtap0: refused to change device tx_queue_len [ 670.446704][ T6632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.513115][ T49] IPVS: stop unused estimator thread 0... [ 670.577237][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.603811][T16318] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2790'. [ 670.640378][T16317] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2790'. [ 670.659120][T16320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2791'. [ 670.847682][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.879980][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2791'. [ 670.995685][T16334] netlink: 'syz.7.2794': attribute type 11 has an invalid length. [ 671.036064][T16338] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.2795'. [ 671.056522][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.070697][T16337] syzkaller0: entered promiscuous mode [ 671.096633][T16337] syzkaller0: entered allmulticast mode [ 671.328632][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.354928][T16356] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2798'. [ 671.401955][T16356] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2798'. [ 671.886507][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.256376][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.269293][T15892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 672.315977][T15892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 672.411879][T16398] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 672.436436][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.457970][T15892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 672.498990][T15892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 672.566815][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.642886][T16411] xt_l2tp: missing protocol rule (udp|l2tpip) [ 672.737465][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2814'. [ 672.806531][ T6635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.852362][T15892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.951689][T15892] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.010023][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.017248][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.066478][ T6622] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.085620][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.092881][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.328464][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.457711][ T6639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.809899][T16469] netlink: 'syz.2.2826': attribute type 1 has an invalid length. [ 673.841399][T16469] netlink: 'syz.2.2826': attribute type 1 has an invalid length. [ 674.013600][T16478] batadv0: entered promiscuous mode [ 674.023214][T16478] bond0: entered promiscuous mode [ 674.030748][T16478] bond_slave_0: entered promiscuous mode [ 674.042412][T16478] bond_slave_1: entered promiscuous mode [ 674.052812][T16478] debugfs: 'hsr0' already exists in 'hsr' [ 674.078250][T16478] Cannot create hsr debugfs directory [ 674.095583][T16478] hsr0: entered allmulticast mode [ 674.115451][T16478] batadv0: entered allmulticast mode [ 674.133161][T16478] bond0: entered allmulticast mode [ 674.170066][T16478] bond_slave_0: entered allmulticast mode [ 674.189871][T16478] bond_slave_1: entered allmulticast mode [ 674.206744][T16478] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 674.295033][T16499] bridge0: left allmulticast mode [ 674.313348][T16516] netlink: 'syz.7.2831': attribute type 1 has an invalid length. [ 674.430954][T15892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.682842][T16526] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 674.710731][T16526] bond8 (unregistering): Released all slaves [ 674.919422][T15892] veth0_vlan: entered promiscuous mode [ 674.973440][T15892] veth1_vlan: entered promiscuous mode [ 675.124938][T16546] __nla_validate_parse: 6 callbacks suppressed [ 675.124959][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2838'. [ 675.170108][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2838'. [ 675.179338][T15892] veth0_macvtap: entered promiscuous mode [ 675.191458][T15892] veth1_macvtap: entered promiscuous mode [ 675.440835][T15892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.449136][T16553] netlink: 'syz.7.2841': attribute type 10 has an invalid length. [ 675.488507][T16553] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 675.522448][T15892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.593631][T16509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.639174][T16509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.688624][T16509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.723244][T16509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.949861][T16579] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2847'. [ 675.994400][T16507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.027519][T16507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.162417][ T6632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.197970][ T6632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.386735][T16597] IPv6: Can't replace route, no match found [ 676.495433][T16593] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 676.570492][T16593] bond8: entered promiscuous mode [ 676.583497][T16593] bond8: entered allmulticast mode [ 676.654957][T16593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 676.859991][T16510] net_ratelimit: 14 callbacks suppressed [ 676.860012][T16510] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.006962][ T6632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.259153][T16507] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.268247][T16639] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2861'. [ 677.287366][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2860'. [ 677.396234][T16505] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.516282][T16505] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.665842][T16505] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.806741][ T6632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.892673][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2866'. [ 678.002506][ T6632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.041845][ T6632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.084488][ T6632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 678.184524][T16658] erspan0: entered promiscuous mode [ 678.294972][ T5892] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 678.309743][ T5892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 678.325947][ T5892] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 678.334797][ T5892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 678.342731][ T5892] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 678.474061][ T6632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.505711][ T6632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.542962][ T6632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 678.651020][T16509] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.799050][ T6632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.859736][ T6632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.886711][ T6632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 678.962134][T16505] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.321860][ T6632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.332287][ T6632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.343735][ T6632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 679.380075][T16510] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.387725][T16667] vxcan1 speed is unknown, defaulting to 1000 [ 679.673318][T16721] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2881'. [ 679.725255][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2881'. [ 680.118653][T16739] netlink: 'syz.4.2884': attribute type 10 has an invalid length. [ 680.458140][ T5894] Bluetooth: hci4: command tx timeout [ 680.490282][ T6632] bond_slave_0: left promiscuous mode [ 680.522840][ T6632] bond_slave_1: left promiscuous mode [ 680.611794][ T6632] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 681.015480][ T6632] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 681.034036][ T6632] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 681.522168][ T6632] bond2 (unregistering): (slave gretap0): Releasing active interface [ 681.569912][ T6632] bond4 (unregistering): (slave gretap1): Releasing active interface [ 681.659170][ T6632] bond8 (unregistering): (slave geneve3): Releasing backup interface [ 681.720046][ T6632] team0: Port device geneve0 removed [ 682.254073][ T6632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.264863][ T6632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.279606][ T6632] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 682.301991][ T6632] bond0 (unregistering): Released all slaves [ 682.398293][ T6632] bond1 (unregistering): Released all slaves [ 682.493424][ T6632] bond2 (unregistering): Released all slaves [ 682.540271][ T5894] Bluetooth: hci4: command tx timeout [ 682.591877][ T6632] bond3 (unregistering): Released all slaves [ 682.685006][ T6632] bond4 (unregistering): Released all slaves [ 682.777710][ T6632] bond5 (unregistering): Released all slaves [ 682.871355][ T6632] bond6 (unregistering): Released all slaves [ 682.885978][ T6632] bond7 (unregistering): Released all slaves [ 682.902278][ T6632] bond8 (unregistering): Released all slaves [ 683.219060][T16790] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 683.424573][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2897'. [ 683.849929][T16802] can: request_module (can-proto-0) failed. [ 683.928660][T16667] chnl_net:caif_netlink_parms(): no params data found [ 684.374691][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.401015][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.419399][T16667] bridge_slave_0: entered allmulticast mode [ 684.434122][T16667] bridge_slave_0: entered promiscuous mode [ 684.462128][T16667] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.490209][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.501326][T16667] bridge_slave_1: entered allmulticast mode [ 684.509822][T16667] bridge_slave_1: entered promiscuous mode [ 684.552616][T16843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2906'. [ 684.617533][ T5894] Bluetooth: hci4: command tx timeout [ 684.628964][T16667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.643411][ T6632] tipc: Left network mode [ 684.678336][T16667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.705967][ T6632] IPVS: stopping backup sync thread 15465 ... [ 684.761028][T16667] team0: Port device team_slave_0 added [ 684.780283][T16667] team0: Port device team_slave_1 added [ 685.157530][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 685.170800][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 685.237657][T16667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.244653][T16667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.307588][T16667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.407869][T16667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.428738][T16667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.491413][T16667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.506195][T16885] syz.7.2917: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 685.544908][T16885] CPU: 0 UID: 0 PID: 16885 Comm: syz.7.2917 Not tainted syzkaller #0 PREEMPT(full) [ 685.544940][T16885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 685.544955][T16885] Call Trace: [ 685.544964][T16885] [ 685.544974][T16885] dump_stack_lvl+0x189/0x250 [ 685.545011][T16885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.545038][T16885] ? __pfx__printk+0x10/0x10 [ 685.545072][T16885] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 685.545102][T16885] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 685.545134][T16885] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 685.545167][T16885] warn_alloc+0x214/0x310 [ 685.545199][T16885] ? stack_depot_save_flags+0x40/0x860 [ 685.545235][T16885] ? __pfx_warn_alloc+0x10/0x10 [ 685.545268][T16885] ? kasan_save_track+0x4f/0x80 [ 685.545293][T16885] ? xskq_create+0x56/0x170 [ 685.545324][T16885] ? xsk_init_queue+0xb0/0x110 [ 685.545354][T16885] ? xsk_setsockopt+0x4dc/0x8d0 [ 685.545382][T16885] ? do_sock_setsockopt+0x179/0x1b0 [ 685.545404][T16885] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 685.545427][T16885] ? do_syscall_64+0xfa/0x3b0 [ 685.545447][T16885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.545479][T16885] __vmalloc_node_range_noprof+0x125/0x12f0 [ 685.545546][T16885] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 685.545583][T16885] ? __kasan_kmalloc+0x93/0xb0 [ 685.545614][T16885] vmalloc_user_noprof+0xad/0xf0 [ 685.545644][T16885] ? xskq_create+0xbf/0x170 [ 685.545679][T16885] xskq_create+0xbf/0x170 [ 685.545716][T16885] xsk_init_queue+0xb0/0x110 [ 685.545752][T16885] xsk_setsockopt+0x4dc/0x8d0 [ 685.545784][T16885] ? __pfx_xsk_setsockopt+0x10/0x10 [ 685.545812][T16885] ? __pfx_aa_sk_perm+0x10/0x10 [ 685.545854][T16885] ? aa_sock_opt_perm+0xff/0x1b0 [ 685.545890][T16885] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 685.545923][T16885] ? __pfx_xsk_setsockopt+0x10/0x10 [ 685.545956][T16885] do_sock_setsockopt+0x179/0x1b0 [ 685.545987][T16885] __x64_sys_setsockopt+0x13f/0x1b0 [ 685.546020][T16885] do_syscall_64+0xfa/0x3b0 [ 685.546040][T16885] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.546075][T16885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.546100][T16885] ? clear_bhb_loop+0x60/0xb0 [ 685.546125][T16885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.546146][T16885] RIP: 0033:0x7f89e738eec9 [ 685.546165][T16885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.546184][T16885] RSP: 002b:00007f89e816d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 685.546206][T16885] RAX: ffffffffffffffda RBX: 00007f89e75e6180 RCX: 00007f89e738eec9 [ 685.546222][T16885] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 685.546235][T16885] RBP: 00007f89e7411f91 R08: 0000000000000004 R09: 0000000000000000 [ 685.546248][T16885] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.546261][T16885] R13: 00007f89e75e6218 R14: 00007f89e75e6180 R15: 00007ffde1631398 [ 685.546295][T16885] [ 685.878226][T16885] Mem-Info: [ 685.882348][T16885] active_anon:4932 inactive_anon:0 isolated_anon:0 [ 685.882348][T16885] active_file:2885 inactive_file:40014 isolated_file:0 [ 685.882348][T16885] unevictable:768 dirty:62 writeback:0 [ 685.882348][T16885] slab_reclaimable:12381 slab_unreclaimable:115418 [ 685.882348][T16885] mapped:45295 shmem:1378 pagetables:1088 [ 685.882348][T16885] sec_pagetables:0 bounce:0 [ 685.882348][T16885] kernel_misc_reclaimable:0 [ 685.882348][T16885] free:1279558 free_pcp:15734 free_cma:0 [ 685.955758][T16885] Node 0 active_anon:19728kB inactive_anon:0kB active_file:11540kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:181180kB dirty:248kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14364kB pagetables:4116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 685.990839][T16885] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 686.021464][T16885] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 686.050962][T16896] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2920'. [ 686.060594][T16885] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 686.067145][T16885] Node 0 DMA32 free:1209044kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19680kB inactive_anon:0kB active_file:11540kB inactive_file:159532kB unevictable:1536kB writepending:264kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:42088kB local_pcp:22912kB free_cma:0kB [ 686.100153][T16885] lowmem_reserve[]: 0 0 0 0 0 [ 686.103158][T16897] netlink: 'syz.6.2920': attribute type 1 has an invalid length. [ 686.104922][T16885] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 686.141759][T16885] lowmem_reserve[]: 0 0 0 0 0 [ 686.146649][T16885] Node 1 Normal free:3893308kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17088kB local_pcp:11680kB free_cma:0kB [ 686.179186][T16885] lowmem_reserve[]: 0 0 0 0 0 [ 686.183993][T16885] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 686.196851][T16885] Node 0 DMA32: 953*4kB (UM) 441*8kB (M) 150*16kB (UM) 44*32kB (M) 53*64kB (UME) 165*128kB (UME) 108*256kB (UME) 44*512kB (UME) 15*1024kB (UM) 4*2048kB (UM) 267*4096kB (UM) = 1203020kB [ 686.227169][T16885] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 686.239336][T16885] Node 1 Normal: 171*4kB (UME) 34*8kB (UME) 36*16kB (UME) 100*32kB (UME) 31*64kB (UME) 10*128kB (UME) 5*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3893308kB [ 686.275623][T16885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.294096][T16885] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 686.314905][T16891] netlink: 'syz.4.2918': attribute type 1 has an invalid length. [ 686.328724][T16885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.340358][T16885] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 686.349907][T16885] 44274 total pagecache pages [ 686.354749][T16885] 0 pages in swap cache [ 686.361072][T16885] Free swap = 124996kB [ 686.365374][T16885] Total swap = 124996kB [ 686.370107][T16885] 2097051 pages RAM [ 686.374547][T16885] 0 pages HighMem/MovableOnly [ 686.379719][T16885] 423781 pages reserved [ 686.385519][T16885] 0 pages cma reserved [ 686.421944][T16667] hsr_slave_0: entered promiscuous mode [ 686.458510][T16667] hsr_slave_1: entered promiscuous mode [ 686.469919][T16667] debugfs: 'hsr0' already exists in 'hsr' [ 686.483886][T16667] Cannot create hsr debugfs directory [ 686.697145][ T5894] Bluetooth: hci4: command tx timeout [ 686.801586][T16914] tap0: tun_chr_ioctl cmd 1074025676 [ 686.822799][T16914] tap0: owner set to 0 [ 686.885638][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2926'. [ 686.926279][ T6632] hsr_slave_0: left promiscuous mode [ 686.943011][ T6632] hsr_slave_1: left promiscuous mode [ 686.951068][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.962233][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.002291][ T6632] veth0_macvtap: left promiscuous mode [ 687.008384][ T6632] veth1_vlan: left allmulticast mode [ 687.013766][ T6632] veth1_vlan: left promiscuous mode [ 687.019752][ T6632] veth0_vlan: left promiscuous mode [ 687.135037][ T6632] pimreg (unregistering): left allmulticast mode [ 687.372312][ T6632] team0 (unregistering): Port device veth0_virt_wifi removed [ 687.525333][ T6632] team0 (unregistering): Port device team_slave_1 removed [ 687.565199][ T6632] team0 (unregistering): Port device team_slave_0 removed [ 687.931547][T16915] ksmbd: Unknown IPC event: 3, ignore. [ 688.106788][T16929] netlink: 'syz.4.2928': attribute type 1 has an invalid length. [ 688.231349][T16933] bond1: Removing last arp target with arp_interval on [ 688.264432][T16944] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2931'. [ 688.373180][T16944] gretap0: entered promiscuous mode [ 688.534467][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2933'. [ 688.651478][T16954] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2935'. [ 688.679316][ T6632] IPVS: stop unused estimator thread 0... [ 688.977422][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 689.028865][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 689.100634][T16667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 689.107882][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 689.122853][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 689.135787][ T6632] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.149924][T16975] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2942'. [ 689.161248][ T6625] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.195389][T16667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 689.215160][T16667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 689.256799][ T6625] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.281707][T16667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 689.303187][ T6625] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.433919][T16998] netlink: 'syz.7.2949': attribute type 1 has an invalid length. [ 689.468273][T16998] netlink: 'syz.7.2949': attribute type 1 has an invalid length. [ 689.476236][T16998] netlink: 'syz.7.2949': attribute type 1 has an invalid length. [ 689.483994][T16998] netlink: 'syz.7.2949': attribute type 1 has an invalid length. [ 689.571823][T16667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.603196][T17004] syzkaller0: entered promiscuous mode [ 689.618579][T17004] syzkaller0: entered allmulticast mode [ 689.635385][T16667] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.647355][T17004] netlink: 'syz.6.2950': attribute type 29 has an invalid length. [ 689.659895][T17004] netlink: 'syz.6.2950': attribute type 29 has an invalid length. [ 689.703794][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.711125][ T6632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.784488][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.791739][ T6632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.907783][ T31] audit: type=1804 audit(1759484955.179:6): pid=17017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2953" name="/newroot/240/cgroup.controllers" dev="tmpfs" ino=1241 res=1 errno=0 [ 689.957247][ T31] audit: type=1800 audit(1759484955.209:7): pid=17017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2953" name="cgroup.controllers" dev="tmpfs" ino=1241 res=0 errno=0 [ 690.188837][T17024] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2954'. [ 690.208140][T16667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.324765][T16667] veth0_vlan: entered promiscuous mode [ 690.357678][T16667] veth1_vlan: entered promiscuous mode [ 690.493473][T16667] veth0_macvtap: entered promiscuous mode [ 690.534396][T16667] veth1_macvtap: entered promiscuous mode [ 690.584101][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2959'. [ 690.627996][T16667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.686688][T16667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.729870][T16507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.752486][T16507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.814844][T16507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.840878][T16507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.902899][T17053] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 690.959130][T17053] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 690.968220][T17053] gretap1: entered promiscuous mode [ 690.976339][T17053] gretap1: entered allmulticast mode [ 691.024733][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.164767][T17071] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2966'. [ 691.705450][ T6632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.729872][ T6632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.809568][ T6625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.865538][T17100] netlink: 'syz.7.2973': attribute type 11 has an invalid length. [ 691.873996][ T6625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.948583][T17102] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 692.344253][T17130] sctp: [Deprecated]: syz.7.2980 (pid 17130) Use of int in max_burst socket option. [ 692.344253][T17130] Use struct sctp_assoc_value instead [ 692.562245][T17136] tipc: Enabling of bearer rejected, failed to enable media [ 692.599144][T17134] vxcan1 speed is unknown, defaulting to 1000 [ 692.723310][T17143] chnl_net:caif_netlink_parms(): no params data found [ 692.810924][T17147] ip6gre0: Master is either lo or non-ether device [ 692.848912][T17147] netlink: 'syz.0.2987': attribute type 7 has an invalid length. [ 693.030510][T17153] Unsupported ieee802154 address type: 0 [ 693.032207][T17152] netlink: 'syz.2.2989': attribute type 10 has an invalid length. [ 693.056818][T17152] bridge0: port 3(team0) entered blocking state [ 693.075613][T17152] bridge0: port 3(team0) entered disabled state [ 693.083473][T17152] team0: entered allmulticast mode [ 693.089571][ T5892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.097099][T17152] team_slave_0: entered allmulticast mode [ 693.103122][T17152] team_slave_1: entered allmulticast mode [ 693.113265][ T5892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.121693][ T5892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.123575][T17152] team0: entered promiscuous mode [ 693.139507][ T5892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.150364][ T5892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 693.175410][T17152] team_slave_0: entered promiscuous mode [ 693.182645][T17152] team_slave_1: entered promiscuous mode [ 693.191426][T17152] bridge0: port 3(team0) entered blocking state [ 693.197929][T17152] bridge0: port 3(team0) entered forwarding state [ 693.381483][T17157] vxcan1 speed is unknown, defaulting to 1000 [ 693.502485][T17175] netlink: 'syz.7.2995': attribute type 1 has an invalid length. [ 693.559848][T17175] __nla_validate_parse: 7 callbacks suppressed [ 693.559870][T17175] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2995'. [ 693.969034][T17192] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2999'. [ 694.121365][T17198] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3001'. [ 694.427711][T17209] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3002'. [ 694.654886][T17157] chnl_net:caif_netlink_parms(): no params data found [ 694.774648][T17224] netlink: 'syz.2.3006': attribute type 1 has an invalid length. [ 694.907122][T17231] netlink: 'syz.2.3006': attribute type 11 has an invalid length. [ 694.925932][T17231] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3006'. [ 694.998934][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.006376][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.013692][T17157] bridge_slave_0: entered allmulticast mode [ 695.041544][T17157] bridge_slave_0: entered promiscuous mode [ 695.069605][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.104827][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.125731][T17157] bridge_slave_1: entered allmulticast mode [ 695.144229][T17157] bridge_slave_1: entered promiscuous mode [ 695.177825][ T5894] Bluetooth: hci1: command tx timeout [ 695.332379][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.388115][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.412697][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3013'. [ 695.466461][T17253] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3015'. [ 695.490274][T17157] team0: Port device team_slave_0 added [ 695.509686][T17157] team0: Port device team_slave_1 added [ 695.578276][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3015'. [ 695.594362][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.601996][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.631227][T17260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.665945][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.697664][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.713726][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.777855][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.924648][T17157] hsr_slave_0: entered promiscuous mode [ 695.935249][T17157] hsr_slave_1: entered promiscuous mode [ 695.942718][T17157] debugfs: 'hsr0' already exists in 'hsr' [ 695.948728][T17157] Cannot create hsr debugfs directory [ 696.456201][T17157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.469494][T17157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.479836][T17157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.490126][T17157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 696.573357][T17157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.593090][T17157] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.607425][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.614605][T16510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.633373][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.640578][T16505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.851430][T17157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.090706][T17157] veth0_vlan: entered promiscuous mode [ 697.103187][T17157] veth1_vlan: entered promiscuous mode [ 697.135101][T17157] veth0_macvtap: entered promiscuous mode [ 697.145017][T17157] veth1_macvtap: entered promiscuous mode [ 697.164824][T17157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.181313][T17157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.199289][ T6625] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.212977][ T6625] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.223560][ T6625] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.235680][ T6625] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.266851][ T5894] Bluetooth: hci1: command tx timeout [ 697.303671][T16509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.312776][T16509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.344917][T16498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.352876][T16498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.458017][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 699.336539][ T5894] Bluetooth: hci1: command tx timeout [ 701.416611][ T5894] Bluetooth: hci1: command tx timeout [ 715.714184][T17310] netlink: 'syz.6.3026': attribute type 1 has an invalid length. [ 715.743749][T17306] netlink: 'syz.0.3023': attribute type 12 has an invalid length. [ 715.861765][T17320] wg1: entered promiscuous mode [ 715.873103][T17320] wg1: entered allmulticast mode [ 715.885109][T17321] netlink: 'syz.6.3030': attribute type 1 has an invalid length. [ 715.904232][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3030'. [ 716.243085][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 716.290431][T17347] netlink: 'syz.6.3038': attribute type 1 has an invalid length. [ 716.408707][T17348] 8021q: adding VLAN 0 to HW filter on device bond7 [ 716.418296][T17348] bond6: (slave bond7): making interface the new active one [ 716.449613][T17348] bond6: (slave bond7): Enslaving as an active interface with an up link [ 716.495206][T17347] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 716.528871][T17347] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 716.824659][ T5966] IPVS: starting estimator thread 0... [ 716.917539][T17369] IPVS: using max 25 ests per chain, 60000 per kthread [ 716.954584][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3046'. [ 717.072578][T17380] pim6reg: entered allmulticast mode [ 717.094006][T17379] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3047'. [ 717.108243][T17380] pim6reg: left allmulticast mode [ 717.327320][T17392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3053'. [ 717.336968][T17392] netlink: 'syz.4.3053': attribute type 7 has an invalid length. [ 717.345325][T17392] netlink: 'syz.4.3053': attribute type 8 has an invalid length. [ 717.354771][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3053'. [ 717.405789][T17395] pim6reg1: entered promiscuous mode [ 717.422730][T17395] pim6reg1: entered allmulticast mode [ 717.620447][T17407] netlink: 'syz.4.3058': attribute type 8 has an invalid length. [ 717.712817][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 717.929034][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3064'. [ 717.953941][T17427] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3064'. [ 718.310486][T17450] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3071'. [ 718.365902][T17410] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 718.789165][T17466] bond1: invalid ARP target 0.0.0.0 specified for addition [ 718.828606][T17466] bond1: option arp_ip_target: invalid value (0) [ 718.876673][T17466] bond1 (unregistering): Released all slaves [ 719.021938][T17479] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 719.044201][T17479] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 719.061902][T17479] gretap1: entered promiscuous mode [ 719.067721][T17479] gretap1: entered allmulticast mode [ 719.160340][T17490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.295934][T17490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.578906][T17518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 719.586311][T17518] IPv6: NLM_F_CREATE should be set when creating new route [ 719.594189][T17517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 719.657102][ T5894] Bluetooth: hci4: command 0x0401 tx timeout [ 720.539353][T17560] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 720.994570][T17585] netlink: 'syz.2.3107': attribute type 10 has an invalid length. [ 721.224927][T17599] vxcan1: tx address claim with different name [ 721.297734][T17607] __nla_validate_parse: 11 callbacks suppressed [ 721.297756][T17607] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3111'. [ 721.345844][T17611] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3112'. [ 721.379205][T17611] netlink: 'syz.7.3112': attribute type 1 has an invalid length. [ 721.491139][T17609] pim6reg1: entered promiscuous mode [ 721.509542][T17609] pim6reg1: entered allmulticast mode [ 721.682578][T17628] netlink: 'syz.6.3119': attribute type 1 has an invalid length. [ 721.735205][T17628] 8021q: adding VLAN 0 to HW filter on device bond8 [ 722.076256][T17657] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3125'. [ 722.150923][ T6007] IPVS: starting estimator thread 0... [ 722.276284][T17661] IPVS: using max 32 ests per chain, 76800 per kthread [ 722.331093][T17667] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3128'. [ 722.353622][T17667] netlink: 576 bytes leftover after parsing attributes in process `syz.6.3128'. [ 722.369118][T17672] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3130'. [ 722.444174][T17676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3131'. [ 722.470038][T17672] syzkaller1: entered promiscuous mode [ 722.486268][T17672] syzkaller1: entered allmulticast mode [ 722.511967][T17672] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 722.568018][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3130'. [ 722.674476][T17685] netlink: 'syz.7.3134': attribute type 1 has an invalid length. [ 722.820835][T17685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.898594][T17694] bond2: (slave gretap2): making interface the new active one [ 722.928360][T17694] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 723.131627][T17715] netlink: 'syz.7.3140': attribute type 29 has an invalid length. [ 723.152009][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3141'. [ 723.161324][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3140'. [ 723.545592][T17739] lo: entered allmulticast mode [ 723.557425][T17739] lo: left allmulticast mode [ 723.590664][T17741] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 723.603649][T17741] bond1 (unregistering): Released all slaves [ 723.675620][T17745] vlan0: entered promiscuous mode [ 723.767581][T17752] netlink: 'syz.2.3152': attribute type 21 has an invalid length. [ 723.777417][T17752] IPv6: NLM_F_CREATE should be specified when creating new route [ 724.297378][ T32] INFO: task syz.5.1659:12069 blocked for more than 143 seconds. [ 724.306505][ T32] Not tainted syzkaller #0 [ 724.311496][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 724.322793][ T32] task:syz.5.1659 state:D stack:27272 pid:12069 tgid:12059 ppid:11087 task_flags:0x400040 flags:0x00080002 [ 724.335565][ T32] Call Trace: [ 724.341715][ T32] [ 724.344709][ T32] __schedule+0x1798/0x4cc0 [ 724.355096][ T32] ? __lock_acquire+0xab9/0xd20 [ 724.361142][ T32] ? __lock_acquire+0xab9/0xd20 [ 724.367932][ T32] ? __pfx___schedule+0x10/0x10 [ 724.372942][ T32] ? schedule+0x91/0x360 [ 724.380257][ T32] schedule+0x165/0x360 [ 724.391968][ T32] schedule_preempt_disabled+0x13/0x30 [ 724.407604][ T32] __mutex_lock+0x7e6/0x1350 [ 724.422560][ T32] ? __mutex_lock+0x5bb/0x1350 [ 724.429553][T17789] bond3: Invalid ad_actor_system MAC address. [ 724.435903][T17789] bond3: option ad_actor_system: invalid value (1) [ 724.436358][ T32] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 724.461327][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 724.467952][ T32] ? __nlmsg_put+0xef/0x1b0 [ 724.472715][ T32] ? genlmsg_put+0x137/0x2e0 [ 724.477606][ T32] nfsd_nl_version_get_doit+0x16e/0xb60 [ 724.483527][ T32] ? __local_bh_enable_ip+0x12d/0x1c0 [ 724.489254][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 724.495676][ T32] genl_family_rcv_msg_doit+0x212/0x300 [ 724.501663][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 724.508193][ T32] genl_rcv_msg+0x60e/0x790 [ 724.512909][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 724.518460][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 724.524747][ T32] ? __asan_memcpy+0x40/0x70 [ 724.529785][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 724.535335][ T32] netlink_rcv_skb+0x208/0x470 [ 724.540404][ T32] ? __lock_acquire+0xab9/0xd20 [ 724.545310][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 724.550896][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 724.556629][ T32] ? down_read+0x1ad/0x2e0 [ 724.563024][ T32] genl_rcv+0x28/0x40 [ 724.568309][ T32] netlink_unicast+0x82c/0x9e0 [ 724.573499][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 724.579346][ T32] ? netlink_sendmsg+0x642/0xb30 [ 724.584324][ T32] ? skb_put+0x11b/0x210 [ 724.588626][ T32] netlink_sendmsg+0x805/0xb30 [ 724.593421][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.598816][ T32] ? aa_sock_msg_perm+0xf1/0x1d0 [ 724.603797][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 724.609400][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.614700][ T32] __sock_sendmsg+0x21c/0x270 [ 724.619522][ T32] ____sys_sendmsg+0x505/0x830 [ 724.624344][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 724.630945][ T32] ? import_iovec+0x74/0xa0 [ 724.635512][ T32] ___sys_sendmsg+0x21f/0x2a0 [ 724.640524][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.645813][ T32] ? __fget_files+0x2a/0x420 [ 724.650542][ T32] ? __fget_files+0x3a0/0x420 [ 724.655252][ T32] __x64_sys_sendmsg+0x19b/0x260 [ 724.660373][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 724.665860][ T32] ? rcu_is_watching+0x15/0xb0 [ 724.672103][ T32] ? do_syscall_64+0xbe/0x3b0 [ 724.677250][ T32] do_syscall_64+0xfa/0x3b0 [ 724.681797][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 724.687215][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.693329][ T32] ? clear_bhb_loop+0x60/0xb0 [ 724.698602][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.704528][ T32] RIP: 0033:0x7fb6cd58eec9 [ 724.709015][ T32] RSP: 002b:00007fb6ce3d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.717508][ T32] RAX: ffffffffffffffda RBX: 00007fb6cd7e6090 RCX: 00007fb6cd58eec9 [ 724.725500][ T32] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 724.734004][ T32] RBP: 00007fb6cd611f91 R08: 0000000000000000 R09: 0000000000000000 [ 724.742193][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.750276][ T32] R13: 00007fb6cd7e6128 R14: 00007fb6cd7e6090 R15: 00007ffe330739d8 [ 724.758654][ T32] [ 724.763402][ T32] [ 724.763402][ T32] Showing all locks held in the system: [ 724.771022][T17789] bond3 (unregistering): Released all slaves [ 724.773458][ T32] 1 lock held by khungtaskd/32: [ 724.806151][ T32] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 724.820471][ T32] 2 locks held by getty/5596: [ 724.825199][ T32] #0: ffff88814d5320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 724.835112][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 724.845335][ T32] 3 locks held by kworker/u8:12/6625: [ 724.851144][ T32] #0: ffff88814d1f2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 724.866714][ T32] #1: ffffc9000df67bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 724.880542][ T32] #2: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 724.890854][ T32] 2 locks held by syz.3.1205/10246: [ 724.896277][ T32] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 724.904646][ T32] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 724.915358][ T32] 2 locks held by syz.5.1659/12069: [ 724.920780][ T32] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 724.929093][ T32] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 724.940555][ T32] 2 locks held by syz.1.2188/14032: [ 724.945799][ T32] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 724.956518][ T32] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 724.967216][ T32] 3 locks held by kworker/u8:36/16510: [ 724.972730][ T32] #0: ffff8880b8939fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 724.983362][ T32] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 724.992479][ T32] #2: ffff8880555c0788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 725.003142][ T32] 2 locks held by syz.0.3121/17632: [ 725.008612][ T32] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 725.017096][ T32] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 725.027713][ T32] 1 lock held by syz.2.3166/17786: [ 725.032848][ T32] #0: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 725.041932][ T32] 3 locks held by syz.7.3167/17789: [ 725.047170][ T32] #0: ffffffff8f5bbd10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 725.057021][ T32] #1: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 725.066139][ T32] #2: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 725.077238][ T32] [ 725.080290][ T32] ============================================= [ 725.080290][ T32] [ 725.091526][ T32] NMI backtrace for cpu 0 [ 725.091548][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 725.091573][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.091586][ T32] Call Trace: [ 725.091595][ T32] [ 725.091604][ T32] dump_stack_lvl+0x189/0x250 [ 725.091640][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.091695][ T32] ? __pfx__printk+0x10/0x10 [ 725.091743][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 725.091777][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 725.091811][ T32] ? __pfx__printk+0x10/0x10 [ 725.091849][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 725.091874][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 725.091908][ T32] watchdog+0xf93/0xfe0 [ 725.091935][ T32] ? watchdog+0x1de/0xfe0 [ 725.091963][ T32] kthread+0x711/0x8a0 [ 725.091995][ T32] ? __pfx_watchdog+0x10/0x10 [ 725.092015][ T32] ? __pfx_kthread+0x10/0x10 [ 725.092046][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.092079][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.092111][ T32] ? __pfx_kthread+0x10/0x10 [ 725.092141][ T32] ret_from_fork+0x436/0x7d0 [ 725.092168][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 725.092199][ T32] ? __switch_to_asm+0x39/0x70 [ 725.092226][ T32] ? __switch_to_asm+0x33/0x70 [ 725.092254][ T32] ? __pfx_kthread+0x10/0x10 [ 725.092284][ T32] ret_from_fork_asm+0x1a/0x30 [ 725.092331][ T32] [ 725.092339][ T32] Sending NMI from CPU 0 to CPUs 1: [ 725.245506][ C1] NMI backtrace for cpu 1 [ 725.245524][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 725.245545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.245558][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 725.245593][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 725.245610][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 725.245627][ C1] RAX: ce634ae5a592df00 RBX: ffffffff81953917 RCX: ce634ae5a592df00 [ 725.245645][ C1] RDX: 0000000000000001 RSI: ffffffff8d50d356 RDI: ffffffff8b9ec4e0 [ 725.245659][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 725.245673][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5b8630 [ 725.245687][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395bb58 [ 725.245699][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 725.245714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.245726][ C1] CR2: 000000110c3c535d CR3: 000000007a880000 CR4: 00000000003526f0 [ 725.245742][ C1] Call Trace: [ 725.245750][ C1] [ 725.245757][ C1] default_idle+0x13/0x20 [ 725.245778][ C1] default_idle_call+0x73/0xb0 [ 725.245799][ C1] do_idle+0x1e7/0x510 [ 725.245819][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 725.245840][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.245869][ C1] ? __pfx_do_idle+0x10/0x10 [ 725.245894][ C1] ? do_idle+0x4e9/0x510 [ 725.245915][ C1] cpu_startup_entry+0x44/0x60 [ 725.245934][ C1] start_secondary+0x101/0x110 [ 725.245951][ C1] common_startup_64+0x13e/0x147 [ 725.245986][ C1] [ 725.251488][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 725.251514][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 725.251543][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.251560][ T32] Call Trace: [ 725.251570][ T32] [ 725.251582][ T32] dump_stack_lvl+0x99/0x250 [ 725.251618][ T32] ? __asan_memcpy+0x40/0x70 [ 725.251653][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.251683][ T32] ? __pfx__printk+0x10/0x10 [ 725.251738][ T32] vpanic+0x281/0x750 [ 725.251773][ T32] ? __pfx_vpanic+0x10/0x10 [ 725.251804][ T32] ? preempt_schedule+0xae/0xc0 [ 725.251844][ T32] ? preempt_schedule_common+0x83/0xd0 [ 725.251892][ T32] panic+0xb9/0xc0 [ 725.251923][ T32] ? __pfx_panic+0x10/0x10 [ 725.251957][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 725.251990][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 725.252030][ T32] watchdog+0xfd2/0xfe0 [ 725.252061][ T32] ? watchdog+0x1de/0xfe0 [ 725.252094][ T32] kthread+0x711/0x8a0 [ 725.252131][ T32] ? __pfx_watchdog+0x10/0x10 [ 725.252153][ T32] ? __pfx_kthread+0x10/0x10 [ 725.252189][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.252224][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.252261][ T32] ? __pfx_kthread+0x10/0x10 [ 725.252296][ T32] ret_from_fork+0x436/0x7d0 [ 725.252327][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 725.252362][ T32] ? __switch_to_asm+0x39/0x70 [ 725.252389][ T32] ? __switch_to_asm+0x33/0x70 [ 725.252413][ T32] ? __pfx_kthread+0x10/0x10 [ 725.252448][ T32] ret_from_fork_asm+0x1a/0x30 [ 725.252501][ T32] [ 725.579533][ T32] Kernel Offset: disabled [ 725.583860][ T32] Rebooting in 86400 seconds..