last executing test programs: 5.200954184s ago: executing program 0 (id=7535): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000007c0)='T', 0x1}], 0x1) r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000800)=""/220, 0xdc}, {&(0x7f0000000900)=""/5, 0x5}], 0x2}, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000580008805400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c2c00098028000080060001000a00000014000200000000000000000000000000000000000500030001000000"], 0xac}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r8 = socket(0x2b, 0x1, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @local, 0x20000204}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x0) socket$igmp6(0xa, 0x3, 0x2) 4.268452841s ago: executing program 0 (id=7547): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) unshare(0x6a040000) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x3, "14655b"}, &(0x7f0000000180)=0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet(0x2, 0x1, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c20000c72efb925c1e2a3f0045000028006400000402907800000000e000000211009078e0000002000100010000000000000000"], 0x0) gettid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@initdev, @in6=@empty}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a8008bde4f1ddfa532ff451a383d556fe3af37e30d4640957c8d04f86e9e00cfbc14cee52d85e7c7c3599f9304354d37adfeca6d4ab99632a3a602e381c2707a026000c670c6c"], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x8, 0x8, @private0, @empty, 0x80, 0x780f, 0xfff, 0xb0}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r8}, 0x38) 3.132326505s ago: executing program 2 (id=7559): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r2, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000000000000000000070042b4070000440c0b9102fffff02c00"], 0x20}, 0x4840) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0xbc, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x13}, 0x60) close(r4) sendto(r0, 0x0, 0x0, 0x4004010, 0x0, 0x0) 2.863696313s ago: executing program 2 (id=7562): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x25516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000002000000000009500000700000000000000000067ce31a900000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 2.734771822s ago: executing program 1 (id=7563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc50e}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbe}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x60}, 0x1, 0x7}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000540)=0xfffffc57) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/267], 0xb4}, 0x1, 0x0, 0x0, 0x240480d4}, 0x48000) 2.681771027s ago: executing program 0 (id=7564): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$pptp(0x18, 0x1, 0x2) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/77, 0x4d}], 0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x2}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x3, 0xff, 0x0, @empty}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r5, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@ptr={0x7}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x0, 0x5f, 0x2e, 0x5f, 0x30]}}, &(0x7f00000005c0)=""/24, 0x38, 0x18, 0x1, 0xd, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.593925059s ago: executing program 4 (id=7565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x508, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_b, @from_mac, {0x8, 0x6}}, @sp_mp_open={0xf, 0x1, {0x1000, {}, @void, @void}}}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x499, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @broadcast, {0x3, 0x96}, @broadcast, @void, @value=@ver_80211n={0x0, 0x9f3, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}]}, 0x508}, 0x1, 0x0, 0x0, 0x801}, 0x24004850) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4050) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000740)=0x400, 0x4) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000780)='nl80211\x00', 0x8) r2 = accept(r0, &(0x7f00000007c0)=@can={0x1d, 0x0}, &(0x7f0000000840)=0x80) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x2, 0x80000000, {{0x8, 0x4, 0x2, 0x30, 0x20, 0x68, 0x0, 0x3d, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, {[@lsrr={0x83, 0xb, 0x62, [@multicast2, @multicast1]}, @end]}}}}}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r2) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x3c}}, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x144, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18d068a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a7c89ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53a27f9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd87c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f3d69b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbb0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x166d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26b4e85}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf33}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e37cec2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e149faf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x290e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa242}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeac9}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd655}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x820f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14dd56f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6497ccca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x589bf9cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa716}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3945bb2e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x8) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r8) sendmsg$IEEE802154_LLSEC_LIST_KEY(r8, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r10, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x10) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000f00)="da25f85f66d7870375db904c8d83b2425bbe5b92f03ed60987b915af06fd472101d24a366b6b175da7e16e5e0db9870f7cc7c69ab6ada9999618b716bc0d8ee201eea39aa1567f215e0716cf795630de80d268991da79ed30191ef48f26d154995397b56a64b6185339deda7d6b43dbe9b0d26b898c9a85edd8709aa5e24f3c5fc83f7d0795a9a2de9fbcb0aca3f4bb93679e3256f19012fe9972ca9a3e316633f219eab8994ababeaed1ff4dc2f608d2b95cc6d8a44fa76e0709acdff0368f6", 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000001300)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001040)={0x268, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x228, 0x2a, [@tim={0x5, 0xd1, {0x1, 0x16, 0x7, "1c0e1a5d49a8b64fa76e384a098ab8445f32117d8de7e6f515bfa7ee44e55666fa5ffd3926cd2a48c9ddf218c280ffc540eaf2606bdef3662bcd44fef2b5c2288ca5efc05e34c9907ca93053d58cf2c2930f85bc74fa1b93b25e5fd818c72401157c049491ba749a36e63f48c10238abbb7ff367d192d731a8938676c3a3186467803869353a61b29072915914527a3ca72776694e5df4df85d7cefbf8c5c375fd4ebebe2d1da713218fb5197103a577ab827f45b6c9e1b04600d9543440364771650907024b76c7d7f8ff165a7b"}}, @challenge={0x10, 0x1, 0xac}, @fast_bss_trans={0x37, 0x92, {0x1, 0x4, "8ff037299e9a3fde1312efb2d91834d0", "297c72c229903e2957fdbc0168c7927001d1ecc3bff70d4d546880a9e36e7bdb", "d4affddde758f57c69c732cd8c66b4b4c3705562530b8cf7a4cb1e3b3937a2cc", [{0x4, 0xe, "1871f5d5466f40f4ae808659b111"}, {0x3, 0x9, "967af05254a8d7292e"}, {0x3, 0x11, "55e08ebeb7c3259d2aaa718a564374224a"}, {0x2, 0x10, "a8a7abffc364f7960bb1810f1e0b6ac6"}]}}, @random_vendor={0xdd, 0xb8, "88daee4dced0e2f389fc9deb4a9bb63a158c9605eb7c0ec6f61d9bb427517146837a16f5fa75f1051dac2eb195eb7a864c928bad245cb78a6738f19977206bbb0e63567b196970a8b9b93e2c5c142608a43294e47418b8338966179a39683fe27c08ab3b585ce23bb247ae11e8f56731d834fa906f9f43328746423d8f1a01668195028b4c391d09fbf8b075c89582f5f4717c646ee3577689b5dd8fe54370e7c605d1f8818dffa4763d84be67b0a2b3b7f223018e69040d"}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x268}, 0x1, 0x0, 0x0, 0x24000004}, 0x800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000001400)={&(0x7f0000001340), 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r1, 0x100, 0x4, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x6c, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8000}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r1, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040045}, 0x8810) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001780)={'syztnl1\x00', &(0x7f0000001700)={'ip6tnl0\x00', r3, 0x4, 0x3, 0x3, 0xfffffff8, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x700, 0x2, 0xb}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x78, r12, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8884}, 0x8000) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000018c0)={{r2}, "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"}) sendmmsg$inet(r4, &(0x7f0000004140)=[{{&(0x7f00000028c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000002900)="4928b76e3aef9a92b42cdef5e859b88eaff3711a6ce8efc14843707f56b4b1ead0675a9b6e076835b16fc36b0f7f7e47f8e0873a2fa5cf4f27cb634fc6a9964b5e1d052c1059fe5e9bf895f220a74551443a7d63d0089fa8b25e0cf0032c861d36806d10754a37409bb464349907676954aec62f8da7077190a3b96d6f40e107b6498d46869f83c41a4510b02a8cd9b80fc61112ab32fb", 0x97}, {&(0x7f00000029c0)="70f68a33800815e6ede526aacdcc78084548f1c5d3a6c8c434a301b6fe65af89b494d51da38473e6313dc5cdbf69fb6ac1885f20a7ff263ee046a25a9ee183867731782c6f98217687374ee581d5620a1999985b727cc4d8ffa478963fd5f8baa7d32d88f34f358375142788ac5ff42fbd0106498fffcf42b88a6ccf46644a16eb964e6385007c2835c60d5e114cbbb95ca070b1d1defa056345bf129ece85761c0d1bada35bac9874f7bbfdb7d04dc8858e774a21d74880efc13cc5815ced84d192175031", 0xc5}, {&(0x7f0000002ac0)="630a5a21b739405cb1cef75394321e30d3b73a730f92d07e3bd0171f870824b8404591f43927628143ddd955712762e28c591489f1d47537361fa23b35acef7870fd9ba82262814f1d0e23586bba281f855e889ad0d342b914a1274e78ebf98703f6038029ae37d892fffabbfc577b51344c185f3ef617b9d3f944f69bbc37c9298c586e2c0ab974b619c25d569ce4f68fb830f86b8523464c4fa71ecc3c1d49b4b95b8388aa1c56e6c4a287ede4304536f940702fe79a41fa42c80ec8d2baadf9c5240addbb2e", 0xc7}, {&(0x7f0000002bc0)="2629b77127e2f026585a0e3a4503366fd74de425f67b214d2251ea10193d669ac9e8db4547034de56ae996682b92a5c13afbe26b0000ee2ab1d7573589cb7abaecd0dfe1c263e2d0f34ae3007cb0db0783a93d659a78cb41bfa3a9c10293e94a50956780e8acf26feb604461f3c6d0098670a0cf44670e9cb213e78dcd0a2a57c6e78d79e76cdc40063b51d4c08d40203ba975a23b952ffba9bfda6c88a7edaea88eb7cc99c0b6919e0bf1ba52", 0xad}, {&(0x7f0000002c80)='?', 0x1}, {&(0x7f0000002cc0)="a00897baec9b24583c276afe861dafab8249dcd5bf53f9d9d0296b404c43666b82d1dcb562fec5e38e688e3d147bc4940152edb67059e83733d0eabce2450c60cb6182fbc600d92a515cc959626f0def109af39b20c3eb6042a53292d996c1d8e8ae193f0bd92f71455e9ccfca49c9a9fef62099e46226e2cac1119322bd3711c9bd17746e16498a98e894ab0bcafab1aeb88a5af9f73ca24c7462c81d71d05c09f829ef2f04979fb9d9504cb95588376bfd", 0xb2}, {&(0x7f0000002d80)="5d712e371ea004f7f3f114185ca4ae6da231912979554754a848e94f33284b61336fd5119e9d42a7f8b77f414b773662bd749131725c3874cfdc94d20e4d6a6eb952aaeac37804ce3097dc85d9064885d83254", 0x53}, {&(0x7f0000002e00)="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", 0x1000}], 0x8, &(0x7f0000003e80)=[@ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x6b, [@private=0xa010101, @local, @local, @broadcast, @loopback, @broadcast, @local, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}]}, @end, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xc3, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101]}, @timestamp={0x44, 0x28, 0x5b, 0x0, 0x0, [0xfffffff8, 0xb, 0x0, 0xd, 0x4, 0xb, 0x9, 0x9, 0xc]}, @timestamp_addr={0x44, 0x2c, 0x92, 0x1, 0x1, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xa0b0}, {@private=0xa010102}, {@multicast2, 0x3}, {@loopback, 0x2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa76c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6b8f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x168}}, {{&(0x7f0000004000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000004100)=[{&(0x7f0000004040)="ebfd834a2caefe377182b37002c8708b12d014ecafcd625bba5670956dd0024add541227f0c650c60af4", 0x2a}, {&(0x7f0000004080)="7d0322e8f60cf84871ef2282ea4e60d686aa0f69bb8e142c0ac44d513375a8ff006cb4b0f429ea9e0f21d41adf14f97bfd2c2d5532e6ff966bf33a27af9c1b8005ca78fc7af0f2a240b4a52a51cc15a711e85ffd95ad3e1bdcfbd1e5", 0x5c}], 0x2}}], 0x2, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004740)={0x18, 0x2, &(0x7f0000004200)=@raw=[@map_fd={0x18, 0xa}], &(0x7f0000004240)='GPL\x00', 0x9, 0x8d, &(0x7f0000004280)=""/141, 0x0, 0x30, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004380)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000043c0)={0x1, 0x1, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000004680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000046c0)=[{0x1, 0x4, 0x6}, {0x4, 0x3, 0xc, 0xb}, {0x4, 0x4, 0x7, 0x1}, {0x0, 0x2, 0x8, 0x7}, {0x5, 0x1, 0x7, 0x2}, {0x4, 0x2, 0xb, 0x6}], 0x10, 0x6f5a}, 0x94) 2.581283509s ago: executing program 0 (id=7566): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x82}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000000180000000800000000000000000000009500000000000000c60a000000000102180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.449143014s ago: executing program 1 (id=7567): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'net_cls'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2d, 'rlimit'}, {0x2b, 'hugetlb'}, {0x2d, 'freezer'}, {0x2b, 'hugetlb'}, {0x2b, 'net_prio'}]}, 0x42) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000640)={{0x0, 0x2, 0x3, 0x7fffffffffffffff, 0x8000, 0x0, 0x5, 0x4, 0x2288, 0x4, 0x9, 0xff, 0x7fffffffffffffff, 0x9, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001640)={{r2, 0x8, 0x3, 0xa, 0xff, 0xfffffffffffffffd, 0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0x80000000000000, 0xe}}) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000002d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002640)={0x6e8, r4, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff0000, 0x74}}}}, [@NL80211_ATTR_TX_RATES={0x2f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x18, 0x6c, 0x3f, 0x5b, 0x9, 0x18, 0xc, 0x3a, 0x6c, 0x1, 0x6, 0x61, 0x36, 0x1, 0x4, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x24, 0x2, 0x18, 0xb, 0xb, 0x6, 0x24, 0x24, 0x36, 0x72, 0x18, 0x32, 0x6, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0xad, 0x4, 0x9278, 0x2, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x1}, {0x5, 0x8}, {0x6, 0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x4}, {0x5, 0x9}, {0x4, 0x3}, {0x2, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x7, 0xa}, {0x3, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xfffe, 0x6, 0x7f, 0x2, 0x8, 0x7]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x5}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0xa}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x1}, {0x5, 0x8}, {0x2, 0x2}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x3}, {0x7, 0x8}, {0x1, 0x2}, {0x3, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {}, {0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x6, 0x1}, {0x0, 0x5}, {0x6, 0x6}, {0x6, 0xa}, {0x7, 0x6}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x2d, 0x1b, 0x1b, 0x6c, 0x36, 0x2, 0x1a, 0xc, 0x18, 0x36, 0x9, 0x30, 0x16, 0x9, 0x60, 0x16, 0x1, 0x48, 0x1b, 0x36, 0x53]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0xa}, {0x7, 0x4}, {0x1, 0x1}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x1}, {0x4}, {0x4, 0x3}, {0x4}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x6, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x4, 0xa}, {0x4, 0x3}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x8}, {0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x2, 0x8}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x6, 0xa}]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x60, 0x1b, 0x5, 0x1b, 0x7b7e60423b407030, 0x5, 0x6, 0x60, 0x4, 0x1, 0xc, 0x6, 0x3e, 0x24, 0x16, 0x3, 0x30, 0x5, 0x9, 0xc, 0x6c, 0x5, 0xc, 0x18, 0x48, 0xc, 0x18, 0x24, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x6, 0x769, 0x92, 0x6, 0x2, 0x332]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0x39, 0x8c8c2742454fb76f, 0x36, 0x30, 0x6, 0x1b, 0x16, 0x60, 0x6, 0x60, 0x6c, 0x6c, 0x36, 0x1, 0x6c, 0x24, 0x16, 0x1b, 0x6, 0x5, 0x36, 0x36, 0x6c]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x5, 0x0, 0x12, 0x1b, 0x1e, 0x4, 0x1b, 0x4, 0x2]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x60, 0x18, 0x18, 0x1, 0x3f]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x6, 0x9d, 0x1, 0xda62, 0x5790, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x16, 0xb, 0x30, 0x30, 0x6c, 0x1, 0x24, 0x36, 0x2, 0x18, 0x1, 0x30, 0x2, 0x60, 0x17, 0x6, 0x48, 0x9, 0x6c, 0x18, 0x9, 0x3]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x2, 0x6, 0x2, 0x40, 0xd5, 0xf20, 0xf001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x8, 0x6, 0xf, 0x6, 0x2, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d36, 0x8, 0x5b, 0x7fff, 0x8, 0x4, 0xc]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x36, 0x6, 0x6, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x9}, {0x1, 0x1}, {0x6, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x5, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x3, 0xa}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x9}, {0x3, 0x6}, {0x5, 0xa}, {0x6, 0x3}, {0x2, 0xa}, {0x2}, {0x6, 0x9}, {0x0, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xfff7, 0xdb7, 0x100, 0x6, 0x7fff, 0x8f2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x4, 0x8, 0x5, 0x7, 0x30b2, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x1f, 0x12, 0x4, 0x13, 0x1, 0x18, 0x6, 0x30, 0xc, 0x6c, 0x18, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x3, 0xfc01, 0x6, 0x1, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x6c, 0x36, 0x18, 0xb, 0x15, 0x16, 0x6, 0x6c, 0x6, 0x1, 0x6, 0x1b, 0x0, 0x24, 0x60, 0x3, 0x6, 0x5, 0x5, 0x16, 0x6c, 0x5, 0xb, 0x4, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3a12, 0xf1, 0x10, 0x5, 0x4, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x4, 0x66, 0x0, 0x6, 0x1b, 0x1]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x7}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x7}, {}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x4, 0x6}, {0x6, 0x1}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x6, 0x1}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0xa}, {0x7}, {0x2, 0x1}, {0x5, 0x4}, {0x1, 0x9}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x4}, {0x4}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x4}, {0x1}, {0x1, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x1}, {0x6, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x6}, {0x7, 0x8}, {0x1, 0x1}, {}, {0x3, 0x4}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x2, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x3, 0x60, 0x0, 0x3, 0x36, 0xc, 0xc, 0x60, 0x1, 0x30, 0x1b, 0x6c, 0x24, 0x36, 0xc, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x2d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x3, 0x9}, {0x3, 0x9}, {0x1}, {0x3, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x2}, {0x7}, {}, {}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x5, 0x4}, {0x6}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x4, 0x9}, {0x3, 0xa}, {0x2, 0x3}, {0x2, 0x8}, {0x4}, {0x3, 0x7}, {0x3}, {0x3, 0x9}, {0x3, 0x7}, {}, {0x6, 0x3}, {0x0, 0x4}, {0x1}, {0x3, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x1}, {0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x3}, {0x5, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x2, 0x9, 0x2, 0x8, 0x3, 0x5678, 0x8]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x30, 0x24, 0x48, 0x24, 0x18, 0x36, 0x12, 0x18, 0x18, 0x1b, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1, 0x7, 0x4, 0xf762, 0x7f, 0x6, 0x4]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x3, 0x60, 0x5, 0x6, 0x15, 0x12, 0x3, 0x12, 0xc, 0xb, 0x24, 0x24, 0x6c, 0x60, 0x2]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x1b, 0x6c, 0x6c, 0x9, 0x2, 0x4, 0x18, 0xb, 0x9, 0xc, 0x48, 0x3f, 0x3b, 0x18, 0x2, 0x60, 0x2, 0x4]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x0, 0x9, 0x2, 0x30, 0xb, 0x27, 0x4, 0x48, 0x24, 0x1, 0x9, 0x6c, 0x1, 0x6c, 0xb, 0x1, 0x2, 0x4, 0x9, 0x24, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x1}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x6, 0x3}, {0x5, 0x6}, {}, {0x0, 0x2}, {0x6}, {0x3, 0x9}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x4}, {0x6, 0x4}, {0x4, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {}, {0x3}, {0x6, 0x5}, {0x2}, {0x1}, {0x4, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x9}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x5, 0x7}, {0x4}, {0x6, 0x4}, {0x2, 0x3}, {0x5, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x3, 0x7}, {0x3, 0x5}, {0x2, 0x9}, {0x3}, {0x5, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x6, 0xdc, 0x8, 0x322, 0xa64, 0x94d]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x4, 0xb, 0x60, 0x18, 0xc, 0x4, 0x48, 0x1, 0x30, 0x3, 0x1b, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x4, 0x9078, 0xc, 0x9, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x18d, 0x30, 0x4, 0x8, 0x1, 0x5, 0x401, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x6c6503c79cc5b37, 0xc, 0x9, 0xc, 0x47, 0x12, 0x3, 0x5, 0x30, 0x30, 0x60, 0x2, 0x16, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x1000, 0x94, 0xd24f, 0x1199, 0x6, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x9}, {0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x5}, {0x6, 0x6}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x9}, {0x1, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x3]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x5}, {0x4, 0x1}, {0x5, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x6, 0x8}, {0x6, 0x2}, {0x3, 0x9}, {0x7, 0x2}, {0x7, 0x9}, {0x7, 0x4}, {0x6, 0x6}, {0x6, 0x7}, {0x3, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x70, 0x2, 0x3, 0x8, 0x5, 0xf, 0x3]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x2}, {0x5, 0x9}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x2}, {0x5, 0x4}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x4}, {0x1, 0x4}, {0x7, 0x4}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {}, {0x1, 0x6}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x5, 0x5}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x4, 0xa}, {0x4, 0x8}, {}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x5}, {0x3, 0x6}, {0x2, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x7}, {0x5, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x7}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x8}, {0x5, 0x9}, {0x5, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x7}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x5}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x4}, 0x4080) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xd, 0x1fffd, 0x0, 0x3}, 0x10) 2.402963769s ago: executing program 4 (id=7568): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r1, 0x0, 0xfeeb, 0x8040, &(0x7f0000000040)={0xa, 0x4e21, 0xf7ffffff, @loopback, 0xbf}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000, @value=r2}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2.326109065s ago: executing program 4 (id=7569): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000040000000097c4936a009500008000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000040)={0x2, 0xf}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'nr0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000440)={0x1, 0x0, 0x2, r3, 0x3}, 0xc) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000380)={0x0, r0, r0, 0x5, 0x7, '\x00', {0x4, 0x4, 0x3, 0x300000, 0x3, 0x1, 0x954ce7d5, 0x400, {0x7, 0x1ff}, {0x3}, {0x4, 0x2}, 0x4, 0x5, 0x9, 0x7, 0x1, 0xd, 0x9, 0x5, 0x9, 0x9, '\x00', 0x400, 0x2, 0x200, 0x4}}) connect$phonet_pipe(r0, 0x0, 0x0) pipe(&(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f086dd2de0ffff202000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601fcff00000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911002000000000095000000000000002b1238102ce71bc5a06b0581d9a1fc22f8b534772e8afe4565933f21d9b48ae3f4b762227a77617d3ba6d6bf9d5a356a0831810ab0af24a4d5afb37d9df8974aa3a5255c2f18bf89adf1e377e8a9ad48459d64"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r8, 0x0) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) 2.20115895s ago: executing program 1 (id=7571): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000bcf5", @ANYRES16=r3, @ANYBLOB="3107000000000000000038000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x38}, 0x1, 0x2, 0x0, 0x40000d0}, 0x4010) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$isdn_base(0x22, 0x3, 0x0) close(r7) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0x46f7df64) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r10, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendfile(r8, r9, 0x0, 0xffffffff000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r11, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r12, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r13, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r13, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) 2.001723653s ago: executing program 4 (id=7572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, &(0x7f0000000340)}, 0x20) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r4, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r5, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r7, 0x16, 0x1, 0x3ff, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, r7, 0x25, 0x10, @val=@tcx={@void, @value=r6, @void, @void, r8}}, 0x1c) 1.987785083s ago: executing program 3 (id=7573): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000060000000000000000004907cf8c000000000000000000c80300000000020400000300000000000000040008000000000800000000000000005f"], 0x0, 0x4e, 0x0, 0x8}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0x0, 0x20000000, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r1, 0x0, 0x0, 0x4000000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x7, 0x4}) openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 1.837284375s ago: executing program 2 (id=7574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0xf, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @generic="f9c412"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7759862662562963}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x29f, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x67, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x80) 1.672710544s ago: executing program 2 (id=7575): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007910bd000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 32) unshare(0x40040080) (rerun: 32) 1.599316945s ago: executing program 4 (id=7576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ad00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00002a9dee4d9e2759af876d52e20004000000040000000700000000000000522e840c0a35e8a27fda4dbefa9491ddae87000000000000006eb2791337dac3e57104b78e7de54d1b3b5135d0d791c421f0c4181c84817fa9110c1d93cbca0705a3fd03a983bed23e57ec753f3812b652e15ea9cc82ce68a9ebf83c747dc0c8adb32120426a74366a65c01fa5c2b90c0bac4dc7ed564a31e3c0d1673904b5e6c067ec43f697bb8902c4c83c8b0a16e6c8d41dd36b4c9298ade048593011516f3c811f246d4b88e7083683f31731ac10e366c752", @ANYRES32=r4, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="030000008000"/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x70}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="4bdf3938c9860257bbe6dff3fcf68c185530bbbba46474c975c22ea6ea4c0918ea6d3653ac485b810fc26dd9507f13432eaa34595d84388b6c1409aebcaa327773d9", @ANYRES8=r2, @ANYRES16=r1, @ANYRESDEC=r3], 0x3c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4) 1.361119112s ago: executing program 4 (id=7577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffd, 0x0, 0x6}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syzkaller0\x00', 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0712210040", @ANYRES32=0x1, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0100000003000000050000000b00"/28], 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000400)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_sset_info={0x37, 0xfffffffa, 0xfffffffffffffff8}}) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000029000037d042a22192784bd8b0003400"], 0x18}, 0x48814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r5, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000080)={@loopback}, &(0x7f00000000c0)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ff010000000000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf96000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8228}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000b, 0x0, 0x0, 0x0, 0x0}}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x6}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000640)={r10, @in={{0x2, 0x4e20, @loopback}}, 0x7cba, 0x8ef}, 0xee) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BETA={0x0, 0x6, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000383afffe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x14, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ac0f0006ac0f00"}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.060373044s ago: executing program 0 (id=7578): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000001040)={&(0x7f0000000fc0)="cd441e731f055433bbd0c8e102565a4372b5310c5308fe1f7a2e2b1c8c1ad52ee87c671d4bd847448f47f60a9c10c5eed2ff6c73319541030a54e16e1b5884cfd1a6f8ce72d51bda7aed4a51f01217dc451b9a5300cfb2139bbd69f8db838b13953e8914612706bec1e422faa04b", 0x6e}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000280)) splice(0xffffffffffffffff, &(0x7f0000000000)=0xb2, r4, &(0x7f0000000080)=0x1, 0x5, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000002791d03000000000000040000000000052c4bd52b7609000000020073797a320000001d05e203000000000005000100070000000d0003006c6973743a73657400000000c0148aa3e684d91276ca6b449cca19349aeab5964248f2502746c6342ef9668ffad1e5ea01f48d999f9426b49e42610c7ac3cbcb6b40e80ed5e427d0cf806357f78d9058f1d1a98d3ba6acf3e00ac483973e0ffc5a26d1ead6b880fd8009000000000000008c614d2cd3d0e6c871e46413e89dc918406cf47b67a404"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a0601010000000d0000000001000000050001000700000014000880100007850900120073797a32000000000900021673797a32000000000800094000000000"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x1, 0x700, 0xfe0f, 0x0, {{0x13, 0x4, 0x1, 0x1b, 0x4c, 0x64, 0x0, 0x21, 0x2, 0x0, @multicast1, @broadcast, {[@end, @generic={0x89, 0x4, "07fd"}, @timestamp_prespec={0x44, 0x14, 0xc2, 0x3, 0x7, [{@broadcast, 0x49}, {@multicast1, 0x7}]}, @timestamp={0x44, 0x1c, 0x6c, 0x0, 0x4, [0x4, 0x1, 0x9e, 0x3, 0x7, 0x101]}]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@deltclass={0x5c, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xc, 0x2}, {0x0, 0xa}, {0x10, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xd, 0xb4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0xa8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80014}, 0x8000) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff2e}, 0x48) 905.804642ms ago: executing program 1 (id=7579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000400)={&(0x7f0000000440)=[{0x2, 0x6, 0x1}, {0x8c, 0x8}, {0x8282, 0xd674, 0x2}, {0xbd, 0x2, 0x2}, {0x3, 0x9, 0x1}, {0xfffffffffffffffc, 0x26a, 0x1}], 0x6, 0x10, 0x8, 0xd}) sendto$inet6(r0, &(0x7f0000000300)="a6", 0xfffffffffffffff3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200002000000000000000030000000000000030000000850000000f0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000030a01010000000000000000050000000900010073797a300000000009000300730900000000000000000a40000000042c000000050a05000000000000000000050000060c00024000000000000000010900010073797a300000000014000000110001"], 0xa8}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) socket$inet(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032bbd7000fedbdf251c00000018000180140002006c6f000000000000000000f3ff00000063d1d40381608efce88c8d739dbdea5d36c1dbeb7ebe6b332c22bc022943dbf4f4bae0d5a7dabd752ce2e7bb0380347cfecded0000000033ab14927c1a1764bdb54388258bdad86a47a9802e"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x44, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0x1c, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}}}]}, 0x44}}, 0x44890) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f000000d740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f000000d840)={0x0, 0x0, &(0x7f000000d800)={&(0x7f000000d780)={0x54, r8, 0x401, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "c12d796cf4c42042427b2df3d268173a9b0e7012"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc00808a}, 0x80) 861.933904ms ago: executing program 3 (id=7580): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x6, 0x1, 0xfff, 0xa, 0x8, 0x1d, 0x86, "ff03cae9ffed00000400b2400d0000cba1c4ba00", "39e80000460062ff010000ec00"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010011a801000f480040005800800090000000000080003803000018005"], 0x270}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d34f0530492d54d053df06000000000000005d4ce9604f814ace32b66550be1f1d529a2ea6561e1a8c508e756672536145c90abcef568ee8b3900d51915ab6b4f38193531334ec17e754e2d878cd222fefc59877c5b6493be15c33b38804f76009453a5883c53387e31c1cc7e3d57757e9acda632e794f786f132aee21a3840f", @ANYRESDEC=r6, @ANYRES16=r6], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000023100001000000006499dfe1000300000a2c000000050a010100000000f927c8c10a00000a0900010073797a31000000b43ad2ea40000000000000000120000000080a010100000000000000000a000009090001007335edef4ec794d62a299f797a31b4067a1bd5ef08012d7247d15d11036fba5e82eaeaad1df5ec516aeb88f23f270014104a1421ea740edc4df9bf675e9bf426"], 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 605.498956ms ago: executing program 3 (id=7581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) getuid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x8000) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r6) r9 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000200000087000013"], 0x0, 0x2a, 0x0, 0x1, 0x4b}, 0x28) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf2514000000080001000200000008001c00", @ANYRES32=r9, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="0c00060001000000010000001bc400d5b8c5abbb93cff25069788254c84481387731e31668e2a53e8ebcef15a36ba149aa3305cd8b2e68c91d"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 465.961804ms ago: executing program 0 (id=7582): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010100}, 0x10) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="190000000800000000010000cc0100010000000000ff209cb3e50236b81d45fadc0c7240f993f3e2b79bf70988738d9e52f7807f7e4533bab5eba22cd19be1b77637127ee4d2c0630c519e83467daf58e28de700a357ab37abfca19f54d4e894891d5bfd13c63a1a1cd02fe30b10cecb376211fc9eb8fad8855677ff612d3c3f619081ccc1683a9406a082d11d26c02712759cad7fa2329b9d86a4adba063328c6f6c5b2710f2a5ebd82007667743d8702a33864977ed0f05fab150301cc7d2a8670df546a187c8b655e3c4c2f60bdfe735f97db", @ANYRES32=r1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r5, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, 0x0, 0x4040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) connect$nfc_raw(r6, &(0x7f0000000080)={0x27, r8, 0xffffffffffffffff, 0x5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r11 = socket(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000340)="cf0316902b0000007eb0737d1341aa36ed3c8a1a6c3c21ab7fd1b8dc95f14372bf9378369a6de6e342681c11f6182ca0ff09a04e328f0ca6d206e95cfc791b60c500dad07ec4933f891f287b1a1ff4c6f35ec7a93c493249fd151b745e9c5c275a904559dbe6cd14e2d9298ce87d7f154363c38f4ccdb14bd9b8d373b23f751d45939830812550b48d324fd813d82b975ef97dfaa1952bfb8a35624bde3d90c2744c052d8c", 0xa5) connect$netlink(r11, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4218f9", 0x1c, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[@fragment={0x5, 0x0, 0x9, 0x1, 0x0, 0x5, 0x64}], {{0x8, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$sock_int(r11, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r11, &(0x7f0000000000)='\"', 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) 328.546016ms ago: executing program 3 (id=7583): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='JL_\"'], 0x18}, 0x805) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'erspan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000040)="388688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000040)="388688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r6 = socket$inet(0x2, 0x2, 0x0) shutdown(r6, 0x0) (async) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f00000000c0)=""/104) close(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r8 = socket(0x80000000000000a, 0x2, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f0000000500)=""/201, 0xc9, 0x0, &(0x7f0000000700)=""/255, 0xff}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f0000000500)=""/201, 0xc9, 0x0, &(0x7f0000000700)=""/255, 0xff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f0000000600)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0xb7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], {0x95, 0x0, 0x1200}}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x46}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f0000000600)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0xb7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], {0x95, 0x0, 0x1200}}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x46}, 0x94) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) 242.40548ms ago: executing program 1 (id=7584): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x20000009}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0xfffffffffffffe98, 0x1, {0xfff3, 0xffff}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x138001, 0x4) 196.49964ms ago: executing program 2 (id=7585): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004e0001"], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) unshare(0x22020400) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000400), 0xe) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@multicast, @link_local]}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x3, 0x2}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x9, 0x6, 0x8, @remote, @mcast2, 0x40, 0x8, 0xffff, 0x85}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x8000, 0x700, 0x9, 0x8, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x68, 0x0, 0xb, 0x593e16b9313fed5, 0x0, @empty, @private=0xa010102, {[@noop, @end]}}}}}) 89.352304ms ago: executing program 3 (id=7586): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) unshare(0x20400) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000007b40)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001300010428bd7000ffdbdfa540000000", @ANYRES32=0x0, @ANYBLOB="20a4030091f900001800168014000180100006000400000006000000af0400001400350076657468305f6d616376746170000000"], 0x4c}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x400c810) 5.049714ms ago: executing program 1 (id=7587): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8000, 0xf, 0xfffff801, 0x8000, 0xb}) r1 = socket(0x10, 0x80003, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x3}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000000000b"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8000, 0xf, 0xfffff801, 0x8000, 0xb}) (async) socket(0x10, 0x80003, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x3}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000000000b"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) 3.586071ms ago: executing program 3 (id=7588): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000100)={0x0, 0x2, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 'gre0\x00'}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/34, 0x22}, {&(0x7f0000001200)=""/85, 0x55}, {&(0x7f0000001280)=""/139, 0x8b}, {&(0x7f0000001340)=""/255, 0xff}], 0x5, &(0x7f0000001c40)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @zcopy_cookie={0x18, 0x114, 0xc, 0x121}, @rdma_args={0x48, 0x114, 0x1, {{0x80000001, 0x8}, {&(0x7f00000014c0)=""/130, 0x82}, &(0x7f0000001600)=[{&(0x7f0000001580)=""/64, 0x40}, {&(0x7f00000015c0)=""/14, 0xe}], 0x2, 0x1, 0xa}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0x8}, {&(0x7f0000001640)=""/73, 0x49}, &(0x7f0000001bc0)=[{&(0x7f00000016c0)=""/169, 0xa9}, {&(0x7f0000001780)=""/201, 0xc9}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/24, 0x18}, {&(0x7f0000001980)=""/94, 0x5e}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/234, 0xea}, {&(0x7f0000001b80)=""/32, 0x20}], 0x8, 0x2}}], 0xc0, 0x20000040}, 0x4044890) getsockopt(r3, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) accept4(r0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) (async) listen(r0, 0xfffffffd) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000100)={0x0, 0x2, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 'gre0\x00'}) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) socket(0x15, 0x5, 0x0) (async) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/34, 0x22}, {&(0x7f0000001200)=""/85, 0x55}, {&(0x7f0000001280)=""/139, 0x8b}, {&(0x7f0000001340)=""/255, 0xff}], 0x5, &(0x7f0000001c40)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @zcopy_cookie={0x18, 0x114, 0xc, 0x121}, @rdma_args={0x48, 0x114, 0x1, {{0x80000001, 0x8}, {&(0x7f00000014c0)=""/130, 0x82}, &(0x7f0000001600)=[{&(0x7f0000001580)=""/64, 0x40}, {&(0x7f00000015c0)=""/14, 0xe}], 0x2, 0x1, 0xa}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0x8}, {&(0x7f0000001640)=""/73, 0x49}, &(0x7f0000001bc0)=[{&(0x7f00000016c0)=""/169, 0xa9}, {&(0x7f0000001780)=""/201, 0xc9}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/24, 0x18}, {&(0x7f0000001980)=""/94, 0x5e}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/234, 0xea}, {&(0x7f0000001b80)=""/32, 0x20}], 0x8, 0x2}}], 0xc0, 0x20000040}, 0x4044890) (async) getsockopt(r3, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) (async) accept4(r0, 0x0, 0x0, 0x0) (async) 0s ago: executing program 2 (id=7589): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cfd298a64db8633ac75bb2a81800000014b7b59500000000000200000a000000", @ANYRES32=0x0], 0x18}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x10000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x200) kernel console output (not intermixed with test programs): egistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.938562][T29278] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.180297][T29278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 768.192119][T29278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.200986][T29278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 768.212279][T29278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.221671][T29278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 768.239924][T29278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.249142][T29278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 768.262326][T29278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.437064][T29278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.509288][T29278] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.534239][T29454] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.541441][T29454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.551541][T29454] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.558709][T29454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.048792][T29278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.169387][T29278] veth0_vlan: entered promiscuous mode [ 769.192641][T29278] veth1_vlan: entered promiscuous mode [ 769.264998][T29278] veth0_macvtap: entered promiscuous mode [ 769.292406][T29278] veth1_macvtap: entered promiscuous mode [ 769.328928][T29503] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432099 [ 769.343721][T29278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.360506][T29278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.362192][T29503] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432098 [ 769.381514][T29442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.391397][T29503] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432097 [ 769.401776][T29504] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432099 [ 769.410986][T29442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.434942][T29504] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432098 [ 769.444240][T29504] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432097 [ 769.453878][T29442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.456713][T29504] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432099 [ 769.491951][T29504] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432098 [ 769.518417][T29504] tipc: Failed to remove unknown binding: 66,0,0/0:1651432096/1651432097 [ 769.527747][T29442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.696227][T21187] Bluetooth: hci3: command tx timeout [ 769.773870][T29453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.790913][T29453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.850708][T29527] syzkaller1: entered promiscuous mode [ 769.885707][T29527] syzkaller1: entered allmulticast mode [ 769.957461][T29450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.966140][T29450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.997958][T29534] __nla_validate_parse: 9 callbacks suppressed [ 769.997975][T29534] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5846'. [ 770.123575][T29543] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5786'. [ 770.333362][T29551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5851'. [ 771.017457][T29582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'. [ 771.038164][T29582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'. [ 771.117435][T29588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.786223][T21187] Bluetooth: hci3: command tx timeout [ 771.791394][T29626] batadv1: entered promiscuous mode [ 771.809232][T29626] batadv1: entered allmulticast mode [ 771.847380][T29635] geneve1: Caught tx_queue_len zero misconfig [ 771.863817][T29635] netlink: 'syz.2.5877': attribute type 1 has an invalid length. [ 772.064303][T29645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5881'. [ 772.330715][T29659] netlink: 'syz.2.5884': attribute type 1 has an invalid length. [ 772.339739][T29659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5884'. [ 772.395378][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5884'. [ 772.427831][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5884'. [ 772.634889][T29669] netlink: 'syz.4.5887': attribute type 1 has an invalid length. [ 772.667310][T29669] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5887'. [ 772.970623][T29665] xt_hashlimit: overflow, try lower: 0/0 [ 773.020078][T29685] syzkaller1: entered promiscuous mode [ 773.026967][T29685] syzkaller1: entered allmulticast mode [ 773.389315][T29707] pimreg: entered allmulticast mode [ 773.420221][T29707] pimreg: left allmulticast mode [ 773.548041][T29718] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 773.564272][T29718] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.572002][T29718] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.856799][T21187] Bluetooth: hci3: command tx timeout [ 773.880760][T29448] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.893584][T29448] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.906164][T29442] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.919511][T29442] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.220891][T29756] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode [ 774.237198][T29756] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 774.266260][T29756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.393989][T29769] : renamed from veth0_to_bond [ 774.651908][T29790] mac80211_hwsim hwsim42 syzkaller0: Caught tx_queue_len zero misconfig [ 774.963861][T29808] netlink: 'syz.2.5925': attribute type 1 has an invalid length. [ 774.993827][T29808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.154417][T29819] __nla_validate_parse: 10 callbacks suppressed [ 775.154437][T29819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5928'. [ 775.399584][T29828] bond6: entered allmulticast mode [ 775.424908][T29834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5933'. [ 775.428928][T29828] ip6gre1: entered allmulticast mode [ 775.708677][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 775.721771][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 775.730973][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 775.739473][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 775.751332][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 776.240541][T29847] chnl_net:caif_netlink_parms(): no params data found [ 776.440478][T29865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5941'. [ 776.458084][T29847] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.465305][T29847] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.473113][T29847] bridge_slave_0: entered allmulticast mode [ 776.481135][T29847] bridge_slave_0: entered promiscuous mode [ 776.489984][T29847] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.502345][T21187] block nbd1: Receive control failed (result -1) [ 776.506701][T29847] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.518693][T29847] bridge_slave_1: entered allmulticast mode [ 776.556339][T29847] bridge_slave_1: entered promiscuous mode [ 776.682934][T29847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.721962][T29847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.740795][T29880] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 777.265325][T29847] team0: Port device team_slave_0 added [ 777.301170][T29847] team0: Port device team_slave_1 added [ 777.411388][T29847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.427114][T29847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.493125][T29847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.549397][T29847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.563817][T29847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.608495][T29899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5949'. [ 777.614042][T29847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.649810][T29899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5949'. [ 777.867238][T21187] Bluetooth: hci5: command tx timeout [ 778.631449][T29442] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 778.661604][T29442] bridge1 (unregistering): left promiscuous mode [ 778.668410][T29442] bridge1 (unregistering): left allmulticast mode [ 778.895422][T29442] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 778.914755][T29442] bridge5 (unregistering): left promiscuous mode [ 779.214441][T29917] netlink: 'syz.1.5954': attribute type 1 has an invalid length. [ 779.360922][T29442] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 779.369008][T29442] vcan1: left promiscuous mode [ 779.374321][T29442] bond1 (unregistering): Released all slaves [ 779.392185][T29442] bond2 (unregistering): Released all slaves [ 779.413158][T29442] bond3 (unregistering): Released all slaves [ 779.430026][T29442] bond4 (unregistering): Released all slaves [ 779.443439][T29442] bond5 (unregistering): Released all slaves [ 779.465110][T29442] bond6 (unregistering): Released all slaves [ 779.478422][T29442] bond7 (unregistering): Released all slaves [ 779.491895][T29442] bond8 (unregistering): Released all slaves [ 779.505929][T29442] bond9 (unregistering): Released all slaves [ 779.523175][T29442] bond0 (unregistering): Released all slaves [ 779.548771][T29442] bond10 (unregistering): Released all slaves [ 779.562929][T29442] bond11 (unregistering): (slave wireguard0): Releasing backup interface [ 779.571451][T29442] wireguard0: left promiscuous mode [ 779.578103][T29442] bond11 (unregistering): Released all slaves [ 779.591678][T29442] bond12 (unregistering): Released all slaves [ 779.608747][T29847] hsr_slave_0: entered promiscuous mode [ 779.618811][T29847] hsr_slave_1: entered promiscuous mode [ 779.624823][T29847] debugfs: 'hsr0' already exists in 'hsr' [ 779.634393][T29847] Cannot create hsr debugfs directory [ 779.654139][T29911] lo: entered allmulticast mode [ 779.666740][T29911] lo: left allmulticast mode [ 779.672249][T29917] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 779.801525][T29442] tipc: Disabling bearer [ 779.860873][T29442] tipc: Left network mode [ 779.936910][T21187] Bluetooth: hci5: command tx timeout [ 780.091207][T29944] netlink: 558 bytes leftover after parsing attributes in process `syz.4.5959'. [ 780.357537][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5960'. [ 780.463506][T29956] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5962'. [ 780.503292][T29442] hsr_slave_0: left promiscuous mode [ 780.516226][T29442] hsr_slave_1: left promiscuous mode [ 780.606404][T29442] team0 (unregistering): Port device batadv1 removed [ 780.898592][T29965] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 780.907565][T29965] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 780.918685][T29963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5964'. [ 780.989307][T29930] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 781.119901][ T29] audit: type=1804 audit(1777189973.779:20): pid=29977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5967" name="/newroot/569/memory.events" dev="tmpfs" ino=2938 res=1 errno=0 [ 781.144774][ T29] audit: type=1800 audit(1777189973.779:21): pid=29977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5967" name="memory.events" dev="tmpfs" ino=2938 res=0 errno=0 [ 781.445192][T29984] bond12: entered allmulticast mode [ 781.479341][T29987] macvlan0: entered promiscuous mode [ 781.484854][T29987] macvlan0: entered allmulticast mode [ 781.491892][T29987] bond12: entered promiscuous mode [ 781.498051][T29987] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 781.521545][T29987] bond12: left promiscuous mode [ 781.558134][T29442] IPVS: stop unused estimator thread 0... [ 781.677132][T29847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 781.697856][T29847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 781.708555][T29847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 781.731255][T29847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.748658][T29847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 781.767380][T29847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.813266][T29847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 781.854179][T29847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.016282][T21187] Bluetooth: hci5: command tx timeout [ 782.051738][T30017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.072601][T29847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.094553][T30017] ±ÿ: Caught tx_queue_len zero misconfig [ 782.168625][T30017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.184335][T29847] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.191268][T21187] Bluetooth: hci3: command 0x0401 tx timeout [ 782.221454][T29449] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.228648][T29449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.287270][T29448] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.294449][T29448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.729126][T29847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.870105][T29847] veth0_vlan: entered promiscuous mode [ 782.881225][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5983'. [ 782.904219][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5983'. [ 782.915179][T29847] veth1_vlan: entered promiscuous mode [ 782.921978][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5983'. [ 782.933867][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5983'. [ 782.997741][T29847] veth0_macvtap: entered promiscuous mode [ 783.007970][T29847] veth1_macvtap: entered promiscuous mode [ 783.023247][T29847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.041823][T29847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.071773][T29450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.081094][T29450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.106552][T29450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.125930][T29450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.312683][T30063] bond10: entered allmulticast mode [ 784.095731][T21187] Bluetooth: hci5: command tx timeout [ 785.649044][T30038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.659170][T30051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5982'. [ 785.669297][T30051] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5982'. [ 785.790018][T29442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.793586][T30066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5987'. [ 785.811295][T29442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.881977][T30072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5990'. [ 785.893113][T30066] team0: Port device team_slave_0 removed [ 785.925764][T30072] syzkaller1: entered promiscuous mode [ 785.932322][T30072] syzkaller1: entered allmulticast mode [ 785.954257][T29438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.981851][T29438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.037590][T30075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.048688][T30075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.272408][T30075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.283294][T30075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.320316][T30094] x_tables: duplicate underflow at hook 2 [ 786.441321][T30099] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 786.458059][T30102] netlink: 'syz.2.5997': attribute type 12 has an invalid length. [ 786.466059][T30102] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5997'. [ 786.479105][T30075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.500164][T30075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.562560][T30106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5998'. [ 786.764824][T30075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.796303][T30075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.187224][T29438] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.208241][T29438] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.273963][T29438] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.288984][T29438] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.347243][T29438] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.362162][T29438] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.403885][T29438] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.422656][T29438] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.735910][T30154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6009'. [ 787.798323][T30153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6010'. [ 787.835333][T30154] netlink: 'syz.3.6009': attribute type 27 has an invalid length. [ 787.955920][T30161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6009'. [ 787.973920][T30154] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.981675][T30154] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.157227][T30154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.170429][T30154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.286194][T30157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.293875][T30157] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.303684][T30157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.330687][T29448] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.341543][T29448] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.351491][T29448] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.367971][T29448] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.610984][T30193] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6019'. [ 789.191563][T30211] netlink: 'syz.2.6027': attribute type 14 has an invalid length. [ 789.210844][T30211] netlink: 'syz.2.6027': attribute type 13 has an invalid length. [ 789.564802][T30225] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.572070][T30225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.579667][T30225] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.586856][T30225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.628322][T30225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 790.041534][T30249] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 790.105879][T30248] syzkaller0: entered promiscuous mode [ 790.122364][T30248] syzkaller0: entered allmulticast mode [ 790.200206][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 790.212671][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 790.229736][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 790.239597][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 790.253896][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 790.310848][T30258] ip6gretap2: entered allmulticast mode [ 790.534554][T30274] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 790.888392][T30298] __nla_validate_parse: 8 callbacks suppressed [ 790.888413][T30298] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6048'. [ 790.953877][T30301] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6048'. [ 791.155227][T30308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6051'. [ 791.171842][T30255] chnl_net:caif_netlink_parms(): no params data found [ 791.494348][T30318] 8021q: VLANs not supported on wg1 [ 791.566637][T30326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6055'. [ 791.705367][T30332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6058'. [ 791.731040][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6058'. [ 791.741240][T30255] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.748924][T30335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6057'. [ 791.752014][T30255] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.783766][T30255] bridge_slave_0: entered allmulticast mode [ 791.798076][T30255] bridge_slave_0: entered promiscuous mode [ 791.820350][T30255] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.834835][T30255] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.842453][T30255] bridge_slave_1: entered allmulticast mode [ 791.851237][T30255] bridge_slave_1: entered promiscuous mode [ 791.960162][T30255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.001339][T30255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.238839][T30255] team0: Port device team_slave_0 added [ 792.277797][T30255] team0: Port device team_slave_1 added [ 792.335997][T21187] Bluetooth: hci2: command tx timeout [ 792.491437][T30255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.522125][T30255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.549255][T30255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.643033][T30255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.668383][T30255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.724573][T30255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.941907][T30255] hsr_slave_0: entered promiscuous mode [ 792.949301][T30255] hsr_slave_1: entered promiscuous mode [ 794.416006][T21187] Bluetooth: hci2: command tx timeout [ 796.122912][T30374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.154219][T30255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 796.239017][T30255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 796.258760][T30255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 796.280729][T30255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 796.296678][T30255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 796.318508][T30255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.343020][T30255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 796.374686][T30255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.497283][T21187] Bluetooth: hci2: command tx timeout [ 796.503581][T30422] netlink: 'syz.3.6080': attribute type 15 has an invalid length. [ 796.529099][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6080'. [ 796.554645][T29449] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 796.565296][T29449] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 796.568884][T30422] netlink: 'syz.3.6080': attribute type 15 has an invalid length. [ 796.576095][T29449] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 796.594996][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6080'. [ 796.617287][T29449] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 796.641939][T30255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.654461][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6082'. [ 796.690281][T30255] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.715320][T29449] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.722518][T29449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.774726][T30423] syzkaller1: entered promiscuous mode [ 796.784734][T30423] syzkaller1: entered allmulticast mode [ 796.810251][T29442] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.817434][T29442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.016447][T30455] lo speed is unknown, defaulting to 1000 [ 797.053565][T30455] lo speed is unknown, defaulting to 1000 [ 797.098642][T30455] lo speed is unknown, defaulting to 1000 [ 797.123314][T30455] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 797.177387][T30455] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 797.197928][T30462] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6090'. [ 797.216602][T30455] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 797.221219][T30462] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 797.251325][T30466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6091'. [ 797.272421][T30468] netlink: 'syz.3.6090': attribute type 83 has an invalid length. [ 797.284752][T30455] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 797.440804][T30455] lo speed is unknown, defaulting to 1000 [ 797.499379][T30255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.530377][T30455] lo speed is unknown, defaulting to 1000 [ 797.558646][T30455] lo speed is unknown, defaulting to 1000 [ 797.580672][T30455] lo speed is unknown, defaulting to 1000 [ 797.601565][T30455] lo speed is unknown, defaulting to 1000 [ 797.637143][T30455] lo speed is unknown, defaulting to 1000 [ 797.676448][T30455] lo speed is unknown, defaulting to 1000 [ 797.683842][T30456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6089'. [ 797.793511][T30487] syzkaller0: entered promiscuous mode [ 797.820657][T30487] syzkaller0: entered allmulticast mode [ 797.954891][T30494] syz_tun: entered allmulticast mode [ 797.988470][T30493] syz_tun: left allmulticast mode [ 798.085161][T30501] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6096'. [ 798.112568][T30501] netlink: 'syz.0.6096': attribute type 1 has an invalid length. [ 798.276464][T30255] veth0_vlan: entered promiscuous mode [ 798.311925][T30255] veth1_vlan: entered promiscuous mode [ 798.430008][T30516] netlink: 'syz.1.6100': attribute type 89 has an invalid length. [ 798.433049][T30513] netlink: 'syz.2.6099': attribute type 1 has an invalid length. [ 798.453376][T30513] netlink: 'syz.2.6099': attribute type 1 has an invalid length. [ 798.477279][T30513] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6099'. [ 798.487779][T30255] veth0_macvtap: entered promiscuous mode [ 798.509928][T30255] veth1_macvtap: entered promiscuous mode [ 798.516073][T30509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6098'. [ 798.581353][T21187] Bluetooth: hci2: command tx timeout [ 798.618794][T30524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6101'. [ 798.776849][T30255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.824148][T30255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.874629][T29453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.917068][T29453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.994549][T29438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.047900][T29438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.251752][T29456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.278073][T29456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.377375][T30556] netlink: 'syz.0.6111': attribute type 10 has an invalid length. [ 799.431978][T30558] netlink: 'syz.0.6111': attribute type 10 has an invalid length. [ 799.448983][T30554] team0: Port device team_slave_0 removed [ 799.493955][T30556] team0: Port device dummy0 added [ 799.514702][T30558] team0: Port device dummy0 removed [ 799.535222][T30558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 799.570573][T29448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.611534][T29448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.774829][T30569] bond5: option updelay: invalid value (18446744073709493611) [ 799.784279][T30569] bond5: option updelay: allowed values 0 - 2147483647 [ 799.800379][T30569] bond5 (unregistering): Released all slaves [ 799.887929][T30565] syzkaller1: entered promiscuous mode [ 799.903788][T30565] syzkaller1: entered allmulticast mode [ 799.912143][T30572] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 800.045712][T25633] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 800.116938][T30587] syzkaller0: entered promiscuous mode [ 800.141141][T30587] syzkaller0: entered allmulticast mode [ 800.377421][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 800.393276][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 800.403883][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 800.411948][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 800.421727][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 800.462774][T29456] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 800.555701][T30593] lo speed is unknown, defaulting to 1000 [ 800.839949][T30607] xt_l2tp: invalid flags combination: 0 [ 801.004105][T30610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.146061][T11981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 801.229186][T30593] chnl_net:caif_netlink_parms(): no params data found [ 801.471290][T30648] openvswitch: netlink: Flow key attr not present in new flow. [ 801.501316][T30653] atomic_op ffff88804306f998 conn xmit_atomic 0000000000000000 [ 801.520114][T30593] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.527713][T30593] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.534961][T30593] bridge_slave_0: entered allmulticast mode [ 801.543363][T30593] bridge_slave_0: entered promiscuous mode [ 801.552918][T29453] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 801.562976][T29453] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 801.579903][T30593] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.588064][T30593] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.595825][T30593] bridge_slave_1: entered allmulticast mode [ 801.603722][T30593] bridge_slave_1: entered promiscuous mode [ 801.618878][T30655] geneve2: entered promiscuous mode [ 801.644483][T30657] x_tables: unsorted underflow at hook 2 [ 801.694708][T30593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.720018][T30593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.776906][T30593] team0: Port device team_slave_0 added [ 801.786377][T30593] team0: Port device team_slave_1 added [ 801.793521][T30664] Bluetooth: MGMT ver 1.23 [ 801.837794][T30593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.844752][T30593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.882146][T30593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.884922][T30666] __nla_validate_parse: 9 callbacks suppressed [ 801.884937][T30666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6142'. [ 801.893558][T30667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6141'. [ 801.920349][T30593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.927628][T30593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.954494][T30593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.966150][T30670] openvswitch: netlink: Key type 29 is not supported [ 801.985875][T30671] openvswitch: netlink: Key type 29 is not supported [ 802.097043][T30593] hsr_slave_0: entered promiscuous mode [ 802.136966][T30593] hsr_slave_1: entered promiscuous mode [ 802.161983][T30593] debugfs: 'hsr0' already exists in 'hsr' [ 802.177894][T30593] Cannot create hsr debugfs directory [ 802.256933][T11981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 802.373884][T30689] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 802.478929][T30692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6149'. [ 802.496812][T21187] Bluetooth: hci0: command tx timeout [ 802.990138][T30718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6156'. [ 803.063581][T30720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6157'. [ 803.249449][T30727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6159'. [ 803.432357][T30729] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 803.446695][T30740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6163'. [ 803.463001][T30729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6160'. [ 803.484226][T30729] openvswitch: netlink: Flow key attr not present in new flow. [ 803.723174][T30740] syzkaller1: entered promiscuous mode [ 803.733371][T30740] syzkaller1: entered allmulticast mode [ 803.769038][T30744] macsec1: entered promiscuous mode [ 803.789048][T30744] bridge2: entered promiscuous mode [ 803.794766][T30744] macsec1: entered allmulticast mode [ 803.800347][T30744] bridge2: entered allmulticast mode [ 803.807644][T30744] bridge2: port 1(macsec1) entered blocking state [ 803.814191][T30744] bridge2: port 1(macsec1) entered disabled state [ 803.823562][T30744] bridge2: left allmulticast mode [ 803.836296][ T6234] bridge2: left promiscuous mode [ 803.857553][T30593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 803.871681][T30593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 803.944321][T30593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 803.954833][T30593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 803.969734][T30593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 803.985509][T30593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 803.993507][T30593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 804.019326][T30593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 804.050402][T30761] x_tables: duplicate underflow at hook 2 [ 804.097077][T29453] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 804.114081][T29453] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 804.146229][T30757] bridge_slave_0 (unregistering): left allmulticast mode [ 804.154980][T30757] bridge_slave_0 (unregistering): left promiscuous mode [ 804.164572][T30757] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.193018][T29453] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 804.202359][T29453] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 804.338653][T30593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.384535][T30593] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.428137][T29453] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.435329][T29453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.446446][T30780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6170'. [ 804.487170][T30777] lo speed is unknown, defaulting to 1000 [ 804.493349][T29453] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.500518][T29453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.575825][T21187] Bluetooth: hci0: command tx timeout [ 804.891026][T30593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.953556][T30593] veth0_vlan: entered promiscuous mode [ 804.969612][T30593] veth1_vlan: entered promiscuous mode [ 805.271948][T30794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6174'. [ 805.402703][T30593] veth0_macvtap: entered promiscuous mode [ 805.429076][T30593] veth1_macvtap: entered promiscuous mode [ 805.489518][T30593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.543747][T30593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.604775][T29442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.648630][T29442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.683895][T29442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.701253][T29442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.725319][T30814] netlink: 'syz.2.6180': attribute type 9 has an invalid length. [ 805.764632][T30814] netlink: 'syz.2.6180': attribute type 7 has an invalid length. [ 805.798536][T30814] netlink: 'syz.2.6180': attribute type 8 has an invalid length. [ 805.856473][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 805.906773][T29450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.941026][T29450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.048098][T29456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.068223][T29456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.284441][T30835] tunl0: Caught tx_queue_len zero misconfig [ 806.380934][T30850] veth1_macvtap: left promiscuous mode [ 806.522412][T30850] veth1_macvtap: renamed from macsec0 [ 806.656002][T21187] Bluetooth: hci0: command tx timeout [ 806.889076][T30868] syzkaller1: entered allmulticast mode [ 806.894707][T30872] netlink: 'syz.0.6193': attribute type 15 has an invalid length. [ 807.044165][T30876] lo speed is unknown, defaulting to 1000 [ 807.113741][T30883] ksmbd: Unknown IPC event: 4, ignore. [ 807.818986][ T5506] veth1_macvtap: entered promiscuous mode [ 807.834242][T30876] __nla_validate_parse: 9 callbacks suppressed [ 807.834261][T30876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6194'. [ 807.912560][T30876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6194'. [ 808.307883][T30925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6206'. [ 808.333743][T30925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.460872][T30916] netlink: zone id is out of range [ 808.473164][T30916] netlink: zone id is out of range [ 808.484418][T30916] netlink: zone id is out of range [ 808.505616][T30916] netlink: zone id is out of range [ 808.507717][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 808.517371][T30916] netlink: zone id is out of range [ 808.564743][T30916] netlink: zone id is out of range [ 808.614290][T30916] netlink: zone id is out of range [ 808.655359][T30916] netlink: zone id is out of range [ 808.695593][T30916] netlink: zone id is out of range [ 808.712091][T30946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6211'. [ 808.736292][T21187] Bluetooth: hci0: command tx timeout [ 808.979245][T30958] netlink: 'syz.1.6215': attribute type 11 has an invalid length. [ 809.253601][T30978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6220'. [ 809.276650][T30966] lo speed is unknown, defaulting to 1000 [ 809.510803][T30992] netlink: 'syz.0.6224': attribute type 7 has an invalid length. [ 809.734152][T31003] netlink: 'syz.4.6226': attribute type 10 has an invalid length. [ 809.748977][T31003] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.6226'. [ 809.789814][T31008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6229'. [ 810.060861][T31021] bond5 (unregistering): Released all slaves [ 810.090993][T31028] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6234'. [ 810.135984][T31030] netlink: 'syz.4.6235': attribute type 30 has an invalid length. [ 810.146672][T31032] netlink: 'syz.4.6235': attribute type 30 has an invalid length. [ 810.204237][T31037] sctp: [Deprecated]: syz.0.6236 (pid 31037) Use of int in max_burst socket option deprecated. [ 810.204237][T31037] Use struct sctp_assoc_value instead [ 810.284278][T31038] lo speed is unknown, defaulting to 1000 [ 810.310650][T31042] ip6t_srh: unknown srh invflags BA61 [ 810.598618][T31065] tipc: Started in network mode [ 810.630926][T31065] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 810.651309][T31065] tipc: Enabling of bearer rejected, failed to enable media [ 810.810842][T31078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6247'. [ 810.821699][T31078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6247'. [ 811.023940][ T29] audit: type=1800 audit(1777190003.679:22): pid=31088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6250" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=3055 res=0 errno=0 [ 811.527407][T31125] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 811.843131][T31141] pimreg: entered allmulticast mode [ 812.190222][T31164] dummy0: entered promiscuous mode [ 812.210526][T31164] dummy0: entered allmulticast mode [ 812.243715][T31167] tipc: Started in network mode [ 812.252218][T31167] tipc: Node identity 080211000001, cluster identity 4711 [ 812.300553][T31167] tipc: Enabled bearer , priority 0 [ 812.360480][T31176] netlink: 'syz.1.6270': attribute type 39 has an invalid length. [ 812.481557][T31181] lo speed is unknown, defaulting to 1000 [ 812.550542][T31184] netlink: 'syz.4.6273': attribute type 1 has an invalid length. [ 812.551432][T31189] siw: device registration error -23 [ 812.666665][T31184] bond1: entered promiscuous mode [ 812.687101][T31184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.770396][T31193] bond1: (slave veth3): making interface the new active one [ 812.772919][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 812.778555][T31193] veth3: entered promiscuous mode [ 812.792850][T31193] bond1: (slave veth3): Enslaving as an active interface with an up link [ 812.793879][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 812.813350][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 812.824997][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 812.833953][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 813.156861][T31205] __nla_validate_parse: 3 callbacks suppressed [ 813.156878][T31205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6276'. [ 813.232264][T31209] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6278'. [ 813.302942][T31196] lo speed is unknown, defaulting to 1000 [ 813.438924][ T807] tipc: Node number set to 134418688 [ 813.492683][T31223] netlink: 'syz.4.6284': attribute type 4 has an invalid length. [ 813.513168][T31227] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6285'. [ 813.523261][T31227] net_ratelimit: 10 callbacks suppressed [ 813.523277][T31227] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 813.696492][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 813.704555][ C1] lec:lec_tx_timeout: lec0 [ 813.725099][T31239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 813.873675][T31248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6290'. [ 814.042351][T31233] lo speed is unknown, defaulting to 1000 [ 814.218078][T31196] chnl_net:caif_netlink_parms(): no params data found [ 814.241434][T31266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.327734][T31268] x_tables: duplicate underflow at hook 2 [ 814.656589][T31196] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.663906][T31196] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.671789][T31196] bridge_slave_0: entered allmulticast mode [ 814.686759][T31196] bridge_slave_0: entered promiscuous mode [ 814.699438][T31196] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.708877][T31196] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.717712][T31196] bridge_slave_1: entered allmulticast mode [ 814.727196][T31196] bridge_slave_1: entered promiscuous mode [ 814.896133][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 814.906006][ T5845] Bluetooth: hci4: command tx timeout [ 814.926861][T31196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.942769][T31196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.979616][T31308] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6304'. [ 814.991038][T31310] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6304'. [ 815.017968][T31292] pim6reg1: entered promiscuous mode [ 815.023667][T31292] pim6reg1: entered allmulticast mode [ 815.054014][T31311] netlink: 'syz.0.6303': attribute type 1 has an invalid length. [ 815.141279][T31313] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6305'. [ 815.172570][T31196] team0: Port device team_slave_0 added [ 815.204466][T31315] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 815.221990][T31315] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 815.258022][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6303'. [ 815.262973][T31196] team0: Port device team_slave_1 added [ 815.318627][T31311] bond2: (slave gretap1): making interface the new active one [ 815.327688][T31311] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 815.355672][T31319] macvlan2: entered promiscuous mode [ 815.361074][T31319] macvlan2: entered allmulticast mode [ 815.383110][T31196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.390857][T31196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.421633][T31196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.435246][T31196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.442631][T31196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.471662][T31196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.540166][T31196] hsr_slave_0: entered promiscuous mode [ 815.546934][T31196] hsr_slave_1: entered promiscuous mode [ 815.557657][T31196] debugfs: 'hsr0' already exists in 'hsr' [ 815.563421][T31196] Cannot create hsr debugfs directory [ 815.580969][T31332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6311'. [ 815.644522][T31328] lo speed is unknown, defaulting to 1000 [ 816.585192][T31382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6324'. [ 816.601122][T31380] netlink: 'syz.0.6325': attribute type 16 has an invalid length. [ 816.617192][T31382] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 816.637909][T31383] netlink: 'syz.4.6324': attribute type 1 has an invalid length. [ 816.718600][T31382] netlink: 'syz.4.6324': attribute type 10 has an invalid length. [ 816.773830][T31382] team0 (unregistering): Port device team_slave_0 removed [ 816.809371][T31382] team0 (unregistering): Port device team_slave_1 removed [ 816.834077][T31396] netlink: 'syz.1.6328': attribute type 6 has an invalid length. [ 816.985525][ T5845] Bluetooth: hci4: command tx timeout [ 817.124554][T31404] syzkaller0: entered promiscuous mode [ 817.155802][T31404] syzkaller0: entered allmulticast mode [ 817.359593][T31196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 817.379483][T31196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.428284][T31196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 817.446028][T31196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.467264][T31196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 817.471855][T31417] netlink: 'syz.4.6334': attribute type 13 has an invalid length. [ 817.499542][T31417] netlink: 'syz.4.6334': attribute type 17 has an invalid length. [ 817.528924][T31196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.557313][T31422] xt_TCPMSS: Only works on TCP SYN packets [ 817.604688][T31416] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.612356][T31416] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.699528][T31416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.700126][T31424] xt_TCPMSS: Only works on TCP SYN packets [ 817.723389][T31416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.848561][T31196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 817.860335][T31196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 817.940838][T31417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.953852][T31417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.980022][T29453] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.997664][T29453] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.017409][T29453] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.038450][T29453] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.121358][T31196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.153598][T31196] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.170641][T29438] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.177783][T29438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.194546][T29442] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.201739][T29442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.353522][T31419] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 818.369001][T31440] hsr0: entered promiscuous mode [ 818.382773][T31440] __nla_validate_parse: 5 callbacks suppressed [ 818.382791][T31440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6338'. [ 818.423129][T31440] hsr_slave_0: left promiscuous mode [ 818.443233][T31440] hsr_slave_1: left promiscuous mode [ 818.475302][T31440] hsr0 (unregistering): left promiscuous mode [ 818.592221][T31447] tipc: Enabling of bearer rejected, failed to enable media [ 818.709772][T31196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.776107][T31452] pim6reg1: entered promiscuous mode [ 818.787107][T31452] pim6reg1: entered allmulticast mode [ 818.897349][T31196] veth0_vlan: entered promiscuous mode [ 818.926860][T31196] veth1_vlan: entered promiscuous mode [ 818.988257][T31461] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.6342'. [ 819.017517][T31196] veth0_macvtap: entered promiscuous mode [ 819.029645][T31196] veth1_macvtap: entered promiscuous mode [ 819.055689][ T5845] Bluetooth: hci4: command tx timeout [ 819.063343][T31196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.112611][T31196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.138839][T29456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.156423][T29456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.181990][T29456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.198560][T29456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.351669][T29442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.362045][T29442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.404898][T29456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.414666][T29456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.534333][T31472] veth1_to_bond: entered allmulticast mode [ 819.616199][ T5845] Bluetooth: hci0: command 0x0401 tx timeout [ 819.677295][T17511] lec:lec_start_xmit: lec0:No lecd attached [ 819.688277][T31472] veth1_to_bond: left allmulticast mode [ 819.736206][T31480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6348'. [ 819.755213][T31482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.878209][T31491] IPVS: length: 132 != 8 [ 819.883428][T31491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6351'. [ 819.901148][T31491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6351'. [ 819.921174][T31491] dvmrp0: entered allmulticast mode [ 820.042289][T31496] tipc: Enabling of bearer rejected, failed to enable media [ 820.154533][T31508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6356'. [ 820.187309][T31510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6357'. [ 820.196831][T31510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6357'. [ 820.348355][T31520] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 820.357869][T31520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6361'. [ 820.668230][T31537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6364'. [ 821.135622][ T5845] Bluetooth: hci4: command tx timeout [ 821.664265][T31586] lo speed is unknown, defaulting to 1000 [ 821.919033][T31585] lo speed is unknown, defaulting to 1000 [ 822.227248][T31619] netlink: 'syz.4.6377': attribute type 2 has an invalid length. [ 822.552913][T31645] netlink: 'syz.1.6383': attribute type 39 has an invalid length. [ 822.800133][T31654] openvswitch: netlink: Invalid VLAN frame [ 822.807487][T31656] netlink: 'syz.2.6385': attribute type 3 has an invalid length. [ 823.320713][T31692] sctp: [Deprecated]: syz.2.6394 (pid 31692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 823.320713][T31692] Use struct sctp_sack_info instead [ 823.371769][T31692] sctp: [Deprecated]: syz.2.6394 (pid 31692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 823.371769][T31692] Use struct sctp_sack_info instead [ 823.393141][T31694] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 823.593449][T31698] __nla_validate_parse: 5 callbacks suppressed [ 823.593469][T31698] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6396'. [ 823.662121][T31698] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 823.701056][T31698] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6396'. [ 823.812120][T31705] netlink: 'syz.3.6399': attribute type 3 has an invalid length. [ 823.855707][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 823.863616][T31707] macsec1: entered promiscuous mode [ 824.222561][T31722] tipc: Enabled bearer , priority 0 [ 824.270438][T31725] syzkaller0: entered promiscuous mode [ 824.277890][T31725] syzkaller0: entered allmulticast mode [ 824.290014][T31727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6407'. [ 824.350338][T31725] tipc: Resetting bearer [ 824.436854][T31725] tipc: Disabling bearer [ 824.685520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 824.693585][ C1] lec:lec_tx_timeout: lec0 [ 824.739570][T31754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6411'. [ 824.791006][T31762] netlink: 'syz.3.6410': attribute type 1 has an invalid length. [ 825.040596][T31762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 825.266282][T31777] lo speed is unknown, defaulting to 1000 [ 825.450425][T31777] tipc: can't start tipc receive workqueue [ 825.742419][T31808] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6426'. [ 825.843929][T31817] IPVS: length: 18 != 8 [ 825.877720][T31806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6423'. [ 826.080633][T31826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6430'. [ 826.150578][T31828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 826.169507][T31826] syzkaller0: entered promiscuous mode [ 826.175221][T31826] syzkaller0: entered allmulticast mode [ 826.288852][T31828] syzkaller0: entered promiscuous mode [ 826.294558][T31828] syzkaller0: entered allmulticast mode [ 826.537856][T31844] bridge_slave_0: left allmulticast mode [ 826.561180][T31844] bridge_slave_0: left promiscuous mode [ 826.569513][T31844] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.593749][T31844] bridge_slave_1: left allmulticast mode [ 826.617389][T31844] bridge_slave_1: left promiscuous mode [ 826.625295][T31844] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.659193][T31844] bond0: (slave bond_slave_0): Releasing backup interface [ 826.689128][T31844] bond0: (slave bond_slave_1): Releasing backup interface [ 826.714541][T31844] team0: Port device team_slave_0 removed [ 826.728149][T31844] team0: Port device team_slave_1 removed [ 826.734885][T31844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.744154][T31844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.756635][T31844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.764101][T31844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.773187][T31844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 826.910217][T31863] can: request_module (can-proto-3) failed. [ 826.943977][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 826.968554][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 827.048782][T31870] netlink: 'syz.2.6443': attribute type 1 has an invalid length. [ 827.083832][T31870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 827.108070][T31870] Bluetooth: MGMT ver 1.23 [ 827.165630][T31873] netlink: 'syz.1.6444': attribute type 1 has an invalid length. [ 827.179985][T31874] netlink: 'syz.2.6443': attribute type 1 has an invalid length. [ 827.210243][T31876] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 827.231185][T31874] bond1: (slave batadv1): Opening slave failed [ 827.413309][T31884] xt_HMARK: proto mask must be zero with L3 mode [ 828.079019][T31924] netlink: 'syz.0.6459': attribute type 1 has an invalid length. [ 828.081451][T31926] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 828.166590][T31924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 828.262556][T31921] bond3: (slave veth5): Enslaving as an active interface with a down link [ 828.271421][T31929] netlink: 'syz.2.6460': attribute type 8 has an invalid length. [ 828.293293][T31924] bond0: (slave dummy0): Releasing backup interface [ 828.559553][T31939] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 828.588845][T31939] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 828.671791][T31937] lo speed is unknown, defaulting to 1000 [ 828.707894][T31943] __nla_validate_parse: 9 callbacks suppressed [ 828.707911][T31943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6463'. [ 828.906965][T31961] netlink: 'syz.2.6470': attribute type 83 has an invalid length. [ 829.367998][T31984] bridge1: entered promiscuous mode [ 829.392058][T31984] bridge1: entered allmulticast mode [ 829.710878][T32011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6483'. [ 829.854170][T32022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6482'. [ 830.213999][T32047] netlink: 'syz.2.6487': attribute type 13 has an invalid length. [ 830.243861][T32047] netlink: 'syz.2.6487': attribute type 17 has an invalid length. [ 830.411244][T32059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6491'. [ 830.441897][T32059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6491'. [ 830.469815][T32059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6491'. [ 830.481305][T32047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 830.537119][T32062] pim6reg: entered allmulticast mode [ 830.754565][T32079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6497'. [ 830.792353][T32079] netlink: 'syz.4.6497': attribute type 13 has an invalid length. [ 830.804434][T32084] openvswitch: netlink: Actions may not be safe on all matching packets [ 831.130842][T32097] macsec0: entered promiscuous mode [ 831.136587][T32097] bridge0: entered promiscuous mode [ 831.203021][T32099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6500'. [ 832.054950][T32140] netlink: 'syz.2.6508': attribute type 8 has an invalid length. [ 832.068877][T32144] lo speed is unknown, defaulting to 1000 [ 832.817579][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 833.001489][T32162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6514'. [ 834.683786][T32129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.909498][T32173] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6517'. [ 834.942294][T32173] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 834.973338][T32183] netlink: 'syz.1.6522': attribute type 12 has an invalid length. [ 834.991650][T32183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6522'. [ 835.014843][T32173] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6517'. [ 835.055907][T32173] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6517'. [ 835.074289][T32187] erspan0: entered promiscuous mode [ 835.088743][T32187] vlan2: entered promiscuous mode [ 835.144298][T32193] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6524'. [ 835.171774][T32193] netlink: 'syz.2.6524': attribute type 10 has an invalid length. [ 835.181341][T32183] netlink: 'syz.1.6522': attribute type 39 has an invalid length. [ 835.189632][T32193] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6524'. [ 835.200702][T32184] netlink: 'syz.1.6522': attribute type 39 has an invalid length. [ 835.322547][T32196] vxcan2: entered allmulticast mode [ 835.608545][T32215] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 835.634034][T32216] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 835.668226][T32212] lo speed is unknown, defaulting to 1000 [ 835.898259][T32227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6534'. [ 835.957729][T32222] lo speed is unknown, defaulting to 1000 [ 836.161699][T32246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6537'. [ 836.389146][T32253] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.6539'. [ 836.782903][ T807] IPVS: starting estimator thread 0... [ 836.895715][T32276] IPVS: using max 28 ests per chain, 67200 per kthread [ 836.938286][T32275] nbd4: detected capacity change from 0 to 63 [ 837.651242][ T5845] block nbd4: Receive control failed (result -104) [ 837.743490][T32302] lo: Caught tx_queue_len zero misconfig [ 837.832422][T32298] syz_tun: entered allmulticast mode [ 838.218850][T32325] netlink: 'syz.2.6553': attribute type 10 has an invalid length. [ 838.322289][T32325] team0: Port device dummy0 added [ 838.796437][T32338] netlink: 'syz.1.6557': attribute type 11 has an invalid length. [ 838.850799][T32344] xt_nfacct: accounting object `syz0' does not exist [ 838.911277][T32347] netlink: 'syz.1.6560': attribute type 12 has an invalid length. [ 838.932821][T32347] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.146802][T32352] netlink: 'syz.2.6558': attribute type 1 has an invalid length. [ 839.175595][T32352] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6558'. [ 839.294038][T32358] lo speed is unknown, defaulting to 1000 [ 839.355954][T32361] netlink: 'syz.1.6564': attribute type 1 has an invalid length. [ 839.390702][T32356] bond2: entered promiscuous mode [ 839.406113][T32356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.462098][T32362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.470298][T32362] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 839.481815][T32362] bond2: (slave vti0): Error -95 calling set_mac_address [ 839.603366][T32361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.669133][T32364] bond1: (slave geneve2): making interface the new active one [ 839.684276][T32364] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 839.982520][T32385] __nla_validate_parse: 2 callbacks suppressed [ 839.982539][T32385] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6568'. [ 840.542517][T32391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 840.570524][T32391] team0: Port device bond2 added [ 840.635762][T32384] lo speed is unknown, defaulting to 1000 [ 840.824491][T32408] netlink: 'syz.4.6573': attribute type 2 has an invalid length. [ 841.119126][T32419] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6577'. [ 841.240263][T32425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6578'. [ 841.307660][T29453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.336052][T29453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.312861][T32462] sctp: [Deprecated]: syz.1.6593 (pid 32462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 842.312861][T32462] Use struct sctp_sack_info instead [ 842.478864][T32470] veth3: entered promiscuous mode [ 842.627175][T32477] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 843.448943][T32497] bond2: option fail_over_mac: invalid value (127) [ 843.473268][T32497] bond2 (unregistering): Released all slaves [ 843.749918][T32512] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6608'. [ 843.761582][T32512] syzkaller0: entered promiscuous mode [ 843.768441][T32512] syzkaller0: entered allmulticast mode [ 843.845986][T32514] geneve1: entered promiscuous mode [ 843.871881][T32514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6609'. [ 844.013532][T32516] bond2 (unregistering): Released all slaves [ 844.612298][T32541] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6617'. [ 844.922771][T32557] netlink: 'syz.1.6622': attribute type 12 has an invalid length. [ 844.948259][T32556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6621'. [ 844.999971][T32559] pim6reg1: entered allmulticast mode [ 845.321807][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6627'. [ 845.365207][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6627'. [ 845.500999][T32584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6630'. [ 845.581014][T32584] openvswitch: netlink: Tunnel attr 6 has unexpected len 5420 expected 0 [ 845.920775][T32610] syzkaller1: entered promiscuous mode [ 845.951911][T32610] syzkaller1: entered allmulticast mode [ 846.024030][T32621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6637'. [ 846.060393][T32621] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 846.296449][T32631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6640'. [ 846.319127][T32637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6642'. [ 846.661125][T32657] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6643'. [ 846.948151][T32674] netlink: 'syz.0.6648': attribute type 1 has an invalid length. [ 846.969791][T32674] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6648'. [ 847.194664][T32681] netlink: 'syz.0.6650': attribute type 4 has an invalid length. [ 847.359782][T32685] netlink: 292 bytes leftover after parsing attributes in process `syz.4.6651'. [ 847.391911][T32688] lo speed is unknown, defaulting to 1000 [ 848.303085][T32720] batadv_slave_0: entered promiscuous mode [ 848.335881][T32720] batadv_slave_0: entered allmulticast mode [ 849.733372][ T300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6663'. [ 849.802049][ T300] team0: Port device team_slave_0 removed [ 851.038043][T32715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 851.242810][ T318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6667'. [ 851.528325][ T335] macsec1: entered promiscuous mode [ 851.647960][ T331] netlink: 'syz.4.6673': attribute type 1 has an invalid length. [ 851.669004][ T331] netlink: 'syz.4.6673': attribute type 1 has an invalid length. [ 851.700207][ T337] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.6673'. [ 852.034879][ T355] syzkaller0: entered promiscuous mode [ 852.067034][ T355] syzkaller0: entered allmulticast mode [ 852.634334][ T388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6688'. [ 852.889805][ T405] ipt_REJECT: TCP_RESET invalid for non-tcp [ 853.074348][ T411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6694'. [ 853.320303][ T430] netlink: 'syz.2.6697': attribute type 15 has an invalid length. [ 853.351543][ T430] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6697'. [ 853.473071][ T430] bond2: option min_links: invalid value (18446744073709551612) [ 853.506128][ T430] bond2: option min_links: allowed values 0 - 2147483647 [ 853.879110][ T461] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6704'. [ 853.920326][ T430] bond2 (unregistering): Released all slaves [ 854.069609][ T466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6705'. [ 854.099225][ T466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6705'. [ 854.123164][ T466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6705'. [ 854.220933][ T472] sctp: [Deprecated]: syz.3.6707 (pid 472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 854.220933][ T472] Use struct sctp_sack_info instead [ 854.394117][ T479] tipc: Started in network mode [ 854.413687][ T479] tipc: Node identity 6a993478e5d8, cluster identity 4711 [ 854.440271][ T479] tipc: Enabled bearer , priority 0 [ 854.454745][ T482] syzkaller0: entered promiscuous mode [ 854.480259][ T482] syzkaller0: entered allmulticast mode [ 854.528572][ T485] xt_hashlimit: size too large, truncated to 1048576 [ 854.674844][ T489] : renamed from dummy0 (while UP) [ 854.846061][ T482] tipc: Resetting bearer [ 854.924500][ T482] tipc: Disabling bearer [ 855.198495][ T529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6720'. [ 855.231846][ T536] netlink: 'syz.1.6723': attribute type 18 has an invalid length. [ 855.279600][ T533] syzkaller0: entered promiscuous mode [ 855.313200][ T533] syzkaller0: entered allmulticast mode [ 855.367442][ T543] netlink: 'syz.2.6724': attribute type 1 has an invalid length. [ 855.750751][ T577] netlink: 'syz.3.6732': attribute type 2 has an invalid length. [ 855.780389][ T577] netlink: 'syz.3.6732': attribute type 2 has an invalid length. [ 855.944828][ T589] netlink: 'syz.1.6737': attribute type 1 has an invalid length. [ 856.230977][ T603] Cannot find set identified by id 0 to match [ 856.260118][ T603] gretap0: entered promiscuous mode [ 856.358461][ T605] __nla_validate_parse: 5 callbacks suppressed [ 856.358481][ T605] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6743'. [ 856.456872][ T611] netlink: 'syz.2.6745': attribute type 10 has an invalid length. [ 856.465360][ T611] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6745'. [ 856.546945][ T611] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 856.776698][ T614] wg1: Caught tx_queue_len zero misconfig [ 857.075187][ T645] xt_hashlimit: size too large, truncated to 1048576 [ 857.361794][ T656] netlink: 'syz.2.6751': attribute type 1 has an invalid length. [ 857.389712][ T656] netlink: 'syz.2.6751': attribute type 2 has an invalid length. [ 857.412060][ T656] netlink: 'syz.2.6751': attribute type 3 has an invalid length. [ 857.631864][ T673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6755'. [ 857.945371][ T703] bpq0: left promiscuous mode [ 857.959403][ T703] bpq0: left allmulticast mode [ 858.202322][ T717] No such timeout policy "syz0" [ 858.248275][ T717] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6764'. [ 858.372329][ T730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6762'. [ 858.441508][ T732] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6766'. [ 858.454915][ T730] lo speed is unknown, defaulting to 1000 [ 858.473623][ T732] validate_nla: 1 callbacks suppressed [ 858.473639][ T732] netlink: 'syz.4.6766': attribute type 1 has an invalid length. [ 858.669151][ T5845] Bluetooth: hci4: link tx timeout [ 858.681739][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 858.776944][ T739] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6767'. [ 858.954457][ T5845] Bluetooth: hci4: link tx timeout [ 858.960234][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 859.024523][ T746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6768'. [ 859.074401][ T752] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.6770'. [ 859.141953][ T748] netlink: 'syz.0.6769': attribute type 3 has an invalid length. [ 859.155412][ T754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6771'. [ 859.353877][ T757] IPv6: Can't replace route, no match found [ 859.650550][ T771] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:19241 [ 859.657403][ T807] IPVS: starting estimator thread 0... [ 859.755990][ T773] IPVS: using max 26 ests per chain, 62400 per kthread [ 859.903477][ T5845] block nbd2: Receive control failed (result -1) [ 860.373986][ T811] bond0: entered promiscuous mode [ 860.396936][ T811] bond_slave_0: entered promiscuous mode [ 860.416637][ T811] bond_slave_1: entered promiscuous mode [ 860.466642][ T811] bond0: left promiscuous mode [ 860.473067][ T811] bond_slave_0: left promiscuous mode [ 860.485352][ T818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.487493][ T811] bond_slave_1: left promiscuous mode [ 860.735794][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 861.224654][ T865] syzkaller0: entered promiscuous mode [ 861.245430][ T865] syzkaller0: entered allmulticast mode [ 861.389076][ T875] : option downdelay: invalid value (18446744073709547007) [ 861.404141][ T875] : option downdelay: allowed values 0 - 2147483647 [ 861.429802][ T875]  (unregistering): Released all slaves [ 861.763086][ T903] __nla_validate_parse: 14 callbacks suppressed [ 861.763103][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6805'. [ 861.803171][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6805'. [ 861.910837][ T912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6804'. [ 862.286569][ T952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6809'. [ 862.357763][ T957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6810'. [ 862.409181][ T955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6810'. [ 862.439455][ T957] netlink: 'syz.4.6810': attribute type 21 has an invalid length. [ 862.444975][ T955] netlink: 'syz.4.6810': attribute type 21 has an invalid length. [ 862.477929][ T970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.479641][ T971] netlink: 'syz.2.6811': attribute type 1 has an invalid length. [ 862.712619][ T971] bond2: entered promiscuous mode [ 862.718536][ T971] bond2: entered allmulticast mode [ 862.724118][ T971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 862.784133][ T973] macvlan2: entered promiscuous mode [ 862.796715][ T973] macvlan2: entered allmulticast mode [ 862.815861][T21187] Bluetooth: hci4: command 0x0405 tx timeout [ 862.845095][ T973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 862.922525][ T998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6818'. [ 862.960605][ T997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6818'. [ 863.128015][ T29] audit: type=1800 audit(1777190055.789:23): pid=1009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6820" name="memory.events" dev="tmpfs" ino=1064 res=0 errno=0 [ 863.178434][ T1009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6820'. [ 863.192112][ T807] hsr0: entered promiscuous mode [ 863.398451][ T1016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6821'. [ 863.694566][ T6234] IPVS: starting estimator thread 0... [ 863.762631][ T1039] netlink: 'syz.1.6828': attribute type 7 has an invalid length. [ 863.792757][ T1039] netlink: 'syz.1.6828': attribute type 7 has an invalid length. [ 863.800676][ T1036] IPVS: using max 29 ests per chain, 69600 per kthread [ 863.851119][ T1035] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004 [ 863.858364][ T1039] vlan3: entered promiscuous mode [ 863.869768][ T1039] bridge0: entered promiscuous mode [ 864.349938][ T29] audit: type=1800 audit(1777190057.009:24): pid=1072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6836" name="memory.events" dev="tmpfs" ino=778 res=0 errno=0 [ 864.409940][ T29] audit: type=1804 audit(1777190057.039:25): pid=1072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6836" name="/newroot/148/memory.events" dev="tmpfs" ino=778 res=1 errno=0 [ 864.454179][ T1082] bridge0: entered promiscuous mode [ 864.462418][ T1082] ip6gretap0: entered promiscuous mode [ 864.477086][ T1082] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 864.488715][ T1082] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 864.534418][T29442] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.553382][T29442] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.591817][T29442] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.609031][T29442] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.690237][ T1089] lo speed is unknown, defaulting to 1000 [ 865.789894][ T1144] openvswitch: netlink: Duplicate or invalid key (type 0). [ 865.797504][ T1144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.478600][ T1170] block nbd0: reconnected socket [ 866.707694][T21187] block nbd0: Receive control failed (result -32) [ 867.098067][ T1204] __nla_validate_parse: 12 callbacks suppressed [ 867.098087][ T1204] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6866'. [ 867.151640][ T1204] netlink: 'syz.4.6866': attribute type 3 has an invalid length. [ 867.168577][ T1204] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6866'. [ 867.379547][ T25] block nbd4: Possible stuck request ffff888027720000: control (read@0,1024B). Runtime 30 seconds [ 867.392954][ T25] block nbd4: Possible stuck request ffff8880277201c0: control (read@1024,1024B). Runtime 30 seconds [ 867.404097][ T25] block nbd4: Possible stuck request ffff888027720380: control (read@2048,1024B). Runtime 30 seconds [ 867.416061][ T25] block nbd4: Possible stuck request ffff888027720540: control (read@3072,1024B). Runtime 30 seconds [ 867.449817][ T1215] xt_TCPMSS: Only works on TCP SYN packets [ 867.468497][ T1215] openvswitch: netlink: Missing valid actions attribute. [ 867.478004][ T1215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.672954][ T1231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6874'. [ 867.682792][ T1231] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6874'. [ 867.691907][ T1231] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6874'. [ 867.709643][ T1232] x_tables: duplicate underflow at hook 2 [ 867.749221][ T1231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6874'. [ 867.804980][ T1235] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6875'. [ 867.831900][ T1235] batadv_slave_0: left promiscuous mode [ 867.842022][ T1235] batadv_slave_0: left allmulticast mode [ 867.881325][ T1236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6875'. [ 867.900083][ T1235] geneve1: left promiscuous mode [ 867.929131][ T1235] bridge1: left promiscuous mode [ 867.935035][ T1235] bridge1: left allmulticast mode [ 867.944040][ T1235] bond2: left promiscuous mode [ 867.952384][ T1235] bond2: left allmulticast mode [ 868.037014][ T1246] tipc: Started in network mode [ 868.042063][ T1246] tipc: Node identity 6aac9fa78c96, cluster identity 4711 [ 868.049744][ T1246] tipc: Enabled bearer , priority 0 [ 868.058211][ T1246] syzkaller0: entered promiscuous mode [ 868.063895][ T1246] syzkaller0: entered allmulticast mode [ 868.138454][ T1246] tipc: Resetting bearer [ 868.151303][ T1245] tipc: Resetting bearer [ 868.207558][ T1245] tipc: Disabling bearer [ 868.231560][ T1252] IPVS: length: 35 != 24 [ 868.276692][ T1250] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 868.358326][ T1256] lo speed is unknown, defaulting to 1000 [ 868.441819][ T1258] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 868.453595][ T1263] netlink: 'syz.0.6883': attribute type 1 has an invalid length. [ 868.550021][ T1263] bond4: (slave bridge4): making interface the new active one [ 868.568691][ T1263] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 868.655992][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 868.891348][ T1275] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6887'. [ 869.196585][ T1289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.294024][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6893'. [ 869.772447][ T1310] netlink: 'syz.0.6898': attribute type 1 has an invalid length. [ 869.784273][ T1302] lo speed is unknown, defaulting to 1000 [ 869.797035][ T1310] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 869.946996][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 870.193772][ T1327] gre1: entered promiscuous mode [ 870.449945][ T807] IPVS: starting estimator thread 0... [ 870.471905][ T1341] nicvf0: tun_chr_ioctl cmd 1074812117 [ 870.545626][ T1343] IPVS: using max 25 ests per chain, 60000 per kthread [ 871.258777][ T1372] netlink: 'syz.3.6914': attribute type 2 has an invalid length. [ 871.720183][ T1402] netlink: 'syz.2.6922': attribute type 1 has an invalid length. [ 871.868448][ T1407] bridge1: port 1(vlan4) entered blocking state [ 871.881352][ T1407] bridge1: port 1(vlan4) entered disabled state [ 871.888593][ T1407] vlan4: entered allmulticast mode [ 871.893992][ T1407] bridge1: entered allmulticast mode [ 871.913193][ T1407] vlan4: left allmulticast mode [ 871.922493][ T1407] bridge1: left allmulticast mode [ 872.312761][ T1421] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 872.358270][ T1404] lo speed is unknown, defaulting to 1000 [ 872.384338][ T1435] __nla_validate_parse: 6 callbacks suppressed [ 872.384354][ T1435] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6930'. [ 872.406410][ T1414] lo speed is unknown, defaulting to 1000 [ 872.434850][ T1415] lo speed is unknown, defaulting to 1000 [ 875.514038][ T1442] netlink: 'syz.1.6932': attribute type 3 has an invalid length. [ 875.695756][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 875.703808][ C1] lec:lec_tx_timeout: lec0 [ 875.727492][ T1447] lo speed is unknown, defaulting to 1000 [ 876.174724][ T1469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 876.182017][ T1469] IPv6: NLM_F_CREATE should be set when creating new route [ 876.210436][ T1466] lo speed is unknown, defaulting to 1000 [ 876.229965][ T1471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6939'. [ 876.576266][ T1497] lo speed is unknown, defaulting to 1000 [ 876.923244][ T1511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6950'. [ 876.950368][ T1512] lo speed is unknown, defaulting to 1000 [ 877.391055][ T1544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6957'. [ 877.403638][ T1544] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6957'. [ 877.491816][ T1552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.094945][ T1527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.271505][ T1576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6968'. [ 881.084474][ T1632] tipc: Started in network mode [ 881.109953][ T1632] tipc: Node identity ac14140f, cluster identity 4711 [ 881.166899][ T1632] tipc: New replicast peer: 255.255.255.255 [ 881.191119][ T1632] tipc: Enabled bearer , priority 5 [ 881.361309][ T1644] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6979'. [ 881.400092][ T1644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6979'. [ 881.434020][ T1644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6979'. [ 881.625072][ T1651] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6981'. [ 881.660936][ T1651] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6981'. [ 881.685508][ T1651] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6981'. [ 881.771550][ T1658] tipc: Started in network mode [ 881.778019][ T1658] tipc: Node identity , cluster identity 4711 [ 881.797575][ T1658] tipc: Failed to obtain node identity [ 881.810447][ T1658] tipc: Enabling of bearer rejected, failed to enable media [ 881.825041][ T1658] syzkaller0: entered promiscuous mode [ 881.872568][ T1658] syzkaller0: entered allmulticast mode [ 881.961505][ T1668] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 881.999027][ T1663] syzkaller0: entered promiscuous mode [ 882.012688][ T1663] syzkaller0: entered allmulticast mode [ 882.043797][ T1665] syzkaller0: entered promiscuous mode [ 882.064042][ T1665] syzkaller0: entered allmulticast mode [ 882.090397][ T1665] netlink: 'syz.4.6986': attribute type 1 has an invalid length. [ 882.112548][ T1665] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6986'. [ 882.323268][T22116] tipc: Node number set to 2886997007 [ 882.409440][ T1695] nbd: must specify an index to disconnect [ 882.518283][ T1702] tipc: Enabling of bearer rejected, failed to enable media [ 882.548252][ T1705] sock: sock_timestamping_bind_phc: sock not bind to device [ 882.561062][ T1707] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 882.893215][ T1714] geneve2: left promiscuous mode [ 882.903769][ T1714] bond1: left promiscuous mode [ 882.909139][ T1714] veth3: left promiscuous mode [ 883.460250][ T1741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.479565][ T1741] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.497240][ T1741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.522216][ T1747] __nla_validate_parse: 2 callbacks suppressed [ 883.522232][ T1747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7008'. [ 883.601506][ T1749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7009'. [ 883.791895][ T1756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7010'. [ 883.989697][ T1767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7016'. [ 884.020920][ T1768] Cannot find add_set index 3 as target [ 884.118482][ T1775] bridge0: port 1(vlan2) entered blocking state [ 884.125018][ T1775] bridge0: port 1(vlan2) entered disabled state [ 884.140381][ T1775] vlan2: entered allmulticast mode [ 884.151276][ T1775] geneve0: entered allmulticast mode [ 884.171565][ T1775] vlan2: entered promiscuous mode [ 884.184426][ T1775] geneve0: entered promiscuous mode [ 884.239531][ T1779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7018'. [ 884.316716][ T1783] vxcan3: entered promiscuous mode [ 884.374038][ T1749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.408124][ T1786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7020'. [ 884.432003][ T1790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7020'. [ 884.577346][ T1794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7022'. [ 884.594576][ T1794] netlink: 'syz.4.7022': attribute type 15 has an invalid length. [ 884.613256][ T1794] netlink: 'syz.4.7022': attribute type 25 has an invalid length. [ 884.637426][ T1794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7022'. [ 884.669039][T17511] lec:lec_start_xmit: lec0:No lecd attached [ 884.780618][ T1813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7026'. [ 884.917104][ T1821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.554286][ T1855] openvswitch: netlink: Flow actions attr not present in new flow. [ 885.663250][ T1864] netlink: 'syz.0.7044': attribute type 3 has an invalid length. [ 885.980958][ T1872] netlink: 'syz.2.7046': attribute type 1 has an invalid length. [ 886.080421][ T1880] syzkaller1: entered promiscuous mode [ 886.096068][ T1880] syzkaller1: entered allmulticast mode [ 886.111890][ T1883] tipc: Enabled bearer , priority 0 [ 886.123565][ T1882] syzkaller0: entered promiscuous mode [ 886.133829][ T1882] syzkaller0: entered allmulticast mode [ 886.159667][ T1882] netlink: 'syz.3.7050': attribute type 4 has an invalid length. [ 886.202233][ T1882] netlink: 'syz.3.7050': attribute type 4 has an invalid length. [ 886.218851][ T1883] netlink: 'syz.3.7050': attribute type 4 has an invalid length. [ 886.294211][ T1883] tipc: Resetting bearer [ 886.352369][ T1881] tipc: Resetting bearer [ 886.405665][ T1881] tipc: Disabling bearer [ 886.466803][ T1901] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 886.702670][ T1916] ip6t_srh: unknown srh invflags BA61 [ 887.784377][ T1947] bond3: entered allmulticast mode [ 887.790388][ T1951] vlan0: entered promiscuous mode [ 887.820858][ T1952] macvlan2: entered promiscuous mode [ 887.832133][ T1952] macvlan2: entered allmulticast mode [ 888.232972][ T1991] netlink: 'syz.4.7081': attribute type 5 has an invalid length. [ 888.569229][ T2006] netlink: 'syz.4.7083': attribute type 10 has an invalid length. [ 888.709913][ T2012] tipc: Started in network mode [ 888.721267][ T2012] tipc: Node identity 4afbcc515cfc, cluster identity 4711 [ 888.732262][ T2012] tipc: Enabled bearer , priority 0 [ 888.805316][ T2016] __nla_validate_parse: 16 callbacks suppressed [ 888.805334][ T2016] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7085'. [ 888.806655][ T2010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7084'. [ 888.827254][ T2008] syzkaller0: entered promiscuous mode [ 888.839153][ T2008] syzkaller0: entered allmulticast mode [ 888.847095][ T2008] tipc: Resetting bearer [ 888.853276][ T2006] tipc: Enabled bearer , priority 0 [ 889.048259][ T2031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7089'. [ 889.094455][T29456] tipc: Resetting bearer [ 889.162554][ T2039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7091'. [ 889.176774][ T2011] syzkaller0: entered promiscuous mode [ 889.182307][ T2011] syzkaller0: entered allmulticast mode [ 889.188461][ T2011] tipc: Resetting bearer [ 889.204170][ T2007] tipc: Resetting bearer [ 889.702267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 889.710323][ C1] lec:lec_tx_timeout: lec0 [ 891.175773][ T2007] tipc: Disabling bearer [ 891.223725][ T2005] tipc: Resetting bearer [ 891.293207][ T2047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7093'. [ 891.324373][ T2051] netlink: 'syz.2.7094': attribute type 6 has an invalid length. [ 892.495792][ T5845] Bluetooth: hci3: command 0x0401 tx timeout [ 893.527250][ T2005] tipc: Disabling bearer [ 893.538252][T11992] tipc: Node number set to 369609809 [ 893.545663][T25633] tipc: Node number set to 3862601639 [ 893.556387][ T2054] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 893.716392][ T2064] netlink: 'syz.3.7097': attribute type 64 has an invalid length. [ 893.754200][ T2068] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 893.793271][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7099'. [ 893.813566][ T2074] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7101'. [ 893.989885][ T2086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7102'. [ 894.021382][T29442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.037265][T29442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.066633][ T2099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7106'. [ 894.262589][ T2105] sock: sock_set_timeout: `syz.1.7109' (pid 2105) tries to set negative timeout [ 894.284099][ T2114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7111'. [ 894.515131][ T2128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7115'. [ 894.554715][ T2128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7115'. [ 894.652158][ T2126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7114'. [ 894.748136][ T2136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7116'. [ 894.811972][ T2140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7117'. [ 894.880015][ T2143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7117'. [ 895.008899][ T2140] bond3: entered promiscuous mode [ 895.016628][ T2140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 896.100392][ T2224] 8021q: VLANs not supported on gre0 [ 896.222135][ T2236] netlink: 'syz.3.7137': attribute type 1 has an invalid length. [ 896.259591][ T2235] batadv1: entered promiscuous mode [ 896.265020][ T2235] batadv1: entered allmulticast mode [ 896.279948][ T2236] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 896.297008][ T2234] syz_tun: entered allmulticast mode [ 896.408696][ T2245] SET target dimension over the limit! [ 896.630384][ T2259] tipc: Enabled bearer , priority 0 [ 896.664377][ T2259] syzkaller0: entered promiscuous mode [ 896.708940][ T2259] syzkaller0: entered allmulticast mode [ 896.732272][ T2259] bridge0: entered allmulticast mode [ 896.869371][T24685] udevd[24685]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 896.959933][ T2259] tipc: Resetting bearer [ 896.968812][ T2281] netlink: 'syz.4.7144': attribute type 1 has an invalid length. [ 896.988565][ T2257] tipc: Resetting bearer [ 897.009493][ T2257] tipc: Disabling bearer [ 897.046312][ T2280] syzkaller1: entered promiscuous mode [ 897.053234][ T2280] syzkaller1: entered allmulticast mode [ 897.457185][ T25] block nbd4: Possible stuck request ffff888027720000: control (read@0,1024B). Runtime 60 seconds [ 897.470111][ T25] block nbd4: Possible stuck request ffff8880277201c0: control (read@1024,1024B). Runtime 60 seconds [ 897.481086][ T25] block nbd4: Possible stuck request ffff888027720380: control (read@2048,1024B). Runtime 60 seconds [ 897.492167][ T25] block nbd4: Possible stuck request ffff888027720540: control (read@3072,1024B). Runtime 60 seconds [ 898.152555][ T2319] IPVS: fo: FWM 3 0x00000003 - no destination available [ 898.577528][ T2345] netlink: 'syz.1.7162': attribute type 1 has an invalid length. [ 898.832651][ T2353] lo speed is unknown, defaulting to 1000 [ 898.867827][ T2360] __nla_validate_parse: 12 callbacks suppressed [ 898.867845][ T2360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7164'. [ 898.964737][ T2370] bond3: entered allmulticast mode [ 898.970740][ T2370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 899.289895][ T2395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7168'. [ 899.348105][ T2395] netlink: 'syz.4.7168': attribute type 30 has an invalid length. [ 899.427667][ T2395] netlink: 'syz.4.7168': attribute type 29 has an invalid length. [ 899.486256][ T2395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7168'. [ 899.537039][ T2388] syzkaller1: entered promiscuous mode [ 899.547165][ T2388] syzkaller1: entered allmulticast mode [ 899.878992][ T2421] bridge0: port 3(vlan3) entered blocking state [ 899.890250][ T2421] bridge0: port 3(vlan3) entered disabled state [ 899.899801][ T2421] vlan3: entered allmulticast mode [ 899.914380][ T2421] bridge0: entered allmulticast mode [ 899.947742][ T2421] vlan3: left allmulticast mode [ 899.963003][ T2421] bridge0: left allmulticast mode [ 899.980968][ T2435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7175'. [ 900.028875][ T2435] netlink: 'syz.4.7175': attribute type 5 has an invalid length. [ 900.104713][ T2422] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 900.157781][ T6234] syzkaller1: tun_net_xmit 90 [ 900.165682][ T2422] syzkaller1: Linktype set failed because interface is up [ 900.341888][ T2446] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 900.429661][ T2457] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 900.521000][ T2461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7181'. [ 900.861889][ T2490] team0: entered allmulticast mode [ 900.885811][ T2490] team_slave_1: entered allmulticast mode [ 900.945726][ T2514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7184'. [ 900.978581][ T2514] netlink: 'syz.1.7184': attribute type 5 has an invalid length. [ 900.989802][ T2506] bond4: entered promiscuous mode [ 901.005809][ T2506] bond4: entered allmulticast mode [ 901.013289][ T2514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7184'. [ 901.030413][ T2506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.051550][ T2487] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 901.088906][ T2514] geneve3: entered promiscuous mode [ 901.099933][ T2514] geneve3: entered allmulticast mode [ 901.128790][T29442] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 901.144909][T29442] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 901.168815][T29442] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 901.188797][T29442] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 901.253687][ T2457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 901.262254][ T2457] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 902.740471][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 902.756393][ T2457] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 902.762979][ T2457] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 902.776528][ T2457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 902.783366][ T2457] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 902.811656][ T2457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 902.818167][ T2457] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 902.948172][ T2461] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 903.078935][ T2541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7185'. [ 903.271122][ T2555] pim6reg: entered allmulticast mode [ 903.297466][ T2555] pim6reg: left allmulticast mode [ 903.480098][ T2570] veth0_macvtap: Caught tx_queue_len zero misconfig [ 903.661309][ T2590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7193'. [ 903.854692][ T2605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7197'. [ 903.943916][ T2615] netlink: 'syz.2.7197': attribute type 1 has an invalid length. [ 904.156674][ T2627] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 904.165769][ T2627] syzkaller1: linktype set to 805 [ 904.281182][ T2638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7203'. [ 904.679270][ T2680] netlink: 'syz.2.7208': attribute type 1 has an invalid length. [ 904.806678][ T2692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7209'. [ 904.930806][ T2697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7209'. [ 905.168303][ T2718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7214'. [ 905.412078][ T2730] bond5: option miimon: invalid value (18446744073709551607) [ 905.421465][ T2730] bond5: option miimon: allowed values 0 - 2147483647 [ 905.439598][ T2730] bond5 (unregistering): Released all slaves [ 905.515196][ T2745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7216'. [ 905.680017][ T2747] netlink: 'syz.3.7219': attribute type 4 has an invalid length. [ 905.880249][ T2761] netlink: 'syz.1.7221': attribute type 10 has an invalid length. [ 905.894384][ T2772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7222'. [ 905.939138][ T2761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7221'. [ 905.953200][ T2773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 905.966556][ T2772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7222'. [ 905.978332][ T2776] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 906.019909][ T2782] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 906.253846][ T2796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7225'. [ 906.438770][ T2799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7228'. [ 906.621714][ T2814] netlink: 'syz.2.7233': attribute type 21 has an invalid length. [ 906.653263][ T2817] openvswitch: netlink: Flow actions attr not present in new flow. [ 906.885150][ T2840] ipvlan2: entered allmulticast mode [ 906.908143][ T2841] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 907.141538][ T2859] nbd: must specify a size in bytes for the device [ 907.456078][ T2898] syzkaller0: entered promiscuous mode [ 907.492844][ T2898] syzkaller0: entered allmulticast mode [ 907.631755][ T2905] geneve2: entered promiscuous mode [ 907.778151][ T2921] netlink: 'syz.1.7254': attribute type 1 has an invalid length. [ 907.910166][ T2921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 907.998886][ T29] audit: type=1804 audit(1777190100.659:26): pid=2921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7254" name="/newroot/205/cgroup.controllers" dev="tmpfs" ino=1068 res=1 errno=0 [ 908.043720][ T2931] bond4: (slave veth0_to_bond): making interface the new active one [ 908.070801][ T29] audit: type=1800 audit(1777190100.659:27): pid=2921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7254" name="cgroup.controllers" dev="tmpfs" ino=1068 res=0 errno=0 [ 908.106079][ T2931] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 908.199630][ T2940] bond4: entered promiscuous mode [ 908.205028][ T2940] veth0_to_bond: entered promiscuous mode [ 908.216020][ T2940] bond4: entered allmulticast mode [ 908.230667][ T2940] veth0_to_bond: entered allmulticast mode [ 908.283184][ T2948] pimreg: entered allmulticast mode [ 908.385590][ T2917] lo speed is unknown, defaulting to 1000 [ 909.070935][ T2992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 909.120252][ T2992] netlink: 'syz.0.7269': attribute type 2 has an invalid length. [ 909.358815][ T3012] netlink: 'syz.0.7274': attribute type 1 has an invalid length. [ 909.358815][ T3010] netlink: 'syz.0.7274': attribute type 1 has an invalid length. [ 909.549109][ T3027] tunl0: Caught tx_queue_len zero misconfig [ 909.657493][ T3033] __nla_validate_parse: 13 callbacks suppressed [ 909.657512][ T3033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7278'. [ 909.708196][ T3039] bridge0: port 3(erspan0) entered blocking state [ 909.726040][ T3033] xt_cluster: node mask cannot exceed total number of nodes [ 909.740519][ T3039] bridge0: port 3(erspan0) entered disabled state [ 909.776208][ T3039] erspan0: entered allmulticast mode [ 909.873784][ T3039] erspan0: left allmulticast mode [ 909.901584][ T3039] bridge0: port 3(erspan0) entered disabled state [ 909.971417][ T3062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7283'. [ 910.389642][ T3082] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 910.452516][ T3078] syzkaller1: entered promiscuous mode [ 910.471121][ T3078] syzkaller1: entered allmulticast mode [ 910.673080][ T3098] xt_cgroup: path and classid specified [ 911.417972][ T3144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7302'. [ 911.428121][ T3144] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7302'. [ 911.443816][ T3145] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 911.530384][ T3149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7304'. [ 911.646730][ T3149] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 911.684573][ T3149] bond6 (unregistering): Released all slaves [ 911.966544][T29450] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.991112][T29450] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.041767][T29450] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.075971][T29450] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.078878][ T3167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7308'. [ 912.233572][ T3184] netlink: 'syz.4.7310': attribute type 7 has an invalid length. [ 912.574985][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.582387][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.608250][ T3167] bridge0: left allmulticast mode [ 912.758726][ T3194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7312'. [ 912.978003][ T3167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.010268][ T3167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.169238][ T3167] vlan0: left promiscuous mode [ 913.309560][ T3167] macvlan2: left promiscuous mode [ 913.321268][ T3167] macvlan2: left allmulticast mode [ 913.336401][ T3167] macsec0: left promiscuous mode [ 913.352816][ T3167] gre1: left promiscuous mode [ 913.388980][T29450] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.423009][T29450] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.465803][T29450] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.499784][T29450] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.529770][T29450] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.565718][T29450] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.574120][ T3206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.593642][T29450] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.628548][T29450] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.704400][ T3206] lo: entered allmulticast mode [ 913.882371][ T3224] lo speed is unknown, defaulting to 1000 [ 913.990316][ T3231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7320'. [ 914.041783][ T3242] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 914.064910][ T3242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.309979][ T3255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7325'. [ 914.321656][ T3231] lo speed is unknown, defaulting to 1000 [ 914.502925][ T3265] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7327'. [ 915.690057][ T3340] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 915.876516][ T3350] batman_adv: batadv0: Adding interface: ipvlan1 [ 915.893843][ T3350] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.961477][ T3350] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 916.044271][ T3353] __nla_validate_parse: 3 callbacks suppressed [ 916.044289][ T3353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7346'. [ 916.214705][ T3355] lo speed is unknown, defaulting to 1000 [ 916.583871][T25633] IPVS: starting estimator thread 0... [ 916.695973][ T3380] IPVS: using max 29 ests per chain, 69600 per kthread [ 916.922771][ T3399] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7357'. [ 916.935283][ T3396] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7356'. [ 917.392246][ T3436] tipc: Enabled bearer , priority 0 [ 917.421615][ T3436] syzkaller0: entered promiscuous mode [ 917.446033][ T3436] syzkaller0: entered allmulticast mode [ 917.514373][ T3436] tipc: Resetting bearer [ 917.560357][ T3448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.590235][ T3436] tipc: Disabling bearer [ 917.748653][ T3462] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 917.801602][ T3466] blkio.reset_stats is deprecated [ 917.833470][ T3460] tipc: Enabling of bearer rejected, already enabled [ 918.225109][ T3493] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.7381'. [ 918.256143][ T3493] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.7381'. [ 918.421923][ T3503] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 918.561675][ T3503] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 919.282023][ T3559] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 920.102201][ T3587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7399'. [ 920.157145][ T3592] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7399'. [ 920.224466][ T68] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.272933][ T68] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.303776][ T68] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.318032][ T3600] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7402'. [ 920.349418][ T68] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.366577][ T3600] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7402'. [ 920.898337][ T3632] netlink: 'syz.0.7410': attribute type 1 has an invalid length. [ 920.933231][ T3632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7410'. [ 921.083088][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7415'. [ 921.097764][ T3645] netlink: 356 bytes leftover after parsing attributes in process `syz.4.7415'. [ 921.164465][ T3649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7416'. [ 921.302691][ T3662] macvtap0: entered promiscuous mode [ 921.358315][ T3660] lo speed is unknown, defaulting to 1000 [ 921.365844][ T3662] macvtap0: left promiscuous mode [ 921.437550][ T3669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7421'. [ 921.739072][ T3660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7418'. [ 921.771352][ T3687] veth1_to_bridge: entered allmulticast mode [ 921.778781][ T3687] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 921.798480][ T3687] netlink: 'syz.2.7424': attribute type 1 has an invalid length. [ 921.896426][ T3689] netlink: 'syz.1.7425': attribute type 10 has an invalid length. [ 921.917964][ T3689] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7425'. [ 922.030574][ T3690] vlan4: entered promiscuous mode [ 922.090233][ T3699] netlink: 'syz.4.7427': attribute type 4 has an invalid length. [ 922.099772][ T3699] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7427'. [ 922.111753][ T3693] syzkaller1: entered promiscuous mode [ 922.130429][ T3693] syzkaller1: entered allmulticast mode [ 922.148509][ T3699] .`: renamed from bond0 [ 922.402873][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7434'. [ 922.684664][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7439'. [ 922.695028][ T3740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.789151][ T3739] macsec1: entered promiscuous mode [ 922.822366][ T3739] mac80211_hwsim hwsim72 wlan1: entered promiscuous mode [ 923.094176][ T3770] netlink: 'syz.4.7445': attribute type 3 has an invalid length. [ 923.128701][ T3770] netlink: 'syz.4.7445': attribute type 3 has an invalid length. [ 923.146974][ T3764] xt_CT: No such helper "snmp_trap" [ 923.369434][ T3786] syzkaller0: entered promiscuous mode [ 923.381315][ T3786] syzkaller0: entered allmulticast mode [ 923.413176][ T3786] tipc: Enabled bearer , priority 0 [ 923.459421][ T3783] tipc: Resetting bearer [ 923.539210][ T3783] tipc: Disabling bearer [ 923.570024][ T3790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7450'. [ 923.751663][ T3791] bridge2: port 1(veth0_to_bond) entered blocking state [ 923.770420][ T3791] bridge2: port 1(veth0_to_bond) entered disabled state [ 923.798386][ T3791] veth0_to_bond: entered allmulticast mode [ 923.819360][ T3791] veth0_to_bond: entered promiscuous mode [ 924.092329][ T3810] netlink: 'syz.4.7453': attribute type 1 has an invalid length. [ 924.247753][ T3810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.299978][ T3814] vlan2: entered promiscuous mode [ 924.311434][ T3814] gretap0: entered promiscuous mode [ 924.417063][ T3821] syzkaller1: entered promiscuous mode [ 924.433237][ T3821] syzkaller1: entered allmulticast mode [ 924.502590][ T3824] netlink: 'syz.1.7456': attribute type 21 has an invalid length. [ 924.529510][ T3828] siw: device registration error -23 [ 924.748718][ T3837] syzkaller1: entered promiscuous mode [ 924.760814][ T3837] syzkaller1: entered allmulticast mode [ 925.244479][ T3864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 925.344753][ T3861] syzkaller0: entered promiscuous mode [ 925.383685][ T3861] syzkaller0: entered allmulticast mode [ 925.581412][ T3883] 5Ò: entered promiscuous mode [ 925.602959][ T5211] udevd[5211]: worker [23139] /devices/virtual/block/nbd4 is taking a long time [ 925.699361][ T3894] sctp: [Deprecated]: syz.2.7476 (pid 3894) Use of int in max_burst socket option. [ 925.699361][ T3894] Use struct sctp_assoc_value instead [ 925.739311][ T3895] sctp: [Deprecated]: syz.2.7476 (pid 3895) Use of int in max_burst socket option. [ 925.739311][ T3895] Use struct sctp_assoc_value instead [ 926.572991][ T3920] bond5 (unregistering): Released all slaves [ 927.211679][ T3944] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 927.240446][ T3946] veth1_to_team: Caught tx_queue_len zero misconfig [ 927.540472][ T25] block nbd4: Possible stuck request ffff888027720000: control (read@0,1024B). Runtime 90 seconds [ 927.553401][ T25] block nbd4: Possible stuck request ffff8880277201c0: control (read@1024,1024B). Runtime 90 seconds [ 927.566250][ T25] block nbd4: Possible stuck request ffff888027720380: control (read@2048,1024B). Runtime 90 seconds [ 927.577602][ T25] block nbd4: Possible stuck request ffff888027720540: control (read@3072,1024B). Runtime 90 seconds [ 927.758722][ T3968] __nla_validate_parse: 6 callbacks suppressed [ 927.758740][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7500'. [ 928.168048][ T3990] netlink: 'syz.1.7505': attribute type 29 has an invalid length. [ 928.282485][ T3996] xt_limit: Overflow, try lower: 268435456/134217728 [ 928.291480][ T3996] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004 [ 928.782074][ T4014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7511'. [ 929.160525][ T4033] tipc: Enabled bearer , priority 0 [ 929.230690][ T4033] syzkaller0: entered promiscuous mode [ 929.260011][ T4033] syzkaller0: entered allmulticast mode [ 929.301278][ T4042] bridge6: entered promiscuous mode [ 929.314279][ T4042] bridge6: entered allmulticast mode [ 929.449054][ T4033] tipc: Resetting bearer [ 929.484127][ T4032] tipc: Resetting bearer [ 929.517097][ T4032] tipc: Disabling bearer [ 929.608807][ T4056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7521'. [ 929.912528][ T4062] macsec1: entered promiscuous mode [ 929.948965][ T4067] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 929.973037][ T4067] bond4: (slave vcan0): Error -95 calling set_mac_address [ 930.117130][ T4084] netlink: 388 bytes leftover after parsing attributes in process `syz.1.7525'. [ 930.310015][ T4082] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 930.327785][ T4082] syzkaller1: linktype set to 780 [ 930.459430][ T4095] ip6t_srh: unknown srh invflags BA61 [ 930.481125][ T4095] ip6t_srh: unknown srh invflags BA61 [ 930.505248][ T4091] lo speed is unknown, defaulting to 1000 [ 930.516230][ T4095] ip6t_srh: unknown srh invflags BA61 [ 931.333960][ T4135] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7538'. [ 931.334363][ T4134] netlink: 'syz.0.7535': attribute type 2 has an invalid length. [ 931.391017][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 931.421823][ T4134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7535'. [ 931.503051][ T4142] tipc: Enabled bearer , priority 0 [ 931.520574][ T4142] syzkaller0: entered promiscuous mode [ 931.532589][ T4142] syzkaller0: entered allmulticast mode [ 931.583129][ T4142] tipc: Resetting bearer [ 931.626076][ T4142] syzkaller1: entered promiscuous mode [ 931.651290][ T4142] syzkaller1: entered allmulticast mode [ 931.723121][ T4140] tipc: Resetting bearer [ 931.832442][ T4140] tipc: Disabling bearer [ 931.968703][ T4164] syzkaller1: entered promiscuous mode [ 931.974347][ T4164] syzkaller1: entered allmulticast mode [ 932.027475][ T4164] veth6: entered allmulticast mode [ 932.212289][ T4170] netlink: 'syz.0.7547': attribute type 12 has an invalid length. [ 932.503743][ T4172] lo speed is unknown, defaulting to 1000 [ 932.533929][ T4184] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7549'. [ 932.566774][ T4186] x_tables: duplicate underflow at hook 1 [ 932.765106][ T4193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7552'. [ 932.947756][ T4193] bond6: entered promiscuous mode [ 932.961400][ T4193] 8021q: adding VLAN 0 to HW filter on device bond6 [ 933.030895][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7555'. [ 933.048303][ T4210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7555'. [ 933.230314][ T4220] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7558'. [ 934.027809][ T4257] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 934.043653][ T4257] syzkaller1: linktype set to 270 [ 934.493557][ T4278] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7572'. [ 934.604319][ T4282] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 934.976722][ T4285] lo speed is unknown, defaulting to 1000 [ 935.261583][ T4291] ip6tnl0: Caught tx_queue_len zero misconfig [ 935.279910][ T4291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7577'. [ 935.434057][ T4285] lo speed is unknown, defaulting to 1000 [ 935.899445][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7579'. [ 935.974893][ T4313] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7582'. [ 936.500619][ C1] ================================================================== [ 936.508714][ C1] BUG: KASAN: slab-use-after-free in ax25_send_frame+0x67c/0x9f0 [ 936.516446][ C1] Read of size 7 at addr ffff88805451e808 by task syz-executor/29847 [ 936.524510][ C1] [ 936.526833][ C1] CPU: 1 UID: 0 PID: 29847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 936.526860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 936.526872][ C1] Call Trace: [ 936.526880][ C1] [ 936.526889][ C1] dump_stack_lvl+0xe8/0x150 [ 936.526919][ C1] print_address_description+0x55/0x1e0 [ 936.526946][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 936.526968][ C1] print_report+0x58/0x70 [ 936.526992][ C1] kasan_report+0x117/0x150 [ 936.527017][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 936.527042][ C1] kasan_check_range+0x264/0x2c0 [ 936.527067][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 936.527091][ C1] __asan_memcpy+0x29/0x70 [ 936.527110][ C1] ax25_send_frame+0x67c/0x9f0 [ 936.527132][ C1] ? ax25_send_frame+0x326/0x9f0 [ 936.527157][ C1] rose_t0timer_expiry+0x255/0x560 [ 936.527187][ C1] call_timer_fn+0x192/0x5e0 [ 936.527204][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 936.527230][ C1] ? call_timer_fn+0xd4/0x5e0 [ 936.527247][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 936.527269][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 936.527292][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 936.527320][ C1] __run_timer_base+0x652/0x8b0 [ 936.527346][ C1] ? ktime_get+0x45/0x220 [ 936.527374][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 936.527408][ C1] run_timer_softirq+0xb7/0x170 [ 936.527434][ C1] handle_softirqs+0x22a/0x840 [ 936.527462][ C1] ? __irq_exit_rcu+0xca/0x220 [ 936.527497][ C1] __irq_exit_rcu+0xca/0x220 [ 936.527524][ C1] irq_exit_rcu+0x9/0x30 [ 936.527551][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 936.527575][ C1] [ 936.527582][ C1] [ 936.527588][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 936.527609][ C1] RIP: 0010:down_write+0x103/0x200 [ 936.527625][ C1] Code: 0f b1 0b 0f 85 c7 00 00 00 48 c7 c0 c0 b9 33 90 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 d9 00 00 00 83 3d 6f ee 78 04 00 74 28 <65> 8b 05 56 4a 86 07 85 c0 75 1d 65 8b 05 cb 04 86 07 a9 ff ff ff [ 936.527643][ C1] RSP: 0018:ffffc9000547fcc0 EFLAGS: 00000202 [ 936.527659][ C1] RAX: 0000000000000000 RBX: ffff888025836298 RCX: 0000000000000001 [ 936.527673][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000547fce0 [ 936.527685][ C1] RBP: ffffc9000547fd40 R08: ffffc9000547fce7 R09: 1ffff92000a8ff9c [ 936.527698][ C1] R10: dffffc0000000000 R11: fffff52000a8ff9d R12: 1ffff92000a8ff98 [ 936.527714][ C1] R13: 1ffff11005e13573 R14: ffffc9000547fce0 R15: dffffc0000000000 [ 936.527735][ C1] ? __pfx_down_write+0x10/0x10 [ 936.527755][ C1] vfs_unlink+0xed/0x6c0 [ 936.527785][ C1] filename_unlinkat+0x3cd/0x610 [ 936.527815][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 936.527844][ C1] ? do_getname+0x151/0x250 [ 936.527870][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.527888][ C1] __se_sys_unlink+0x2e/0x140 [ 936.527914][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.527933][ C1] do_syscall_64+0x15f/0xf80 [ 936.527957][ C1] ? trace_irq_disable+0x3b/0x140 [ 936.527982][ C1] ? clear_bhb_loop+0x40/0x90 [ 936.528004][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.528021][ C1] RIP: 0033:0x7f5d2cf9bec7 [ 936.528037][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 936.528052][ C1] RSP: 002b:00007fff96823798 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 936.528072][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d2cf9bec7 [ 936.528084][ C1] RDX: 00007fff968237c0 RSI: 00007fff96823850 RDI: 00007fff96823850 [ 936.528098][ C1] RBP: 00007fff96823850 R08: 00007fff96824850 R09: 00000000ffffffff [ 936.528111][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff968248e0 [ 936.528123][ C1] R13: 00007f5d2d032120 R14: 00000000000e49f5 R15: 00007fff96824920 [ 936.528144][ C1] [ 936.528150][ C1] [ 936.905784][ C1] Allocated by task 28716: [ 936.910192][ C1] kasan_save_track+0x3e/0x80 [ 936.914869][ C1] __kasan_kmalloc+0x93/0xb0 [ 936.919457][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 936.924831][ C1] rose_add_node+0x23c/0xf00 [ 936.929428][ C1] rose_rt_ioctl+0xd35/0x12a0 [ 936.934115][ C1] rose_ioctl+0x3fb/0x8f0 [ 936.938447][ C1] sock_do_ioctl+0x101/0x320 [ 936.943039][ C1] sock_ioctl+0x5c6/0x7f0 [ 936.947363][ C1] __se_sys_ioctl+0xfc/0x170 [ 936.951951][ C1] do_syscall_64+0x15f/0xf80 [ 936.956540][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.962429][ C1] [ 936.964745][ C1] Freed by task 4341: [ 936.968711][ C1] kasan_save_track+0x3e/0x80 [ 936.973383][ C1] kasan_save_free_info+0x46/0x50 [ 936.978396][ C1] __kasan_slab_free+0x5c/0x80 [ 936.983161][ C1] kfree+0x1c5/0x640 [ 936.987049][ C1] rose_timer_expiry+0x4cb/0x600 [ 936.991981][ C1] call_timer_fn+0x192/0x5e0 [ 936.996564][ C1] __run_timer_base+0x652/0x8b0 [ 937.001412][ C1] run_timer_softirq+0xb7/0x170 [ 937.006269][ C1] handle_softirqs+0x22a/0x840 [ 937.011032][ C1] __irq_exit_rcu+0xca/0x220 [ 937.015625][ C1] irq_exit_rcu+0x9/0x30 [ 937.019874][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 937.025509][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 937.031483][ C1] [ 937.033797][ C1] The buggy address belongs to the object at ffff88805451e800 [ 937.033797][ C1] which belongs to the cache kmalloc-512 of size 512 [ 937.047840][ C1] The buggy address is located 8 bytes inside of [ 937.047840][ C1] freed 512-byte region [ffff88805451e800, ffff88805451ea00) [ 937.061460][ C1] [ 937.063779][ C1] The buggy address belongs to the physical page: [ 937.070179][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805451ec00 pfn:0x5451c [ 937.080237][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 937.088726][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 937.097217][ C1] page_type: f5(slab) [ 937.101189][ C1] raw: 00fff00000000240 ffff88813fe2ec80 ffffea000072d710 ffffea0001518110 [ 937.109765][ C1] raw: ffff88805451ec00 0000000800100005 00000000f5000000 0000000000000000 [ 937.118341][ C1] head: 00fff00000000240 ffff88813fe2ec80 ffffea000072d710 ffffea0001518110 [ 937.127002][ C1] head: ffff88805451ec00 0000000800100005 00000000f5000000 0000000000000000 [ 937.135664][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 937.144336][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 937.152988][ C1] page dumped because: kasan: bad access detected [ 937.159395][ C1] page_owner tracks the page as allocated [ 937.165100][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6885, tgid 6881 (syz.1.191), ts 106525117532, free_ts 106511906148 [ 937.186369][ C1] post_alloc_hook+0x231/0x280 [ 937.191143][ C1] get_page_from_freelist+0x24ba/0x2540 [ 937.196691][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 937.202495][ C1] allocate_slab+0x77/0x660 [ 937.206996][ C1] refill_objects+0x339/0x3d0 [ 937.211672][ C1] __pcs_replace_empty_main+0x321/0x720 [ 937.217213][ C1] __kmalloc_noprof+0x474/0x760 [ 937.222061][ C1] tnode_new+0xc3/0x3b0 [ 937.226208][ C1] resize+0x826/0x2590 [ 937.230277][ C1] fib_insert_alias+0xdb3/0x1100 [ 937.235211][ C1] fib_trie_unmerge+0x310/0xcd0 [ 937.240063][ C1] fib_unmerge+0xc5/0x360 [ 937.244388][ C1] fib4_rule_configure+0x2e2/0xa50 [ 937.249501][ C1] fib_newrule+0x5d0/0x1030 [ 937.253999][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 937.258941][ C1] netlink_rcv_skb+0x232/0x4b0 [ 937.263703][ C1] page last free pid 6882 tgid 6881 stack trace: [ 937.270018][ C1] __free_frozen_pages+0xbc7/0xd30 [ 937.275123][ C1] stack_depot_save_flags+0x40e/0x810 [ 937.280491][ C1] kasan_save_track+0x4f/0x80 [ 937.285165][ C1] __kasan_kmalloc+0x93/0xb0 [ 937.289759][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 937.295133][ C1] __ipv6_dev_mc_inc+0x44f/0xa50 [ 937.300069][ C1] ipv6_add_dev+0xe34/0x13a0 [ 937.304673][ C1] addrconf_notify+0x771/0x1050 [ 937.309528][ C1] notifier_call_chain+0x1ad/0x3d0 [ 937.314640][ C1] register_netdevice+0x18c9/0x1ec0 [ 937.319848][ C1] ip6gre_newlink_common+0x403/0x5b0 [ 937.325146][ C1] ip6erspan_newlink+0x48b/0x870 [ 937.330088][ C1] rtnl_newlink_create+0x329/0xb70 [ 937.335220][ C1] rtnl_newlink+0x166a/0x1bb0 [ 937.339899][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 937.344844][ C1] netlink_rcv_skb+0x232/0x4b0 [ 937.349614][ C1] [ 937.351934][ C1] Memory state around the buggy address: [ 937.357561][ C1] ffff88805451e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 937.365615][ C1] ffff88805451e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 937.373665][ C1] >ffff88805451e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 937.381719][ C1] ^ [ 937.386046][ C1] ffff88805451e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 937.394112][ C1] ffff88805451e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 937.402164][ C1] ================================================================== [ 937.410330][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 937.417539][ C1] CPU: 1 UID: 0 PID: 29847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 937.427098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.437161][ C1] Call Trace: [ 937.440445][ C1] [ 937.443297][ C1] vpanic+0x56c/0xa60 [ 937.447297][ C1] ? __pfx_vpanic+0x10/0x10 [ 937.451813][ C1] ? irqentry_exit+0x218/0x730 [ 937.456594][ C1] panic+0xc5/0xd0 [ 937.460312][ C1] ? __pfx_panic+0x10/0x10 [ 937.464728][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 937.469670][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 937.474611][ C1] check_panic_on_warn+0x89/0xb0 [ 937.479552][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 937.484487][ C1] end_report+0x73/0x170 [ 937.488734][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 937.493671][ C1] kasan_report+0x128/0x150 [ 937.498177][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 937.503127][ C1] kasan_check_range+0x264/0x2c0 [ 937.508067][ C1] ? ax25_send_frame+0x67c/0x9f0 [ 937.513012][ C1] __asan_memcpy+0x29/0x70 [ 937.517427][ C1] ax25_send_frame+0x67c/0x9f0 [ 937.522190][ C1] ? ax25_send_frame+0x326/0x9f0 [ 937.527132][ C1] rose_t0timer_expiry+0x255/0x560 [ 937.532250][ C1] call_timer_fn+0x192/0x5e0 [ 937.536839][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 937.542478][ C1] ? call_timer_fn+0xd4/0x5e0 [ 937.547154][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 937.552263][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 937.557459][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 937.563095][ C1] __run_timer_base+0x652/0x8b0 [ 937.567953][ C1] ? ktime_get+0x45/0x220 [ 937.572290][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 937.577675][ C1] run_timer_softirq+0xb7/0x170 [ 937.582533][ C1] handle_softirqs+0x22a/0x840 [ 937.587303][ C1] ? __irq_exit_rcu+0xca/0x220 [ 937.592082][ C1] __irq_exit_rcu+0xca/0x220 [ 937.596675][ C1] irq_exit_rcu+0x9/0x30 [ 937.600922][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 937.606554][ C1] [ 937.609480][ C1] [ 937.612407][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 937.618383][ C1] RIP: 0010:down_write+0x103/0x200 [ 937.623488][ C1] Code: 0f b1 0b 0f 85 c7 00 00 00 48 c7 c0 c0 b9 33 90 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 d9 00 00 00 83 3d 6f ee 78 04 00 74 28 <65> 8b 05 56 4a 86 07 85 c0 75 1d 65 8b 05 cb 04 86 07 a9 ff ff ff [ 937.643090][ C1] RSP: 0018:ffffc9000547fcc0 EFLAGS: 00000202 [ 937.649157][ C1] RAX: 0000000000000000 RBX: ffff888025836298 RCX: 0000000000000001 [ 937.657160][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000547fce0 [ 937.665128][ C1] RBP: ffffc9000547fd40 R08: ffffc9000547fce7 R09: 1ffff92000a8ff9c [ 937.673098][ C1] R10: dffffc0000000000 R11: fffff52000a8ff9d R12: 1ffff92000a8ff98 [ 937.681075][ C1] R13: 1ffff11005e13573 R14: ffffc9000547fce0 R15: dffffc0000000000 [ 937.689056][ C1] ? __pfx_down_write+0x10/0x10 [ 937.693924][ C1] vfs_unlink+0xed/0x6c0 [ 937.698172][ C1] filename_unlinkat+0x3cd/0x610 [ 937.703116][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 937.708585][ C1] ? do_getname+0x151/0x250 [ 937.713095][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.719156][ C1] __se_sys_unlink+0x2e/0x140 [ 937.723835][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.729896][ C1] do_syscall_64+0x15f/0xf80 [ 937.734491][ C1] ? trace_irq_disable+0x3b/0x140 [ 937.739518][ C1] ? clear_bhb_loop+0x40/0x90 [ 937.744195][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.750086][ C1] RIP: 0033:0x7f5d2cf9bec7 [ 937.754495][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 937.774096][ C1] RSP: 002b:00007fff96823798 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 937.782513][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d2cf9bec7 [ 937.790487][ C1] RDX: 00007fff968237c0 RSI: 00007fff96823850 RDI: 00007fff96823850 [ 937.798459][ C1] RBP: 00007fff96823850 R08: 00007fff96824850 R09: 00000000ffffffff [ 937.806424][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff968248e0 [ 937.814387][ C1] R13: 00007f5d2d032120 R14: 00000000000e49f5 R15: 00007fff96824920 [ 937.822366][ C1] [ 937.825999][ C1] Kernel Offset: disabled [ 937.830312][ C1] Rebooting in 86400 seconds..