last executing test programs: 3.672509638s ago: executing program 1 (id=1219): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/229, 0xe5, 0x0, &(0x7f0000000100)=""/8, 0x8}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.558824803s ago: executing program 1 (id=1220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f00000002c0)=0xc5, 0x4) recvmmsg(r2, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=""/25, 0x19}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x6, 0x0, 0x1, 0x7}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r8, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500163001000000080015"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x183c, 0x2c, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0xffff}, {0xffff, 0xffff}, {0x3, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0x378, 0x2, [@TCA_FLOW_ACT={0x374, 0x9, 0x0, 0x1, [@m_vlan={0x120, 0x15, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xec, 0x6, "4de4b2c837babd3db52287d1660d3d706e149e048b674a2de14aa3fd1a32e679469eb0a58a77233b90013cdead60b88577a9ba3bccb76d93f115fac0da7200f8642e982832ba971eae0a07cd8a26b80f1e2f42a6b57ccd557e1f60a8b9f5f4872dfe665fa68c0464087808fb8d5dbfafd743690749007fcb2550f785491a6879f1f75f2dd7cac7827f029265561fbd3e258225e40014ebec00be2b5e58c4edcb513bdefe35b4aacca074aa4e3af52c92090529859e3062363bdcf2acebf67b352ad797e25ebfb42659227e931ec0272c364eb92d72faae43a02657fe866fc7509324c54e2ee5ab7f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x250, 0x1e, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1fddce79, 0x5, 0x3, 0x4, 0x5}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2d, 0xad3, 0x20000000, 0x1, 0x7}, 0x6, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x0, 0x1ff, 0x140}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfffff902, 0x2, 0xe3, 0x4}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x5, 0x1, 0x1, 0x7}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd4b7, 0x401, 0xffffffffdffffffb, 0x101, 0x2}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1000, 0x6, 0x9, 0x40}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x1, 0x38, 0xfffffffb}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2, 0x6, 0x1, 0x2}, 0x1, r1}}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1458, 0x2, [@TCA_U32_ACT={0x1428, 0x7, [@m_skbmod={0xd0, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x7fffffff, 0xffffffffffffffff, 0xa956, 0xe}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8000, 0x7, 0x9, 0x5}, 0x5}}]}, {0x41, 0x6, "7ce4d1f931ada22514881559a0b49554fd620242939850aff86307b9da7b2e11b2c90d5cd47f3bbb070677c89aa2f50024898e30fc8f9e573798bcaf5c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x1068, 0xd, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x81}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6292}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffc}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xe4, 0x1a, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "7fd645905cd0fd4beecfa29efdf80d98"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x6}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x88, 0x6, "33ad02d46d0a414ebbf802af18c07aa7da151d24c5ce5ab508016b168093467516d9a2b2ced774776a8dfbf4a4ebdb80ae77eb1363709a19f9233001060c02622891ea3b6087a09b6af08e7e8fdcfba2a5e546ca4def478b478a8fce158c149039d68d919ada0a437b74ba409dae1e08a3c854f110477eb5d19ec5f99d8af21bcbfb1082"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x208, 0x3, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x80000001, 0x20000000, 0x1000, 0xfffffff9}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x15, 0x13911aa1, 0x10000000, 0x4, 0x401}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x8, 0x2, 0xfffff801}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xfffffff6, 0x0, 0x76, 0x7}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x3, 0x800, 0x3}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x3, 0x7, 0x80}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000001, 0x3, 0xfffffffc, 0x6}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x8000, 0x4, 0x7, 0x3}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfff, 0x5, 0xffffffff, 0x2}, 0x4, r8}}]}, {0xba, 0x6, "0ba5f2bfeaa0fc98b17c5a93fe5857238789219ad10abf9660f4038189449cfa0444469491756a9e06922ac3580104651477248445c847feee764f821a42acbc228323c0004781c52b73a3412f7fe759c8c4984dae0fd6b22f1bf411e299b897be0906a03eda6eb579568b371c072f4c6790d7e38ef1f78bdb3913f4c48c407ff62dab02ebb1eba2af6f0f73bb15c1c63fa12d882cdad713f700dc0121b3e1a9d71780bcc12dec6ed5f5704a1aab42e8755c1edd3847"}, {0xc, 0x7, {0xabf717562f08ffcc, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xfffb}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_INDEV={0x14, 0x8, 'dvmrp0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x97e}, @TCA_U32_MARK={0x10, 0xa, {0xffff0000, 0x6}}]}}]}, 0x183c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x5, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r9 = accept4$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x80000) setsockopt$packet_buf(r9, 0x107, 0x2, &(0x7f00000004c0)="30b1f0358af5a40efbb033bbd080e37b5acff50f70ad050d7484bf6cb3815e06cb2a2facace984f9bf555026dd3c5f81374889b5c5b60ce04c645b599b5e24b83a954d80e54a64477eef611b45bea928deb95e301eaa4bdfaed1b221826f5e7e76bce2e73bc9f7df3c92ea0b92c9f603b247322104a09170fa2ec81b0edde5bea241b5b14b3da999b134c040f97cc6facc8d8ebf22941b61e08b46ed71a8e1d42a09fdee6042490aacf9043f700b9d0abc2c3b26", 0xb4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x4800, 0x8200, 0xe1}, 0x10) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="018000000000000002004e22ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002024e22ac14141f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccd3992f2b55aac000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14141f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000002004e240a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00000000000000000000001700"/912], 0x390) 2.867071221s ago: executing program 0 (id=1229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x5, "b1012502e8ea93de1cb22c3b417d8278"}}}]}, 0x44}}, 0x20040080) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x91}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2) 2.840867349s ago: executing program 1 (id=1230): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000740400000000000000000000850000004100000085000000a00000009500000000000000093d93a89b0d5300f7d8abf610696bba2613b94a178ba4ba6e41b102c66fe4a76227a014e6f0ff24dc1e41178d227acc91e37241ff36da6c2905141beb0aa7bbdfb87bacc5bbf58d96a92eb59372d01d30ea19917f18a29f33fd47f06db7ac166e5cd1e1132d84c3494febe5c752aa2a7481cc1671a211c9c4b8a7186bea83e1aa5a57ed85545ccc43bd9ed6fad98c9ba364c7e1ecd852339f2a866f419eb6e9165914f95d5d60e1e45538fec3f19d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@empty, 0x3, 0x8, 0x4e24, 0x10, 0x2, 0x180}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0x9, 0x6, 0x9}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb", 0x1b}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x102}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xda, &(0x7f00000005c0)=""/218}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) recvmmsg(r0, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001900000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.603912556s ago: executing program 0 (id=1233): openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x4, 0xfffffffe, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0xf0, 0x3, 0x3, [{@multicast2, 0x1}, {@empty, 0xab29}]}, @rr={0x7, 0x7, 0xfe, [@rand_addr=0x64010102]}, @cipso={0x86, 0x18, 0x3, [{0x1, 0x12, "13822882b462ff4bdec4ff54469e59e0"}]}, @ssrr={0x89, 0xb, 0x77, [@broadcast, @private=0xa010102]}, @end, @noop]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x20, 0x72, 0x0, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x45) sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x24004080) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) setsockopt(r0, 0xffffc7e6, 0x8, &(0x7f00000001c0)="1e1bb1", 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in=@broadcast, @in=@empty, 0x4e24, 0x22c, 0x4e20, 0x5, 0xa, 0x80, 0x0, 0x62, r3, 0xee00}, {0x4, 0x3, 0x8, 0x7fffffffffffffff, 0x9, 0x7, 0x8, 0x1}, {0x2, 0x72, 0x9, 0xfffffffffffffffa}, 0x5, 0x6e6bbd, 0x2, 0x1, 0x3, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x6c}, 0x2, @in6=@empty, 0x3506, 0x3, 0x2, 0x3, 0x8aba, 0x2, 0x5}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet6(0xa, 0x5, 0x0) close(0x3) accept4(r1, 0x0, 0x0, 0x80000) connect$inet(r5, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.52246517s ago: executing program 3 (id=1234): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000640)={{r2, &(0x7f00000002c0), 0x50000, &(0x7f00000003c0)={@align=0x1, {0x6, 0x6, 0x7}}, 0x2, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000440)=0x9}, {[0x9, 0x10000, 0xa, 0xfe]}, 0x2, 0xe5, &(0x7f0000000540)=""/229}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@gettaction={0x34, 0x32, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x36, 0x1, 'sample\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) connect$packet(r3, &(0x7f00000006c0)={0x11, 0xf7, r5, 0x1, 0xa, 0x6, @broadcast}, 0xffffffffffffff26) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000077ca43060010c5b0a29191f00000d6bf306818435ce9000000040004005026480de89985003379ab9def53c85b4f84"], 0x1c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="180015680000000000860800000003020200000000000000"], 0x18}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRESHEX=r7, @ANYRES16=r7, @ANYRES8=r7, @ANYBLOB="aacb3234257961f6656216a102833440fbae16bf861487ce2175c2e771472389e2dbdd2cb2d19409db9a5c0a49e7681d19b8f50edda7d8585b3f6e3cb60d38065ff4abf4033fee133d0a38152df3f6bb205c25b2c4d191026856e3a7ee3e720070d54601925d702cdb63e58fcc0e145bfcee923730f825f57a57af3ea7fa9e78382d7a7bb7089c4efa50c6536ef0bd7916b1aff206bdddfef764b983a64db4126bc8590551185bc0dab1ce6149b622d9233be5039e86513f8a3fc97276cc8db66161d1c012b9df8fb813e5080aed1af32842d5d3a5a791b32a3160e7365d6cc6085674f575d79d0fee00dbe5f1a5aec59f40", @ANYBLOB="00bc6695d633fc79abb0404aee08ef0ef8402280f240cf449c4a27cacdc230abdf57701ff7207c042faa3c4fb4b0d7b214f276679190ee3cdcd70ab4f0a575ace9579613d1a63b838e2fb82e4ba57386459e6d8d75fcabe18a37b2cb05bcafbf887ee20ac6834117401bfe6b89f323", @ANYRES64=r7], 0x50) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x5, 0x0, 0x5}, {0x6, 0x4, 0x0, 0xfffffffe}]}, 0xffffffffffffff9f) socket$netlink(0x10, 0x3, 0xc) unshare(0x2c020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r10, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x85, &(0x7f00000061c0)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 2.174712689s ago: executing program 4 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x59, r2, 0x1, 0x8070bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x0, 0x2, 0xfe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x240040c1) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 2.029256153s ago: executing program 4 (id=1238): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80800) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$sock(r2, &(0x7f0000000a00)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000180)="5c0ae3c5e7c13535766a6767163a07", 0xf}, {&(0x7f00000001c0)="d1f88aa83619e6e4ae0f20800c7e51ad71b9ce064d5e666df2d626a5d1572b3a7c6083c9d65ca5e2f2e8b1fd1249eab5df22c9bc6560e254c3edbdd7bbcc8f8580661a85aac17cc237ebd3937749a88cf4d7108a769608eead8b89f3cd8fc3b8cc634bb8ba8cff2180c247b13fe1ff890c064603a6ec550a95b53a5728790101e39efe7e1bda65da1632313c0f51d399e369babdd077b7e2d0c04df936667a2801c4c8edddbaff740f1f7019846ef860a8e038e3a2a9", 0xb6}, {&(0x7f0000000280)="1f4e4a1895e78e24bbe2fa045653c4ade782e7decfd6ed6b940077c4972c7057de53b3ec4b73", 0x26}, {&(0x7f00000002c0)="66c68537632fab6e8443c8a71b06d075364009733c375c0b4a9bbf95d159c247c9d35d289194d4baa0eb0c43c44e99a29caea91dcc134602629fb0cc42a45830b80271e13b5d07bd26e6f0a6901805893d2de8beed8e6fe3ec4d795873dc8de87340aa16fce1999abf414f8d0793376e876af4bd82264acf17868db70427fc2f526e41df897fd520b61dc3579805b7242c2a1fb64fac5c2baa80dcbc71524c4ba4ee5158f2151137f730d9246123d1976390b209a4d267185710c27a25d41c14dc55beebb02effe9fe5877cd64c5ceb19ac130770c586256ba2b6fa2a0b5e7ec3d81222a2fff6ffb829d0f874562f0", 0xef}, {&(0x7f00000003c0)="6a8411e01cef42dc559d444e03bd4bd25fb51c741f6762be24a1d4105e1af204c75b1237ef64ddd2fdc9144334b1bb361ae54491a7b5a49e4d6de92ec7d6fd0ece57d5587cee3362e73676443d9d9834a25d5d7a05d08bea99e0cccabcb83e21c479286fe13ffd846643d861fae144baeb11c4b43fca617e5cd66357a274a9a87621806349b0d5c611b844d98bc216be84daa131356b4f2405df6575e1cb369fcca74d7b56fcc68774ef9115663bee0386c49841950e28bccac671507516080a4f34acb602ce0fb3fc68aae28aec1c0d512ecbdcbe3babce5a6a0619ac2c9f53", 0xe0}, {&(0x7f00000004c0)="5db988dccce83b8530291a6a554e2f998d1ba908fa0d6e2cadbc2df0e36d7835c5b5a953ab1710882900efc5b8bbcf5f28134e2c512d293728b7bd7a1c4a1798ec346c6098249ec9d6d42708cfbfc7cf2256607d6241f62abd236c945ddf473b6ab0f600bc3435fc0ee9aad10165221c823ffed51131be23e2d83e155dcccfcdb559588478360d51c7ba237fc35827a8d3dd6683c52c8249a8d630214e2e274921bf896621142d2f259e6c4807d008b5551ee99be20ad607dd7c2770bfdc51eee834970a00f14783bda699cda781080454397de3b62e0508979f", 0xda}, {&(0x7f00000005c0)="c173520824825ba2153ea3ff38e857b3204c164651c10f5f4004fbe151125610cad45415acd6c239865e920249fe9ae0337546b07e6fa5a02481403d555644890c9ddcf5b8c52ae4b67ec179f8601c413b608d46fcadd92cd079345ac1637f77c260a2c6406b5feecb53fd533d93133908fb4597d633c5d865886498886fe83847cb1f3178118cec04e2ab12aa60eeb7870f47ab6533940f447a97ec55878b3b857703397281db2baf760c27a024117513e843ec1cbb16a8190b1dafe1ac27471e6a5f9837bb38818f41c57e5a91673c3472b8f0d66328", 0xd7}, {&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="fee9ebefef47836fdd68e6d7205de98a0b45a2cd9ce0397b29a03019637e413c63f383917228e2eaef244b3c38b8b13284cb63f5a813b9ca7d554c18fc2fcc43af3e339a328c7b32a7e81b39a714e5a89e33b1bbe962d58af7ce49920892f81f6359ae1427ac2cda543a228bfcec0f9ca97a0e9b28206f8cd62b1a90fb2520984d364ae21c1b3ea0ad03f45f8398344d27071fe6b48bb88c2e6751236ba1da915cadd19def3ba5faa3e838c525c017ebd4b6a81bbc1a754693d7", 0xba}, {&(0x7f0000000880)="233053290fe4f77cd0d444d612010665c2181baa87c95cdc7fbbbd03d1aa2ee6af25542765fc5b9302a7adabe082e68d9f5c523adc57f8544957d242abab1f55bac3ab7c6a61bf21c4b32e1f05c786a1225c23cc", 0x54}], 0xa, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x18}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400d4}, 0x4000001) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4010841) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xb8, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x28040}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = accept$inet(r8, &(0x7f0000000fc0)={0x2, 0x0, @local}, &(0x7f0000001000)=0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000001040)=@ccm_128={{0x303}, "60d8b111227971b8", "1095e30b515c341216c586a0363824f1", "3cd17957", "70708e644a78cdf8"}, 0x28) syz_emit_ethernet(0x76, &(0x7f0000001080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void}, {@llc_tr={0x11, {@llc={0xfc, 0x2, "1bc0", "58caceb78050066981d13d82359c8208df4be0bfcabdb874c5376aa931da45dcf41cab0cb88818ed17efbb75fb699da440a050732cf9f0add722d4c6eeeac9bcc67980cbd49725854386840d4f7db959b17a003129a432e8b6ed58baf5d47e01"}}}}}, &(0x7f0000001100)={0x1, 0x3, [0xdeb, 0x67c, 0x823, 0xffffffff]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001180), r3) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f00000011c0)={0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x78, r11, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_FAMILY={0x5, 0xd, 0xb}]}, 0x78}, 0x1, 0x0, 0x0, 0x9c1cc7519edbfd1b}, 0x2404c010) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f0000001340)=@ccm_128={{0x303}, "9d0d7e0ba0251654", "667dd2ba320815cfc2fdf651b6eb1090", "880b2c59", "59394ab34e0cfc82"}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f0000001380)={r9, 0x0, 0x2, 0x8000}) sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'syztnl1\x00', r1, 0x2f, 0x3, 0x5, 0x0, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x0, 0x80000001}}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r10, 0x8010671f, &(0x7f0000001600)={&(0x7f0000001580)=""/84, 0x54}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'ip_vti0\x00', r14, 0x7, 0x1, 0x6, 0xd, {{0x11, 0x4, 0x1, 0x8, 0x44, 0x66, 0x0, 0x8, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0xc, 0xd8, 0x0, 0x6, [0x1ff, 0xb]}, @timestamp={0x44, 0x18, 0xc7, 0x0, 0xe, [0x40, 0x4, 0x40, 0x6, 0x80000001]}, @lsrr={0x83, 0xb, 0xec, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}]}, @end]}}}}}) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r13, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r15, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x718304e2e6a3e8af}, 0x4) 1.908344933s ago: executing program 2 (id=1239): r0 = socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000500ac000000000000004c001200726663343534332867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000080000000080028"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) shutdown(r1, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x48815, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x5, 0x0, @void}, 0x10) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r7, r5, 0x4, r8}, 0x10) (async) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4005, @local}, 0x10, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f00000000c0), 0x4) 1.586672808s ago: executing program 3 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff, 0x1, 0x2100}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 1.585994445s ago: executing program 1 (id=1241): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r0], 0x7c}}, 0x0) 1.520262956s ago: executing program 0 (id=1242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x2c}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x84800, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000340)='\f\xf0\x98\x90\xe6cU\xff\x8f@\x9ct\xf7cI\x93B\xa2\xea\xcb\x8e\xf0h\xa3\x84W\x1b\xa3R\x97pux\xef\x0e;\xc0\xc4\xf2\xd2\bg\xe10\xc6\xd0S\xed\x05\xe6\x13K\t\x18m\x15\xa2\xcf\x9e\x00k\xdcN\xb5[\x03\t(\xd3\x17\x03\xe5\x8d\x12\xb8p\x9f\xc6\x96\x95p\x00\xff\xa2\xbb\x1a\xc6p\xc7\"\x01Y\xdf?\xafX9\x19\x16#1v\xf7\x02\x85CT\xa6\x01\x9b\x83\x83\x8b\x99v\xc4I@\xe6~\x9f\a.4%\x86T>\x06\xefc_y\t\xbc\xb1\x8a+T\x97\xfe\x85\xf2\xca\xca\x8ae 6\xe0m\xaf)\xcd\x18\x7f(\x98\x92!\xdd%Y\f\xf6\xe4\x9c[*B1Crm\xa6\xb7qQ\xea~N\xef\f\vD0E\xf9b_\xeeKS[YB\xec\xb8ze\xcctz?\xb9\xdd\xcf\xe7\xdavM\xcfG\x968L!\xddN\xce,\xbdy\xcc\x84\x8a\xd6\xbb]\x90\xa33\x19M\xc3\x03_h\xe8\xd7\x9b\x99\xd2\x8fR\x1f\x81q\b\x9d:\xbfL\x8eG\"\x9d\x8d;BQ\a\x1bL\x06\xefc_y\t\xbc\xb1\x8a+T\x97\xfe\x85\xf2\xca\xca\x8ae 6\xe0m\xaf)\xcd\x18\x7f(\x98\x92!\xdd%Y\f\xf6\xe4\x9c[*B1Crm\xa6\xb7qQ\xea~N\xef\f\vD0E\xf9b_\xeeKS[YB\xec\xb8ze\xcctz?\xb9\xdd\xcf\xe7\xdavM\xcfG\x968L!\xddN\xce,\xbdy\xcc\x84\x8a\xd6\xbb]\x90\xa33\x19M\xc3\x03_h\xe8\xd7\x9b\x99\xd2\x8fR\x1f\x81q\b\x9d:\xbfL\x8eG\"\x9d\x8d;BQ\a\x1bL0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x100}, {0x81000, 0x800009, 0x40000000009, 0xffffffff, 0x100000000, 0x8ba, 0x200000003, 0x9}, {0x5, 0x0, 0xffffffffffff8000}, 0x5, 0x6e6bb1, 0x1, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in=@broadcast, 0x3503, 0x4, 0x8, 0x0, 0x9075, 0xf2, 0x7}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r10, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x7, [@union={0x8, 0x5, 0x0, 0x5, 0x0, 0x10001, [{0x2, 0x9ec9, 0x4}, {0x10, 0x5, 0x1}, {0x1, 0x3, 0xd20}, {0xf, 0x5, 0x7}, {0x2, 0x5, 0xfffffffb}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x7, 0x721c4373}, {0x4, 0x9}, {0x10, 0x2}, {0x9, 0x90c}, {0xb}, {0x10, 0x7}, {0xf, 0x3}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x1e, 0x5f]}}, &(0x7f00000004c0)=""/121, 0xab, 0x79, 0x0, 0x0, 0x10000}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x0, 0x1, 0xc39, 0x1a0, 0x20602, r11, 0x8, '\x00', r8, r12, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r8, @ANYBLOB="040012627269646765000004000280befd2dc409e9f4a05d8cf8acdbff7e012ee93db5bb3d4a20e9eb35691fe27e13e03b451cf1518c947345096cdc58438d889751bde6b4cff0217a33c54f8c65f8120e5ab974ddbe9249ea8a36dc02033fe632abe46f2c2d58cb7be26985e226b4fc36f56dd535feedf76799f8e43084a70ef6cfe42f8b53ed3f34eb1b35e03128cff87dc791c1eb71b4ec79d65b45ad"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 1.214303159s ago: executing program 2 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000340)=0xfc) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x44000000}}], 0x2, 0x20000084) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x40048c4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x40841) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 1.115348795s ago: executing program 1 (id=1248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x1c, r2, 0x701, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="911bbed0cec1364321ff943c54a1010027bd7000fedbc5252400"], 0x20}}, 0x400c880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r11, @ANYBLOB="24002d80050001"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x180000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010100000000000000000100ffff1400078008001240000000050500150009000000050001000600e7ff040005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r7, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2008080}, 0x41) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r14) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x30, r16, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0xc, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x801) r18 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r18, 0x29, 0x17, &(0x7f0000000080), 0x4) setsockopt$inet6_udp_int(r18, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r18, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}}], 0x1, 0xc040) 1.114610557s ago: executing program 4 (id=1249): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/21, 0x15, 0x0, &(0x7f0000000080)=""/251, 0xfb}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0xd, 0xffff}, {0xfff3, 0xffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0xc) r4 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r4, &(0x7f00000004c0)={0x2, 0x0, @empty}, &(0x7f0000000500)=0x10) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000540)) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000580)=0x992b) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000001480)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000000600)={0xe0c, 0x0, 0x5, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x1}, 0x9f, 0x8, 0x7, 0x800, 0x1, 'syz0\x00', "99e98f4e46e1d466dd6f40e46401e04e12675a2b113121ebfc946887e023c0ce", "f9c5cee39195dd522d54ef593dc7cccd034da99b309ef55e8231656a35bf25e3", [{0x8, 0x0, {0x0, 0x7fa7ddff}}, {0x1, 0x3, {0x2}}, {0x8, 0x1, {0x2, 0x6}}, {0x58, 0x4, {0x2, 0x5}}, {0x9d, 0x8, {0x1, 0x7}}, {0x5, 0x7, {0x1, 0xf5}}, {0x5, 0x3, {0x3, 0xffff2518}}, {0x1000, 0x4, {0x1, 0xe08c}}, {0x7, 0x2, {0x0, 0x7}}, {0x66dd, 0xb, {0x3, 0x3180}}, {0x5, 0x4, {0x1, 0x3}}, {0x200, 0x0, {0x3, 0x7fff}}, {0x2b49, 0x2, {0x2, 0x20000000}}, {0x2, 0x3, {0x0, 0x7}}, {0xe, 0x892, {0x1, 0xfbe}}, {0x9, 0x1, {0x3, 0x8}}, {0x8, 0x4000, {0x0, 0x3}}, {0x100, 0x401, {0x3, 0x8ebd}}, {0x81, 0x8, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xc513}}, {0x3, 0xd11, {0x2, 0xfffffff1}}, {0x98, 0x7fff, {0x0, 0x3}}, {0x0, 0x2, {0x2, 0x81}}, {0x5, 0x3, {0x1, 0x8}}, {0x0, 0x9, {0x2, 0x2}}, {0x800, 0x85a, {0x3, 0x1}}, {0x10, 0xee8, {0x1}}, {0x8, 0xb325, {0x1, 0x1000}}, {0x4b30, 0xd7a6, {0x1, 0xffff}}, {0xc, 0x3, {0x0, 0x8}}, {0x8001, 0x8, {0x0, 0x1777}}, {0x1, 0x800, {0x3, 0x4}}, {0x94, 0x3, {0x1, 0x7fff}}, {0x53, 0x48a, {0x2, 0x7}}, {0x401, 0x2, {0x1, 0x1ff}}, {0x0, 0x67, {0x2, 0x400}}, {0x9, 0x9, {0x1, 0x9}}, {0x2, 0x6, {0x0, 0x5e63}}, {0x1, 0x0, {0x1, 0x7}}, {0x2, 0x7, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x0, 0x4, 0x4, 0x4, 0x1c, 'syz1\x00', "17c55d0e31ab18d9a963cb46efc0168a95c21ce306057514cd81ad6d8c26b3d9", "524f4b992cb632efd81f2b8088adbec3c2199d2de8b0b2791260bd9cec32a5de", [{0x80, 0xf60, {0x3, 0x7ff}}, {0x1ff, 0x1, {0x3, 0x2}}, {0x5, 0x4, {0x3}}, {0xffff, 0x0, {0x0, 0x9}}, {0x72, 0x80, {0x1, 0x6}}, {0x7, 0xe, {0x1, 0x5b}}, {0x0, 0x5, {0x3}}, {0x9, 0xfffb}, {0x5, 0x6, {0x3, 0xa762}}, {0xdb, 0x6, {0x3, 0x3ff}}, {0x7f, 0x1, {0x2}}, {0x2e, 0x98f4, {0x2, 0x7}}, {0x2, 0x1, {0x0, 0x2}}, {0x1000, 0xc, {0x1, 0xb}}, {0xee, 0xffff, {0x3, 0xe}}, {0x73, 0x0, {0x1, 0x6}}, {0x101, 0x6, {0x2, 0x6c1e}}, {0xa, 0x101, {0x1, 0xa77}}, {0x10, 0x0, {0x3, 0x8}}, {0x0, 0xe, {0x0, 0x1}}, {0x6, 0x8, {0x0, 0x22}}, {0x334d, 0x3bf3, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0xfffffff4}}, {0x2, 0x94, {0x0, 0x9}}, {0xed8, 0x1b, {0x2, 0x42ff}}, {0x4, 0xa, {0x3, 0x77}}, {0x380, 0x9}, {0x5, 0x5, {0x0, 0x4}}, {0x5, 0x5, {0x1, 0x3ff}}, {0x6, 0xd, {0x2, 0x6d}}, {0x8, 0x7f}, {0x7, 0x0, {0x3, 0x6444}}, {0x10, 0x0, {0x3, 0x7}}, {0x5, 0xfff, {0x3, 0x6}}, {0x475, 0xfffb, {0x3, 0xc}}, {0x1000, 0x6, {0x2, 0x7}}, {0x1, 0x1, {0x2, 0x2}}, {0x9, 0x7, {0x2, 0x1000}}, {0x83f8, 0x4, {0x2, 0x1}}, {0xfffe, 0x0, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x401}, 0x9, 0x99, 0x6, 0x5, 0x24, 'syz1\x00', "b7207361ede9fcef283b574be1e4345c2baabec55e0ea34e3bf2b0b2d0e66e06", "d4e13f75d85146062e2e5cad25ba8360f8b4084ffb4e95de695ec648f428f3a6", [{0xff02, 0x9, {0x3, 0x5}}, {0x6, 0x6, {0x1, 0x5}}, {0x2, 0x401, {0x1, 0x100}}, {0x5, 0x6, {0x3}}, {0x8, 0x2, {0x3, 0x2}}, {0x2, 0x1, {0x1, 0x8}}, {0x1, 0x7, {0x1, 0x4}}, {0xff80, 0x8, {0x1, 0x1e}}, {0x2, 0x231, {0x0, 0xd}}, {0x6068, 0x4, {0x2, 0x6}}, {0x3, 0x7fff, {0x1, 0x10001}}, {0x1ff, 0x1, {0x0, 0x9}}, {0x9, 0x2, {0x0, 0x6}}, {0xb, 0xd, {0x3, 0x2}}, {0x8, 0xff, {0x3, 0x9}}, {0x4, 0x104c, {0x3, 0x1d}}, {0x7fff, 0x4}, {0x26c6, 0x1000, {0x1, 0x74}}, {0x9, 0xebf5, {0x3, 0x2}}, {0x9, 0x6, {0x2, 0x4}}, {0x3, 0x4, {0x2, 0x1}}, {0x3, 0xc62c, {0x0, 0x1}}, {0xffdd, 0x4, {0x1, 0x4}}, {0x9a, 0x100, {0x0, 0xb05}}, {0xfffe, 0x2, {0x0, 0x305a}}, {0x7, 0x8, {0x1, 0x1}}, {0x2, 0x0, {0x2, 0xfb}}, {0x4, 0x9, {0x1, 0xb}}, {0x3, 0x55, {0x5bab8d027cce9d8d, 0x6}}, {0x3aa6, 0x1, {0x5, 0x10001}}, {0x7, 0x6, {0x3, 0x9}}, {0x9, 0x68c, {0x0, 0x6}}, {0x1000, 0x3, {0x3, 0x80}}, {0x10, 0x7a69, {0x0, 0x79e}}, {0x93ff, 0x1, {0x3, 0x2}}, {0x1, 0x20f4, {0x1, 0x80000000}}, {0xf, 0x6, {0x1, 0x8}}, {0x0, 0x6, {0x1, 0x10000}}, {0x36, 0x2, {0x0, 0x2}}, {0x2, 0x4, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x6a, 0x6, 0xfffa, 0x9, 0x16, 'syz1\x00', "5faeef6e9748a39de85ecd3dc0e106fd1e35ba58af841513e19982029ba822c6", "8e4d62b9d2b61b29ba129fda0edd64c72627faa0ede7223b3fb1d2b2c25fe641", [{0xfffa, 0x9, {0x1}}, {0x9, 0xde, {0x0, 0x80000001}}, {0x2, 0x582e, {0x2, 0xf28d}}, {0x6, 0x2, {0x2, 0x8001}}, {0x47, 0x5, {0x0, 0x10000}}, {0x7c2a, 0xf96e, {0x4, 0x6}}, {0x9, 0xd4f7, {0x1}}, {0x40e, 0xa, {0x3, 0x100}}, {0x6, 0x1000, {0x3, 0x3ff}}, {0xc7a, 0x1, {0x1, 0x8}}, {0x8f, 0x3, {0x1, 0x7f}}, {0x7fff, 0x400, {0x0, 0x8}}, {0x8, 0x8001, {0x40abcb89222d5604, 0x5}}, {0x592f, 0x8000, {0x0, 0x3}}, {0x7f, 0xf, {0x1, 0x8e8}}, {0x98f, 0x7, {0x3, 0x6}}, {0x1, 0x7, {0x2, 0x6}}, {0x1ff, 0x81, {0x2, 0x7c}}, {0xfff8, 0x200, {0x0, 0xffffff7f}}, {0x1, 0xa5b, {0x0, 0x2}}, {0x5, 0x101, {0x2, 0xffff4723}}, {0x8000, 0x4ce2, {0x1, 0x6}}, {0x81, 0xac, {0x0, 0xa}}, {0x5, 0x2, {0x2, 0x6}}, {0xd0, 0x5, {0x3, 0x9}}, {0x5, 0x4, {0x1, 0x6}}, {0x53ae, 0x7, {0x0, 0x200}}, {0x2, 0x1c00, {0x2, 0x8}}, {0x3, 0x4, {0x1, 0x70}}, {0x5, 0xf97c, {0x157706b6417d98a8, 0x3}}, {0x4, 0xb48, {0x3, 0x6}}, {0x2, 0x1, {0x3, 0x2}}, {0x9dc, 0x92fd, {0x0, 0x6}}, {0xb, 0x3, {0x1, 0xe1}}, {0xfff, 0xfffa, {0x0, 0xffff}}, {0xfff, 0x8f0, {0x2, 0x7}}, {0x6, 0x4, {0x1, 0x3}}, {0x7, 0x8f26, {0x3, 0x7}}, {0x8, 0x800, {0x3, 0x800}}, {0x0, 0x8001, {0x2, 0x51e}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x8, 0xf, 0x7, 0x4, 0x27, 'syz0\x00', "4ba8917bc7245de1d33714aa9f5a7d140ae41e5d2bd794ee5e5680dab31d9ae5", "642d3571fc82ddef9ad480af906eb35a8eeeccdc33cf08e44af1d48505cd6d59", [{0x9, 0xff, {0x1}}, {0x8470, 0xfff8, {0x0, 0x582e}}, {0x0, 0x3, {0x1, 0xbf}}, {0xee28, 0xec2, {0x1, 0x10}}, {0xd, 0x6, {0x2, 0x4}}, {0x9, 0x4, {0x1, 0x6}}, {0xda5d, 0x0, {0x1, 0x8}}, {0x8, 0x4, {0x2, 0x7fffffff}}, {0x4, 0x2, {0x0, 0xffffffff}}, {0x1000, 0x1, {0x1, 0x4}}, {0xdd, 0x384, {0x3, 0x4}}, {0x100, 0x9, {0x3, 0x3}}, {0x3, 0xece, {0x1}}, {0x7, 0x0, {0x0, 0x2}}, {0x4, 0xfff7, {0x3, 0x1}}, {0xfc01, 0x0, {0x3, 0xfffffffc}}, {0x6, 0xff, {0x0, 0x3000000}}, {0x400, 0x7, {0x2, 0x1}}, {0x3, 0x0, {0x3, 0xfffffffc}}, {0xfffd, 0x0, {0x3, 0x7}}, {0x1, 0x200, {0x2, 0x9}}, {0x7fff, 0x0, {0x2, 0x2}}, {0x6, 0xc11, {0x2, 0xfff}}, {0x2, 0xa, {0x0, 0xa}}, {0xf, 0x3, {0x3, 0x10}}, {0xc37, 0x9, {0x2, 0x7}}, {0x81, 0x8, {0x1, 0xa}}, {0x6, 0x6, {0x1, 0x5}}, {0x6, 0x33b1, {0x3, 0x3}}, {0x400, 0xf429, {0x1, 0x8}}, {0x200, 0x6, {0x0, 0x400}}, {0x7, 0x9, {0x3, 0x80000001}}, {0x9, 0x4, {0x3, 0x1}}, {0x4f75, 0x1ff, {0x3, 0x533}}, {0x8, 0x2, {0x0, 0x1}}, {0x5, 0x400, {0x0, 0x7}}, {0x401, 0x81, {0x1, 0x55a}}, {0x6, 0x8001, {0x0, 0x6}}, {0x5, 0x100, {0x1, 0x6}}, {0x7fff, 0x1, {0x0, 0xa9b}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x8, 0xc6, 0xffff, 0x7, 0x9, 'syz0\x00', "d8fad5affd99ed9874cb4ae2871a8c8b6e0a931f4663d102f4a9bdf8d310f942", "b801dd61e3f0498852ebe0fcea597b82ac3a2152411526f85160bed5ff413b43", [{0x7, 0x8001, {0x1, 0x200}}, {0x4, 0xbcff, {0x3, 0x3}}, {0x6, 0xa400, {0x4}}, {0x95, 0x5, {0x0, 0x40}}, {0x9, 0x5, {0x1, 0x850}}, {0x76, 0x3, {0x2, 0x8}}, {0x9, 0x0, {0x1, 0x40}}, {0x1, 0x9, {0x1, 0x10001}}, {0x800, 0xf, {0x2, 0x800}}, {0x0, 0x7, {0x3, 0x227}}, {0xfffb, 0xd, {0x0, 0xf12b}}, {0x4, 0x3, {0x8e8b0a48c41a513c, 0x2}}, {0x6, 0x8, {0x3, 0xf428}}, {0x400, 0x401, {0x1, 0xd7}}, {0x1, 0x4, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x6}}, {0xd7fd, 0x9be, {0x0, 0x8}}, {0xfffc, 0x8, {0x1, 0x1}}, {0x1, 0x9, {0x3, 0x1}}, {0xff, 0xc, {0x1, 0x1}}, {0x1, 0x1, {0x1, 0x5}}, {0x6, 0x7, {0x0, 0x6}}, {0x6, 0x8000, {0x3, 0x7fff}}, {0xff, 0x2, {0x0, 0x9}}, {0x6, 0x956a, {0x0, 0x2}}, {0x2, 0x4, {0x1, 0x1}}, {0x131, 0x9, {0x0, 0x9}}, {0x0, 0x9, {0x3, 0x1000}}, {0x4, 0x1, {0x2, 0x4}}, {0x0, 0x1000, {0x2}}, {0x5, 0x2, {0x1, 0x7fff}}, {0x4, 0x7, {0x0, 0xfff}}, {0x1, 0x2af4, {0x1, 0x3}}, {0xce, 0x8, {0x1, 0x10000}}, {0xe526, 0x8, {0x1, 0x4a9}}, {0x81, 0x32c, {0x2, 0x8}}, {0x8001, 0xffff, {0x1, 0x2}}, {0x0, 0x1, {0x1, 0x5}}, {0x3ff, 0x1, {0x1, 0x6}}, {0x4fa, 0x6a, {0x2, 0x1}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x48000}, 0x8884) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001500)={0xffffffffffffffff}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001780)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1e, 0x24, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xef49}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@generic={0x81, 0x0, 0x9, 0x9, 0xfffff801}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @jmp={0x5, 0x1, 0x7, 0x0, 0x7, 0x100, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001680)='GPL\x00', 0x5, 0x6c, &(0x7f00000016c0)=""/108, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000017c0)=[r9], &(0x7f0000001800)=[{0x4, 0x2, 0xc, 0x2}, {0x0, 0x1, 0xf, 0xc}, {0x4, 0x2, 0x4, 0xc}, {0x5, 0x2, 0x1, 0xc}, {0x0, 0x1, 0x7}, {0x4, 0x4, 0x2, 0x3}, {0x0, 0x2, 0x4, 0x9}], 0x10, 0x81}, 0x94) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001940)=r10, 0x4) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f0000001980)=0x1, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, 0x0, 0x700, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44011}, 0x11) r13 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r13, 0x114, 0x8, &(0x7f0000001ac0)=0xffffffffffffffff, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000001b00)={'syzkaller1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8a}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x18}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x4a}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0xb}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000001cc0), &(0x7f0000001d00)=0x4) 1.114221759s ago: executing program 3 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xffffffffffffff47, 0x4, 0x62}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xc94}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xffffffffffffff47, 0x4, 0x62}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xc94}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) (async) 1.017103608s ago: executing program 2 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x0, 0xdad1124f55525050, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210025bd7200000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a802000018014000500b4ff08000e00040008000500010008fa040006"], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$sock_int(r1, 0x1, 0x29, 0x0, &(0x7f0000000240)) recvfrom$x25(r0, &(0x7f0000000280)=""/254, 0xfe, 0x2000, &(0x7f0000000380), 0x12) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x70bd28, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_CACHEINFO={0x14, 0x3, {0x2}}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 869.516278ms ago: executing program 4 (id=1252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6", 0xca}], 0x1}}], 0x1, 0x200880d8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, 0x0, 0x0) (async) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) 714.742638ms ago: executing program 0 (id=1253): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 651.379476ms ago: executing program 2 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000500000000000019078ac1e0001ac1414aa0b009078032c00004b00000000000000008900000a010101ac1414bb890fdeac1414aaac1414abac14141844088d0000000080006a971ab3dbc9ba18"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaa", @ANYRES32], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)=0x80000000, 0x4) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f00000005c0)=0x9, 0x4) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r5, 0x5) sendmsg$sock(r5, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4008000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7fffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 651.044425ms ago: executing program 3 (id=1255): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x64}}, 0x810) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="1117d4ad2f67d74fdff28de362b35f86843784e6b2b124a7"], 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 264.815781ms ago: executing program 4 (id=1256): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000000001050100000000000000000a0000052c0002800600034000040040000100000c000280050001002f0000000c0002800500010011000000e3db82698b179cdf1414160fcc811ed63e1c943a58b3e7dd0c6443308fa496be30efefe735210a9387a81700"/120], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000000a010101000000000000000000000000ac5414bb00000000000000000000000000000400100000000200231084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000400"/112], 0xb8}}, 0x0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x6e, &(0x7f00000001c0), 0x8) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200cc8c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback={0xff00000000000000}, 0x4}, 0x1c) close(0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 206.025652ms ago: executing program 1 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, &(0x7f00000001c0)=0x8000, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000300)="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", 0xff, 0x20000090, &(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x1, 0x8000, 0x0, 0x61, 0x1ff}, &(0x7f0000000480)=0x14) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000004c0)={'pimreg\x00', {0x2, 0x0, @initdev}}) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000500)={r7, 0x1ff, 0x7fff, 0x400, 0xe15, 0x6}, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r8, &(0x7f0000000540)="c58bc0090274", 0x6, 0x8000, &(0x7f0000000580)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @private0, 0x80000000}}, 0x24) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f00000006c0)={r5, &(0x7f00000005c0)='nl80211\x00', 0x40800, &(0x7f0000000600)={@align=0xe77, {0xf, 0x1, 0x3, 0xfff}}, 0x93, &(0x7f0000000640), &(0x7f0000000680)=0xfffffff9}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000700)={r4}) socket$inet_sctp(0x2, 0x1, 0x84) r10 = accept4$x25(r9, &(0x7f0000000740), &(0x7f0000000780)=0x12, 0x0) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f00000007c0)={'batadv0\x00', 0xfffffffffffffffe, 0x9}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000900)={'sit0\x00', &(0x7f00000008c0)={@rand_addr=0x64010101, 0x0, 0x0, 0x20, 0x0, [{@empty}, {@empty}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000940)={{0x2, 0x4e23, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x24, {0x2, 0x4e23, @multicast1}, 'pimreg1\x00'}) getpeername$unix(r9, &(0x7f00000009c0), &(0x7f0000000a40)=0x6e) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000a80)={@rand_addr, @multicast2}, &(0x7f0000000ac0)=0xc) 121.264531ms ago: executing program 0 (id=1258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) read(r2, &(0x7f0000000080)=""/5, 0x5) (async) write(r1, &(0x7f0000000140)=';r', 0x2) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x4000) 105.592599ms ago: executing program 3 (id=1259): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e0", 0x9}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe", 0x13}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000080)="a97c1897a1537536276908fc6ee46f93367e6a3dac2ee6c598d29835a6deae385b7b5f681c") 0s ago: executing program 2 (id=1260): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xad3}, &(0x7f0000000100)=0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 73.777454][ T5606] cgroup: Unknown subsys name 'net' [ 73.926692][ T5606] cgroup: Unknown subsys name 'cpuset' [ 73.935565][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.295552][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.456431][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.464257][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.473537][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.481879][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.500656][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.510271][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.517494][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.526802][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.534515][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.544609][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.552616][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.553308][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.573966][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.583261][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.592773][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.601419][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.607112][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.620743][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.629444][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.636996][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.646589][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.657077][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.665245][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.685104][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.696541][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.284947][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.292684][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.300231][ T5631] bridge_slave_0: entered allmulticast mode [ 79.307384][ T5631] bridge_slave_0: entered promiscuous mode [ 79.347712][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.355192][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.362338][ T5619] bridge_slave_0: entered allmulticast mode [ 79.371116][ T5619] bridge_slave_0: entered promiscuous mode [ 79.385045][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.392226][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.399452][ T5631] bridge_slave_1: entered allmulticast mode [ 79.406636][ T5631] bridge_slave_1: entered promiscuous mode [ 79.427737][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.435005][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.442402][ T5619] bridge_slave_1: entered allmulticast mode [ 79.449659][ T5619] bridge_slave_1: entered promiscuous mode [ 79.508943][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.552655][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.572558][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.593665][ T5621] Bluetooth: hci1: command tx timeout [ 79.599829][ T5634] Bluetooth: hci0: command tx timeout [ 79.621938][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.631293][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.638659][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.646051][ T5627] bridge_slave_0: entered allmulticast mode [ 79.653328][ T5627] bridge_slave_0: entered promiscuous mode [ 79.673066][ T5621] Bluetooth: hci2: command tx timeout [ 79.679380][ T5634] Bluetooth: hci3: command tx timeout [ 79.680524][ T5631] team0: Port device team_slave_0 added [ 79.690992][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.698354][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.705742][ T5618] bridge_slave_0: entered allmulticast mode [ 79.713826][ T5618] bridge_slave_0: entered promiscuous mode [ 79.738471][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.745750][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.753034][ T5627] bridge_slave_1: entered allmulticast mode [ 79.760027][ T5627] bridge_slave_1: entered promiscuous mode [ 79.766789][ T5634] Bluetooth: hci4: command tx timeout [ 79.779797][ T5631] team0: Port device team_slave_1 added [ 79.785679][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.792788][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.800121][ T5618] bridge_slave_1: entered allmulticast mode [ 79.807336][ T5618] bridge_slave_1: entered promiscuous mode [ 79.826590][ T5619] team0: Port device team_slave_0 added [ 79.869551][ T5619] team0: Port device team_slave_1 added [ 79.909021][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.929358][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.938787][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.946269][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.953533][ T5633] bridge_slave_0: entered allmulticast mode [ 79.960482][ T5633] bridge_slave_0: entered promiscuous mode [ 79.968567][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.975915][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.002045][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.016019][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.036790][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.046337][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.053857][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.061055][ T5633] bridge_slave_1: entered allmulticast mode [ 80.068130][ T5633] bridge_slave_1: entered promiscuous mode [ 80.075769][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.082737][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.109023][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.134976][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.141943][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.168001][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.214920][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.221975][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.248193][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.282144][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.293623][ T5618] team0: Port device team_slave_0 added [ 80.308093][ T5627] team0: Port device team_slave_0 added [ 80.325972][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.337457][ T5618] team0: Port device team_slave_1 added [ 80.364149][ T5627] team0: Port device team_slave_1 added [ 80.397799][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.404960][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.430944][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.456332][ T5631] hsr_slave_0: entered promiscuous mode [ 80.462749][ T5631] hsr_slave_1: entered promiscuous mode [ 80.482493][ T5633] team0: Port device team_slave_0 added [ 80.488922][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.496171][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.522729][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.545408][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.552367][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.578432][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.601516][ T5633] team0: Port device team_slave_1 added [ 80.624436][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.631497][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.657710][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.674611][ T5619] hsr_slave_0: entered promiscuous mode [ 80.680814][ T5619] hsr_slave_1: entered promiscuous mode [ 80.687099][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 80.693517][ T5619] Cannot create hsr debugfs directory [ 80.744009][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.751162][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.777216][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.820244][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.827305][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.853645][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.892785][ T5618] hsr_slave_0: entered promiscuous mode [ 80.899516][ T5618] hsr_slave_1: entered promiscuous mode [ 80.905786][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 80.911553][ T5618] Cannot create hsr debugfs directory [ 80.962734][ T5627] hsr_slave_0: entered promiscuous mode [ 80.969343][ T5627] hsr_slave_1: entered promiscuous mode [ 80.975582][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 80.981347][ T5627] Cannot create hsr debugfs directory [ 81.085584][ T5633] hsr_slave_0: entered promiscuous mode [ 81.091868][ T5633] hsr_slave_1: entered promiscuous mode [ 81.098193][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 81.104267][ T5633] Cannot create hsr debugfs directory [ 81.483903][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.497443][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.518311][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.528198][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.550677][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.560674][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.574050][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.586701][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.648823][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.658849][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.666990][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.676421][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.684019][ T5634] Bluetooth: hci0: command tx timeout [ 81.684036][ T5621] Bluetooth: hci1: command tx timeout [ 81.696875][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.710315][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.734926][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.750557][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.763326][ T5621] Bluetooth: hci3: command tx timeout [ 81.764517][ T5634] Bluetooth: hci2: command tx timeout [ 81.833639][ T5634] Bluetooth: hci4: command tx timeout [ 81.846546][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.858726][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.866982][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.878478][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.896331][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.906558][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.915264][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.925425][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.041672][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.051766][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.064555][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.085271][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.095526][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.104972][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.115144][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.139059][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.148552][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.191079][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.225309][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.238205][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.257303][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.265060][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.275557][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.285846][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.294545][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.305140][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.325704][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.333328][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.341662][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.352681][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.383641][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.459321][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.497949][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.505177][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.526845][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.567338][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.574628][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.666958][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.699042][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.706263][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.748850][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.761667][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.768789][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.785503][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.800088][ T5619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.870985][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.910284][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.940673][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.947862][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.980164][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.987360][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.005112][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.012299][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.047775][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.055031][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.328250][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.546567][ T5631] veth0_vlan: entered promiscuous mode [ 83.587608][ T5631] veth1_vlan: entered promiscuous mode [ 83.701995][ T5631] veth0_macvtap: entered promiscuous mode [ 83.742704][ T5631] veth1_macvtap: entered promiscuous mode [ 83.753845][ T5634] Bluetooth: hci0: command tx timeout [ 83.758452][ T5621] Bluetooth: hci1: command tx timeout [ 83.807762][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.834025][ T5621] Bluetooth: hci2: command tx timeout [ 83.835322][ T5634] Bluetooth: hci3: command tx timeout [ 83.892110][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.923278][ T5634] Bluetooth: hci4: command tx timeout [ 83.925589][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.075884][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.175407][ T5619] veth0_vlan: entered promiscuous mode [ 84.213220][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.307033][ T5619] veth1_vlan: entered promiscuous mode [ 84.336912][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.352972][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.380233][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.389894][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.403339][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.477785][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.498603][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.578229][ T5618] veth0_vlan: entered promiscuous mode [ 84.586766][ T5619] veth0_macvtap: entered promiscuous mode [ 84.605848][ T5633] veth0_vlan: entered promiscuous mode [ 84.627054][ T5618] veth1_vlan: entered promiscuous mode [ 84.639845][ T5619] veth1_macvtap: entered promiscuous mode [ 84.645609][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.692661][ T5633] veth1_vlan: entered promiscuous mode [ 84.762243][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.807815][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.849217][ T5618] veth0_macvtap: entered promiscuous mode [ 84.863048][ T5618] veth1_macvtap: entered promiscuous mode [ 84.919047][ T5633] veth0_macvtap: entered promiscuous mode [ 84.945345][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.961783][ T5633] veth1_macvtap: entered promiscuous mode [ 84.983953][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.026896][ T5627] veth0_vlan: entered promiscuous mode [ 85.037703][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.050556][ T5627] veth1_vlan: entered promiscuous mode [ 85.058667][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.100645][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.139161][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.151353][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.162270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.163551][ T33] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.260840][ T5627] veth0_macvtap: entered promiscuous mode [ 85.272143][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.296149][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.313526][ T1178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.341015][ T5627] veth1_macvtap: entered promiscuous mode [ 85.429740][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.444471][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.447957][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.517376][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.540861][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.569378][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.584973][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.633010][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.657898][ T1178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.701314][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.711035][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.730222][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.731441][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.833574][ T5634] Bluetooth: hci1: command tx timeout [ 85.833655][ T5621] Bluetooth: hci0: command tx timeout [ 85.913911][ T5621] Bluetooth: hci3: command tx timeout [ 85.913932][ T5634] Bluetooth: hci2: command tx timeout [ 85.993883][ T5634] Bluetooth: hci4: command tx timeout [ 86.344127][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.379778][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.404538][ T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.431981][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.473478][ T98] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.503906][ T98] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.565240][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.652437][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.681806][ T5856] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 86.698379][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.714393][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.733720][ T5849] Zero length message leads to an empty skb [ 86.739049][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.995608][ T1178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.053402][ T5872] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 87.104171][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.189308][ T5875] tipc: Failed to remove unknown binding: 66,0,0/0:1520342466/1520342467 [ 87.230727][ T5880] netlink: 10 bytes leftover after parsing attributes in process `syz.2.17'. [ 87.240870][ T5875] tipc: Failed to remove unknown binding: 66,0,0/0:1520342466/1520342467 [ 87.374305][ T5884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18'. [ 87.435508][ T5884] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 87.443710][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.626505][ T5888] ip6gre1: entered allmulticast mode [ 87.668950][ T5890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'. [ 87.678141][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.069471][ T5912] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 88.076799][ T5912] syzkaller1: linktype set to 769 [ 88.191129][ T5918] syzkaller0: entered promiscuous mode [ 88.196801][ T5918] syzkaller0: entered allmulticast mode [ 88.378168][ T5924] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 88.398655][ T5926] syzkaller0: entered promiscuous mode [ 88.408054][ T5926] syzkaller0: entered allmulticast mode [ 88.421495][ T5926] tipc: Started in network mode [ 88.427723][ T5926] tipc: Node identity 9229d448c083, cluster identity 4711 [ 88.438379][ T5926] tipc: Enabled bearer , priority 0 [ 88.466701][ T5926] tipc: Resetting bearer [ 88.589634][ T5925] tipc: Resetting bearer [ 88.605014][ T5925] tipc: Disabling bearer [ 88.778687][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 88.800010][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 88.890258][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 88.922132][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 88.935071][ T5944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 89.249068][ T5928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.911175][ T5994] Cannot find del_set index 2 as target [ 90.023167][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 90.237842][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 90.500991][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.510361][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.062654][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.088993][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.395749][ T47] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.523044][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.563281][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.606263][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.647160][ T6054] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.005647][ T189] cfg80211: failed to load regulatory.db [ 92.118969][ T6074] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 92.308893][ T6088] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 92.313293][ T5634] Bluetooth: hci3: command tx timeout [ 92.346200][ T6088] __nla_validate_parse: 1 callbacks suppressed [ 92.346225][ T6088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.72'. [ 92.447934][ T6083] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 92.458101][ T6083] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 92.477297][ T6083] bond1: entered allmulticast mode [ 92.483072][ T6083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.836032][ T6088] dummy0: entered promiscuous mode [ 93.443222][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 93.485408][ T6124] netlink: 'syz.4.85': attribute type 5 has an invalid length. [ 93.509708][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 93.582631][ T6131] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 93.765842][ T6137] bond0: entered promiscuous mode [ 93.782973][ T6137] bond_slave_0: entered promiscuous mode [ 93.800651][ T6137] bond_slave_1: entered promiscuous mode [ 93.824889][ T6137] batadv0: entered promiscuous mode [ 93.845951][ T6137] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 93.874917][ T6137] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 93.895104][ T6137] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 93.936870][ T6137] bond0: left promiscuous mode [ 93.947012][ T6137] bond_slave_0: left promiscuous mode [ 93.959145][ T6137] bond_slave_1: left promiscuous mode [ 93.970540][ T6137] batadv0: left promiscuous mode [ 94.100232][ T6151] netlink: 84 bytes leftover after parsing attributes in process `syz.3.92'. [ 94.378216][ T6161] bridge_slave_0: left allmulticast mode [ 94.393167][ T6161] bridge_slave_0: left promiscuous mode [ 94.421499][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.461182][ T6161] bridge_slave_1: left allmulticast mode [ 94.470031][ T6161] bridge_slave_1: left promiscuous mode [ 94.477086][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.496468][ T6161] bond0: (slave bond_slave_0): Releasing backup interface [ 94.511831][ T6161] bond0: (slave bond_slave_1): Releasing backup interface [ 94.557162][ T6161] team0: Port device team_slave_0 removed [ 94.602731][ T6161] team0: Port device team_slave_1 removed [ 94.618451][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.627759][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.640040][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.649383][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.660824][ T6161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.106621][ T6195] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002 [ 95.280426][ T6200] bond0: entered promiscuous mode [ 95.290610][ T6200] bond_slave_0: entered promiscuous mode [ 95.298500][ T6200] bond_slave_1: entered promiscuous mode [ 95.308314][ T6200] batadv0: entered promiscuous mode [ 95.318577][ T6200] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 95.328021][ T6200] bond0: left promiscuous mode [ 95.339894][ T6200] bond_slave_0: left promiscuous mode [ 95.346192][ T6200] bond_slave_1: left promiscuous mode [ 95.354519][ T6200] batadv0: left promiscuous mode [ 95.431042][ T6206] sctp: [Deprecated]: syz.3.106 (pid 6206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.431042][ T6206] Use struct sctp_sack_info instead [ 95.844226][ T6226] warning: `syz.1.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.930022][ T6217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.110'. [ 96.163060][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'. [ 96.225141][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.242994][ T6242] bond1: entered promiscuous mode [ 96.248175][ T6242] bond1: entered allmulticast mode [ 96.269969][ T6257] syz_tun: entered allmulticast mode [ 96.389432][ T6250] syz_tun: left allmulticast mode [ 96.413198][ T6267] batadv_slave_1: entered promiscuous mode [ 96.449911][ T6268] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 96.471462][ T6268] netlink: 224 bytes leftover after parsing attributes in process `syz.2.120'. [ 96.790544][ T6266] batadv_slave_1: left promiscuous mode [ 97.057439][ T6305] tipc: Can't bind to reserved service type 0 [ 97.192576][ T6305] bond1 (unregistering): Released all slaves [ 98.039755][ T6343] bond0: entered promiscuous mode [ 98.064581][ T6343] bond_slave_0: entered promiscuous mode [ 98.070649][ T6343] bond_slave_1: entered promiscuous mode [ 98.081581][ T6343] batadv0: entered promiscuous mode [ 98.089759][ T6343] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 98.139356][ T6343] bond0: left promiscuous mode [ 98.150663][ T6350] netlink: 'syz.4.139': attribute type 21 has an invalid length. [ 98.159882][ T6343] bond_slave_0: left promiscuous mode [ 98.167019][ T6343] bond_slave_1: left promiscuous mode [ 98.176057][ T6343] batadv0: left promiscuous mode [ 98.190255][ T6350] netlink: 132 bytes leftover after parsing attributes in process `syz.4.139'. [ 98.352230][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.142'. [ 98.369239][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.142'. [ 100.898866][ T6336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.099690][ T6392] netlink: 10 bytes leftover after parsing attributes in process `syz.1.149'. [ 101.115894][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 101.148476][ T6392] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 101.432382][ T6423] vlan2: entered allmulticast mode [ 101.439898][ T6423] bond0: entered allmulticast mode [ 102.172625][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 102.451905][ T6440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 104.081295][ T6396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.391844][ T6450] bond0: entered promiscuous mode [ 104.416713][ T6450] bond_slave_0: entered promiscuous mode [ 104.433170][ T6450] bond_slave_1: entered promiscuous mode [ 104.447889][ T6450] batadv0: entered promiscuous mode [ 104.455432][ T6450] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 104.469997][ T6450] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 104.488858][ T6450] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 104.497440][ T6450] bond0: left promiscuous mode [ 104.502368][ T6450] bond_slave_0: left promiscuous mode [ 104.515373][ T6450] bond_slave_1: left promiscuous mode [ 104.529950][ T6450] batadv0: left promiscuous mode [ 104.658983][ T6468] netlink: 116 bytes leftover after parsing attributes in process `syz.1.167'. [ 104.679040][ T6456] syzkaller0: entered promiscuous mode [ 104.692305][ T6456] syzkaller0: entered allmulticast mode [ 104.693383][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 104.819667][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 105.031984][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 105.160569][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 105.174470][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 105.415019][ T6513] Cannot find set identified by id 65534 to match [ 105.437526][ T6494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 105.519414][ T6515] bond0: entered promiscuous mode [ 105.526125][ T6515] bond_slave_0: entered promiscuous mode [ 105.532065][ T6515] bond_slave_1: entered promiscuous mode [ 105.541198][ T6515] batadv0: entered promiscuous mode [ 105.564121][ T6515] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 105.597293][ T6515] bond0: left promiscuous mode [ 105.602195][ T6515] bond_slave_0: left promiscuous mode [ 105.622621][ T6515] bond_slave_1: left promiscuous mode [ 105.640064][ T6515] batadv0: left promiscuous mode [ 105.993997][ T6540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.157571][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 106.436275][ T47] nci: nci_rx_work: unknown MT 0x6 [ 106.444547][ T6567] netlink: 'syz.0.193': attribute type 4 has an invalid length. [ 106.465031][ T6567] netlink: 152 bytes leftover after parsing attributes in process `syz.0.193'. [ 106.481968][ T6567] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.776940][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 106.887301][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.199'. [ 106.921327][ T6595] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 106.954562][ T6596] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 107.091271][ T6595] bond1: entered promiscuous mode [ 107.106229][ T6595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.164886][ T6610] xt_hashlimit: size too large, truncated to 1048576 [ 107.551867][ T6622] syzkaller0: entered promiscuous mode [ 107.560023][ T6622] syzkaller0: entered allmulticast mode [ 109.009397][ T6641] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 109.028150][ T6641] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 109.335539][ T6558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.671506][ T6665] openvswitch: netlink: Missing key (keys=40, expected=100) [ 109.886884][ T6680] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 109.904527][ T6679] __nla_validate_parse: 1 callbacks suppressed [ 109.904545][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.222'. [ 110.499483][ T6705] nbd: couldn't find device at index 1073741824 [ 110.863109][ T6728] netlink: 128 bytes leftover after parsing attributes in process `syz.4.233'. [ 112.008716][ T6780] syzkaller0: entered promiscuous mode [ 112.035265][ T6780] syzkaller0: entered allmulticast mode [ 112.181152][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 112.269369][ T6800] bond0: (slave ip6_vti0): Error: Device can not be enslaved while up [ 112.288850][ T6801] lo: entered promiscuous mode [ 112.497174][ T6808] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.567836][ T6817] netlink: 68 bytes leftover after parsing attributes in process `syz.4.254'. [ 112.937871][ T6835] syzkaller0: entered promiscuous mode [ 112.955275][ T6835] syzkaller0: entered allmulticast mode [ 113.132543][ T6843] bond0: (slave ip6tnl0): refused to change device type [ 113.171760][ T6843] ip6erspan0: entered allmulticast mode [ 113.847857][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.265'. [ 113.937885][ T6878] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 113.990176][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.993840][ T6878] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 113.998905][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.038217][ T6878] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 114.102130][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.109371][ T6892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.116963][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.124160][ T6892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.200566][ T6892] bridge0: entered promiscuous mode [ 114.206147][ T6892] bridge0: entered allmulticast mode [ 114.231765][ T6901] sock: sock_set_timeout: `syz.4.270' (pid 6901) tries to set negative timeout [ 114.240907][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 114.242053][ T6904] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 114.263880][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 114.428104][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.271'. [ 114.432279][ T6904] bond6: entered promiscuous mode [ 114.485353][ T6904] 8021q: adding VLAN 0 to HW filter on device bond6 [ 114.499186][ T6912] bond6: entered allmulticast mode [ 114.512212][ T6916] netlink: 568 bytes leftover after parsing attributes in process `syz.4.273'. [ 114.537349][ T6916] netlink: 'syz.4.273': attribute type 11 has an invalid length. [ 114.587361][ T6904] bond6: (slave bridge1): making interface the new active one [ 114.609838][ T6904] bridge1: entered promiscuous mode [ 114.625013][ T6904] bridge1: entered allmulticast mode [ 114.651794][ T6904] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 114.972041][ T6931] netlink: 'syz.4.279': attribute type 21 has an invalid length. [ 115.008066][ T6927] bond2: entered promiscuous mode [ 115.021641][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 115.034723][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 115.065949][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 115.099896][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 115.173769][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 115.219999][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 115.409930][ T6948] Bluetooth: MGMT ver 1.23 [ 115.460307][ T6919] syzkaller0: entered promiscuous mode [ 115.473927][ T6919] syzkaller0: entered allmulticast mode [ 115.656028][ T6959] hsr0: entered allmulticast mode [ 115.695828][ T6959] hsr_slave_0: entered allmulticast mode [ 115.733229][ T6959] hsr_slave_1: entered allmulticast mode [ 115.809766][ T6946] hsr0: left allmulticast mode [ 115.817814][ T6946] hsr_slave_0: left allmulticast mode [ 115.829475][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 115.834069][ T6946] hsr_slave_1: left allmulticast mode [ 115.856442][ T6977] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 115.872315][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 115.890614][ T6977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 115.909428][ T6972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.285'. [ 115.960042][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 116.225920][ T6983] syzkaller1: entered promiscuous mode [ 116.239905][ T6983] syzkaller1: entered allmulticast mode [ 116.431234][ T7014] syzkaller0: entered promiscuous mode [ 116.470480][ T7014] syzkaller0: entered allmulticast mode [ 116.534526][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.567602][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.586514][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.616172][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.667603][ T7028] Bluetooth: MGMT ver 1.23 [ 117.298923][ T7045] syzkaller0: entered promiscuous mode [ 117.304807][ T7045] syzkaller0: entered allmulticast mode [ 117.671816][ T6919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.916726][ T7055] netlink: 'syz.2.299': attribute type 21 has an invalid length. [ 117.939077][ T7055] netlink: 'syz.2.299': attribute type 22 has an invalid length. [ 117.961375][ T7055] netlink: 'syz.2.299': attribute type 23 has an invalid length. [ 117.987340][ T7055] netlink: 'syz.2.299': attribute type 25 has an invalid length. [ 120.025230][ T7078] syzkaller0: entered promiscuous mode [ 120.043127][ T7078] syzkaller0: entered allmulticast mode [ 120.248295][ T7118] __nla_validate_parse: 8 callbacks suppressed [ 120.248314][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 120.530601][ T7133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.308'. [ 120.614309][ T7134] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 120.824751][ T7149] syzkaller0: entered promiscuous mode [ 120.854203][ T7149] syzkaller0: entered allmulticast mode [ 120.947506][ T7153] batadv_slave_0: entered allmulticast mode [ 120.974979][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 120.976591][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 120.984664][ T7160] netlink: 'syz.0.315': attribute type 20 has an invalid length. [ 121.012057][ T7153] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 121.012754][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 121.133174][ T47] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.152164][ T47] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.185886][ T7168] trusted_key: syz.2.316 sent an empty control message without MSG_MORE. [ 121.197391][ T33] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.217151][ T33] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.298990][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 121.371583][ T7175] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 121.456863][ T7175] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 121.549769][ T7182] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 121.585600][ T7182] bond2 (unregistering): Released all slaves [ 121.814853][ T7196] openvswitch: netlink: Unknown key attributes 20 [ 121.826771][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.325'. [ 122.087917][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 122.314025][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 122.339606][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 122.599608][ T7235] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.669345][ T7243] netlink: 'syz.2.341': attribute type 4 has an invalid length. [ 122.719662][ T7246] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 122.920363][ T7259] SET target dimension over the limit! [ 123.265136][ T7263] syz.2.349 (7263) used greatest stack depth: 17792 bytes left [ 123.561096][ T7283] tipc: Started in network mode [ 123.574919][ T7283] tipc: Node identity 060a4a03b16e, cluster identity 4711 [ 123.590598][ T7283] tipc: Enabled bearer , priority 0 [ 123.664323][ T7283] tipc: Resetting bearer [ 123.779173][ T7296] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 123.812434][ T7282] tipc: Disabling bearer [ 123.928709][ T7298] erspan0: entered promiscuous mode [ 123.981984][ T7298] erspan0: left promiscuous mode [ 124.215226][ T7305] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 124.724262][ T7337] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 124.734712][ T7337] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 124.750407][ T7337] netlink: 'syz.0.373': attribute type 2 has an invalid length. [ 124.945401][ T7350] xt_TCPMSS: Only works on TCP SYN packets [ 125.052675][ T7350] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 125.134807][ T7351] syzkaller0: entered promiscuous mode [ 125.158502][ T7351] syzkaller0: entered allmulticast mode [ 125.294942][ T7362] __nla_validate_parse: 12 callbacks suppressed [ 125.294960][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 125.308791][ T7353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.376'. [ 125.404170][ T7370] syz_tun: entered allmulticast mode [ 125.538877][ T7371] dvmrp8: entered allmulticast mode [ 125.746363][ T7388] batman_adv: batadv0: Adding interface: gretap1 [ 125.763883][ T7388] batman_adv: batadv0: The MTU of interface gretap1 is too small (1414) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.814380][ T7388] batman_adv: batadv0: Interface activated: gretap1 [ 126.212481][ T7411] netlink: 'syz.4.389': attribute type 4 has an invalid length. [ 126.249953][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 126.380978][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'. [ 126.395912][ T7416] netlink: 72 bytes leftover after parsing attributes in process `syz.3.391'. [ 126.448952][ T7419] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 126.464711][ T7419] xt_l2tp: unknown flags: 51 [ 126.596463][ T7422] syzkaller0: entered promiscuous mode [ 126.603133][ T7422] syzkaller0: entered allmulticast mode [ 126.614437][ T7422] netlink: 'syz.3.393': attribute type 3 has an invalid length. [ 128.283175][ T7365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.614570][ T7438] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 128.962648][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 128.972999][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 129.396334][ T7438] bond7: entered promiscuous mode [ 129.401569][ T7438] bond7: entered allmulticast mode [ 129.407446][ T7438] 8021q: adding VLAN 0 to HW filter on device bond7 [ 129.425557][ T7445] erspan1: entered allmulticast mode [ 129.438808][ T7445] bond7: (slave erspan1): making interface the new active one [ 129.449166][ T7445] erspan1: entered promiscuous mode [ 129.463149][ T7445] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 129.500798][ T7441] tipc: Started in network mode [ 129.500814][ T7457] syz.2.398 (7457) used obsolete PPPIOCDETACH ioctl [ 129.506656][ T7441] tipc: Node identity 3e1a8e0f4b31, cluster identity 4711 [ 129.522256][ T7441] tipc: Enabled bearer , priority 0 [ 129.550139][ T7451] syzkaller0: entered promiscuous mode [ 129.563681][ T7451] syzkaller0: entered allmulticast mode [ 129.765642][ T7467] tipc: Resetting bearer [ 129.848893][ T7467] tipc: Disabling bearer [ 129.921908][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 130.037578][ T7486] veth3: entered allmulticast mode [ 130.078359][ T7490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.404'. [ 130.202328][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 130.279968][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.355826][ T7506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.409'. [ 130.436656][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.411'. [ 130.448343][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 130.460926][ T7505] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 130.476740][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 130.529347][ T7505] syzkaller0: entered promiscuous mode [ 130.545387][ T7505] syzkaller0: entered allmulticast mode [ 130.658279][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.407'. [ 130.722560][ T7528] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 130.751697][ T7528] netlink: 104 bytes leftover after parsing attributes in process `syz.3.413'. [ 131.225002][ T7551] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 131.276088][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 131.381104][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.417'. [ 131.756331][ T7583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.895551][ T7588] tipc: Invalid UDP bearer configuration [ 131.895605][ T7588] tipc: Enabling of bearer rejected, failed to enable media [ 132.009474][ T1178] IPVS: starting estimator thread 0... [ 132.105592][ T7595] sctp: [Deprecated]: syz.1.428 (pid 7595) Use of int in maxseg socket option. [ 132.105592][ T7595] Use struct sctp_assoc_value instead [ 132.127671][ T7591] IPVS: using max 31 ests per chain, 74400 per kthread [ 132.179572][ T7600] sctp: [Deprecated]: syz.1.428 (pid 7600) Use of int in maxseg socket option. [ 132.179572][ T7600] Use struct sctp_assoc_value instead [ 132.278909][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 132.647602][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 132.958724][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966510][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145391][ T7642] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 133.172211][ T7652] syzkaller0: entered promiscuous mode [ 133.199350][ T7652] syzkaller0: entered allmulticast mode [ 133.484857][ T7667] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 133.551928][ T7667] bond1: entered promiscuous mode [ 133.557968][ T7667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.606418][ T7667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.614570][ T7667] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 133.625522][ T7667] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 133.655832][ T7667] bond1: (slave ip6gre2): making interface the new active one [ 133.667173][ T7667] ip6gre2: entered promiscuous mode [ 133.674047][ T7667] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 133.949443][ T7686] netlink: 'syz.2.449': attribute type 4 has an invalid length. [ 133.968271][ T7684] netlink: 'syz.2.449': attribute type 4 has an invalid length. [ 134.255977][ T7693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 134.979259][ T7726] xt_TCPMSS: Only works on TCP SYN packets [ 135.393899][ T7741] __nla_validate_parse: 10 callbacks suppressed [ 135.393917][ T7741] netlink: 292 bytes leftover after parsing attributes in process `syz.0.462'. [ 135.416242][ T7743] netlink: 'syz.2.461': attribute type 30 has an invalid length. [ 135.495335][ T7740] "syz.3.463" (7740) uses obsolete ecb(arc4) skcipher [ 135.740219][ T7761] batadv0: entered promiscuous mode [ 135.768464][ T7761] vlan2: entered promiscuous mode [ 136.050880][ T7776] netlink: 4256 bytes leftover after parsing attributes in process `syz.2.473'. [ 136.061317][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'. [ 136.088377][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'. [ 136.110130][ T7781] netlink: 128 bytes leftover after parsing attributes in process `syz.2.473'. [ 136.137034][ T7773] SET target dimension over the limit! [ 136.168302][ T7773] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 136.178394][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 136.209398][ T7780] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 136.382743][ T7780] bond3 (unregistering): Released all slaves [ 136.459011][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.479997][ T7773] team0: Port device bond0 added [ 136.557707][ T7796] syzkaller0: entered promiscuous mode [ 136.564167][ T7796] syzkaller0: entered allmulticast mode [ 137.444452][ T7839] IPVS: set_ctl: invalid protocol: 191 172.20.20.46:20000 [ 137.655184][ T7843] bond0: entered promiscuous mode [ 137.665328][ T7843] bond_slave_0: entered promiscuous mode [ 137.671317][ T7843] bond_slave_1: entered promiscuous mode [ 137.688982][ T7843] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 137.730167][ T7843] bond0: left promiscuous mode [ 137.747877][ T7843] bond_slave_0: left promiscuous mode [ 137.769677][ T7843] bond_slave_1: left promiscuous mode [ 137.807616][ T29] audit: type=1800 audit(1785725944.271:2): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.489" name="memory.events" dev="tmpfs" ino=522 res=0 errno=0 [ 138.029933][ T7856] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 138.092458][ T7856] netlink: 76 bytes leftover after parsing attributes in process `syz.3.491'. [ 138.221155][ T7870] netlink: 'syz.2.498': attribute type 19 has an invalid length. [ 138.235647][ T7856] bond3: option lacp_rate: invalid value (16) [ 138.241984][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 138.253367][ T7856] bond3 (unregistering): Released all slaves [ 138.282095][ T7863] netlink: 'syz.0.494': attribute type 5 has an invalid length. [ 138.464895][ T33] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.496568][ T33] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.576113][ T7889] bond0: entered promiscuous mode [ 138.599973][ T7889] bond_slave_0: entered promiscuous mode [ 138.632005][ T7889] bond_slave_1: entered promiscuous mode [ 138.679542][ T7889] batadv0: entered promiscuous mode [ 138.699835][ T7889] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 138.711717][ T7889] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 138.740202][ T7889] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 138.759615][ T7889] bond0: left promiscuous mode [ 138.766029][ T7889] bond_slave_0: left promiscuous mode [ 138.776333][ T7889] bond_slave_1: left promiscuous mode [ 138.801530][ T7889] batadv0: left promiscuous mode [ 138.853617][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.994082][ T1178] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.155022][ T7920] syzkaller1: entered promiscuous mode [ 139.161012][ T7920] syzkaller1: entered allmulticast mode [ 139.363594][ T7930] ip_tables: iptables: counters copy to user failed while replacing table [ 139.387386][ T7931] ip_tables: iptables: counters copy to user failed while replacing table [ 139.453760][ T7928] syzkaller0: entered promiscuous mode [ 139.481060][ T7928] syzkaller0: entered allmulticast mode [ 139.529829][ T7928] tipc: Started in network mode [ 139.550685][ T7928] tipc: Node identity 3ea6eb4ca04b, cluster identity 4711 [ 139.577551][ T7928] tipc: Enabled bearer , priority 0 [ 139.605474][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 139.624157][ T7927] tipc: Resetting bearer [ 139.669979][ T7927] tipc: Disabling bearer [ 139.679841][ T7952] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 139.737706][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 139.747828][ T7956] netlink: 'syz.2.520': attribute type 7 has an invalid length. [ 139.756232][ T7956] netlink: 'syz.2.520': attribute type 8 has an invalid length. [ 139.781536][ T7952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.864493][ T7933] tap0: tun_chr_ioctl cmd 1074025672 [ 139.877171][ T7933] tap0: ignored: set checksum disabled [ 139.902352][ T7959] bond0: entered promiscuous mode [ 139.907570][ T7959] bond_slave_0: entered promiscuous mode [ 139.915308][ T7959] bond_slave_1: entered promiscuous mode [ 139.926640][ T7959] batadv0: entered promiscuous mode [ 139.936591][ T7959] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 139.945924][ T7959] bond0: left promiscuous mode [ 139.950735][ T7959] bond_slave_0: left promiscuous mode [ 139.956773][ T7959] bond_slave_1: left promiscuous mode [ 139.963230][ T7959] batadv0: left promiscuous mode [ 140.455667][ T7988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.467910][ T7990] __nla_validate_parse: 3 callbacks suppressed [ 140.467927][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'. [ 140.549416][ T7988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.840456][ T8012] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 140.871031][ T8012] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 140.922105][ T8009] gretap1: entered allmulticast mode [ 140.930728][ T8009] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 141.197931][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 141.230181][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 141.269578][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 141.299141][ T8027] sctp: [Deprecated]: syz.3.545 (pid 8027) Use of int in maxseg socket option. [ 141.299141][ T8027] Use struct sctp_assoc_value instead [ 141.498558][ T8036] netlink: 44 bytes leftover after parsing attributes in process `syz.4.548'. [ 141.548474][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.548'. [ 141.876931][ T8057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.555'. [ 141.919832][ T8057] netlink: 43 bytes leftover after parsing attributes in process `syz.0.555'. [ 141.953049][ T8057] netlink: 'syz.0.555': attribute type 6 has an invalid length. [ 141.998187][ T8057] netlink: 'syz.0.555': attribute type 5 has an invalid length. [ 142.031711][ T8057] netlink: 43 bytes leftover after parsing attributes in process `syz.0.555'. [ 142.156489][ T8057] 0: reclassify loop, rule prio 0, protocol 03 [ 142.330430][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 142.485135][ T8088] bond2: entered promiscuous mode [ 142.490817][ T8088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.539134][ T8093] bridge2: entered promiscuous mode [ 142.552300][ T8093] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 142.639288][ T8100] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 143.307339][ T8132] sctp: [Deprecated]: syz.4.569 (pid 8132) Use of int in max_burst socket option. [ 143.307339][ T8132] Use struct sctp_assoc_value instead [ 143.381011][ T47] IPVS: starting estimator thread 0... [ 143.513100][ T8140] IPVS: using max 32 ests per chain, 76800 per kthread [ 143.728935][ T8151] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 143.850899][ T8151] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 144.274987][ T8180] validate_nla: 1 callbacks suppressed [ 144.275004][ T8180] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 144.385785][ T8180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.405492][ T8178] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 144.513283][ T8186] veth3: entered allmulticast mode [ 144.552651][ T8186] bond3: (slave veth3): Enslaving as an active interface with an up link [ 144.599797][ T8204] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.639360][ T8178] bond3: option mode: invalid value (8) [ 144.651714][ T8178] bond3 (unregistering): Released all slaves [ 144.676813][ T8180] bond3 (unregistering): (slave veth3): Releasing backup interface [ 144.687032][ T8180] bond3 (unregistering): Released all slaves [ 144.756958][ T8197] tipc: Enabled bearer , priority 0 [ 144.766449][ T8182] syzkaller0: entered promiscuous mode [ 144.772364][ T8182] syzkaller0: entered allmulticast mode [ 144.782712][ T8182] tipc: Resetting bearer [ 144.796932][ T8181] tipc: Resetting bearer [ 144.823941][ T8181] tipc: Disabling bearer [ 145.151664][ T8223] openvswitch: netlink: Message has 512 unknown bytes. [ 145.365687][ T8229] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 145.513127][ T8229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.553697][ T8233] bond3: (slave gretap1): making interface the new active one [ 145.564791][ T8233] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 146.256325][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.275673][ T8269] __nla_validate_parse: 12 callbacks suppressed [ 146.275692][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 146.676999][ T8285] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 146.831806][ T8296] netlink: 104 bytes leftover after parsing attributes in process `syz.3.605'. [ 146.974561][ T8303] netlink: 64 bytes leftover after parsing attributes in process `syz.2.608'. [ 147.168614][ T8317] sctp: [Deprecated]: syz.1.611 (pid 8317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.168614][ T8317] Use struct sctp_sack_info instead [ 147.357281][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 147.367435][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 147.419221][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 147.900950][ T8354] syzkaller1: entered promiscuous mode [ 147.924039][ T8354] syzkaller1: entered allmulticast mode [ 147.943277][ T8362] sch_fq: defrate 4294967293 ignored. [ 148.148211][ T8377] syzkaller0: entered promiscuous mode [ 148.182936][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.788969][ T8381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.133098][ T8397] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:3 [ 150.478257][ T8331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.731859][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 150.755839][ T8403] bond0: entered promiscuous mode [ 150.771889][ T8403] bond_slave_0: entered promiscuous mode [ 150.796613][ T8403] bond_slave_1: entered promiscuous mode [ 150.832069][ T8403] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 150.856938][ T8403] bond0: left promiscuous mode [ 150.878548][ T8403] bond_slave_0: left promiscuous mode [ 150.906899][ T8403] bond_slave_1: left promiscuous mode [ 150.907569][ T8413] block nbd0: not configured, cannot reconfigure [ 151.059277][ T8416] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 151.191608][ T8416] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.270024][ T8434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.642'. [ 151.326349][ T8424] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 151.898650][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.650'. [ 151.981426][ T8467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.996269][ T8472] bond0: entered promiscuous mode [ 152.010170][ T8472] bond_slave_0: entered promiscuous mode [ 152.021363][ T8472] bond_slave_1: entered promiscuous mode [ 152.056784][ T8472] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 152.083587][ T8472] bond0: left promiscuous mode [ 152.089217][ T8472] bond_slave_0: left promiscuous mode [ 152.096770][ T8472] bond_slave_1: left promiscuous mode [ 153.102744][ T8490] netlink: 56 bytes leftover after parsing attributes in process `syz.0.655'. [ 153.114720][ T8490] netlink: 'syz.0.655': attribute type 15 has an invalid length. [ 153.329180][ T8495] netlink: 'syz.0.658': attribute type 30 has an invalid length. [ 153.475580][ T8504] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 153.502707][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 153.532941][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 153.592747][ T8504] bond8: entered promiscuous mode [ 153.600194][ T8504] 8021q: adding VLAN 0 to HW filter on device bond8 [ 153.661822][ T8517] 8021q: adding VLAN 0 to HW filter on device bond8 [ 153.678113][ T8517] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 153.706085][ T8517] bond8: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 153.723789][ T8517] bond8: (slave gre1): making interface the new active one [ 153.731263][ T8517] gre1: entered promiscuous mode [ 153.740095][ T8517] bond8: (slave gre1): Enslaving as an active interface with an up link [ 153.789367][ T8520] bond0: entered promiscuous mode [ 153.811746][ T8520] bond_slave_0: entered promiscuous mode [ 153.835173][ T8520] bond_slave_1: entered promiscuous mode [ 153.860220][ T8520] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 153.899681][ T8520] bond0: left promiscuous mode [ 153.909819][ T8520] bond_slave_0: left promiscuous mode [ 153.916902][ T8520] bond_slave_1: left promiscuous mode [ 153.926282][ T8534] netlink: 'syz.2.670': attribute type 3 has an invalid length. [ 154.066512][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 154.607095][ T5634] Bluetooth: hci4: link tx timeout [ 154.620799][ T5634] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 154.632367][ T5634] Bluetooth: hci4: link tx timeout [ 154.637804][ T5634] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.895363][ T8579] xt_TPROXY: Can be used only with -p tcp or -p udp [ 154.920347][ T8579] netlink: 84 bytes leftover after parsing attributes in process `syz.4.681'. [ 154.944846][ T8580] netlink: 108 bytes leftover after parsing attributes in process `syz.1.682'. [ 155.004961][ T8580] x_tables: duplicate underflow at hook 2 [ 155.186104][ T8560] syzkaller1: entered promiscuous mode [ 155.205184][ T8560] syzkaller1: entered allmulticast mode [ 155.245186][ T8582] bond0: entered promiscuous mode [ 155.257495][ T8582] bond_slave_0: entered promiscuous mode [ 155.269407][ T8582] bond_slave_1: entered promiscuous mode [ 155.285878][ T8582] batadv0: entered promiscuous mode [ 155.308926][ T8582] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 155.343383][ T8582] bond0: left promiscuous mode [ 155.357928][ T8582] bond_slave_0: left promiscuous mode [ 155.364186][ T8582] bond_slave_1: left promiscuous mode [ 155.396896][ T8582] batadv0: left promiscuous mode [ 155.671599][ T8605] netlink: 774 bytes leftover after parsing attributes in process `syz.4.689'. [ 155.697958][ T8605] netlink: 52 bytes leftover after parsing attributes in process `syz.4.689'. [ 155.771253][ T8605] netlink: 774 bytes leftover after parsing attributes in process `syz.4.689'. [ 156.019345][ T8619] syzkaller0: entered promiscuous mode [ 156.028086][ T8619] syzkaller0: entered allmulticast mode [ 156.441163][ T8641] IPVS: set_ctl: invalid protocol: 246 255.255.255.255:20004 [ 156.453251][ T8642] IPVS: set_ctl: invalid protocol: 246 255.255.255.255:20004 [ 156.467465][ T8633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.547338][ T8645] syzkaller0: entered promiscuous mode [ 156.553374][ T8645] syzkaller0: entered allmulticast mode [ 156.606246][ T8647] netlink: 'syz.1.702': attribute type 22 has an invalid length. [ 156.641020][ T8652] tipc: Enabled bearer , priority 0 [ 156.668366][ T8647] netlink: 'syz.1.702': attribute type 22 has an invalid length. [ 156.713827][ T8652] tipc: Resetting bearer [ 156.714546][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 156.842179][ T8652] tipc: Disabling bearer [ 156.929949][ T8664] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 157.018909][ T8669] __nla_validate_parse: 70 callbacks suppressed [ 157.018926][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 157.489882][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 157.502437][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.714'. [ 157.537653][ T8699] vxlan1: entered promiscuous mode [ 157.718134][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.717'. [ 157.802550][ T8703] netlink: 164 bytes leftover after parsing attributes in process `syz.4.715'. [ 157.825316][ T8703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.715'. [ 157.882557][ T8708] bridge0: left allmulticast mode [ 157.923278][ T8708] bridge0: port 3(vlan3) entered blocking state [ 157.952496][ T8708] bridge0: port 3(vlan3) entered disabled state [ 157.976099][ T8708] vlan3: entered allmulticast mode [ 157.981293][ T8708] geneve0: entered allmulticast mode [ 157.997829][ T8708] vlan3: entered promiscuous mode [ 158.003288][ T8723] netlink: 4080 bytes leftover after parsing attributes in process `syz.3.722'. [ 158.004945][ T8708] geneve0: entered promiscuous mode [ 158.525074][ T8750] netlink: 'syz.2.728': attribute type 4 has an invalid length. [ 158.713061][ T8752] netlink: 'syz.2.728': attribute type 2 has an invalid length. [ 158.745619][ T8752] netlink: 'syz.2.728': attribute type 2 has an invalid length. [ 158.782910][ T8752] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.728'. [ 158.792993][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 158.828533][ T8762] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 159.859447][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 160.107719][ T8795] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.431756][ T8821] netlink: 'syz.1.742': attribute type 4 has an invalid length. [ 160.873463][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 160.895954][ T8837] netlink: 'syz.0.747': attribute type 16 has an invalid length. [ 160.924110][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.928652][ T8837] netlink: 'syz.0.747': attribute type 17 has an invalid length. [ 160.937360][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.060153][ T8837] sit0: entered promiscuous mode [ 161.102496][ T8837] sit0: entered allmulticast mode [ 161.215758][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.751'. [ 161.225313][ T8851] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 161.567314][ T8873] bond0: entered promiscuous mode [ 161.577220][ T8873] batadv0: entered promiscuous mode [ 161.586977][ T8873] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 161.598203][ T8873] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.606518][ T8873] bond0: left promiscuous mode [ 161.612488][ T8873] batadv0: left promiscuous mode [ 161.909672][ T8889] bridge0: entered promiscuous mode [ 161.915948][ T8889] bridge0: entered allmulticast mode [ 162.208869][ T8904] __nla_validate_parse: 1 callbacks suppressed [ 162.208886][ T8904] netlink: 180 bytes leftover after parsing attributes in process `syz.3.764'. [ 162.227955][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 162.278547][ T8904] netlink: 'syz.3.764': attribute type 10 has an invalid length. [ 162.321703][ T8904] syz_tun: entered promiscuous mode [ 162.351649][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.764'. [ 162.366878][ T8904] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 162.381934][ T8904] xt_bpf: check failed: parse error [ 162.507971][ T8913] bond0: entered promiscuous mode [ 162.522652][ T8913] bond_slave_0: entered promiscuous mode [ 162.536566][ T8913] bond_slave_1: entered promiscuous mode [ 162.563554][ T8913] batadv0: entered promiscuous mode [ 162.570406][ T8913] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 162.582022][ T8913] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 162.594289][ T8913] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 162.605731][ T8913] bond0: left promiscuous mode [ 162.615262][ T8913] bond_slave_0: left promiscuous mode [ 162.622745][ T8913] bond_slave_1: left promiscuous mode [ 162.634564][ T8913] batadv0: left promiscuous mode [ 162.679965][ T8917] netlink: 'syz.1.770': attribute type 5 has an invalid length. [ 162.770742][ T8927] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 162.837232][ T8932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.879612][ T8934] dummy0: left promiscuous mode [ 162.919272][ T8932] netlink: 'syz.2.774': attribute type 13 has an invalid length. [ 162.966777][ T8934] bond5: (slave dummy0): making interface the new active one [ 162.975435][ T8934] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 163.016092][ T8934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.772'. [ 163.104289][ T8927] team0: Port device bond0 removed [ 163.699974][ T8927] bond5: (slave dummy0): Releasing active interface [ 163.726223][ T8927] bridge_slave_0: left allmulticast mode [ 163.731924][ T8927] bridge_slave_0: left promiscuous mode [ 163.737940][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.754008][ T8927] bridge_slave_1: left allmulticast mode [ 163.759702][ T8927] bridge_slave_1: left promiscuous mode [ 163.765712][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.780878][ T8927] bond0: (slave bond_slave_0): Releasing backup interface [ 163.794257][ T8927] bond0: (slave bond_slave_1): Releasing backup interface [ 163.808146][ T8927] team0: Port device team_slave_0 removed [ 163.818187][ T8927] team0: Port device team_slave_1 removed [ 163.827328][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.837554][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.847640][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.857387][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.869471][ T8927] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.887246][ T8938] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 164.055909][ T8951] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 164.124061][ T8954] batadv1: entered promiscuous mode [ 164.153686][ T8954] batadv1: entered allmulticast mode [ 164.165612][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 164.489247][ T8970] bond0: entered promiscuous mode [ 164.515372][ T8981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.520869][ T8970] batadv0: entered promiscuous mode [ 164.571476][ T8970] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 164.602303][ T8970] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 164.624857][ T8970] bond0: left promiscuous mode [ 164.647211][ T8970] batadv0: left promiscuous mode [ 164.662980][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 164.982415][ T8980] syzkaller0: entered promiscuous mode [ 165.003865][ T8980] syzkaller0: entered allmulticast mode [ 166.688388][ T9018] ipvlan0: Caught tx_queue_len zero misconfig [ 166.904561][ T9032] netlink: 156 bytes leftover after parsing attributes in process `syz.1.799'. [ 166.928330][ T9031] syzkaller0: entered promiscuous mode [ 166.935502][ T9031] syzkaller0: entered allmulticast mode [ 166.959831][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.798'. [ 167.158920][ T9041] bond0: entered promiscuous mode [ 167.164272][ T9041] bond_slave_0: entered promiscuous mode [ 167.176947][ T9041] bond_slave_1: entered promiscuous mode [ 167.194549][ T9041] batadv0: entered promiscuous mode [ 167.216183][ T9041] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 167.242263][ T9041] bond0: left promiscuous mode [ 167.258888][ T9041] bond_slave_0: left promiscuous mode [ 167.272132][ T9041] bond_slave_1: left promiscuous mode [ 167.287572][ T9041] batadv0: left promiscuous mode [ 167.536340][ T9051] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 168.136209][ T9086] lo: Caught tx_queue_len zero misconfig [ 168.849134][ T9094] Bluetooth: MGMT ver 1.23 [ 169.379174][ T57] IPVS: starting estimator thread 0... [ 169.396749][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 169.459740][ T9128] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 169.506063][ T9122] IPVS: using max 32 ests per chain, 76800 per kthread [ 169.717194][ T9146] syzkaller1: entered promiscuous mode [ 169.742621][ T9146] syzkaller1: entered allmulticast mode [ 169.785712][ T9146] netlink: 208 bytes leftover after parsing attributes in process `syz.1.828'. [ 169.911316][ T9153] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 169.931534][ T9153] CPU: 1 UID: 0 PID: 9153 Comm: syz.4.830 Not tainted syzkaller #0 PREEMPT(full) [ 169.931559][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.931576][ T9153] Call Trace: [ 169.931584][ T9153] [ 169.931591][ T9153] dump_stack_lvl+0xe8/0x150 [ 169.931637][ T9153] sysfs_warn_dup+0x8e/0xa0 [ 169.931662][ T9153] sysfs_do_create_link_sd+0xc0/0x110 [ 169.931691][ T9153] device_add_class_symlinks+0x1cf/0x240 [ 169.931716][ T9153] device_add+0x467/0xb80 [ 169.931742][ T9153] wiphy_register+0x1fc8/0x2ff0 [ 169.931782][ T9153] ? __pfx_wiphy_register+0x10/0x10 [ 169.931805][ T9153] ? __pfx_netdev_run_todo+0x10/0x10 [ 169.931830][ T9153] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 169.931858][ T9153] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 169.931889][ T9153] ieee80211_register_hw+0x3d3d/0x4a50 [ 169.931927][ T9153] ? ieee80211_register_hw+0x1931/0x4a50 [ 169.931981][ T9153] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 169.932010][ T9153] ? __asan_memset+0x22/0x50 [ 169.932032][ T9153] ? __hrtimer_setup+0x1b7/0x260 [ 169.932052][ T9153] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 169.932076][ T9153] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 169.932134][ T9153] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 169.932152][ T9153] ? kstrndup+0xbd/0x160 [ 169.932183][ T9153] ? kstrndup+0xbd/0x160 [ 169.932209][ T9153] hwsim_new_radio_nl+0xd8b/0xf90 [ 169.932243][ T9153] genl_family_rcv_msg_doit+0x233/0x340 [ 169.932270][ T9153] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.932301][ T9153] ? bpf_lsm_capable+0x9/0x20 [ 169.932324][ T9153] ? security_capable+0x7e/0x2c0 [ 169.932350][ T9153] genl_rcv_msg+0x614/0x7a0 [ 169.932376][ T9153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.932393][ T9153] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 169.932413][ T9153] ? __pfx_ref_tracker_free+0x10/0x10 [ 169.932450][ T9153] netlink_rcv_skb+0x226/0x4a0 [ 169.932476][ T9153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.932496][ T9153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.932537][ T9153] ? down_read+0x2be/0x330 [ 169.932568][ T9153] genl_rcv+0x28/0x40 [ 169.932584][ T9153] netlink_unicast+0x7bb/0x940 [ 169.932616][ T9153] netlink_sendmsg+0x813/0xb40 [ 169.932650][ T9153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.932678][ T9153] ? aa_sock_msg_perm+0xf1/0x1b0 [ 169.932709][ T9153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.932729][ T9153] sock_sendmsg_nosec+0x13a/0x180 [ 169.932760][ T9153] ____sys_sendmsg+0x54e/0x850 [ 169.932787][ T9153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.932818][ T9153] ? import_iovec+0x73/0xa0 [ 169.932838][ T9153] ___sys_sendmsg+0x2a5/0x360 [ 169.932870][ T9153] ? __lock_acquire+0x683/0x2cf0 [ 169.932900][ T9153] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.932927][ T9153] ? futex_wait+0x2a2/0x390 [ 169.932982][ T9153] ? __fget_files+0x2a/0x420 [ 169.933006][ T9153] ? __fget_files+0x3a2/0x420 [ 169.933042][ T9153] __x64_sys_sendmsg+0x1b1/0x290 [ 169.933069][ T9153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.933118][ T9153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.933139][ T9153] do_syscall_64+0x174/0x580 [ 169.933163][ T9153] ? trace_irq_disable+0x3b/0x140 [ 169.933187][ T9153] ? clear_bhb_loop+0x40/0x90 [ 169.933210][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.933228][ T9153] RIP: 0033:0x7f548319e019 [ 169.933256][ T9153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.933271][ T9153] RSP: 002b:00007f5484149028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.933295][ T9153] RAX: ffffffffffffffda RBX: 00007f5483425fa0 RCX: 00007f548319e019 [ 169.933308][ T9153] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 169.933319][ T9153] RBP: 00007f548323500c R08: 0000000000000000 R09: 0000000000000000 [ 169.933330][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.933341][ T9153] R13: 00007f5483426038 R14: 00007f5483425fa0 R15: 00007ffcc4401578 [ 169.933373][ T9153] [ 171.091373][ T9200] bond0: entered promiscuous mode [ 171.096657][ T9200] team_slave_0: entered promiscuous mode [ 171.104967][ T9200] batadv0: entered promiscuous mode [ 171.111773][ T9200] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 171.121950][ T9200] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 171.135171][ T9200] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 171.148069][ T9200] bond0: left promiscuous mode [ 171.153244][ T9200] team_slave_0: left promiscuous mode [ 171.169917][ T9200] batadv0: left promiscuous mode [ 171.681950][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 171.721536][ T9230] netlink: 'syz.3.849': attribute type 2 has an invalid length. [ 171.750712][ T9231] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 171.760154][ T9230] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 171.777662][ T9228] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 171.799880][ T9231] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 171.866434][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 172.232731][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 172.234211][ T9247] syzkaller1: entered promiscuous mode [ 172.264270][ T9247] syzkaller1: entered allmulticast mode [ 172.681998][ T9259] sctp: [Deprecated]: syz.0.858 (pid 9259) Use of int in max_burst socket option deprecated. [ 172.681998][ T9259] Use struct sctp_assoc_value instead [ 172.870128][ T9270] ªªªªª!: renamed from virt_wifi0 [ 172.877938][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 172.905046][ T9271] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 173.076351][ T9277] netlink: 'syz.3.864': attribute type 3 has an invalid length. [ 173.094370][ T9277] netlink: 'syz.3.864': attribute type 3 has an invalid length. [ 173.107722][ T9275] netlink: 96 bytes leftover after parsing attributes in process `syz.4.863'. [ 173.129595][ T9275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.863'. [ 173.132674][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.866'. [ 173.680290][ T5637] udevd[5637]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 174.076289][ T9325] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20001 [ 174.129084][ T9331] netlink: 'syz.4.878': attribute type 12 has an invalid length. [ 174.156617][ T9331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.878'. [ 174.169466][ T9331] netlink: 'syz.4.878': attribute type 12 has an invalid length. [ 174.184975][ T9331] netlink: 'syz.4.878': attribute type 12 has an invalid length. [ 174.202754][ T9331] netlink: 'syz.4.878': attribute type 12 has an invalid length. [ 174.276959][ T9333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.311899][ T9367] __nla_validate_parse: 32 callbacks suppressed [ 175.311917][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 175.389103][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 175.427019][ T9363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.885'. [ 175.482505][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 175.610575][ T9375] syz_tun (unregistering): left allmulticast mode [ 175.657509][ T9375] bond0: (slave syz_tun): Releasing backup interface [ 175.811808][ T9379] vlan5: entered promiscuous mode [ 176.186011][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.897'. [ 176.293739][ T9405] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.322565][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 178.139678][ T9433] lo: left promiscuous mode [ 178.150349][ T9433] batadv_slave_0: left allmulticast mode [ 178.162690][ T9433] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 178.171266][ T9433] bond1: left promiscuous mode [ 178.176525][ T9433] bond1: left allmulticast mode [ 178.227608][ T9433] bond6: left promiscuous mode [ 178.239633][ T9433] bridge1: left promiscuous mode [ 178.261002][ T9433] bond6: left allmulticast mode [ 178.275924][ T9433] bridge1: left allmulticast mode [ 178.313838][ T9433] bond7: left promiscuous mode [ 178.319894][ T9433] erspan1: left promiscuous mode [ 178.327849][ T9433] bond7: left allmulticast mode [ 178.333925][ T9441] validate_nla: 29 callbacks suppressed [ 178.333941][ T9441] netlink: 'syz.4.905': attribute type 3 has an invalid length. [ 178.367938][ T9433] erspan1: left allmulticast mode [ 178.388804][ T9433] veth3: left allmulticast mode [ 178.414697][ T9433] gretap1: left allmulticast mode [ 178.426751][ T9433] bond8: left promiscuous mode [ 178.431791][ T9433] gre1: left promiscuous mode [ 178.583497][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 178.694311][ T33] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.735168][ T33] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.762761][ T33] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.789817][ T33] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.809800][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.910'. [ 178.820612][ T9462] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 178.889684][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 178.977885][ T9473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.913'. [ 179.077816][ T9473] syzkaller0: entered promiscuous mode [ 179.102840][ T9473] syzkaller0: entered allmulticast mode [ 179.129713][ T9479] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 179.522004][ T9496] syzkaller0: entered promiscuous mode [ 179.528068][ T9496] syzkaller0: entered allmulticast mode [ 180.016884][ T9531] netlink: 'syz.0.926': attribute type 49 has an invalid length. [ 180.078234][ T9530] xt_bpf: check failed: parse error [ 180.333037][ T9553] netlink: 'syz.2.931': attribute type 21 has an invalid length. [ 180.374337][ T9553] netlink: 'syz.2.931': attribute type 20 has an invalid length. [ 180.731332][ T9581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.974236][ T9594] Cannot find add_set index 34 as target [ 180.983792][ T9594] __nla_validate_parse: 7 callbacks suppressed [ 180.983808][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 181.454766][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 181.464078][ T9616] netlink: 'syz.2.944': attribute type 30 has an invalid length. [ 181.480734][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 181.491009][ T9616] netlink: 'syz.2.944': attribute type 30 has an invalid length. [ 181.503325][ T47] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.512328][ T47] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.522762][ T98] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.548324][ T98] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.054852][ T9534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.262201][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 183.560645][ T9669] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002 [ 183.848960][ T9676] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 184.108198][ T29] audit: type=1800 audit(1785725990.571:3): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.966" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=918 res=0 errno=0 [ 184.397884][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 184.416322][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 184.428096][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 184.609710][ T9721] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 184.637200][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.658642][ T9721] bond0: (slave team0): Enslaving as an active interface with an up link [ 184.721631][ T9723] netlink: 'syz.1.972': attribute type 10 has an invalid length. [ 184.748856][ T9713] infiniband syz0: set down [ 184.763389][ T9713] infiniband syz0: added xfrm0 [ 184.773654][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 184.798755][ T9713] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 184.814478][ T9713] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 184.833085][ T9713] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 184.896125][ T9713] RDS/IB: syz0: added [ 184.902311][ T9713] smc: adding ib device syz0 with port count 1 [ 184.908965][ T9713] smc: ib device syz0 port 1 has no pnetid [ 184.917397][ T5759] xfrm0 speed is unknown, defaulting to 1000 [ 184.929694][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 185.096130][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 185.244551][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 185.375329][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 185.506267][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 186.972284][ T9700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.197129][ T9736] xt_hashlimit: size too large, truncated to 1048576 [ 187.338930][ T9748] netlink: 'syz.1.978': attribute type 2 has an invalid length. [ 187.417538][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'. [ 187.436426][ T9739] xfrm0 speed is unknown, defaulting to 1000 [ 187.472365][ T98] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 187.476942][ T9758] netlink: 'syz.4.982': attribute type 30 has an invalid length. [ 187.489771][ T9758] netlink: 56 bytes leftover after parsing attributes in process `syz.4.982'. [ 187.521742][ T9741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.565875][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.980'. [ 187.708024][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 188.048959][ T9776] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 188.066650][ T9778] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 188.140678][ T9785] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 188.234615][ T9785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.283743][ T9793] netlink: 'syz.3.993': attribute type 1 has an invalid length. [ 188.326220][ T9787] bond4: (slave veth5): Enslaving as an active interface with a down link [ 188.348255][ T9783] bridge1: entered promiscuous mode [ 188.358066][ T9783] bond2: (slave bridge1): making interface the new active one [ 188.366590][ T9783] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 188.406698][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.993'. [ 188.422606][ T9785] bond4: (slave dummy0): making interface the new active one [ 188.445104][ T9785] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 188.473692][ T9799] netlink: 'syz.1.989': attribute type 10 has an invalid length. [ 188.501524][ T9799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.989'. [ 188.604216][ T9794] bond4: (slave geneve4): making interface the new active one [ 188.614076][ T9794] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 188.624226][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 188.639792][ T9797] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.648434][ T9799] dummy0: entered promiscuous mode [ 188.658638][ T9799] bond4: (slave dummy0): Releasing active interface [ 188.870601][ T9813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 189.033290][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.143165][ T33] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.172528][ T33] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.295930][ T9819] syzkaller0: entered promiscuous mode [ 189.311368][ T9819] syzkaller0: entered allmulticast mode [ 189.326835][ T9828] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.341341][ T9837] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.999'. [ 189.832096][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 190.098811][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 190.109660][ T5637] block nbd64: NBD_DISCONNECT [ 190.151783][ T9858] nbd: device at index 64 is going down [ 190.332106][ T5637] udevd[5637]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 192.287205][ T9854] batadv_slave_0: Caught tx_queue_len zero misconfig [ 192.520131][ T9873] bridge0: entered promiscuous mode [ 192.531852][ T9873] bridge0: entered allmulticast mode [ 192.559905][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 192.577998][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 192.578354][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 192.612665][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 192.660388][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 192.703884][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 192.800404][ T9888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.891012][ T9892] bond0: entered promiscuous mode [ 192.901852][ T9892] bond_slave_0: entered promiscuous mode [ 192.913174][ T9892] bond_slave_1: entered promiscuous mode [ 192.940825][ T9892] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 192.978100][ T9892] bond0: left promiscuous mode [ 192.986911][ T9892] bond_slave_0: left promiscuous mode [ 193.000493][ T9892] bond_slave_1: left promiscuous mode [ 193.063990][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 193.088017][ T9902] syzkaller0: entered promiscuous mode [ 193.108861][ T9902] syzkaller0: entered allmulticast mode [ 193.288075][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 193.326827][ T9922] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1021'. [ 193.381234][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1021'. [ 193.606352][ T9926] xfrm0 speed is unknown, defaulting to 1000 [ 193.759209][ T9938] macvtap1: entered promiscuous mode [ 193.771973][ T9938] macvtap1: entered allmulticast mode [ 193.786807][ T9938] veth1_to_bridge: entered promiscuous mode [ 193.802157][ T9938] veth1_to_bridge: entered allmulticast mode [ 193.825756][ T9938] team0: Device macvtap1 failed to register rx_handler [ 193.847988][ T9938] veth1_to_bridge: left allmulticast mode [ 193.860332][ T9938] veth1_to_bridge: left promiscuous mode [ 194.398329][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.405171][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.461031][ T9957] IPv6: Can't replace route, no match found [ 194.577292][ T9959] pimreg1: renamed from bridge0 [ 194.634726][ T9959] pimreg1: left promiscuous mode [ 194.651769][ T9959] vlan3: left promiscuous mode [ 194.668407][ T9959] geneve0: left promiscuous mode [ 194.685446][ T9959] pimreg1: entered allmulticast mode [ 194.698346][ T9959] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 194.861273][ T9972] netlink: 'syz.1.1036': attribute type 16 has an invalid length. [ 194.903698][ T9972] netlink: 'syz.1.1036': attribute type 17 has an invalid length. [ 195.076628][ T9972] bridge0: left allmulticast mode [ 195.095869][ T9972] dummy0: left promiscuous mode [ 195.188166][ T9972] ip6gre1: left allmulticast mode [ 195.202328][ T9972] vlan2: left allmulticast mode [ 195.211440][ T9972] bond0: left allmulticast mode [ 195.218985][ T9972] bond1: left promiscuous mode [ 195.226178][ T9972] bond2: left promiscuous mode [ 195.231061][ T9972] bridge2: left promiscuous mode [ 195.239348][ T9972] veth3: left allmulticast mode [ 195.247794][ T9972] batadv1: left promiscuous mode [ 195.254974][ T9972] batadv1: left allmulticast mode [ 195.264153][ T9972] vlan5: left promiscuous mode [ 195.268981][ T9972] bridge0: left promiscuous mode [ 195.366253][ T33] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 195.378235][ T33] bond4: (slave veth5): making interface the new active one [ 195.394812][ T33] bond4: active interface up! [ 195.457116][ T9995] netlink: 'syz.0.1043': attribute type 19 has an invalid length. [ 195.466034][ T9995] netlink: 'syz.0.1043': attribute type 20 has an invalid length. [ 195.753171][T10001] xfrm0 speed is unknown, defaulting to 1000 [ 195.837378][T10014] bond0: entered promiscuous mode [ 195.856289][T10014] batadv0: entered promiscuous mode [ 195.878830][T10014] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 195.902476][T10014] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 195.929243][T10014] bond0: left promiscuous mode [ 195.956249][T10014] batadv0: left promiscuous mode [ 196.706559][T10045] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 196.927201][T10056] netlink: 'syz.1.1059': attribute type 4 has an invalid length. [ 197.156563][T10064] tunl0: Caught tx_queue_len zero misconfig [ 197.182969][T10062] syzkaller0: entered promiscuous mode [ 197.204185][T10062] syzkaller0: entered allmulticast mode [ 197.351398][T10068] bond0: entered promiscuous mode [ 197.362282][T10068] batadv0: entered promiscuous mode [ 197.370587][T10068] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 197.392490][T10068] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 197.409306][T10068] bond0: left promiscuous mode [ 197.416195][T10068] batadv0: left promiscuous mode [ 197.498487][T10078] batadv_slave_1: entered promiscuous mode [ 197.515870][T10077] batadv_slave_1: left promiscuous mode [ 197.655467][T10084] tipc: Enabled bearer , priority 0 [ 197.726535][T10093] __nla_validate_parse: 14 callbacks suppressed [ 197.726554][T10093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1070'. [ 198.113446][T10109] syzkaller0: entered promiscuous mode [ 198.125428][T10109] syzkaller0: entered allmulticast mode [ 198.155119][T10112] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 198.220375][T10090] tipc: Disabling bearer [ 198.247698][T10109] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1074'. [ 198.260700][T10116] bond0: entered promiscuous mode [ 198.272920][T10116] team_slave_0: entered promiscuous mode [ 198.295364][T10116] team0: entered promiscuous mode [ 198.316189][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 198.329558][T10116] batadv0: entered promiscuous mode [ 198.337552][T10116] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 198.343697][T10121] netlink: 'syz.3.1080': attribute type 17 has an invalid length. [ 198.348207][T10116] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 198.369420][T10116] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 198.380657][T10116] bond0: left promiscuous mode [ 198.387353][T10116] team_slave_0: left promiscuous mode [ 198.393419][T10116] team0: left promiscuous mode [ 198.399576][T10116] batadv0: left promiscuous mode [ 198.466396][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 198.905039][T10148] can: request_module (can-proto-0) failed. [ 198.915751][T10158] netlink: 'syz.0.1089': attribute type 25 has an invalid length. [ 198.934199][T10158] netlink: 'syz.0.1089': attribute type 3 has an invalid length. [ 198.952364][T10158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1089'. [ 199.058225][T10153] erspan0: entered promiscuous mode [ 199.089803][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 199.123080][T10156] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 199.337862][T10171] netlink: 'syz.0.1093': attribute type 26 has an invalid length. [ 199.384041][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 199.413508][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1093'. [ 199.766467][T10196] tipc: Started in network mode [ 199.784033][T10196] tipc: Node identity 5ee634e64829, cluster identity 4711 [ 199.818652][T10196] tipc: Enabled bearer , priority 0 [ 199.876685][T10200] syzkaller0: entered promiscuous mode [ 199.912738][T10200] syzkaller0: entered allmulticast mode [ 200.015139][T10202] ip6gre2: entered promiscuous mode [ 200.051120][T10202] ip6gre2: entered allmulticast mode [ 200.135814][T10196] tipc: Resetting bearer [ 200.450426][T10227] tipc: Enabling of bearer rejected, already enabled [ 200.511161][T10238] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004 [ 200.844925][ T810] tipc: Node number set to 382678246 [ 201.241416][T10270] sctp: [Deprecated]: syz.2.1112 (pid 10270) Use of int in maxseg socket option. [ 201.241416][T10270] Use struct sctp_assoc_value instead [ 201.308146][T10270] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 201.331861][T10270] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1112'. [ 201.520200][T10272] tipc: Enabled bearer , priority 0 [ 201.540969][T10272] syzkaller0: entered promiscuous mode [ 201.548622][T10272] syzkaller0: entered allmulticast mode [ 201.562461][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 201.586309][T10272] tipc: Resetting bearer [ 201.601419][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 201.601978][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 201.614662][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 201.673267][T10271] tipc: Resetting bearer [ 201.848625][T10271] tipc: Disabling bearer [ 202.228818][T10305] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 202.338437][T10307] xfrm0 speed is unknown, defaulting to 1000 [ 202.400471][T10312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.506577][T10320] netlink: 'syz.0.1128': attribute type 10 has an invalid length. [ 202.662545][T10325] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 202.930321][T10325] bond4: entered promiscuous mode [ 202.960094][T10325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.139156][T10321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.192513][T10321] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 203.242308][T10321] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 203.259982][T10321] bond4: (slave xfrm1): making interface the new active one [ 203.269705][T10321] xfrm1: entered promiscuous mode [ 203.310411][T10321] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 203.355039][T10362] netlink: zone id is out of range [ 203.376134][T10362] netlink: zone id is out of range [ 203.392131][T10362] netlink: zone id is out of range [ 203.400379][T10362] netlink: zone id is out of range [ 203.411335][T10362] netlink: zone id is out of range [ 203.421451][T10362] netlink: zone id is out of range [ 203.444237][T10362] netlink: zone id is out of range [ 203.463072][T10362] netlink: zone id is out of range [ 203.474566][T10362] netlink: zone id is out of range [ 203.489365][T10362] netlink: zone id is out of range [ 203.581142][T10373] __nla_validate_parse: 7 callbacks suppressed [ 203.581160][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 203.581483][T10372] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1141'. [ 203.819425][T10372] 0·: renamed from hsr0 (while UP) [ 203.828842][T10372] 0·: entered allmulticast mode [ 203.839799][T10372] hsr_slave_0: entered allmulticast mode [ 203.846163][T10372] hsr_slave_1: entered allmulticast mode [ 203.859118][T10387] bond0: entered promiscuous mode [ 203.869061][T10387] bond_slave_0: entered promiscuous mode [ 203.882490][T10387] bond_slave_1: entered promiscuous mode [ 203.907942][T10387] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 203.939467][T10387] bond0: left promiscuous mode [ 203.952927][T10387] bond_slave_0: left promiscuous mode [ 203.963105][T10387] bond_slave_1: left promiscuous mode [ 204.084096][T10389] syzkaller0: entered promiscuous mode [ 204.106354][T10389] syzkaller0: entered allmulticast mode [ 204.108107][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 204.171595][T10391] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 204.187248][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1147'. [ 204.196761][T10391] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 204.349851][T10400] netlink: 'syz.3.1147': attribute type 6 has an invalid length. [ 206.807705][T10401] netlink: 'syz.3.1147': attribute type 6 has an invalid length. [ 207.082709][T10434] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 207.097228][T10432] bond6: option primary_reselect: invalid value (6) [ 207.118850][T10432] bond6 (unregistering): Released all slaves [ 207.152129][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 207.161269][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 207.161669][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 207.371840][T10434] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 207.398342][T10460] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1161'. [ 207.420541][T10434] bond5 (unregistering): Released all slaves [ 207.710301][T10476] IPv6: Can't replace route, no match found [ 207.888975][T10463] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 207.909739][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 207.931657][T10468] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 207.948449][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 207.963313][ T1162] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.974467][ T1162] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.143143][ T1162] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.168179][ T1162] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.203822][T10489] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 208.220369][T10489] syzkaller0: linktype set to 0 [ 208.243593][ T1162] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.276302][ T1162] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.342965][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.363531][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.453993][T10498] syzkaller0: entered promiscuous mode [ 208.468252][T10498] syzkaller0: entered allmulticast mode [ 208.571696][T10511] net_ratelimit: 39 callbacks suppressed [ 208.571714][T10511] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.602303][ T29] audit: type=1800 audit(1785726015.061:4): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1171" name="memory.events" dev="tmpfs" ino=1288 res=0 errno=0 [ 208.639419][ T29] audit: type=1804 audit(1785726015.071:5): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1171" name="/newroot/249/memory.events" dev="tmpfs" ino=1288 res=1 errno=0 [ 208.882172][T10518] __nla_validate_parse: 2 callbacks suppressed [ 208.882190][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 208.936561][T10518] 8021q: adding VLAN 0 to HW filter on device bond9 [ 208.975558][T10528] bond9: (slave batadv1): Opening slave failed [ 209.030106][T10535] batadv_slave_1: entered promiscuous mode [ 209.042032][T10532] batadv_slave_1: left promiscuous mode [ 209.108715][T10520] bond6: option fail_over_mac: invalid value (127) [ 209.130287][T10520] bond6 (unregistering): Released all slaves [ 209.252411][T10539] syzkaller1: entered promiscuous mode [ 209.264159][T10539] syzkaller1: entered allmulticast mode [ 209.493875][T10557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.520654][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 209.538137][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 209.657127][T10561] syzkaller0: left promiscuous mode [ 209.668084][T10561] syzkaller0: left allmulticast mode [ 209.887126][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1187'. [ 209.931488][T10572] netlink: 'syz.1.1188': attribute type 30 has an invalid length. [ 209.938564][T10571] netlink: 'syz.1.1188': attribute type 30 has an invalid length. [ 210.008151][T10572] bond5: option arp_missed_max: invalid value (0) [ 210.015040][T10572] bond5: option arp_missed_max: allowed values 1 - 255 [ 210.104281][T10572] bond5 (unregistering): Released all slaves [ 210.310800][T10571] bond5: option arp_missed_max: invalid value (0) [ 210.317752][T10571] bond5: option arp_missed_max: allowed values 1 - 255 [ 210.341976][T10571] bond5 (unregistering): Released all slaves [ 210.378739][T10595] openvswitch: netlink: Message has 4 unknown bytes. [ 210.386381][T10586] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1191'. [ 210.395971][T10595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.478607][T10595] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1193'. [ 210.606062][T10599] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1195'. [ 210.712106][T10599] syzkaller0: entered promiscuous mode [ 210.726459][T10599] syzkaller0: entered allmulticast mode [ 210.752677][T10602] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 210.771058][T10599] TC_ACT_REPEAT abuse ? [ 210.783605][T10602] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 211.897020][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1210'. [ 212.190278][T10667] syzkaller0: entered promiscuous mode [ 212.196754][T10667] syzkaller0: entered allmulticast mode [ 212.430057][T10672] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 212.465181][T10672] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1215'. [ 212.539870][T10680] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 212.557650][T10680] netlink: 'syz.3.1217': attribute type 8 has an invalid length. [ 212.567603][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 212.729536][T10687] ipt_REJECT: ECHOREPLY no longer supported. [ 213.259173][T10716] netlink: 'syz.4.1228': attribute type 2 has an invalid length. [ 213.317446][T10716] : entered promiscuous mode [ 213.847561][T10750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.862344][T10750] netlink: 'syz.4.1235': attribute type 4 has an invalid length. [ 213.911045][T10750] netlink: 'syz.4.1235': attribute type 4 has an invalid length. [ 213.951271][T10750] netlink: 'syz.4.1235': attribute type 10 has an invalid length. [ 214.924074][T10814] nbd: must specify a device to reconfigure [ 215.041659][T10819] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 215.047520][T10820] __nla_validate_parse: 3 callbacks suppressed [ 215.047539][T10820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1247'. [ 215.229393][T10827] vlan2: entered promiscuous mode [ 215.231427][T10825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1246'. [ 215.242998][T10827] bond0: entered promiscuous mode [ 215.249369][T10827] bond_slave_0: entered promiscuous mode [ 215.256051][T10827] bond_slave_1: entered promiscuous mode [ 215.282319][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 215.319748][T10834] netlink: 'syz.2.1251': attribute type 3 has an invalid length. [ 215.338254][T10823] netlink: 'syz.1.1248': attribute type 5 has an invalid length. [ 215.770581][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 215.802401][T10856] tipc: Enabling of bearer rejected, failed to enable media [ 216.220477][T10859] ------------[ cut here ]------------ [ 216.226269][T10859] len >= 65536u [ 216.226306][T10859] WARNING: ./include/linux/udp.h:49 at udp_v6_send_skb+0xd3b/0x13a0, CPU#0: syz.4.1256/10859 [ 216.241931][T10859] Modules linked in: [ 216.246327][T10859] CPU: 0 UID: 0 PID: 10859 Comm: syz.4.1256 Not tainted syzkaller #0 PREEMPT(full) [ 216.256407][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.266555][T10859] RIP: 0010:udp_v6_send_skb+0xd3b/0x13a0 [ 216.272421][T10859] Code: 42 0f b6 04 38 84 c0 0f 85 37 06 00 00 41 0f b7 1e e9 60 f3 ff ff e8 74 f5 42 f7 90 0f 0b 90 e9 02 f4 ff ff e8 66 f5 42 f7 90 <0f> 0b 90 e9 e9 f4 ff ff e8 58 f5 42 f7 90 0f 0b 90 e9 94 f5 ff ff [ 216.292625][T10859] RSP: 0018:ffffc900058cf4c8 EFLAGS: 00010283 [ 216.298825][T10859] RAX: ffffffff8a841e9a RBX: ffff888053a8f100 RCX: 0000000000080000 [ 216.307552][T10859] RDX: ffffc9000dc92000 RSI: 00000000000049b5 RDI: 00000000000049b6 [ 216.315930][T10859] RBP: 000000000000244c R08: ffff88802f8a3e00 R09: 0000000000000003 [ 216.324069][T10859] R10: 000000000000000b R11: 0000000000000002 R12: dffffc0000000000 [ 216.332062][T10859] R13: ffff88802b986640 R14: 0000000000010000 R15: ffff888053a8f102 [ 216.340154][T10859] FS: 00007f54841496c0(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000 [ 216.349211][T10859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.355885][T10859] CR2: 0000200000010000 CR3: 0000000066fa2000 CR4: 00000000003526f0 [ 216.364038][T10859] Call Trace: [ 216.367360][T10859] [ 216.370322][T10859] udp_v6_push_pending_frames+0xa2/0x140 [ 216.376076][T10859] udpv6_sendmsg+0xfa0/0x2610 [ 216.380796][T10859] ? iovec_from_user+0x87/0x250 [ 216.385714][T10859] ? __sys_sendmmsg+0x273/0x4d0 [ 216.390594][T10859] ? do_syscall_64+0x174/0x580 [ 216.395453][T10859] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 216.400648][T10859] ? inet_send_prepare+0x5b/0x260 [ 216.406221][T10859] ? inet6_sendmsg+0xe4/0x120 [ 216.411231][T10859] ? __pfx_inet6_sendmsg+0x10/0x10 [ 216.416466][T10859] sock_sendmsg_nosec+0x90/0x180 [ 216.421442][T10859] ____sys_sendmsg+0x54e/0x850 [ 216.426307][T10859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.431676][T10859] ? import_iovec+0x73/0xa0 [ 216.436298][T10859] ___sys_sendmsg+0x2a5/0x360 [ 216.441020][T10859] ? __lock_acquire+0x683/0x2cf0 [ 216.446053][T10859] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.451334][T10859] ? __pfx_futex_wake_mark+0x10/0x10 [ 216.456813][T10859] ? __fget_files+0x2a/0x420 [ 216.461433][T10859] ? __fget_files+0x3a2/0x420 [ 216.466255][T10859] __sys_sendmmsg+0x273/0x4d0 [ 216.470958][T10859] ? __pfx___sys_sendmmsg+0x10/0x10 [ 216.476473][T10859] ? do_futex+0x3e7/0x4e0 [ 216.480854][T10859] ? rcu_is_watching+0x15/0xb0 [ 216.485707][T10859] __x64_sys_sendmmsg+0xa0/0xc0 [ 216.490581][T10859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.496715][T10859] do_syscall_64+0x174/0x580 [ 216.501329][T10859] ? trace_irq_disable+0x3b/0x140 [ 216.506822][T10859] ? clear_bhb_loop+0x40/0x90 [ 216.511530][T10859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.517779][T10859] RIP: 0033:0x7f548319e019 [ 216.522224][T10859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.541967][T10859] RSP: 002b:00007f5484149028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.550521][T10859] RAX: ffffffffffffffda RBX: 00007f5483425fa0 RCX: 00007f548319e019 [ 216.558717][T10859] RDX: 0000000000000001 RSI: 0000200000006780 RDI: 0000000000000003 [ 216.566769][T10859] RBP: 00007f548323500c R08: 0000000000000000 R09: 0000000000000000 [ 216.574822][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.582930][T10859] R13: 00007f5483426038 R14: 00007f5483425fa0 R15: 00007ffcc4401578 [ 216.590940][T10859] [ 216.594142][T10859] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.601441][T10859] CPU: 0 UID: 0 PID: 10859 Comm: syz.4.1256 Not tainted syzkaller #0 PREEMPT(full) [ 216.610826][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.620899][T10859] Call Trace: [ 216.624196][T10859] [ 216.627143][T10859] vpanic+0x56c/0xa60 [ 216.631165][T10859] ? __pfx__printk+0x10/0x10 [ 216.635776][T10859] ? __pfx_vpanic+0x10/0x10 [ 216.640307][T10859] ? is_bpf_text_address+0x292/0x2b0 [ 216.645621][T10859] ? is_bpf_text_address+0x26/0x2b0 [ 216.650848][T10859] panic+0xc5/0xd0 [ 216.654594][T10859] ? __pfx_panic+0x10/0x10 [ 216.659044][T10859] __warn+0x315/0x4c0 [ 216.663033][T10859] ? udp_v6_send_skb+0xd3b/0x13a0 [ 216.668070][T10859] ? udp_v6_send_skb+0xd3b/0x13a0 [ 216.673109][T10859] __report_bug+0x276/0x570 [ 216.677639][T10859] ? udp_v6_send_skb+0xd3b/0x13a0 [ 216.682680][T10859] ? __pfx___report_bug+0x10/0x10 [ 216.687732][T10859] ? __get_hash_from_flowi6+0x1e1/0x430 [ 216.693301][T10859] ? __pfx___get_hash_from_flowi6+0x10/0x10 [ 216.699227][T10859] ? __ip6_make_skb+0x1033/0x2100 [ 216.704366][T10859] ? ip6_cork_release+0x92/0x150 [ 216.709321][T10859] ? udp_v6_send_skb+0xd3b/0x13a0 [ 216.714387][T10859] report_bug+0x16a/0x220 [ 216.718747][T10859] ? udp_v6_send_skb+0xd3b/0x13a0 [ 216.724047][T10859] ? udp_v6_send_skb+0xd3d/0x13a0 [ 216.729084][T10859] handle_bug+0x9c/0x200 [ 216.733397][T10859] exc_invalid_op+0x1a/0x50 [ 216.737913][T10859] asm_exc_invalid_op+0x1a/0x20 [ 216.742772][T10859] RIP: 0010:udp_v6_send_skb+0xd3b/0x13a0 [ 216.748414][T10859] Code: 42 0f b6 04 38 84 c0 0f 85 37 06 00 00 41 0f b7 1e e9 60 f3 ff ff e8 74 f5 42 f7 90 0f 0b 90 e9 02 f4 ff ff e8 66 f5 42 f7 90 <0f> 0b 90 e9 e9 f4 ff ff e8 58 f5 42 f7 90 0f 0b 90 e9 94 f5 ff ff [ 216.768441][T10859] RSP: 0018:ffffc900058cf4c8 EFLAGS: 00010283 [ 216.774541][T10859] RAX: ffffffff8a841e9a RBX: ffff888053a8f100 RCX: 0000000000080000 [ 216.782539][T10859] RDX: ffffc9000dc92000 RSI: 00000000000049b5 RDI: 00000000000049b6 [ 216.790533][T10859] RBP: 000000000000244c R08: ffff88802f8a3e00 R09: 0000000000000003 [ 216.798522][T10859] R10: 000000000000000b R11: 0000000000000002 R12: dffffc0000000000 [ 216.806638][T10859] R13: ffff88802b986640 R14: 0000000000010000 R15: ffff888053a8f102 [ 216.814648][T10859] ? udp_v6_send_skb+0xd3a/0x13a0 [ 216.819702][T10859] ? udp_v6_send_skb+0xd3a/0x13a0 [ 216.824757][T10859] udp_v6_push_pending_frames+0xa2/0x140 [ 216.830418][T10859] udpv6_sendmsg+0xfa0/0x2610 [ 216.835141][T10859] ? iovec_from_user+0x87/0x250 [ 216.840024][T10859] ? __sys_sendmmsg+0x273/0x4d0 [ 216.844943][T10859] ? do_syscall_64+0x174/0x580 [ 216.849738][T10859] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 216.855015][T10859] ? inet_send_prepare+0x5b/0x260 [ 216.860061][T10859] ? inet6_sendmsg+0xe4/0x120 [ 216.864764][T10859] ? __pfx_inet6_sendmsg+0x10/0x10 [ 216.869895][T10859] sock_sendmsg_nosec+0x90/0x180 [ 216.875035][T10859] ____sys_sendmsg+0x54e/0x850 [ 216.879920][T10859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.885335][T10859] ? import_iovec+0x73/0xa0 [ 216.889857][T10859] ___sys_sendmsg+0x2a5/0x360 [ 216.894562][T10859] ? __lock_acquire+0x683/0x2cf0 [ 216.899527][T10859] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.904754][T10859] ? __pfx_futex_wake_mark+0x10/0x10 [ 216.910084][T10859] ? __fget_files+0x2a/0x420 [ 216.914696][T10859] ? __fget_files+0x3a2/0x420 [ 216.919407][T10859] __sys_sendmmsg+0x273/0x4d0 [ 216.924109][T10859] ? __pfx___sys_sendmmsg+0x10/0x10 [ 216.929322][T10859] ? do_futex+0x3e7/0x4e0 [ 216.933694][T10859] ? rcu_is_watching+0x15/0xb0 [ 216.938483][T10859] __x64_sys_sendmmsg+0xa0/0xc0 [ 216.943444][T10859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.949526][T10859] do_syscall_64+0x174/0x580 [ 216.954133][T10859] ? trace_irq_disable+0x3b/0x140 [ 216.959186][T10859] ? clear_bhb_loop+0x40/0x90 [ 216.963905][T10859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.969814][T10859] RIP: 0033:0x7f548319e019 [ 216.974241][T10859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.993862][T10859] RSP: 002b:00007f5484149028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.002293][T10859] RAX: ffffffffffffffda RBX: 00007f5483425fa0 RCX: 00007f548319e019 [ 217.010278][T10859] RDX: 0000000000000001 RSI: 0000200000006780 RDI: 0000000000000003 [ 217.018265][T10859] RBP: 00007f548323500c R08: 0000000000000000 R09: 0000000000000000 [ 217.026296][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.034302][T10859] R13: 00007f5483426038 R14: 00007f5483425fa0 R15: 00007ffcc4401578 [ 217.042317][T10859] [ 217.045499][T10859] Kernel Offset: disabled [ 217.049825][T10859] Rebooting in 86400 seconds..