last executing test programs: 12.090310262s ago: executing program 2 (id=6045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01002cbd7000050000000900000008000100000000000500070002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c2470000e799bde2d42981e4cd03700b19a1f07371d8342b9bb6d3c299f2841621923bbd0846a08aa13bebd67c234826cdc2aebc90681c41e7aa1a2b4e3853efd420607e3c02da4b3fd4aaf700f55ddf29dd17f5ff78fec9e25ad710b1c2514730a1c40ce2db71231c75556b3726187637318cc754fe4c494aba5c2d91cd681436c9bb6c0355ca9ce44f44f01464f0959731dfe3a8751e307eab49f9a58723924590efe4475e341cdee106af3ebb3f8b86aa523546e06fd43171a16a2effe75bbc057d5cc18f7c66bceaf9ef52bffddb2c633e4871890c51cdb50e20aaec6bc750d6a23fab1598fdf8d1b3f314b41d8ac31c160b6bd0e47a8cb513771db05435136817f996cb0be169046f28d0c28cf068a41a6512d7aeccfc44528e57b291a44f6803409b5d7712c79057b650e4b6ed364f4943079b4d9af7c4decc5f8866", @ANYRES16=r1, @ANYBLOB="01002cbd7000050000000900000008000100000000000500070002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) (async) 3.913575476s ago: executing program 3 (id=6139): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2ab4, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1a63, 0x11}}}}, [@NL80211_ATTR_PROBE_RESP={0xb8, 0x91, "2ba662a966448a2ed17d9e492d0246629034dd3bf2db5c23e3e7f8328e2856f12ec7099d3c0488435dbf3218ed12bc8fea57b6286340b91d39418458db6cdcd9b932a1340f99c2bc946c3c8a06d0a86c5cfaddd6e33cc95ef983191b0d82be652d78abecc03b225a898e3b6d0c5d0e28760cea98b792457cba0f3dbb98c0965b1e190e1a11574f6d3a53fdf6fedd77ea1a530eb829316227e371a46cf5714f495b254b3a1855304b6a853e9dad2ec4489461efc7"}, @NL80211_ATTR_IE={0x91, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x10, 0x2, 0x0, 0x0, {0x0, 0x9a3, 0x0, 0x6, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x8, 0x6}}, @ibss={0x6, 0x2, 0x10}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random_vendor={0xdd, 0x3e, "700c3da91e1478dbac1fb99a533ef1571afbeee7767c9caefb94bc75ef1431ea7cb633e356d66ed255dcc3d3d756d3e0231dda3052f140efa440994a2047"}, @dsss={0x3, 0x1, 0x6c}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0xb2, 0x7}}, @ht={0x2d, 0x1a, {0x32, 0x2, 0x2, 0x0, {0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x1}, 0x400, 0x4, 0xf}}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@mesh_chsw={0x76, 0x6, {0xff, 0x7, 0x11, 0x3}}, @cf={0x4, 0x6, {0xe, 0x0, 0x1, 0x767}}, @supported_rates={0x1, 0x6, [{0x1b}, {0x23, 0x1}, {0x9}, {0x18, 0x1}, {0x6}, {0x6}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0xff, @device_b, 0x4, @value, 0xc2b, 0x6f6461bc, @device_a, 0x456d}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x9, 0x60}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2114, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "01d937fc75439cbee57b99ba3b8c35016db476a95c8f3f1e4938bb1e7727f7ec808054998b45b1cf28215e62b8bd6e48211988bdfc5f6ce8509c6fdde06a47cfd231c50af5fdb06cf8572facf376ba4ab7e1ad1099c664d18a75cf5d0e37e079dd6139c6a8f938f43ff4a2603b023904c7f477ca7f5b8678fcc67ae50028ef53a56bef9ce9344d66f40be2d2e52aab034fe2caf3199dd16bcd3aab4b7edf69a1d09bf021b2eea74d4b883b938ec3718b3d84e908f9aa5afb4adf36adc212a044dbe6ff076a62fa290227368a1889169a71aaa131df7cf3ddf20d76da4bcf33bb49ef9abd1e7c50b8b7e80f0241e55c47391daae8ca2c82cc9ba3b28aea774b734fd182f0c58857f8498c94e7dfd274bc6b4cf97eda4f4bd0a0d177edc8a2898a52d3cf0f29200796462f3e03e4e11222d6c20c314cb24cf04a6342fb1ed9df4029e1208788d1f9f14a8343b552e1c4b4abd4c933c37619cd0c30799fd473250993e99250907bed42031ab18a489daa38576b02e5bfe6dbdd97916fa436c38df76e6be2bc24115cb4ad86a9ef2df38336fd5c51332425ca7db22f5aec97bf9243543b2f573f95f6fbd1a60a457ec9f883463554216355c58c71945c8eebfc1d5fc2c6f6dfcdfd6ecb9eb2db1b55c35cef63759207f4485a38f99615a638ad5e39515fed1ab0beb8c582a0e9c965c12aef10ebbe81067e58ec527f78658c576e8051023f4b606cfef8bd487580503e9b32433d4bbcf0fead0545f53a85224dc4606095cbf701ab05af2766a46c736432ded1d100f345e6e9092fccd47564975dbadcaa5a4e3762190c4bffdfe7f0b665dcebc3d3c9bb633f553441222685ceb3c68de2d13e766034ff49a6eab42b097593bd0a92eedfcf9a367bbe3928b23f8a2bb9ac058e2a70b504fff5f42862a40caf11f729de1b90f9ac501d63895a75c35667c3664631d492c2d4e2dc4d6351094a24014cc81da4678070a003197d5f42d6e480fbfd1b9b4a048014f498902500e4543a90763a53756a921997dc444516015b53127c3c41af4f43db68fbd0e3b1ae1b1c5307b8812a86ff2deb67a8cf63fb8a010c7170aecba3748e130629fde2ab043b0a39f6ba6749d8f3f53893f18377194345b61eea27af2c7b7f530e39e7360a01c6ab74f488f8bc9d41f03ca61f7ccd6c8e1f70969ea0f23fcf155bc1de96d88693257bb92fb5b0fe89ca5f3c29b4ae6db49851125c88e2c92902f9fa8b1e138761ab8ec230d5d1c193b357b593c7668d19bc0fe765e066b9c21d0ac46160edc6de51407760006742f1120142e43690317fb1b01582443093d2b66b1e296e2b31f62abd4aa29ff24e81b0c1895b9d33b752dc440ae66a9b212b4cb727989a41e765bbe3f779e296efb92b5c1e1c6f5036f7b487970823f13b08c5cfc87c145dad8736a106be627f9dc800bb632605ea4b73929caf7cfb2c0a736a30a152a931df2370c7353a3c37d11cfe03465da571fb1bd836648506fbb30f4bfbefe0e7edab4a39fe792321464222b7016d723996f81c76692cba0b98a567a7b1679630678bee959dc882f11f6aa55b6cc941309918d1f3917ab1edfd267eda09fb6e6df2fa2aa496ff17a17d1d4e4b4fbd5aebb3de7f63569371583c752d07188a93659867815fa2f8f095ad3a2f26b4677f3e0a471515b45a84acff472ae1c8661fd0f963fa3a15ef6ab78553ba58851fe5b750fc6f6d8bf249ec45dd02adb9361c18a7c5a631acde416229d449dd8b415251474676902c99fb79d78a171bcf69cd2d66791513458044594055c5623a921fe4d7c4f4b80b34c993445beb2b51c4ad4b07361490370330ec9c3023f1c97378372a2ddd3e0c113abb502c69ac24042bb1e00271562caccf181f9390549112f03c3a0028867aaec967fcaf3ef39bb21b8e55e9ffd4f893b3ba39830d0f761463213174fd5e43686cf77f3371ce594f75466ba351c7adf9c389e1f35e12cb8c7387b037b0488ebeae441dfd705d8437f465ed7a89f358df8b2df67e666aae370661d12786f1f54098e3d57c4f8ae792fe57c49d6c90cee30f35aa89128a1ef21bcd3eadfb4c4c71784c80af55b452103ef83eb1a8fe2fbcc71aadd9915a634dfd83a6c181b51812bfa81bebf154a1eda23f172598b7088d9963bbc89d195eb49f5d5fe52bc528c8c574ed130b318164014b15cdefb102aed3bce1c60cacb4ac62e1025913589b1d6ecb0dc77cdb19610eb91e8fe8c13585f3d0aa0a57c6ca40747be7d7b6f8ed34cfc0542858601c0d264ee9c136ca8d39104905c4aff956c2b805dac87c9b84748ee0c5aded3eb1c8be940155e4c4937ea5a3c89b327415b6f4e741877c882b3300bf3df03f5a02ac736133fb71afc2b2e0f4873fb572caf7708a5d09f1f32012ea23d35d2517d144686eedbfbc24b97831b84d7ad8bc5429c2976f9691fe0a80d10d5b29641b858c600ec76851924b6413f669cffba471acfcf2d7be15fe91a0140490dae0a9e4f6b296ea272023ad09a86ce24a12a5bb212bac872c3a4c118c3a99aae5aa66807d8599c1592040b5927f4bc7a86b9050671b5147843b7aa44c9a1999e473c5e2d0c509a7a88bc037dd7f97a057a4081c6bb256009420155b31fecb5bc225272f986edaf5fdeafc79318e0f15198b93f23cf1fd12dd7942fe56cd55a5f0f000be040dbf3cee58b39fb4612b10e89eb7b12900e8c2de93f0d5ce39f6d0324856794068d5e9b2dda834fb4b2053cd45d06cf3e8ad615b81ec5d8c19dca3c5325024e686c5735ddee986d4cd24a7e06d9c2c346699e2ea1d008d256fb0ebbf49320bc96f2e3bc15e3ef8ce09b200ba3c2fa7f914104678b1e051f9a830f4da2d80db6512e96c60b16dde1dce0b82f6448fe1eb5883bd7118166446ec7de932d5fa38ba79f04af4bd093021c2e423bd6fc9589b4ac347bda66cb22edf00fa1d5cbda18e5f5903ef826a366c6747f22b3ed612e0546bcb285ea3d3f6859b8391ab46f5beabca7b994c29a2f494ba94f8db84dccef5cec020c313c43ea67c22214a0df7f48707cb018f7cf0d212af1bb19da4ad20e510194f47f4d10d806ff28dc3b718c0e31e78aba0c976c99fe40028f81297edbc50aca0abcadd04bc9f48ac2d62de9241d26f98260f256ed51ea152bf8912dceb608deff9625e15b492d1951e1e65ebc967eec7aeb17e32c9384c1d345ee900b1b1b5b74a8a72f98e47a33f143edc1b5a470bb727739331ee306fa94cf8774cf06ff25d54d27fc941a168a80e16d4495945427995d28e96fe3af8c1ee2a24fa52e887dcf3c889012e1d0e87d8f556b8a9122b994ff1d1c52548d0f5c2ce6a9e81361718ee140b4a70f721d3d523cdc4773f93eb4c0cad7c6367e696376767216b33f7b6e65eb5dc8e3fa03f5e5b016167b627e06179a543896d248eb29b741245cf8b067b33c88aebac938f768075732a8cb9a4107ed151a520c79795e023cb17e3b399c0fbfa7594faa6264f27ab06c8b24d979c25fc6c14d2b9d440209ed09054afe8da2465f3c37a0f91537e8d1f9c274ee6a29817bf40c57b6f4cd04765d48b4582b7837fb8299a6a9474ad9f51d69a6493607f85bd19e214e8108032c5c9bca38da38400ac0e92f6a2f971defe1163cdd147daa64cede981d5443b4b3ae33c2f5f7923f8fd47eafa41f3faf493298daae51aec9692b42fd84ab680ef6ac9ef8add79a1eb7af51923fd759d347c87ed97c985cc32da55f3ee6662b60e254734b0ac02b1529af94d9abc916f22e012b628b5bf167f77c1b1fc0f08b7f74c25ae73ce4d13a78544848b804b532ad36c49bf0e71b29f30d1ddd8d2668961c9dff5b51748e47556ec29b273dd8b9fcf95927d00c262f08e2f28f382aa2cf6a0d488d211aa6164a2e837f304e1371425d75c553e65caf778a2de2bad36019f7330b67795da73a6972f33523f2765912a834c36e64c2e4d1e9c2ac263a70b9a5ba1823a105d3d83415d628e424aee1373973954ca9cc9f3d6cbb0e4b52b0c4ec95e9e53c633a5f05adfbe7ea0f4a92714a1d204dd10f855c23693082e9fddfba545de45f46f8de525da576fec89939c4ab2d5a7b1510dd3d9aa65c270f6edea24eb7a4beb9b0596737bbe9cfd7d3600686b8aae467e914751d5f10e89e6b56974c999921b7d4818ae95cf38d4055e70a15e5147c3bf1ed8cdcd147a4d4eb5f1ab0a8462ad237dfd0f28f3b0adf5334dd80872e10223f560d9bed2bfe9db45ac0b028d49635e783e7ececf6852deac8d5d57fc69348a50a5ee100cc5a59f554a5af46262d1722d55e224356da22dac75c9ffe95a8814abc44bb8f6cae81f4a30a80e37e6f6e146a3e1194351128b5211620def1ad7355aa997131637ce62e8bea3c847222fef02bcb650db413834b82ceaf1ad85f65f4a64311f5a2ecb703b0efba0e754bc6190b07f5ca1277cdb3e2ed140a971a573f54aff07ee407f6dbb58650656624a3651b9e26ca008bce1d4ebfb87b94b92c64152835cfd94e039c871e3a59aea2869778f8e3bcf330283db499201737fad0813dbcdde6d1aef55f4c93991e92ec165ab98cee6f111f0eb82317999a14ee87a55575303165a13630459950cb91ee4b476905926588f5058fd26bec22b420879ddf00030cadf7009d6f8b20ccbcab74732d5e9729b8d11f8ca29b7a4b371d483115d26c0fc08d42b8e7654bfb500a36c8902b1746a6aa873bf1ac63b8b37a859d2d5d30a0cc6fc3e81f3e5ebe000c5389afc91ce061a1806770e95ff1d8687fae67a5e957c887839d32b5ca068435f6a05e293657299553001669248d7cda0eaaeae4daa1f04cf87759acf547abacfe2f636a76296318a6d802ff09e5b20ff132a278592505633c82f9e4a9adb7f7e37b79c3141db9e888a60dd12b5a977fa20bf39c52243fdd3df7f808e714667ee3bee39b5244d5aa483f13f7b0e389b7fce39854334a96107ddd5a71df3e58de9ed10c8d3119f14d74a636dc41fbb009d75fcc7654b35e17605c271f0585547bf51928c85d0699fe5cf7a775603538f8ad620ffa3fdede8dbc6ea76333b066194518021851a71aafd0779677fc7a1b82498cc63c084345445ed1fca1c5384ee95219851a3a3725fa4a8ccdf4ae155148a15dd880c9e93acba6e50d203f862eff8b54fc89f94031fb624ae9d2b45fbf1580b2f519a8a2f5ab8a061aa75ca2eceafe78e90c790fb31902198d8a8be6f52ef298c8e4abe996494732c24f737c08b0f01cfe07861d4898aecf41a8ff81fd1dec99ce8bc8b70a60ec4995b7ef90a65d98ad13f96664ac0d8120e51c038e3ecdbe485ee40a464ccc760db5745d17182d1d1881bf1e33d6542dcc9d02ed63f77542b409425d1a6804da0bb47125f09e36a14048a02347e3865514e557363d7034fd32d5f6af3ea59f4da98b3083f3215f4356eefe6940eddd35ef8630fd589efdceaa8d3259c74840d02610e7339e6856c9a282689181385ad4214de8d48968d68731198816e82e3687ba07eeb16ab0c5bbcebc6fba72ba4a584970876b7693773091276899c9cd74a449a035ce1469e5de20de0c605f4d7cd78ba27e50002d62781bd619ad457f76f12157ec488be348b89261e5c51d8b26a0b82c12415bd4785f57b2e76f5e94cc35e1850bbf83b7e3be3ac304d2e24c5d7102b2ca355c7ab5087391fe9b56b19474eacdda63bf2b3cfd11a2d50d6d5ef3a488fcbf6a1f27096fbf80eae423a702e727a146a0a56beaf0bc771d6006f2f0bad7dcefcbcd70404294ec9ad46315217e5d2ddc7bacb"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x75, 0x2, "e97617b03afeeb7a6be9a726cbe11330568e81a8249ceb49878a307c553315741da097d750b49b0134abf55502a59d36da32444ef9c3c5c5b8e01a61314c7e118c6520d65ac59dcdd851d1698482ea13757b900b1463a4caebdc3bf9383f82e1d8164b2edf23b7d13eb86f87186c60afab"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7a, 0x3, "069d854f49c18db512117bbe0c3f9ca2965dbf2a9e7349e3d4908cb18a3a31a6d8c318096038367d1a91386f230e10ff036438e56fb561744f2c91aadf9a25b3288e88c75204d3e9a0a2e722bf7d6f437cfdd5d56861169f49519649cd83cc78ae63b4149753c663192b160d35220f4fd14843dccc9e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x35, 0x7f, [@cf={0x4, 0x6, {0xff, 0x4, 0x2, 0xa}}, @cf={0x4, 0x6, {0x4, 0x6, 0x7, 0x5}}, @rann={0x7e, 0x15, {{0x0, 0x20}, 0x80, 0x9d, @device_a, 0x80, 0x7, 0x8}}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0xa}}, @channel_switch={0x25, 0x3, {0x0, 0xb2, 0xff}}]}, @NL80211_ATTR_PROBE_RESP={0x6f0, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xb4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x20, 0x3, "e2444cb8c9c6a31da157dc12832e27802b5a6aa26cf53c4acf65ab8e"}, @NL80211_FTM_RESP_ATTR_LCI={0x88, 0x2, "4763324124ea83a1d56f53502400eb73f926a52f14e0823ab252bc628a592fe28ae72c55f364d431ef7cd3cca2cf69694f8b8625aecb9cb046446c125053eea66c8dbe593175dffac5742f44555d1c8dcad1d56b6216b9f538f2cf1f2594804ff3c26ee3766cebbf2e6663d30a3367e658b0975015931964223313a412a155147da24ad2"}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@gcr_ga={0xbd, 0x6}]}]}, 0x2ab4}, 0x1, 0x0, 0x0, 0x10}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002100090027bd7000fcdbdf15010000000100000000000000092effb03d09f1460ebd973ef4f6a02738832d50a22846", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.740196143s ago: executing program 3 (id=6142): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x18}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010000104000080000000000000802b00", @ANYRES32=0x0, @ANYBLOB="2b0300001842010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005000c0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.818329261s ago: executing program 3 (id=6147): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xd) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x30) 2.51793213s ago: executing program 0 (id=6151): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="b78b3994f10bdd50d5de1fc55400eba9185d2998ad76fc5db353634847551b16f87198d902580351e7488b688fa28279f85355c7e088f0b5e472864ff2a7d9575acb2d0af617601aada2bc7422c894b8398087c72a97562b758ed4c6eaa556980f0d1912f9409d588040f664cc381edda4812b03e8081040d0b352d789c682d24313af603038cce491b4eda2f778ed8c9cc9de115d365552ed9c89a6fda37a5b6dab8a641fd7d20aa73bd2c12dbd239741d00e11c72bd89cef3d143bcffc9b55958b36134fec0c84c349dc32ccf75f57958916d2df1190e9a2d6b6f40633e2d3709f3bf3acae5c", 0xe7}, {&(0x7f00000001c0)="5e13383aa72880711b28da07f70a3091fbae02cba62ce246dc7f871993c6b839140d2f76ba03f67a6f791eac8c96523b5ac132a5846189bb636bc5b19ec9dcab2243cb9190c88c68e8cb4829bb9b46cb32c6eb936e88fbb7e74dba6d32fef0fffd647026a8d0dbeac7161250b18cce6894555d6da7ae0803d1", 0x79}, {&(0x7f0000000300)="e8e692d439d5206601c1063d162fb79f53d2ec50a95a69b375c9bcc6fe5b2cdb8ecd0c00d7f5d8bc6a284e580af58f0eecb7b03693407b08f49a19c903621f9aec775c2b2a51f4fe10a2f7841fe5429693448325b498481b84c9dfdf5e7ce2443bd0fb29480d8a8703f574918e1bb8ea8245130410e6db7413dbd26ae9aed02adc87f2038a579e8a849f71557d767758ca8896f61bae9665ca000959837293d3ef6f71288f283ee148684a3d482fa52db8", 0xb1}], 0x3, &(0x7f00000003c0)=[@iv={0xb8, 0x117, 0x2, 0xa3, "f98cb09e9e0ecfb9cb941032a35c3c2fdadb0247dabbd375cf8197a0adc47f7d9a1fefff043abbf12ad29c1b389b29cbd77cdf15c61cd8270839a8897e526da46f0e5f5b147eb921efa0866aee2ee8554817c00b329c7f07340e9b39f61c812b3b7cf9329f161887baf03b1b77b839fceb2d6d1c128ddee31d91723f9350ca9cb214c4f37c63000df029995a6daab5090fc12d1aa0912dfa76c5620531f114f74b9720"}, @assoc={0x18, 0x117, 0x4, 0x401}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x60, 0x117, 0x2, 0x46, "84f2850b844e00d2d40d59470824f2be5385ce14fa01a6085fc901afa4b07b47e5257cc9237caa88fb18e5f14bfcba9d4e4a6271c468b8486bb9fd0bd0176b4a9e6b70dfac86"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x190, 0x844}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="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", 0xfc}, {&(0x7f0000000280)="35edf5b21fa11ffa46bf4b5a611d2cac57618425ccfae48dc0e8b358a62bbd3f26803eda4f9c6e22ebd1aa27e107db6c2f7c700e12a3e89a4768f9bfb9961f02", 0x40}, {&(0x7f0000000680)="dcf17a36421331b23c9e980adab78332ab040d9dd75c8915e07270a277097c484b8aee40dc885085bea501c4aa9b30ffa4de042d74b466f144e6e630d7184f3a70c8fcce6c37fcee7e954e53c0334ef8f33f3d73dfc80aaab5ce521c67d2de61b44dc77d28492db485", 0x69}, {&(0x7f0000000700)="26e08ba304292403132772f6d998edf5424a30d2817eba0ad60e11a734a20ae662c6ea1e2b6bed0e8408dd22f413601ff9d3685c19cee6ce76183f14e4bfb909c768fb406fd8d16241f08f50b3f2c626ce35ed3c8883d3076b486795", 0x5c}], 0x4, &(0x7f00000007c0)=[@op={0x18}, @iv={0x30, 0x117, 0x2, 0x1b, "5cbd489122bc1ec9d67418115e90f6e3652f2b2b5892042c901d64"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x58, 0x117, 0x2, 0x3f, "9d8226ded050a13232cc9149c714d67a911d30a6a22e8272f1e8b57e75499ec3e4fcd94d9c5a0794dc46d20c1f3ab29a45bf180e8957416d7b80a8717c34e4"}], 0xb8, 0x40}], 0x2, 0x404c084) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket(0x10, 0x803, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) r5 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r5, &(0x7f0000000040), 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0xea) connect$inet6(r1, &(0x7f0000000900)={0xa, 0x4e20, 0x0, @local, 0xf}, 0x1c) 2.513620071s ago: executing program 3 (id=6153): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) (async) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000000180)=""/48, 0x30}], 0x2, &(0x7f0000000400)=""/179, 0xb3}, 0x20) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4100, 0x1004}], 0x1) (async) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4100, 0x1004}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x1000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2000000000000252, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) 1.921227717s ago: executing program 4 (id=6159): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) (async) r0 = socket(0xb2dde53c6e92ef4d, 0x80000, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, 0x0, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001980)={'wlan0\x00', 0x0}) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000001bc0)={0x0, 0xff}, 0x8) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, 0x0, 0x40840) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf2519000000080003007a1e253cf9f586eaf55170406a1708176745380fd452bc586c6e7508509fe17111e208be5655ba2be5428d0c217ac72d47449feed736c87d8cf3ce2c89e7e718b44f2d812f74235c7ec67041334a8d0a5ae8b1acbef9e1087bdc5bb16c8a1eb0073ff04e4cae43de99b5544f61a9533f7a690fb18956b923cf58da2aa620dd1b8450e2f1b9d3", @ANYRES32=r7, @ANYBLOB="06006d0007000000"], 0x24}}, 0x40) socket$netlink(0x10, 0x3, 0x400000000000004) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8000) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x1, 0x40000000}]}, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100, @val=0x80}}}}}}}, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) 1.745509456s ago: executing program 3 (id=6161): r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xffffff00, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xa4, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44}, 0x80) (async) close(0x4) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0xfffffffc, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14], 0x90}}, 0x0) 1.745180447s ago: executing program 4 (id=6162): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00"], 0x64}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x100000000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x4001800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x62, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000180)=0x1, 0x4) 1.581496876s ago: executing program 1 (id=6163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x30}}, 0x20000054) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=@gettaction={0x30, 0x32, 0x301, 0x70bd2b, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.478950641s ago: executing program 3 (id=6164): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0), 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000340)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000006c0)=ANY=[@ANYBLOB="e904a20000000180c20000000800ff002000004e2100000010907862040000000000000000000000000000000000000000007bcb848bed1d85ebfdd96a9836e7fb20a85e3585"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800810002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x4) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x254, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x10}, 0x48040) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) r14 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r14, &(0x7f0000000440), 0x10) r15 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r15, &(0x7f0000000080), 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r11, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xe5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x80) 1.426028656s ago: executing program 0 (id=6165): r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) 1.399421648s ago: executing program 2 (id=6048): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 32) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x20000000000002a8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x8000000}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x3, 0x207, 0x0, 0x0, 0x1, 0x7, 0x8000}, 0x20) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r11 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES16=r6, @ANYRESHEX=r12, @ANYRES32=r13, @ANYBLOB="0c00990007009b000000000000005200", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x4800) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="800029007000fc080003006e5d9c80013000000000000000", @ANYRES32=r13, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@deltaction={0x24, 0x31, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffeed, 0x1, 'ipt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r15 = socket$netlink(0x10, 0x3, 0x18) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r15, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) recvmmsg(r15, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/235, 0xeb}}], 0x1, 0x10000, 0x0) (async) bind$netlink(r15, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r16 = socket$nl_route(0x10, 0x3, 0x0) write(r16, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async, rerun: 32) setsockopt$sock_int(r14, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) (rerun: 32) sendmsg(r14, &(0x7f0000000500)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x20040000) 1.353420193s ago: executing program 1 (id=6166): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000000f0ff00bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7e38e52c997b03b72b3d0ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da00000080f24bf901115e17392ac66ad029d1c00000614600d53daeacea799a22812a1b3cab4d785c908c54f7a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b48610e9eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c2815df09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa9a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a62ec45c3af97a8f17da954aff3ec8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac70af2df2c772b0031fe13cab6692402a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cac8b4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf1301800000ff14a99202d9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ec7966130b547dbd8b0000f0a77fbcf2cd1d0000002000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf90040662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f64293091c989f72dcbbad3fdcd6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d506d7a59a3ad09e8802e8f4f535447cc0fc9d5f89a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd11642d5577fb9030036bce9c764c714c9402c21d181aa0820d89f235a3f1c5fc853e59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa809000008e1d41e1dcf6e6879545b92bd49000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84937e859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af40fffe0000000000749efd3763655500344bae34137f5ab0d534b8d43e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b00cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe44dc87c92332af00f191b66b6a6f7323e8faffc0886f4af7fc100dcb39c77a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a437367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85cff7f000000002c331fca0e541b7ca211c28ed61c5257080f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce4616d42b07199de8b99231ace58c77819ee2b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e604bae6b13df468ad87a6c769f952283a1f4e3842edb3d40c68a2001000006dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa671e934e94d1eb3de6a5f99f301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe6e6e79900369c17b0ed16acdce1b12b70000000000f4e8cdbadbec962a7edc91c6b80f53e3b19c372e40e2139ff4c1180365eb5b71d834eb0293e252b96e6c90ec4d23cc42e88d262c1fdc317c7c000000acbc1248f2389d7fbcc10a377cc4e28460c0516534bdb3ff372bfd94efa0d32b214b39cea885557d39265a1c5e08c29914db042aa4fe23a92f387ae6d7565d3ca6ceb040f859de2e47f6c04bc55f3b81249faf3a505ac0d29e053b9c1832e8a25a54ae433e43036b032518200e2875736fc139a344bf3bf4d8f6f57e5c4b7f62a23758cb30e43f1974b14d4f3e1a8ce71995ce28564a50f418af2b6f22a7c70c2213ec629288604aa1a9f418487c864af9368a08bd37eecb0a810c5c24d7a82c07a8e68caa7ff2eaf100f6fd4c3af07d7a86b34f2f4d34abf2f92f1a41a330a4e8fbb4876393b38f79573cb53c263090d620a37ea25cde9445ccb74ebc22156465f4871436b44981455eccc221a8251f71c047203ac4d62b0012cab329a5d9003ceff42b007aa61880da20b0ad83ae368a19d2827840b8d00f92745508e63cddaac6d2d3c6cb03d512c5be9e7fd86e461e1e6a228e630029dbeddf37a6990c75ff6dcb6f32f61e59e3bf97f48954fd7908ab05e74815d909548b277bf5c4570eaeb265f4ffeacc3a4ec2edb261d53d09ebb6bdf811e2a4ef0be6392d86a5285a7fd2e4345e14786abafdd4852d3d62c334760c05e1bba37d0f0742c53242596e13bc22682ae15694aaaadef41bbd7185b74feaf59dea096a23a48c9eb3be5c546eda0f4b07916ab14e12839318e953f15fab94c9ba783015ebb6983d514e3b1f246f0a63c5a58cc2be0cb179791ec1b9a3e7e62c165ae39855182266b36ce9d2943c49a7f9a2a89a948b37f2bb830ea790a2b2c2fcd06bc499434dda842cfa91b2df4368f07eb2410aa387d146bccd22698f8f322fbdf4cddf11fd3b85325af8df473c8f156833e5488f31165e6a56d4c1c661bcbefcefd10f47b2e593b836be67bdc15c3b7fb497ecbca1506a577e81947505553dfdfe963c20c12575c4abc45cf9229af181317fde5262a73600f90e7457280ff4229507178c5df9acc273a7be76f6596b2ac36a2d28627e0012f989d7f7a20f2b38eef5efc339b8784ad5fe6fac77926d83a73e3647a6351c23d7e51cf459e5d169d42566b012193338f67612c22eab89fb14a40edd2694696048f9d51d26fa256eede4a9b5dd3508f9308883194ab3b0661d51b18dbdca9b5f70a91db8fc9b19291664eccc8274340eef00c743588b0ae4e7280db3b7bce3041a5bb9fced08059a2518eaf35df7388a518965a9b4c6ee27872be887b37319370a4587e50f28060b963a6e4d73b338f4e8929bc5ada66b6920c633119d17c090e72daa679c6e5bb155710679660004705fd8d4cac660fc32554a20feb5d74cafe562aff12fe126abf5927205867d5fca4a4ff8c7d0933cdfaf5864f4dae435d1ab9e711f48cd03f4cc130b54e18428341e675968ac19509fe7bff5ef0e55d71987e44027e29d02ac36f3c486bcf22f86170cbeeee2a5eb3adadb7d906f25c73df5cd22a8d1ca00b027a1ab966ab4799e631a21042685fc8c05d5e04ab21a66c5f221dabdac52b43a5980b1efb49d9e03d05f4d1a8756085d0305ff3c4cec8500000000000000000000924f7fdfa25a3331d13a50233f70742f16f6e13bd716905299ab21864ec9d3a93b1de03592b73b327348427508a2dcb953dd23e42adfc18fc891a247ba5c7ebd7fa6da7e3ef3d11d4b1bb534b48064aed03c5850c12abf87240b65221a64ec331c31ce394dad6142619893bff5c810f53dbd875837705ad5139a31ff058aacd51eed21216e0bd179cb00bf02af8dc25be8f318bca707c05a0235b86f37606e1cfbc9ee5cd9741c7648713b24107697039cc40aa538c24e8934cd88238237b21f0a901c488c55178984597ef91e7a8d60081cf34081b5df32ef9a89a25203093b8cbb5cd416d189cffcbdb6a336e3adefa39ea04e2c425864c766283829db5c2beb709da87edcee6b682f18abcac4fb9d785beb2f840079b54dfb9a8ab1a6bf4eea20bb51804ec3d3848bfd11ba6a42bc2823559b70eaed4c673e0e834611b6fec4816ee94c62e88b13037d02cffd561f9bb97d6569114d0e6a7170e229ab9e938c18a568184bd6759e5c3526fbcb46da794c5bcb6303f8a4abfe0d37a0d757c686b0b5171892f867020778fcc567a21b04e684e9da29e86c3e392564f93b38d7bec00e82cd32e2a521a715ae603c12ff286ca67757d74553ce8607a1c5c4856e50094904bf08ecde97b7c513bf64252e839439b65ae0125fd8e9c6d142ee7a6af20cd5370396db6f616fb9e5a2824a5cd9c10000000000000000000000000000fd6a689d6779abe81e6aa2c63fce0faf9531a700c8cc02ea5d83f57fbfaee919668e9ba4776f2d5a1d544ea17288de3895fc39713fe150efeb27d43fcc1b53c00a4ade36652ecdb7fab04afa69e2b6611c0233670808a206578c5a7d0266ccf6c80ec69b22c8c71c6d8a057b71d39b18f15311dd7149a75f91ce676516532c0b89e0a2d4323080444686a790eca0390eea32e6fb0bd40b79e2c86d01435be3ba1224970c7e10e4bc54323decb110fb66f25477e309041ce13c8d8b077ead176bc45c5050a88acae7f8aaf962a990e6269de74cb1a915b85c01019066f2858cf322a21ebec7e060da478e31f943e7c31bbdb43c26702a0257e7103b4d532336dc6f0bd5d33a6f7d1134872859afb35a4e0731b38d3a914ed3aa376917b0bc84f5"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x4, @vifc_lcl_ifindex=r7, @rand_addr=0x64010100}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x8, 0x0, 0x0, @local, @local, {[@srh={0x32}]}}}}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) (async) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x1, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) close(r2) 1.149478271s ago: executing program 1 (id=6167): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @empty, 0x2}, 0x1c) syz_emit_ethernet(0xc6, &(0x7f0000000240)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x90, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f, 0x10, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x2, 0x2}}, @generic={0x6, 0x66, "5805ff5aa65e93bf99715a7ac55e26671e6d9b512a062900ef9b00b013ad2d57e9270be5bbdb80dd6f933350f9418f2baed6f11dc538377a4a24ac63002b5bb87cc12010f9aef859d863203beee3e40ab59cbfce208bb85ededc11c05fb0f0f3a498a7c444df"}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}}}}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002700010000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000f0c1da2d59d67a9f74b23011a051a92497c7b2"], 0x50}}, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 1.053318364s ago: executing program 0 (id=6169): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 992.364171ms ago: executing program 1 (id=6170): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000900), 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c0000000000000d0100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x801) 914.304334ms ago: executing program 2 (id=6171): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x2, 0x7}, 0x2) sendmmsg(r0, &(0x7f0000008780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 821.917498ms ago: executing program 4 (id=6172): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2, 0x0, 0x1}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xfffd, @multicast2}, 0x4}}, 0x2e) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040884}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25ded9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) 737.080235ms ago: executing program 1 (id=6173): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2}, {0x306, @remote}, 0x8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'tunl0\x00'}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x60, 0x1dc, @vifc_lcl_ifindex, @broadcast}, 0x10) 625.368178ms ago: executing program 2 (id=6174): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 490.870377ms ago: executing program 0 (id=6175): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61143c00000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 489.363576ms ago: executing program 4 (id=6176): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0bd4d3c1b3066cc3c30c7e71d48199e6bb08", @ANYRES16=r2, @ANYBLOB="030329bd7080ffdbdf250a00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x44) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@fwd={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x88, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a3c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3100000000080005408000001d140000001000010000000000000000000084000a558d1f90016fa1ed6d61e9384b28"], 0x64}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000000740), 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX=r5, @ANYRES8=r11, @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r12 = accept4(r9, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r12) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xffe0, 0x3}, {0x0, 0x2}, {0x7, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x41, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 383.120912ms ago: executing program 2 (id=6177): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff05, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x7c}}, 0x8851) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 32) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@empty, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in6=@private0, 0x20, 0x6c}, @in=@multicast1, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x1, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x4}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r8, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r5}, &(0x7f0000000c40), &(0x7f0000000c80)=r3}, 0x20) 326.059762ms ago: executing program 0 (id=6178): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x20, 0x8, 0xb, {{0x3a, 0x4, 0x3, 0x9, 0xe8, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0x54, 0x71, 0x1, 0x1, [{@broadcast, 0x8}, {@remote, 0x400}, {@loopback, 0x6}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x8}, {@multicast2, 0x7}, {@broadcast, 0x3}, {@remote, 0xbbf}, {@multicast1, 0xffffffff}]}, @ra={0x94, 0x4}, @generic={0x86, 0xa, "72464ec3b988cd71"}, @ra={0x94, 0x4}, @cipso={0x86, 0x62, 0x0, [{0x0, 0xc, "f32b1b22c2951d8cd72b"}, {0x0, 0x12, "b714adb82d1613675374985c31e48d26"}, {0x4, 0xb, "62eae4d19f3317b5dd"}, {0x1, 0x3, 'd'}, {0x6, 0xe, '\x00'/12}, {0x6, 0xe, "c7c83aa827493cd1e5751968"}, {0x0, 0xe, "94895e58fcace7b0a15fcd4d"}, {0x5, 0x2}, {0x6, 0x4, "6e05"}]}, @end, @generic={0x94, 0xb, "39560f7dad1d09c7bd"}]}}}}}) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r7, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x521}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x5f, &(0x7f0000000280)=""/95, 0x1f00, 0x1, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x4, 0xffffffff}, 0x10, r4, r5, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=[{0x3, 0x4, 0x5, 0x9}, {0x5, 0x2, 0xc, 0x1}], 0x10, 0xc}, 0x94) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x3c}}, 0x0) (async) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 325.677874ms ago: executing program 1 (id=6179): syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000240)={'tunl0\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES8=r3]) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000480)={0x80}) read(0xffffffffffffffff, &(0x7f0000000380)=""/241, 0xf1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f00000005c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x25, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @exit, @alu={0x4, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x4}, @call={0x85, 0x0, 0x0, 0x7f}, @generic={0x0, 0x0, 0x1, 0x9, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r6}, 0x38) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="9bf348b744f9c9d82d5d3c823379", 0xe}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000000)={@random="7b0a1dc20879", @remote, @void, {@mpls_uc={0x8847, {[{0x3}, {0x80}], @llc={@snap={0x1, 0x1, '2', 'icR', 0x6007, "23bb32f1b4c79c3accd9edcf68acfb90a884bb93954d4877441564443e311dcdc300a01e604d71c3f77dba517b88c03db99c28ee2aeee5547712b17f5e8394c007dc467b08807bf6d40a41f38957d4af85fe78bee05dcf"}}}}}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="6539e8c6ef8320f22f78b76d84981b07", 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x4, {0x2, 0x4e20, @broadcast}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x1d, r9, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18, &(0x7f0000000680)={0x0}}, 0x44) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r8, @ANYRESOCT], 0x3c}}, 0x20000034) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x800) 220.776864ms ago: executing program 4 (id=6180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x1b, @val=@iter={0x0}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80200001800a00010071756f7461000000100002800c000140000000000000000014"], 0xf8}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfffffffd) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x2004c001) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x1b, @val=@iter={0x0}}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80200001800a00010071756f7461000000100002800c000140000000000000000014"], 0xf8}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r3, 0xfffffffd) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x2004c001) (async) 110.557102ms ago: executing program 2 (id=6181): r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) shutdown(r0, 0x1) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/136, &(0x7f00000000c0)=0x88) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="793bb8ca16a1980063957b4b37975979e6d089125c6fbc343a48829f011b8059e3ce5b7186097d86b791f286eb08a847b90fa7c3b0235e848006a482b240cdb58fcf8c475806764874c8cf3d0fd482", 0x4f) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f00000022c0)={&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000001280)=[{&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, &(0x7f00000012c0)=""/4096, 0x1000}, 0x2022) r3 = accept4$alg(r1, 0x0, 0x0, 0xc00) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000002d00)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002cc0)={&(0x7f00000023c0)={0x8d8, r5, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_FRAME={0xcf, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @device_a, @from_mac=@broadcast, {0x3, 0x8}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x5, 0x4, @void, [{0xdd, 0x45, "7cf6dc10799b67ba91f4e8f973567fc9f9d93b267e267e2f3824b3bc3106bce26c82e45c70d77ee9e74bbd4f28ebb75670148507ef3c713262f01be13060a015b5dad5d3c6"}, {0xdd, 0x21, "59611131d7b5ae2ad9445539393c9b182427734333557bc4bdccf109d396475223"}, {0xdd, 0x3d, "6ecf1db948b5697622741140f553304dafe6570e1339e76fc44243d2da2d1e6bd5f64c4eeb86e878d84cda6676e924e392b3f7ba02c468531d931bef2d"}]}}, @NL80211_ATTR_FRAME={0x5a0, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @device_b, @device_b, @random="0cf840c4ce0a"}, 0x57e3, @random=0x7, 0x5, @void, @void, @void, @val={0x4, 0x6, {0xb, 0x0, 0x8, 0x4e}}, @void, @val={0x5, 0xcc, {0xc, 0xe4, 0x0, "f364d274e01b71a35f185b3f1697002256c1749ce7d5e25256828f64a352836e9dd0a986faa7f3beff5c4efe938d28e35f85668925e91f4ab6e7bb39628c0879d6ea0d5f10b10c5c11ace11f70d8524d0fe713ba57f0723b560dd7a4eab8f29591d527a9c0e9656927cb4c038afae44b2999ee97012981cfd9598beb64f3d4d384f055af0b5aa8d96bfa5dce534e1367b454020c99f8184b92effd6c2e1d3aa2d0ae990c5f78f39c18311d9641c519d623e365f665fc5e2e1e5d97140ece277f686adc34292f2dc8a6"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x0, 0x6, 0x0, {0x7, 0x9, 0x0, 0xff, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x9, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x40}}, @val={0x76, 0x6, {0x7, 0x9, 0x40, 0x7}}, [{0xdd, 0x7b, "9de1ff504cf6a206ff5f6f133fad7d058540251209739cdd21ed7dee3e9bcb635f82ab45f8494145c37e2814f18fd5708043658f08bbe4a1b1f2f1072c84795fc2af72ef15cfee1a6e02acc7de2300aaf5e31b2b90c048c7f8aa5cb661f387b0b5a82abd552b65122b076935854bfd8cc6288128e36f8d460889a0"}, {0xdd, 0x44, "24204043240dc46c9040899bdd107c0d3cdb2764a4fab25a9e232d6db2ea6048fdc5611a8f8d5e2c7b55ee87a74b28b04961c938e01205024b013d2600ad1c300f9544b6"}, {0xdd, 0xc5, "d4f9cbd02b258dda3d8e8ade3b66886a3e57d2590c7f30d13eeb5b79d45fed5b566001474b359fca79a8626df759e66a5497081952bc6b6695ccd7c9695c036177b2c6b019fc4a5caaa59084f0646ded1ca02901a6522d129bfb7c98136809728eda25020b0cc7a5265704c5ec8a241ce257a156748b85269d70f4e05895b39ef0ce9ef9a1642c5e395b1e497ba10880eaf698da576716eeaa6f0435efc8675429aedfc8212b2c90bb7f7214a87dfd414681141e85b042a07fa8ccdf153ce9dc377199df01"}, {0xdd, 0x59, "4007904f5e7ec6dd73059c9f018e7a29ae2ad21ced7d7b1d96bf95882acce109bde012d42f410ff5c809af7f1eb46ff293f55ffb85e20b69ddf4fb902b86bce63a5f9395e4f8e06b11d6fe2666de01aaa8fee6369829f11bfb"}, {0xdd, 0x75, "d9b7cb529ba1e829e0e9b91b678c374bc368c97346addf6a49dc855f88d23dce096cb8831deb4f61d32df84668fc9b587ed05b938f3dae908efe79d073e6bd067b173fc54d1ec8a1aacfc91185d072b5e4d8999440698314a66379e9b01b8dec1e7c08f5be504250c1634bf1c9b913b8f1a78c428a"}, {0xdd, 0x6b, "49cbeefe23f1f6f8496aa6c36caff5445a02d1daf007d0cc45106ac85b1edef4c0ee7546838b4593469aa1d275ef290f45a445a4c1d9238bd108ce708ba0ca3fc14d9395cc8e749e4cc86c9d2a5820b638190d3b665db73fe5e12dd5906e95baffec973b5ada34b7e8533a"}, {0xdd, 0xee, "bb887dadc57bf623fd8530aad7c60b5ba0d7b9f2bd4dfb51609903775a0ee683254adb92db4bba1f0ac672c3171350610202b96e47e696bd7abef20f9179bca777184b5be187aa8a0f64ceb789e892b22f06d76371cc4034cdc67d0caa98211a1be9f61669b827453fc985ace97eb0a8979c00972a20728718bdeb83a2123da2d77b6e8ccece81b835e0a889e29dc1951aabacc4c4c2a48f6a2db53c0336e71a9fea64b7b90b9f4df29d4b777d42bfe84808ad647560b5160adcd90db5902060e4cb7ee40b589e24e2b91ecbc03e426acf81a5f84335735fd3c4f0fd6607ccaae945e1c9ce7e8c6469cb0662b717"}, {0xdd, 0xb2, "107e9f6d37ea4526d96a1271e95402833e37fc2eddbd6ff8ba672bf3b963bcffd1c4668afdec8f03fe271cbc18ce9baafe5680cf305397f161287ea00838b9a013c856b0710b50a7349353ccd5f462353144c8630fef463c99736202246f1ca3fcfa56c5be7ca61a3aea8b9ec348264814feb8ce83a33f5a34a47eb653960750b412e83265958005188150fe851f99d27885bab392aca9d2dc26b5f7e9c01c0c2058f3ec56a0bf873f4d610cff8910f7edd9"}]}}, @NL80211_ATTR_FRAME={0x202, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, @device_a, @device_a, @initial, {0x9, 0x9}}, 0x1, 0x2, 0x51, @void, [{0xdd, 0x46, "b236ad2523c60273e9124f7a5e3fbb126ce9d4dbcd0733f7432dad43b26902023f5409fd69a98dcb4575090a4bd7101bd406f58d48b899db6c4be9169bbec7363d2a941ccb61"}, {0xdd, 0x11, "2cd69216cfc38f8d16c0295d438a1c351e"}, {0xdd, 0x7d, "ea24fd25ecad1df2442ba520aac0d2bbe2792c4be5c252a91ee8fe0206bb06c9d403d85eabff8c9dd6bc522c47ee33ed84a04777dc98644ee6229c8be6cda04a502768c4ecb82fb4913734587c3a7a96e0af2356f6d64a9fb2b917cf514a724b618c0566f4a8aaf1ad8f7fa2455396ae723126d91a9e08ed73f8248a8b"}, {0xdd, 0x48, "8149e5b8725785df98d120e316fcc75074a90cb98918c58214aa306756a9b38d9c59b3ce006fb3280bc1b00deacadb683f6220a82ab3efe50b0f0b214d87b02f754997ec7a9f65fb"}, {0xdd, 0xba, "76283805e1d64bbb210b154740d4780e703db93f7eabaad40cd26dfd59f2a2debc351a67a30027923c9fe1ac29f9f069ee799a0d7d5cf69cfaa087aa7d5fc6c854314db9c12de2de6551df6681af44fc6a8735bebf4be6775367a2da2145c9e65482d6ec5961c66500dc4c08c55677d01a82f7603e3e2cd5dacba86d59b11c53e05449dd90918cc0dc26eedc9ed035342fae41f8f63dfaea0ee1959992c5fbce15881fcd158bbcc0aae4aafb41f9fe43928a78b82b2f7849a72a"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x926}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x255}]]}, 0x8d8}, 0x1, 0x0, 0x0, 0xc0}, 0x44001) (async) r7 = getpid() r8 = gettid() (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002d80)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002dc0)={r1, 0x0, 0x2, 0x9}) r11 = gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002e00)=0x0) (async) r13 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002f00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x64, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x200400c0) (async, rerun: 32) ioctl$BTRFS_IOC_SYNC(r13, 0x9408, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000002f40)={r10, 0x1, 0x2, 0x8}) (async) r15 = openat$cgroup(r10, &(0x7f0000002f80)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002fc0)={r14, r15, 0x2, 0x0, @void}, 0x10) (async) sendmsg$xdp(r14, &(0x7f0000003540)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003000)="aee819269d0325a154751a722bd74000a03bef08b15eacb1ab48d72e01413374c9f7fbc6d6c06309229538f4bf7dcfe156cabaadfacfe2ada5ad4ee1489397059863db38b93c64cc7c723e5851496714e42af6d324395d8f7d9d56630b73b96b235de2b419ff03c1718681e7c96b7140b164f91fd26a9531b1352bdf0a1c386cfb2919a6841b27ea86d07aafce1cbbf9bb94172614dd3c29228164bcba719bfadb8e55ac920e4deef1e216f0afe3fca04a676e790a896b695a7d62d0ad7cbd6975b54f7f3303f2bd8f4bccdb8924", 0xce}, {&(0x7f0000003100)="f723bd81a224f8bf99de64ccc56351d600d30cef38556f94430eaf7c6607a25d3e0fa5b69557181d6808e26c0efaf0d11d56659acb57c29112fd71238cecafd45fcce77810c07ea91c2aaa23d86084e1c204655e904e2dae87b84174d11167b38173bfc3ab91f1f2c5ae9c0f2c27412928c805d78550a013e279c5d16ed3266da2adfe0911b4495562de3972630d0432b6a826d193ebae28b0b589b5eba21ea1ee658d8f0254836fa98554d200c5fa01611a3778075718501b34164cf69073c1ee72abc512025696", 0xc8}, {&(0x7f0000003200)="a979bfa0f4e9c6d8aca10672718aa47e5b907ba949840f4ba3f2aa62a25469cf821f933adcb3483e23ca43d3d0a6b7a9d5b3f996148637870e5a07e1e0fde29c37674acc4d4b95d38ab4d12c4f95075db6fa0d19e1f389eff8b7630980c184b2220a524ef03a73a88321e2fd54903bbbb6107f3c13e278de1963615656fd389b397eff32213ad77809fcd03699dec6bd9e266551497228ca463ba4fc6df748a0ff2243bcbb3703d5d843574fd93d2d2e0106e6da78c872", 0xb7}, {&(0x7f00000032c0)="08329bb74c1a168c3c820e86c94b022fb209bf70d40a10b263ae3f22bf5a857e4597f700dfb6cbe85f6c169cb53c4df30b7618a89d45d1a2e21cc5bb0f15065ab4fdc59ffd7caae3fb28d69d262ce729de7ec9d5e34d00118ea3caebbdeb110930830fc8eeaff115fc9f062c38294ba7b41ce9243c333af360459ed6d21ba9b9fbf409fb86", 0x85}, {&(0x7f0000003380)="1ff5bf2d2cbca235448db25bac", 0xd}, {&(0x7f00000033c0)="6006616571aab0c7def4adb451c2cf51f4e9a736a01bfe46a555eb96b134961fab9cb55eb37d32ee8b3d7bb760e9387379f5f16362ace10c20f1a222d8c2c0d154c72a45f8591b2ef490cf7743928301783b511c7e18029bab39407ca6c50706c4a0fbcbddba6b305c74b8e1209a3cfbf7b7f8cf2d0c62c4489944992970a7033b11e1db6e415bc2ae5c25e91bf8e27137457044871dead4abf41eb0415488dc4f13ed895c79e8dfe4fe3bc644ad72f9e40b458ec1e79a57fac8e03f65ceea7d0968cb839b2f3d9b7334e0a70e55b00d15c15a72128e7ffdb85934c552a39a94349e8e6bbac82ba02a24c56e780e3400ee61", 0xf2}], 0x6, 0x0, 0x0, 0x40000c1}, 0x4040004) (async) r16 = socket(0x3, 0x80000, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r16, 0xf503, 0x0) ioctl$PPPIOCSMRRU(r14, 0x4004743b, &(0x7f0000003580)=0x96) ioctl$sock_inet_tcp_SIOCOUTQNSD(r10, 0x894b, &(0x7f00000035c0)) 5.534556ms ago: executing program 4 (id=6182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x14, 0x200, 0x70b926, 0x25dfcbff, {0x2c, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c054}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbf6, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0xd}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) 0s ago: executing program 0 (id=6183): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b0528bd7000fedbdf25010000000500040002000010080008007f00000106000a004e"], 0x2c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005c00)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="4bf02b7a7621598c6d2fcdeff42762d1c52427d4fdf8058c01e48b54dc8dc18b4bab651ee9a024c4a12b7a790bc57837c93de1f85a2017ed21f04af5b013d5171d346873d06f02a55d6e2e94f0e4b3698f6fe8c882a46d3b", 0x58}, {&(0x7f0000000480)="89c0e5e7bd1dbaa010853528", 0xc}], 0x2, &(0x7f0000002500)=ANY=[], 0x210, 0x40}], 0x1, 0x4000) sendto$packet(0xffffffffffffffff, &(0x7f0000002400)="800000800000210ee7decd7a0000", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, 0x0, 0x1, 0x3}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x94, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4001}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r10, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) r12 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r12, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) accept4$rose(r8, 0x0, &(0x7f0000000140), 0x80000) kernel console output (not intermixed with test programs): to 1000 [ 445.427547][T21684] netlink: 'syz.1.4248': attribute type 2 has an invalid length. [ 445.490341][T21516] lo speed is unknown, defaulting to 1000 [ 445.505632][T21684] v: entered promiscuous mode [ 445.808480][T21699] bond0: (slave gre0): Error: Device type is different from other slaves [ 446.051088][T21710] netlink: 'syz.3.4256': attribute type 62 has an invalid length. [ 446.130014][T21516] lo speed is unknown, defaulting to 1000 [ 446.357006][T21732] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 446.520663][T21725] syzkaller0: entered promiscuous mode [ 446.521138][T21740] netlink: 'syz.4.4262': attribute type 1 has an invalid length. [ 446.526752][T21725] syzkaller0: entered allmulticast mode [ 446.537968][T21740] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4262'. [ 446.564833][T21740] netlink: 'syz.4.4262': attribute type 1 has an invalid length. [ 446.585218][T21740] netlink: 'syz.4.4262': attribute type 8 has an invalid length. [ 446.880759][T21757] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 446.902738][T21757] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 448.129281][T21746] : entered promiscuous mode [ 448.196846][T21765] __nla_validate_parse: 1 callbacks suppressed [ 448.196866][T21765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4267'. [ 448.580397][T21788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4275'. [ 448.601504][T21788] pim6reg1: entered promiscuous mode [ 448.607093][T21788] pim6reg1: entered allmulticast mode [ 448.799588][T21800] openvswitch: netlink: Flow actions attr not present in new flow. [ 449.033752][T21822] syzkaller1: entered promiscuous mode [ 449.040144][T21822] syzkaller1: entered allmulticast mode [ 449.057577][T21822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4286'. [ 449.469984][T21841] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4291'. [ 449.748641][T21862] netlink: 'syz.2.4298': attribute type 1 has an invalid length. [ 449.779226][T21861] netlink: 'syz.2.4298': attribute type 1 has an invalid length. [ 449.834004][T21862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 449.976440][T21871] bond5: (slave veth3): Enslaving as an active interface with a down link [ 450.023634][T21888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 450.138909][T21890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4307'. [ 450.148155][T21890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4307'. [ 450.163367][T21890] netlink: 'syz.2.4307': attribute type 4 has an invalid length. [ 450.254872][ T2084] lo speed is unknown, defaulting to 1000 [ 450.260650][ T2084] syz0: Port: 1 Link DOWN [ 450.313668][T21900] wireguard: wg2: Could not create IPv4 socket [ 450.356955][ T2084] lo speed is unknown, defaulting to 1000 [ 450.475163][T21908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4311'. [ 450.614044][T21914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4313'. [ 451.025116][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4321'. [ 451.057346][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4321'. [ 451.066946][T21946] netlink: 'syz.4.4322': attribute type 142 has an invalid length. [ 451.080533][T21949] netlink: 'syz.1.4324': attribute type 1 has an invalid length. [ 451.439486][T21972] syzkaller0: entered promiscuous mode [ 451.447861][T21972] syzkaller0: entered allmulticast mode [ 451.459268][T21972] netlink: 'syz.3.4329': attribute type 1 has an invalid length. [ 451.643623][T21990] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 451.990000][T22018] x_tables: duplicate underflow at hook 3 [ 453.335653][T22012] batadv_slave_1: default FDB implementation only supports local addresses [ 453.448758][T22036] __nla_validate_parse: 6 callbacks suppressed [ 453.448779][T22036] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4346'. [ 453.519878][T22039] syzkaller1: entered promiscuous mode [ 453.527003][T22039] syzkaller1: entered allmulticast mode [ 453.572806][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4349'. [ 453.602382][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4349'. [ 453.659981][T22053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4351'. [ 453.910799][T22072] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 453.923834][T22072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.082173][T22077] sit1: entered promiscuous mode [ 454.089655][T22077] sit1: entered allmulticast mode [ 454.151957][T22087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4362'. [ 454.225466][T22094] netlink: 'syz.2.4366': attribute type 21 has an invalid length. [ 454.271665][T22092] syzkaller0: entered promiscuous mode [ 454.277916][T22096] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4367'. [ 454.292620][T22094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4366'. [ 454.305286][T22092] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 454.875368][T22122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4371'. [ 456.085628][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4374'. [ 456.091157][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4373'. [ 456.252064][ T1148] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 456.400381][T22157] netlink: 'syz.1.4383': attribute type 3 has an invalid length. [ 456.716226][ T1148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.725137][ T1148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.744895][T11876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.817917][T22187] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 456.854694][T11877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.258839][T11876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.381793][T22211] 8021q: VLANs not supported on gre0 [ 457.530462][T22221] netlink: 'syz.4.4403': attribute type 1 has an invalid length. [ 457.538429][T22221] netlink: 'syz.4.4403': attribute type 1 has an invalid length. [ 457.547357][T22221] netlink: 'syz.4.4403': attribute type 8 has an invalid length. [ 457.842528][T22238] netlink: 'syz.1.4407': attribute type 9 has an invalid length. [ 458.132279][T22256] xt_limit: Overflow, try lower: 271964/0 [ 458.353446][T22287] openvswitch: netlink: IP tunnel dst address not specified [ 458.382131][T22287] openvswitch: netlink: IP tunnel dst address not specified [ 458.589434][T22304] __nla_validate_parse: 12 callbacks suppressed [ 458.589453][T22304] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4424'. [ 458.610431][T22303] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4424'. [ 458.657992][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 458.672529][T22307] syzkaller0: entered promiscuous mode [ 458.678932][T22307] syzkaller0: entered allmulticast mode [ 458.688317][T22307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.698713][T22307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4426'. [ 458.699030][T22312] sctp: [Deprecated]: syz.3.4428 (pid 22312) Use of int in max_burst socket option. [ 458.699030][T22312] Use struct sctp_assoc_value instead [ 458.709753][T22308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4427'. [ 458.732778][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 458.795078][T22316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4429'. [ 458.839515][T22321] netlink: 'syz.4.4429': attribute type 21 has an invalid length. [ 459.044627][T22326] netlink: 'syz.4.4431': attribute type 1 has an invalid length. [ 459.223577][T22339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4435'. [ 459.305844][T22343] netlink: 'syz.0.4437': attribute type 3 has an invalid length. [ 459.334715][T22343] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4437'. [ 459.541257][T22353] syzkaller0: entered promiscuous mode [ 459.556429][T22353] syzkaller0: entered allmulticast mode [ 459.580228][T22364] netlink: 'syz.0.4442': attribute type 2 has an invalid length. [ 459.611960][T22364] #{6c: entered promiscuous mode [ 459.657105][T22364] netlink: 'syz.0.4442': attribute type 2 has an invalid length. [ 459.694305][T22361] pim6reg1: entered promiscuous mode [ 459.699936][T22361] pim6reg1: entered allmulticast mode [ 459.711281][T22364] #{6c: left promiscuous mode [ 459.907609][T22383] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 459.907789][T22387] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 459.937432][T22396] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 459.982670][T22390] bond6: Removing last ns target with arp_interval on [ 460.348634][T22425] openvswitch: netlink: IPv4 tunnel dst address is zero [ 460.384989][T22420] netlink: 412 bytes leftover after parsing attributes in process `syz.4.4455'. [ 460.469754][T22431] 8021q: adding VLAN 0 to HW filter on device bond11 [ 460.530968][T22438] C: entered allmulticast mode [ 460.554332][T22438] tunl0: entered allmulticast mode [ 460.569938][T22438] gre0: entered allmulticast mode [ 460.579388][T22438] gretap0: entered allmulticast mode [ 460.588758][T22438] erspan0: entered allmulticast mode [ 460.597773][T22438] ip_vti0: entered allmulticast mode [ 460.604889][T22438] ip6_vti0: entered allmulticast mode [ 460.612093][T22438] sit0: entered allmulticast mode [ 460.620576][T22438] ip6tnl0: entered allmulticast mode [ 460.627804][T22438] ip6gre0: entered allmulticast mode [ 460.636874][T22438] syz_tun: entered allmulticast mode [ 460.645814][T22438] ip6gretap0: entered allmulticast mode [ 460.654321][T22438] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.661762][T22438] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.669514][T22438] bridge0: entered allmulticast mode [ 460.678425][T22438] bond0: entered allmulticast mode [ 460.683559][T22438] bond_slave_0: entered allmulticast mode [ 460.690165][T22438] bond_slave_1: entered allmulticast mode [ 460.698589][T22438] team0: entered allmulticast mode [ 460.703719][T22438] team_slave_0: entered allmulticast mode [ 460.713762][T22438] dummy0: entered allmulticast mode [ 460.727699][T22438] nlmon0: entered allmulticast mode [ 460.736149][T22438] caif0: entered allmulticast mode [ 460.741648][T22438] batadv0: entered allmulticast mode [ 460.750236][T22438] veth0: entered allmulticast mode [ 460.760369][T22438] veth1: entered allmulticast mode [ 460.772743][T22438] wg0: entered allmulticast mode [ 460.791252][T22438] wg1: entered allmulticast mode [ 460.796508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.808214][T22438] wg2: entered allmulticast mode [ 460.814770][T22438] veth0_to_bridge: entered allmulticast mode [ 460.824059][T22438] veth1_to_bridge: entered allmulticast mode [ 460.837013][T22438] veth0_to_bond: entered allmulticast mode [ 460.846888][T22438] veth1_to_bond: entered allmulticast mode [ 460.856548][T22438] veth0_to_team: entered allmulticast mode [ 460.865993][T22438] veth1_to_team: entered allmulticast mode [ 460.876845][T22438] veth0_to_batadv: entered allmulticast mode [ 460.885422][T22438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.892870][T22438] batadv_slave_0: entered allmulticast mode [ 460.907315][T22438] veth1_to_batadv: entered allmulticast mode [ 460.917608][T22438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.925295][T22438] batadv_slave_1: entered allmulticast mode [ 460.934065][T22438] xfrm0: entered allmulticast mode [ 460.942625][T22438] veth0_to_hsr: entered allmulticast mode [ 460.953336][T22438] hsr_slave_0: entered allmulticast mode [ 460.963063][T22438] veth1_to_hsr: entered allmulticast mode [ 460.973203][T22438] hsr_slave_1: entered allmulticast mode [ 460.983719][T22438] hsr0: entered allmulticast mode [ 460.992682][T22438] veth1_virt_wifi: entered allmulticast mode [ 461.001143][T22438] veth0_virt_wifi: entered allmulticast mode [ 461.010234][T22438] veth1_macvtap: entered allmulticast mode [ 461.018333][T22438] veth0_macvtap: entered allmulticast mode [ 461.028931][T22438] macvtap0: entered allmulticast mode [ 461.038429][T22438] macsec0: entered allmulticast mode [ 461.046968][T22438] geneve0: entered allmulticast mode [ 461.055579][T22438] geneve1: entered allmulticast mode [ 461.062718][T22438] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 461.071079][T22438] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 461.079562][T22438] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 461.089912][T22438] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 461.102322][T22438] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 461.111785][T22438] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 461.119362][T22438] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 461.127328][T22438] bridge1: entered allmulticast mode [ 461.133083][T22438] bond1: left promiscuous mode [ 461.138392][T22438] bond1: entered allmulticast mode [ 461.144501][T22438] vlan2: entered allmulticast mode [ 461.150299][T22438] bridge2: entered allmulticast mode [ 461.158188][T22438] geneve2: entered allmulticast mode [ 461.163601][T22438] veth0.2: entered allmulticast mode [ 461.169418][T22438] mac80211_hwsim hwsim51 wlan2: entered allmulticast mode [ 461.176873][T22438] erspan1: entered allmulticast mode [ 461.182269][T22438] h: left promiscuous mode [ 461.187379][T22438] h: entered allmulticast mode [ 461.192246][T22438] bond2: entered allmulticast mode [ 461.199423][T22438] bridge3: entered allmulticast mode [ 461.206471][T22438] syztnl2: entered allmulticast mode [ 461.212403][T22438] gretap1: entered allmulticast mode [ 461.220263][T22438] ip6tnl1: entered allmulticast mode [ 461.225802][T22438] ip6erspan0: entered allmulticast mode [ 461.231605][T22438] gre1: entered allmulticast mode [ 461.250527][T22438] macsec1: entered allmulticast mode [ 461.329294][ T1140] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.355554][ T1140] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.421308][T22457] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 461.449280][ T1140] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.491504][T22464] openvswitch: netlink: IP tunnel dst address not specified [ 461.527088][ T1140] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.793433][T22486] validate_nla: 2 callbacks suppressed [ 461.793452][T22486] netlink: 'syz.4.4476': attribute type 3 has an invalid length. [ 461.821303][T22473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.828615][T22473] IPv6: NLM_F_CREATE should be set when creating new route [ 462.023779][T22504] dvmrp0: entered allmulticast mode [ 462.139396][T22513] veth1_macvtap: renamed from veth0_vlan (while UP) [ 462.366837][T22530] Unsupported ieee802154 address type: 0 [ 462.450041][T22533] 8021q: adding VLAN 0 to HW filter on device bond12 [ 462.470313][T22536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.509426][T22536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.753107][T22555] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 462.796629][T22557] netlink: 'syz.4.4493': attribute type 1 has an invalid length. [ 463.003792][T22573] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 463.347966][T22588] vlan2: entered allmulticast mode [ 463.353192][T22588] bond0: entered allmulticast mode [ 463.362117][T22588] bond_slave_0: entered allmulticast mode [ 463.368056][T22588] bond_slave_1: entered allmulticast mode [ 463.394911][T22587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.404268][T22587] bond_slave_0: left allmulticast mode [ 463.419273][T22587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.430698][T22587] bond_slave_1: left allmulticast mode [ 463.438721][T22592] netlink: 'syz.0.4502': attribute type 1 has an invalid length. [ 463.440063][T22587] bond0 (unregistering): Released all slaves [ 463.447613][T22592] netlink: 'syz.0.4502': attribute type 1 has an invalid length. [ 463.659127][T22597] __nla_validate_parse: 9 callbacks suppressed [ 463.659146][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4506'. [ 463.676669][T22597] syzkaller1: entered promiscuous mode [ 463.682244][T22597] syzkaller1: entered allmulticast mode [ 463.804315][T22602] tipc: Enabling of bearer rejected, failed to enable media [ 463.817460][T22607] xt_hashlimit: size too large, truncated to 1048576 [ 464.093007][T22620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4512'. [ 464.102413][T22620] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4512'. [ 464.113941][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4512'. [ 464.195786][T22622] openvswitch: netlink: Flow key attr not present in new flow. [ 464.213691][T22626] openvswitch: netlink: IP tunnel dst address not specified [ 464.703308][T22641] syzkaller0: entered promiscuous mode [ 464.724298][T22657] syzkaller0: entered promiscuous mode [ 464.740863][T22657] syzkaller0: entered allmulticast mode [ 464.757021][T22662] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.602782][ T5195] block nbd1: Connection timed out, retrying (0/2 alive) [ 465.610326][ T5195] block nbd1: Connection timed out, retrying (0/2 alive) [ 465.619322][ T5195] block nbd1: Connection timed out, retrying (0/2 alive) [ 465.626568][ T5195] block nbd1: Connection timed out, retrying (0/2 alive) [ 465.641418][ T5195] block nbd1: Dead connection, failed to find a fallback [ 465.649121][ T5195] block nbd1: shutting down sockets [ 465.654347][ T5195] blk_print_req_error: 137 callbacks suppressed [ 465.660852][ T5195] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.670601][ T5195] buffer_io_error: 137 callbacks suppressed [ 465.670616][ T5195] Buffer I/O error on dev nbd1, logical block 3, async page read [ 465.684673][ T5195] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.694150][ T5195] Buffer I/O error on dev nbd1, logical block 2, async page read [ 465.702320][ T5195] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.712075][ T5195] Buffer I/O error on dev nbd1, logical block 1, async page read [ 465.719946][ T5195] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.729815][ T5195] Buffer I/O error on dev nbd1, logical block 0, async page read [ 465.737997][T20662] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.749024][T20662] Buffer I/O error on dev nbd1, logical block 0, async page read [ 465.757407][T20662] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.767515][T20662] Buffer I/O error on dev nbd1, logical block 1, async page read [ 465.775475][T20662] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.785291][T20662] Buffer I/O error on dev nbd1, logical block 2, async page read [ 465.793183][T20662] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.803043][T20662] Buffer I/O error on dev nbd1, logical block 3, async page read [ 465.810980][T20662] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.820781][T20662] Buffer I/O error on dev nbd1, logical block 0, async page read [ 465.828655][T20662] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 465.838364][T20662] Buffer I/O error on dev nbd1, logical block 1, async page read [ 465.847133][T20662] ldm_validate_partition_table(): Disk read failed. [ 465.854174][T20662] Dev nbd1: unable to read RDB block 0 [ 465.860334][T20662] nbd1: unable to read partition table [ 465.877333][T20662] ldm_validate_partition_table(): Disk read failed. [ 465.884728][T20662] Dev nbd1: unable to read RDB block 0 [ 465.890886][T20662] nbd1: unable to read partition table [ 466.495173][T22674] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 467.007543][T22706] netlink: 'syz.3.4538': attribute type 9 has an invalid length. [ 467.293498][T22726] netlink: 'syz.2.4543': attribute type 3 has an invalid length. [ 467.343493][T22726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4543'. [ 467.360787][T22728] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.368027][T22728] bridge0: port 2(bridge_slave_1) entered listening state [ 467.374850][T22732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4546'. [ 467.375470][T22728] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.391361][T22728] bridge0: port 1(bridge_slave_0) entered listening state [ 467.476595][T22736] netlink: 'syz.1.4547': attribute type 11 has an invalid length. [ 467.491016][T22736] netlink: 'syz.1.4547': attribute type 11 has an invalid length. [ 467.506251][T22736] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4547'. [ 467.575833][T22736] wg1 speed is unknown, defaulting to 1000 [ 467.592962][T22736] wlan0 speed is unknown, defaulting to 1000 [ 467.628593][T22744] netlink: 'syz.2.4549': attribute type 7 has an invalid length. [ 467.639447][T22736] lo speed is unknown, defaulting to 1000 [ 467.664737][T22744] netlink: 'syz.2.4549': attribute type 8 has an invalid length. [ 468.122477][T22768] erspan0: left allmulticast mode [ 468.470718][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'. [ 468.507053][T22782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4557'. [ 468.794647][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.825801][T22802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4563'. [ 468.929393][T22809] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4564'. [ 469.145285][T22818] tipc: Started in network mode [ 469.174475][T22818] tipc: Node identity ac14140f, cluster identity 4711 [ 469.191775][T22818] tipc: New replicast peer: 255.255.255.255 [ 469.232380][T22818] tipc: Enabled bearer , priority 10 [ 469.246013][T22825] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4568'. [ 469.346589][T22825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.395841][T22825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.427652][T22825] bond0 (unregistering): Released all slaves [ 469.639367][T22839] sctp: [Deprecated]: syz.0.4569 (pid 22839) Use of int in max_burst socket option deprecated. [ 469.639367][T22839] Use struct sctp_assoc_value instead [ 469.779060][T22845] netlink: 'syz.0.4569': attribute type 1 has an invalid length. [ 469.796187][T22845] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4569'. [ 469.813647][T22845] netlink: 'syz.0.4569': attribute type 1 has an invalid length. [ 469.839181][T22845] netlink: 'syz.0.4569': attribute type 8 has an invalid length. [ 469.841582][T22848] netlink: 'syz.0.4569': attribute type 30 has an invalid length. [ 469.850723][T22845] netlink: 582 bytes leftover after parsing attributes in process `syz.0.4569'. [ 471.105296][T22848] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 471.116666][T11884] tipc: Node number set to 2886997007 [ 471.203457][T22856] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 471.354263][T22875] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4578'. [ 471.389134][T22875] xt_policy: neither incoming nor outgoing policy selected [ 471.407367][T22875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4578'. [ 471.425773][T22883] veth0: entered promiscuous mode [ 471.433265][T22875] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4578'. [ 471.468106][T22883] veth0: left promiscuous mode [ 471.579417][T22896] pim6reg: entered allmulticast mode [ 471.601211][T22898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4585'. [ 471.684963][T22901] netlink: 'syz.3.4586': attribute type 5 has an invalid length. [ 471.699583][T22901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.925998][T22920] nbd: must specify a device to reconfigure [ 471.945663][T22921] nbd: must specify a device to reconfigure [ 471.949390][T22926] netlink: 'syz.2.4596': attribute type 10 has an invalid length. [ 471.992805][T22926] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 472.074184][T11887] IPVS: starting estimator thread 0... [ 472.144035][T22937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4597'. [ 472.204259][T22932] IPVS: using max 35 ests per chain, 84000 per kthread [ 472.323226][T22947] bond5: option min_links: invalid value (18446744073709551614) [ 472.331576][T22947] bond5: option min_links: allowed values 0 - 2147483647 [ 472.343919][T22947] bond5 (unregistering): Released all slaves [ 472.477651][T22957] syzkaller0: entered promiscuous mode [ 472.483261][T22957] syzkaller0: entered allmulticast mode [ 472.825320][T22987] netlink: 'syz.3.4618': attribute type 1 has an invalid length. [ 472.857035][T22987] bond4: entered promiscuous mode [ 472.862589][T22987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.508076][T23027] netlink: 'syz.3.4629': attribute type 1 has an invalid length. [ 473.739227][T23042] tipc: Enabled bearer , priority 0 [ 473.762142][T23042] syzkaller0: entered promiscuous mode [ 473.774022][T23042] syzkaller0: entered allmulticast mode [ 473.785549][T23046] netlink: 'syz.2.4636': attribute type 1 has an invalid length. [ 473.830210][T23042] tipc: Resetting bearer [ 473.866513][T23040] tipc: Resetting bearer [ 473.910250][T23040] tipc: Disabling bearer [ 474.019804][T23056] syzkaller0: entered promiscuous mode [ 474.033010][T23056] syzkaller0: entered allmulticast mode [ 474.092216][T23060] __nla_validate_parse: 16 callbacks suppressed [ 474.092233][T23060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4640'. [ 474.109415][T23056] sit2: entered promiscuous mode [ 474.109438][T23056] sit2: entered allmulticast mode [ 474.173552][T23060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4640'. [ 474.220382][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4641'. [ 474.410022][T23079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4644'. [ 474.460654][T23081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4643'. [ 474.561721][T23086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4644'. [ 474.970830][T23116] syzkaller0: entered promiscuous mode [ 474.977211][T23116] syzkaller0: entered allmulticast mode [ 474.988057][T23116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4651'. [ 475.142700][T23129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4656'. [ 475.182537][T23125] can: request_module (can-proto-5) failed. [ 475.557414][T23162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4666'. [ 475.568645][T23162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4666'. [ 475.935720][T23194] netlink: zone id is out of range [ 475.942342][T23194] netlink: zone id is out of range [ 475.945226][T23176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.949491][T23194] netlink: zone id is out of range [ 475.972024][T23194] netlink: zone id is out of range [ 475.977612][T23194] netlink: zone id is out of range [ 475.992209][T23194] netlink: zone id is out of range [ 475.999274][T23194] netlink: zone id is out of range [ 476.005695][T23194] netlink: zone id is out of range [ 476.011297][T23194] netlink: zone id is out of range [ 476.020836][T23194] netlink: zone id is out of range [ 476.165659][T23209] netlink: 'syz.4.4679': attribute type 30 has an invalid length. [ 476.329301][T23219] netlink: 'syz.4.4680': attribute type 1 has an invalid length. [ 476.716289][T23242] wireguard0: entered promiscuous mode [ 476.721964][T23242] wireguard0: entered allmulticast mode [ 476.722582][T23248] netlink: 'syz.4.4689': attribute type 9 has an invalid length. [ 476.737372][T23248] netlink: 'syz.4.4689': attribute type 11 has an invalid length. [ 476.745714][T23248] netlink: 'syz.4.4689': attribute type 12 has an invalid length. [ 476.748157][T23242] team0: Device wireguard0 is of different type [ 476.758516][T23248] netlink: 'syz.4.4689': attribute type 33 has an invalid length. [ 476.788921][T23248] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 476.802109][T23248] bond5 (unregistering): Released all slaves [ 476.895203][T23251] netlink: 'syz.4.4690': attribute type 2 has an invalid length. [ 477.026313][ T81] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.045502][ T81] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.058941][ T81] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.075943][ T81] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.957932][T23335] tipc: Enabling of bearer rejected, media not registered [ 478.053046][T23335] nbd: device at index 4 is going down [ 478.090292][T23342] validate_nla: 1 callbacks suppressed [ 478.090310][T23342] netlink: 'syz.1.4717': attribute type 21 has an invalid length. [ 478.103901][T23342] netlink: 'syz.1.4717': attribute type 22 has an invalid length. [ 478.118971][T23342] netlink: 'syz.1.4717': attribute type 23 has an invalid length. [ 478.153988][T23342] netlink: 'syz.1.4717': attribute type 25 has an invalid length. [ 478.164289][T23342] netlink: 'syz.1.4717': attribute type 26 has an invalid length. [ 478.477577][T23360] netlink: 'syz.1.4723': attribute type 1 has an invalid length. [ 478.693116][T23371] bond0: entered promiscuous mode [ 478.699663][T23371] bond0: entered allmulticast mode [ 478.706424][T23371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.919339][T23382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.971296][T23382] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.971773][T23386] netlink: 'syz.4.4731': attribute type 1 has an invalid length. [ 479.437725][T23425] delete_channel: no stack [ 479.557491][T23432] __nla_validate_parse: 24 callbacks suppressed [ 479.557509][T23432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4742'. [ 479.605899][T23432] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4742'. [ 479.616927][T23432] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4742'. [ 479.639575][T23434] : entered promiscuous mode [ 479.792957][T23451] syzkaller0: entered promiscuous mode [ 479.801283][T23451] syzkaller0: entered allmulticast mode [ 479.976086][T23461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4752'. [ 480.571256][T23504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4764'. [ 480.597943][T23506] netlink: 'syz.4.4765': attribute type 1 has an invalid length. [ 480.744803][T23514] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 480.777395][T23514] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 480.805154][T23519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.832911][T23521] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4768'. [ 480.859552][T23514] bond5: (slave ip6gre2): making interface the new active one [ 480.868818][T23514] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 480.880288][T23521] 8021q: VLANs not supported on gre0 [ 481.105954][T23530] batman_adv: batadv0: Adding interface: ipvlan2 [ 481.112577][T23530] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.139741][T23530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.165583][T23530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.195231][T23530] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 481.229730][T23536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4774'. [ 481.316609][T23543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4776'. [ 481.350536][T23545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4777'. [ 481.413276][T23545] team1: entered promiscuous mode [ 481.418579][T23545] team1: entered allmulticast mode [ 481.618481][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4780'. [ 481.815544][T23561] netlink: 'syz.3.4782': attribute type 5 has an invalid length. [ 482.139413][T23590] netlink: 'syz.4.4791': attribute type 1 has an invalid length. [ 482.143883][T23592] net_ratelimit: 187 callbacks suppressed [ 482.143901][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.537222][T23622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.683970][T23634] wg1 speed is unknown, defaulting to 1000 [ 482.692101][T23634] wlan0 speed is unknown, defaulting to 1000 [ 482.700846][T23634] lo speed is unknown, defaulting to 1000 [ 483.447779][T23681] validate_nla: 2 callbacks suppressed [ 483.447800][T23681] netlink: 'syz.1.4820': attribute type 1 has an invalid length. [ 483.827240][T23706] syz.0.4827 uses old SIOCAX25GETINFO [ 484.667102][T23761] __nla_validate_parse: 22 callbacks suppressed [ 484.667120][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4844'. [ 484.746818][T23772] openvswitch: netlink: Flow key attr not present in new flow. [ 484.760136][T23761] hsr0: entered promiscuous mode [ 484.768761][T23761] macvlan0: entered allmulticast mode [ 484.775794][T23761] hsr0: entered allmulticast mode [ 484.781004][T23761] hsr_slave_0: entered allmulticast mode [ 484.787564][T23761] hsr_slave_1: entered allmulticast mode [ 484.794667][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.834758][T23764] syzkaller0: entered promiscuous mode [ 484.840280][T23764] syzkaller0: entered allmulticast mode [ 484.998015][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4852'. [ 485.014482][T23788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4852'. [ 485.041137][T23790] Cannot find add_set index 65532 as target [ 485.046872][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4852'. [ 485.048258][T23082] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.067877][T23788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4852'. [ 485.077005][T23082] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.106752][T23082] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.122184][T23082] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.212616][T23795] wg1 speed is unknown, defaulting to 1000 [ 485.221959][T23795] wlan0 speed is unknown, defaulting to 1000 [ 485.230669][T23795] lo speed is unknown, defaulting to 1000 [ 485.257596][T23802] block nbd0: Unsupported socket: should be TCP or UNIX. [ 485.457015][T23815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4859'. [ 485.630301][T23826] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4863'. [ 485.812491][T23837] netlink: 'syz.2.4865': attribute type 11 has an invalid length. [ 485.820793][T23837] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.4865'. [ 485.891336][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4866'. [ 486.041343][T23847] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4870'. [ 486.061487][T23847] bridge_slave_1: default FDB implementation only supports local addresses [ 486.097992][T23856] netlink: 'syz.2.4871': attribute type 20 has an invalid length. [ 486.340124][T23868] netlink: 'syz.3.4875': attribute type 5 has an invalid length. [ 486.358467][T23866] netlink: 'syz.3.4875': attribute type 5 has an invalid length. [ 486.492639][T23871] syzkaller0: entered promiscuous mode [ 486.518180][T23871] syzkaller0: entered allmulticast mode [ 486.670895][T23880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.694489][T23880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.863376][T23894] netlink: 'syz.0.4885': attribute type 3 has an invalid length. [ 486.879133][T23880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.905857][T23880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.040256][T23880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.058784][T23880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.327837][ T1148] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.341418][ T1148] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.359391][ T6895] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.369064][ T6895] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.402179][ T1148] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.415119][ T1148] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.443440][ T1148] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.452227][ T1148] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.620648][T23930] ipt_REJECT: TCP_RESET invalid for non-tcp [ 488.045731][T23966] wg1 speed is unknown, defaulting to 1000 [ 488.066076][T23966] wlan0 speed is unknown, defaulting to 1000 [ 488.089638][T23966] lo speed is unknown, defaulting to 1000 [ 488.180439][T23974] netlink: 'syz.1.4908': attribute type 4 has an invalid length. [ 488.192123][T23982] xt_hashlimit: size too large, truncated to 1048576 [ 488.256085][T23985] netlink: 'syz.3.4909': attribute type 32 has an invalid length. [ 488.370063][T23985] bond5: option coupled_control: invalid value (192) [ 488.406843][T23985] bond5 (unregistering): Released all slaves [ 488.465080][T23989] veth0: entered promiscuous mode [ 488.774074][T24000] netlink: 'syz.3.4914': attribute type 1 has an invalid length. [ 488.870239][T24000] bond5: (slave gretap2): making interface the new active one [ 488.879649][T24000] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 488.937204][T24000] openvswitch: netlink: Flow actions attr not present in new flow. [ 489.257178][T24021] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 489.267771][T23988] veth0: left promiscuous mode [ 489.546478][T24029] pim6reg1: entered promiscuous mode [ 489.565739][T24029] pim6reg1: entered allmulticast mode [ 489.594749][T24029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.758917][T24048] __nla_validate_parse: 19 callbacks suppressed [ 489.758938][T24048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4928'. [ 489.959153][T24055] erspan0: entered promiscuous mode [ 490.013366][T24059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4932'. [ 490.030141][T24060] syzkaller0: entered promiscuous mode [ 490.061822][T24061] syzkaller0: entered promiscuous mode [ 490.073560][T24061] syzkaller0: entered allmulticast mode [ 490.287136][T24073] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.4936'. [ 490.308800][T24077] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4937'. [ 490.465154][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4940'. [ 490.478653][T24089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4940'. [ 490.582600][T24097] lo: entered promiscuous mode [ 490.590021][T24097] netlink: 'syz.4.4943': attribute type 2 has an invalid length. [ 490.598827][T24097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.780113][T24109] netlink: 'syz.4.4947': attribute type 10 has an invalid length. [ 490.788596][T24110] netlink: 'syz.4.4947': attribute type 10 has an invalid length. [ 490.848171][T24112] xt_hashlimit: size too large, truncated to 1048576 [ 491.020208][T24121] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4951'. [ 491.089526][T24123] netlink: 4872 bytes leftover after parsing attributes in process `syz.1.4953'. [ 491.220987][T24136] netlink: 'syz.0.4955': attribute type 2 has an invalid length. [ 491.230113][T24136] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4955'. [ 491.244321][T24135] wg1 speed is unknown, defaulting to 1000 [ 491.253245][T24135] wlan0 speed is unknown, defaulting to 1000 [ 491.262376][T24135] lo speed is unknown, defaulting to 1000 [ 491.708381][T24156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4963'. [ 492.427138][T24190] bridge0: port 3(ipvlan0) entered blocking state [ 492.436419][T24190] bridge0: port 3(ipvlan0) entered disabled state [ 492.450198][T24190] ipvlan0: entered allmulticast mode [ 492.469698][T24190] ipvlan0: left allmulticast mode [ 492.549673][T24183] wg1 speed is unknown, defaulting to 1000 [ 492.626390][T24183] wlan0 speed is unknown, defaulting to 1000 [ 492.634086][T24183] lo speed is unknown, defaulting to 1000 [ 492.696723][T24207] macvtap0: entered promiscuous mode [ 492.716770][T24212] SET target dimension over the limit! [ 492.755324][T24207] veth0_macvtap: left promiscuous mode [ 492.853729][T24212] xfrm0: left allmulticast mode [ 492.946392][T24212] syzkaller0: entered promiscuous mode [ 492.951933][T24212] syzkaller0: entered allmulticast mode [ 494.771801][T24244] xt_hashlimit: max too large, truncated to 1048576 [ 494.967101][T24254] __nla_validate_parse: 5 callbacks suppressed [ 494.967118][T24254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4991'. [ 494.998715][T24257] xt_TCPMSS: Only works on TCP SYN packets [ 495.062788][T24254] netlink: 54 bytes leftover after parsing attributes in process `syz.3.4991'. [ 495.072448][T24254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4991'. [ 495.208566][T24271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4995'. [ 495.307632][T24269] syzkaller0: entered promiscuous mode [ 495.313148][T24269] syzkaller0: entered allmulticast mode [ 495.385785][T24269] netlink: 'syz.4.4997': attribute type 83 has an invalid length. [ 495.471332][T24288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5000'. [ 495.600774][T24299] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5004'. [ 495.610069][T24302] netlink: 'syz.0.5005': attribute type 9 has an invalid length. [ 495.728037][T24310] netlink: 'syz.0.5007': attribute type 1 has an invalid length. [ 495.730754][T24307] IPVS: stopping master sync thread 21732 ... [ 495.791611][T24316] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.5009'. [ 495.919951][T24326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5013'. [ 496.033946][T24333] can: request_module (can-proto-3) failed. [ 496.084246][T24336] xt_hashlimit: size too large, truncated to 1048576 [ 496.322497][T24350] netlink: zone id is out of range [ 496.328170][T24350] netlink: zone id is out of range [ 496.340874][T24350] netlink: zone id is out of range [ 496.353652][T24350] netlink: zone id is out of range [ 496.360173][T24350] netlink: zone id is out of range [ 496.381315][T24350] netlink: zone id is out of range [ 496.403965][T24350] netlink: zone id is out of range [ 496.409354][T24350] netlink: zone id is out of range [ 496.414776][T24350] netlink: zone id is out of range [ 496.419995][T24350] netlink: zone id is out of range [ 496.531760][T24365] block nbd2: Unsupported socket: should be TCP or UNIX. [ 496.734853][T24367] syzkaller0: entered promiscuous mode [ 496.746208][T24367] syzkaller0: entered allmulticast mode [ 496.792369][T24379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5027'. [ 496.860012][T24384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5025'. [ 497.598031][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 497.606145][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 498.644041][T24390] kthread_run failed with err -4 [ 498.650915][T24391] netlink: 'syz.4.5031': attribute type 1 has an invalid length. [ 499.311573][T24455] lo: left promiscuous mode [ 499.389684][T24463] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.397190][T24463] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.892610][T24512] netlink: 'syz.1.5063': attribute type 29 has an invalid length. [ 499.928012][T24512] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 499.956796][T24516] netlink: 'syz.3.5064': attribute type 11 has an invalid length. [ 499.968165][T24516] netlink: 'syz.3.5064': attribute type 11 has an invalid length. [ 499.976916][T24516] __nla_validate_parse: 8 callbacks suppressed [ 499.976933][T24516] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5064'. [ 500.271085][T24537] netlink: 'syz.1.5072': attribute type 2 has an invalid length. [ 500.317087][T24539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5073'. [ 500.340843][T24539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5073'. [ 500.351685][T24540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5073'. [ 500.362897][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5073'. [ 500.373106][T24543] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 500.373360][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5073'. [ 500.564946][T24557] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 500.594442][T24564] ip6t_srh: unknown srh invflags 4000 [ 500.707008][T24573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5081'. [ 500.945877][T24584] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5087'. [ 501.022169][ T29] audit: type=1107 audit(1774475759.554:11): pid=24594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 501.058454][T24591] syzkaller0: entered promiscuous mode [ 501.064118][T24591] syzkaller0: entered allmulticast mode [ 501.446928][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.888079][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5097'. [ 502.961465][T24637] netlink: 'syz.3.5097': attribute type 10 has an invalid length. [ 502.969589][T24637] batadv0: left allmulticast mode [ 502.987186][T24637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.002551][T24637] batadv0: entered allmulticast mode [ 503.025693][T24637] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 503.111480][T24654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5104'. [ 503.180532][T24654] gtp0: entered promiscuous mode [ 503.203697][T24654] gtp0: entered allmulticast mode [ 503.283131][T24663] xt_hashlimit: overflow, rate too high: 0 [ 503.367509][T24668] bridge_slave_1: entered promiscuous mode [ 503.390677][T24668] netlink: 'syz.2.5107': attribute type 1 has an invalid length. [ 503.466081][T24674] netlink: 'syz.0.5110': attribute type 12 has an invalid length. [ 503.503782][T24676] IPv6: sit3: Disabled Multicast RS [ 503.532330][T24679] x9: renamed from bridge_slave_0 (while UP) [ 503.923425][T24710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.948720][ C1] net_ratelimit: 190 callbacks suppressed [ 503.948739][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 503.972092][T24710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.982647][T24710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 504.000846][T24710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.071721][T24710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.084202][T24710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.133085][T24719] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 504.201701][T24725] delete_channel: no stack [ 504.307021][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 504.748788][T24758] wg1 speed is unknown, defaulting to 1000 [ 504.766622][T24758] wlan0 speed is unknown, defaulting to 1000 [ 504.778093][T24758] lo speed is unknown, defaulting to 1000 [ 504.952065][T24766] syzkaller0: entered promiscuous mode [ 504.957851][T24766] syzkaller0: entered allmulticast mode [ 505.057662][T24772] __nla_validate_parse: 9 callbacks suppressed [ 505.057681][T24772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5141'. [ 505.075462][T24772] erspan0: entered promiscuous mode [ 505.132056][T24776] netlink: 'syz.3.5143': attribute type 10 has an invalid length. [ 505.140782][T24776] bridge_slave_1: left allmulticast mode [ 505.148365][T24776] bridge_slave_1: left promiscuous mode [ 505.157292][T24776] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.180977][T24776] bridge_slave_1: entered allmulticast mode [ 505.188057][T24776] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 505.221083][T24778] bond8: option lp_interval: invalid value (0) [ 505.249959][T24778] bond8: option lp_interval: allowed values 1 - 2147483647 [ 505.268029][T24778] bond8 (unregistering): Released all slaves [ 505.298130][T24782] netlink: 'syz.1.5145': attribute type 1 has an invalid length. [ 505.323416][T24784] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.5146'. [ 505.632603][T24803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5151'. [ 505.669920][T24810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5153'. [ 505.776953][T24812] 8021q: VLANs not supported on gre0 [ 505.912040][T24821] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5157'. [ 506.032064][T24821] bridge0: port 1(gretap0) entered blocking state [ 506.073307][T24821] bridge0: port 1(gretap0) entered disabled state [ 506.095508][T24821] gretap0: entered allmulticast mode [ 506.127925][T24821] gretap0: entered promiscuous mode [ 506.416078][T24842] batadv1: entered allmulticast mode [ 506.442490][T24847] tipc: Enabled bearer , priority 10 [ 506.603208][T24861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5167'. [ 506.689729][T24867] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5170'. [ 506.709282][T24867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5170'. [ 506.720890][T24870] netlink: 'syz.2.5171': attribute type 1 has an invalid length. [ 506.731614][T24870] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5171'. [ 506.760290][T24877] netlink: 'syz.0.5170': attribute type 2 has an invalid length. [ 506.955899][T24888] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 506.963683][T24888] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5173'. [ 507.442133][T24930] tipc: Enabled bearer , priority 0 [ 507.514005][T24930] syzkaller0: entered promiscuous mode [ 507.528733][T24930] syzkaller0: entered allmulticast mode [ 507.603953][T24930] tipc: Resetting bearer [ 507.635368][T24928] tipc: Resetting bearer [ 507.666815][T24928] tipc: Disabling bearer [ 507.857044][T24943] syzkaller0: entered promiscuous mode [ 507.875822][T24943] syzkaller0: entered allmulticast mode [ 507.952560][T24965] syzkaller0: entered promiscuous mode [ 507.958272][T24965] syzkaller0: entered allmulticast mode [ 508.053602][T24969] openvswitch: netlink: Key type 30 is not supported [ 510.111932][T25029] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 510.119658][T25029] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 510.131096][T25018] ip6t_srh: unknown srh invflags 4000 [ 510.160842][T25032] __nla_validate_parse: 8 callbacks suppressed [ 510.160861][T25032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5209'. [ 510.396685][T25045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5220'. [ 510.410574][T25045] netlink: 212048 bytes leftover after parsing attributes in process `syz.4.5220'. [ 510.561612][T25055] netlink: 'syz.3.5223': attribute type 1 has an invalid length. [ 510.579700][T25055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5223'. [ 510.773063][T25070] netlink: 788 bytes leftover after parsing attributes in process `syz.3.5228'. [ 510.883328][T25078] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 510.943513][T25078] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.972113][T25084] bond6: (slave geneve3): Opening slave failed [ 511.373377][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5238'. [ 511.580063][T25125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5238'. [ 511.668446][T25125] : entered promiscuous mode [ 511.882486][T25140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5246'. [ 511.926068][T25141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5246'. [ 512.111503][T25153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5250'. [ 512.143777][T25152] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.318612][T25165] netlink: 'syz.1.5252': attribute type 1 has an invalid length. [ 512.328534][T25165] tipc: Enabled bearer , priority 0 [ 512.336228][T25165] syzkaller0: entered promiscuous mode [ 512.341734][T25165] syzkaller0: entered allmulticast mode [ 512.392678][T25165] tipc: Resetting bearer [ 512.435089][T25162] tipc: Resetting bearer [ 512.548411][T25177] netlink: 'syz.0.5256': attribute type 1 has an invalid length. [ 512.581245][T25162] tipc: Disabling bearer [ 512.631058][T25177] wg1 speed is unknown, defaulting to 1000 [ 512.642063][T25177] wlan0 speed is unknown, defaulting to 1000 [ 512.654973][T25186] nftables ruleset with unbound set [ 512.672583][T25177] lo speed is unknown, defaulting to 1000 [ 512.708953][T25188] netlink: 'syz.0.5256': attribute type 1 has an invalid length. [ 512.768413][T25190] netlink: 'syz.2.5260': attribute type 4 has an invalid length. [ 512.809756][T25190] netlink: 'syz.2.5260': attribute type 1 has an invalid length. [ 513.040056][T25204] netlink: 'syz.2.5265': attribute type 1 has an invalid length. [ 513.177359][T25213] netlink: 'syz.2.5269': attribute type 178 has an invalid length. [ 513.340772][T25221] lo: entered promiscuous mode [ 513.352625][T25221] tunl0: entered promiscuous mode [ 513.397780][T25221] gre0: entered promiscuous mode [ 513.431728][T25221] erspan0: entered promiscuous mode [ 513.457748][T25221] ip_vti0: entered promiscuous mode [ 513.656448][T25234] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 514.067060][T25254] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 514.098528][T25254] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 514.109088][T25261] sctp: [Deprecated]: syz.0.5286 (pid 25261) Use of int in max_burst socket option. [ 514.109088][T25261] Use struct sctp_assoc_value instead [ 514.144301][T25265] openvswitch: netlink: Flow key attr not present in new flow. [ 514.201646][T25265] x_tables: duplicate underflow at hook 1 [ 514.222394][T25265] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 514.737776][T25295] wg1 speed is unknown, defaulting to 1000 [ 514.752334][T25295] wlan0 speed is unknown, defaulting to 1000 [ 514.767981][T25295] lo speed is unknown, defaulting to 1000 [ 514.790966][T25269] netlink: 'syz.4.5289': attribute type 28 has an invalid length. [ 515.288328][T25318] gretap0: left allmulticast mode [ 515.293418][T25318] gretap0: left promiscuous mode [ 515.300097][T25318] bridge0: port 1(gretap0) entered disabled state [ 515.387449][T25318] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 515.514545][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.583225][T25332] __nla_validate_parse: 6 callbacks suppressed [ 515.583245][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 515.590991][T25334] netlink: 'syz.2.5306': attribute type 21 has an invalid length. [ 515.626771][T25334] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.636269][T25334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.643556][T25334] IPv6: NLM_F_CREATE should be set when creating new route [ 515.650876][T25334] IPv6: NLM_F_CREATE should be set when creating new route [ 515.658355][T25334] IPv6: NLM_F_CREATE should be set when creating new route [ 515.691378][T25334] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5306'. [ 515.708493][T25335] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5305'. [ 515.720150][T25334] netem: invalid attributes len -24 [ 515.725591][T25334] netem: change failed [ 515.731119][T25337] netlink: 'syz.1.5307': attribute type 7 has an invalid length. [ 515.766126][T25337] netlink: 'syz.1.5307': attribute type 7 has an invalid length. [ 515.852137][T25345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5308'. [ 515.938738][T25345] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5308'. [ 516.012206][T25355] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5312'. [ 516.033321][T25355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5312'. [ 516.254777][T25371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5317'. [ 516.286404][T25371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5317'. [ 516.334731][T25378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5320'. [ 517.058834][T25441] dvmrp0: entered allmulticast mode [ 517.083862][T25446] syzkaller0: entered promiscuous mode [ 517.089651][T25446] syzkaller0: entered allmulticast mode [ 517.099080][T25446] openvswitch: netlink: EtherType 50a is less than min 600 [ 517.121876][T25452] netlink: 'syz.2.5338': attribute type 83 has an invalid length. [ 517.218174][T25459] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 517.515994][T25477] netlink: 'syz.0.5347': attribute type 21 has an invalid length. [ 517.529736][T25477] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.691139][T25487] tipc: Enabled bearer , priority 0 [ 517.826653][T25499] sctp: [Deprecated]: syz.0.5351 (pid 25499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.826653][T25499] Use struct sctp_sack_info instead [ 517.831111][T25487] syzkaller0: entered promiscuous mode [ 517.861303][T25487] syzkaller0: entered allmulticast mode [ 517.870877][T25487] tipc: Resetting bearer [ 517.910903][T25486] tipc: Resetting bearer [ 518.074716][T25513] netlink: 'syz.3.5355': attribute type 11 has an invalid length. [ 518.268519][T25483] xt_hashlimit: size too large, truncated to 1048576 [ 518.395066][T25533] netlink: 'syz.4.5360': attribute type 13 has an invalid length. [ 519.938365][T25486] tipc: Disabling bearer [ 520.015263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 520.043866][T11887] tipc: Node number set to 324926016 [ 520.057740][T25553] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 520.116753][T25553] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 520.390708][T25566] 8021q: adding VLAN 0 to HW filter on device bond14 [ 520.495430][T25571] vlan1: entered allmulticast mode [ 520.507942][T25577] sctp: [Deprecated]: syz.2.5369 (pid 25577) Use of int in max_burst socket option deprecated. [ 520.507942][T25577] Use struct sctp_assoc_value instead [ 520.511836][T25571] bond14: entered allmulticast mode [ 520.586891][T25581] __nla_validate_parse: 17 callbacks suppressed [ 520.586912][T25581] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5369'. [ 520.598841][T25566] vlan1: entered allmulticast mode [ 520.696339][T25581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.723795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 520.757964][T25581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.768194][T25587] vxcan0: tx address claim with dest, not broadcast [ 520.782498][T25581] bond0 (unregistering): Released all slaves [ 520.953560][T25597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5373'. [ 520.988805][T25604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5374'. [ 521.137245][T25611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5376'. [ 521.147204][T25611] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 521.189787][T25611] team0: entered promiscuous mode [ 521.207612][T25611] team0: entered allmulticast mode [ 521.232416][T25612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.242727][T25610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.343701][T25621] netlink: 'syz.3.5380': attribute type 11 has an invalid length. [ 521.352431][T25621] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 521.393274][T25621] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.5380'. [ 521.557847][T25640] lo: left promiscuous mode [ 521.563213][T25640] tunl0: left promiscuous mode [ 521.569595][T25640] gre0: left promiscuous mode [ 521.587388][T25640] erspan0: left promiscuous mode [ 521.605061][T25640] ip_vti0: left promiscuous mode [ 521.831668][T25640] sit2: left promiscuous mode [ 521.836962][T25640] sit2: left allmulticast mode [ 521.844037][T25640] bond0: left promiscuous mode [ 521.849307][T25640] bond0: left allmulticast mode [ 521.871835][T25655] tipc: Enabled bearer , priority 10 [ 521.885458][ T1148] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.902678][ T1148] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.913006][ T1148] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.963370][ T1148] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.976306][ T1148] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.016519][ T1148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.056632][ T1148] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.085372][ T1148] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.256488][T25687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5396'. [ 522.491202][T25705] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5403'. [ 522.550110][T25696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5400'. [ 522.569681][T25712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5406'. [ 522.579696][T25696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5400'. [ 522.590771][T25712] netlink: 'syz.1.5406': attribute type 1 has an invalid length. [ 522.599348][T25712] netlink: 'syz.1.5406': attribute type 1 has an invalid length. [ 522.622619][T23082] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.658577][T25714] netlink: 'syz.4.5407': attribute type 1 has an invalid length. [ 522.660634][T23082] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.695927][T23082] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.732542][T23082] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.908150][T25730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.133392][T25743] openvswitch: netlink: Unknown key attributes 2 [ 523.175933][T25743] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 523.283745][T25757] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 523.340093][T25762] netlink: 'syz.0.5424': attribute type 8 has an invalid length. [ 523.368499][T25762] sch_fq: defrate 0 ignored. [ 523.521713][T25775] gretap0: entered promiscuous mode [ 523.667026][T25785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.050299][T25775] gretap0: left promiscuous mode [ 524.497401][T25808] netlink: 'syz.0.5437': attribute type 1 has an invalid length. [ 524.867045][T25832] tipc: Enabled bearer , priority 0 [ 524.973162][T25832] syzkaller0: entered promiscuous mode [ 524.980052][T25832] syzkaller0: entered allmulticast mode [ 524.986406][T25832] tipc: Resetting bearer [ 525.001375][T25831] tipc: Resetting bearer [ 525.906049][T25873] netlink: 'syz.2.5452': attribute type 10 has an invalid length. [ 526.966166][T25831] tipc: Disabling bearer [ 526.985103][T25855] syzkaller1: entered allmulticast mode [ 527.036122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 527.220089][T25881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.222976][T25883] __nla_validate_parse: 16 callbacks suppressed [ 527.222994][T25883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5458'. [ 527.451432][T25903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5463'. [ 527.472998][T25904] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 527.526700][T25903] nbd: socks must be embedded in a SOCK_ITEM attr [ 527.543518][T25554] block nbd64: NBD_DISCONNECT [ 527.560993][T25910] ipvlan3: entered allmulticast mode [ 527.577051][T25910] macvlan0: entered allmulticast mode [ 527.778669][T25183] udevd[25183]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 527.817965][T25922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5468'. [ 527.827029][T25922] mac80211_hwsim hwsim41 syzkaller0: Caught tx_queue_len zero misconfig [ 527.864089][T25925] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.877627][T25925] tipc: Enabled bearer , priority 10 [ 527.994644][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.061832][T25936] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5474'. [ 528.094693][T25940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5475'. [ 528.130786][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5476'. [ 528.265631][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.276497][T25956] nft_compat: unsupported protocol 0 [ 528.480185][T25970] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5485'. [ 528.495334][T25970] netlink: 'syz.0.5485': attribute type 2 has an invalid length. [ 528.616514][T25979] netlink: 'syz.4.5487': attribute type 1 has an invalid length. [ 528.742675][T25989] netlink: 'syz.0.5490': attribute type 4 has an invalid length. [ 528.757518][T25989] erspan0: entered promiscuous mode [ 528.762878][T25989] erspan0: entered allmulticast mode [ 528.792210][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5491'. [ 528.801742][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.812047][T25989] bond3: entered promiscuous mode [ 528.817336][T25989] bond3: entered allmulticast mode [ 528.822792][T25989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.115167][T26018] syzkaller0: entered promiscuous mode [ 529.129578][T26018] syzkaller0: entered allmulticast mode [ 529.160388][T26021] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5500'. [ 529.171431][T26021] netem: invalid attributes len -24 [ 529.195404][T26021] netem: change failed [ 529.226545][T26021] macvlan0: entered promiscuous mode [ 529.386460][T26041] netlink: 'syz.0.5504': attribute type 3 has an invalid length. [ 529.547100][T26054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5506'. [ 529.834545][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.050628][T26092] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 530.166974][T26102] xt_nfacct: accounting object `syz1' does not exist [ 530.375832][T26122] netlink: 'syz.1.5528': attribute type 1 has an invalid length. [ 530.435863][T26122] 8021q: adding VLAN 0 to HW filter on device bond15 [ 530.479549][T26122] bond15: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 530.491372][T26122] bond15: entered allmulticast mode [ 530.508884][T26122] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link [ 530.875583][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.993699][T26161] openvswitch: netlink: Duplicate or invalid key (type 0). [ 531.003517][T26161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.218124][T26186] netlink: 'syz.1.5549': attribute type 1 has an invalid length. [ 531.337703][T26193] delete_channel: no stack [ 531.523940][T26205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.531270][T26205] IPv6: NLM_F_CREATE should be set when creating new route [ 531.538607][T26210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.572640][T26205] lo: entered allmulticast mode [ 531.588006][T26205] tunl0: entered allmulticast mode [ 531.604986][T26205] gre0: entered allmulticast mode [ 531.616870][T26205] gretap0: entered allmulticast mode [ 531.633570][T26205] erspan0: entered allmulticast mode [ 531.643496][T26205] ip_vti0: entered allmulticast mode [ 531.651702][T26205] ip6_vti0: entered allmulticast mode [ 531.659102][T26205] sit0: entered allmulticast mode [ 531.669988][T26205] ip6tnl0: entered allmulticast mode [ 531.687080][T26205] ip6gre0: entered allmulticast mode [ 531.698233][T26205] syz_tun: entered allmulticast mode [ 531.710114][T26205] ip6gretap0: entered allmulticast mode [ 531.719501][T26205] bridge0: entered allmulticast mode [ 531.726717][T26205] vcan0: entered allmulticast mode [ 531.733577][T26205] bond0: entered allmulticast mode [ 531.740162][T26205] nlmon0: entered allmulticast mode [ 531.746924][T26205] caif0: entered allmulticast mode [ 531.752361][T26205] veth0: entered allmulticast mode [ 531.760935][T26205] veth1: entered allmulticast mode [ 531.777306][T26205] wg0: entered allmulticast mode [ 531.796506][T26205] wg1: entered allmulticast mode [ 531.807015][T26205] wg2: entered allmulticast mode [ 531.816077][T26205] veth0_to_bridge: entered allmulticast mode [ 531.828137][T26205] bridge_slave_0: entered allmulticast mode [ 531.840514][T26205] veth1_to_bridge: entered allmulticast mode [ 531.851556][T26205] bridge_slave_1: entered allmulticast mode [ 531.860902][T26205] veth0_to_bond: entered allmulticast mode [ 531.869302][T26205] bond_slave_0: entered allmulticast mode [ 531.876270][T26205] veth1_to_bond: entered allmulticast mode [ 531.883886][T26205] bond_slave_1: entered allmulticast mode [ 531.890367][T26205] veth0_to_team: entered allmulticast mode [ 531.899945][T26205] team_slave_0: entered allmulticast mode [ 531.906422][T26205] veth1_to_team: entered allmulticast mode [ 531.914112][T26205] team_slave_1: entered allmulticast mode [ 531.920888][T26205] veth0_to_batadv: entered allmulticast mode [ 531.924535][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.929734][T26205] batadv_slave_0: entered allmulticast mode [ 531.943051][T26205] veth1_to_batadv: entered allmulticast mode [ 531.951370][T26205] batadv_slave_1: entered allmulticast mode [ 531.960490][T26205] xfrm0: entered allmulticast mode [ 531.968019][T26205] veth0_to_hsr: entered allmulticast mode [ 531.978894][T26205] veth1_to_hsr: entered allmulticast mode [ 531.989372][T26205] veth1_virt_wifi: entered allmulticast mode [ 531.997793][T26205] veth0_virt_wifi: entered allmulticast mode [ 532.008962][T26205] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 532.016862][T26205] veth1_macvtap: entered allmulticast mode [ 532.025901][T26205] veth0_macvtap: entered allmulticast mode [ 532.033600][T26205] macsec0: entered allmulticast mode [ 532.042754][T26205] geneve0: entered allmulticast mode [ 532.050917][T26205] geneve1: entered allmulticast mode [ 532.058605][T26205] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 532.066700][T26205] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 532.077901][T26205] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 532.089250][T26205] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 532.099229][T26205] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 532.108206][T26205] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 532.116179][T26205] mac80211_hwsim hwsim35 : entered allmulticast mode [ 532.123190][T26205] vxlan0: entered allmulticast mode [ 532.128860][T26205] vxcan2: entered allmulticast mode [ 532.134176][T26205] : entered allmulticast mode [ 532.141294][T26205] bond1: entered allmulticast mode [ 532.147632][T26205] bond_slave_1.0: entered allmulticast mode [ 532.153771][T26205] ip6gre1: entered allmulticast mode [ 532.167940][T26205] bond2: entered allmulticast mode [ 532.173096][T26205] geneve2: entered allmulticast mode [ 532.186311][T26205] veth2: entered allmulticast mode [ 532.192038][T26205] bond3: left promiscuous mode [ 532.197729][T26205] bond3: entered allmulticast mode [ 532.204016][T26205] bridge1: entered allmulticast mode [ 532.212535][T26205] veth4: entered allmulticast mode [ 532.218776][T26205] veth5: entered allmulticast mode [ 532.225773][T26205] : entered allmulticast mode [ 532.232338][T26205] bridge2: left promiscuous mode [ 532.239312][T26205] bond5: left promiscuous mode [ 532.244090][T26205] bond5: entered allmulticast mode [ 532.251260][T26205] bond6: entered allmulticast mode [ 532.257856][T26205] bond7: entered allmulticast mode [ 532.263823][T26205] ip6tnl1: entered allmulticast mode [ 532.270932][T26205] gre1: entered allmulticast mode [ 532.277786][T26205] ip6tnl2: entered allmulticast mode [ 532.285529][T26205] bond8: entered allmulticast mode [ 532.290665][T26205] geneve3: entered allmulticast mode [ 532.298841][T26205] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 532.306559][T26205] veth6: entered allmulticast mode [ 532.311775][T26205] veth7: entered allmulticast mode [ 532.317670][T26205] bond9: entered allmulticast mode [ 532.322902][T26205] bond10: entered allmulticast mode [ 532.328598][T26205] v: entered allmulticast mode [ 532.333638][T26205] sit1: entered allmulticast mode [ 532.341000][T26205] bond11: entered allmulticast mode [ 532.347187][T26205] vlan0: entered allmulticast mode [ 532.352802][T26205] bond12: entered allmulticast mode [ 532.360012][T26205] mac80211_hwsim hwsim57 wlan2: entered allmulticast mode [ 532.369175][T26205] veth8: entered allmulticast mode [ 532.375691][T26205] veth9: entered allmulticast mode [ 532.383283][T26205] mac80211_hwsim hwsim58 wlan3: entered allmulticast mode [ 532.393280][T26205] bridge3: entered allmulticast mode [ 532.403407][T26205] gtp0: entered allmulticast mode [ 532.410014][T26205] macsec1: entered allmulticast mode [ 532.420239][T26205] ipip0: entered allmulticast mode [ 532.427456][T26205] vti0: entered allmulticast mode [ 532.432782][T26205] sit2: entered allmulticast mode [ 532.449441][T26205] sit3: entered allmulticast mode [ 532.455934][T26205] bond13: entered allmulticast mode [ 532.461239][T26205] : entered allmulticast mode [ 532.467948][T26205] vxlan1: entered allmulticast mode [ 532.478234][T26205] team0: left promiscuous mode [ 532.483147][T26205] mac80211_hwsim hwsim62 wlan4: entered allmulticast mode [ 532.490827][T26205] erspan1: entered allmulticast mode [ 532.498233][T26205] ip6gretap1: entered allmulticast mode [ 532.506709][T26204] bridge7: port 1(erspan0) entered blocking state [ 532.513268][T26204] bridge7: port 1(erspan0) entered disabled state [ 532.520728][T26204] erspan0: entered allmulticast mode [ 532.529190][T26204] bridge7: port 1(erspan0) entered blocking state [ 532.535820][T26204] bridge7: port 1(erspan0) entered forwarding state [ 532.559810][T26218] macvlan2: entered allmulticast mode [ 532.565827][T26218] hsr0: entered allmulticast mode [ 532.570892][T26218] hsr_slave_0: entered allmulticast mode [ 532.577733][T26218] hsr_slave_1: entered allmulticast mode [ 532.586829][T26211] tipc: Enabling of bearer rejected, already enabled [ 532.596796][T26231] IPv6: Can't replace route, no match found [ 532.624854][ T6897] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.633769][ T6897] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.694885][ T6897] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 532.734483][ T6897] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.743397][ T6897] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.778701][ T6897] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 532.786710][T26240] __nla_validate_parse: 14 callbacks suppressed [ 532.786727][T26240] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5566'. [ 532.816420][ T6897] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.845571][T26241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5568'. [ 532.858135][ T6897] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.884535][ T6897] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 532.917690][ T6897] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.954493][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.957836][ T6897] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.003227][ T6897] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 533.056685][T26255] syzkaller0: entered promiscuous mode [ 533.062310][T26255] syzkaller0: entered allmulticast mode [ 533.093911][T26261] syzkaller1: entered promiscuous mode [ 533.102355][T26261] syzkaller1: entered allmulticast mode [ 533.125554][T26259] tipc: Enabled bearer , priority 0 [ 533.408630][T26291] "syz.2.5579" (26291) uses obsolete ecb(arc4) skcipher [ 533.537818][T26300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5580'. [ 533.561567][T26300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.570678][T26300] batadv0: entered allmulticast mode [ 533.578621][T26300] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 533.587646][T26300] team0: Failed to send options change via netlink (err -105) [ 533.596166][T26300] team0: Port device batadv0 added [ 533.677850][T26308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5583'. [ 533.688524][T26308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5583'. [ 533.994540][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.145406][T26330] : renamed from hsr0 [ 534.210670][T26337] netlink: 'syz.1.5592': attribute type 21 has an invalid length. [ 534.223184][T26337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5592'. [ 534.376387][T26346] syzkaller0: entered promiscuous mode [ 534.385926][T26346] syzkaller0: entered allmulticast mode [ 534.438703][T26350] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5597'. [ 534.515419][T26352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5600'. [ 534.707144][T26365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5601'. [ 534.919020][T26381] xt_cgroup: invalid path, errno=-2 [ 534.931089][T26384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5607'. [ 534.950644][T26381] xt_cgroup: invalid path, errno=-2 [ 535.034442][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.121943][T26396] sctp: [Deprecated]: syz.2.5611 (pid 26396) Use of int in maxseg socket option. [ 535.121943][T26396] Use struct sctp_assoc_value instead [ 535.229017][T26409] netlink: 'syz.3.5613': attribute type 10 has an invalid length. [ 535.516158][T26426] netlink: zone id is out of range [ 535.521321][T26426] netlink: zone id is out of range [ 535.533794][T26426] netlink: zone id is out of range [ 535.539515][T26426] netlink: zone id is out of range [ 535.546590][T26426] netlink: zone id is out of range [ 535.552143][T26426] netlink: zone id is out of range [ 535.557816][T26426] netlink: zone id is out of range [ 536.126681][T26465] wg1 speed is unknown, defaulting to 1000 [ 536.134341][T26465] wlan0 speed is unknown, defaulting to 1000 [ 536.142750][T26465] lo speed is unknown, defaulting to 1000 [ 536.154538][T26469] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 536.164649][T26469] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 536.385436][T26476] netlink: 'syz.4.5632': attribute type 1 has an invalid length. [ 536.439935][T26476] 8021q: adding VLAN 0 to HW filter on device bond6 [ 536.685997][T26485] netlink: 'syz.4.5635': attribute type 1 has an invalid length. [ 537.435136][T19083] IPVS: ip_vs_send_async error -101 [ 537.898551][T26560] __nla_validate_parse: 10 callbacks suppressed [ 537.898570][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 537.906269][T26563] sctp: [Deprecated]: syz.4.5653 (pid 26563) Use of int in maxseg socket option. [ 537.906269][T26563] Use struct sctp_assoc_value instead [ 537.947009][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 538.154538][ C1] net_ratelimit: 51 callbacks suppressed [ 538.154557][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 538.173025][T26576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5658'. [ 538.184849][T26579] netlink: 'syz.0.5658': attribute type 3 has an invalid length. [ 538.204181][T26576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5658'. [ 538.254624][T26578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5657'. [ 538.466856][T26591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5662'. [ 538.617632][T26607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5664'. [ 538.929406][T26617] tipc: Enabling of bearer rejected, failed to enable media [ 539.046150][T26622] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 539.195958][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 539.329130][T26628] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.429492][T26634] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 539.458062][T26633] netlink: zone id is out of range [ 539.473884][T26633] netlink: zone id is out of range [ 539.479363][T26633] netlink: zone id is out of range [ 539.497381][T26633] netlink: zone id is out of range [ 539.502668][T26633] netlink: zone id is out of range [ 539.510343][T26633] netlink: zone id is out of range [ 539.530815][T26633] netlink: zone id is out of range [ 539.555904][T26633] netlink: zone id is out of range [ 539.793612][T26653] netlink: 'syz.4.5679': attribute type 1 has an invalid length. [ 539.828797][T26653] 8021q: adding VLAN 0 to HW filter on device bond7 [ 539.847917][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5679'. [ 540.017301][T26672] netlink: 'syz.4.5683': attribute type 1 has an invalid length. [ 540.029084][T26672] netlink: 'syz.4.5683': attribute type 7 has an invalid length. [ 540.050329][T26672] netlink: 'syz.4.5683': attribute type 8 has an invalid length. [ 540.071062][T26672] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5683'. [ 540.153572][T26678] IPv6: NLM_F_CREATE should be specified when creating new route [ 540.217570][ T2084] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.365055][T26685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5688'. [ 540.393125][T26687] macvlan1: entered allmulticast mode [ 540.507596][T26685] netlink: 'syz.4.5688': attribute type 8 has an invalid length. [ 540.604663][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.801909][T26725] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 540.812371][T26725] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 540.965831][T26736] netlink: 'syz.1.5707': attribute type 2 has an invalid length. [ 541.000162][T26736] 9: entered promiscuous mode [ 541.465570][T26770] wg1 speed is unknown, defaulting to 1000 [ 541.473543][T26770] wlan0 speed is unknown, defaulting to 1000 [ 541.484960][T26770] lo speed is unknown, defaulting to 1000 [ 542.001107][T26785] syzkaller0: entered promiscuous mode [ 542.024480][T26785] syzkaller0: entered allmulticast mode [ 542.406909][T26796] netlink: 'syz.2.5721': attribute type 9 has an invalid length. [ 542.609149][T26817] netlink: 'syz.4.5725': attribute type 17 has an invalid length. [ 542.639303][T26810] team0 (unregistering): Port device team_slave_0 removed [ 542.662157][T26810] team0 (unregistering): Port device team_slave_1 removed [ 542.711632][T26817] gretap0: entered promiscuous mode [ 542.722434][T26817] gretap0: left promiscuous mode [ 542.740881][T26801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.106945][T26843] netlink: 'syz.1.5738': attribute type 22 has an invalid length. [ 543.132185][T26847] netlink: 'syz.4.5739': attribute type 21 has an invalid length. [ 543.134594][T26843] __nla_validate_parse: 11 callbacks suppressed [ 543.134609][T26843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5738'. [ 543.156074][T26847] IPv6: NLM_F_CREATE should be specified when creating new route [ 543.354534][ C1] net_ratelimit: 194 callbacks suppressed [ 543.354555][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 543.569802][T26873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5746'. [ 543.590044][T26874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5746'. [ 543.809327][T26870] bond7 (unregistering): Released all slaves [ 543.886786][T26876] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 543.918722][T26878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.087198][T26889] netlink: zone id is out of range [ 544.117007][T26889] netlink: zone id is out of range [ 544.122265][T26889] netlink: zone id is out of range [ 544.127644][T26889] netlink: zone id is out of range [ 544.132932][T26889] netlink: zone id is out of range [ 544.140596][T26889] netlink: zone id is out of range [ 544.148030][T26889] netlink: zone id is out of range [ 544.153276][T26889] netlink: zone id is out of range [ 544.163048][T26889] netlink: zone id is out of range [ 544.188484][T26899] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5751'. [ 544.298769][T26904] xt_policy: too many policy elements [ 544.489069][T26922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5758'. [ 544.761379][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5766'. [ 544.771667][T26943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5767'. [ 544.802892][T26943] xfrm2: entered promiscuous mode [ 544.818578][T26943] xfrm2: entered allmulticast mode [ 545.218154][T26975] veth0_to_bond: entered allmulticast mode [ 545.286735][T26976] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5777'. [ 545.384143][T26991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5780'. [ 545.410459][T26995] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 545.568833][T27000] syzkaller1: entered promiscuous mode [ 545.574348][T27000] syzkaller1: entered allmulticast mode [ 545.636217][T27011] validate_nla: 9 callbacks suppressed [ 545.636235][T27011] netlink: 'syz.2.5786': attribute type 1 has an invalid length. [ 545.731478][T27018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5783'. [ 545.736837][T27011] bond0: entered promiscuous mode [ 545.747709][T27011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.785740][T27011] bond0: (slave bridge7): making interface the new active one [ 545.794016][T27011] bridge7: entered promiscuous mode [ 545.802540][T27011] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 545.860062][T27017] ipvlan3: entered allmulticast mode [ 545.885036][T27017] bond0: entered allmulticast mode [ 545.898767][T27017] bridge7: entered allmulticast mode [ 546.084276][T27040] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 546.087590][T27038] syzkaller0: entered promiscuous mode [ 546.098281][T27038] syzkaller0: entered allmulticast mode [ 546.244920][T27046] bond16: entered promiscuous mode [ 546.250359][T27046] bond16: entered allmulticast mode [ 546.252707][T27050] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 546.257590][T27046] 8021q: adding VLAN 0 to HW filter on device bond16 [ 546.475813][T27064] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 546.545133][T27075] 8021q: VLANs not supported on gre0 [ 547.245587][T27129] xt_CONNSECMARK: invalid mode: 0 [ 547.272259][T27133] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 547.301611][T27133] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 547.383662][T27139] sctp: [Deprecated]: syz.1.5819 (pid 27139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.383662][T27139] Use struct sctp_sack_info instead [ 547.418706][T27142] netlink: 'syz.2.5821': attribute type 4 has an invalid length. [ 547.421074][T27139] ipt_REJECT: TCP_RESET invalid for non-tcp [ 547.667340][T27155] syzkaller1: entered promiscuous mode [ 547.672932][T27155] syzkaller1: entered allmulticast mode [ 548.262115][T27206] __nla_validate_parse: 13 callbacks suppressed [ 548.262135][T27206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5839'. [ 548.336663][T27208] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 548.358956][T27208] bond8: (slave lo): Enslaving as an active interface with an up link [ 548.381948][T27208] net_ratelimit: 139 callbacks suppressed [ 548.381968][T27208] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 548.407363][T27215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5839'. [ 548.420597][T27215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5839'. [ 548.431925][T27206] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5839'. [ 548.511778][T27221] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5845'. [ 548.545917][T27221] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5845'. [ 548.564437][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 548.961399][T27259] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 548.980698][T27259] netlink: 'syz.1.5856': attribute type 83 has an invalid length. [ 549.069544][T27266] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5858'. [ 549.158742][T27273] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 549.167859][T27273] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 549.180316][T27273] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 549.199739][T27273] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 549.214188][T27273] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 549.224096][T27273] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 549.232889][T27273] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 549.345552][T27283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5865'. [ 549.388463][T27286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5863'. [ 549.594436][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 549.601632][T27308] tc_dump_action: action bad kind [ 549.626095][T27308] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5870'. [ 549.890368][T27325] syzkaller0: entered promiscuous mode [ 549.896245][T27325] syzkaller0: entered allmulticast mode [ 550.091036][T27341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.634540][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 550.659796][T27388] bond9: entered promiscuous mode [ 550.667495][T27388] bond9: entered allmulticast mode [ 550.673277][T27388] 8021q: adding VLAN 0 to HW filter on device bond9 [ 550.720517][T27392] bond10: entered promiscuous mode [ 550.726305][T27392] bond10: entered allmulticast mode [ 550.732079][T27392] 8021q: adding VLAN 0 to HW filter on device bond10 [ 551.440936][T27433] atomic_op ffff888055b54998 conn xmit_atomic 0000000000000000 [ 551.501332][T27439] validate_nla: 3 callbacks suppressed [ 551.501352][T27439] netlink: 'syz.0.5915': attribute type 3 has an invalid length. [ 551.571146][T27441] tipc: Enabling of bearer rejected, failed to enable media [ 551.684435][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.738573][T27454] netlink: 'syz.1.5921': attribute type 10 has an invalid length. [ 551.957674][T27469] nbd: illegal input index 2958377 [ 552.347569][T27498] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 552.371740][T27494] bond17 (unregistering): Released all slaves [ 552.593983][T27526] IPVS: set_ctl: invalid protocol: 28 172.20.20.187:0 [ 552.679213][T27532] syzkaller0: entered allmulticast mode [ 552.698448][T27532] syzkaller0 (unregistering): left allmulticast mode [ 552.724527][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.920091][T27546] netlink: 'syz.4.5944': attribute type 9 has an invalid length. [ 552.968383][T27546] No such timeout policy "syz0" [ 552.979778][T27552] bond0: entered promiscuous mode [ 552.995668][T27552] bond0: entered allmulticast mode [ 553.001362][T27552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.169711][T27563] netlink: 'syz.4.5951': attribute type 1 has an invalid length. [ 553.354300][T27571] __nla_validate_parse: 19 callbacks suppressed [ 553.354320][T27571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5951'. [ 553.438262][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.450141][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.463521][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.471908][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.489236][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.511922][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.524891][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.532268][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.558190][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.566943][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.622412][T27570] bond11: (slave veth9): Enslaving as an active interface with a down link [ 553.668490][T27571] 8021q: adding VLAN 0 to HW filter on device bond11 [ 553.754532][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 553.970505][T27577] wg1 speed is unknown, defaulting to 1000 [ 553.991740][T27577] wlan0 speed is unknown, defaulting to 1000 [ 554.010049][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5958'. [ 554.078949][T27577] lo speed is unknown, defaulting to 1000 [ 554.247059][T27621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5964'. [ 554.362836][T27623] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5966'. [ 554.590696][ T6899] bond15 (unregistering): (slave ip6gretap1): Releasing active interface [ 554.613459][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5969'. [ 554.794473][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.927984][ T6899] bond8 (unregistering): (slave geneve3): Releasing active interface [ 554.991946][ T6899] bond2 (unregistering): (slave geneve2): Releasing active interface [ 555.146034][ T6899] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 555.282989][ T6899] bond0 (unregistering): Released all slaves [ 555.293249][ T6899] bond1 (unregistering): Released all slaves [ 555.307059][ T6899] bond2 (unregistering): Released all slaves [ 555.319800][ T6899] bond3 (unregistering): Released all slaves [ 555.332553][ T6899] bond4 (unregistering): Released all slaves [ 555.347629][ T6899] bond5 (unregistering): Released all slaves [ 555.362884][ T6899] bond6 (unregistering): Released all slaves [ 555.382504][ T6899] bond7 (unregistering): Released all slaves [ 555.403069][ T6899] bond8 (unregistering): Released all slaves [ 555.416103][ T6899] bond9 (unregistering): Released all slaves [ 555.429090][ T6899] bond10 (unregistering): Released all slaves [ 555.445610][ T6899] bond11 (unregistering): Released all slaves [ 555.462019][ T6899] bond12 (unregistering): Released all slaves [ 555.483780][ T6899] bond13 (unregistering): Released all slaves [ 555.499137][ T6899] bond14 (unregistering): Released all slaves [ 555.511569][ T6899] bond15 (unregistering): Released all slaves [ 555.525968][ T6899] bond16 (unregistering): Released all slaves [ 555.674637][ T5831] Bluetooth: hci2: command tx timeout [ 555.749462][ T6899] v: left promiscuous mode [ 555.834739][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 555.875101][T27673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5977'. [ 555.916787][T27673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5977'. [ 555.934730][ T6899] : left promiscuous mode [ 556.003999][T27673] netlink: 'syz.0.5977': attribute type 1 has an invalid length. [ 556.028111][T27673] netlink: 'syz.0.5977': attribute type 2 has an invalid length. [ 556.124356][ T6899] 9: left promiscuous mode [ 556.174295][T27689] openvswitch: netlink: IPv4 tunnel dst address is zero [ 556.339656][ T6899] tipc: Left network mode [ 556.388059][T27715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 556.418832][ T6899] IPVS: stopping master sync thread 19083 ... [ 556.457003][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5987'. [ 556.635536][T27577] chnl_net:caif_netlink_parms(): no params data found [ 556.789587][T27743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5992'. [ 556.874441][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.970197][T27746] netlink: 'syz.3.5994': attribute type 1 has an invalid length. [ 557.119975][T27746] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.139286][T27746] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5994'. [ 557.248186][T27749] syzkaller1: entered allmulticast mode [ 557.379769][T27577] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.387699][T27577] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.406439][T27577] bridge_slave_0: entered allmulticast mode [ 557.414207][T27577] bridge_slave_0: entered promiscuous mode [ 557.426529][T27577] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.434171][T27577] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.442662][T27577] bridge_slave_1: entered allmulticast mode [ 557.451343][T27577] bridge_slave_1: entered promiscuous mode [ 557.529769][T27577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.559568][T27577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.712506][T27577] team0: Port device team_slave_0 added [ 557.741016][T27577] team0: Port device team_slave_1 added [ 557.757842][ T5831] Bluetooth: hci2: command tx timeout [ 557.876199][T27577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.883182][T27577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.914540][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.926560][T27577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.153495][T27577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.173744][T27577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.223951][T27577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.348866][ T6899] batadv0 (unregistering): left allmulticast mode [ 558.371195][ T6899] team0 (unregistering): Port device batadv0 removed [ 558.398758][T27826] netlink: 'syz.2.6011': attribute type 1 has an invalid length. [ 558.819704][T27826] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 558.955525][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.962210][T27577] hsr_slave_0: entered promiscuous mode [ 558.996595][T27577] hsr_slave_1: entered promiscuous mode [ 559.025535][T27577] debugfs: 'hsr0' already exists in 'hsr' [ 559.051626][T27852] __nla_validate_parse: 11 callbacks suppressed [ 559.051644][T27852] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6012'. [ 559.071668][T27577] Cannot create hsr debugfs directory [ 559.235653][T27854] block nbd2: server does not support multiple connections per device. [ 559.246581][T27854] block nbd2: shutting down sockets [ 559.421723][T27802] infiniband syz1: set down [ 559.432246][T27802] infiniband syz1: added bond_slave_0 [ 559.451971][T27863] netlink: 'syz.4.6016': attribute type 25 has an invalid length. [ 559.459186][ T6899] IPVS: stop unused estimator thread 0... [ 559.469135][T27863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6016'. [ 559.481650][T27802] infiniband syz1: Couldn't open port 1 [ 559.533987][T27802] RDS/IB: syz1: added [ 559.550955][T27802] smc: adding ib device syz1 with port count 1 [ 559.565923][T27863] netlink: 'syz.4.6016': attribute type 25 has an invalid length. [ 559.574189][T27863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6016'. [ 559.583497][T27802] smc: ib device syz1 port 1 has no pnetid [ 559.835554][ T5831] Bluetooth: hci2: command tx timeout [ 559.898724][T27877] netlink: 'syz.0.6017': attribute type 5 has an invalid length. [ 560.004472][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.178195][T27858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.308810][T27577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 560.368623][T27887] xt_hashlimit: size too large, truncated to 1048576 [ 560.413547][T27577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 560.784760][T27912] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6025'. [ 560.850253][T27577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 560.889797][T27577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 561.034447][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 561.159638][T27577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.214759][T27577] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.242950][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.250150][ T6899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.291930][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.299125][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.741780][T27577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.872613][T27577] veth0_vlan: entered promiscuous mode [ 561.897813][T27577] veth1_vlan: entered promiscuous mode [ 561.915375][ T5831] Bluetooth: hci2: command tx timeout [ 561.985642][T27577] veth0_macvtap: entered promiscuous mode [ 562.021648][T27577] veth1_macvtap: entered promiscuous mode [ 562.074503][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.292269][T27577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.318807][T27577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.358200][ T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.390126][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.435244][ T81] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.444021][ T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.697776][ T6899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.712745][ T6899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.869710][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.885435][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.907343][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.114618][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.326128][T28019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.617698][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.632970][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.655217][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.663269][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 563.672213][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 563.788963][T28038] netlink: 'syz.1.6052': attribute type 1 has an invalid length. [ 563.819568][T28038] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6052'. [ 563.846352][T28038] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6052'. [ 563.865363][T28029] wg1 speed is unknown, defaulting to 1000 [ 563.885529][T28041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6052'. [ 563.888192][T28029] lo speed is unknown, defaulting to 1000 [ 563.919799][T28038] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6052'. [ 563.949713][T28041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6052'. [ 564.019485][T28041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6052'. [ 564.029823][ T6899] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.048286][ T6899] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.075177][T28041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6052'. [ 564.086897][ T6899] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.154717][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 564.170695][ T6899] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.560275][T28064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6063'. [ 564.590294][T28066] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 564.642674][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6063'. [ 564.715226][T28070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6063'. [ 564.789417][T28077] ip6t_rpfilter: unknown options [ 564.907556][T28082] netlink: 'syz.4.6066': attribute type 2 has an invalid length. [ 564.925753][T28082] netlink: 'syz.4.6066': attribute type 2 has an invalid length. [ 565.194758][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 565.542967][T28116] netlink: 'syz.0.6073': attribute type 3 has an invalid length. [ 565.561096][T28099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6070'. [ 565.592529][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6074'. [ 565.612574][T28116] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6073'. [ 565.754538][ T5831] Bluetooth: hci3: command tx timeout [ 565.759983][T28118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 565.776479][T28029] chnl_net:caif_netlink_parms(): no params data found [ 565.854684][T28130] netlink: 'syz.0.6076': attribute type 1 has an invalid length. [ 565.931839][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6077'. [ 565.991079][T28137] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 566.002924][T28137] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 566.022380][T28139] netlink: 'syz.4.6079': attribute type 9 has an invalid length. [ 566.038504][T28137] bond5: (slave ip6gre1): making interface the new active one [ 566.050836][T28137] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 566.158021][T28145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6078'. [ 566.233946][T28145] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6078'. [ 566.243150][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 566.308605][T28157] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 566.366979][T28029] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.376647][T28029] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.383938][T28029] bridge_slave_0: entered allmulticast mode [ 566.416146][T28029] bridge_slave_0: entered promiscuous mode [ 566.438592][T28029] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.449558][T28029] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.459985][T28029] bridge_slave_1: entered allmulticast mode [ 566.468105][T28029] bridge_slave_1: entered promiscuous mode [ 566.576588][T28029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.619946][T28029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.701051][T28029] team0: Port device team_slave_0 added [ 566.716365][T28029] team0: Port device team_slave_1 added [ 566.778682][T28029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.785764][T28029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.816771][T28029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.856807][T28029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.889202][T28029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.917141][T28029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.042261][T28029] hsr_slave_0: entered promiscuous mode [ 567.052419][T28029] hsr_slave_1: entered promiscuous mode [ 567.064655][T28029] debugfs: 'hsr0' already exists in 'hsr' [ 567.071102][T28029] Cannot create hsr debugfs directory [ 567.153391][T28201] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.166941][T28201] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.280440][T28201] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.284445][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.302901][T28201] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.321048][T28208] netlink: 'syz.1.6097': attribute type 10 has an invalid length. [ 567.330127][T28208] dummy0: entered promiscuous mode [ 567.336978][T28208] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 567.454102][T28201] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.466057][T28201] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.601456][T28029] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.613514][T28029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.651993][T28201] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.663671][T28201] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.690052][T28216] syzkaller0: entered promiscuous mode [ 567.695990][T28216] syzkaller0: entered allmulticast mode [ 567.706682][T28029] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.717454][T28029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.800842][T28029] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.812168][T28029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.839297][ T5843] Bluetooth: hci3: command tx timeout [ 567.926529][T23082] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.934898][T23082] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.949520][T28029] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.959532][T28029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.037876][T23082] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.056160][T23082] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.067937][T23082] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.076885][T23082] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.103982][T28224] syzkaller1: entered promiscuous mode [ 568.116670][T28224] syzkaller1: entered allmulticast mode [ 568.134080][T28224] syzkaller0: entered promiscuous mode [ 568.151469][T28224] syzkaller0: entered allmulticast mode [ 568.178607][T23082] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.187240][T23082] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.241576][T28240] nbd: nbd0 already in use [ 568.249297][T28240] block nbd0: NBD_DISCONNECT [ 568.254062][T28240] block nbd0: Send disconnect failed -32 [ 568.314982][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.333324][T28240] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 568.534849][T28251] netlink: 'syz.0.6111': attribute type 1 has an invalid length. [ 568.583224][T28253] xt_connbytes: Forcing CT accounting to be enabled [ 568.627455][T23082] bond10 (unregistering): (slave ip6gretap2): Releasing backup interface [ 568.758274][T23082] gretap0 (unregistering): left promiscuous mode [ 568.780498][T23082] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 568.800488][T23082] bond7 (unregistering): (slave gretap2): Releasing active interface [ 568.831777][T23082] bond12 (unregistering): (slave gretap4): Releasing active interface [ 568.858483][T23082] dvmrp0 (unregistering): left allmulticast mode [ 569.161859][T23082] bond0 (unregistering): left promiscuous mode [ 569.169326][T23082] bond_slave_0: left promiscuous mode [ 569.175482][T23082] bond_slave_1: left promiscuous mode [ 569.185668][T23082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.197413][T23082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.207559][T23082] bond0 (unregistering): Released all slaves [ 569.219084][T23082] bond1 (unregistering): (slave lo): Releasing backup interface [ 569.227654][T23082] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 569.239722][T23082] bond1 (unregistering): Released all slaves [ 569.253248][T23082] bond2 (unregistering): Released all slaves [ 569.268077][T23082] bond3 (unregistering): (slave bond4): Releasing backup interface [ 569.277717][T23082] bond3 (unregistering): Released all slaves [ 569.293216][T23082] bond4 (unregistering): Released all slaves [ 569.311883][T23082] bond5 (unregistering): Released all slaves [ 569.325021][T23082] bond6 (unregistering): Released all slaves [ 569.340197][T23082] bond7 (unregistering): Released all slaves [ 569.354931][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 569.359417][T23082] bond8 (unregistering): Released all slaves [ 569.376827][T23082] bond9 (unregistering): Released all slaves [ 569.393955][T23082] bond10 (unregistering): Released all slaves [ 569.407516][T23082] bond11 (unregistering): Released all slaves [ 569.420273][T23082] bond12 (unregistering): Released all slaves [ 569.583345][T28248] wg1 speed is unknown, defaulting to 1000 [ 569.613822][T23082] : left promiscuous mode [ 569.623257][T28270] __nla_validate_parse: 2 callbacks suppressed [ 569.623277][T28270] netlink: 206120 bytes leftover after parsing attributes in process `syz.0.6116'. [ 569.660329][T28248] lo speed is unknown, defaulting to 1000 [ 569.662996][T28029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 569.709737][T28029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 569.748592][T28029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 569.778442][T23082] tipc: Left network mode [ 569.784010][T28029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 569.891476][T28279] veth9: entered promiscuous mode [ 569.909696][T28279] veth9: entered allmulticast mode [ 569.916253][ T5843] Bluetooth: hci3: command 0x040f tx timeout [ 570.020038][T28291] vlan2: entered promiscuous mode [ 570.028014][T28291] bridge0: entered promiscuous mode [ 570.394602][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 570.518185][T28029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.611253][T28029] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.650706][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.657959][ T6899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.682822][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.690068][ T6897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.710928][T28319] netlink: 'syz.3.6131': attribute type 10 has an invalid length. [ 570.761998][T28319] dummy0: left allmulticast mode [ 570.823994][T28328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6133'. [ 570.867739][T28328] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 570.998281][T28339] openvswitch: netlink: Missing key (keys=40, expected=80) [ 571.289391][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6139'. [ 571.462880][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 571.509699][T28361] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6143'. [ 571.569303][T28029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.725414][T23082] hsr_slave_0: left promiscuous mode [ 571.725819][T28364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6144'. [ 571.740451][T23082] hsr_slave_1: left promiscuous mode [ 571.765970][T23082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.785581][T23082] hsr0: left allmulticast mode [ 571.994701][ T5831] Bluetooth: hci3: command 0x040f tx timeout [ 572.159578][T23082] team0 (unregistering): Port device team_slave_1 removed [ 572.173054][T23082] team0 (unregistering): Port device team_slave_0 removed [ 572.271320][T23082] smc: removing net device team0 with user defined pnetid SYZ2 [ 572.308456][T28350] syzkaller0: entered promiscuous mode [ 572.314130][T28350] syzkaller0: entered allmulticast mode [ 572.383873][T28029] veth0_vlan: entered promiscuous mode [ 572.474579][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.542092][T28029] veth1_vlan: entered promiscuous mode [ 572.699426][T28029] veth0_macvtap: entered promiscuous mode [ 572.729383][T28029] veth1_macvtap: entered promiscuous mode [ 572.769213][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6155'. [ 572.788138][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6155'. [ 572.803004][T28029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.811824][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6155'. [ 572.833404][T23082] IPVS: stop unused estimator thread 0... [ 572.833420][T28029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.866256][T28401] batman_adv: batadv0: Adding interface: dummy0 [ 572.881529][T28401] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 572.910074][T28401] batman_adv: batadv0: Interface activated: dummy0 [ 572.939854][T28405] batadv0: mtu less than device minimum [ 572.966716][T28405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.979351][T28405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.991174][T28405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 573.003122][T28405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 573.094248][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.110018][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.155933][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.183390][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.362269][T28419] ipt_REJECT: TCP_RESET invalid for non-tcp [ 573.386749][T28421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6161'. [ 573.393497][T23082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.428349][T23082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.531066][T23084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.574807][T23084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.001972][T28452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6167'. [ 574.035181][T28452] unsupported nlmsg_type 40 [ 574.080038][ T5831] Bluetooth: hci3: command 0x040f tx timeout [ 574.197101][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 574.206504][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 574.218875][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 574.228059][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 574.246851][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 574.391153][T28457] wg1 speed is unknown, defaulting to 1000 [ 574.429316][T28457] lo speed is unknown, defaulting to 1000 [ 574.554442][ C1] net_ratelimit: 17 callbacks suppressed [ 574.554462][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 574.635795][T28469] pimreg3: entered allmulticast mode [ 574.778739][T28475] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6176'. [ 574.920530][T28487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6180'. [ 574.931308][T28487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6180'. [ 575.033242][T23084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.115235][T28480] ================================================================== [ 575.123344][T28480] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x16b/0x6b0 [ 575.131616][T28480] Read of size 8 at addr ffff88808b7c8d48 by task syz.1.6179/28480 [ 575.139520][T28480] [ 575.141868][T28480] CPU: 1 UID: 0 PID: 28480 Comm: syz.1.6179 Not tainted syzkaller #0 PREEMPT(full) [ 575.141893][T28480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.141910][T28480] Call Trace: [ 575.141918][T28480] [ 575.141927][T28480] dump_stack_lvl+0xe8/0x150 [ 575.141960][T28480] print_report+0xba/0x230 [ 575.141983][T28480] ? cfusbl_device_notify+0x16b/0x6b0 [ 575.142009][T28480] kasan_report+0x117/0x150 [ 575.142034][T28480] ? cfusbl_device_notify+0x16b/0x6b0 [ 575.142062][T28480] cfusbl_device_notify+0x16b/0x6b0 [ 575.142087][T28480] ? net_generic+0x1e/0x240 [ 575.142109][T28480] ? net_generic+0x1e/0x240 [ 575.142130][T28480] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 575.142156][T28480] ? caif_device_notify+0x250/0xfc0 [ 575.142182][T28480] ? lockdep_rtnl_is_held+0x26/0x40 [ 575.142207][T28480] notifier_call_chain+0x1be/0x400 [ 575.142239][T28480] register_netdevice+0x1268/0x1cf0 [ 575.142262][T28480] ? __mutex_lock+0x5ac/0x1300 [ 575.142290][T28480] ? __pfx_register_netdevice+0x10/0x10 [ 575.142318][T28480] ? dev_addr_check+0x20/0x230 [ 575.142342][T28480] ? dev_addr_mod+0x354/0x520 [ 575.142364][T28480] register_netdev+0x40/0x60 [ 575.142386][T28480] bnep_add_connection+0x6e5/0xca0 [ 575.142414][T28480] ? __pfx_bnep_add_connection+0x10/0x10 [ 575.142436][T28480] ? __fget_files+0x3a0/0x420 [ 575.142468][T28480] do_bnep_sock_ioctl+0x40b/0x650 [ 575.142492][T28480] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 575.142519][T28480] ? tomoyo_path_number_perm+0x219/0x630 [ 575.142551][T28480] sock_do_ioctl+0x101/0x320 [ 575.142577][T28480] ? __pfx_sock_do_ioctl+0x10/0x10 [ 575.142600][T28480] ? do_futex+0x333/0x420 [ 575.142630][T28480] sock_ioctl+0x5c6/0x7f0 [ 575.142654][T28480] ? __pfx_sock_ioctl+0x10/0x10 [ 575.142678][T28480] ? __fget_files+0x2a/0x420 [ 575.142704][T28480] ? __fget_files+0x3a0/0x420 [ 575.142729][T28480] ? __fget_files+0x2a/0x420 [ 575.142757][T28480] ? bpf_lsm_file_ioctl+0x9/0x20 [ 575.142780][T28480] ? __pfx_sock_ioctl+0x10/0x10 [ 575.142803][T28480] __se_sys_ioctl+0xfc/0x170 [ 575.142825][T28480] do_syscall_64+0x14d/0xf80 [ 575.142846][T28480] ? trace_irq_disable+0x3b/0x150 [ 575.142874][T28480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.142893][T28480] ? clear_bhb_loop+0x40/0x90 [ 575.142913][T28480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.142938][T28480] RIP: 0033:0x7f463859c799 [ 575.142957][T28480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.142974][T28480] RSP: 002b:00007f4639417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.142996][T28480] RAX: ffffffffffffffda RBX: 00007f4638815fa0 RCX: 00007f463859c799 [ 575.143011][T28480] RDX: 0000200000000140 RSI: 00000000400442c8 RDI: 0000000000000008 [ 575.143024][T28480] RBP: 00007f4638632c99 R08: 0000000000000000 R09: 0000000000000000 [ 575.143037][T28480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.143049][T28480] R13: 00007f4638816038 R14: 00007f4638815fa0 R15: 00007ffd5ccb3fb8 [ 575.143071][T28480] [ 575.143079][T28480] [ 575.444485][T28480] Allocated by task 5831: [ 575.448840][T28480] kasan_save_track+0x3e/0x80 [ 575.453511][T28480] __kasan_kmalloc+0x93/0xb0 [ 575.458090][T28480] __kmalloc_cache_noprof+0x31c/0x660 [ 575.463464][T28480] __hci_conn_add+0x3c4/0x1e00 [ 575.468235][T28480] hci_conn_request_evt+0x5b1/0xc40 [ 575.473519][T28480] hci_event_packet+0x805/0x12c0 [ 575.478450][T28480] hci_rx_work+0x3ee/0x1030 [ 575.482947][T28480] process_scheduled_works+0xb6e/0x18c0 [ 575.488488][T28480] worker_thread+0xa53/0xfc0 [ 575.493073][T28480] kthread+0x388/0x470 [ 575.497125][T28480] ret_from_fork+0x51e/0xb90 [ 575.501725][T28480] ret_from_fork_asm+0x1a/0x30 [ 575.506507][T28480] [ 575.508815][T28480] Freed by task 28483: [ 575.512867][T28480] kasan_save_track+0x3e/0x80 [ 575.517546][T28480] kasan_save_free_info+0x46/0x50 [ 575.522570][T28480] __kasan_slab_free+0x5c/0x80 [ 575.527321][T28480] kfree+0x1c1/0x630 [ 575.531215][T28480] device_release+0x9e/0x1d0 [ 575.535794][T28480] kobject_put+0x228/0x560 [ 575.540202][T28480] hci_conn_del+0xc36/0x1230 [ 575.544786][T28480] hci_conn_hash_flush+0x191/0x260 [ 575.549893][T28480] hci_dev_close_sync+0x821/0x10e0 [ 575.554997][T28480] hci_dev_close+0x108/0x260 [ 575.559580][T28480] sock_do_ioctl+0x101/0x320 [ 575.564163][T28480] sock_ioctl+0x5c6/0x7f0 [ 575.568487][T28480] __se_sys_ioctl+0xfc/0x170 [ 575.573064][T28480] do_syscall_64+0x14d/0xf80 [ 575.577641][T28480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.583623][T28480] [ 575.585936][T28480] Last potentially related work creation: [ 575.591725][T28480] kasan_save_stack+0x3e/0x60 [ 575.596393][T28480] kasan_record_aux_stack+0xbd/0xd0 [ 575.601603][T28480] insert_work+0x3d/0x330 [ 575.605921][T28480] __queue_work+0xd03/0x1020 [ 575.610501][T28480] queue_delayed_work_on+0x11a/0x1e0 [ 575.615785][T28480] l2cap_chan_del+0x285/0x610 [ 575.620451][T28480] l2cap_conn_del+0x333/0x5c0 [ 575.625122][T28480] hci_conn_hash_flush+0x10d/0x260 [ 575.630219][T28480] hci_dev_close_sync+0x821/0x10e0 [ 575.635323][T28480] hci_dev_close+0x108/0x260 [ 575.639913][T28480] sock_do_ioctl+0x101/0x320 [ 575.644492][T28480] sock_ioctl+0x5c6/0x7f0 [ 575.648814][T28480] __se_sys_ioctl+0xfc/0x170 [ 575.653388][T28480] do_syscall_64+0x14d/0xf80 [ 575.657966][T28480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.663851][T28480] [ 575.666159][T28480] The buggy address belongs to the object at ffff88808b7c8000 [ 575.666159][T28480] which belongs to the cache kmalloc-8k of size 8192 [ 575.680201][T28480] The buggy address is located 3400 bytes inside of [ 575.680201][T28480] freed 8192-byte region [ffff88808b7c8000, ffff88808b7ca000) [ 575.694249][T28480] [ 575.696599][T28480] The buggy address belongs to the physical page: [ 575.703016][T28480] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8b7c8 [ 575.711853][T28480] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 575.720337][T28480] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 575.727890][T28480] page_type: f5(slab) [ 575.731864][T28480] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 575.740431][T28480] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 575.749004][T28480] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 575.757680][T28480] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 575.766340][T28480] head: 00fff00000000003 ffffea00022df201 00000000ffffffff 00000000ffffffff [ 575.775084][T28480] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 575.783735][T28480] page dumped because: kasan: bad access detected [ 575.790144][T28480] page_owner tracks the page as allocated [ 575.795841][T28480] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18172, tgid 18171 (syz.4.3316), ts 380091957516, free_ts 336729172698 [ 575.817200][T28480] post_alloc_hook+0x231/0x280 [ 575.821967][T28480] get_page_from_freelist+0x24dc/0x2580 [ 575.827503][T28480] __alloc_frozen_pages_noprof+0x18d/0x380 [ 575.833740][T28480] allocate_slab+0x77/0x660 [ 575.838235][T28480] refill_objects+0x331/0x3c0 [ 575.842922][T28480] __pcs_replace_empty_main+0x2e6/0x730 [ 575.848999][T28480] __kvmalloc_node_noprof+0x657/0x8a0 [ 575.854375][T28480] pfifo_fast_init+0x242/0x6c0 [ 575.859144][T28480] qdisc_create_dflt+0x13b/0x510 [ 575.864090][T28480] mq_init_common+0x25c/0x440 [ 575.868773][T28480] mq_init+0x84/0x270 [ 575.872747][T28480] qdisc_create_dflt+0x13b/0x510 [ 575.877686][T28480] dev_activate+0x1ce/0x1150 [ 575.882276][T28480] __dev_open+0x67a/0x830 [ 575.886598][T28480] __dev_change_flags+0x1f7/0x690 [ 575.891613][T28480] netif_change_flags+0x88/0x1a0 [ 575.896539][T28480] page last free pid 5832 tgid 5832 stack trace: [ 575.902846][T28480] __free_frozen_pages+0xc2b/0xdb0 [ 575.907949][T28480] __slab_free+0x263/0x2b0 [ 575.912351][T28480] qlist_free_all+0x97/0x100 [ 575.916940][T28480] kasan_quarantine_reduce+0x148/0x160 [ 575.922389][T28480] __kasan_slab_alloc+0x22/0x80 [ 575.927320][T28480] kmem_cache_alloc_noprof+0x2bc/0x650 [ 575.932768][T28480] do_getname+0x2e/0x250 [ 575.937006][T28480] __se_sys_mkdirat+0x24/0x150 [ 575.941786][T28480] do_syscall_64+0x14d/0xf80 [ 575.946364][T28480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.952250][T28480] [ 575.954560][T28480] Memory state around the buggy address: [ 575.960173][T28480] ffff88808b7c8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.968232][T28480] ffff88808b7c8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.976277][T28480] >ffff88808b7c8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.984320][T28480] ^ [ 575.990717][T28480] ffff88808b7c8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.998765][T28480] ffff88808b7c8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.006899][T28480] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 576.017094][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 576.061317][T28480] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 576.068601][T28480] CPU: 0 UID: 0 PID: 28480 Comm: syz.1.6179 Not tainted syzkaller #0 PREEMPT(full) [ 576.078060][T28480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.088215][T28480] Call Trace: [ 576.091703][T28480] [ 576.095029][T28480] vpanic+0x56c/0xa60 [ 576.099156][T28480] ? __pfx_vpanic+0x10/0x10 [ 576.103963][T28480] panic+0xc5/0xd0 [ 576.108062][T28480] ? __pfx_panic+0x10/0x10 [ 576.112507][T28480] ? preempt_schedule_thunk+0x16/0x30 [ 576.118074][T28480] ? cfusbl_device_notify+0x16b/0x6b0 [ 576.123652][T28480] ? preempt_schedule_thunk+0x16/0x30 [ 576.129049][T28480] ? cfusbl_device_notify+0x16b/0x6b0 [ 576.134570][T28480] check_panic_on_warn+0x89/0xb0 [ 576.139661][T28480] ? cfusbl_device_notify+0x16b/0x6b0 [ 576.145169][T28480] end_report+0x73/0x180 [ 576.149516][T28480] ? cfusbl_device_notify+0x16b/0x6b0 [ 576.154892][T28480] kasan_report+0x128/0x150 [ 576.159459][T28480] ? cfusbl_device_notify+0x16b/0x6b0 [ 576.164840][T28480] cfusbl_device_notify+0x16b/0x6b0 [ 576.170052][T28480] ? net_generic+0x1e/0x240 [ 576.174559][T28480] ? net_generic+0x1e/0x240 [ 576.179051][T28480] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 576.184853][T28480] ? caif_device_notify+0x250/0xfc0 [ 576.190046][T28480] ? lockdep_rtnl_is_held+0x26/0x40 [ 576.195323][T28480] notifier_call_chain+0x1be/0x400 [ 576.200438][T28480] register_netdevice+0x1268/0x1cf0 [ 576.205720][T28480] ? __mutex_lock+0x5ac/0x1300 [ 576.210483][T28480] ? __pfx_register_netdevice+0x10/0x10 [ 576.216022][T28480] ? dev_addr_check+0x20/0x230 [ 576.220783][T28480] ? dev_addr_mod+0x354/0x520 [ 576.225468][T28480] register_netdev+0x40/0x60 [ 576.230073][T28480] bnep_add_connection+0x6e5/0xca0 [ 576.235202][T28480] ? __pfx_bnep_add_connection+0x10/0x10 [ 576.240963][T28480] ? __fget_files+0x3a0/0x420 [ 576.245657][T28480] do_bnep_sock_ioctl+0x40b/0x650 [ 576.250687][T28480] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 576.256233][T28480] ? tomoyo_path_number_perm+0x219/0x630 [ 576.261866][T28480] sock_do_ioctl+0x101/0x320 [ 576.266673][T28480] ? __pfx_sock_do_ioctl+0x10/0x10 [ 576.271798][T28480] ? do_futex+0x333/0x420 [ 576.276139][T28480] sock_ioctl+0x5c6/0x7f0 [ 576.280462][T28480] ? __pfx_sock_ioctl+0x10/0x10 [ 576.285304][T28480] ? __fget_files+0x2a/0x420 [ 576.289887][T28480] ? __fget_files+0x3a0/0x420 [ 576.295443][T28480] ? __fget_files+0x2a/0x420 [ 576.300055][T28480] ? bpf_lsm_file_ioctl+0x9/0x20 [ 576.304996][T28480] ? __pfx_sock_ioctl+0x10/0x10 [ 576.309848][T28480] __se_sys_ioctl+0xfc/0x170 [ 576.314442][T28480] do_syscall_64+0x14d/0xf80 [ 576.319043][T28480] ? trace_irq_disable+0x3b/0x150 [ 576.324077][T28480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.330142][T28480] ? clear_bhb_loop+0x40/0x90 [ 576.334899][T28480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.340784][T28480] RIP: 0033:0x7f463859c799 [ 576.345198][T28480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.364892][T28480] RSP: 002b:00007f4639417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.373397][T28480] RAX: ffffffffffffffda RBX: 00007f4638815fa0 RCX: 00007f463859c799 [ 576.381360][T28480] RDX: 0000200000000140 RSI: 00000000400442c8 RDI: 0000000000000008 [ 576.389320][T28480] RBP: 00007f4638632c99 R08: 0000000000000000 R09: 0000000000000000 [ 576.397278][T28480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.405402][T28480] R13: 00007f4638816038 R14: 00007f4638815fa0 R15: 00007ffd5ccb3fb8 [ 576.413376][T28480] [ 576.416716][T28480] Kernel Offset: disabled [ 576.421038][T28480] Rebooting in 86400 seconds..