last executing test programs: 2m38.706039447s ago: executing program 3 (id=2202): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0xfffffffd, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000020}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 2m38.47836796s ago: executing program 3 (id=2205): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x310, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x300, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a"]}]}, 0x310}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000069}, @in6={0xa, 0x4e21, 0xaf8d, @local, 0xc}], 0x38) r2 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r0, &(0x7f0000005000)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000001600)=""/4096, 0x1000}, 0x401}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002600)=""/154, 0x9a}, {&(0x7f00000026c0)=""/38, 0x26}], 0x2, &(0x7f0000002740)=""/50, 0x32}, 0xfffffffb}, {{&(0x7f0000002780)=@isdn, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002800)=""/214, 0xd6}, {&(0x7f0000002900)=""/31, 0x1f}, {&(0x7f0000002940)=""/194, 0xc2}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/85, 0x55}, {&(0x7f0000003ac0)=""/61, 0x3d}, {&(0x7f0000003b00)=""/105, 0x69}], 0x7, &(0x7f0000003c00)=""/19, 0x13}, 0x3ff}, {{&(0x7f0000003c40)=@hci, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003cc0)=""/70, 0x46}, {&(0x7f0000003d40)=""/103, 0x67}, {&(0x7f0000003dc0)=""/36, 0x24}, {&(0x7f0000003e00)=""/66, 0x42}, {&(0x7f0000003e80)=""/129, 0x81}], 0x5}, 0xe}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000003fc0)=""/4096, 0x1000}], 0x1}, 0xd4}], 0x5, 0x10100, &(0x7f0000005140)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}], 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket(0x18, 0x2, 0x2) syz_emit_ethernet(0x276, &(0x7f0000005540)={@local, @random="597cad4a6a91", @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "1caf69", 0x240, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@dstopts={0x67, 0x9, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0xdb3, [0x6be, 0x1, 0x8, 0x7]}}, @jumbo={0xc2, 0x4, 0x80000001}, @calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0x9, [0x3, 0x0]}}]}, @hopopts={0x2e, 0x3, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x9, [0x730]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}, @fragment={0x2c, 0x0, 0x3, 0x0, 0x0, 0x2, 0x65}, @fragment={0x2f, 0x0, 0x8a, 0x1, 0x0, 0x9, 0x66}, @srh={0x2f, 0x2, 0x4, 0x1, 0x0, 0x10, 0x7, [@mcast1]}, @routing={0x73, 0x4, 0x1, 0x4c, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x29, 0x4, 0x0, 0x8b, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @local}]}, @routing={0x2e, 0x4, 0x2, 0x0, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @empty}]}, @hopopts={0x0, 0x22, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x18, {0x0, 0x4, 0xae, 0x6, [0x72, 0x1]}}, @pad1, @generic={0x9, 0xe7, "c8bf6f412f3b838f9dfc8384abb02ee12e8784de2bed532d9e4118f5be4703186965cbf2882026b147ff522b5611b5cdbebdf6eeac7a3a26febf9fbfcc6f592f13084a68cee12a9a86a443b130661d261fc74efa9692f7efa7475f99a98e4aaf466ce04e0d9bafb918407751ec88780515e9c2d6ce1ae335eea6847625306848056896370bad3d0d5bbc6cb870b8bcf1d16bd1ae5235573930c1a98b6ebab6aba128ea2f1a11a61fb588d850c593bcbc9bcb400eb463f44d3068775c957a5d18a2d1ed02a2e2fb16a022000055943d727ea6dd131849dc9c5dc3865a21c3f5479b7e609d223887"}]}], @ndisc_rs}}}}}, 0x0) connect$unix(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r9}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000005200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000005240)={0x0, 0x7}, &(0x7f0000005280)=0x8) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x3c, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0xb}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r10, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x79}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000001840)=""/4115, 0x1013}, {&(0x7f0000000080)=""/62, 0x3e}], 0x4}, 0x70001}], 0x4, 0x102, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="cd5323000000000000001f"], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r11) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) 2m38.198341837s ago: executing program 3 (id=2210): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x20, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x44040}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r6, @ANYBLOB="46060900000000002400128009000100626f6e6400000400140002800800040088"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async, rerun: 32) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="0228eb008303000080a3aeffffffffff0700190000000000b36b6e000000000006000000000000000000000000000000e0000001000000000000000000000000ac1c1400000000000000000000006800"], 0x50}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2m37.814693859s ago: executing program 3 (id=2214): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2400c805}, 0x4008094) 2m37.505298646s ago: executing program 3 (id=2218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x44, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000a00000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x6, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x24008804) 2m37.004057701s ago: executing program 3 (id=2222): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x73, 0x0, @vifc_lcl_addr=@empty, @private=0xa010100}, 0x10) 2m21.786257987s ago: executing program 32 (id=2222): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x73, 0x0, @vifc_lcl_addr=@empty, @private=0xa010100}, 0x10) 12.293997193s ago: executing program 4 (id=3308): socketpair(0x18, 0x1, 0x3, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x1258e60c}) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000001140)=0x4, 0x4) (async, rerun: 32) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000080)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f00000010c0)={&(0x7f00000000c0)="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", 0x1000}}, 0x4000804) (rerun: 32) 11.863024117s ago: executing program 4 (id=3313): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 11.342016401s ago: executing program 4 (id=3318): socket$kcm(0x2d, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xe}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1b50b}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40056}, 0x8080) 10.169017379s ago: executing program 4 (id=3326): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff3}, {0x0, 0x3}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) sendto$inet6(r2, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) (async) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.688614729s ago: executing program 4 (id=3331): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000000)) 9.489555304s ago: executing program 4 (id=3335): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async, rerun: 32) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) sendmsg$xdp(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x844) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="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", 0x122}], 0x1, 0x0, 0xffffffffffffffe1}, 0x20000004) 5.44522303s ago: executing program 2 (id=3368): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) read(r0, &(0x7f0000000000)=""/226, 0xe2) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000100)={0x1, 0x1, 0x1155, 0x1, 0x3, 0x3}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x140b, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0xf20b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000280)='\x00', 0x200, &(0x7f00000002c0)={@align=0x836, {0x7, 0x0, 0x8}}, 0xe57, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x1d, 0xae, &(0x7f00000003c0)="e85b4be6c0d6eb4fb8137fa567d48f681b09d8eacc121cbfa067f2a267", &(0x7f0000000400)=""/174, 0x12, 0x0, 0x80, 0xd1, &(0x7f00000004c0)="1b54f13f34810c263d08daa0a90f9951d63d5605005b5f88d2682429e5b4210e733b9a163a36d5b6449aefcc13fc8297c4cdd68cdfb3bc2d7745647bac95fb2a30d447ffcfb8d6c9ad0e86487d4dba3f8eb2419642d53f63138a4aa68ef4e13b3f5b9965c9bfc5f112fdb46c4f835b6b1e916c95cdc24e2410314a913d14fb8a", &(0x7f0000000540)="b68040422a46fa4ec137ea9a4b780781b486714660a1775e77323474e8b4413e25eb3f340950c239506cd4f7025245a7a28ee67aca025be251ae3eb58649bc70c30a8765e6e7010aea47a84bbcb462d6ed857c854d2b2a48627677723fedd946e0b5d32f456c4e48cb4c2b8ece7938cf75c72364e998d1f117b911af7b9920d8243edb3c23a95e4c2e615f3b394a99635509501ac7d3e8400263dd00c068136f389499c4f153bdc1e0f7346f49c8b1ea0eab5c36dc85de989580b200ba97298a2cacbd79a21d6cb0c8bc353eb0454eff69", 0x7, 0x0, 0x3}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000006c0)=0x0) connect$nfc_raw(r2, &(0x7f0000000700)={0x27, r3, 0xffffffffffffffff, 0x7}, 0x10) shutdown(r2, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740)={[{0x2b, 'perf_event'}, {0x6, 'memory'}, {0x2d, 'net_prio'}, {0x2d, 'io'}, {0x0, 'rlimit'}, {0x2b, 'cpu'}, {0x6, 'memory'}, {0x2d, 'net'}, {0x2b, 'rlimit'}]}, 0x44) write$tun(r2, &(0x7f00000007c0)={@val={0x0, 0x6005}, @val={0x1, 0x80, 0xc, 0x0, 0x9, 0x2}, @eth={@broadcast, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @random="dfce2e1f7d75", @mcast1, @empty, @private1}}}}}, 0x50) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000840)="54d21e15cfb47549b65904378d34eb13a12a4b43f76165bd08905e455164bf2940042a030ff003cbae6d2cca664d710849c2d1cab9b8e40fe966f59b951f6bd35bb5ef362955ba50767a99ff4cb8138fe5ba2dba3760aa6a740600", 0x5b) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000940)={'vlan1\x00', &(0x7f00000008c0)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000980)='ns/time\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4010, r4, 0xf78b1000) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x1411, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x400c000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff84, 0x28}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000c80)=0x9, 0x4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0xff, 0xf472, 0x2f32, 0x101]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, 0x1411, 0x4, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) pipe(&(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000f40)={0x9, 0xe53, 0x0, 0x400, 0x4, 0xc, 0x9, 0x2, 0x0}, &(0x7f0000000f80)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000fc0)={r8, 0xfffd}, 0x8) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x1d}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x70}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) 5.229292148s ago: executing program 2 (id=3371): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}]}}}]}, 0x40}}, 0x0) 3.462190605s ago: executing program 1 (id=3376): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x8d'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1) shutdown(r3, 0x1) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)="3a2f3ae6", 0x4}], 0x1) setsockopt$inet6_int(r1, 0x29, 0x21, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900410000002e000800080026009a030000080027005a"], 0x38}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r7, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffff23bd}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x58, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x22, 0x0, @random="5f7d7f6a74678fa1986f209cc4c1582e3bf8180005d31cdfae784be9846a"}, {0x21, 0x0, @random="3113515132efb260a6b1a4eee9f514962fd02f49e8d0f94a5f508fab6e"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0xb4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "d61418f3"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 3.398678552s ago: executing program 2 (id=3377): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='highspeed', 0x9) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003052abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031f4ffff1f0012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x10, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}]}, 0x58}}, 0x48040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 3.170428341s ago: executing program 1 (id=3380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="81010000000900000000030019f6"], 0x14}}, 0x0) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10, 0x8}, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x0, {{0xf, 0x4, 0x0, 0x2, 0x3c, 0x68, 0x0, 0x2, 0x2d, 0x0, @multicast2, @rand_addr=0x64010100, {[@noop, @timestamp_addr={0x44, 0x14, 0xc8, 0x1, 0x4, [{@rand_addr=0x64010100, 0x101}, {@multicast1, 0x5}]}, @lsrr={0x83, 0x13, 0xbc, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x17}, @remote, @remote]}]}}}}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0xfff, 0x0}, 0x8) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x20}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0x4, &(0x7f0000000080)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f00000000c0)='GPL\x00', 0x61, 0x0, 0x0, 0x40f00, 0x9, '\x00', r3, @fallback=0x7, r4, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x5, 0x83f, 0x5}, 0x10, r5, r6, 0x6, &(0x7f0000000580)=[r7, r8, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x5, 0x8, 0x4}, {0x4, 0x4, 0x7}, {0x5, 0x3, 0xb, 0x1}, {0x4, 0x1, 0xe}, {0x3, 0x3, 0xb, 0x4}, {0x2, 0x1, 0x3, 0xe}], 0x10, 0xff}, 0x94) 2.905294064s ago: executing program 1 (id=3382): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x44, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) (async) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000680)={r0, 0x74}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r3], 0x84}}, 0x20008040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x10, 0xffffffff, 0x8, @mcast1, @mcast2, 0x80, 0x80, 0x3, 0x9}}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000700)={{r0, &(0x7f0000000580)='\x00', 0x5f0fda5b01300512, &(0x7f00000005c0)={@_ha_fsid={[0xffffffff, 0x2]}, {0x5, 0xd, 0x6, 0x4}}, 0x8, &(0x7f0000000600), &(0x7f0000000640)=0x7}, {[0x80000001, 0xdd15, 0xd17a, 0xb]}, 0x0, 0x58, &(0x7f0000000b80)=""/88}) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="180000002d060000000000000016df90"], &(0x7f0000000840)='syzkaller\x00', 0x4, 0x1, &(0x7f0000000880)=""/1, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x7, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x4, 0x1, 0xe, 0x5}, {0x0, 0x2, 0x6}, {0x2, 0x1, 0xe, 0xc}], 0x10, 0x7}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1e, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000000480)='syzkaller\x00', 0x8d, 0x0, 0x0, 0x41000, 0xa, '\x00', r5, @fallback=0x14, r6, 0x8, &(0x7f0000000780)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x0, 0x2, 0x7}, 0x10, 0xffffffffffffffff, r7, 0x2, 0x0, &(0x7f0000000a80)=[{0x1, 0x5, 0x0, 0x3}, {0x2, 0x3, 0x0, 0x7}]}, 0x94) 2.902530837s ago: executing program 2 (id=3383): r0 = socket(0x2, 0x2, 0x1) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 2.686341098s ago: executing program 2 (id=3384): r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x894}, 0x64880) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a0099b9df073c3168b0400105000400000000fd0800020073797a3100000000f300686073683a69702c706f72742c6970000c00078008001340000003fd"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket(0x15, 0x5, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x894}, 0x64880) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a0099b9df073c3168b0400105000400000000fd0800020073797a3100000000f300686073683a69702c706f72742c6970000c00078008001340000003fd"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) (async) 2.582983623s ago: executing program 1 (id=3387): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='nbd\x00', 0x4000, &(0x7f0000000080)={@_ha_fsid={[0x7f, 0x1]}, {0x9, 0x8, 0x630, 0xff}}, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x3ff}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2d, 0x1, 0x7, 0x1, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x1, 0x8, 0x9, 0xc8}}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}}, 0x0) 2.431290179s ago: executing program 0 (id=3388): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) listen(r2, 0x2f) listen(r2, 0x0) listen(r2, 0xaca) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="83", 0x1}], 0x1}, 0x4000840) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004811}, 0x4041810) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, @xdp={0x2c, 0x1, r5, 0x17}, @vsock={0x28, 0x0, 0x2710, @host}, @in={0x2, 0x4e21, @multicast2}, 0xfffc, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='batadv0\x00', 0xffffffffffffff46, 0x80000000, 0x3ff}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000080)={0x5, 0x28, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 2.40060166s ago: executing program 5 (id=3389): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x48, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.338794459s ago: executing program 2 (id=3390): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xfffffffd, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x3, 0x1000}) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) write$nci(r3, &(0x7f00000006c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x79, @f={0x5, 0x0, 0x1, 0x2, 0x6, 0x6, 0x1, {0x5, 0x33, "0dd8fbf57fe723cfd9ae3cf0f99482a67a9c860b9c72bec792de54b17e4641fb445e6afd986eceac1521aa818ad6781656b6ad"}, 0x1, 0xf0, 0x7, 0x2, 0x69, "538abb9d786abd81461fa5a2637004f2c70a68803256073e07a6cbfd7fdec5eadd183b48fe097f0a7b99a40d7624c3d8362daf6a450bb323612cd083c26e5a3890def7e98c6215f8ffecb15e9be284ff135cb94890c781c6830a3a56b041d277ee7409a20ab094b76e"}}, 0xad) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.337438108s ago: executing program 1 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0f34847aa05dc2ee57e5d58e0f22f2213c7cbada183e3b88a6d57fc8f87801996fb4944deeed803f3521c4b31bbbe5bbcd6f9146033e078b46b6e34632f59b0e80194ebfde80c20ac523f6b54f64ab2100137956157d9d2003c2bcd90b9b21b203b11b49572beae1f251ae7d6a5c4c0a0678e8c2a2f3acac6573fb521af08cdf771d0493debccb0c3f671996209802c8ca9c1a3d38841c85c5d26e135220cbaf1aac8c73e4", @ANYRES16=r4, @ANYBLOB="5d4528bd70a0fedbdf25010000000c0002000100000000000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c000400f6ffffffffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 2.038130156s ago: executing program 1 (id=3392): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000240)={'ip6_vti0\x00', {0x2, 0x0, @broadcast}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000400)={0x0, r1, r1, 0x4, 0x9, '\x00', {0x87f, 0x5, 0x8, 0x6, 0x827, 0x1, 0x3, 0x2780d8e1, {0x8c}, {0x3, 0x101}, {0xfffffffffffffff9, 0x800}, 0x100, 0x80, 0xef, 0x1, 0x3, 0x7fff, 0x38b8, 0x0, 0xffff, 0x7, '\x00', 0x7, 0x2c71, 0x1, 0x3}}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x400, 0x8, 0x401, 0x9, 0x3, 0x6, 0x8]}}]}]}]}, 0x38}}, 0x0) r7 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) write(r7, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000ffa6080009000d000000", 0x24) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f7, &(0x7f0000003200)={'ip6tnl0\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100000000000000000000010400000000000000000000000008000a40000000000900020073797a300000e644eefc3041633ce9e2b3ff08000440fffffffe08000540000000000900010073797a3100000000140000001100010000000000000000000000006a8355813a332f86a7da477afe2a3a19b2316f"], 0x6c}}, 0x0) 1.891855565s ago: executing program 0 (id=3393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x7, 0x3d58, 0x1, 0x1, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) 1.705857731s ago: executing program 5 (id=3394): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20004000) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf365ba431b16ff35}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xde, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a617448983"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb917bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a400"/205}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) r5 = socket$kcm(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2228, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0xfffffffffffffeaf, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x22c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x15c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x9, [@const={0x9}, @struct={0xe, 0x4, 0x0, 0x4, 0x0, 0xa5, [{0x2, 0x2, 0x8}, {0x4, 0x5, 0x1}, {0x1, 0x2, 0x8}, {0x9, 0x3, 0x756}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0x800, [{0x7, 0x3, 0x8}]}, @const={0x1, 0x0, 0x0, 0xa, 0x7}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x6, 0x100}, {0xd, 0xe422}, {0x3, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x8000, 0x6}}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @typedef={0xa, 0x0, 0x0, 0x8, 0x2}, @fwd={0x1}]}, {0x0, [0x0, 0x5f, 0x5f, 0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000000500)=""/106, 0xf9, 0x6a, 0x1, 0x4}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000000300000002000000af00000031000000", @ANYRES32=r0, @ANYBLOB="830d00"/20, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0100400004000000050095a459d200000000000000000000000000002d617443e68a816f50ecb73d86b5c73a4e6408917b201696b95291bd68e007859c016bf63ba8ce6caf4f6cd95cb34d64400bd9258289d92f4b83324af88b05e2b4f42c117d9f815d25ec8c3ae11d3f076b6bf2e293ca0ccb"], 0x50) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000122000/0x3000)=nil, 0x3000, 0x2, 0x4010, r3, 0x97569000) ioctl$OCFS2_IOC_GROUP_ADD(r6, 0x40186f02, &(0x7f0000000200)={0x0, 0xffffffff, 0x4, 0x8}) 1.361940845s ago: executing program 5 (id=3395): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f50020068720010000000000000000000000000002fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ff0300"], 0x0) (async) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000980)={{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0xffff}, 0x0, {[0xfffffff8, 0x8, 0x213f, 0x17, 0x800, 0x9, 0x3, 0x1]}}, 0x5c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000dc0)={&(0x7f0000000a00)="550c11b163503ff2429212153a3a898ada786c26d4bc173db9c1a5ec465b729589752c83c215a5970773131e38b1593582ee0b94bef5e46e46037591801c5dc06e7b102b56581a13a140e83668685c2b53ff670e0f74e029758bb3bbd6deb48e39d5a5d0ebfc13bc9ec16731", &(0x7f0000000a80)=""/49, &(0x7f0000000ac0)="935242c33a5d7b16f02cfd1e81d315d659194679be07bddf2a88831a512f9c4a0ec3dd6e2d0f9a8fc51d201c31", &(0x7f0000000c80)="54f32ad5e2de6c2c54b8a95881fbf006427522a5188f3ad0999da4a3569cfdc5305f347202b37b50133666281596c93f03c1ae995e82a441595f987e61823459ece5752331034ca98d469a7f469ebc5efa95421a52b2f6c7c3a9b7d2e14c5767dea990a0e005b25069e5ec6fc0eacfee046c33fa42e5458e818542bb7c0bacdb086de7ef09dbfc12b7f5883e6f018e376d9c0ac45f1fd2cc69a25b82f28c1e8bdd9a150f", 0xd1a6, r4}, 0x38) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000185b0000050000000000000000000000950000000000000095000000002e2f618bb30000009597000101000000950000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)='%+9llu \x00'}, 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0xfffffffffffffffd) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r8}, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) connect$l2tp6(r11, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 1.321161921s ago: executing program 0 (id=3396): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x400000, 0x200}, 0x48) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r2, r6}) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.162098586s ago: executing program 5 (id=3397): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x404c095) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @mss={0x2, 0x9}, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0xf}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) (rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) (async) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) pwritev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="1832", 0x2}], 0x1, 0xa, 0x10) read(r2, 0x0, 0x300) (async, rerun: 32) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) (async, rerun: 64) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0xfff, 0x7, 0x0, 0x8}, {0xbb2, 0x4, 0x6, 0x3}, {0x0, 0xc, 0x6, 0x6}]}) (async, rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b27, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000240)=0x4) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (rerun: 32) writev(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x9, 0x2, 0x4, 0x2, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}}, 0x7fff, 0xc, 0x6, 0xc1b, 0x2817c26c}}, &(0x7f00000000c0)=0xa4) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000003c0)=0xe77) 953.007616ms ago: executing program 5 (id=3398): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0xe6905000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x9, 0x0, 0x2, 0x0, 0x1b}, @jmp={0x5, 0x0, 0xb, 0x3, 0x6, 0x80, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}], &(0x7f0000000280)='GPL\x00'}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 760.561936ms ago: executing program 5 (id=3399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000180)=0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="cd3e0000000000000000010000000800020000000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040200006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b968228b0487fc9051c2adbb8d87480d48f4b3d4530e85283000008000700ffffffff0400080000000000"], 0xfc}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000004f01000000000000", @ANYRES32=0x1, @ANYBLOB="ff7f00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000100"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x28, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x58}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe1e}, 0x94) 166.220386ms ago: executing program 0 (id=3400): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = socket(0x10, 0x3, 0x8000) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000206010800000000f9ffffffffffffff0c00078008000640000000010500050002000000"], 0x28}}, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) (async) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6a63af44ebd50541}, 0x200080d4) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r7, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) listen(r9, 0x0) (async) accept4$vsock_stream(r9, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r6, @ANYRES32=r5, @ANYBLOB="3803060040df3a7f4a00010056726937f5cba10cc53260650000000024bbbdd76a2d2d"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) r11 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r11, &(0x7f0000000140), 0x4924b68, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 80.126841ms ago: executing program 0 (id=3401): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x3, [0x81, 0x2, 0xfff]}}) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 0s ago: executing program 0 (id=3402): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r5, 0x0, &(0x7f0000000640)) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) (async) close(r0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000005c0)) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) getsockname$packet(r5, 0x0, &(0x7f0000000640)) (async) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) (async) kernel console output (not intermixed with test programs): [T13122] netlink: 'syz.4.1946': attribute type 5 has an invalid length. [ 327.902685][T13122] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1946'. [ 328.478440][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 328.576628][T13159] netlink: 'syz.0.1956': attribute type 1 has an invalid length. [ 328.612246][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 328.644249][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1956'. [ 329.200223][T13181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1964'. [ 329.348797][T13189] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1965'. [ 329.390719][T13180] netlink: 11256 bytes leftover after parsing attributes in process `syz.0.1962'. [ 329.683790][T13197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.789480][T13202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.157019][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 330.178313][T13218] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1975'. [ 330.238586][T13223] syzkaller0: entered promiscuous mode [ 330.244840][T13223] syzkaller0: entered allmulticast mode [ 330.541114][T13233] veth0_macvtap: Caught tx_queue_len zero misconfig [ 330.817223][T13243] netlink: 'syz.2.1981': attribute type 2 has an invalid length. [ 331.421414][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 331.467601][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 331.549638][T13279] netlink: 'syz.3.1988': attribute type 2 has an invalid length. [ 332.400465][T13297] bond4: left promiscuous mode [ 332.432827][T13297] bond5: left promiscuous mode [ 332.451420][T13297] veth0_to_bond: left promiscuous mode [ 332.464149][T13297] bond5: left allmulticast mode [ 332.469314][T13297] veth0_to_bond: left allmulticast mode [ 333.857542][T13370] __nla_validate_parse: 6 callbacks suppressed [ 333.857565][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2009'. [ 334.565427][T13384] netlink: 'syz.0.2014': attribute type 2 has an invalid length. [ 334.822721][T13389] xt_l2tp: v2 doesn't support IP mode [ 335.027673][ T1130] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 335.240945][T13404] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 335.249703][T13404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.489730][T13408] Cannot find del_set index 3 as target [ 336.213141][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 336.287151][T13417] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 336.298470][T13417] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 336.609770][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2023'. [ 336.703337][T13424] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2024'. [ 336.836925][T13430] xt_ipcomp: unknown flags 1D [ 337.702731][T13440] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2028'. [ 337.714162][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2028'. [ 337.724821][T13440] netlink: 'syz.3.2028': attribute type 1 has an invalid length. [ 337.767354][T13440] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.902446][T13392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.231935][T13454] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.271132][T13456] x_tables: duplicate underflow at hook 2 [ 338.496138][T13457] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.748021][T13457] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.921699][T13457] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.304996][T13488] openvswitch: netlink: Actions may not be safe on all matching packets [ 339.325082][T13457] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.425664][T13493] netlink: 'syz.2.2042': attribute type 1 has an invalid length. [ 339.496883][T13488] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 339.512075][T13488] bond8 (unregistering): Released all slaves [ 339.543906][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 339.601712][T13498] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 339.619678][T13493] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.695279][T13496] bond8: entered promiscuous mode [ 339.730034][T13493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2042'. [ 339.977286][ T168] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.068062][ T1130] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.169318][T11428] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.257535][T11428] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.578427][T13529] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2053'. [ 340.625529][T13530] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2053'. [ 340.748506][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 340.823456][T13540] netlink: 'syz.3.2056': attribute type 40 has an invalid length. [ 340.857352][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2054'. [ 340.889917][T13545] netlink: 'syz.2.2058': attribute type 21 has an invalid length. [ 340.947977][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 340.975048][T13545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2058'. [ 341.011432][T13548] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2054'. [ 341.265649][T13555] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2060'. [ 341.370833][T13562] netlink: 'syz.4.2062': attribute type 5 has an invalid length. [ 341.718516][T13577] netlink: 'syz.4.2066': attribute type 1 has an invalid length. [ 342.646557][T13606] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 342.753641][T13616] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 342.863822][T13616] bond2: (slave veth0_to_bond): Releasing active interface [ 342.882683][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.896406][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 342.904518][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.928819][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 342.949388][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.959993][T13625] x_tables: duplicate underflow at hook 2 [ 342.979122][T13624] x_tables: duplicate underflow at hook 2 [ 342.992653][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.023488][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.042521][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.073976][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.091478][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.107176][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.135778][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.156587][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.175563][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.200537][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.238844][T13623] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.285334][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.319028][T13636] netlink: 'syz.3.2084': attribute type 83 has an invalid length. [ 343.347188][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.366512][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.406453][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.554505][T13639] block nbd3: not configured, cannot reconfigure [ 343.648300][T13641] gre1: entered promiscuous mode [ 343.801781][T13647] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 344.080390][T13664] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 344.117073][T13664] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 344.397914][T13678] netlink: 'syz.0.2097': attribute type 11 has an invalid length. [ 344.837682][T13682] tipc: Enabling of bearer rejected, already enabled [ 345.078945][T13698] __nla_validate_parse: 8 callbacks suppressed [ 345.078964][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 345.113516][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2102'. [ 345.170228][T11428] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.180778][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 345.201006][T11428] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.222723][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2102'. [ 345.248386][T11428] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.277848][T11428] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.460229][T13705] tipc: Started in network mode [ 345.477397][T13705] tipc: Node identity fff, cluster identity 4711 [ 345.495318][T13705] tipc: Node number set to 4095 [ 345.601297][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2104'. [ 346.011459][T13723] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 346.487129][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2113'. [ 348.747783][T13713] wg1 speed is unknown, defaulting to 1000 [ 348.773374][T13713] lo speed is unknown, defaulting to 1000 [ 349.712333][T13713] hsr0 speed is unknown, defaulting to 1000 [ 350.397211][T13770] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2123'. [ 350.429687][T13770] net_ratelimit: 23 callbacks suppressed [ 350.429710][T13770] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 350.791754][T13775] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 351.329574][T13784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2126'. [ 351.362380][T13785] sctp: [Deprecated]: syz.4.2127 (pid 13785) Use of int in max_burst socket option deprecated. [ 351.362380][T13785] Use struct sctp_assoc_value instead [ 351.470841][T13792] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2129'. [ 351.499214][T13785] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 351.758053][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 351.811411][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 351.927834][T13804] netlink: 'syz.3.2132': attribute type 21 has an invalid length. [ 351.960305][T13805] netlink: 'syz.3.2132': attribute type 21 has an invalid length. [ 351.985585][T13804] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2132'. [ 352.038689][T13805] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2132'. [ 352.058678][T13809] xt_l2tp: v2 doesn't support IP mode [ 352.073160][T13804] netlink: 'syz.3.2132': attribute type 4 has an invalid length. [ 352.126218][T13804] netlink: 'syz.3.2132': attribute type 5 has an invalid length. [ 352.163080][T13804] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2132'. [ 352.194080][T13805] netlink: 'syz.3.2132': attribute type 4 has an invalid length. [ 352.219543][T13805] netlink: 'syz.3.2132': attribute type 5 has an invalid length. [ 352.257520][T13805] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2132'. [ 352.965209][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 353.165450][T13838] bond8: entered promiscuous mode [ 354.566600][T13884] geneve1: Caught tx_queue_len zero misconfig [ 354.646722][T13888] netlink: 'syz.1.2155': attribute type 30 has an invalid length. [ 354.862204][T13892] 0·: renamed from hsr0 (while UP) [ 354.884251][T13892] 0·: entered allmulticast mode [ 354.894959][T13892] hsr_slave_0: entered allmulticast mode [ 354.907763][T13892] hsr_slave_1: entered allmulticast mode [ 354.956126][T13892] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 355.230898][T13903] bond0: (slave gre0): refused to change device type [ 355.255928][T13900] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 356.063783][T13931] __nla_validate_parse: 3 callbacks suppressed [ 356.063802][T13931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2167'. [ 356.152697][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'. [ 356.166639][T13936] netem: invalid attributes len -5 [ 356.191780][T13936] netem: change failed [ 356.298536][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'. [ 356.644268][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'. [ 356.784983][T13949] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.912483][T13949] bond7: (slave lo): Enslaving as an active interface with an up link [ 357.035870][T13949] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 357.217203][T13969] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 357.263020][T11314] lo speed is unknown, defaulting to 1000 [ 357.282062][T11314] syz0: Port: 1 Link ACTIVE [ 357.345080][T11314] lo speed is unknown, defaulting to 1000 [ 357.369615][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 357.417267][T13984] netlink: 'syz.1.2178': attribute type 29 has an invalid length. [ 357.445941][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 357.571600][T13988] IPVS: length: 8 != 1152 [ 357.577567][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 357.613342][T13984] netlink: 'syz.1.2178': attribute type 29 has an invalid length. [ 357.634570][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 357.689187][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 357.779375][T13984] macsec0: entered promiscuous mode [ 357.804753][T13984] bridge0: entered promiscuous mode [ 357.840700][T13984] macsec0: entered allmulticast mode [ 357.870313][T13984] bridge0: entered allmulticast mode [ 357.913473][T13984] bridge0: port 3(macsec0) entered blocking state [ 357.950028][T13984] bridge0: port 3(macsec0) entered disabled state [ 358.002303][T13984] bridge0: left allmulticast mode [ 358.086038][T11324] bridge0: left promiscuous mode [ 358.108883][T13998] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2183'. [ 359.460131][T14055] x_tables: duplicate underflow at hook 1 [ 359.604670][T14058] wg1 speed is unknown, defaulting to 1000 [ 359.707101][T14060] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 360.812127][T14105] netlink: 'syz.4.2216': attribute type 23 has an invalid length. [ 361.232338][T14123] __nla_validate_parse: 5 callbacks suppressed [ 361.232387][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2220'. [ 361.432080][T14131] 8021q: adding VLAN 0 to HW filter on device bond9 [ 362.372631][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2226'. [ 364.082260][T14116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.441332][T14159] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2228'. [ 364.796717][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 365.330920][T14189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2235'. [ 365.340487][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a926400: rx timeout, send abort [ 365.744386][T14203] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 365.785637][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 365.842478][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a926400: abort rx timeout. Force session deactivation [ 365.876446][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 366.491449][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 366.603704][T14219] bond8: option xmit_hash_policy: invalid value (64) [ 366.622208][T14219] bond8 (unregistering): Released all slaves [ 367.165803][T14231] netlink: 'syz.1.2248': attribute type 1 has an invalid length. [ 367.194578][T14234] netlink: 'syz.4.2249': attribute type 1 has an invalid length. [ 367.232544][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.265709][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.292561][T14238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.304411][T14231] bond8: entered promiscuous mode [ 367.309958][T14231] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.329880][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.356582][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.369232][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.387375][T14234] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 367.506604][T14240] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.540599][T14240] bond8: (slave vti1): The slave device specified does not support setting the MAC address [ 367.611210][T14240] bond8: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 367.716333][T14240] bond8: (slave vti1): making interface the new active one [ 367.746666][T14240] vti1: entered promiscuous mode [ 367.787167][T14240] bond8: (slave vti1): Enslaving as an active interface with an up link [ 367.821541][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.853006][T14238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.987133][T14257] syz_tun: entered allmulticast mode [ 367.995135][T14259] sctp: [Deprecated]: syz.4.2254 (pid 14259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.995135][T14259] Use struct sctp_sack_info instead [ 368.090947][T14257] syz_tun: left allmulticast mode [ 368.152209][T14264] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2255'. [ 369.714465][T14302] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.724148][T14302] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.512040][T14317] netlink: 'syz.4.2275': attribute type 5 has an invalid length. [ 370.557374][T14318] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 370.938857][T14325] netlink: 'syz.0.2278': attribute type 5 has an invalid length. [ 371.358400][T14336] xt_hashlimit: invalid interval [ 371.385082][T14337] xt_hashlimit: invalid interval [ 371.628700][T14340] __nla_validate_parse: 8 callbacks suppressed [ 371.628741][T14340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2283'. [ 371.807519][T14348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2286'. [ 371.863071][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2287'. [ 371.890925][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'. [ 371.968570][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2287'. [ 372.107333][T14354] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2288'. [ 372.129394][T14354] netlink: 'syz.2.2288': attribute type 10 has an invalid length. [ 372.138492][T14354] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2288'. [ 372.150855][T14354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2288'. [ 372.979513][ T30] audit: type=1804 audit(1778984813.071:5): pid=14383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2296" name="/newroot/410/cgroup.controllers" dev="tmpfs" ino=2115 res=1 errno=0 [ 373.064026][ T30] audit: type=1800 audit(1778984813.071:6): pid=14383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2296" name="cgroup.controllers" dev="tmpfs" ino=2115 res=0 errno=0 [ 373.504166][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'. [ 374.887366][T14425] --map-set only usable from mangle table [ 376.241959][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 376.288269][T14456] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 376.598684][T14467] TCP: TCP_TX_DELAY enabled [ 376.698368][T14472] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 376.957172][T14476] __nla_validate_parse: 1 callbacks suppressed [ 376.957191][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 376.970267][ T4944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.984173][ T4944] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.996891][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 377.009381][ T4944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.023501][ T4944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.023528][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 377.049260][ T4944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.061822][T14481] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2324'. [ 377.073210][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2324'. [ 377.115032][T14476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2323'. [ 377.535070][T14491] netlink: 'syz.0.2326': attribute type 1 has an invalid length. [ 377.573928][T14491] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2326'. [ 377.612881][T14491] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2326'. [ 377.691702][T14491] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2326'. [ 377.737047][T14497] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2327'. [ 378.673987][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.714018][T14532] openvswitch: netlink: IP tunnel dst address not specified [ 378.912481][T14535] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 378.934937][T14475] wg1 speed is unknown, defaulting to 1000 [ 378.963418][T14475] lo speed is unknown, defaulting to 1000 [ 379.142936][ T4944] Bluetooth: hci5: command tx timeout [ 380.221437][T14475] hsr0 speed is unknown, defaulting to 1000 [ 380.297080][T14563] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 380.432133][T14558] netlink: 'syz.0.2344': attribute type 9 has an invalid length. [ 380.530914][T14572] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 380.579255][T14563] macvlan3: entered promiscuous mode [ 380.587244][T14563] macvlan3: entered allmulticast mode [ 380.595110][T14563] bond6: entered promiscuous mode [ 380.600484][T14563] bridge8: entered promiscuous mode [ 380.609292][T14563] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 380.625736][T14576] sctp: [Deprecated]: syz.2.2348 (pid 14576) Use of int in maxseg socket option. [ 380.625736][T14576] Use struct sctp_assoc_value instead [ 380.640789][T14575] sctp: [Deprecated]: syz.2.2348 (pid 14575) Use of int in maxseg socket option. [ 380.640789][T14575] Use struct sctp_assoc_value instead [ 380.655819][T14563] bond6: left promiscuous mode [ 380.667054][T14563] bridge8: left promiscuous mode [ 381.086508][T14589] xt_nat: multiple ranges no longer supported [ 381.223845][ T4944] Bluetooth: hci5: command tx timeout [ 381.896160][T14607] netlink: 'syz.4.2357': attribute type 6 has an invalid length. [ 382.007570][T14611] __nla_validate_parse: 2 callbacks suppressed [ 382.007591][T14611] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2358'. [ 382.054957][T14610] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2358'. [ 382.306150][T14618] netlink: 'syz.1.2359': attribute type 13 has an invalid length. [ 382.482494][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.512112][T14475] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.533482][T14475] bridge_slave_0: entered allmulticast mode [ 382.558379][T14475] bridge_slave_0: entered promiscuous mode [ 382.597797][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.614776][T14475] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.643515][T14475] bridge_slave_1: entered allmulticast mode [ 382.679079][T14475] bridge_slave_1: entered promiscuous mode [ 382.834664][T14637] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 382.865171][T14637] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 382.945020][T14628] tipc: Started in network mode [ 382.950894][T14628] tipc: Node identity 4, cluster identity 4711 [ 382.959307][T14628] tipc: Node number set to 4 [ 383.303440][ T4944] Bluetooth: hci5: command tx timeout [ 383.428230][T14475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.490183][T14475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.544533][T14647] bridge0: port 1(macsec0) entered blocking state [ 383.551675][T14647] bridge0: port 1(macsec0) entered disabled state [ 383.558999][T14647] macsec0: entered allmulticast mode [ 383.573116][T14647] bridge0: entered allmulticast mode [ 383.591818][T14663] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 383.607627][T14647] macsec0: left allmulticast mode [ 383.618513][T14647] bridge0: left allmulticast mode [ 383.817438][T14660] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2368'. [ 383.853076][T14666] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 383.858472][T14663] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 384.028513][T14475] team0: Port device team_slave_0 added [ 384.098248][T14475] team0: Port device team_slave_1 added [ 384.319413][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 384.350465][T14475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.367944][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.477792][T14475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.509381][T14682] netlink: 'syz.2.2373': attribute type 5 has an invalid length. [ 384.530263][T14689] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2375'. [ 384.551826][T14692] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2375'. [ 384.582071][T14475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.603985][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.692700][T14475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.086406][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'. [ 385.202184][T14701] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.254970][T14475] hsr_slave_0: entered promiscuous mode [ 385.280309][T14475] hsr_slave_1: entered promiscuous mode [ 385.281172][T14712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2378'. [ 385.307049][T14475] debugfs: 'hsr0' already exists in 'hsr' [ 385.323818][T14475] Cannot create hsr debugfs directory [ 385.352201][T14711] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 385.383177][ T4944] Bluetooth: hci5: command tx timeout [ 385.441139][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 385.455294][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 385.795380][T14722] vlan3: entered allmulticast mode [ 385.806933][T14722] gretap0: entered allmulticast mode [ 386.766416][T14754] netlink: 'syz.2.2391': attribute type 1 has an invalid length. [ 387.015270][T14754] 8021q: adding VLAN 0 to HW filter on device bond10 [ 387.052345][T14758] bond10: (slave veth0_to_bond): making interface the new active one [ 387.089520][T14758] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 387.176325][T14753] bond10: entered promiscuous mode [ 387.206849][T14753] veth0_to_bond: entered promiscuous mode [ 387.238743][T14753] bond10: entered allmulticast mode [ 387.270950][T14753] veth0_to_bond: entered allmulticast mode [ 387.382332][T14764] macvlan5: entered promiscuous mode [ 387.404373][T14764] macvlan5: entered allmulticast mode [ 387.428130][T14764] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 387.458998][T14764] bond10: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 387.493132][T14747] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 387.537415][T14747] __nla_validate_parse: 4 callbacks suppressed [ 387.537438][T14747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2390'. [ 387.663926][T14747] Cannot find add_set index 0 as target [ 387.936713][T14775] can: request_module (can-proto-3) failed. [ 388.089744][T14772] syzkaller0: entered promiscuous mode [ 388.114759][T14772] syzkaller0: entered allmulticast mode [ 388.349214][T14792] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 391.002491][T14475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.024153][T14475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.063377][T14795] ip6tnl0: Caught tx_queue_len zero misconfig [ 391.166566][T14475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.289809][T14475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.348767][T14475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 391.507862][T14818] netlink: 'syz.2.2406': attribute type 3 has an invalid length. [ 391.829386][T14475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.929367][T14475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.977665][T14475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.437855][T14846] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2411'. [ 392.470902][T14845] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2411'. [ 393.040487][T14475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.299471][T14475] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.488677][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.496003][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.729625][T13059] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.737955][T13059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.825936][T14893] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 394.916689][T14920] pim6reg1: entered promiscuous mode [ 394.959868][T14920] pim6reg1: entered allmulticast mode [ 395.748027][T14933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2426'. [ 396.042103][T14475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.461284][T14475] veth0_vlan: entered promiscuous mode [ 396.484166][T14475] veth1_vlan: entered promiscuous mode [ 396.536112][T14475] veth0_macvtap: entered promiscuous mode [ 396.548862][T14475] veth1_macvtap: entered promiscuous mode [ 396.588709][T14475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.610696][T14475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.632357][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.649665][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.668855][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.690208][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.317595][T14908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.062413][T11428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.108641][T11428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.310532][T14979] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2433'. [ 398.442439][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.490913][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.626142][T14982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.660682][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2435'. [ 398.735054][T14989] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 398.935526][T14993] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 399.201392][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'. [ 399.293990][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'. [ 399.448013][T15014] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 399.513517][T15014] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2441'. [ 399.553382][T15014] NCSI netlink: No device for ifindex 0 [ 399.735687][T15021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2445'. [ 400.128589][T15039] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 400.185444][T15039] bond7: (slave lo): Enslaving as an active interface with an up link [ 400.205494][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2449'. [ 400.260241][T15039] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 400.366071][T15044] ipvlan2: entered promiscuous mode [ 400.520544][T15046] netlink: 'syz.5.2450': attribute type 3 has an invalid length. [ 400.588124][T15053] netlink: 'syz.1.2453': attribute type 1 has an invalid length. [ 400.610982][T15046] netlink: 'syz.5.2450': attribute type 29 has an invalid length. [ 400.653815][T15053] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2453'. [ 400.676831][T15053] NCSI netlink: No device for ifindex 0 [ 400.911457][T15067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.005687][T15074] netlink: 'syz.4.2458': attribute type 4 has an invalid length. [ 402.025567][T15116] veth1_macvtap: entered allmulticast mode [ 402.056862][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 402.453344][T15119] netlink: 211984 bytes leftover after parsing attributes in process `syz.1.2469'. [ 402.501581][T15133] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2473'. [ 402.931100][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'. [ 403.725415][T15166] netlink: 'syz.1.2484': attribute type 1 has an invalid length. [ 404.372360][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'. [ 404.522679][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 405.282284][T15221] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 405.417869][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2498'. [ 405.495466][T15221] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 405.506477][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2497'. [ 405.767963][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2500'. [ 406.257025][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 406.463719][T15265] bond12: entered promiscuous mode [ 406.469055][T15265] bond12: entered allmulticast mode [ 406.610595][T15273] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 406.699985][T15273] 8021q: adding VLAN 0 to HW filter on device bond13 [ 406.778181][T15277] vlan3: entered promiscuous mode [ 406.783686][T15277] bond13: entered promiscuous mode [ 406.789162][T15277] vlan3: entered allmulticast mode [ 406.795201][T15277] bond13: entered allmulticast mode [ 406.885852][T15273] bond13: (slave bridge8): making interface the new active one [ 406.921651][T15273] bridge8: entered promiscuous mode [ 406.953470][T15273] bridge8: entered allmulticast mode [ 406.986694][T15273] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 407.072367][T15289] __nla_validate_parse: 1 callbacks suppressed [ 407.072388][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 407.104170][T15291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.184238][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 407.476314][T15303] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 407.553227][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2520'. [ 407.647558][T15308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2521'. [ 407.657404][T15303] 8021q: adding VLAN 0 to HW filter on device bond9 [ 407.658660][T15311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2523'. [ 407.711089][T15313] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 407.740856][T15313] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 407.812644][T15313] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 407.840574][T15312] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 407.928421][T15320] netlink: 'syz.0.2524': attribute type 30 has an invalid length. [ 407.935762][T15318] block nbd0: not configured, cannot reconfigure [ 408.099610][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 408.379365][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 408.416869][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 408.662652][T15354] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2535'. [ 408.825868][T15352] vlan2: entered allmulticast mode [ 408.869064][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2535'. [ 408.896372][T15352] bond0: entered allmulticast mode [ 408.957166][T15352] bond_slave_0: entered allmulticast mode [ 408.997020][T15352] bond_slave_1: entered allmulticast mode [ 409.135047][T15354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.192091][T15354] bond_slave_0: left allmulticast mode [ 409.257407][T15354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.288017][T15354] bond_slave_1: left allmulticast mode [ 409.308355][T15354] bond0 (unregistering): Released all slaves [ 409.381163][T15361] tipc: Started in network mode [ 409.402304][T15361] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 409.470175][T15361] tipc: Enabling of bearer rejected, failed to enable media [ 409.708369][T15397] tipc: Enabling of bearer rejected, media not registered [ 409.985112][T15404] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 410.051743][T11321] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 410.217580][T15417] syzkaller0: entered promiscuous mode [ 410.246302][T15417] syzkaller0: entered allmulticast mode [ 410.303178][T15418] nbd: must specify at least one socket [ 410.543680][T15422] bond10: option xmit_hash_policy: invalid value (64) [ 410.569413][T15422] bond10 (unregistering): Released all slaves [ 410.622174][T15426] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 410.886785][T15444] netlink: 'syz.1.2555': attribute type 1 has an invalid length. [ 411.218229][T15462] netlink: 'syz.0.2559': attribute type 4 has an invalid length. [ 411.277031][T15442] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 411.305800][T15442] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 411.328800][T15442] bond10: (slave ip6gre1): making interface the new active one [ 411.338539][T15442] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 411.532587][T15475] tipc: Enabled bearer , priority 11 [ 411.582616][T15475] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 411.827178][T15475] 8021q: adding VLAN 0 to HW filter on device bond14 [ 411.987200][T15476] bond10: (slave veth0_to_bond): Releasing active interface [ 412.017085][T15476] veth0_to_bond: left promiscuous mode [ 412.042504][T15476] veth0_to_bond: left allmulticast mode [ 412.084289][T15476] bond14: (slave veth0_to_bond): making interface the new active one [ 412.100936][T15476] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 412.136054][T15484] bond14: entered promiscuous mode [ 412.141362][T15484] veth0_to_bond: entered promiscuous mode [ 412.149148][T15484] bond14: entered allmulticast mode [ 412.155066][T15484] veth0_to_bond: entered allmulticast mode [ 412.198917][T15492] macvlan5: entered promiscuous mode [ 412.208387][T15492] macvlan5: entered allmulticast mode [ 412.223686][T15492] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 412.278677][T15492] bond14: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 413.113904][T15538] netlink: 'syz.1.2579': attribute type 4 has an invalid length. [ 413.270684][T15536] tipc: Enabled bearer , priority 10 [ 413.484557][T15560] openvswitch: netlink: IP tunnel dst address not specified [ 413.539223][T15555] tipc: Resetting bearer [ 413.840289][T15571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.866822][T15573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.152584][T15581] __nla_validate_parse: 8 callbacks suppressed [ 414.152602][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 414.203752][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2590'. [ 414.300553][T15581] bond15: Invalid ad_actor_system MAC address. [ 414.306989][T15581] bond15: option ad_actor_system: invalid value (1) [ 414.321260][T15581] bond15 (unregistering): Released all slaves [ 414.328590][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 414.409317][T15594] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2590'. [ 414.440010][T15591] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 414.493234][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2590'. [ 414.630873][T15583] geneve2: entered promiscuous mode [ 414.667136][T15583] geneve2: entered allmulticast mode [ 414.811031][T15586] bond15: Invalid ad_actor_system MAC address. [ 414.818603][T15586] bond15: option ad_actor_system: invalid value (1) [ 414.831079][T15586] bond15 (unregistering): Released all slaves [ 415.152045][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2600'. [ 415.359353][T15624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 415.538180][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2605'. [ 416.218688][T15670] netlink: 'syz.0.2610': attribute type 11 has an invalid length. [ 416.657691][T15682] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2613'. [ 416.776028][T15687] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 416.837959][T15687] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2613'. [ 416.919056][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 417.095514][T15700] netlink: 'syz.4.2616': attribute type 1 has an invalid length. [ 417.163585][T15700] netlink: 'syz.4.2616': attribute type 2 has an invalid length. [ 417.985738][T15734] netem: change failed [ 418.212503][T15737] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 418.594756][T15758] netlink: 'syz.0.2631': attribute type 11 has an invalid length. [ 418.627102][T15759] syzkaller1: entered promiscuous mode [ 418.665642][T15759] syzkaller1: entered allmulticast mode [ 419.431514][T15794] IPVS: ip_vs_add_dest(): server weight less than zero [ 419.471045][T15794] __nla_validate_parse: 5 callbacks suppressed [ 419.471099][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'. [ 419.524259][T15794] bridge0: Device is already in use. [ 419.696888][T15794] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2639'. [ 419.846564][T15794] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.970992][T15794] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.021027][T15794] .` (unregistering): Released all slaves [ 420.039535][T15810] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 420.531774][T15834] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2652'. [ 420.607123][T15837] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 420.654060][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2651'. [ 420.757227][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2651'. [ 420.781137][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2651'. [ 420.829577][T15835] netlink: 'syz.5.2651': attribute type 21 has an invalid length. [ 421.056194][T15853] bond15: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 421.095514][T15853] bond15 (unregistering): Released all slaves [ 421.168445][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2661'. [ 422.691908][T15927] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2675'. [ 422.848706][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2674'. [ 425.125871][T15906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.669177][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 425.885964][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2691'. [ 426.577862][T15983] bond8 (unregistering): Released all slaves [ 426.968321][T16008] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 427.374580][T16024] ±ÿ: renamed from team_slave_1 (while UP) [ 427.391489][T16024] netlink: 'syz.4.2705': attribute type 4 has an invalid length. [ 427.425580][T16024] tipc: Enabling of bearer rejected, failed to enable media [ 427.441143][T16024] netlink: 'syz.4.2705': attribute type 4 has an invalid length. [ 427.486863][T16031] netlink: 'syz.4.2705': attribute type 4 has an invalid length. [ 428.081940][T16038] syzkaller1: entered promiscuous mode [ 428.093127][T16038] syzkaller1: entered allmulticast mode [ 428.343205][T16062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'. [ 428.387422][T16062] macsec1: entered promiscuous mode [ 428.410256][T16062] bridge0: entered promiscuous mode [ 428.450417][T16062] macsec1: entered allmulticast mode [ 428.457185][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'. [ 428.484675][T16062] bridge0: entered allmulticast mode [ 428.573571][T16062] bridge0: port 3(macsec1) entered blocking state [ 428.597573][T16062] bridge0: port 3(macsec1) entered disabled state [ 428.635633][T16062] bridge0: left allmulticast mode [ 428.740604][T11321] bridge0: left promiscuous mode [ 428.810399][T16065] macsec1: entered promiscuous mode [ 428.816547][T16065] bridge0: entered promiscuous mode [ 428.822270][T16065] macsec1: entered allmulticast mode [ 428.835449][T16065] bridge0: entered allmulticast mode [ 428.844691][T16065] bridge0: port 3(macsec1) entered blocking state [ 428.851641][T16065] bridge0: port 3(macsec1) entered disabled state [ 428.868078][T16065] bridge0: left allmulticast mode [ 428.948554][T11321] bridge0: left promiscuous mode [ 429.274281][T16107] bond0: Error: Cannot enslave bond to itself. [ 429.291456][T16107] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 429.414964][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 430.597418][T16135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.077624][T16147] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 432.086799][T16147] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 432.258451][T16168] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 432.362949][T16177] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2741'. [ 432.419234][T16177] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2741'. [ 432.492036][T16183] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2742'. [ 432.554935][T16189] sctp: [Deprecated]: syz.0.2745 (pid 16189) Use of int in maxseg socket option. [ 432.554935][T16189] Use struct sctp_assoc_value instead [ 432.892426][T16209] ip6gre2: entered allmulticast mode [ 432.901374][T16209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2750'. [ 433.241399][T16229] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2757'. [ 433.258496][T16229] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2757'. [ 433.269679][T16229] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2757'. [ 433.276621][T16228] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2756'. [ 433.280639][T16229] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2757'. [ 433.299416][T16229] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2757'. [ 433.541997][T16241] netlink: 'syz.2.2761': attribute type 3 has an invalid length. [ 433.615959][T16247] netlink: 'syz.1.2763': attribute type 8 has an invalid length. [ 433.629449][T16247] sch_fq: defrate 0 ignored. [ 435.343783][T16177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.360546][T16241] netlink: 'syz.2.2761': attribute type 1 has an invalid length. [ 435.887327][T16270] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 436.321669][T16293] netlink: 'syz.1.2777': attribute type 1 has an invalid length. [ 436.499585][T16297] bond11: (slave geneve2): making interface the new active one [ 436.511676][T16297] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 436.524019][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 436.550465][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 436.612848][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 436.647118][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 436.840966][T16314] netlink: zone id is out of range [ 437.085801][T16317] ipt_REJECT: TCP_RESET invalid for non-tcp [ 438.002346][T16385] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 438.054583][T16374] bond8: (slave bond_slave_1): Device is not bonding slave [ 438.061976][T16374] bond8: option active_slave: invalid value (bond_slave_1) [ 438.078259][T16374] bond8 (unregistering): Released all slaves [ 438.119262][T16367] : entered promiscuous mode [ 438.160344][T16368] veth13: entered promiscuous mode [ 438.289237][T16399] __nla_validate_parse: 79 callbacks suppressed [ 438.289256][T16399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2802'. [ 438.337218][T16379] bond8: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 438.387999][T16402] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 [ 438.677302][T16415] netlink: 'syz.0.2807': attribute type 18 has an invalid length. [ 438.698670][T16416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2809'. [ 438.804466][T16418] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2810'. [ 438.815353][T16421] netlink: 'syz.2.2811': attribute type 9 has an invalid length. [ 438.824956][T16418] 0·: renamed from hsr0 (while UP) [ 438.856691][T16418] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 438.877742][T16421] netlink: 'syz.2.2811': attribute type 12 has an invalid length. [ 438.886945][T16421] netlink: 'syz.2.2811': attribute type 29 has an invalid length. [ 438.895015][T16421] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2811'. [ 438.922161][T16421] netlink: 'syz.2.2811': attribute type 3 has an invalid length. [ 438.956367][T16421] netlink: 'syz.2.2811': attribute type 2 has an invalid length. [ 438.981334][T16421] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2811'. [ 439.745422][T16465] syzkaller0: entered promiscuous mode [ 439.751153][T16465] syzkaller0: entered allmulticast mode [ 439.762265][T16463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2822'. [ 439.779959][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 439.799344][T16465] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 439.822029][T16463] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2822'. [ 439.842953][T16468] Timeout policy `syz1' can only be used by L3 protocol number 34948 [ 439.949229][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 440.031670][T16466] 8021q: adding VLAN 0 to HW filter on device bond9 [ 440.096906][T16482] ip6t_srh: unknown srh invflags 4000 [ 440.108719][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.339910][ T1130] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.402205][ T1130] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.485186][T16499] x_tables: unsorted entry at hook 3 [ 440.551774][ T1130] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.586714][ T1130] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.610358][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2831'. [ 440.747391][ T1130] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.759811][ T1130] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.922495][T16514] wg1 speed is unknown, defaulting to 1000 [ 440.969222][ T1130] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.979869][ T1130] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.016588][T16514] lo speed is unknown, defaulting to 1000 [ 441.523330][T16535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.754521][ T1130] bridge_slave_1: left allmulticast mode [ 441.774956][ T1130] bridge_slave_1: left promiscuous mode [ 441.818468][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.919656][ T1130] bridge_slave_0: left allmulticast mode [ 441.945078][ T1130] bridge_slave_0: left promiscuous mode [ 441.966220][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.458625][ T1130] bond1 (unregistering): Released all slaves [ 442.480409][ T1130] bond2 (unregistering): Released all slaves [ 442.500124][ T1130] bond3 (unregistering): Released all slaves [ 442.523647][ T1130] bond4 (unregistering): Released all slaves [ 442.541486][ T1130] bond0 (unregistering): Released all slaves [ 442.560646][ T1130] bond5 (unregistering): Released all slaves [ 442.577158][ T1130] bond6 (unregistering): Released all slaves [ 442.595489][ T1130] bond7 (unregistering): Released all slaves [ 442.628018][ T1130] bond8 (unregistering): Released all slaves [ 442.658899][T16567] netlink: 'syz.0.2851': attribute type 4 has an invalid length. [ 442.704100][T16514] hsr0 speed is unknown, defaulting to 1000 [ 442.969385][ T1130] : left promiscuous mode [ 443.291345][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.311938][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.325735][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.361037][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.370662][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.391363][T16588] bond1: (slave gre0): Device is not bonding slave [ 443.425020][T16588] bond1: option active_slave: invalid value (gre0) [ 443.448688][T16588] bond1 (unregistering): Released all slaves [ 443.542400][ T1130] tipc: Disabling bearer [ 443.553905][ T1130] tipc: Left network mode [ 444.176465][T16629] netlink: 'syz.5.2861': attribute type 1 has an invalid length. [ 444.226057][T16626] __nla_validate_parse: 1 callbacks suppressed [ 444.226077][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 444.328443][ T1130] IPVS: stopping backup sync thread 10066 ... [ 444.436677][T16629] bond1: entered promiscuous mode [ 444.455744][T16629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.578655][T16634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.597852][T16634] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 444.627665][T16634] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 444.694514][T16634] bond1: (slave ip6gre1): making interface the new active one [ 444.702353][T16634] ip6gre1: entered promiscuous mode [ 444.710251][T16634] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 444.934526][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 445.396866][T16601] wg1 speed is unknown, defaulting to 1000 [ 445.447603][T16601] lo speed is unknown, defaulting to 1000 [ 445.474539][ T5645] Bluetooth: hci0: command tx timeout [ 445.788686][T16687] syz.1.2872: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.809107][T16687] CPU: 0 UID: 0 PID: 16687 Comm: syz.1.2872 Not tainted syzkaller #0 PREEMPT(full) [ 445.809135][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.809157][T16687] Call Trace: [ 445.809170][T16687] [ 445.809179][T16687] dump_stack_lvl+0xe8/0x150 [ 445.809210][T16687] warn_alloc+0x249/0x340 [ 445.809241][T16687] ? stack_trace_save+0xa9/0x100 [ 445.809277][T16687] ? __pfx_warn_alloc+0x10/0x10 [ 445.809313][T16687] ? kasan_save_track+0x4f/0x80 [ 445.809338][T16687] ? kasan_save_track+0x3e/0x80 [ 445.809363][T16687] ? __kasan_kmalloc+0x93/0xb0 [ 445.809389][T16687] ? __kmalloc_cache_noprof+0x31c/0x660 [ 445.809415][T16687] ? xskq_create+0x56/0x170 [ 445.809440][T16687] ? xsk_setsockopt+0x54c/0x990 [ 445.809460][T16687] ? do_sock_setsockopt+0x17c/0x1b0 [ 445.809486][T16687] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 445.809511][T16687] ? do_syscall_64+0x15f/0xf80 [ 445.809545][T16687] __vmalloc_node_range_noprof+0x132/0x1750 [ 445.809612][T16687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.809649][T16687] ? __kasan_kmalloc+0x93/0xb0 [ 445.809684][T16687] vmalloc_user_noprof+0xad/0xe0 [ 445.809712][T16687] ? xskq_create+0xbf/0x170 [ 445.809738][T16687] xskq_create+0xbf/0x170 [ 445.809767][T16687] xsk_init_queue+0x8a/0xe0 [ 445.809794][T16687] xsk_setsockopt+0x54c/0x990 [ 445.809822][T16687] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.809857][T16687] ? __pfx_aa_sk_perm+0x10/0x10 [ 445.809889][T16687] ? aa_sock_opt_perm+0xff/0x1a0 [ 445.809922][T16687] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 445.809949][T16687] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.809975][T16687] do_sock_setsockopt+0x17c/0x1b0 [ 445.810009][T16687] __x64_sys_setsockopt+0x13d/0x1b0 [ 445.810040][T16687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.810063][T16687] do_syscall_64+0x15f/0xf80 [ 445.810095][T16687] ? trace_irq_disable+0x3b/0x140 [ 445.810126][T16687] ? clear_bhb_loop+0x40/0x90 [ 445.810152][T16687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.810173][T16687] RIP: 0033:0x7f670079ce59 [ 445.810193][T16687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.810211][T16687] RSP: 002b:00007f670158b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 445.810233][T16687] RAX: ffffffffffffffda RBX: 00007f6700a15fa0 RCX: 00007f670079ce59 [ 445.810248][T16687] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 445.810261][T16687] RBP: 00007f6700832d6f R08: 0000000000000004 R09: 0000000000000000 [ 445.810273][T16687] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.810286][T16687] R13: 00007f6700a16038 R14: 00007f6700a15fa0 R15: 00007fff70aff5e8 [ 445.810322][T16687] [ 445.810351][T16687] Mem-Info: [ 446.095260][T16687] active_anon:5957 inactive_anon:0 isolated_anon:0 [ 446.095260][T16687] active_file:3086 inactive_file:40085 isolated_file:0 [ 446.095260][T16687] unevictable:768 dirty:98 writeback:0 [ 446.095260][T16687] slab_reclaimable:11392 slab_unreclaimable:113132 [ 446.095260][T16687] mapped:29364 shmem:1295 pagetables:2234 [ 446.095260][T16687] sec_pagetables:0 bounce:0 [ 446.095260][T16687] kernel_misc_reclaimable:0 [ 446.095260][T16687] free:1291696 free_pcp:23994 free_cma:0 [ 446.140766][T16687] Node 0 active_anon:23828kB inactive_anon:0kB active_file:12344kB inactive_file:160132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117456kB dirty:392kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14648kB pagetables:8800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.175384][T16687] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.210964][T16687] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 446.283738][T16687] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 446.307340][T16692] xt_hashlimit: max too large, truncated to 1048576 [ 446.314577][T16687] Node 0 DMA32 free:1269820kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23928kB inactive_anon:0kB active_file:12344kB inactive_file:160132kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2552604kB mlocked:0kB bounce:0kB free_pcp:40152kB local_pcp:20620kB free_cma:0kB [ 446.413472][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 446.422001][T16687] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 446.483688][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 446.499170][T16687] Node 1 Normal free:3881612kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55672kB local_pcp:25596kB free_cma:0kB [ 446.581347][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 446.609224][T16687] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 446.668715][T16687] Node 0 DMA32: 6173*4kB (UME) 4044*8kB (UME) 2303*16kB (UME) 648*32kB (UME) 846*64kB (UME) 662*128kB (UME) 490*256kB (UM) 355*512kB (U) 242*1024kB (U) 129*2048kB (UME) 48*4096kB (U) = 1269316kB [ 446.720299][T16687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.763082][T16687] Node 1 Normal: 3*4kB (U) 4*8kB (UM) 12*16kB (UM) 9*32kB (UM) 10*64kB (UM) 8*128kB (UM) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 944*4096kB (UM) = 3881612kB [ 446.788932][T16710] netlink: 'syz.5.2876': attribute type 10 has an invalid length. [ 446.821171][T16687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.836288][T16710] ipvlan0: entered allmulticast mode [ 446.862085][T16687] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.873395][T16710] veth0_vlan: entered allmulticast mode [ 446.899931][T16687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.909663][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2878'. [ 446.923313][T16710] team0: Device ipvlan0 failed to register rx_handler [ 446.933870][T16687] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.951772][T16601] hsr0 speed is unknown, defaulting to 1000 [ 446.957391][T16687] 44513 total pagecache pages [ 446.965728][T16712] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2878'. [ 446.970775][T16687] 0 pages in swap cache [ 446.991002][T16687] Free swap = 124996kB [ 447.005661][T16687] Total swap = 124996kB [ 447.014400][T16687] 2097051 pages RAM [ 447.028116][T16687] 0 pages HighMem/MovableOnly [ 447.045868][T16687] 427118 pages reserved [ 447.051369][T16687] 0 pages cma reserved [ 447.202003][T16722] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 447.210308][T16722] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 447.317574][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 447.542851][ T5645] Bluetooth: hci0: command tx timeout [ 448.060826][ T1130] hsr_slave_0: left promiscuous mode [ 448.093521][ T1130] hsr_slave_1: left promiscuous mode [ 448.119973][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.128044][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.141534][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.149709][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.191604][ T1130] batadv0: left promiscuous mode [ 448.205286][ T1130] veth1_macvtap: left promiscuous mode [ 448.336211][T16742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2887'. [ 448.349698][T16742] x_tables: duplicate underflow at hook 1 [ 448.359302][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'. [ 448.550916][ T48] smbdirect: ib_dev[syz1] removed [ 448.644809][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 448.672468][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 448.798506][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2885'. [ 448.840111][ T5822] hsr0 speed is unknown, defaulting to 1000 [ 448.874063][ T5822] infiniband syz1: ib_query_port failed (-19) [ 449.097091][T16759] netlink: 916 bytes leftover after parsing attributes in process `syz.2.2889'. [ 449.140738][T16759] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2889'. [ 449.276547][T16765] netlink: 'syz.5.2892': attribute type 30 has an invalid length. [ 449.543318][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 449.575543][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 449.623709][ T5645] Bluetooth: hci0: command tx timeout [ 449.770200][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 450.189050][T16601] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.207336][T16601] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.231773][T16601] bridge_slave_0: entered allmulticast mode [ 450.251158][T16601] bridge_slave_0: entered promiscuous mode [ 450.347003][T16601] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.376260][T16601] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.402536][T16601] bridge_slave_1: entered allmulticast mode [ 450.418692][T16601] bridge_slave_1: entered promiscuous mode [ 450.462078][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 450.785106][ T1130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.826871][ T1130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.001039][T16601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.014541][T16830] bond0: (slave gre0): refused to change device type [ 451.047774][T16855] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 451.068860][T16601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.220878][T16855] bond15: entered promiscuous mode [ 451.226716][T16855] 8021q: adding VLAN 0 to HW filter on device bond15 [ 451.279361][T16853] bridge0: Device is already in use. [ 451.388972][ T1130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.403855][ T1130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.472172][T16601] team0: Port device team_slave_0 added [ 451.494524][T16601] team0: Port device team_slave_1 added [ 451.649249][T16601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.678785][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.703208][ T5645] Bluetooth: hci0: command tx timeout [ 451.800369][T16601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.917527][ T1130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.960398][ T1130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.028862][T16601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.058811][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.099878][T16601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.256182][ T1130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.287004][ T1130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.306417][T16904] netlink: 'syz.5.2920': attribute type 1 has an invalid length. [ 452.493103][T16915] netlink: 'syz.4.2923': attribute type 10 has an invalid length. [ 452.510703][T16915] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2923'. [ 452.534142][T16904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.631104][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 452.651602][T16906] bond3: (slave gretap1): making interface the new active one [ 452.679120][T16906] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 452.949953][T16931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 453.017335][T16937] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 453.040420][T16601] hsr_slave_0: entered promiscuous mode [ 453.081074][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 453.090620][T16601] hsr_slave_1: entered promiscuous mode [ 453.227722][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2930'. [ 453.562048][T16947] bridge9: port 1(vlan4) entered blocking state [ 453.578981][T16947] bridge9: port 1(vlan4) entered disabled state [ 453.594336][T16947] vlan4: entered allmulticast mode [ 453.602535][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2933'. [ 453.612286][T16947] bridge9: entered allmulticast mode [ 453.630958][T16947] vlan4: left allmulticast mode [ 453.639928][T16947] bridge9: left allmulticast mode [ 454.541871][ T1130] bond8 (unregistering): (slave ip6gretap0): Releasing backup interface [ 454.727419][T17017] netlink: 'syz.2.2944': attribute type 7 has an invalid length. [ 454.735966][T17017] netlink: 'syz.2.2944': attribute type 8 has an invalid length. [ 454.844842][ T1130] batman_adv: batadv0: Removing interface: bridge2 [ 455.138645][ T1130] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 455.258608][ T1130] bond1 (unregistering): Released all slaves [ 455.286238][ T1130] bond0 (unregistering): (slave veth7): Releasing active interface [ 455.296218][ T1130] veth0_to_bond: entered promiscuous mode [ 455.308236][ T1130] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 455.326171][ T1130] bond0 (unregistering): Released all slaves [ 455.343015][ T1130] bond2 (unregistering): Released all slaves [ 455.359482][ T1130] bond3 (unregistering): Released all slaves [ 455.376512][ T1130] bond4 (unregistering): Released all slaves [ 455.393045][ T1130] bond5 (unregistering): Released all slaves [ 455.424383][ T1130] bond6 (unregistering): Released all slaves [ 455.442638][ T1130] bond7 (unregistering): (slave lo): Releasing backup interface [ 455.451115][ T1130] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 455.482043][ T1130] bond7 (unregistering): Released all slaves [ 455.502357][ T1130] bond8 (unregistering): Released all slaves [ 455.525682][ T1130] bond9 (unregistering): Released all slaves [ 455.644577][T16997] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 455.737170][ T1130] tipc: Left network mode [ 455.975422][T17028] netlink: 'syz.1.2946': attribute type 1 has an invalid length. [ 456.438255][T17028] 8021q: adding VLAN 0 to HW filter on device bond12 [ 456.524868][T17037] bond12: (slave geneve3): making interface the new active one [ 456.572088][T17037] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 456.631043][T17036] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 456.668228][T17036] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 456.706264][T17036] gretap2: entered promiscuous mode [ 456.734326][T17036] gretap2: entered allmulticast mode [ 456.768739][T17054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2952'. [ 456.769407][T17029] syzkaller1: entered promiscuous mode [ 456.811980][T17029] syzkaller1: entered allmulticast mode [ 456.955069][T17054] : entered promiscuous mode [ 456.967086][T17054] : entered allmulticast mode [ 456.981340][T17054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2952'. [ 457.035834][T17061] netlink: 'syz.5.2954': attribute type 1 has an invalid length. [ 457.097439][T17069] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2954'. [ 457.344715][T17077] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2957'. [ 457.372609][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 457.400123][T17077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2957'. [ 457.610966][T17085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2959'. [ 458.003880][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2961'. [ 458.564319][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 458.785251][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 458.886821][T17130] syzkaller1: entered promiscuous mode [ 458.904886][T17130] syzkaller1: entered allmulticast mode [ 459.163022][T17131] syzkaller0: entered promiscuous mode [ 459.177789][T17131] syzkaller0: entered allmulticast mode [ 459.309972][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880522d4000: rx timeout, send abort [ 459.418438][T16601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.521162][T16601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.572913][T17153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.678818][ T48] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 459.715388][T16601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 459.760631][T16601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.795048][T16601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.819676][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880522d4000: abort rx timeout. Force session deactivation [ 459.886251][T16601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.929176][T16601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 460.020127][T16601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.039650][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2972'. [ 460.187195][ T1130] hsr_slave_0: left promiscuous mode [ 460.215679][ T1130] hsr_slave_1: left promiscuous mode [ 460.340570][ T1130] veth1_vlan: left promiscuous mode [ 460.364841][ T1130] veth0_vlan: left promiscuous mode [ 460.407823][T17185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.880287][ T1130] pim6reg (unregistering): left allmulticast mode [ 460.926927][ T1130] team0 (unregistering): Port device batadv1 removed [ 461.366739][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 462.043602][T17222] ieee802154 phy1 wpan1: encryption failed: -90 [ 462.186080][T16601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.275650][T16601] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.399944][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.407269][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.420274][T17230] __nla_validate_parse: 2 callbacks suppressed [ 462.420293][T17230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2979'. [ 462.487211][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.494503][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.711982][ T1130] IPVS: stop unused estimator thread 0... [ 463.067800][T17254] netlink: 'syz.1.2985': attribute type 1 has an invalid length. [ 463.084329][T17255] netlink: 'syz.2.2986': attribute type 7 has an invalid length. [ 463.105544][T17255] netlink: 'syz.2.2986': attribute type 7 has an invalid length. [ 463.191916][T17259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2985'. [ 463.242485][T17264] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2986'. [ 463.311754][T17254] bond13: entered promiscuous mode [ 463.326245][T17254] 8021q: adding VLAN 0 to HW filter on device bond13 [ 463.413260][T17274] bond13: (slave bridge5): making interface the new active one [ 463.452898][T17274] bridge5: entered promiscuous mode [ 463.462252][T17274] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 463.502505][T17259] bond13: entered allmulticast mode [ 463.520425][T17259] bridge5: entered allmulticast mode [ 463.543295][T17264] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 463.590860][T17264] 0ªX¹¦Dö»: entered allmulticast mode [ 463.686349][T17260] wg1 speed is unknown, defaulting to 1000 [ 463.719432][T17260] lo speed is unknown, defaulting to 1000 [ 463.727745][T17279] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2988'. [ 463.867598][T17286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2990'. [ 464.101756][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2991'. [ 464.236001][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2993'. [ 464.487698][T17304] sock: sock_timestamping_bind_phc: sock not bind to device [ 464.750499][T17304] IPVS: persistence engine module ip_vs_pe_À not found [ 464.765515][T16601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.997072][T17323] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 465.041339][T16601] veth0_vlan: entered promiscuous mode [ 465.102818][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3000'. [ 465.209544][T16601] veth1_vlan: entered promiscuous mode [ 465.370963][T16601] veth0_macvtap: entered promiscuous mode [ 465.422226][T16601] veth1_macvtap: entered promiscuous mode [ 465.496968][T16601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.544434][T16601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.598068][ T1130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.618446][ T1130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.646131][ T1130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.690111][ T1130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.084968][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.120853][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.288417][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.325449][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.339130][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 466.405829][T17372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3009'. [ 466.469336][T17376] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 467.095613][ T4944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.109319][ T4944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.125234][ T4944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.139086][ T4944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.155090][ T4944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 467.367932][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057029400: rx timeout, send abort [ 468.033308][T17435] veth0_virt_wifi: entered promiscuous mode [ 468.062941][T17435] vlan0: entered promiscuous mode [ 468.735700][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.763321][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.851499][T17485] netlink: 'syz.5.3031': attribute type 2 has an invalid length. [ 468.860174][T17485] netlink: 'syz.5.3031': attribute type 11 has an invalid length. [ 468.869680][T17485] __nla_validate_parse: 1 callbacks suppressed [ 468.869697][T17485] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3031'. [ 468.928413][T17488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3032'. [ 468.981043][T17465] wg1 speed is unknown, defaulting to 1000 [ 469.126855][T17492] SET target dimension over the limit! [ 469.144179][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.157830][T17496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3034'. [ 469.179673][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.215337][T17465] lo speed is unknown, defaulting to 1000 [ 469.216462][T17408] wg1 speed is unknown, defaulting to 1000 [ 469.229494][ T5645] Bluetooth: hci1: command tx timeout [ 469.305608][T17501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3036'. [ 469.492069][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.536579][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.717081][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.750354][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.839220][T17408] lo speed is unknown, defaulting to 1000 [ 470.001487][T17527] netlink: 233 bytes leftover after parsing attributes in process `syz.5.3042'. [ 470.123614][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3044'. [ 470.164566][T17532] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 470.546915][T17548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3049'. [ 470.750476][ T13] bridge_slave_1: left allmulticast mode [ 470.769534][ T13] bridge_slave_1: left promiscuous mode [ 470.785450][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.848680][ T13] bridge_slave_0: left promiscuous mode [ 470.887171][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.930742][T17556] netlink: 294 bytes leftover after parsing attributes in process `syz.5.3051'. [ 470.964784][T17556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.003842][T17556] Bluetooth: MGMT ver 1.23 [ 471.085346][ T13] lo: left allmulticast mode [ 471.105068][ T13] tipc: Resetting bearer [ 471.302788][ T5645] Bluetooth: hci1: command tx timeout [ 471.368695][T17566] xt_hashlimit: size too large, truncated to 1048576 [ 471.808715][ T13] tipc: Disabling bearer [ 471.926942][ T13] bond5 (unregistering): (slave geneve5): Releasing active interface [ 471.948196][ T13] bond0 (unregistering): (slave geneve3): Releasing active interface [ 471.956753][ T13] geneve3 (unregistering): left allmulticast mode [ 472.159350][ T13] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 472.167587][ T13] bridge4 (unregistering): left promiscuous mode [ 472.328155][ T13] bond13 (unregistering): (slave bridge8): Releasing active interface [ 472.336591][ T13] bridge8 (unregistering): left promiscuous mode [ 472.343103][ T13] bridge8 (unregistering): left allmulticast mode [ 472.409351][ T13] bond1 (unregistering): Released all slaves [ 472.442476][ T13] bond0 (unregistering): Released all slaves [ 472.460056][ T13] bond2 (unregistering): Released all slaves [ 472.478297][ T13] bond3 (unregistering): Released all slaves [ 472.496096][ T13] bond4 (unregistering): Released all slaves [ 472.521975][ T13] bond5 (unregistering): Released all slaves [ 472.538697][ T13] bond6 (unregistering): Released all slaves [ 472.554823][ T13] bond7 (unregistering): Released all slaves [ 472.576088][ T13] bond8 (unregistering): Released all slaves [ 472.595639][ T13] bond9 (unregistering): Released all slaves [ 472.616519][ T13] bond10 (unregistering): Released all slaves [ 472.634916][ T13] bond11 (unregistering): Released all slaves [ 472.651502][ T13] bond12 (unregistering): Released all slaves [ 472.680055][ T13] bond13 (unregistering): Released all slaves [ 472.698223][ T13] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface [ 472.707652][ T13] veth0_to_bond: left promiscuous mode [ 472.713809][ T13] veth0_to_bond: left allmulticast mode [ 472.722472][ T13] bond14 (unregistering): Released all slaves [ 472.740332][ T13] bond15 (unregistering): Released all slaves [ 472.809189][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 472.929868][T11324] wg1 speed is unknown, defaulting to 1000 [ 472.940641][T11324] syz2: Port: 1 Link DOWN [ 473.066386][ T13] : left promiscuous mode [ 473.217443][T17589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3056'. [ 473.284423][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 473.358137][ T13] tipc: Disabling bearer [ 473.364105][ T13] tipc: Disabling bearer [ 473.386913][ T5645] Bluetooth: hci1: command tx timeout [ 473.417573][ T13] tipc: Left network mode [ 473.449095][ T13] IPVS: stopping master sync thread 6083 ... [ 474.081918][T17629] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 474.321881][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.347214][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.369982][T17408] bridge_slave_0: entered allmulticast mode [ 474.396558][T17408] bridge_slave_0: entered promiscuous mode [ 474.428604][T17648] __nla_validate_parse: 1 callbacks suppressed [ 474.428624][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 474.429642][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.501006][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.523735][T17408] bridge_slave_1: entered allmulticast mode [ 474.545299][T17408] bridge_slave_1: entered promiscuous mode [ 474.658606][T17655] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3068'. [ 474.703512][T17655] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3068'. [ 474.927534][T17673] nbd: must specify at least one socket [ 474.939798][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'. [ 474.949416][T17673] netlink: 'syz.5.3073': attribute type 5 has an invalid length. [ 474.960352][T17673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3073'. [ 474.974000][T17408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.044151][T17673] geneve3: entered promiscuous mode [ 475.057005][T17673] geneve3: entered allmulticast mode [ 475.092947][T17408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.172900][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'. [ 475.280816][ T1130] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 475.295017][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 475.365920][ T1130] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 475.423482][T17408] team0: Port device team_slave_0 added [ 475.464223][ T5645] Bluetooth: hci1: command tx timeout [ 475.471902][T17408] team0: Port device team_slave_1 added [ 475.504766][ T1130] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 475.589593][T17691] block nbd5: NBD_DISCONNECT [ 475.658787][ T48] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 475.692641][T17408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.715950][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.784287][T17408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.837680][T17408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.870164][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.007487][T17408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.411072][T17734] IPVS: ip_vs_add_dest(): server weight less than zero [ 476.465221][T17735] netlink: 'syz.5.3088': attribute type 1 has an invalid length. [ 476.572068][T17732] bond14: Removing last ns target with arp_interval on [ 476.684802][ T13] hsr_slave_0: left promiscuous mode [ 476.698976][ T13] hsr_slave_1: left promiscuous mode [ 476.771762][ T13] vlan0: left allmulticast mode [ 476.788757][ T13] veth0_vlan: left allmulticast mode [ 476.800932][ T13] vlan0: left promiscuous mode [ 476.818756][ T13] veth1_macvtap: left promiscuous mode [ 476.839148][ T13] veth0_macvtap: left promiscuous mode [ 476.851495][ T13] veth1_vlan: left promiscuous mode [ 476.864664][ T13] veth0_vlan: left promiscuous mode [ 477.252296][ T13] team0 (unregistering): Port device batadv1 removed [ 477.278679][ T13] pim6reg (unregistering): left allmulticast mode [ 477.307252][ T13] pim6reg527 (unregistering): left allmulticast mode [ 477.383891][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3096'. [ 478.095606][ T13] team0 (unregistering): Port device team_slave_1 removed [ 478.112446][ T13] team0 (unregistering): Port device team_slave_0 removed [ 478.196823][T11434] smbdirect: ib_dev[syz2] removed [ 478.279213][T17735] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 478.284794][T17408] hsr_slave_0: entered promiscuous mode [ 478.300392][T17408] hsr_slave_1: entered promiscuous mode [ 478.307656][T17408] debugfs: 'hsr0' already exists in 'hsr' [ 478.313544][T17408] Cannot create hsr debugfs directory [ 478.324476][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 478.543194][T17786] netlink: 'syz.4.3098': attribute type 9 has an invalid length. [ 478.603579][T17786] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3098'. [ 478.684483][T17796] netlink: 'syz.0.3101': attribute type 21 has an invalid length. [ 478.738006][T17796] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3101'. [ 478.773678][T17798] netlink: 'syz.0.3101': attribute type 21 has an invalid length. [ 478.824896][T17798] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3101'. [ 478.890430][T17796] netlink: 'syz.0.3101': attribute type 4 has an invalid length. [ 478.909363][T17796] netlink: 'syz.0.3101': attribute type 5 has an invalid length. [ 478.940944][T17794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.981810][T17798] netlink: 'syz.0.3101': attribute type 4 has an invalid length. [ 479.001528][T17798] netlink: 'syz.0.3101': attribute type 5 has an invalid length. [ 479.223361][ T5645] Bluetooth: hci1: command tx timeout [ 479.329519][T17832] netlink: 'syz.1.3107': attribute type 1 has an invalid length. [ 479.478919][ T13] IPVS: stop unused estimator thread 0... [ 479.486525][T17805] __nla_validate_parse: 2 callbacks suppressed [ 479.486544][T17805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3104'. [ 479.581874][T17832] bond15: entered promiscuous mode [ 479.587580][T17832] 8021q: adding VLAN 0 to HW filter on device bond15 [ 479.634315][T17839] bond15: (slave bridge7): making interface the new active one [ 479.642222][T17839] bridge7: entered promiscuous mode [ 479.653333][T17839] bond15: (slave bridge7): Enslaving as an active interface with an up link [ 479.820753][T17825] syzkaller0: entered promiscuous mode [ 479.833141][T17825] syzkaller0: entered allmulticast mode [ 480.713716][T17884] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3118'. [ 480.724133][T17884] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3118'. [ 480.733377][T17884] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3118'. [ 480.742496][T17884] netlink: 13 bytes leftover after parsing attributes in process `syz.5.3118'. [ 480.752379][T17884] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3118'. [ 480.903647][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3118'. [ 481.001360][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3118'. [ 482.542433][T17884] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 482.560834][T17884] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 482.595384][T17884] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 482.703356][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 482.719177][T17893] ieee802154 phy1 wpan1: encryption failed: -22 [ 482.938292][T17892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.960064][T17900] netlink: 'syz.1.3123': attribute type 4 has an invalid length. [ 482.968528][T17900] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3123'. [ 482.988653][T17898] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.150913][T17900] .`: renamed from bond0 (while UP) [ 483.778303][T17942] syzkaller1: entered promiscuous mode [ 483.791691][T17942] syzkaller1: entered allmulticast mode [ 484.605777][T17408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 484.631185][T17408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.694144][T17408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 484.749718][T17408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.771219][T17408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 484.824453][T17408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.888064][T17408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 484.927727][T17408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.475932][T18029] __nla_validate_parse: 5 callbacks suppressed [ 485.475954][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3150'. [ 485.580522][T17408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.675787][T17408] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.709078][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.716372][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.819116][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.826375][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.866279][T18046] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 485.928416][ T1130] bond0: (slave bond_slave_0): interface is now down [ 485.970032][ T1130] bond0: (slave bond_slave_1): interface is now down [ 486.487336][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 486.757590][T18081] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3163'. [ 486.815830][T18087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3166'. [ 487.555210][T17408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.740249][T18117] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3171'. [ 487.753491][T18120] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 487.753491][T18120] Please contact the netfilter-devel mailing list or update your nftables rules. [ 487.776954][T17408] veth0_vlan: entered promiscuous mode [ 487.814896][T17408] veth1_vlan: entered promiscuous mode [ 487.891319][T17408] veth0_macvtap: entered promiscuous mode [ 487.919749][T17408] veth1_macvtap: entered promiscuous mode [ 487.984383][T17408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.010942][T17408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.082553][ T1130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.105507][ T1130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.130172][ T1130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.168343][ T1130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.315184][T18129] netlink: 'syz.5.3174': attribute type 1 has an invalid length. [ 488.389008][T18129] bond4: entered promiscuous mode [ 488.416587][T18129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.502938][ T1130] bond0: (slave bond_slave_0): interface is now down [ 488.511085][ T1130] bond0: (slave bond_slave_1): interface is now down [ 488.594330][T18137] bond4: (slave bridge2): making interface the new active one [ 488.603639][T18137] bridge2: entered promiscuous mode [ 488.612025][T18137] bridge2: left promiscuous mode [ 488.944292][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.985854][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.073473][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.093736][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.606193][T18172] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3184'. [ 489.631392][T18168] bond2: option fail_over_mac: invalid value (16) [ 489.667245][T18168] bond2 (unregistering): Released all slaves [ 489.694490][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 490.138196][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 490.219951][T18189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3188'. [ 490.265309][T18191] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3188'. [ 490.400031][T18189] netlink: 'syz.2.3188': attribute type 23 has an invalid length. [ 490.449229][ T4944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.462876][ T4944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.472628][ T4944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.481642][ T4944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.490711][ T4944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.549371][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 491.065070][ T12] bond0: (slave bond_slave_0): interface is now down [ 491.095684][ T12] bond0: (slave bond_slave_1): interface is now down [ 491.166415][ T12] bond0: now running without any active interface! [ 491.356458][T18226] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3196'. [ 491.670719][T18238] syzkaller0: entered promiscuous mode [ 491.696846][T18238] syzkaller0: entered allmulticast mode [ 491.985833][T18193] lo speed is unknown, defaulting to 1000 [ 492.025946][T11312] IPVS: starting estimator thread 0... [ 492.030935][T18248] sctp: [Deprecated]: syz.2.3201 (pid 18248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.030935][T18248] Use struct sctp_sack_info instead [ 492.172835][T18251] IPVS: using max 27 ests per chain, 64800 per kthread [ 492.302421][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 492.416521][T18081] Set syz1 is full, maxelem 65536 reached [ 492.593825][ T4944] Bluetooth: hci4: command tx timeout [ 492.738039][T18278] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 492.770044][T18280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 493.012401][T18272] "syz.4.3208" (18272) uses obsolete ecb(arc4) skcipher [ 493.528965][T18315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3215'. [ 493.772344][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3216'. [ 493.829420][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3216'. [ 494.204315][T18349] openvswitch: netlink: Message has -2 unknown bytes. [ 494.368638][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.378507][T18193] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.386377][T18193] bridge_slave_0: entered allmulticast mode [ 494.395295][T18193] bridge_slave_0: entered promiscuous mode [ 494.405061][T18353] syzkaller0: entered promiscuous mode [ 494.411513][T18353] syzkaller0: entered allmulticast mode [ 494.443268][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.460877][T18193] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.478850][T18193] bridge_slave_1: entered allmulticast mode [ 494.513931][T18193] bridge_slave_1: entered promiscuous mode [ 494.668797][T18193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.673411][ T4944] Bluetooth: hci4: command tx timeout [ 494.694812][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 494.750246][T18193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.981760][T18376] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3229'. [ 495.007526][T18193] team0: Port device team_slave_0 added [ 495.030787][T18193] team0: Port device team_slave_1 added [ 495.184182][T18193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.211942][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.291457][T18193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.336506][T18193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.366501][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.437160][T18193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.484776][T18393] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3234'. [ 495.681658][T18402] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 495.701367][T18193] hsr_slave_0: entered promiscuous mode [ 495.720094][T18193] hsr_slave_1: entered promiscuous mode [ 495.733913][T18193] debugfs: 'hsr0' already exists in 'hsr' [ 495.748610][T18193] Cannot create hsr debugfs directory [ 495.796247][T18413] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.916106][T18418] tipc: Started in network mode [ 495.923186][T18418] tipc: Node identity ac14140f, cluster identity 4711 [ 495.956657][T18418] tipc: Enabled bearer , priority 10 [ 496.339418][T18431] __nla_validate_parse: 1 callbacks suppressed [ 496.339514][T18431] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3241'. [ 496.433114][T18441] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.3243'. [ 496.456956][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'. [ 496.571814][T18441] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 496.603809][T18441] 0ªX¹¦Dö»: entered allmulticast mode [ 496.618535][T18439] lo speed is unknown, defaulting to 1000 [ 496.756220][ T4944] Bluetooth: hci4: command tx timeout [ 496.844589][T18453] mac80211_hwsim hwsim29 ÿ: renamed from wlan1 [ 497.171634][T18193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.219304][T18193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.324186][T18459] hsr0: entered allmulticast mode [ 497.352539][T18459] hsr_slave_0: entered allmulticast mode [ 497.387762][T18459] hsr_slave_1: entered allmulticast mode [ 497.406049][T11321] tipc: Node number set to 2886997007 [ 497.441856][T18479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3253'. [ 497.536544][T18193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.589832][T18193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 497.922601][T18193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.957899][T18193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.234055][T18193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.260461][T18193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.320082][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 498.522484][ T13] bridge_slave_1: left allmulticast mode [ 498.537914][ T13] bridge_slave_1: left promiscuous mode [ 498.576395][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.610043][ T13] bridge_slave_0: left allmulticast mode [ 498.646727][ T13] bridge_slave_0: left promiscuous mode [ 498.655961][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.823140][ T4944] Bluetooth: hci4: command tx timeout [ 499.153857][T18536] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3262'. [ 499.587702][ T13] bond10 (unregistering): (slave ip6gre1): Releasing backup interface [ 499.740193][ T13] bond8 (unregistering): (slave vti1): Releasing backup interface [ 499.748636][ T13] vti1 (unregistering): left promiscuous mode [ 499.811020][ T13] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 499.902294][ T13] bond12 (unregistering): (slave geneve3): Releasing active interface [ 499.916065][ T13] bond11 (unregistering): (slave geneve2): Releasing active interface [ 500.285212][ T13] bond13 (unregistering): (slave bridge5): Releasing backup interface [ 500.294181][ T13] bridge5 (unregistering): left promiscuous mode [ 500.300595][ T13] bridge5 (unregistering): left allmulticast mode [ 500.419384][ T13] bond15 (unregistering): (slave bridge7): Releasing backup interface [ 500.427940][ T13] bridge7 (unregistering): left promiscuous mode [ 500.476197][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.487106][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.498081][ T13] .` (unregistering): Released all slaves [ 500.515899][ T13] bond1 (unregistering): (slave bond2): Releasing backup interface [ 500.527407][ T13] bond1 (unregistering): Released all slaves [ 500.545423][ T13] bond2 (unregistering): Released all slaves [ 500.565601][ T13] bond3 (unregistering): Released all slaves [ 500.583829][ T13] bond4 (unregistering): Released all slaves [ 500.612632][ T13] bond5 (unregistering): Released all slaves [ 500.630920][ T13] bond6 (unregistering): Released all slaves [ 500.655701][ T13] bond7 (unregistering): (slave lo): Releasing backup interface [ 500.663944][ T13] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 500.679557][ T13] bond7 (unregistering): Released all slaves [ 500.699739][ T13] bond8 (unregistering): Released all slaves [ 500.718856][ T13] bond9 (unregistering): Released all slaves [ 500.740354][ T13] bond10 (unregistering): Released all slaves [ 500.762146][ T13] bond11 (unregistering): Released all slaves [ 500.778677][ T13] bond12 (unregistering): Released all slaves [ 500.794849][ T13] bond13 (unregistering): Released all slaves [ 500.810964][ T13] bond14 (unregistering): Released all slaves [ 500.834110][ T13] bond15 (unregistering): Released all slaves [ 500.877680][T18544] tc_dump_action: action bad kind [ 500.889851][T11324] lo speed is unknown, defaulting to 1000 [ 500.918539][T11324] syz0: Port: 1 Link DOWN [ 501.075502][T11323] lo speed is unknown, defaulting to 1000 [ 501.279883][ T13] IPVS: stopping backup sync thread 14989 ... [ 501.424986][T18193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.447899][T18559] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 501.488694][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.509407][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3270'. [ 501.555011][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.559960][T18193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.624009][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.739934][T18193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.831255][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.854449][T18193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.910470][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.021581][T18578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3271'. [ 502.068651][T18578] netlink: 'syz.2.3271': attribute type 21 has an invalid length. [ 502.103705][T18578] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3271'. [ 502.146457][T18587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3273'. [ 502.234260][T18578] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3271'. [ 502.844679][T18193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.946046][ T13] hsr_slave_0: left promiscuous mode [ 502.959532][ T13] hsr_slave_1: left promiscuous mode [ 502.988431][ T13] veth1_vlan: left promiscuous mode [ 502.994733][ T13] veth0_vlan: left promiscuous mode [ 503.190334][ T13] pim6reg (unregistering): left allmulticast mode [ 503.340051][ T13] team0 (unregistering): Port device team_slave_1 removed [ 503.364258][ T13] team0 (unregistering): Port device team_slave_0 removed [ 503.584654][ T1130] smc: removing ib device syz0 [ 503.608935][T18625] smc: net device team0 applied user defined pnetid SYZ2 [ 503.627629][T18193] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.641839][T18629] smc: net device team0 erased user defined pnetid SYZ2 [ 503.658910][ T1130] smbdirect: ib_dev[syz0] removed [ 503.703421][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.710617][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.779861][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.787122][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.946720][T18652] sctp: [Deprecated]: syz.4.3288 (pid 18652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.946720][T18652] Use struct sctp_sack_info instead [ 504.003794][T18654] sctp: [Deprecated]: syz.2.3287 (pid 18654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.003794][T18654] Use struct sctp_sack_info instead [ 504.219305][T18662] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3290'. [ 504.472376][T18676] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 504.718736][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 504.769605][T18685] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3296'. [ 504.882212][T18692] xt_HMARK: spi-set and port-set can't be combined [ 505.030620][T18699] openvswitch: netlink: Message has 48 unknown bytes. [ 505.980731][T18193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.230785][T18193] veth0_vlan: entered promiscuous mode [ 506.286415][T18193] veth1_vlan: entered promiscuous mode [ 506.427196][T18193] veth0_macvtap: entered promiscuous mode [ 506.451792][T18747] netlink: 'syz.0.3312': attribute type 21 has an invalid length. [ 506.461959][T18747] netlink: 'syz.0.3312': attribute type 22 has an invalid length. [ 506.470695][T18747] netlink: 'syz.0.3312': attribute type 23 has an invalid length. [ 506.481321][T18747] netlink: 'syz.0.3312': attribute type 25 has an invalid length. [ 506.489933][T18747] netlink: 'syz.0.3312': attribute type 26 has an invalid length. [ 506.499265][T18747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3312'. [ 506.671289][T18193] veth1_macvtap: entered promiscuous mode [ 506.790064][T18758] veth0_to_team: mtu less than device minimum [ 506.981753][T18193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.085691][T18193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.229592][T18773] openvswitch: netlink: IP tunnel TTL not specified. [ 507.236940][T18774] netlink: 'syz.5.3319': attribute type 21 has an invalid length. [ 507.332180][T18778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3322'. [ 507.707907][T18774] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3319'. [ 507.735383][T11424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.893903][T11424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.920725][T11424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.984587][T11424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.076917][ T13] IPVS: stop unused estimator thread 0... [ 508.172048][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 508.309396][ T30] audit: type=1800 audit(1778984948.401:7): pid=18787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3327" name="memory.events" dev="tmpfs" ino=1034 res=0 errno=0 [ 508.402491][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.440918][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.616395][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.642077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.809918][T18822] xt_cgroup: path and classid specified [ 509.876087][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.890726][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 509.903268][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 509.920336][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 509.931692][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 510.804845][ T5628] syz_tun (unregistering): left allmulticast mode [ 511.058663][T13059] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.167312][T18905] netlink: 'syz.5.3350': attribute type 11 has an invalid length. [ 511.408307][T13059] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.589436][T13059] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.616724][T18921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3353'. [ 511.755350][T13059] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.849395][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3357'. [ 511.881645][T18929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3357'. [ 511.916549][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3357'. [ 511.943780][T18935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3356'. [ 511.956270][T18929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3357'. [ 512.023744][ T4944] Bluetooth: hci2: command tx timeout [ 512.071971][T18933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.108043][T18937] batadv1: entered allmulticast mode [ 512.176146][T18942] atomic_op ffff888078eca198 conn xmit_atomic 0000000000000000 [ 512.591256][T18960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3363'. [ 512.909432][T18978] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 514.103234][ T4944] Bluetooth: hci2: command tx timeout [ 514.218600][T13059] bond1 (unregistering): Released all slaves [ 514.235140][T13059] bond0 (unregistering): Released all slaves [ 514.251241][T13059] bond2 (unregistering): Released all slaves [ 514.271446][T13059] bond3 (unregistering): Released all slaves [ 514.291472][T13059] bond4 (unregistering): Released all slaves [ 514.308842][T13059] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 514.319487][T13059] bond5 (unregistering): Released all slaves [ 514.339788][T13059] bond6 (unregistering): Released all slaves [ 514.358626][T13059] bond7 (unregistering): Released all slaves [ 514.411067][T18986] macvtap1: entered promiscuous mode [ 514.422937][T18986] team0: entered promiscuous mode [ 514.435088][T18986] team_slave_0: entered promiscuous mode [ 514.447775][T18986] team_slave_1: entered promiscuous mode [ 514.463870][T18986] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 514.472631][T18986] team0: Device macvtap1 is already an upper device of the team interface [ 514.517362][T18986] team0: left promiscuous mode [ 514.670210][T18987] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 514.696123][T11320] team_slave_0: left promiscuous mode [ 514.701592][T11320] team_slave_1: left promiscuous mode [ 514.752959][T13059] : left promiscuous mode [ 514.920100][T13059] tipc: Disabling bearer [ 514.934738][T13059] tipc: Left network mode [ 514.999525][T19018] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3377'. [ 515.143498][T13059] IPVS: stopping master sync thread 12112 ... [ 515.150330][T19013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3377'. [ 515.166714][T19022] nbd: must specify a device to reconfigure [ 515.170768][T19018] erspan0: entered promiscuous mode [ 515.347329][T19032] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3382'. [ 515.491966][T18866] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.530377][T18866] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.556079][T18866] bridge_slave_0: entered allmulticast mode [ 515.607726][T18866] bridge_slave_0: entered promiscuous mode [ 515.641472][T18866] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.674925][T19049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3384'. [ 515.694683][T18866] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.710004][T18866] bridge_slave_1: entered allmulticast mode [ 515.718488][T18866] bridge_slave_1: entered promiscuous mode [ 515.935549][T18866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.031297][T18866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.092294][T19083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3390'. [ 516.143782][T19083] netlink: 'syz.2.3390': attribute type 7 has an invalid length. [ 516.179562][T19083] netlink: 'syz.2.3390': attribute type 8 has an invalid length. [ 516.189541][ T4944] Bluetooth: hci2: command tx timeout [ 516.229509][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3390'. [ 516.308128][T18866] team0: Port device team_slave_0 added [ 516.403701][T18866] team0: Port device team_slave_1 added [ 516.572122][T19095] can: request_module (can-proto-0) failed. [ 516.589543][T18866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.606972][T18866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.652621][T18866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.713244][T18866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.737303][T18866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.782382][T18866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.798559][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 517.065800][T18866] hsr_slave_0: entered promiscuous mode [ 517.079729][T18866] hsr_slave_1: entered promiscuous mode [ 517.101776][T18866] debugfs: 'hsr0' already exists in 'hsr' [ 517.118195][T18866] Cannot create hsr debugfs directory [ 517.383398][T19124] netlink: 'syz.5.3398': attribute type 4 has an invalid length. [ 517.453895][T13059] hsr_slave_0: left promiscuous mode [ 517.464230][T13059] hsr_slave_1: left promiscuous mode [ 518.045553][T19129] bridge0: port 3(gretap0) entered blocking state [ 518.066556][T19129] bridge0: port 3(gretap0) entered disabled state [ 518.081726][T19129] gretap0: entered allmulticast mode [ 518.089670][T19129] gretap0: entered promiscuous mode [ 518.096657][T19129] bridge0: port 3(gretap0) entered blocking state [ 518.103351][T19129] bridge0: port 3(gretap0) entered forwarding state [ 518.259812][T13059] IPVS: stop unused estimator thread 0... [ 518.265938][ T4944] Bluetooth: hci2: command tx timeout [ 518.665914][ T57] ------------[ cut here ]------------ [ 518.672327][ T57] wlan0: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:01 on 5 GHz band [ 518.686189][ T57] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xd82/0x1760, CPU#0: kworker/u8:4/57 [ 518.696884][ T57] Modules linked in: [ 518.706540][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 518.715910][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.726069][ T57] Workqueue: events_unbound cfg80211_wiphy_work [ 518.732370][ T57] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 518.738865][ T57] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 c1 9c a1 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 5e 98 a1 f6 e9 [ 518.758558][ T57] RSP: 0018:ffffc900015e7420 EFLAGS: 00010293 [ 518.764693][ T57] RAX: ffffffff8b242bdf RBX: ffffffff90425810 RCX: 0000000000000005 [ 518.772755][ T57] RDX: ffff8880274c8a04 RSI: ffff8880767a5888 RDI: ffffffff90425810 [ 518.780760][ T57] RBP: ffffc900015e7588 R08: ffff8880531b2a8f R09: 1ffff1100a636551 [ 518.788809][ T57] R10: dffffc0000000000 R11: ffffed100a636552 R12: dffffc0000000000 [ 518.796832][ T57] R13: 0000000000000001 R14: ffff8880767a5888 R15: ffff8880274c8a04 [ 518.804865][ T57] FS: 0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 518.813884][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.820504][ T57] CR2: 00007f7fd86d6d58 CR3: 0000000079382000 CR4: 00000000003526f0 [ 518.828549][ T57] Call Trace: [ 518.831861][ T57] [ 518.834892][ T57] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 518.841016][ T57] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 518.847240][ T57] invoke_tx_handlers_late+0xba/0x18a0 [ 518.852795][ T57] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 518.858647][ T57] ieee80211_tx+0x2d7/0x4b0 [ 518.863215][ T57] ? __pfx_ieee80211_tx+0x10/0x10 [ 518.868298][ T57] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 518.874345][ T57] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 518.880194][ T57] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 518.886580][ T57] ieee80211_scan_state_send_probe+0x594/0xa00 [ 518.892820][ T57] ieee80211_scan_work+0x64d/0x1c60 [ 518.898077][ T57] cfg80211_wiphy_work+0x2cf/0x460 [ 518.903257][ T57] ? process_scheduled_works+0xa70/0x1860 [ 518.909009][ T57] process_scheduled_works+0xb5d/0x1860 [ 518.914648][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.920663][ T57] ? assign_work+0x3d5/0x5e0 [ 518.925328][ T57] worker_thread+0xa53/0xfc0 [ 518.929985][ T57] kthread+0x389/0x470 [ 518.934121][ T57] ? __pfx_worker_thread+0x10/0x10 [ 518.939283][ T57] ? __pfx_kthread+0x10/0x10 [ 518.943943][ T57] ret_from_fork+0x514/0xb70 [ 518.948568][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 518.953783][ T57] ? __switch_to+0xc79/0x1410 [ 518.958517][ T57] ? __pfx_kthread+0x10/0x10 [ 518.963175][ T57] ret_from_fork_asm+0x1a/0x30 [ 518.968004][ T57] [ 518.971072][ T57] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 518.978385][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 518.987694][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.997769][ T57] Workqueue: events_unbound cfg80211_wiphy_work [ 519.004045][ T57] Call Trace: [ 519.007337][ T57] [ 519.010277][ T57] vpanic+0x56c/0xa60 [ 519.014279][ T57] ? __pfx__printk+0x10/0x10 [ 519.018885][ T57] ? __pfx_vpanic+0x10/0x10 [ 519.023415][ T57] ? is_bpf_text_address+0x292/0x2b0 [ 519.028718][ T57] ? is_bpf_text_address+0x26/0x2b0 [ 519.033948][ T57] panic+0xc5/0xd0 [ 519.037691][ T57] ? __pfx_panic+0x10/0x10 [ 519.042128][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 519.047094][ T57] __warn+0x315/0x4c0 [ 519.051090][ T57] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 519.056932][ T57] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 519.062785][ T57] __report_bug+0x29a/0x540 [ 519.067341][ T57] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 519.073175][ T57] ? __pfx___report_bug+0x10/0x10 [ 519.078239][ T57] ? stack_trace_save+0xa9/0x100 [ 519.083252][ T57] ? kasan_save_track+0x4f/0x80 [ 519.088314][ T57] ? kasan_save_track+0x3e/0x80 [ 519.093186][ T57] ? __kasan_slab_alloc+0x6c/0x80 [ 519.098252][ T57] report_bug_entry+0x19a/0x290 [ 519.103128][ T57] ? ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 519.108952][ T57] ? ieee80211_tx_h_rate_ctrl+0xdf2/0x1760 [ 519.114779][ T57] handle_bug+0xce/0x200 [ 519.119038][ T57] exc_invalid_op+0x1a/0x50 [ 519.123556][ T57] asm_exc_invalid_op+0x1a/0x20 [ 519.128425][ T57] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 519.134862][ T57] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 c1 9c a1 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 5e 98 a1 f6 e9 [ 519.154488][ T57] RSP: 0018:ffffc900015e7420 EFLAGS: 00010293 [ 519.160579][ T57] RAX: ffffffff8b242bdf RBX: ffffffff90425810 RCX: 0000000000000005 [ 519.168568][ T57] RDX: ffff8880274c8a04 RSI: ffff8880767a5888 RDI: ffffffff90425810 [ 519.176556][ T57] RBP: ffffc900015e7588 R08: ffff8880531b2a8f R09: 1ffff1100a636551 [ 519.184547][ T57] R10: dffffc0000000000 R11: ffffed100a636552 R12: dffffc0000000000 [ 519.192544][ T57] R13: 0000000000000001 R14: ffff8880767a5888 R15: ffff8880274c8a04 [ 519.200547][ T57] ? ieee80211_tx_h_rate_ctrl+0xddf/0x1760 [ 519.206401][ T57] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 519.212499][ T57] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 519.218697][ T57] invoke_tx_handlers_late+0xba/0x18a0 [ 519.224212][ T57] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 519.230068][ T57] ieee80211_tx+0x2d7/0x4b0 [ 519.234602][ T57] ? __pfx_ieee80211_tx+0x10/0x10 [ 519.239692][ T57] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 519.245716][ T57] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 519.251577][ T57] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 519.257929][ T57] ieee80211_scan_state_send_probe+0x594/0xa00 [ 519.264134][ T57] ieee80211_scan_work+0x64d/0x1c60 [ 519.269390][ T57] cfg80211_wiphy_work+0x2cf/0x460 [ 519.274533][ T57] ? process_scheduled_works+0xa70/0x1860 [ 519.280279][ T57] process_scheduled_works+0xb5d/0x1860 [ 519.285882][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 519.291908][ T57] ? assign_work+0x3d5/0x5e0 [ 519.296528][ T57] worker_thread+0xa53/0xfc0 [ 519.301177][ T57] kthread+0x389/0x470 [ 519.305279][ T57] ? __pfx_worker_thread+0x10/0x10 [ 519.310407][ T57] ? __pfx_kthread+0x10/0x10 [ 519.315027][ T57] ret_from_fork+0x514/0xb70 [ 519.319662][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 519.324807][ T57] ? __switch_to+0xc79/0x1410 [ 519.329515][ T57] ? __pfx_kthread+0x10/0x10 [ 519.334133][ T57] ret_from_fork_asm+0x1a/0x30 [ 519.338936][ T57] [ 519.342493][ T57] Kernel Offset: disabled [ 519.346838][ T57] Rebooting in 86400 seconds..