last executing test programs: 3m15.025166665s ago: executing program 2 (id=4184): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async) ppoll(&(0x7f0000000980)=[{r4, 0x1}, {0xffffffffffffffff, 0x502}, {r1, 0x4}], 0x3, 0x0, 0x0, 0x0) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x4, 0x480, [0x200000000bc0, 0x0, 0x0, 0x200000000d8c, 0x200000001010], 0x0, &(0x7f0000000200), &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]}, 0x4ec) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e", 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000340)=ANY=[@ANYRES64=r4], &(0x7f0000000380)='syzkaller\x00', 0x4, 0xce, &(0x7f0000000440)=""/206, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4000000000800000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x4}) (async) bind$inet6(r0, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) (async) splice(r7, 0x0, r4, 0x0, 0x1, 0x0) 3m14.750831586s ago: executing program 2 (id=4189): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000004002000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) 3m14.62977959s ago: executing program 2 (id=4192): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt(r1, 0x7, 0xca, &(0x7f0000000280)=""/28, &(0x7f0000000380)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @remote}, 0x10) close(0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000d41ce97487ea05000000000000000d0000050018007f0000000600080000000000050017000000000006000a00ffff000005001900040000"], 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/125, 0x7d}, {&(0x7f0000001800)=""/4120, 0x1018}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/80, 0x50}], 0x4}, 0x2002) unshare(0x6020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2}) sendto(r0, &(0x7f0000000080)="c22dfd533a05496d410e05885837a4db", 0x10, 0x8001, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="3f000000010003", 0x7) 3m14.548801198s ago: executing program 1 (id=4193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4804) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000160800044000000004050003000100000008000240000000060900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) (async) r7 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, &(0x7f0000000000)="b9", 0x1) (async) r8 = accept(r6, 0x0, &(0x7f0000000000)) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x3ff, @private1, 0x4}, 0x1c) 3m14.360593197s ago: executing program 4 (id=4194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, r4, 0xd76df63585d8493b, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0xc010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3d2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1ba}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x64c}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r2, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) sendmsg$nl_route(r6, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2c, 0x25dfdbfb, {0x80, 0x14, 0x80, 0x0, 0x0, 0x0, 0xc8, 0x2, 0x3b00}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) (async) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, r4, 0xd76df63585d8493b, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0xc010) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3d2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1ba}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x64c}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20000080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r2, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) (async) sendmsg$nl_route(r6, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2c, 0x25dfdbfb, {0x80, 0x14, 0x80, 0x0, 0x0, 0x0, 0xc8, 0x2, 0x3b00}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) (async) 3m11.585714379s ago: executing program 4 (id=4196): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0xb) (async) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0xe, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) 3m11.515326865s ago: executing program 2 (id=4197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x142000}, @map_fd={0x18, 0x4}, @alu={0x7, 0x0, 0x6, 0x9, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x7c7aa340a2afa67e, 0x3, 0x6, 0x4, 0x0, 0x50}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4007fff}, 0x94) 3m11.492435488s ago: executing program 1 (id=4199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x8}, {0x4, 0x6, 0x9, 0x6, 0xf, 0x0, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="000000f9fffffbffffffaaaab6aaaaaa894f"], 0x12) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000009f11db783fed17ac97f90000", @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000c6e2b8c983e1a5e155bbe50000000000007b8af0ff00000000bfa120000000000007f6ff00f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000afc9b8cee04834305b9921bb607caf390c", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655a, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x78}}, 0x4000) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r12, 0x10c, 0x3, &(0x7f0000000040), 0x4) 3m11.291623638s ago: executing program 2 (id=4200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a31000000001400000011000100"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) (async) connect$unix(r1, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) listen(r2, 0xfffff789) r3 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}}, 0x24}}, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 3m11.195046314s ago: executing program 4 (id=4201): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048002) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000001c0)=0x7fff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffd}]}, 0x54}}, 0x48010) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={@empty, @local, @mcast2, 0xb, 0x92, 0x4, 0x500, 0x3, 0x810000, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x35c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0xb, 0x6, 0x4, 0x5, 0x5, 0x30, 0xc, 0x30, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x2, 0x1ff, 0xac, 0x4, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x48, 0xb, 0x1, 0x30, 0x3, 0x6, 0x24, 0x2b, 0x3, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff81, 0xf800, 0x3, 0x2, 0x4, 0xd, 0x8001, 0x9]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x7, 0x12, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x3, 0x7, 0x7, 0x9, 0x18, 0x9]}}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x5, 0x30f1, 0x0, 0x0, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x10, 0x0, 0x1, 0x5a, 0x0, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3f, 0xb9224e4c8ae957da, 0x47, 0x6c, 0x6, 0x2, 0x5, 0x2, 0x9, 0x6c, 0x24, 0x48, 0x1b, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0xd13, 0xffff, 0x2, 0xb, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x8001, 0x9, 0x7, 0x1, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x8, 0xa18a, 0x1, 0x4, 0x6, 0x10dc]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x9, 0xa, 0x5, 0x6, 0x6, 0xd2ba]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x2, 0x5, 0xfffb, 0x6, 0x4, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xffff, 0x1, 0xb51, 0x1ff, 0x9, 0x38, 0x2]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x5}, {0x5, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x3}, {0x2, 0x4}, {0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x2, 0x5}, {0x7, 0x8}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0xa}, {0x3, 0x12}, {0x7, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x9}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x3}, {0x3, 0x7}, {0x5, 0x8}, {0x1}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x7, 0x4, 0x7, 0x7, 0x7, 0x2]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xffff, 0x1, 0x1, 0x5, 0x800, 0x40, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf899, 0x9, 0xa11f, 0x2, 0x8000, 0x7, 0xb54, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x8, 0x6, 0x2, 0xaa, 0x3, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x6, 0x24, 0x6, 0x6c, 0x30, 0x67, 0x12, 0x3, 0x60, 0x18, 0x9, 0xf, 0x6, 0x5, 0x6a, 0x2, 0x2, 0xc, 0x1, 0x4, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x1000, 0x2, 0x8, 0xdc, 0x2, 0x8, 0xe7df]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0xfff7, 0x0, 0x4b6, 0x10, 0x2, 0x2781]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x4, 0x8}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x6, 0xa}, {0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x1}, {0x7, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x2, 0x9}, {0x6, 0x5}, {0x3, 0x5}, {0x5, 0x6}, {0x5, 0x7}, {0x4, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x7, 0x7}, {0x2, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x6}, {0x2, 0x9}, {0x6, 0x6}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x8}, {0x4, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x6, 0x6}, {0x7, 0x6}, {0x5}, {0x1, 0x3}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x4}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x6}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x3}, {0x4, 0x10}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x3, 0x7}, {}, {0x1, 0x8}, {0x7, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x7}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc7, 0x3fe0, 0x6, 0xb, 0x2, 0x8, 0x7, 0xaa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x1}, 0x14048050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r6, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x4004805) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000b00)=':\x00', 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000b40)=0x2, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000e00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x1a4, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000e40)=@dstopts={0x67, 0x0, '\x00', [@pad1]}, 0x10) poll(&(0x7f0000000e80)=[{r4, 0x200}, {r7, 0x2401}, {r1, 0x1000}], 0x3, 0x13d) shutdown(r1, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r10, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r4) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xd4, r14, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9bb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x468}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m11.128014071s ago: executing program 3 (id=4202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000fdff18000604"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000501000002a79a00", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x18, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000180)="68c143b4804a40d5b0a9bb3e88f71ef283fa9df41b93ca950190503a2ab8ca5cc5ef4e4a32bffc1b6d27f4d0cfeca7a9cc6a31b26b5add5ce8b59ae650ceb15cec1c465bf40b6a7132fd1ab57cccfd4f51f2705bcd29c028424f70232517e7ccb1124653c194edd4a5ce9f0a59301bc018e9016c107689b321d8ff299f11ed716725c6bf5069b12e09ca", 0x8a}, {&(0x7f0000000440)="91f89d073797c7410af81a0667f06846e4f693b422fcd9ae6dadbeb3f416f58c381042022f6e69ffcf2ff3a13092a7142e729ef9ce1d52adfb4b9f8861e8b04a47aa1ae63d069aa2", 0x48}, {&(0x7f00000004c0)="585aa5a59ba587fe5ca5fe1fcae891ce658ef6f4c885363ba0431febeebd4cdd09fcb8de42417940b674a469f925b39903b1014a9341aad01c81cf6ee624538630feaa5fbc483699ef416160a032dd989e8f5a7c2c41ccb1638e628d91d8c5698dda5fced10ea0c51e859ef69c6f0be466b98bf05892acd37ec0ede180a0f073cdc6df73afe17b06d76b7d002a04b4092342f87c55d2e3d5b7641972b4928c07f03944f0f18a868f60ddbe12a069781192998afbd8f9f0007459d545447d9c920a46182971b25a564114892197ec7017", 0xd0}], 0x3, &(0x7f0000000a40)=[@hopopts_2292={{0x1190, 0x29, 0x36, {0x84, 0x22e, '\x00', [@generic={0x9, 0xf4, "128f0a6a41e9acc4dc4a0b8a4236eefe234847727e790c0e4038171f8c822ce0f17e4f6cc15d4f7ac192979bef38d70ec41a550a9d5e4d99d4c552ecb8df3e07e01e36d46f5aac0c30647db9ed7bf23c5a35e42e73a626c7dd5ab5113b9b08f2fcf790264779826d7c0afda7b1574aedeeff29799920d68ea56762373b606901da4866b2c69d4581db59f1fc0e610031659cc7418b85e785bb2d39d48d6746b5ee581c1595c1756e2cc076a11c8904686bced4fe00755f9894f499b599747d22351f2ea9c506af4c31b1aef92fe50914dd993353fa91902a6d7ec561c62d7fdbc98955dd1dbab5ca50afefce8f24fc95f56f01ab"}, @generic={0x4, 0x15, "b267bc02138a93d996d7667a45bdc2e534425961aa"}, @calipso={0x7, 0x58, {0x0, 0x14, 0x6, 0x0, [0x4, 0xffffffff, 0x4, 0x7, 0x1, 0x7, 0x2, 0x1, 0x5, 0x7]}}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x1, 0x1000, "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"}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x5f, 0xa, 0x1, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x2f}, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}], 0x11f8}}, {{&(0x7f0000001c40)={0xa, 0x4e23, 0x7, @private1, 0x6}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001c80)="f026284caa77e60ffb829bc9a8af75bff997763c0b1e5f08", 0x18}, {&(0x7f0000001cc0)="8eee64c59b016c59e757c6b9795e82abd70c337bedb42a127dbc2900bedf51a8617a", 0x22}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)="7d87dba9a31af176ad14627c5c2afe172bae75165be5b5d43511b105388b3b4c4d63ffa546f914670c89a2c28184aeab335c7ac4f327d125a9dae01055c206958d46761a0cb45c1c4e6ffd03ed7eba3132146c918b53dedeaefe6b36a33ee93a9ddfd9a1d4701f2a90d0a8dc8e074d0cee00779eea2cd7c347a72597763131a74dfebc00fa9461047f0c1fa076605ad86f65afd30866d0a409c62a7102b4369bf2742b3d3a3e52f5b2f35a22d5719fd4428f89ef5df48fa8903ab61a5d38cd6f8831a96ad0624187196e7112f71dfe4c9bc5843d9325d7b3e2a6eeff7d6c46ca3a40b7", 0xe3}], 0x4}}, {{&(0x7f0000001e80)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001ec0)="036efc", 0x3}], 0x1, &(0x7f0000001f40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x77}}], 0x30}}], 0x3, 0x48004) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) 3m11.074505101s ago: executing program 4 (id=4203): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x105, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc7, 0x10, 0x0, 0xe}, 0x24) (async) r1 = socket$kcm(0x21, 0x0, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) recvmmsg(r1, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/62, 0x3e}, 0x80000001}], 0x1, 0x40002000, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001"], 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x8e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000080000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000040000040000b705000008000000859b97638d00000095000000000000002206d6055ee6d6a59f429865a1c49b2f6c0dbf49e0f7dd7cf5db27fad19ea67118d465362629a61c5fee2cb5d7beeae92342539d75d4633122689dd70c61f1ae2705d83545f854d564a826648acd94"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="e4fa140000001000010000000000000000000000000a4c000000060a0b1600000000000000000200000818000480140001800c0001006e6f747261636b00040002800900010073797a30000000000900020073797a320000000005000740810000001400000011000100"/116], 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01070000000000100000670000000800c30000"], 0x2c}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@getqdisc={0x34, 0x26, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x9, 0x4}, {0xb, 0x10}, {0xd, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 3m11.054155792s ago: executing program 1 (id=4204): r0 = socket(0x2b, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80004}, 0x1c) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xffe2}}]}}]}, 0x3c}}, 0x4000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000000) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, 0x0, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="698925bd7e2b7067df250800000010000400"], 0x24}}, 0x4004000) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r8, 0xa00, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd3e}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m10.989516155s ago: executing program 4 (id=4205): r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000029d30783f3aeacc7f9f8c9b2b88d40aa6358b6477ffcb0508b48f1639b50cd70ad1a4e95e151e319b5c2e697439bcf1d118ab5bb322da7d781051083e08f9a0b772d6273d25d82e10ed3ab37de5f216eb32bd4b25260afdbd6aaa3d67343bd1d4b9a143422b5fd6bfd321a0253d85b9ea80f86b198a73ec03628349d033a674034b7356550cd54617e392302caf3293e4689591a89c91b0820285e2ce9332f2510b1e752e4dffdd341e59e980330e4bc93436eb5e4", @ANYRES16=0x0, @ANYBLOB="1a0327bd7000fedbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$can_j1939(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)="44b3119217c6748b89dd3aa7ff78c0f0e505bd603f16cad964c3a84b8c64919a1649c19de440c8fe1cc971372b45d2b4d7b12dcc8cb26d76addb042441e2ab904229e86611397230eb6c6f9017472071b8eae03734ee4f127e77c02c41323d8d74fc59d2c2e06f1743171af6f7d3bec12cb026f463d37d78606d0490e6d9690cefa71c49", 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x4048000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500000d000000000a00000005000000060000000200000009000000050000ea06000000010000000c00000001"], &(0x7f0000000100)=""/125, 0x4e, 0x7d, 0x1, 0x6}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3m10.908190781s ago: executing program 3 (id=4206): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x29, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffd, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) connect$rose(r7, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) connect$rose(r7, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000400)=0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x8000, @local}, 0x3f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES8=r4, @ANYRESDEC=r4, @ANYRES8=r5, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x40018d0}, 0x0) 3m10.800443763s ago: executing program 4 (id=4207): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) unshare(0x400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x280303, 0x0) readv(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) unshare(0x20000400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x4040) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x24, 0x2, 0x4, 0x0, "36e932c486d21bdc"}, 0x10}, 0x1, 0x0, 0x0, 0x200848c0}, 0x4094) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x1b, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000004d1c0000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018160000", @ANYRES32, @ANYBLOB="53e0c7d51cf59c33181100460c8f464afafe10a56e4eb85fd800", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800001e0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008520000001000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x6a, &(0x7f0000000840)=""/106, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x14, r0, 0x8, &(0x7f00000008c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x81}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2765}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) 3m10.681255804s ago: executing program 3 (id=4208): syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x20, 0x200, 0x0, 0x0, 0x4, 0x338, @private=0xa010100, @local, {[@cipso={0x86, 0x10, 0x0, [{0x0, 0x4, "b29a"}, {0x0, 0x6, "ff8f5896"}]}, @generic={0x44, 0x11, "77bf39dad417f1bc03a7c2d4017b8a"}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}]}}}}}}}, 0x0) 3m10.522109608s ago: executing program 3 (id=4210): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x104, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003240)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a310000000083c36507264c2f88862108013df1f34aef55464bf96056483c8fff0c88c37d0dbe3f1a6925630bd90609f4fa71"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800) (async) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003040)={{}, &(0x7f0000002fc0), &(0x7f0000003000)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003040)={{}, &(0x7f0000002fc0), &(0x7f0000003000)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000003080)=@raw=[@jmp={0x5, 0x0, 0x7, 0x8, 0x9, 0x80, 0x10}, @generic={0x5, 0x6, 0xe, 0x5, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000003080)=@raw=[@jmp={0x5, 0x0, 0x7, 0x8, 0x9, 0x80, 0x10}, @generic={0x5, 0x6, 0xe, 0x5, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc}, 0x94) sendto$inet6(r1, &(0x7f00000030c0)="563d2b68e9050a7175a10c59b77a0662d8f188def25b688187ff79e28b478bb865f403e4cbe7c56e49be99ba4af51c5e0c12596a52b9a54dd8f46b960ee1d812084b8ae24ce7d97c213a055176180400f9f15e0151d23cbba1a9de69e69b44eb8a6633f8f3afe41d1211f380000000000000002bea97ebd6ef6b5b86f2a7acfe91a4ef20e7d95eb4f893b011c3b3249ae844f4e2c20ce5bc11f96b0661c37e9b6a7d608ae1d95806c4193f36a45afbc207f7dae6a5476a8d3c06622d52d8946dfb6dfac9c498231f0f16dd571f0fe2bcdce5cb72adaf6ec6", 0xd8, 0x3b00, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000005dbd000a0000060900010073797a31000000002c00048028000180080001006e6174001c000280080005400000000eb6ff02400000000a08000140080000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000005dbd000a0000060900010073797a31000000002c00048028000180080001006e6174001c000280080005400000000eb6ff02400000000a08000140080000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1f, 0x6, 0x4) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-generic\x00'}, 0x58) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket(0x38, 0x4, 0xd1a7904e) sendmmsg$alg(r9, &(0x7f0000002f40)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="241cb0b4620fed91a5487cdc4db4a0ebf329d14225f61235c7bd7cc2e5f527c12f3cf3a4803128c0add1afa542c0294d78f675addfe2f0f801fa2d20f61f0b724e0b745ea9e9062600f47e35ce0d484177b87efcafe317a071314600ad5b438eeb704f8d9f0efc402b558747434691e7d3683200e3c58d01078a87f9aae6e7c245895f9bdc485c", 0x87}, {0x0}, {&(0x7f0000000800)="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", 0xff0}, {&(0x7f0000001800)="61071d0590436b6752a2a7995c004d41dd5cba60952588d02d4bc3c685127973c8bd9b73a1a36cbae1159ded518bcc261382cf63eda2216c222b5c9a2303d61a4aca7e794a49569e556f34517807b784e5008c6cf61ee2ee47ac", 0x5a}], 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x170, 0x4}, {0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001a00)="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", 0xfa}, {&(0x7f0000001b00)="4d5bf8d9f751f9332f86d31724f79b55ed4731903e335748fd3c5fb9195ea64eb7f068e4ad6fc5705121c5a3d606910d58fc79aac5bf4dc473adf1bdb294a87cddd28d4a7dfa05fff01f96688cee6b3bf19934c45106de84a40a63ac1583f2111d1bffdf49", 0x65}, {&(0x7f0000001b80)="73f92707c6f00828dfe245ed2f1b9f900cea8447415327cf9187c51a701af846af4850d5092590805054de40bf480f22300984e8a01684661af0f64c06d24b8bea7ddf14c1cfc50765d48ed47d96", 0x4e}, {&(0x7f00000005c0)="e6fae6d1b292e91438440d3cb6bf5ca3623413b54f1811e2c128e433046e0a5d8d3a2afedc919e46c0e1e03c3e3bc28306101db84a0852", 0x37}, {&(0x7f0000001c00)="acd209dcd26ceeacba63ca45fe482e747924ebfc5338a8d852c34e79a8ad866ecb1063c0c2fbc757c0aa94e649107a90ecb6c65a2e412729f74178b4d1125e6e0558d6aacade86ee35065fe4ee04251589ea91bcedc0385aa08db6dae56f258573dc5d87e439aa4341c2047ff80becb2de4a6bb8561dd81148df9b7d4706602603ead7af0325c4436072c0c6353e9b06e3cfd264f0e8a69a41d572667be491bb68811a9be38c9ecd87bc5e179d481e86022ffc41699a92505aa4", 0xba}, {&(0x7f0000001cc0)="98", 0x1}, {&(0x7f0000001d00)="c87b3c877a740d36daaabdac57c8d768b12f7559c5ad6173c4", 0x19}], 0x7, &(0x7f0000001dc0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x1000, 0x117, 0x2, 0xfea, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xca, "b2cd21bca55d685c7105c771c9ea4a21f4bf9d049b7151b827a0b80c455fe430ddd1b13a4435807943e5441239bb46bd4ecaca300ad065c095af9e727aa1611b96361ce146e7eb1701c2533bd8c064f81f8b30759ef2d61ebdd010ce7465259f9165d58d02ba6adc631318f5ba4de08741ddd1398350c729ffe2cc6b169da9fb6dbb4e84bc9f659daf1ba47e7a46b903053f4532f52d6ebc049a07db6e3e8e6131f5bf3cc94ed620e21b4b8dd2f05e8d119f7d0fa4faf4f8f13de8d6849e68e7cb9fb546fa525d991052"}, @op={0x18}], 0x1140, 0x804}], 0x2, 0x4000001) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006970366772650000180002800400120008000d0003000000080014000400000008000a00", @ANYRES32=r8, @ANYBLOB="35fd5ccec920c2a4473616ababc9d917ba547f0668305bee2f75c67b75f743514ae4c2e8a36abe7b7e3bbe8b258b3546ebf3c4b529dd0cf0e7007c5df92a40c547e583a9cfb362f71231be1fec12c8515fd0b8b5837976d5cda408b4aeefe6cdbf979540fa321c4c82ec1253916b9950a5f2e314f075"], 0x50}, 0x1, 0xba01, 0x0, 0x40000080}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a7100000b000000420000003efe00000700000067f21267d9840795bae66b9aa2e2f98adef47f9a1edf821a6a6dcd7339bd6ea6e051e22907150cad2a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000031c0)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="aa0000001c000000000000000000000000000000000000000000000008"], 0x50) 3m10.078023754s ago: executing program 0 (id=4212): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240), 0xb00}, 0x20) r1 = socket(0x25, 0x5, 0x0) unshare(0x20000400) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0x0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000004c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 3m9.825937822s ago: executing program 0 (id=4213): unshare(0x6020400) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c00144000000000000000000500130001"], 0x30}}, 0x4000) socket$kcm(0x2, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000180)=0x11f7, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000004840)=[{{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/125, 0x7d}, 0x400}, {{&(0x7f00000022c0)=@hci, 0x80, &(0x7f00000046c0)=[{&(0x7f0000000780)=""/141, 0x8d}, {&(0x7f0000002400)=""/183, 0xb7}, {&(0x7f0000000680)=""/204, 0xcc}, {&(0x7f00000025c0)=""/16, 0x10}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/178, 0xb2}], 0x7, &(0x7f0000004740)=""/236, 0xec}, 0x8}], 0x2, 0x45833af92e4b19df, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1, @ANYBLOB], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x48850) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f00000001c0), &(0x7f0000000340)=r5}, 0x20) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000400)={@rand_addr, @local, 0x0}, &(0x7f00000004c0)=0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000640)={@empty, 0xf3, 0x2, 0x0, 0xe, 0x5, 0x6}, 0x20) bind$packet(r4, &(0x7f0000000540)={0x11, 0x9, r6, 0x1, 0x3, 0x6, @local}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xb5, 0x0, &(0x7f00000009c0)="00e5ff000005000000000001e3701974ea08381107843162fe4448d04dfebbd4edbd8fe4f0e5f8bc53db133090a827159a7511c78ab3a7bc0e9b69fc474bc7c46abb69f09b9056e13c9405c6a7fa3796d31359634a3a4ba394df867bf3845c4835115261713920a6bbdf0cf59f21381ddd247d89991a51f552b83f06202a1a1c39360851ee1c8721f841864fc0153a50e059e4e863b3190e4efd474dbb8312b79728719e74b05c91f012508f166eb4000000000000", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001}, 0x50) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', r6, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) unshare(0x20000000) 3m9.816733817s ago: executing program 2 (id=4214): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x7a9, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a050080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001000)="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", 0x149}, {&(0x7f0000000340)="6dff35d264fcd2d0658f5e1c79449ce9eb69369aa4d95ac0d1787cd4f5ea2db433a0059918ba7219b8ee658c8e006c35f4b906c7285e6bc5e00dccc0752620156ec84c179d2c3623b519", 0x4a}, {&(0x7f0000000680)="192144b6cd09a21e8834b77bee03e85ac4611fb489814aca87fd0649e4ba2942dfd722062e40eed264e299d3608a0a71d3e061442e97be3e1131e7601b80c4ae3fbe2e9bbd3191f6b77a366a6dbcc0836beae581de4bd877e3692a4bbb961e34368b0028c9dbd439c43b936b331aea81f62d36ac48a436f50658bf8de26bf456c815fa961d47c278051730d796b1c9e7677c9eb6d12c662138cb12adc5f821a82b60192f97d664a617b5c210b3efa9ac6979491848428806fd9c9a72ac9c1e", 0xbf}], 0x3, &(0x7f0000001380)=ANY=[@ANYRES8=r1], 0x150, 0x20004840}], 0x1, 0x20000000) readv(r4, &(0x7f0000000180)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) listen(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) 3m9.67526919s ago: executing program 3 (id=4215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) listen(r1, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x168, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0xe4, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x200}, @val={0x0, 0x0, 0x11, 0x0, 0xffff}, @mpls={[], @generic="594c973a09555d95f4b9404631a6b2cd8c"}}, 0x1f) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) (async) listen(r1, 0x4) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x168, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0xe4, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x200}, @val={0x0, 0x0, 0x11, 0x0, 0xffff}, @mpls={[], @generic="594c973a09555d95f4b9404631a6b2cd8c"}}, 0x1f) (async) 3m9.005927588s ago: executing program 1 (id=4216): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @datasec={0x2, 0x3, 0x0, 0xf, 0x1, [{0x1, 0xffffffff, 0xc}, {0x5, 0x100, 0x81}, {0x4, 0x7, 0x4}], "9f"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0x4, 0x1}, {0x6, 0x5}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x1, 0x1}, {0x9, 0x4}, {0xf}, {0x10, 0x3}, {0xd, 0x7}, {0x1, 0x8}, {0x10}]}, @fwd={0x9}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x6}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5}, @enum64={0x1, 0x5, 0x0, 0x13, 0x1, 0x2, [{0x5, 0x8}, {0x2, 0x9, 0x8c1}, {0x5, 0x4, 0xfff}, {0x5, 0xfffffffe, 0x8}, {0x5, 0x2, 0x2}]}, @func={0xa, 0x0, 0x0, 0xc, 0x4}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000240)=""/62, 0x150, 0x3e, 0x0, 0x4, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xc, 0x2, 0x9, 0x1, 0x4004, 0x1, 0x2, '\x00', r3, r0, 0x4, 0x5, 0x2}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000006}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m8.82358133s ago: executing program 1 (id=4217): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r2, 0x0, 0x4704}, [@IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r2, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002000000060012004e24000008000700000100000500060007000000"], 0x5c}}, 0xeb64d656001b2f26) 3m8.744602967s ago: executing program 0 (id=4218): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x3f, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m8.474620735s ago: executing program 3 (id=4219): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "00f600", 0x60, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "ff0a204ed5a503a4c4b15e71c9dfd0a38928609debccd0237e605338"}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x96) 3m7.212146615s ago: executing program 1 (id=4220): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x6b}, @timestamp={0x44, 0x8, 0x7, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7727}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) 3m1.937761507s ago: executing program 0 (id=4221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) poll(0x0, 0x0, 0x7) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000d80)=[@hopopts={{0xf0, 0x29, 0x36, {0x3c, 0x1a, '\x00', [@padn, @pad1, @generic={0x2, 0xcd, "af5c0a21bf320890506f672e216eed68bdd46e656636e97cb1603ee602ad9a90e67ff57349f831edc61976dba72accbe5f6e68f76ad688f9159e7d97b9fab115a196a14014d7ea65e0b280750846ec3edd96998d0777ebdf68c9eb268dc46e83f8da71961ce45db8def821f5f6c3b8130514110d2658c650672f0524aaa2db27737fc8e0d680f4f2806839e8ae69111483794cea1e1f9bcbf9bba94dc553d460f34577a6c064efa2332d3239f208ac7e5f45e844fa7a66e7ebe2f2accfa380c8e166320910310b378d977e47c4"}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x120}}], 0x2, 0x4040005) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) listen(r1, 0x1ad72f7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 2m53.260529863s ago: executing program 32 (id=4207): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) unshare(0x400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x280303, 0x0) readv(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) unshare(0x20000400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x4040) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x24, 0x2, 0x4, 0x0, "36e932c486d21bdc"}, 0x10}, 0x1, 0x0, 0x0, 0x200848c0}, 0x4094) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x1b, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000004d1c0000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018160000", @ANYRES32, @ANYBLOB="53e0c7d51cf59c33181100460c8f464afafe10a56e4eb85fd800", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800001e0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008520000001000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x6a, &(0x7f0000000840)=""/106, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x14, r0, 0x8, &(0x7f00000008c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x81}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2765}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) 2m49.829350432s ago: executing program 33 (id=4214): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x7a9, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a050080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001000)="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", 0x149}, {&(0x7f0000000340)="6dff35d264fcd2d0658f5e1c79449ce9eb69369aa4d95ac0d1787cd4f5ea2db433a0059918ba7219b8ee658c8e006c35f4b906c7285e6bc5e00dccc0752620156ec84c179d2c3623b519", 0x4a}, {&(0x7f0000000680)="192144b6cd09a21e8834b77bee03e85ac4611fb489814aca87fd0649e4ba2942dfd722062e40eed264e299d3608a0a71d3e061442e97be3e1131e7601b80c4ae3fbe2e9bbd3191f6b77a366a6dbcc0836beae581de4bd877e3692a4bbb961e34368b0028c9dbd439c43b936b331aea81f62d36ac48a436f50658bf8de26bf456c815fa961d47c278051730d796b1c9e7677c9eb6d12c662138cb12adc5f821a82b60192f97d664a617b5c210b3efa9ac6979491848428806fd9c9a72ac9c1e", 0xbf}], 0x3, &(0x7f0000001380)=ANY=[@ANYRES8=r1], 0x150, 0x20004840}], 0x1, 0x20000000) readv(r4, &(0x7f0000000180)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) listen(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) 2m47.467018706s ago: executing program 34 (id=4219): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "00f600", 0x60, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "ff0a204ed5a503a4c4b15e71c9dfd0a38928609debccd0237e605338"}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x96) 2m45.76169492s ago: executing program 0 (id=4225): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x78, 0x2, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfffffff7, 0x1, 0x0, 0x442}}, @TCA_GACT_PROB={0xc, 0x3, {0xf5, 0x26e6}}, @TCA_GACT_PROB={0xff97, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0xfc}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m45.287457557s ago: executing program 35 (id=4220): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x6b}, @timestamp={0x44, 0x8, 0x7, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7727}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) 2m31.937762306s ago: executing program 0 (id=4227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x40) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x4000000000003c4, 0x2000, 0x0) 2m17.522617402s ago: executing program 8 (id=4226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa00084}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1409, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) 2m15.446615125s ago: executing program 36 (id=4227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x40) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x4000000000003c4, 0x2000, 0x0) 1m15.700884581s ago: executing program 6 (id=4223): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000b00702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) 0s ago: executing program 5 (id=4222): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="85000000080000"], 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) unshare(0x400) poll(&(0x7f0000000600)=[{r4, 0x48}], 0x1, 0x400) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40040c4}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) sendmsg$IEEE802154_ADD_IFACE(r5, 0x0, 0x20040800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r6], 0x3c}}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): .641951][T17799] [ 479.973196][ T30] audit: type=1804 audit(1776332436.647:8): pid=17801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3001" name="/newroot/603/cgroup.controllers" dev="tmpfs" ino=3117 res=1 errno=0 [ 479.996644][ T30] audit: type=1800 audit(1776332436.647:9): pid=17801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3001" name="cgroup.controllers" dev="tmpfs" ino=3117 res=0 errno=0 [ 480.028824][T17753] lo speed is unknown, defaulting to 1000 [ 480.041029][T17753] lo speed is unknown, defaulting to 1000 [ 480.351792][ T5828] Bluetooth: hci1: command tx timeout [ 480.810404][T17823] pimreg: entered allmulticast mode [ 480.866844][ T8431] vlan0: left allmulticast mode [ 480.883015][ T8431] bridge_slave_0: left allmulticast mode [ 480.901678][ T8431] vlan0: left promiscuous mode [ 480.912009][ T8431] bridge_slave_0: left promiscuous mode [ 480.926180][ T8431] bridge0: port 1(vlan0) entered disabled state [ 480.998502][ T8431] pimreg: left allmulticast mode [ 481.549481][ T8431] bond6 (unregistering): (slave gretap2): Releasing active interface [ 481.853992][ T8431] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 481.864205][ T8431] bond0 (unregistering): Released all slaves [ 481.876077][ T8431] bond1 (unregistering): Released all slaves [ 481.894245][ T8431] bond2 (unregistering): Released all slaves [ 481.908400][ T8431] bond3 (unregistering): Released all slaves [ 481.922458][ T8431] bond4 (unregistering): Released all slaves [ 481.936841][ T8431] bond5 (unregistering): Released all slaves [ 481.964414][ T8431] bond6 (unregistering): Released all slaves [ 481.982823][ T8431] bond7 (unregistering): Released all slaves [ 481.997038][ T8431] bond8 (unregistering): Released all slaves [ 482.010947][ T8431] bond9 (unregistering): Released all slaves [ 482.029538][ T8431] bond10 (unregistering): (slave veth11): Releasing backup interface [ 482.039507][ T8431] bond10 (unregistering): Released all slaves [ 482.060018][ T8431] bond11 (unregistering): Released all slaves [ 482.074151][T17820] pimreg: left allmulticast mode [ 482.106782][T17783] lo speed is unknown, defaulting to 1000 [ 482.107804][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 482.206663][T17783] lo speed is unknown, defaulting to 1000 [ 482.300071][T17844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.317880][T17844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.413723][T17847] sctp: [Deprecated]: syz.3.3012 (pid 17847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.413723][T17847] Use struct sctp_sack_info instead [ 482.431605][ T5828] Bluetooth: hci1: command tx timeout [ 482.749067][T17753] chnl_net:caif_netlink_parms(): no params data found [ 483.217176][ T8431] tipc: Left network mode [ 483.323734][T17753] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.350841][T17753] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.393715][T17753] bridge_slave_0: entered allmulticast mode [ 483.425575][T17753] bridge_slave_0: entered promiscuous mode [ 483.434108][T17870] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3015'. [ 483.444433][T17807] lo speed is unknown, defaulting to 1000 [ 483.480389][T17753] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.493341][T17753] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.501155][T17753] bridge_slave_1: entered allmulticast mode [ 483.511132][T17753] bridge_slave_1: entered promiscuous mode [ 483.519418][T17807] lo speed is unknown, defaulting to 1000 [ 483.891092][T17753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.916916][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 484.027153][T17753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.095861][T17877] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 484.381594][T17753] team0: Port device team_slave_0 added [ 484.399902][T17753] team0: Port device team_slave_1 added [ 484.511914][ T5828] Bluetooth: hci1: command tx timeout [ 484.592580][T17880] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3017'. [ 484.772482][T17753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.780082][T17753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.807399][T17753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.933229][T17753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.945936][T17753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.001848][T17753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.580568][T17753] hsr_slave_0: entered promiscuous mode [ 485.593031][T17753] hsr_slave_1: entered promiscuous mode [ 485.609645][T17753] debugfs: 'hsr0' already exists in 'hsr' [ 485.628379][T17753] Cannot create hsr debugfs directory [ 485.825577][T17908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3022'. [ 486.004082][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 486.063572][T17917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3023'. [ 486.160808][T17902] syzkaller0: entered promiscuous mode [ 486.166546][T17902] syzkaller0: entered allmulticast mode [ 486.279891][T17925] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 486.612894][ T5828] Bluetooth: hci1: command tx timeout [ 488.948195][T17925] team0: Port device dummy0 added [ 488.956090][T17928] veth0: entered promiscuous mode [ 489.049295][T17934] xt_hashlimit: max too large, truncated to 1048576 [ 489.147070][T17928] veth0: left promiscuous mode [ 489.189575][T17940] xt_hashlimit: max too large, truncated to 1048576 [ 489.209212][T17937] pimreg: entered allmulticast mode [ 489.280136][T17945] ip6t_rpfilter: unknown options [ 489.301936][T17945] ieee802154 phy0 wpan0: encryption failed: -22 [ 489.324214][T17936] pimreg: left allmulticast mode [ 489.360872][ T5969] IPVS: starting estimator thread 0... [ 489.462427][T17950] IPVS: using max 31 ests per chain, 74400 per kthread [ 491.224734][ T8431] hsr_slave_0: left promiscuous mode [ 491.254117][ T8431] hsr_slave_1: left promiscuous mode [ 492.110392][ T8431] team0 (unregistering): Port device dummy0 removed [ 492.157431][ T8440] smc: removing ib device sqz0 [ 492.291985][ T9939] lo speed is unknown, defaulting to 1000 [ 492.308999][ T9939] sqz0: Port: 1 Link DOWN [ 492.325319][T18005] pimreg: entered allmulticast mode [ 492.486711][T18005] pimreg: left allmulticast mode [ 492.763955][T18048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3050'. [ 492.963518][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3052'. [ 493.425535][T18072] netlink: 'syz.3.3055': attribute type 1 has an invalid length. [ 493.744107][T18072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.828588][T18074] bond2: (slave gretap1): making interface the new active one [ 493.885027][T18074] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 494.074914][T18083] bond6 (unregistering): Released all slaves [ 494.639773][T17998] lo speed is unknown, defaulting to 1000 [ 494.698142][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 494.822443][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 494.847922][T18117] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3063'. [ 494.867576][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 494.895310][T18117] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3063'. [ 494.942953][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 495.023596][T17753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 495.693349][T17753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.946662][T17753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 495.992560][T17753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 496.131163][T18137] netlink: 'syz.3.3066': attribute type 1 has an invalid length. [ 496.170221][T18126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3065'. [ 496.206970][T17753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.302603][T17753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.346929][T17753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 496.402695][T17753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.109637][ T8431] IPVS: stop unused estimator thread 0... [ 497.247614][T18181] netlink: 'syz.2.3073': attribute type 2 has an invalid length. [ 497.286961][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 497.298601][T17753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.382976][T17753] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.428607][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.435824][T12234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.505936][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.513206][T12234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.629036][ T8431] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.647915][ T8431] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.786342][T18197] bond15: Invalid ad_actor_system MAC address. [ 497.803534][T18197] bond15: option ad_actor_system: invalid value (21475033095) [ 497.804461][T18204] xt_TPROXY: Can be used only with -p tcp or -p udp [ 497.830597][T18197] bond15 (unregistering): Released all slaves [ 497.930438][ T8431] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.946818][ T8431] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.221405][T18224] tipc: Enabled bearer , priority 0 [ 498.239269][T18224] syzkaller0: entered promiscuous mode [ 498.268145][T18224] syzkaller0: entered allmulticast mode [ 498.364937][T18224] tipc: Resetting bearer [ 498.408261][T18222] tipc: Resetting bearer [ 498.481035][T18222] tipc: Disabling bearer [ 498.696103][T17753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.917744][T17753] veth0_vlan: entered promiscuous mode [ 498.968210][T17753] veth1_vlan: entered promiscuous mode [ 499.068067][T17753] veth0_macvtap: entered promiscuous mode [ 499.096406][T17753] veth1_macvtap: entered promiscuous mode [ 499.130273][T17753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.187220][T17753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.236749][ T8444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.263528][ T7097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.321625][ T7097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.345433][ T7097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.688141][T18246] lo speed is unknown, defaulting to 1000 [ 499.731152][ T8440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.772005][ T8440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.005152][T18281] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 500.023095][ T7097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.032924][ T7097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.051029][T18281] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 500.105360][T18284] __nla_validate_parse: 2 callbacks suppressed [ 500.105382][T18284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3093'. [ 500.107691][T18281] gretap4: entered allmulticast mode [ 500.123851][T18284] netlink: 'syz.1.3093': attribute type 1 has an invalid length. [ 500.135277][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3093'. [ 500.274257][T18286] netlink: 'syz.0.2987': attribute type 4 has an invalid length. [ 500.297031][T18286] netlink: 'syz.0.2987': attribute type 4 has an invalid length. [ 500.629580][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 500.790731][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.807449][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.821974][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.835525][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.849491][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.027701][T18312] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 501.441097][T18308] pim6reg1: entered promiscuous mode [ 501.448138][T18308] pim6reg1: entered allmulticast mode [ 501.509278][T18303] lo speed is unknown, defaulting to 1000 [ 501.645824][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.652803][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.661932][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 501.718304][T18321] netlink: 'syz.0.3102': attribute type 25 has an invalid length. [ 501.740899][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 501.852754][T12234] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.880943][T12234] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.949547][T12234] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.010585][T12234] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.230221][T18303] chnl_net:caif_netlink_parms(): no params data found [ 502.426081][ T7095] bond7: left allmulticast mode [ 502.431403][ T7095] bridge0: port 3(bond7) entered disabled state [ 502.443119][ T7095] bond6: left allmulticast mode [ 502.450584][ T7095] bridge0: port 1(bond6) entered disabled state [ 502.463846][ T7095] bridge_slave_1: left allmulticast mode [ 502.469656][ T7095] bridge_slave_1: left promiscuous mode [ 502.476729][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.579341][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 502.604719][T18339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3105'. [ 502.633167][T18339] netlink: 'syz.2.3105': attribute type 13 has an invalid length. [ 502.743012][T18340] Cannot find del_set index 4 as target [ 502.911753][ T5828] Bluetooth: hci4: command tx timeout [ 502.922254][ T7095] bond2 (unregistering): (slave gretap1): Releasing active interface [ 503.607717][ T7095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.618240][ T7095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.628174][ T7095] bond0 (unregistering): Released all slaves [ 503.639447][ T7095] bond1 (unregistering): Released all slaves [ 503.655161][ T7095] bond2 (unregistering): Released all slaves [ 503.669480][ T7095] bond3 (unregistering): Released all slaves [ 503.684503][ T7095] bond4 (unregistering): (slave bond5): Releasing backup interface [ 503.699708][ T7095] bond4 (unregistering): Released all slaves [ 503.714664][ T7095] bond5 (unregistering): Released all slaves [ 503.728938][ T7095] bond6 (unregistering): Released all slaves [ 503.743565][ T7095] bond7 (unregistering): Released all slaves [ 503.757939][ T7095] bond8 (unregistering): Released all slaves [ 503.774728][ T7095] bond9 (unregistering): Released all slaves [ 503.799085][ T7095] bond10 (unregistering): Released all slaves [ 503.819282][ T7095] bond11 (unregistering): Released all slaves [ 503.833706][ T7095] bond12 (unregistering): Released all slaves [ 503.852210][ T7095] bond13 (unregistering): Released all slaves [ 503.877887][ T7095] bond14 (unregistering): Released all slaves [ 504.085933][T18357] netlink: 'syz.0.3108': attribute type 1 has an invalid length. [ 504.111003][T18357] netlink: 'syz.0.3108': attribute type 2 has an invalid length. [ 504.125628][T18303] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.154842][T18303] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.203421][T18303] bridge_slave_0: entered allmulticast mode [ 504.229662][T18303] bridge_slave_0: entered promiscuous mode [ 504.270490][T18303] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.286437][T18303] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.294390][T18303] bridge_slave_1: entered allmulticast mode [ 504.317279][T18303] bridge_slave_1: entered promiscuous mode [ 504.357180][ T7095] hm3): left promiscuous mode [ 504.691860][ T7095] hmac(sha224): left promiscuous mode [ 504.738576][T18303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.753542][T18303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.830260][ T7095] tipc: Left network mode [ 504.864294][T18303] team0: Port device team_slave_0 added [ 504.997134][ T5828] Bluetooth: hci4: command tx timeout [ 505.105287][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 505.188580][T18375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.220046][T18375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.270152][T18303] team0: Port device team_slave_1 added [ 505.383791][T18375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.394913][T18375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.496195][T18303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.543223][T18303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.601329][T18303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.624285][T18303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.645928][T18303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.701996][T18303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.800206][T18375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.811653][T18375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.903492][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 506.047532][T18375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.059599][T18375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.181187][T18303] hsr_slave_0: entered promiscuous mode [ 506.200195][T18303] hsr_slave_1: entered promiscuous mode [ 506.212800][T18303] debugfs: 'hsr0' already exists in 'hsr' [ 506.224221][T18303] Cannot create hsr debugfs directory [ 506.443837][T18420] ipvlan0: entered promiscuous mode [ 506.454682][T18420] bridge0: port 3(ipvlan0) entered blocking state [ 506.470990][T18420] bridge0: port 3(ipvlan0) entered disabled state [ 506.481059][T18420] ipvlan0: entered allmulticast mode [ 506.488308][T18420] bridge0: entered allmulticast mode [ 506.498786][T18420] ipvlan0: left allmulticast mode [ 506.505427][T18420] bridge0: left allmulticast mode [ 506.726234][ T8431] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.745749][ T8431] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.909369][ T8444] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.950804][ T8444] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.991574][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 506.999688][ C1] lec:lec_tx_timeout: lec0 [ 507.072399][ T5828] Bluetooth: hci4: command tx timeout [ 507.173476][ T8444] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.198748][ T8444] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.444796][ T8446] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.492319][ T8446] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.507118][T18445] netlink: 'syz.3.3126': attribute type 10 has an invalid length. [ 507.558035][ T7095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.599330][ T7095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.684087][ T7095] veth1_vlan: left allmulticast mode [ 507.688340][T18453] netlink: 'syz.4.3125': attribute type 1 has an invalid length. [ 508.339060][ T7095] smc: removing net device veth0_to_hsr with user defined pnetid SYZ2 [ 508.766888][T18445] team0 (unregistering): Port device team_slave_0 removed [ 508.807960][T18445] team0 (unregistering): Port device team_slave_1 removed [ 508.820784][T18445] team0 (unregistering): Port device dummy0 removed [ 508.839803][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 509.162258][ T5828] Bluetooth: hci4: command tx timeout [ 509.608744][T18483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.940836][T18483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.980594][T18506] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3136'. [ 510.004617][ T7095] IPVS: stop unused estimator thread 0... [ 510.274254][T18483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.529122][T18483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.146905][T18543] netlink: 'syz.0.3141': attribute type 1 has an invalid length. [ 511.204750][ T126] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.356505][ T126] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.406698][T18303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.447995][T18303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.471941][ T126] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.547209][T18303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.600151][T18303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.625923][ T126] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.650252][T18303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.694899][T18303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.726052][T18303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.755751][T18303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.325246][T18303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.425275][T18303] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.462216][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.469839][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.504805][T18578] SET target dimension over the limit! [ 512.526021][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.533372][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.554739][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 512.571801][T18578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3147'. [ 512.657747][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 512.685908][T18578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3147'. [ 513.516822][T18303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.710631][T18303] veth0_vlan: entered promiscuous mode [ 513.766296][T18303] veth1_vlan: entered promiscuous mode [ 513.852661][T18303] veth0_macvtap: entered promiscuous mode [ 513.870650][T18303] veth1_macvtap: entered promiscuous mode [ 514.004488][T18303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.097399][T18303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.169085][ T8444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.214588][ T8444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.240556][ T8444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.273442][T18595] lo speed is unknown, defaulting to 1000 [ 514.273504][ T8444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.569013][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3156'. [ 514.884866][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.928702][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.057588][ T8431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.081512][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3161'. [ 515.098496][ T8431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.178640][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'. [ 515.355562][T18671] x_tables: unsorted entry at hook 2 [ 515.400235][T18674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3162'. [ 515.518913][T18665] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 515.975970][T18674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.055882][ T8446] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 516.086680][ T8446] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 516.113675][T18675] syzkaller1: entered promiscuous mode [ 516.131389][T18675] syzkaller1: entered allmulticast mode [ 516.175856][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.190389][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.201202][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.214432][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.221695][ T8446] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 516.230585][ T8446] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 516.239405][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.055496][ T8446] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.300314][T18729] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3172'. [ 517.372165][T18731] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3172'. [ 517.607330][ T8446] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.637748][T18735] vlan2: entered promiscuous mode [ 517.643295][T18735] dummy0: entered promiscuous mode [ 517.690041][T18738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3172'. [ 517.712830][T18738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3172'. [ 517.814461][T18696] lo speed is unknown, defaulting to 1000 [ 517.840584][T18743] tipc: Enabled bearer , priority 0 [ 517.943260][T18746] syzkaller0: entered promiscuous mode [ 517.964521][T18746] syzkaller0: entered allmulticast mode [ 517.993785][ T8446] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.057221][T18742] tipc: Resetting bearer [ 518.084631][T18740] tipc: Resetting bearer [ 518.134833][T18740] tipc: Disabling bearer [ 518.189225][ T8446] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.203858][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3181'. [ 518.271671][ T5844] Bluetooth: hci0: command tx timeout [ 518.330579][T18767] bond3: entered promiscuous mode [ 518.347796][T18767] bond3: entered allmulticast mode [ 518.375280][T18763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.378638][T18767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.450255][T18763] bond1: option all_slaves_active: invalid value (128) [ 518.464685][T18763] bond1 (unregistering): Released all slaves [ 518.627318][T18778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3184'. [ 518.989411][T18782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3185'. [ 519.248556][ T8446] bridge_slave_1: left allmulticast mode [ 519.271765][ T8446] bridge_slave_1: left promiscuous mode [ 519.287900][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.319017][ T8446] bridge_slave_0: left allmulticast mode [ 519.348095][T18793] netlink: 'syz.2.3186': attribute type 1 has an invalid length. [ 519.355287][ T8446] bridge_slave_0: left promiscuous mode [ 519.381975][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.787331][ T8446] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 520.079701][ T8446] bond8 (unregistering): (slave gretap1): Releasing backup interface [ 520.155955][ T8446] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 520.215674][ T8446] bond0 (unregistering): (slave bridge1): Releasing active interface [ 520.296413][ T8446] bond11 (unregistering): (slave bridge3): Releasing backup interface [ 520.352567][ T5844] Bluetooth: hci0: command tx timeout [ 520.362469][ T8446] bond14 (unregistering): (slave bridge4): Releasing active interface [ 520.657080][ T8446] bond0 (unregistering): (slave veth3): Releasing active interface [ 520.666748][ T8446] bond0 (unregistering): (slave veth5): Releasing active interface [ 520.679376][ T8446] bond0 (unregistering): Released all slaves [ 520.698665][ T8446] bond1 (unregistering): Released all slaves [ 520.713753][ T8446] bond2 (unregistering): Released all slaves [ 520.729014][ T8446] bond3 (unregistering): Released all slaves [ 520.745378][ T8446] bond4 (unregistering): Released all slaves [ 520.764444][ T8446] bond5 (unregistering): Released all slaves [ 520.794854][ T8446] bond6 (unregistering): Released all slaves [ 520.810460][ T8446] bond7 (unregistering): Released all slaves [ 520.825064][ T8446] bond8 (unregistering): Released all slaves [ 520.847372][ T8446] bond9 (unregistering): Released all slaves [ 520.861920][ T8446] bond10 (unregistering): Released all slaves [ 520.878761][ T8446] bond11 (unregistering): Released all slaves [ 520.899198][ T8446] bond12 (unregistering): Released all slaves [ 520.918861][ T8446] bond13 (unregistering): Released all slaves [ 520.933536][ T8446] bond14 (unregistering): Released all slaves [ 520.948171][ T8446] bond15 (unregistering): Released all slaves [ 520.972501][ T8446] bond16 (unregistering): Released all slaves [ 520.987575][ T8446] bond17 (unregistering): Released all slaves [ 521.004939][T18696] chnl_net:caif_netlink_parms(): no params data found [ 521.030402][T18793] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 521.079754][T18765] lo speed is unknown, defaulting to 1000 [ 521.124407][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 521.179354][ T7285] lec:lec_start_xmit: lec0:No lecd attached [ 521.316469][ T8446] l24): left promiscuous mode [ 521.513607][T18836] ieee802154 phy0 wpan0: encryption failed: -22 [ 521.581092][ T8446] tipc: Disabling bearer [ 521.628130][ T8446] tipc: Left network mode [ 521.848661][T18696] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.865118][T18696] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.882488][T18696] bridge_slave_0: entered allmulticast mode [ 521.909798][T18696] bridge_slave_0: entered promiscuous mode [ 522.036527][T18696] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.067975][T18696] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.084756][T18696] bridge_slave_1: entered allmulticast mode [ 522.111730][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.126442][T18696] bridge_slave_1: entered promiscuous mode [ 522.280908][T18857] __nla_validate_parse: 1 callbacks suppressed [ 522.280930][T18857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'. [ 522.307028][T18857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'. [ 522.432785][ T5844] Bluetooth: hci0: command tx timeout [ 522.547850][T18696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.590199][T18696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.699702][T18869] tipc: Started in network mode [ 522.707256][T18869] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 522.721248][T18869] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 522.738388][T18869] tipc: Enabled bearer , priority 10 [ 522.850155][T18696] team0: Port device team_slave_0 added [ 522.883072][T18696] team0: Port device team_slave_1 added [ 523.040492][T18696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.058649][T18696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.121622][T18696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.202303][T18696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.230272][T18696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.272344][T18696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.391037][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 523.632555][T18696] hsr_slave_0: entered promiscuous mode [ 523.646106][T18696] hsr_slave_1: entered promiscuous mode [ 523.661384][T18696] debugfs: 'hsr0' already exists in 'hsr' [ 523.667399][T18696] Cannot create hsr debugfs directory [ 523.717467][T18914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3213'. [ 523.840914][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3214'. [ 523.941161][T13678] tipc: Node number set to 1 [ 524.457172][ T8446] hsr_slave_0: left promiscuous mode [ 524.484039][ T8446] hsr_slave_1: left promiscuous mode [ 524.497864][ T8446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.511906][ T5844] Bluetooth: hci0: command tx timeout [ 524.532693][ T8446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.290877][ T8446] team0 (unregistering): Port device team_slave_1 removed [ 525.348022][ T8446] team0 (unregistering): Port device team_slave_0 removed [ 525.577524][T18974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3224'. [ 525.610280][T18974] Cannot find add_set index 0 as target [ 525.645010][ T8446] team0 (unregistering): Port device dummy0 removed [ 525.699719][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 525.814487][T18992] netlink: 'syz.3.3225': attribute type 13 has an invalid length. [ 525.870452][T18993] netlink: 'syz.3.3225': attribute type 1 has an invalid length. [ 525.911964][T18993] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3225'. [ 526.042109][T19001] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3228'. [ 526.199593][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 526.207672][ C1] lec:lec_tx_timeout: lec0 [ 529.149642][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 529.160971][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3229'. [ 529.170469][T19004] netlink: 'syz.1.3229': attribute type 18 has an invalid length. [ 529.202845][T18992] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.210317][T18992] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.275084][T18992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.290801][T18992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.407109][T19001] team0 (unregistering): Port device bridge5 removed [ 529.436092][T19008] netlink: 'syz.3.3230': attribute type 1 has an invalid length. [ 529.468461][ T126] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.490874][ T126] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.513391][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3230'. [ 529.602324][T19011] tipc: Trying to set illegal importance in message [ 529.658551][T19008] bond4: entered promiscuous mode [ 529.664432][T19008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.673904][ T126] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.794031][T19013] bond4: (slave bridge1): making interface the new active one [ 529.807539][T19013] bridge1: entered promiscuous mode [ 529.835239][T19013] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 529.868381][ T126] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.938116][ T8446] IPVS: stop unused estimator thread 0... [ 530.187926][T19040] netlink: 'syz.3.3235': attribute type 4 has an invalid length. [ 530.198257][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3236'. [ 530.220334][T19036] netlink: 'syz.3.3235': attribute type 4 has an invalid length. [ 530.303299][T19044] netlink: 'syz.0.3236': attribute type 32 has an invalid length. [ 530.322917][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'. [ 530.487562][T19044] bond2: Setting coupled_control to off (0) [ 531.135893][T19022] lo speed is unknown, defaulting to 1000 [ 531.330039][T19069] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 531.345426][T19069] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 531.387291][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3241'. [ 531.519990][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3241'. [ 531.666519][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3245'. [ 532.358183][T19122] netlink: 'syz.2.3248': attribute type 1 has an invalid length. [ 532.580185][T19121] netlink: 'syz.3.3250': attribute type 2 has an invalid length. [ 532.625034][T19121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3250'. [ 532.662627][T18696] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.691396][T18696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.707881][T18696] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 532.739505][T18696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.778088][T18696] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 532.810124][T18696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.844287][T18696] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 532.897743][T18696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.189091][T19163] netlink: 'syz.1.3254': attribute type 3 has an invalid length. [ 533.238751][T19163] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3254'. [ 533.325718][T18696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.426763][T18696] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.460952][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.468236][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.510039][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.517304][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.592107][T19173] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 534.314724][T18696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.319446][T19197] ip6t_REJECT: ECHOREPLY is not supported [ 534.392356][T19197] ip6t_REJECT: ECHOREPLY is not supported [ 534.451721][T19214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3262'. [ 534.789212][T19222] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 535.514985][T18696] veth0_vlan: entered promiscuous mode [ 535.578578][T18696] veth1_vlan: entered promiscuous mode [ 535.794231][T18696] veth0_macvtap: entered promiscuous mode [ 535.850952][T18696] veth1_macvtap: entered promiscuous mode [ 535.910916][T18696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.958565][T18696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.000022][ T8446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.029438][ T8446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.061891][ T8446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.117823][ T8446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.434052][ T7097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.461766][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3275'. [ 536.473031][ T7097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.734097][ T8431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.759861][ T8431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.250632][T19315] sctp: [Deprecated]: syz.1.3280 (pid 19315) Use of int in max_burst socket option deprecated. [ 537.250632][T19315] Use struct sctp_assoc_value instead [ 537.351016][T19320] netlink: 'syz.3.3283': attribute type 7 has an invalid length. [ 537.399510][T19320] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.3283'. [ 537.448654][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 537.502244][T19321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3283'. [ 537.822275][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 537.839140][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 537.853251][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 537.862078][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 537.876415][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 537.884064][T19341] sctp: [Deprecated]: syz.1.3286 (pid 19341) Use of int in max_burst socket option deprecated. [ 537.884064][T19341] Use struct sctp_assoc_value instead [ 538.307569][ T126] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.319057][ T126] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.428850][ T126] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.464264][ T126] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.505884][T19360] syzkaller0: entered promiscuous mode [ 538.524003][T19360] syzkaller0: entered allmulticast mode [ 538.698947][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3294'. [ 538.746718][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3294'. [ 538.867334][T19380] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 538.867334][T19380] Please contact the netfilter-devel mailing list or update your nftables rules. [ 539.094339][T19383] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.463219][T19336] lo speed is unknown, defaulting to 1000 [ 539.532455][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 539.672676][T19402] netlink: 'syz.3.3300': attribute type 1 has an invalid length. [ 539.720803][T19402] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3300'. [ 539.952643][ T5844] Bluetooth: hci3: command tx timeout [ 540.286150][T19336] chnl_net:caif_netlink_parms(): no params data found [ 540.386169][T19437] Cannot find set identified by id 0 to match [ 540.494044][T19445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.811238][T19336] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.831265][T19336] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.857834][T19336] bridge_slave_0: entered allmulticast mode [ 540.873050][T19336] bridge_slave_0: entered promiscuous mode [ 540.893096][T19336] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.911287][T19336] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.934682][T19336] bridge_slave_1: entered allmulticast mode [ 540.945561][T19336] bridge_slave_1: entered promiscuous mode [ 541.098330][T19336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.125027][T19336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.205385][T19436] lo speed is unknown, defaulting to 1000 [ 541.298485][T19336] team0: Port device team_slave_0 added [ 541.410543][T19336] team0: Port device team_slave_1 added [ 541.645381][T19497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3315'. [ 541.738268][T19336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.742202][T19502] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3316'. [ 541.755016][T19502] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3316'. [ 541.756360][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.797755][T19336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.900955][T19506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3317'. [ 541.942776][T19336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.975837][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.000691][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 542.016570][T19336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.049045][ T5844] Bluetooth: hci3: command tx timeout [ 542.627370][T19336] hsr_slave_0: entered promiscuous mode [ 542.660809][T19336] hsr_slave_1: entered promiscuous mode [ 542.684974][T19336] debugfs: 'hsr0' already exists in 'hsr' [ 542.703774][T19336] Cannot create hsr debugfs directory [ 544.043601][T19336] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.080961][T19336] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.099826][T19336] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 44617 - 0 [ 544.111879][ T5844] Bluetooth: hci3: command tx timeout [ 544.153961][T19573] vlan2: entered promiscuous mode [ 544.169399][T19573] bridge0: entered promiscuous mode [ 544.205443][T19578] syzkaller1: entered promiscuous mode [ 544.227963][T19578] syzkaller1: entered allmulticast mode [ 544.270623][T19336] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.302845][T19336] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.321593][T19336] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 44617 - 0 [ 544.494684][T19336] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.544315][T19336] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.578463][T19336] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 44617 - 0 [ 544.753555][T19336] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.793703][T19336] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.834621][T19336] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 44617 - 0 [ 545.166744][T19616] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3341'. [ 545.500572][T19629] ieee802154 phy0 wpan0: encryption failed: -22 [ 545.505425][T19621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3342'. [ 545.533330][T19621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3342'. [ 545.755967][T19642] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3348'. [ 545.788846][T19336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 545.811265][T19336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.820318][T19336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 545.849822][T19336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.859217][T19336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 545.870687][T19336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.905725][T19336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 545.925481][T19336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.191732][ T5844] Bluetooth: hci3: command tx timeout [ 546.330288][T19336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.405768][T19336] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.429458][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.436719][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.480311][T19627] lo speed is unknown, defaulting to 1000 [ 546.495935][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.503200][ T8444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.597106][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 546.608694][T19678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3357'. [ 546.893555][T19689] netlink: 'syz.4.3359': attribute type 9 has an invalid length. [ 546.914798][T19689] netlink: 'syz.4.3359': attribute type 6 has an invalid length. [ 546.939344][T19689] netlink: 'syz.4.3359': attribute type 7 has an invalid length. [ 546.968252][T19689] netlink: 'syz.4.3359': attribute type 8 has an invalid length. [ 546.990841][T19688] netlink: 'syz.4.3359': attribute type 9 has an invalid length. [ 547.017542][T19688] netlink: 'syz.4.3359': attribute type 6 has an invalid length. [ 547.046429][T19688] netlink: 'syz.4.3359': attribute type 7 has an invalid length. [ 547.068925][T19688] netlink: 'syz.4.3359': attribute type 8 has an invalid length. [ 547.386210][T19707] netlink: 'syz.4.3364': attribute type 8 has an invalid length. [ 547.549632][T19336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.565113][T19712] sctp: [Deprecated]: syz.4.3366 (pid 19712) Use of int in maxseg socket option. [ 547.565113][T19712] Use struct sctp_assoc_value instead [ 547.629112][T19714] xt_nfacct: accounting object `syz0' does not exist [ 547.682555][T19717] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3368'. [ 547.766194][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3368'. [ 547.798838][T19336] veth0_vlan: entered promiscuous mode [ 547.872848][T19720] vlan2: entered promiscuous mode [ 547.886853][T19720] bridge0: entered promiscuous mode [ 547.953970][T19336] veth1_vlan: entered promiscuous mode [ 548.059242][T19336] veth0_macvtap: entered promiscuous mode [ 548.086191][T19336] veth1_macvtap: entered promiscuous mode [ 548.153673][T19336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.187618][T19336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.244699][ T7095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.277960][ T7095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.290533][ T7095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.319172][ T7095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.354445][T19739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3374'. [ 548.614802][T19742] netlink: 'syz.3.3375': attribute type 21 has an invalid length. [ 548.647780][T19742] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3375'. [ 548.667569][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.705775][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.860448][ T8431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.892161][ T8431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.281372][T19767] ip6gre1: entered promiscuous mode [ 549.300502][T19767] ip6gre1: entered allmulticast mode [ 549.675123][T19792] nbd: illegal input index -1113835520 [ 550.199234][T19809] ipvlan2: entered promiscuous mode [ 550.610411][T19827] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 550.650999][T19817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.819791][T19839] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 551.466526][T19864] vlan0: entered promiscuous mode [ 551.615076][T19841] lo speed is unknown, defaulting to 1000 [ 551.785966][T19882] xt_hashlimit: size too large, truncated to 1048576 [ 551.812545][T19876] __nla_validate_parse: 10 callbacks suppressed [ 551.812567][T19876] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3411'. [ 551.958539][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'. [ 552.334497][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'. [ 552.435381][T19895] validate_nla: 4 callbacks suppressed [ 552.435404][T19895] netlink: 'syz.1.3416': attribute type 7 has an invalid length. [ 552.791087][T19909] netlink: 'syz.3.3421': attribute type 10 has an invalid length. [ 552.814097][T19878] lo speed is unknown, defaulting to 1000 [ 552.954398][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3422'. [ 553.179845][T19895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.192433][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3420'. [ 553.224567][T19914] ipvlan1: entered promiscuous mode [ 553.235179][T19914] ipvlan1: left promiscuous mode [ 553.251602][T19898] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 553.257872][T19898] syzkaller1: linktype set to 769 [ 553.382506][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3423'. [ 553.395629][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3423'. [ 553.407474][T19895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.596396][T19895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.650708][T19904] lo speed is unknown, defaulting to 1000 [ 553.776930][T19895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.042480][T19927] netlink: 'syz.2.3425': attribute type 1 has an invalid length. [ 554.147285][ T8444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.201132][ T8444] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.255306][ T8444] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.338568][ T995] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.538896][T19923] lo speed is unknown, defaulting to 1000 [ 554.569042][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3430'. [ 555.005240][T19952] syzkaller1: entered promiscuous mode [ 555.010926][T19952] syzkaller1: entered allmulticast mode [ 555.428594][T19965] netlink: 'syz.4.3437': attribute type 1 has an invalid length. [ 555.549218][T19965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.589903][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3437'. [ 555.610828][T19966] syzkaller0: entered promiscuous mode [ 555.621308][T19966] syzkaller0: entered allmulticast mode [ 555.666121][T19969] bond1: (slave gretap1): making interface the new active one [ 555.668803][T19971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3438'. [ 555.683766][T19969] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 555.719260][T19965] bond1 (unregistering): (slave gretap1): Releasing active interface [ 555.742598][T19965] bond1 (unregistering): Released all slaves [ 558.898223][T19971] ip6gretap0: entered promiscuous mode [ 558.905733][T19971] syz_tun: entered promiscuous mode [ 558.912931][T19971] debugfs: 'hsr1' already exists in 'hsr' [ 558.919081][T19971] Cannot create hsr debugfs directory [ 559.205688][T19992] syzkaller0: entered promiscuous mode [ 559.216307][T19992] syzkaller0: entered allmulticast mode [ 559.394196][T19973] lo speed is unknown, defaulting to 1000 [ 559.405519][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.424241][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.782967][T20006] : entered promiscuous mode [ 559.993083][T20015] __nla_validate_parse: 2 callbacks suppressed [ 559.993106][T20015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3449'. [ 560.120055][T20024] sch_tbf: burst 32857 is lower than device lo mtu (11337746) ! [ 560.129442][T20025] netlink: 'syz.1.3452': attribute type 1 has an invalid length. [ 560.336444][T19981] lo speed is unknown, defaulting to 1000 [ 560.354522][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'. [ 560.364655][T20037] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3454'. [ 560.442533][T19979] lo speed is unknown, defaulting to 1000 [ 560.646941][T20046] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3456'. [ 560.715352][T20044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3456'. [ 560.738694][T20046] bridge0: port 3(macvlan0) entered blocking state [ 560.748447][T20046] bridge0: port 3(macvlan0) entered disabled state [ 560.758004][T20046] macvlan0: entered allmulticast mode [ 560.764144][T20046] ip6gretap0: entered allmulticast mode [ 560.777434][T20046] macvlan0: entered promiscuous mode [ 560.783644][T20046] bridge0: port 3(macvlan0) entered blocking state [ 560.791946][T20046] bridge0: port 3(macvlan0) entered forwarding state [ 560.831206][T20043] pimreg: entered allmulticast mode [ 560.862841][T20042] pimreg: left allmulticast mode [ 561.036827][T20054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3459'. [ 561.276041][T20063] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3462'. [ 561.373958][T20068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3464'. [ 561.414032][T20066] xt_TCPMSS: Only works on TCP SYN packets [ 561.421246][T20068] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.570570][T20071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.597312][T20068] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.716035][T20068] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.829075][T20068] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.973990][T20079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3467'. [ 562.049831][ T7097] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.123334][ T7097] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.195937][ T126] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.267910][ T126] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.472733][T20088] pimreg: entered allmulticast mode [ 562.527574][T20081] pimreg: left allmulticast mode [ 562.788102][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3477'. [ 563.081170][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.087822][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.100109][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 563.218468][T20121] veth1_macvtap: left promiscuous mode [ 563.523345][T20095] lo speed is unknown, defaulting to 1000 [ 563.556558][T20135] netlink: 'syz.4.3486': attribute type 4 has an invalid length. [ 563.574505][T20136] netlink: 'syz.4.3486': attribute type 4 has an invalid length. [ 564.550582][T20167] bond1: entered promiscuous mode [ 564.559360][T20167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.571217][T20167] bond1 (unregistering): Released all slaves [ 564.596302][T20175] veth1_to_bond: entered allmulticast mode [ 564.608559][T20172] netlink: 'syz.4.3497': attribute type 8 has an invalid length. [ 564.644808][T20177] veth1_to_bond (unregistering): left allmulticast mode [ 564.659421][T20177] bond0: (slave bond_slave_1): Releasing backup interface [ 564.784528][T20172] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.175811][T20195] __nla_validate_parse: 9 callbacks suppressed [ 565.175831][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'. [ 565.457763][T20174] lo speed is unknown, defaulting to 1000 [ 565.547917][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 565.781486][T20224] netlink: 'syz.4.3512': attribute type 15 has an invalid length. [ 566.279066][T20242] pimreg: entered allmulticast mode [ 566.317424][T20240] pimreg: left allmulticast mode [ 566.487749][T20256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3519'. [ 567.341961][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3523'. [ 567.418164][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'. [ 567.440038][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'. [ 567.465167][T20288] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 567.503142][T20288] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 567.565636][T20292] netlink: 'syz.4.3527': attribute type 8 has an invalid length. [ 567.588857][T20292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3527'. [ 567.640269][T20292] bond0: entered promiscuous mode [ 567.648353][T20292] bond_slave_0: entered promiscuous mode [ 567.662308][T20292] bond_slave_1: entered promiscuous mode [ 567.671124][T20292] gretap0: entered promiscuous mode [ 567.678044][T20300] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 567.679133][T20292] debugfs: 'hsr1' already exists in 'hsr' [ 567.706457][T20292] Cannot create hsr debugfs directory [ 567.712971][T20292] hsr1: entered promiscuous mode [ 567.719094][T20295] bond0: option miimon: invalid value (18446744073709551615) [ 567.742574][T20302] netlink: 155940 bytes leftover after parsing attributes in process `syz.0.3529'. [ 567.759697][T20295] bond0: option miimon: allowed values 0 - 2147483647 [ 567.947398][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3532'. [ 567.964867][T20308] bond0: option min_links: invalid value (18446744072210219584) [ 567.973096][T20308] bond0: option min_links: allowed values 0 - 2147483647 [ 568.111606][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.119785][ C1] lec:lec_tx_timeout: lec0 [ 568.594405][T20326] netlink: 'syz.2.3538': attribute type 1 has an invalid length. [ 568.628901][T20326] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 568.832462][T20339] netlink: 'syz.2.3540': attribute type 64 has an invalid length. [ 568.833177][T20338] netlink: 'syz.2.3540': attribute type 64 has an invalid length. [ 569.201573][T20320] lo speed is unknown, defaulting to 1000 [ 569.259928][T20351] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3544'. [ 569.369489][T20367] IPv6: NLM_F_REPLACE set, but no existing node found! [ 569.454319][T20367] 8021q: VLANs not supported on vxcan1 [ 569.949318][T20385] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 570.783779][T20399] __nla_validate_parse: 1 callbacks suppressed [ 570.783800][T20399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3552'. [ 570.802277][T20397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3551'. [ 571.117544][T20411] syzkaller0: entered promiscuous mode [ 571.131150][T20413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 571.132909][T20411] syzkaller0: entered allmulticast mode [ 571.154935][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3556'. [ 571.272485][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3560'. [ 571.287945][T20421] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.640845][T20428] lo: Caught tx_queue_len zero misconfig [ 571.652064][T20428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3562'. [ 571.829316][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3564'. [ 571.905536][T20436] bond1: entered promiscuous mode [ 571.912123][T20436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.932997][T20448] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3565'. [ 571.967834][T20447] bridge1: entered promiscuous mode [ 571.969164][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'. [ 571.984236][T20447] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 572.074243][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3568'. [ 572.406904][T20459] bridge0: port 3(macvlan0) entered disabled state [ 572.413805][T20459] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.421991][T20459] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.866394][T20459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.886729][T20459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.979493][T20459] vlan2: left promiscuous mode [ 572.986286][T20459] bridge0: left promiscuous mode [ 573.043397][T20487] syzkaller1: entered promiscuous mode [ 573.052422][T20487] syzkaller1: entered allmulticast mode [ 573.062673][T12234] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.085587][T12234] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.198341][T12234] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.209916][T12234] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.360259][T20505] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 573.698466][T20530] xt_hashlimit: size too large, truncated to 1048576 [ 573.753163][T20533] tipc: Failed to remove unknown binding: 66,1,1/0:2151748005/2151748007 [ 573.805844][T20533] tipc: Failed to remove unknown binding: 66,1,1/0:2151748005/2151748007 [ 573.836591][T20526] dummy0: entered promiscuous mode [ 573.916382][ T8431] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.949023][ T8431] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.996137][T20526] dummy0: left promiscuous mode [ 574.068434][ T8431] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.090291][ T8431] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.305585][T20550] sctp: [Deprecated]: syz.1.3592 (pid 20550) Use of int in max_burst socket option deprecated. [ 574.305585][T20550] Use struct sctp_assoc_value instead [ 574.496557][T20564] netlink: 'syz.0.3596': attribute type 16 has an invalid length. [ 574.533979][T20564] netlink: 'syz.0.3596': attribute type 17 has an invalid length. [ 575.225637][T20580] syzkaller1: entered promiscuous mode [ 575.244360][T20580] syzkaller1: entered allmulticast mode [ 575.278697][T20587] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 575.278697][T20587] 3UH5rBn [ 575.672832][T20604] x_tables: ip_tables: osf match: only valid for protocol 6 [ 575.937931][ T9939] hid (null): global environment stack underflow [ 575.999502][T20620] syzkaller0: entered promiscuous mode [ 576.033776][T20620] syzkaller0: entered allmulticast mode [ 576.035680][ T9939] hid-generic 0005:0471:0004.0001: global environment stack underflow [ 576.054158][ T9939] hid-generic 0005:0471:0004.0001: item 0 0 1 11 parsing failed [ 576.075038][ T9939] hid-generic 0005:0471:0004.0001: probe with driver hid-generic failed with error -22 [ 576.189905][T20629] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 576.232897][T20627] netlink: 'syz.2.3608': attribute type 12 has an invalid length. [ 576.434217][T20639] macsec1: entered promiscuous mode [ 576.473188][T20639] erspan0: entered promiscuous mode [ 576.517918][T20639] erspan0: left promiscuous mode [ 576.545452][T20645] tipc: Trying to set illegal importance in message [ 576.875450][T20654] __nla_validate_parse: 6 callbacks suppressed [ 576.875472][T20654] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3611'. [ 577.057304][T20651] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 577.063337][T20651] dvmrp1: linktype set to 804 [ 577.486968][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'. [ 577.929003][T20694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 578.162478][T20653] lo speed is unknown, defaulting to 1000 [ 578.165287][T20707] netlink: 'syz.0.3624': attribute type 10 has an invalid length. [ 578.229583][T20707] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3624'. [ 578.234098][T20709] netlink: 884 bytes leftover after parsing attributes in process `syz.3.3623'. [ 578.521213][T20717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3627'. [ 579.195807][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3634'. [ 579.410968][T20763] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3637'. [ 579.811153][T20781] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3641'. [ 580.191043][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 580.511756][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 580.600576][T20805] netlink: 'syz.0.3646': attribute type 39 has an invalid length. [ 581.425007][T13678] IPVS: starting estimator thread 0... [ 581.502656][T20830] IPVS: sh: FWM 3 0x00000003 - no destination available [ 581.557923][T20838] sctp: [Deprecated]: syz.2.3654 (pid 20838) Use of int in maxseg socket option. [ 581.557923][T20838] Use struct sctp_assoc_value instead [ 581.701709][T20831] IPVS: using max 25 ests per chain, 60000 per kthread [ 581.927896][T20857] netlink: 'syz.1.3659': attribute type 1 has an invalid length. [ 581.943052][T20856] netlink: 'syz.1.3659': attribute type 1 has an invalid length. [ 582.053918][T20857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.417734][T20829] lo speed is unknown, defaulting to 1000 [ 582.861257][T20896] pimreg: entered allmulticast mode [ 582.879129][T20894] pimreg: left allmulticast mode [ 583.155619][T20908] netlink: 'syz.3.3675': attribute type 1 has an invalid length. [ 583.282398][T20908] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.335227][T20913] bond6: (slave dummy0): making interface the new active one [ 583.382028][T20913] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 583.479580][T20888] lo speed is unknown, defaulting to 1000 [ 583.505812][T20919] __nla_validate_parse: 4 callbacks suppressed [ 583.505834][T20919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3678'. [ 583.707017][T20928] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3679'. [ 584.337192][T20946] pimreg: entered allmulticast mode [ 584.360945][T20945] pimreg: left allmulticast mode [ 584.435334][T20948] netlink: 'syz.0.3685': attribute type 1 has an invalid length. [ 584.607523][T20950] bond3: entered promiscuous mode [ 584.614131][T20950] bond3: entered allmulticast mode [ 584.626804][T20950] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.810554][T20959] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 584.825141][T20959] bond2 (unregistering): Released all slaves [ 584.864258][T20967] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 584.889285][T20967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.996038][T20972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3691'. [ 585.046555][T20972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3691'. [ 585.072091][T20972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3691'. [ 585.096346][T20972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3691'. [ 585.216256][T20985] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 585.226559][T20985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.247316][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 585.346661][T20989] pimreg: entered allmulticast mode [ 585.357240][T20988] pimreg: left allmulticast mode [ 585.460996][ T7285] lec:lec_start_xmit: lec0:No lecd attached [ 585.751726][T21009] syzkaller1: entered promiscuous mode [ 585.764626][T21009] syzkaller1: entered allmulticast mode [ 586.245441][T21029] gtp0: entered promiscuous mode [ 586.258560][T21029] gtp0: entered allmulticast mode [ 586.698648][T21044] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3711'. [ 586.730826][T21044] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3711'. [ 586.759786][T21051] netlink: 181268 bytes leftover after parsing attributes in process `syz.3.3711'. [ 587.524651][T21093] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 587.543561][T21097] netlink: 'syz.0.3724': attribute type 1 has an invalid length. [ 587.566507][T21097] : renamed from bond_slave_0 (while UP) [ 587.607906][T21102] netlink: 'syz.0.3724': attribute type 1 has an invalid length. [ 588.057921][T21069] lo speed is unknown, defaulting to 1000 [ 588.337397][T21132] openvswitch: netlink: IP tunnel dst address not specified [ 588.824019][T21144] syzkaller0: entered promiscuous mode [ 588.856781][T21144] syzkaller0: entered allmulticast mode [ 589.172207][T21133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.865806][T21182] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 589.995062][T21189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.064216][T21189] __nla_validate_parse: 5 callbacks suppressed [ 590.064916][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'. [ 590.096188][T21197] netlink: 'syz.0.3742': attribute type 8 has an invalid length. [ 590.130431][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3742'. [ 590.165036][T21197] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.172843][T21197] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.439992][T21200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.597319][T21228] ip6_vti0: entered promiscuous mode [ 590.616406][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'. [ 590.634730][T21226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.669806][T21226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.735298][T21200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.840424][T21200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.927667][T21200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.965981][T21221] lo speed is unknown, defaulting to 1000 [ 590.991932][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 591.000052][ C1] lec:lec_tx_timeout: lec0 [ 591.147281][ T8431] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.205441][ T8445] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.297343][ T8431] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.356250][ T8441] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.909194][T21189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.150859][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3754'. [ 593.197840][T21247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3755'. [ 593.377927][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3756'. [ 593.765414][T21267] netlink: 'syz.3.3761': attribute type 10 has an invalid length. [ 593.944763][T21281] nbd: must specify a device to reconfigure [ 594.008431][T21288] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3767'. [ 594.061149][T21288] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 594.197823][T21295] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 594.265018][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3770'. [ 594.543854][T21314] Bluetooth: MGMT ver 1.23 [ 594.728106][T21329] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3780'. [ 594.753610][T21329] netlink: Conntrack attr has 3 unknown bytes [ 594.894501][T21332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.058913][T21345] netlink: 'syz.1.3786': attribute type 89 has an invalid length. [ 595.079265][T21345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3786'. [ 595.164891][T21354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3786'. [ 595.263351][T21350] pimreg: entered allmulticast mode [ 595.287221][T21346] pimreg: left allmulticast mode [ 595.451185][T21364] ip6t_srh: unknown srh match flags 4000 [ 595.680173][T21370] netem: change failed [ 595.855736][T21374] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 595.936278][ T5969] IPVS: starting estimator thread 0... [ 595.949188][T21377] IPVS: rr: FWM 3 0x00000003 - no destination available [ 595.951352][T21372] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.000285][T21380] netlink: 362 bytes leftover after parsing attributes in process `syz.3.3798'. [ 596.025234][T21380] netlink: 'syz.3.3798': attribute type 39 has an invalid length. [ 596.052141][T21378] IPVS: using max 26 ests per chain, 62400 per kthread [ 596.085027][T21372] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.258448][T21372] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.357225][T21390] syzkaller0: entered promiscuous mode [ 596.372115][T21390] syzkaller0: entered allmulticast mode [ 596.400903][T21372] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.591596][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 596.592124][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 596.753316][ T8444] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.782723][ T8444] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.828313][ T8440] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.888950][ T8440] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.217749][T21420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.607133][T21428] : renamed from dummy0 [ 597.868114][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3821'. [ 597.892440][T21451] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3821'. [ 598.002352][T21445] syzkaller0: entered promiscuous mode [ 598.011596][T21445] syzkaller0: entered allmulticast mode [ 598.228988][T21461] netlink: 'syz.2.3824': attribute type 9 has an invalid length. [ 598.237167][T21461] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3824'. [ 599.391757][T21486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3832'. [ 600.994170][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 602.540084][T21497] ipip0: entered promiscuous mode [ 602.737591][T21521] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 602.875407][T21529] tap0: tun_chr_ioctl cmd 21731 [ 602.936327][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3840'. [ 603.068003][T21541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3844'. [ 603.084362][T21541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3844'. [ 603.095876][T21538] syzkaller0: entered promiscuous mode [ 603.112254][T21538] syzkaller0: entered allmulticast mode [ 603.136096][T21541] syz_tun: entered allmulticast mode [ 603.331755][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3846'. [ 603.350558][T21554] tc_dump_action: action bad kind [ 603.465726][T21539] syz_tun: left allmulticast mode [ 603.551016][T21560] tipc: Started in network mode [ 603.576234][T21560] tipc: Node identity 0aa6516c9da1, cluster identity 4711 [ 603.621522][T21560] tipc: Enabled bearer , priority 0 [ 603.640702][T21560] syzkaller0: entered promiscuous mode [ 603.649071][T21565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3850'. [ 603.660020][T21560] syzkaller0: entered allmulticast mode [ 603.809773][T21559] tipc: Resetting bearer [ 603.891053][T21559] tipc: Disabling bearer [ 604.117165][T21585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3854'. [ 604.152793][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 604.173825][T21585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3854'. [ 604.194026][T21585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3854'. [ 604.211987][T21585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3854'. [ 605.400492][T21585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.465740][T21585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.780774][T21592] bridge_slave_0: left allmulticast mode [ 605.797528][T21592] bridge_slave_0: left promiscuous mode [ 605.807849][T21592] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.835658][T21592] bridge_slave_1: left allmulticast mode [ 605.841385][T21592] bridge_slave_1: left promiscuous mode [ 605.859226][T21592] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.897523][T21592] bond0: (slave bond_slave_0): Releasing backup interface [ 605.909041][T21592] bond0: (slave bond_slave_1): Releasing backup interface [ 605.920293][T21592] team0: Port device team_slave_0 removed [ 605.928981][T21592] team0: Port device team_slave_1 removed [ 605.948081][T21592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.969817][T21592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.991964][T21592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 606.009686][T21610] netlink: 'syz.4.3861': attribute type 2 has an invalid length. [ 606.035503][ T8445] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.096370][T21610] : entered promiscuous mode [ 606.143930][T21615] Cannot find del_set index 0 as target [ 606.151880][ T8445] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.219775][ T8445] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.249831][ T8445] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.355616][T21582] lo speed is unknown, defaulting to 1000 [ 606.453729][T21624] lo speed is unknown, defaulting to 1000 [ 606.484160][T21624] lo speed is unknown, defaulting to 1000 [ 606.560894][T21624] lo speed is unknown, defaulting to 1000 [ 607.160977][T21663] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 607.465540][T21653] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.485523][T21653] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.541688][T21653] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.686236][T21653] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.703442][T21653] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.715307][T21653] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.812836][T21653] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.823291][T21653] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.833965][T21653] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.849954][T21637] lo speed is unknown, defaulting to 1000 [ 608.124272][T21677] __nla_validate_parse: 153 callbacks suppressed [ 608.124297][T21677] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3874'. [ 608.166244][T21667] lo speed is unknown, defaulting to 1000 [ 608.179754][T21624] infiniband sqz0: set down [ 608.193799][T21624] infiniband sqz0: added lo [ 608.227751][T21624] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 608.233221][T13680] lo speed is unknown, defaulting to 1000 [ 608.252434][T21624] infiniband sqz0: Couldn't open port 1 [ 608.253282][T21653] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.271381][T21653] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.286466][T21653] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 608.332766][T21624] RDS/IB: sqz0: added [ 608.336961][T21624] smc: adding ib device sqz0 with port count 1 [ 608.344384][T21624] smc: ib device sqz0 port 1 has no pnetid [ 608.627966][ T9942] lo speed is unknown, defaulting to 1000 [ 608.634433][T21624] lo speed is unknown, defaulting to 1000 [ 608.653945][T21683] tap0: tun_chr_ioctl cmd 2148553947 [ 608.776072][ T8444] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.785089][ T8444] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.811688][ T8444] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 608.866387][ T8444] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.876823][ T8444] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.886512][ T8444] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 608.927727][ T8444] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.936818][ T8444] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 608.945796][ T8444] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 608.963373][T21687] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 608.976144][T21687] syzkaller0: entered promiscuous mode [ 608.982099][T21687] syzkaller0: entered allmulticast mode [ 608.999585][ T8444] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.008115][ T8444] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 609.016490][ T8444] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 609.025772][T21624] lo speed is unknown, defaulting to 1000 [ 609.320160][T21691] netlink: 'syz.3.3878': attribute type 4 has an invalid length. [ 609.331204][T21691] netlink: 'syz.3.3878': attribute type 4 has an invalid length. [ 609.369191][T21624] lo speed is unknown, defaulting to 1000 [ 609.559862][T21698] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3880'. [ 609.586311][T21624] lo speed is unknown, defaulting to 1000 [ 609.762528][T21624] lo speed is unknown, defaulting to 1000 [ 609.792415][T21701] IPVS: set_ctl: invalid protocol: 50 172.20.20.60:20000 [ 610.020428][T21624] lo speed is unknown, defaulting to 1000 [ 610.161263][T21624] lo speed is unknown, defaulting to 1000 [ 610.298952][T21624] lo speed is unknown, defaulting to 1000 [ 610.446135][T21624] lo speed is unknown, defaulting to 1000 [ 610.665297][T21710] syzkaller0: entered promiscuous mode [ 610.670862][T21710] syzkaller0: entered allmulticast mode [ 610.878761][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3885'. [ 611.305022][T21717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3887'. [ 611.518158][T21720] netlink: 'syz.3.3888': attribute type 8 has an invalid length. [ 611.758156][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3890'. [ 611.824552][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 612.226084][T21725] lo speed is unknown, defaulting to 1000 [ 612.235557][T21725] lo speed is unknown, defaulting to 1000 [ 612.567713][T21764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3901'. [ 612.827196][T21755] lo speed is unknown, defaulting to 1000 [ 612.876722][T21755] lo speed is unknown, defaulting to 1000 [ 612.979526][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3904'. [ 612.999359][T21779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3904'. [ 613.144514][ T8445] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.144600][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3904'. [ 613.161687][ T8445] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.175373][T21779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3904'. [ 613.212115][ T8445] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.226240][ T8445] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.340712][T21785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3906'. [ 613.529786][T21790] syzkaller0: entered promiscuous mode [ 613.544939][T21790] syzkaller0: entered allmulticast mode [ 614.213775][T21809] pimreg: entered allmulticast mode [ 614.266838][T21808] pimreg: left allmulticast mode [ 615.466370][T21854] netlink: 'syz.4.3930': attribute type 1 has an invalid length. [ 615.493928][T21854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.636637][T21863] pimreg: entered allmulticast mode [ 615.640456][T21865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3933'. [ 615.658522][T21866] netlink: 'syz.4.3930': attribute type 17 has an invalid length. [ 615.703874][T21857] pimreg: left allmulticast mode [ 616.005292][T21881] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.057758][T21883] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 616.091026][T21890] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3942'. [ 616.130925][T21881] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.226769][T21881] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.299223][T21881] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.337696][T21905] netlink: 'syz.4.3946': attribute type 10 has an invalid length. [ 616.346128][T21905] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3946'. [ 616.367250][T21905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 616.378329][T21905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.392532][T21905] hsr0: entered promiscuous mode [ 616.400291][T21905] bridge0: port 3(hsr0) entered blocking state [ 616.408604][T21905] bridge0: port 3(hsr0) entered disabled state [ 616.416440][T21905] hsr0: entered allmulticast mode [ 616.421799][T21905] hsr_slave_0: entered allmulticast mode [ 616.427643][T21905] hsr_slave_1: entered allmulticast mode [ 616.681357][T12234] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.696319][T12234] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.796877][ T8445] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.858594][ T8446] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.964160][T21924] netlink: 'syz.2.3950': attribute type 21 has an invalid length. [ 619.054270][T21932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3954'. [ 619.945642][T21928] netlink: 'syz.4.3952': attribute type 4 has an invalid length. [ 619.954124][T21930] netlink: 'syz.2.3953': attribute type 3 has an invalid length. [ 619.971641][T21930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.282788][T21949] syzkaller0: entered promiscuous mode [ 620.298636][T21949] syzkaller0: entered allmulticast mode [ 620.310943][T21952] "syz.3.3960" (21952) uses obsolete ecb(arc4) skcipher [ 620.382988][T21960] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 620.398210][T21960] batman_adv: batadv0: Adding interface: ip6gretap1 [ 620.405218][T21960] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.434160][T21960] batman_adv: batadv0: Interface activated: ip6gretap1 [ 620.495436][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3965'. [ 620.525445][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 620.645164][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 620.735641][T21975] xt_hashlimit: size too large, truncated to 1048576 [ 620.850156][T21981] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3969'. [ 620.867647][T21981] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3969'. [ 620.896078][T21981] netlink: 'syz.0.3969': attribute type 4 has an invalid length. [ 620.910814][T21986] sock: sock_set_timeout: `syz.3.3971' (pid 21986) tries to set negative timeout [ 620.949114][T21981] netlink: 'syz.0.3969': attribute type 4 has an invalid length. [ 624.516886][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.529793][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.537647][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 626.592081][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 630.031694][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 630.039719][ C1] lec:lec_tx_timeout: lec0 [ 641.951775][T21992] Bluetooth: hci0: command 0x0c1a tx timeout [ 642.406261][T21995] syzkaller1: entered promiscuous mode [ 642.412293][T21995] syzkaller1: entered allmulticast mode [ 642.434790][T22000] FAULT_INJECTION: forcing a failure. [ 642.434790][T22000] name failslab, interval 1, probability 0, space 0, times 0 [ 642.460108][T22002] wg1 speed is unknown, defaulting to 1000 [ 642.468813][T22002] wg1 speed is unknown, defaulting to 1000 [ 642.475830][T22000] CPU: 1 UID: 0 PID: 22000 Comm: syz.4.3976 Not tainted syzkaller #0 PREEMPT(full) [ 642.475861][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 642.475874][T22000] Call Trace: [ 642.475882][T22000] [ 642.475891][T22000] dump_stack_lvl+0xe8/0x150 [ 642.475930][T22000] should_fail_ex+0x412/0x560 [ 642.475966][T22000] should_failslab+0xa8/0x100 [ 642.475991][T22000] __kmalloc_noprof+0xe8/0x760 [ 642.476021][T22000] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 642.476058][T22000] tomoyo_realpath_from_path+0xe3/0x5d0 [ 642.476091][T22000] ? tomoyo_domain+0xd7/0x130 [ 642.476127][T22000] ? tomoyo_path_number_perm+0x219/0x630 [ 642.476152][T22000] tomoyo_path_number_perm+0x246/0x630 [ 642.476187][T22000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 642.476211][T22000] ? __lock_acquire+0x6b5/0x2cf0 [ 642.476255][T22000] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 642.476302][T22000] ? __fget_files+0x2a/0x420 [ 642.476332][T22000] ? __fget_files+0x2a/0x420 [ 642.476357][T22000] ? __fget_files+0x3a0/0x420 [ 642.476400][T22000] ? __fget_files+0x2a/0x420 [ 642.476431][T22000] security_file_ioctl+0xc3/0x2a0 [ 642.476458][T22000] __se_sys_ioctl+0x47/0x170 [ 642.476479][T22000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.476503][T22000] do_syscall_64+0x15f/0xf80 [ 642.476527][T22000] ? trace_irq_disable+0x3b/0x140 [ 642.476549][T22000] ? clear_bhb_loop+0x40/0x90 [ 642.476583][T22000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.476604][T22000] RIP: 0033:0x7f993ed9c819 [ 642.476625][T22000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.476644][T22000] RSP: 002b:00007f993fbf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.476669][T22000] RAX: ffffffffffffffda RBX: 00007f993f015fa0 RCX: 00007f993ed9c819 [ 642.476684][T22000] RDX: 0000200000000040 RSI: 00000000800454cf RDI: 0000000000000003 [ 642.476697][T22000] RBP: 00007f993fbf9090 R08: 0000000000000000 R09: 0000000000000000 [ 642.476710][T22000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.476722][T22000] R13: 00007f993f016038 R14: 00007f993f015fa0 R15: 00007ffcf438af58 [ 642.476758][T22000] [ 642.476780][T22000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 642.501010][T22002] wg1 speed is unknown, defaulting to 1000 [ 642.678241][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3977'. [ 643.226796][T22023] vlan3: entered promiscuous mode [ 643.302168][T22031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3984'. [ 643.662796][T22013] lo speed is unknown, defaulting to 1000 [ 643.670029][T22013] lo speed is unknown, defaulting to 1000 [ 643.808504][T22045] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 643.961244][T22002] infiniband syz0: set active [ 643.967780][ T9941] wg1 speed is unknown, defaulting to 1000 [ 643.979993][T22002] infiniband syz0: added wg1 [ 644.009938][T22002] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 644.022054][T22002] infiniband syz0: Couldn't open port 1 [ 644.153770][T22002] RDS/IB: syz0: added [ 644.178035][T22002] smc: adding ib device syz0 with port count 1 [ 644.202189][T22002] smc: ib device syz0 port 1 has no pnetid [ 644.357937][ T9941] wg1 speed is unknown, defaulting to 1000 [ 644.370714][T22002] wg1 speed is unknown, defaulting to 1000 [ 644.736891][T22076] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 644.793265][T22076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.803843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.218832][T22002] wg1 speed is unknown, defaulting to 1000 [ 645.246090][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3999'. [ 645.280602][T22100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.326141][T22100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3999'. [ 645.636069][T22108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'. [ 645.689549][T22108] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4001'. [ 645.721934][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 645.744796][T22108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'. [ 645.813795][T22002] wg1 speed is unknown, defaulting to 1000 [ 645.933483][T22112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 646.060887][T22114] netlink: 'syz.1.4002': attribute type 1 has an invalid length. [ 646.090549][T22114] netlink: 189436 bytes leftover after parsing attributes in process `syz.1.4002'. [ 646.128962][T22002] wg1 speed is unknown, defaulting to 1000 [ 646.397965][T22002] wg1 speed is unknown, defaulting to 1000 [ 646.780512][T22120] bond4 (unregistering): Released all slaves [ 646.819845][T22121] bond4 (unregistering): Released all slaves [ 646.871892][T22124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 646.880369][T22002] wg1 speed is unknown, defaulting to 1000 [ 647.391230][T22002] wg1 speed is unknown, defaulting to 1000 [ 647.668111][T22149] syzkaller1: entered promiscuous mode [ 647.691767][T22149] syzkaller1: entered allmulticast mode [ 647.784536][T22002] wg1 speed is unknown, defaulting to 1000 [ 648.046511][T22002] wg1 speed is unknown, defaulting to 1000 [ 648.639878][T22156] __nla_validate_parse: 9 callbacks suppressed [ 648.639898][T22156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4015'. [ 648.727085][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'. [ 648.762765][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'. [ 648.786825][ T7285] lec:lec_start_xmit: lec0:No lecd attached [ 649.272715][T22167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.283643][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4019'. [ 649.294202][T22167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.596814][T22177] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 649.656209][T22177] bond2: (slave lo): Enslaving as an active interface with an up link [ 649.680333][T22177] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 649.723659][T22081] lo speed is unknown, defaulting to 1000 [ 649.743127][T22081] lo speed is unknown, defaulting to 1000 [ 650.256774][T22196] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4027'. [ 650.285458][T22196] 0{X: renamed from gretap0 [ 650.308396][T22196] 0{X: entered allmulticast mode [ 650.331079][T22196] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 650.938200][T22229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.069119][T22218] syzkaller0: entered promiscuous mode [ 651.081688][T22218] syzkaller0: entered allmulticast mode [ 651.373379][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4033'. [ 651.816387][T22252] bond3 (unregistering): Released all slaves [ 651.850914][T22212] lo speed is unknown, defaulting to 1000 [ 651.905763][T22212] lo speed is unknown, defaulting to 1000 [ 652.009256][T13678] IPVS: starting estimator thread 0... [ 652.043697][T22269] netlink: 712 bytes leftover after parsing attributes in process `syz.2.4044'. [ 652.056504][T22269] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.4044'. [ 652.081794][T22269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4044'. [ 652.125623][T22266] IPVS: using max 26 ests per chain, 62400 per kthread [ 652.540614][T22269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.635861][T22275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'. [ 652.672487][T22275] netlink: 'syz.0.4046': attribute type 22 has an invalid length. [ 652.759482][T22288] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 652.868405][T22269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.933661][T22212] wg1 speed is unknown, defaulting to 1000 [ 653.025799][T22275] netlink: 'syz.0.4046': attribute type 22 has an invalid length. [ 653.113987][T22269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.351754][T22269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.416893][T22291] ip6erspan1: entered allmulticast mode [ 653.800627][T22311] __nla_validate_parse: 3 callbacks suppressed [ 653.800659][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 653.871624][T22313] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4055'. [ 654.031544][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 654.039711][ C1] lec:lec_tx_timeout: lec0 [ 654.164999][T12234] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.238504][T12234] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.426577][ T8445] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.622618][ T8441] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.718705][T22326] netlink: 'syz.3.4058': attribute type 29 has an invalid length. [ 654.746931][T22326] netlink: 'syz.3.4058': attribute type 29 has an invalid length. [ 654.768551][T22326] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4058'. [ 654.799500][T22331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4060'. [ 654.830818][T22327] "syz.4.4059" (22327) uses obsolete ecb(arc4) skcipher [ 654.844909][T22334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 655.319547][T22358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4068'. [ 655.361012][T22358] sctp: [Deprecated]: syz.0.4068 (pid 22358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.361012][T22358] Use struct sctp_sack_info instead [ 655.739679][T22372] pimreg: entered allmulticast mode [ 656.246208][T22342] lo speed is unknown, defaulting to 1000 [ 656.275544][T22342] lo speed is unknown, defaulting to 1000 [ 656.290682][T22365] pimreg: left allmulticast mode [ 656.940827][T22342] wg1 speed is unknown, defaulting to 1000 [ 657.198990][T22412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4085'. [ 658.257284][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4092'. [ 658.300877][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4092'. [ 658.339137][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4092'. [ 658.954172][T22422] ipvlan2: entered promiscuous mode [ 659.077632][T22452] __nla_validate_parse: 1 callbacks suppressed [ 659.077656][T22452] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4097'. [ 659.203190][T22456] ieee802154 phy1 wpan1: encryption failed: -126 [ 659.213279][T22456] bridge_slave_0: default FDB implementation only supports local addresses [ 659.450890][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 659.472157][T22466] netlink: 'syz.1.4103': attribute type 1 has an invalid length. [ 659.491317][T22466] netlink: 'syz.1.4103': attribute type 2 has an invalid length. [ 659.501218][T22470] netlink: 540 bytes leftover after parsing attributes in process `syz.4.4101'. [ 659.542589][T22470] netlink: 540 bytes leftover after parsing attributes in process `syz.4.4101'. [ 659.677389][T22448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 659.752036][T22482] xt_hashlimit: size too large, truncated to 1048576 [ 659.879944][T22487] netlink: 'syz.2.4106': attribute type 1 has an invalid length. [ 659.900300][T22487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.962672][T22485] bond7: option primary_reselect: invalid value (4) [ 659.975248][T22485] bond7 (unregistering): Released all slaves [ 660.379546][T22506] syzkaller0: entered promiscuous mode [ 660.391632][T22506] syzkaller0: entered allmulticast mode [ 660.511016][T22521] kthread_run failed with err -4 [ 660.667373][T22537] tipc: Started in network mode [ 660.699603][T22537] tipc: Node identity 010000000000000002, cluster identity 4711 [ 660.885338][T22548] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 660.904979][T22545] syzkaller0: entered promiscuous mode [ 660.936448][T22545] syzkaller0: entered allmulticast mode [ 660.954343][T22545] tipc: Enabled bearer , priority 0 [ 661.012895][T22545] netlink: 'syz.3.4120': attribute type 21 has an invalid length. [ 661.031304][T22545] netlink: 'syz.3.4120': attribute type 22 has an invalid length. [ 661.040215][T22545] netlink: 'syz.3.4120': attribute type 23 has an invalid length. [ 661.053097][T22545] netlink: 'syz.3.4120': attribute type 25 has an invalid length. [ 661.061174][T22545] netlink: 'syz.3.4120': attribute type 26 has an invalid length. [ 661.094103][T22545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4120'. [ 661.197713][T22565] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.4123'. [ 661.212942][T22563] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.4123'. [ 661.280171][T22561] batadv1: entered promiscuous mode [ 661.292199][T22561] batadv1: entered allmulticast mode [ 661.315687][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4125'. [ 661.386348][T22538] tipc: Resetting bearer [ 661.447315][T22538] tipc: Disabling bearer [ 661.784416][T22587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4131'. [ 661.961329][T22601] netlink: 'syz.4.4133': attribute type 29 has an invalid length. [ 663.302172][T22653] netlink: 'syz.0.4144': attribute type 1 has an invalid length. [ 663.331633][T22653] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4144'. [ 663.408572][T22653] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 663.464018][T22653] bond4 (unregistering): Released all slaves [ 663.741190][T22668] .`: renamed from bond0 (while UP) [ 663.929530][T22667] bond3: entered promiscuous mode [ 663.959315][T22667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 664.168532][T22678] team0: Port device dummy0 added [ 664.312625][T22683] bond7: option xmit_hash_policy: invalid value (10) [ 664.348207][T22683] bond7 (unregistering): Released all slaves [ 664.594558][T22699] __nla_validate_parse: 1 callbacks suppressed [ 664.594579][T22699] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4155'. [ 664.602263][T22689] bond0: option xmit_hash_policy: invalid value (10) [ 664.618921][T22689] bond0 (unregistering): Released all slaves [ 664.665121][T22701] validate_nla: 3 callbacks suppressed [ 664.665137][T22701] netlink: 'syz.4.4157': attribute type 2 has an invalid length. [ 664.795605][T22701] l24): entered promiscuous mode [ 664.810877][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4158'. [ 665.020650][T22717] syzkaller0: entered promiscuous mode [ 665.033011][T22717] syzkaller0: entered allmulticast mode [ 665.154851][T22724] x_tables: duplicate underflow at hook 2 [ 665.155078][T22723] xt_hashlimit: max too large, truncated to 1048576 [ 665.207169][T22723] xt_hashlimit: overflow, try lower: 2/0 [ 665.357673][T22731] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4166'. [ 665.600699][T22737] 0{X: left allmulticast mode [ 665.684788][T22737] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 665.739461][ T8441] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.763351][ T8441] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.790767][ T8441] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.816227][ T8441] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.869211][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4171'. [ 666.668646][T22780] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4178'. [ 666.962453][T22784] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 666.976462][T22784] bond0 (unregistering): Released all slaves [ 667.591962][T22815] netlink: 'syz.4.4186': attribute type 2 has an invalid length. [ 667.662840][T22815] netlink: 'syz.4.4186': attribute type 2 has an invalid length. [ 667.685980][T22815] : left promiscuous mode [ 667.775583][T22828] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4186'. [ 667.785841][T22828] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4186'. [ 667.799083][T22828] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4186'. [ 670.545168][T22814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.605008][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 670.814304][T22853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.896517][T22861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4195'. [ 671.013143][T22863] syzkaller1: entered promiscuous mode [ 671.018700][T22863] syzkaller1: entered allmulticast mode [ 671.188512][T22873] netlink: 'syz.4.4203': attribute type 1 has an invalid length. [ 671.204246][T22873] netlink: 'syz.4.4203': attribute type 2 has an invalid length. [ 671.408232][T22885] netlink: 'syz.3.4206': attribute type 11 has an invalid length. [ 671.431732][T22885] netlink: 'syz.3.4206': attribute type 23 has an invalid length. [ 671.451552][T22885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4206'. [ 671.929003][T22895] netlink: 'syz.4.4207': attribute type 8 has an invalid length. [ 672.678113][T22925] netlink: 'syz.0.4213': attribute type 39 has an invalid length. [ 672.741086][T22890] lo speed is unknown, defaulting to 1000 [ 672.772850][T22926] netlink: 'syz.3.4215': attribute type 2 has an invalid length. [ 672.801148][T22890] lo speed is unknown, defaulting to 1000 [ 673.174621][T22925] syz_tun (unregistering): left promiscuous mode [ 673.726975][T22941] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4218'. [ 673.759910][T22937] vti0: entered promiscuous mode [ 680.975249][T22951] netlink: 'syz.1.4220': attribute type 13 has an invalid length. [ 686.124444][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.572300][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.564775][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 692.994279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 693.002388][ C1] lec:lec_tx_timeout: lec0 [ 695.008578][T22890] wg1 speed is unknown, defaulting to 1000 [ 700.756978][T22968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 701.453380][T22968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 701.554147][T22968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 701.736841][T22968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 701.865886][T22968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 707.360973][T22968] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 707.365862][ T5828] Bluetooth: hci2: command tx timeout [ 707.512802][T22968] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 707.997797][T22968] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 708.480755][T21992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 709.309736][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 709.948326][ T5828] Bluetooth: hci2: command tx timeout [ 710.049126][T21992] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 710.455010][T21992] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 711.735610][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 711.869395][T22978] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 712.112645][T22978] Bluetooth: hci2: command tx timeout [ 712.270232][T22978] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 713.420094][ T5844] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 713.438166][ T5844] Bluetooth: hci6: command tx timeout [ 714.196002][ T5844] Bluetooth: hci2: command tx timeout [ 714.389344][T22968] Bluetooth: hci7: Opcode 0x0c39 failed: -110 [ 714.689117][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 715.433966][ T7285] lec:lec_start_xmit: lec0:No lecd attached [ 715.666684][T22968] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 715.762257][T22968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 715.999291][T22968] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 716.124657][T22968] Bluetooth: hci6: command tx timeout [ 716.224833][T22968] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 717.655723][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 718.200616][ T5844] Bluetooth: hci6: command tx timeout [ 719.329257][ T5844] Bluetooth: hci7: command tx timeout [ 719.584348][T22977] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 720.432589][ T5844] Bluetooth: hci6: command tx timeout [ 720.995578][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5560 ms [ 721.003881][ C1] lec:lec_tx_timeout: lec0 [ 721.453732][ T5844] Bluetooth: hci7: command tx timeout [ 721.955572][ T995] dvmrp6: left allmulticast mode [ 722.428294][ T995] batman_adv: batadv0: Interface deactivated: gretap3 [ 723.492969][ T5844] Bluetooth: hci7: command tx timeout [ 724.058549][ C0] sched: DL replenish lagged too much [ 725.567673][ T5844] Bluetooth: hci7: command tx timeout [ 733.240082][T13679] page_pool_release_retry() stalled pool shutdown: id 182, 1 inflight 60 sec [ 747.421698][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.546678][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.462664][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 754.992046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 755.000114][ C1] lec:lec_tx_timeout: lec0 [ 755.078149][T22968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 755.291246][T22968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 756.083726][T22968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 756.327593][T22968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 756.929024][T22968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 761.426626][T22968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 761.518334][T22968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 761.630753][T22968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.165526][T22968] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.324410][T22968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 762.611893][T22968] Bluetooth: hci3: command tx timeout [ 764.725777][ T5844] Bluetooth: hci3: command tx timeout [ 766.083636][T22968] Bluetooth: hci4: command tx timeout [ 767.214704][T22968] Bluetooth: hci3: command tx timeout [ 768.344427][T22968] Bluetooth: hci4: command tx timeout [ 769.346849][T22968] Bluetooth: hci3: command tx timeout [ 770.294256][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 770.374361][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 770.427815][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 770.446520][T21992] Bluetooth: hci4: command tx timeout [ 770.596156][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 770.829494][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 770.938927][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 771.262305][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 771.356361][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 771.715184][T22978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 771.923557][T22978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 772.639497][T22968] Bluetooth: hci4: command tx timeout [ 775.605321][T22968] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 775.815154][T22968] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 776.006588][T22968] Bluetooth: hci8: command tx timeout [ 776.064280][T22968] Bluetooth: hci5: command tx timeout [ 777.757597][T23009] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 778.156637][T22968] Bluetooth: hci5: command tx timeout [ 778.173172][T22968] Bluetooth: hci8: command tx timeout [ 780.250894][T22978] Bluetooth: hci5: command tx timeout [ 780.290663][T22978] Bluetooth: hci8: command tx timeout [ 781.234014][ T7285] lec:lec_start_xmit: lec0:No lecd attached [ 782.286596][T22978] Bluetooth: hci5: command tx timeout [ 782.390963][T22978] Bluetooth: hci8: command tx timeout [ 786.998449][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 787.006648][ C1] lec:lec_tx_timeout: lec0 [ 793.443494][T22990] page_pool_release_retry() stalled pool shutdown: id 182, 1 inflight 121 sec [ 808.971165][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.475509][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.818402][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 816.037701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5210 ms [ 816.045943][ C1] lec:lec_tx_timeout: lec0 [ 831.773963][T22978] Bluetooth: hci2: command 0x0406 tx timeout [ 836.919463][T22968] Bluetooth: hci6: command 0x0406 tx timeout [ 839.035601][T23008] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 839.534751][T23008] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 840.245683][ T5828] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 841.468403][T22978] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 841.724768][ T5828] Bluetooth: hci7: command 0x0406 tx timeout [ 842.061256][ T5828] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 845.914758][ T7285] lec:lec_start_xmit: lec0:No lecd attached [ 847.806102][T23008] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 847.911765][T23008] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 848.025662][T23008] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 848.830776][T23008] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 849.051620][T23008] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 849.809824][ T5828] Bluetooth: hci9: command tx timeout [ 850.992235][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 851.000325][ C1] lec:lec_tx_timeout: lec0 [ 851.865970][T23008] Bluetooth: hci10: command tx timeout [ 851.900375][T23008] Bluetooth: hci9: command tx timeout [ 853.778625][ T5828] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 854.612478][T22968] Bluetooth: hci9: command tx timeout [ 854.617966][T22968] Bluetooth: hci10: command tx timeout [ 855.090735][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 855.112674][T22978] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 855.213097][T22978] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 855.374877][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 855.429006][ T5844] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 855.672757][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 855.733516][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 856.215049][T23008] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 856.275058][T13678] page_pool_release_retry() stalled pool shutdown: id 182, 1 inflight 183 sec [ 856.295024][ T5844] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 856.810526][ T5828] Bluetooth: hci10: command tx timeout [ 856.815568][T23008] Bluetooth: hci9: command tx timeout [ 858.667940][T23008] Bluetooth: hci11: command tx timeout [ 858.909478][ T5844] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 858.956969][ T5844] Bluetooth: hci10: command tx timeout [ 859.485514][T23008] Bluetooth: hci12: command tx timeout [ 860.791272][T23008] Bluetooth: hci11: command tx timeout [ 861.563739][T23008] Bluetooth: hci12: command tx timeout [ 863.457050][T23008] Bluetooth: hci11: command tx timeout [ 863.643073][T23008] Bluetooth: hci12: command tx timeout [ 865.566836][T23008] Bluetooth: hci11: command tx timeout [ 865.713998][T23008] Bluetooth: hci12: command tx timeout [ 870.303194][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.472259][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.705022][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 877.001328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 877.009398][ C1] lec:lec_tx_timeout: lec0 [ 880.526847][ T31] INFO: task kworker/0:2:1578 blocked for more than 143 seconds. [ 880.544788][ T31] Not tainted syzkaller #0 [ 880.549786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.931588][ T31] task:kworker/0:2 state:D stack:23896 pid:1578 tgid:1578 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 881.645571][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 881.663546][ T31] Call Trace: [ 881.666879][ T31] [ 881.669934][ T31] __schedule+0x17b4/0x5680 [ 882.881082][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 882.961768][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 882.966997][ T31] ? __pfx___schedule+0x10/0x10 [ 883.273011][ T31] ? schedule+0x90/0x360 [ 883.373637][ T31] schedule+0x164/0x360 [ 883.377986][ T31] schedule_preempt_disabled+0x13/0x30 [ 883.446285][ T31] __mutex_lock+0x7f5/0x1550 [ 883.461723][ T31] ? __mutex_lock+0x606/0x1550 [ 883.466557][ T31] ? reg_check_chans_work+0xab/0x1090 [ 884.353353][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 884.358477][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 884.505501][ T31] ? look_up_lock_class+0x57/0x110 [ 884.521237][ T31] ? register_lock_class+0x31/0x2e0 [ 884.536988][ T31] ? process_scheduled_works+0xa70/0x1860 [ 884.842453][ T31] reg_check_chans_work+0xab/0x1090 [ 884.847772][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 884.864071][ T31] ? lock_acquire+0x106/0x350 [ 884.868830][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 885.102101][ T31] ? process_scheduled_works+0xa70/0x1860 [ 885.107931][ T31] ? process_scheduled_works+0xa70/0x1860 [ 885.358343][ T31] ? process_scheduled_works+0xa70/0x1860 [ 885.376203][ T31] ? process_scheduled_works+0xa70/0x1860 [ 885.689655][ T31] process_scheduled_works+0xb5d/0x1860 [ 885.745899][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.080236][ T31] ? assign_work+0x3d5/0x5e0 [ 886.265304][ T31] worker_thread+0xa53/0xfc0 [ 886.270055][ T31] kthread+0x388/0x470 [ 886.927433][ T31] ? __pfx_worker_thread+0x10/0x10 [ 887.320879][ T31] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 887.784860][ T31] ret_from_fork+0x514/0xb70 [ 887.789565][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 887.912397][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 887.974194][ T31] ? __switch_to+0xc79/0x1410 [ 887.979079][ T31] ? __pfx_kthread+0x10/0x10 [ 888.510844][ T31] ret_from_fork_asm+0x1a/0x30 [ 888.526405][ T31] [ 888.529578][ T31] INFO: task kworker/u8:9:7095 blocked for more than 151 seconds. [ 889.291534][ T31] Not tainted syzkaller #0 [ 889.296558][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.