last executing test programs: 5m34.791384599s ago: executing program 3 (id=916): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000520099b1000000000000330600"/32], 0x20}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) 5m34.58260621s ago: executing program 3 (id=918): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) write$tun(r0, &(0x7f0000000300)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@icmp={{0xb, 0x4, 0x0, 0x7, 0x40, 0x66, 0x0, 0x2, 0x1, 0x0, @multicast2, @broadcast, {[@timestamp={0x44, 0x10, 0xf9, 0x0, 0x3, [0x9, 0xf0, 0x0]}, @generic={0x7, 0x7, "8de43cc6a0"}]}}, @timestamp={0xd, 0x0, 0x0, 0x81, 0xf, 0x80000000, 0x9, 0x1}}}}, 0x8) 5m34.064921408s ago: executing program 3 (id=924): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m33.812600807s ago: executing program 3 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1001}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x11) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd2b, 0xf0bd2b, 0x25dfdbf7, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 5m33.491367681s ago: executing program 3 (id=931): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0) r6 = socket(0xe54f8bc2fbff92c, 0xa, 0x7) bind$tipc(r6, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x1}}, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000140)) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x7, 0x8, 0x6d16, 0x1000, r0, 0x2, '\x00', 0x0, r7, 0x5, 0x1}, 0x50) 5m33.157183228s ago: executing program 3 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r1, r2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 4m30.976417565s ago: executing program 32 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r1, r2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 2m33.469603887s ago: executing program 0 (id=2295): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0ba154adccc8659762c8d289e50031da0000050036000300000008000200", @ANYRES32=r4, @ANYBLOB="0500350000000000050033000300000005003400"], 0x3c}}, 0x4048081) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000200)='wpan1\x00', 0x4880, &(0x7f0000000240)={@align=0x545, {0x4ea, 0x3, 0x1, 0x8000000000000000}}, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x22766afe}) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000400)={'wg0\x00'}) (async) r10 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000200080000000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080020000000000008001f0000000000"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xd, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="fdffffffffffffffff00000000000000baff000000000000", @ANYRES32=r7, @ANYBLOB="00000000a2f0ffffffffffff00"/28, @ANYRES32=r8, @ANYBLOB="0000000000000000004000000000000000010000000000000000", @ANYRES32=r9, @ANYBLOB="00000000af0900"/28, @ANYRES32=r10, @ANYBLOB="00000000010100"/28, @ANYRES32=r11, @ANYBLOB="000000000200"/28]) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="13364d3b", @ANYRES16=r3, @ANYBLOB="10002bbd7000fddbdf252b0000000a0001007770616e330000000a0001007770616e300000000a0001007770616e330000000c0005000201aaaaaaaaaaaa"], 0x44}}, 0x4000000) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r14) 2m33.068718024s ago: executing program 0 (id=2300): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000180), 0x8, 0xe1, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500009883"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m32.940740512s ago: executing program 0 (id=2302): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000400)=0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x7b}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={r6, 0x1}, &(0x7f0000000400)=0x8) ioctl$XFS_IOC_SET_RESBLKS(r5, 0xc0105872, &(0x7f0000000000)={0x5, 0x80}) 2m31.95758282s ago: executing program 0 (id=2318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd3a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7ff, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 2m31.429139769s ago: executing program 0 (id=2325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1c080}, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 2m31.260987239s ago: executing program 0 (id=2328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2015, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2015, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) (async) 1m26.385340461s ago: executing program 33 (id=2328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2015, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2015, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) (async) 18.737242429s ago: executing program 1 (id=3038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008000200070002", 0x2b}, {&(0x7f0000000300)="5f9cf7b0c7724edbd8c050d1b37d4fb9226ee8454997af836d464a0c3cf88494e558679b087b1825fa76446e0e67711685", 0x31}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000340)=0xabc0, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xffffffbc, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00'}) write$tun(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0008000100000000003d00000046000018775bfa060713460131f133e9ef000000000d00007485", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40003009078001c0e0300050207ffffff000000000002d58838068b91000000"], 0x4e) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r1, @ANYRESHEX, @ANYBLOB="10005a800c0000800400020404000100", @ANYRES64=r9, @ANYRESDEC=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000100711073000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r12, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3239b6fb4fa2f62ecbcd2d108d747a740000001000010400000006000000000000ffff", @ANYRESOCT=r1, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d30000000000000000000000024000e00"/69], 0x74}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f00000022c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f00000011c0)={0x10b4, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x94, 0x45, "244cae9ca05fcdd30f4f53f82f757dd04da27c355d78b6cd3b505dcb929889619ece5051ea133a37a0138a59bd0cb8eb4bb57c5481e5699597a789c4747037f3e5aa06b7164457142a8fd940488d0cd55cffd6177fe1a01d92cd479df87d9679cda3d6ca01db26826ae8f971e22aee91dd1b63174ebd692fff5f131b0def35a24cdf75654b2ae454536c97c7561ea221"}]}, 0x10b4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 16.665721209s ago: executing program 1 (id=3042): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) 16.223008996s ago: executing program 1 (id=3046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x3, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20005084) 14.768429189s ago: executing program 1 (id=3050): socketpair(0x1a, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x178, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x3f, 0x7, 0x1, 0x0, "bc091201bd23795e6f2c023cb5ac930d1088758f3f99f7de6097290a8e923e421bd3cee9110d0394ff06cbb0735907d68933082da116cda8643aba"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_USERDATA={0xad, 0x7, 0x1, 0x0, "d98d4125058f504cf4bc36a12487474ff57a3fdb5f59b60814cd1a6f0e9bc8df745ca60cf61949b45cf9bcd5a93841456a129a18fc5b9f7aeb5ae90faeb6f403fca67680dd87d9930ae233d70abf00cf21e9ebf532eade2abd3a9b1294b848c3f063b5c3d16d01b2aa82f2b832a1cb7a20cea766f8a44bd6ff94b0a43969a7cce1a0145f73350b03b78278775e37e11583bbb1508ffed0edfac1477d69cc67245d79457f3741eeab0d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFT_MSG_NEWRULE={0x11c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xf5, 0x7, 0x1, 0x0, "fa5bcda698f21200c3e9393034ea2da2f6eb4bce75ea4c8f1b301fc33f0abb700ec62b8ee971d2f590ded87e2071e0c422f8dd7a2f88f6415c33151cc45a20dbb87930193f9f48cd31240b04921821639462a69b7590d254edbd42ae1da837f1f5e498cf56ba30e47a5df1f5e2b6c0ff6d8142fef7f946314e4af14dfc762d46c6903d10a94f8bb7e7a1d76b9c4674e328eef747c8753339004051690755182193478e052f7dba521637889ae48deed746dffdf84f6ff48674208947a630e00442fbb36b48e2c64cb9de715e76f6fa60573edb319940556327784e9ad80eec950ee5d26a852d28709b9551b8676b6d1a27"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3b0}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000004c0)={0x6, 'veth1_vlan\x00', {0x8}, 0x7ff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r2, &(0x7f0000000900)={&(0x7f0000000500)=@in6, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/144, 0x90}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/198, 0xc6}], 0x3, &(0x7f0000000880)=""/89, 0x59}, 0x10000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r1) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ee4158ef0c29"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x148, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_TUPLE={0x98, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xd4a8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x719c19eb}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x78}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4011}, 0x801) getpeername$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000f80)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8002}, 0x40000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x38, r10, 0x902, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xb0a3efd491dccb33}, 0x4044000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xa4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xec}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8}, 0x4010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x194, r12, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000001600)={'wpan1\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x8001) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r14, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, r15, 0xdd99df43b5d4fd0a, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xdc, 0x2, 0x6, 0xd01, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x21}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xdb}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004}, 0x8010) 14.730425913s ago: executing program 1 (id=3052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4c0c0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000040000000029000000180001801400020076657468315f746f5f687372"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) pwrite64(r8, &(0x7f0000000240)="e1", 0x1, 0x7fffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) (async) bind$alg(r8, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.298519611s ago: executing program 4 (id=3122): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f00000005c0)={{@_ha_fsid={[0x4, 0xff]}, {0x7f, 0x5, 0x9, 0x2}}, {{[0x5, 0x8, 0x9, 0x7a]}, 0x0, 0x3, 0x6, 0x0, &(0x7f00000004c0)=[{{@_ha_fsid={[0xb9b8, 0x10000]}, {0x9, 0xb42d, 0x8000, 0x4}}, 0xa44, 0x0, '#\x00'}, {{@align=0x10000, {0x8, 0x6, 0xce, 0x6}}, 0x3, 0x0, 'veth\x00'}, {{@align=0x5, {0x5, 0x401, 0x8, 0x6}}, 0xfff, 0x0, '/%@!!\x00'}, {{@align, {0xe949, 0x75, 0x10, 0x8}}, 0x7, 0x0, '\x00'}, {{@_ha_fsid={[0xd6, 0x8]}, {0x4, 0x40, 0x2, 0x4}}, 0x7374, 0x0, 'veth\x00'}, {{@_ha_fsid={[0x2, 0x4b]}, {0x8, 0xfff, 0x1, 0x4}}, 0x9, 0x0, '\x00'}]}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f00000005c0)={{@_ha_fsid={[0x4, 0xff]}, {0x7f, 0x5, 0x9, 0x2}}, {{[0x5, 0x8, 0x9, 0x7a]}, 0x0, 0x3, 0x6, 0x0, &(0x7f00000004c0)=[{{@_ha_fsid={[0xb9b8, 0x10000]}, {0x9, 0xb42d, 0x8000, 0x4}}, 0xa44, 0x0, '#\x00'}, {{@align=0x10000, {0x8, 0x6, 0xce, 0x6}}, 0x3, 0x0, 'veth\x00'}, {{@align=0x5, {0x5, 0x401, 0x8, 0x6}}, 0xfff, 0x0, '/%@!!\x00'}, {{@align, {0xe949, 0x75, 0x10, 0x8}}, 0x7, 0x0, '\x00'}, {{@_ha_fsid={[0xd6, 0x8]}, {0x4, 0x40, 0x2, 0x4}}, 0x7374, 0x0, 'veth\x00'}, {{@_ha_fsid={[0x2, 0x4b]}, {0x8, 0xfff, 0x1, 0x4}}, 0x9, 0x0, '\x00'}]}}) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 4.116301475s ago: executing program 2 (id=3123): r0 = socket(0x9, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000000c0)=0x441, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2, 0x1}}]}}]}, 0x44}}, 0x0) 4.039383168s ago: executing program 2 (id=3124): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x470bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000016}, 0x2000400c) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_DELSETELEM={0x18, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x8, [@typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0x3, 0x5}, {0x3, 0x3}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x2}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x5a, 0x1}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x7}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f0000000200)=""/14, 0xa8, 0xe, 0x1, 0x7, 0x10000, @value=r0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) 3.591441828s ago: executing program 2 (id=3125): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) (async) recvmsg$qrtr(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, 0x0, 0x0, 0x1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="940000000002010400000000000000000200000020000280140001a00800010000000000080002007f00000106000340000200003c0003802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00010000000000240001801400018008000100ac1e000108000200ac1414020c000280050001"], 0x94}}, 0x0) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, &(0x7f0000000040)) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) getpeername(r6, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80) 3.517108282s ago: executing program 4 (id=3126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x4, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.375391729s ago: executing program 2 (id=3128): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) (async) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x13, r0, 0x5aaf3000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1410, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x9080}, 0x800) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}}, 0x4000) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) 2.973789517s ago: executing program 2 (id=3131): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) 2.619464503s ago: executing program 2 (id=3134): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x15c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 2.25442783s ago: executing program 5 (id=3136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x5, @empty, 0x2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2}, &(0x7f0000000080)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003e0007012dbd707f000000250404000004000000"], 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={0x0, 0x7fffffffffffffff, 0x1, [0x7, 0x9, 0x8, 0x9, 0xcf9f], [0x7f, 0x0, 0x7, 0x0, 0x2, 0x9, 0xffffffff, 0x4083a827, 0x200, 0x2, 0x101, 0xacaf, 0x4, 0x8, 0x0, 0x1ae, 0x4, 0x1000000000, 0x0, 0xffff, 0x7, 0x401, 0x5, 0x6, 0x101, 0x10, 0x7, 0x3, 0xd2e6, 0x5, 0x7, 0x6, 0xffffffffffffffff, 0xd52, 0x6, 0x97f0, 0x6, 0x0, 0x9, 0x9f, 0x12000, 0x10001, 0x1, 0xffffffff, 0x7, 0xf0, 0x7, 0xffff, 0x74b6, 0x4, 0x2, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xffffffff, 0x80, 0xffff, 0x7f, 0x9, 0x2, 0x6, 0xa, 0x8, 0x8000000000000001, 0x1ff, 0x4, 0xffff, 0x98d, 0x8, 0x96, 0x400, 0x400000, 0x200, 0x9, 0xfbf3, 0x1, 0x4, 0x0, 0x401, 0x3, 0x8, 0x6, 0x4, 0x1000, 0x2, 0x1, 0xe8, 0x36b, 0x4329, 0x100000001, 0x9, 0x4c77, 0x0, 0x3, 0x7, 0x7fffffff, 0x3, 0x6, 0x8001, 0x80, 0xfffffffffffffffc, 0x40, 0x8, 0x80000001, 0x6, 0x0, 0xa1, 0x0, 0x9, 0xffffffffffffff4c, 0x0, 0x7a7, 0x7, 0xdd, 0x4, 0x8, 0x8000000000000001, 0xaf, 0x9, 0xdb]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000a80)={r8, 0x0, 0x1, [0xd, 0x4, 0x7fffffff, 0xd, 0xd8], [0x9, 0x1, 0x7, 0x400, 0xebcb, 0xa8, 0x4, 0x3, 0x8000, 0xfffffffffffffff7, 0x3, 0xff, 0x7, 0x0, 0x7, 0x4, 0x100000000, 0x8000000000000000, 0xf, 0x2, 0xbd, 0xe36, 0x9, 0xa414, 0x9, 0x200, 0xc0000000000, 0xed, 0x4, 0x9, 0x6, 0xfffffffffffffffe, 0x7a8, 0x3, 0xa, 0x7, 0x0, 0x81, 0x8000000000000000, 0x9, 0x9, 0x8, 0x0, 0x63, 0xffffffff, 0x4a7, 0xffffffffffffffff, 0xd, 0x5, 0x5, 0x66, 0x10001, 0x9, 0x7, 0x3, 0x1, 0x9, 0x1000, 0xffffffff, 0x1000000000000, 0x5080000, 0x2, 0x7, 0x9, 0x1, 0x10001, 0x8000, 0x9, 0x69, 0x3, 0xbd7c, 0x6, 0x6, 0x3, 0x0, 0x2, 0x100000001, 0xab, 0x4, 0x2, 0x7, 0xffffffffffffffff, 0x1, 0xc0d, 0xcc4a, 0xd, 0x7, 0x4, 0x3, 0xa74c, 0xe, 0x8, 0x1, 0x8, 0x9, 0x0, 0x6, 0x4, 0x3, 0x1, 0xd683, 0xfffffffffffff800, 0x16, 0x4, 0x0, 0x8, 0x9, 0xbc9, 0xb, 0x6a81, 0x9cc0000000000000, 0x0, 0xfffe00000000, 0x1, 0xf, 0x4, 0x3ff, 0x2, 0x9, 0x1, 0x5]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, r12, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r10, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(r11) sendmsg$inet(r10, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000044) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r11, 0x660c) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf2c1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x24, r13, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) 2.106311975s ago: executing program 4 (id=3137): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="feab2aa1c207ee867d84f6"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040881) recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000e9ffffffffffff8010f4ff000000009500000700000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 2.014393504s ago: executing program 6 (id=3138): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000180)) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000003c0)={0xfffffffd}, 0x8) r3 = socket(0x10, 0x3, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x38}}, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x9a64, 0x3f, 0xb, 0x2}, {0x9, 0xed, 0x10}, {0x7, 0x5, 0x1a, 0xfffffff9}, {0xda, 0x0, 0x8, 0x8}, {0x8, 0x9, 0x40, 0x14fc}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x0, 0x9}, 0x20) 1.719915356s ago: executing program 6 (id=3139): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@getqdisc={0x28, 0x26, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x10, 0x7}, {0xa, 0x10}, {0xc, 0xffeb}}, [{0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x400dc}, 0x8000) socket$netlink(0x10, 0x3, 0x0) 1.712707176s ago: executing program 5 (id=3140): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$kcm(0x29, 0x2, 0x0) 1.674447294s ago: executing program 4 (id=3141): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r5, 0x11, 0x0, 0x3}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d4e"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x3, @b={0x4, 0x0, 0x1, 0x2, {0x6, "cfe95a449f5f"}, 0x1}}, 0xf) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x20, r9, 0xba9b912503812584, 0x70bd2b, 0x1e1aed36, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x20) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_ADT={0x90, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffff6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa2}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x200000d1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.492301308s ago: executing program 5 (id=3142): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.258265592s ago: executing program 5 (id=3143): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x5, @val=@tcx}, 0x1c) (async) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x5, @val=@tcx}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r0, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0xfffffeff}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0xfffffeff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff03, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000040)) 1.142257036s ago: executing program 6 (id=3144): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r0, 0x2022}], 0x1, 0x9) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') 1.046931269s ago: executing program 6 (id=3145): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 884.290707ms ago: executing program 6 (id=3146): r0 = socket(0x2b, 0x3, 0x0) listen(r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r3], 0x48}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000005000000030000008100000018000000", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="040000000200000001000000090000133887ec000000250000000000"], 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}}, 0x40020) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89b0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="58eced8e46dc3f0ab98607000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r12, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r12, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4064, 0xfe0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, 0x0, 0x0) 754.008755ms ago: executing program 6 (id=3147): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000024c0)={&(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="131f59870d0b23a85d7c3e35c2072d7e8d26780cd10584c948ace8dfa29c1e29fcdd435ce356a53896e3044dd5d51dd40d4da846048c391695d29d9facd61c291fa455d28413e61a", 0x48}, {&(0x7f0000000380)="6e6eb43a49f79fcbea809f3c7ef0fa1188109340e5c4f9637bb115e08dabcba41ac911db90711d7575f72d197452a90573f3a50ec0", 0x35}, {&(0x7f00000003c0)="d76556fb1fe3581b6b2d2b82dc44ea2d6638e0ad1441e6a86297f0c3fc0705fc1b2de6ba7f5f49577c9e4d20d7b665078a2f87a8019907a14d", 0x39}, {&(0x7f0000000400)="905dc560d6e7c8af61b639b565efe69ac7acda181c9e791085809b2f33b3ea2eadda2f845422740e01c584fe37f0ce16d9f4f0c310732c26119503179635d43b37501358e83b2de38411f1ac6fef36486d1b29d5f74f75e6bee50c", 0x5b}], 0x4, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x240}, 0x20040100) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000240)={0x1, 0x2}, 0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x400000) recvmmsg(r0, &(0x7f0000004040)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000001580)=[{&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000140)=""/221, 0xdd}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x3, &(0x7f00000015c0)=""/33, 0x21}}, {{&(0x7f0000001600)=@alg, 0x80, &(0x7f0000001900)=[{&(0x7f0000001680)=""/1, 0x1}, {&(0x7f00000016c0)=""/203, 0xcb}, {&(0x7f00000017c0)=""/255, 0xff}, {&(0x7f00000018c0)=""/7, 0x7}], 0x4, &(0x7f0000001940)=""/206, 0xce}, 0x40}, {{&(0x7f0000001a40)=@un=@abs, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/231, 0xe7}], 0x1, &(0x7f0000001c00)=""/27, 0x1b}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001c40)=""/228, 0xe4}, {&(0x7f0000001d40)=""/193, 0xc1}, {&(0x7f0000001e40)=""/21, 0x15}, {&(0x7f0000001e80)=""/234, 0xea}, {&(0x7f0000001f80)=""/120, 0x78}], 0x5, &(0x7f0000002080)=""/154, 0x9a}, 0x6}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002140)=""/114, 0x72}, {&(0x7f00000021c0)=""/23, 0x17}, {&(0x7f0000002200)=""/34, 0x22}], 0x3, &(0x7f0000002c40)=""/4096, 0x1000}, 0x40}, {{&(0x7f0000003c40)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003cc0)=""/234, 0xea}, {&(0x7f0000003dc0)=""/141, 0x8d}, {&(0x7f0000003e80)=""/83, 0x53}], 0x3, &(0x7f0000003f40)=""/254, 0xfe}, 0x6}], 0x6, 0x40002100, &(0x7f00000041c0)) 552.660204ms ago: executing program 4 (id=3148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3c85127f, 0x8, 0xea9, 0x0, 0x7f130b6d, {0xa, 0x0, 0xfffd, 0x1, 0x3, 0x2}, {0xd, 0x2, 0x1, 0x7, 0x8001, 0x75a}, 0x5, 0x3, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xe49a, 0x0, 0x9d5, 0xdde, 0x7, 0x9, 0x6d77, 0x400, 0xff, 0xb, 0x5, 0x80, 0x38a7, 0xbdc9, 0x4, 0x90, 0x8, 0x8, 0x60, 0x7, 0x480000, 0x80000001, 0x1ff, 0x7ff, 0x1b, 0x7, 0x7, 0x2, 0xfffffff9, 0x8, 0x2, 0xb17, 0x3, 0x800, 0x3, 0xffff, 0xe, 0xe, 0x6, 0x2, 0x9, 0x200, 0xfffff943, 0x1ff, 0x7, 0x2, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x7f, 0x1, 0xb, 0x7fffffff, 0x9, 0x0, 0x10, 0x400, 0x0, 0x7, 0x1, 0x7, 0x3, 0x44, 0x7ff, 0x1, 0x43, 0x986, 0x7, 0xffffac79, 0xfff, 0x1, 0x7fffffff, 0x200, 0x2, 0x5, 0x7, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x2, 0xd, 0x3, 0x6, 0x40000, 0x8, 0x8001, 0x5, 0xab, 0x400, 0x1000, 0x201, 0x1, 0x9, 0xa373, 0x1b5, 0x6, 0x40, 0x8, 0x5, 0xb, 0x5, 0x6, 0x100, 0x100, 0x7, 0x35, 0x356, 0x2, 0xffffffff, 0x9, 0x8000, 0x7, 0xf37a, 0x6, 0x0, 0x9, 0x7, 0x0, 0x6, 0x9, 0x80, 0x71f1, 0x7, 0xffffffff, 0x100, 0x8, 0x89, 0xe, 0x0, 0x9, 0x7, 0x7, 0xb, 0x8, 0xffff, 0xb, 0x8, 0xfff, 0xfd1d, 0x5, 0x4, 0x6, 0x81, 0x0, 0x80, 0xf, 0x5, 0x4, 0x80000001, 0x1, 0x6, 0x6, 0xc35, 0x6, 0x6, 0xb68, 0x7fffffff, 0x4, 0x1a, 0x7fffffff, 0x6, 0x9, 0x385d, 0x6, 0xcce, 0x4, 0x6, 0x80, 0x1000, 0x7, 0xfffffe01, 0x6, 0x7, 0x0, 0x8, 0x3, 0x8000, 0x7, 0x9, 0x2, 0x5, 0xd34, 0x6, 0xf, 0x2, 0xfffffffb, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7, 0x0, 0x800, 0x80000000, 0x5, 0xa5, 0x7, 0x3ff, 0x5, 0x9, 0x5203, 0x8, 0xb, 0xe, 0x27, 0x6, 0x3, 0x4, 0x6, 0x7, 0xb04, 0x2, 0x1, 0x6, 0x7fff, 0x3, 0x0, 0x5, 0x4, 0x4be2, 0x7fff, 0x3, 0x8001, 0x2, 0x7, 0xfffffffd, 0x6, 0x8, 0x5, 0x7, 0x6, 0xead, 0x8, 0xa3, 0x5000000, 0x3, 0x96, 0x2, 0x9, 0x31ca, 0x1, 0xa17f, 0x41cd, 0x7ff, 0x4, 0x4, 0x9ac3, 0x96, 0x0, 0x7d494b8f, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x3, 0x10001, 0x7, 0x3, 0x7, 0x8001, 0x10001, 0x6, 0x7ff, 0x8000, 0x40, 0x9, 0x5, 0x0, 0xffffffd5, 0x4, 0x80000000, 0x3, 0x1, 0xe, 0x2d76, 0x100, 0x0, 0x38b, 0x0, 0x0, 0x26, 0x400, 0x8, 0x6, 0x5c07, 0xb08, 0x800, 0x4, 0x5, 0xcca1, 0x5f, 0x81, 0x70000, 0xcce, 0x3, 0x5, 0x9, 0x1, 0x5, 0x0, 0x5, 0x2, 0xfffffff9, 0x2, 0x7fff, 0x1dd, 0xfff, 0x1, 0x891, 0x4b56, 0x10000, 0x4, 0x0, 0x5, 0x5, 0x4, 0x5, 0xb6, 0x1000, 0x101, 0x8, 0x3, 0xb, 0x60, 0xf, 0x166, 0x3, 0x80000000, 0xc, 0x3, 0x4, 0x0, 0x10000, 0x4, 0xa88, 0x4, 0x10, 0x8, 0x7, 0xe, 0x3, 0x6, 0x5, 0x5c, 0x4, 0x4, 0x6, 0xce15, 0x8, 0x9, 0x15e, 0x4, 0x8, 0x74, 0x3, 0x5, 0x2, 0x887, 0x8, 0x200, 0x1, 0x7, 0x964, 0x1, 0x0, 0x4000c010, 0x0, 0x10000, 0x7, 0xffff, 0x4, 0x1, 0x79367550, 0x0, 0x7, 0x1, 0x7, 0x5f8, 0x5, 0xfff, 0x5, 0x9, 0x565, 0x8, 0x0, 0x8, 0x7, 0x0, 0x8, 0x323, 0x74d5, 0x3, 0x8001, 0xa1ce, 0xfffffffd, 0x8, 0x9, 0x100, 0x1, 0x2b6a, 0xd4c, 0x7, 0xed3c, 0xb, 0x0, 0xfffffffb, 0x5, 0x6, 0x7, 0x90b, 0x3, 0x5, 0xdbe, 0x7, 0x9, 0x7, 0x7, 0x6, 0x8, 0x6, 0x10001, 0xc77f4f7c, 0x1, 0x52, 0x10, 0x9, 0x5, 0x6, 0x0, 0x9, 0xdab, 0x2, 0x0, 0x0, 0x8, 0x2, 0xfffffff9, 0x2, 0xd, 0xcc, 0x4, 0xb8, 0x9, 0xfffffff1, 0x200, 0x7, 0x9, 0x8001, 0x8, 0x7, 0x6, 0xe, 0x6, 0x7fffffff, 0xffff, 0x80000000, 0x5, 0x3, 0x2, 0x6, 0x3, 0x8, 0x8, 0xfffffff8, 0x37e860e9, 0x4, 0x3, 0x3, 0x4, 0x800, 0x1, 0x4, 0x8e04, 0x7, 0x27d7, 0xffffff0c, 0x0, 0x4, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0x1, 0xa360, 0xc448, 0xfffffffa, 0x2, 0xb, 0x1, 0x2, 0x3, 0x0, 0xaf8, 0x84, 0xffff, 0x1, 0x1ec, 0x690, 0x1, 0x3, 0x89, 0x8, 0x4, 0x4, 0x80000001, 0x4, 0x101]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (rerun: 64) close(r8) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff3cd4b8bf", 0xfff2}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0xffffff81, 0x0, 0x8, 0x9215}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 268.209291ms ago: executing program 5 (id=3149): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r1, &(0x7f0000000100)='[--\x00', 0x20000, &(0x7f0000000140)={@align=0x15c904fe, {0x2, 0x80, 0x7, 0x6}}, 0x5, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x5}) connect$rxrpc(r3, &(0x7f0000000280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x24) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c800000010004b0400100000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aaaaaaaaaa000000"], 0x48}}, 0x0) 170.116386ms ago: executing program 1 (id=3056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x4, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@initdev, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xa}, @ETHTOOL_A_COALESCE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x548}, @ETHTOOL_A_COALESCE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xa}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x48080}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x9d, &(0x7f0000000600)=""/157, 0x40f00, 0x9, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xc, 0x7fff, 0x400}, 0x10, 0x2e71e, r4, 0x4, &(0x7f0000000740)=[r4, r4, r4, r4, r4, r4, r4, r4], &(0x7f0000000780)=[{0x5, 0x4, 0x7}, {0x5, 0x3, 0x7, 0xa}, {0x5, 0x2, 0x6, 0x9}, {0x1, 0x4, 0x5, 0xb}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r7, 0x0, 0xbb, 0x1000, &(0x7f0000000880)="dd644ecc8b30e3981483579d2aacb1d25a30d9529772ead3e42ee524013e2ce92ca58a5f35edab8b0b6653be06b74daf019e8c9e5de7ace55506ba8413a12ef56669b0d876fb4fa3fca80ba4e9e02d449cc6a1e526519da2407e9e7ca1c1a36b3e6e060e4f05bc708f9c92d1874b724611a3ea2a7b3860eb6eee2d813acfee05f68ccdd72cbcc360a524142487bf3c4547225e663d1589c5eb6c4fdbadb1ddb5325a5674071180eaa00e367e66454de069fe49c95d87a208c11dec", &(0x7f0000000940)=""/4096, 0x9, 0x0, 0x63, 0xba, &(0x7f0000001940)="1c24f537ae08f16d450d7ec1ed4a5a3536f09bcd62d472a5187d9b66c3b04a521849328c7c256360a0494fa571bb6114ed8c3180b8d5f5cf0388c23908d6cbf34e5d69f05518286110919e8d5a6a6f625a61e8deaa158d1044263052e0b05868dc2134", &(0x7f00000019c0)="bc194b162f8eef9100115829e82397a005b55813fc41046c8e3d2af64d7a7259921fd9e849cfaf06fcca622af3f2f69fee63b4e38720905d43df2739759f863f7d100646ea10bef36012b8ba57b0e17e81cc601e5beecc1a1dd52e4d3699007376c5b777eb3282179e2b5fd5a8b6a9c5bc3f71ca3d353da6b0d152c3208ed0a42100647966559aceb2c748e3f9de120b6e8dcc20e31662fac6ae4550b41b990130b2ac917e59a30597293311c2f19058330f1a566f6709647b43", 0x3, 0x0, 0x80000001}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000140)="4100020001001a", 0x7) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 57.503811ms ago: executing program 5 (id=3150): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r6 = socket(0x2, 0x3, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 0s ago: executing program 4 (id=3151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r1, 0x1000}], 0x1, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESHEX=r3], 0x30}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r6, 0x11, 0x70bd2a, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x884c}, @void, @eth={@empty, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "12e2e7", 0x8d, 0x2f, 0xff, @local, @dev={0xfe, 0x80, '\x00', 0x3c}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "ce12fac5eadec3a4c026f531281251b28defb723cefc17d635477dc2b4c29e12be82e41519b1736f9b80802415ba88fbe547866e95b0ce8ff21c45bdc0ca218f15322323ad91606338"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x2, 0x2, 0x1, 0x2, 0x5, 0xff}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0xa5, 0x1, 0x1, 0x2, 0x3, 0x8}, 0x2, {0x6, 0xffff, 0x1, 0x14, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}, 0xcf) kernel console output (not intermixed with test programs): p" and only use in OUTPUT [ 277.482643][T10474] netlink: 'syz.4.1231': attribute type 9 has an invalid length. [ 277.491906][T10470] Cannot find add_set index 0 as target [ 277.527691][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 277.578770][T10470] Cannot find add_set index 0 as target [ 277.788118][T10491] netlink: 'syz.1.1236': attribute type 3 has an invalid length. [ 277.993304][T10505] ipt_REJECT: TCP_RESET invalid for non-tcp [ 278.021504][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'. [ 278.045207][T10506] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 278.057670][T10506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1239'. [ 278.363404][T10511] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1240'. [ 278.448948][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 278.599286][T10532] netlink: 'syz.5.1246': attribute type 10 has an invalid length. [ 278.679884][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 278.732185][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 278.733062][T10532] veth0_vlan: left promiscuous mode [ 278.840030][T10532] veth0_vlan: entered promiscuous mode [ 278.873297][T10532] team0: Device veth0_vlan failed to register rx_handler [ 279.248010][T10566] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 279.271124][T10565] __nla_validate_parse: 8 callbacks suppressed [ 279.271144][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1252'. [ 279.312711][T10565] veth0_virt_wifi: entered promiscuous mode [ 279.387691][T10571] netlink: 'syz.2.1256': attribute type 64 has an invalid length. [ 279.433346][T10573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.680453][T10575] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 279.745397][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'. [ 279.778855][T10575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.803076][T10587] openvswitch: netlink: IPv4 tun info is not correct [ 279.850504][T10589] openvswitch: netlink: IPv4 tun info is not correct [ 280.045569][T10567] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 280.382011][T10616] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1269'. [ 280.427820][T10616] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 280.458804][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 280.621039][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'. [ 280.633304][T10626] netlink: 'syz.4.1273': attribute type 21 has an invalid length. [ 280.642748][T10626] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.076799][T10645] syzkaller1: entered promiscuous mode [ 281.082713][T10645] syzkaller1: entered allmulticast mode [ 281.147809][T10645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1278'. [ 281.463054][T10658] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1281'. [ 281.553291][T10661] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 281.647726][T10661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.870480][T10676] netlink: 'syz.2.1285': attribute type 2 has an invalid length. [ 281.879145][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1286'. [ 281.889996][T10675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.897302][T10675] IPv6: NLM_F_CREATE should be set when creating new route [ 281.918472][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1286'. [ 281.946176][T10675] netlink: 'syz.5.1286': attribute type 83 has an invalid length. [ 282.018138][T10667] bond5: (slave geneve2): making interface the new active one [ 282.078520][T10667] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 282.425926][T10694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1291'. [ 282.838311][T10709] syzkaller1: entered promiscuous mode [ 282.854290][T10709] syzkaller1: entered allmulticast mode [ 283.477026][T10719] syzkaller0: entered promiscuous mode [ 283.669267][T10728] 8021q: adding VLAN 0 to HW filter on device bond7 [ 283.695878][T10728] bond7 (unregistering): Released all slaves [ 284.157979][T10755] openvswitch: netlink: Unknown nsh attribute 0 [ 285.632038][T10761] __nla_validate_parse: 6 callbacks suppressed [ 285.632059][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 285.648387][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 285.671312][T10761] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1307'. [ 286.819856][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.842686][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.877620][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.907011][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.915030][T10836] xt_CONNSECMARK: invalid mode: 0 [ 286.918294][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.932039][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.942630][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.955231][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.966185][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 286.988848][T10833] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 287.902331][T10868] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1331'. [ 288.314868][T10891] wireguard0: entered promiscuous mode [ 288.324253][T10891] wireguard0: entered allmulticast mode [ 288.349250][T10893] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1337'. [ 288.360815][T10891] team0: Device wireguard0 is of different type [ 289.264698][T10928] netlink: 'syz.0.1351': attribute type 29 has an invalid length. [ 289.273970][T10929] netlink: 'syz.0.1351': attribute type 29 has an invalid length. [ 289.298885][T10928] netlink: 'syz.0.1351': attribute type 29 has an invalid length. [ 289.321321][T10938] netlink: 'syz.2.1352': attribute type 10 has an invalid length. [ 289.330945][T10928] netlink: 'syz.0.1351': attribute type 29 has an invalid length. [ 289.362523][T10928] netlink: 'syz.0.1351': attribute type 29 has an invalid length. [ 289.394583][T10928] netlink: 'syz.0.1351': attribute type 29 has an invalid length. [ 289.468427][T10938] team0: Port device dummy0 added [ 289.484842][T10928] netlink: 'syz.0.1351': attribute type 29 has an invalid length. [ 289.681202][T10952] syzkaller0: entered promiscuous mode [ 290.416484][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 290.871153][T11009] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 290.972826][T11009] bond6: entered promiscuous mode [ 290.978053][T11009] bond6: entered allmulticast mode [ 290.990139][T11009] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.012272][T11009] bridge8: entered promiscuous mode [ 291.018030][T11009] bridge8: entered allmulticast mode [ 291.025200][T11009] bond6: (slave bridge8): Enslaving as a backup interface with an up link [ 291.081484][T11009] bridge9: entered promiscuous mode [ 291.092526][T11009] bridge9: entered allmulticast mode [ 291.099282][T11009] bond6: (slave bridge9): Enslaving as a backup interface with a down link [ 291.261186][ T70] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.298438][ T70] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.773111][T11017] lo speed is unknown, defaulting to 1000 [ 291.799182][T11017] wg1 speed is unknown, defaulting to 1000 [ 291.983131][T11047] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1383'. [ 292.329815][ T5161] block nbd0: Connection timed out, retrying (0/2 alive) [ 292.340955][ T5161] block nbd0: Connection timed out, retrying (0/2 alive) [ 292.349904][ T5161] block nbd0: Connection timed out, retrying (0/2 alive) [ 292.360317][ T5161] block nbd0: Connection timed out, retrying (0/2 alive) [ 292.368413][ T5161] block nbd0: Dead connection, failed to find a fallback [ 292.378788][ T5161] block nbd0: shutting down sockets [ 292.391777][ T5161] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.403221][ T5161] Buffer I/O error on dev nbd0, logical block 3, async page read [ 292.411774][ T5161] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.421923][ T5161] Buffer I/O error on dev nbd0, logical block 2, async page read [ 292.429887][ T5161] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.439592][ T5161] Buffer I/O error on dev nbd0, logical block 1, async page read [ 292.447669][ T5161] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.458684][ T5161] Buffer I/O error on dev nbd0, logical block 0, async page read [ 292.462029][T11065] netlink: 'syz.0.1387': attribute type 3 has an invalid length. [ 292.469480][ T9496] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.485638][ T9496] Buffer I/O error on dev nbd0, logical block 0, async page read [ 292.494774][ T9496] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.502623][T11063] team0: Cannot enslave team device to itself [ 292.504520][ T9496] Buffer I/O error on dev nbd0, logical block 1, async page read [ 292.504611][ T9496] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.504636][ T9496] Buffer I/O error on dev nbd0, logical block 2, async page read [ 292.504683][ T9496] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.504705][ T9496] Buffer I/O error on dev nbd0, logical block 3, async page read [ 292.504757][ T9496] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.504781][ T9496] Buffer I/O error on dev nbd0, logical block 0, async page read [ 292.504820][ T9496] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.581726][ T9496] Buffer I/O error on dev nbd0, logical block 1, async page read [ 292.630106][ T9496] ldm_validate_partition_table(): Disk read failed. [ 292.644204][ T9496] Dev nbd0: unable to read RDB block 0 [ 292.650432][ T9496] nbd0: unable to read partition table [ 292.702855][ T9496] ldm_validate_partition_table(): Disk read failed. [ 292.731821][ T9496] Dev nbd0: unable to read RDB block 0 [ 292.738480][ T9496] nbd0: unable to read partition table [ 293.040310][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1390'. [ 293.057807][T11083] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1390'. [ 293.078241][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'. [ 293.091749][ T1212] IPVS: starting estimator thread 0... [ 293.206498][T11087] IPVS: using max 29 ests per chain, 69600 per kthread [ 293.279771][T11090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 293.409413][T11096] vlan3: entered promiscuous mode [ 293.456716][T11096] bond7: entered promiscuous mode [ 293.466825][T11096] vlan3: entered allmulticast mode [ 293.472652][T11096] bond7: entered allmulticast mode [ 293.536605][T11090] bond7: (slave bridge10): making interface the new active one [ 293.544342][T11090] bridge10: entered promiscuous mode [ 293.549915][T11090] bridge10: entered allmulticast mode [ 293.560424][T11090] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 293.733263][T11108] syzkaller0: entered promiscuous mode [ 293.753471][T11108] syzkaller0: entered allmulticast mode [ 294.205259][T11130] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1401'. [ 294.233573][T11130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.256844][T11130] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1401'. [ 294.292709][T11135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.452553][T11140] sctp: [Deprecated]: syz.1.1404 (pid 11140) Use of int in maxseg socket option. [ 294.452553][T11140] Use struct sctp_assoc_value instead [ 294.580432][T11143] bridge1: entered promiscuous mode [ 294.600128][T11143] bridge1: entered allmulticast mode [ 294.612498][T11143] team0: Port device bridge1 added [ 294.643994][T11147] bridge0: port 3(team0) entered blocking state [ 294.651027][T11147] bridge0: port 3(team0) entered disabled state [ 294.658876][T11147] team0: entered allmulticast mode [ 294.664706][T11147] team_slave_0: entered allmulticast mode [ 294.670613][T11147] team_slave_1: entered allmulticast mode [ 294.686804][T11147] team0: entered promiscuous mode [ 294.705947][T11147] team_slave_0: entered promiscuous mode [ 294.722896][T11147] team_slave_1: entered promiscuous mode [ 294.736354][T11147] bridge0: port 3(team0) entered blocking state [ 294.743428][T11147] bridge0: port 3(team0) entered forwarding state [ 294.895705][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1408'. [ 294.905880][T11157] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1408'. [ 294.946673][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1408'. [ 295.362061][T11167] smc: net device team0 applied user defined pnetid SYZ2 [ 295.397256][T11176] tipc: Enabled bearer , priority 0 [ 295.475735][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1416'. [ 295.602398][T11176] syzkaller0: entered promiscuous mode [ 295.628624][T11176] syzkaller0: entered allmulticast mode [ 295.644603][T11176] tipc: Resetting bearer [ 295.730624][T11170] tipc: Resetting bearer [ 296.456072][T10926] net_ratelimit: 7460 callbacks suppressed [ 296.456097][T10926] Set syz1 is full, maxelem 65536 reached [ 296.895643][T11215] validate_nla: 2 callbacks suppressed [ 296.895664][T11215] netlink: 'syz.1.1425': attribute type 1 has an invalid length. [ 297.624153][T11170] tipc: Disabling bearer [ 297.634949][T11209] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 297.648366][T11215] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 297.738007][T11220] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 298.082295][T11257] __nla_validate_parse: 2 callbacks suppressed [ 298.082327][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 298.198858][T11262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.265874][T11267] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1436'. [ 298.585896][T11272] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 298.600953][T11273] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1439'. [ 298.621373][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1440'. [ 298.978671][T11251] lo speed is unknown, defaulting to 1000 [ 298.989881][T11297] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 298.997036][T11251] wg1 speed is unknown, defaulting to 1000 [ 299.044537][T11297] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1445'. [ 299.076862][T11297] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 299.109902][T11297] netlink: 'syz.2.1445': attribute type 8 has an invalid length. [ 299.140213][T11297] netlink: 582 bytes leftover after parsing attributes in process `syz.2.1445'. [ 299.149977][T11297] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1445'. [ 299.259894][T11300] bond1: entered promiscuous mode [ 299.277933][T11301] macvlan2: entered promiscuous mode [ 299.292113][T11301] macvlan2: entered allmulticast mode [ 299.309507][T11301] bond1: (slave macvlan2): Opening slave failed [ 299.832403][T11339] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 299.945145][T11337] netlink: 'syz.2.1457': attribute type 4 has an invalid length. [ 300.092910][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1462'. [ 300.122589][T11339] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.333239][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1464'. [ 300.411512][T11373] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1464'. [ 300.488348][T11370] macvtap1: entered promiscuous mode [ 300.493978][T11370] vlan0: entered promiscuous mode [ 300.500195][T11370] macvtap1: entered allmulticast mode [ 300.508995][T11370] vlan0: entered allmulticast mode [ 300.516666][T11370] veth0_vlan: entered allmulticast mode [ 301.101771][T11395] netlink: 'syz.2.1472': attribute type 4 has an invalid length. [ 301.111684][T11396] netlink: 'syz.2.1472': attribute type 4 has an invalid length. [ 301.195641][T11404] netlink: 'syz.1.1474': attribute type 2 has an invalid length. [ 302.089085][T11448] vcan0: tx drop: invalid da for name 0x0000400000000000 [ 302.271680][T11454] syzkaller0: entered promiscuous mode [ 302.289789][T11454] syzkaller0: entered allmulticast mode [ 302.488587][ T1212] IPVS: starting estimator thread 0... [ 302.501388][T11430] lo speed is unknown, defaulting to 1000 [ 302.512233][T11430] wg1 speed is unknown, defaulting to 1000 [ 302.583882][T11465] IPVS: using max 26 ests per chain, 62400 per kthread [ 303.170001][T11496] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 303.300734][T11503] __nla_validate_parse: 4 callbacks suppressed [ 303.300757][T11503] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1507'. [ 303.436998][T11459] lo speed is unknown, defaulting to 1000 [ 303.492058][T11459] wg1 speed is unknown, defaulting to 1000 [ 303.522899][T11512] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1509'. [ 304.487594][T11548] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 304.516226][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1520'. [ 304.545597][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1520'. [ 304.567915][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 304.615313][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 304.832394][T11569] xt_hashlimit: invalid interval [ 304.918071][T11572] validate_nla: 2 callbacks suppressed [ 304.918093][T11572] netlink: 'syz.5.1526': attribute type 1 has an invalid length. [ 304.931902][T11572] netlink: 'syz.5.1526': attribute type 3 has an invalid length. [ 304.940068][T11572] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1526'. [ 304.950804][T11572] NCSI netlink: No device for ifindex 813332851 [ 305.066370][T11576] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 305.553901][T11610] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1534'. [ 305.740873][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1538'. [ 305.788401][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 305.904014][ T5831] Bluetooth: hci5: command 0x0405 tx timeout [ 306.449019][T11638] macvtap2: entered promiscuous mode [ 306.491282][T11638] macvtap2: entered allmulticast mode [ 306.538117][T11638] veth1_vlan: entered allmulticast mode [ 306.617397][T11641] macvtap3: entered promiscuous mode [ 306.622971][T11641] macvtap3: entered allmulticast mode [ 308.092915][T11742] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 308.167703][ T1212] IPVS: starting estimator thread 0... [ 308.265010][T11750] IPVS: using max 25 ests per chain, 60000 per kthread [ 308.344957][T11760] __nla_validate_parse: 5 callbacks suppressed [ 308.344973][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 308.354704][T11756] openvswitch: netlink: IPv6 tunnel dst address is zero [ 308.369589][T11759] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1574'. [ 308.379084][T11760] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 308.391357][T11759] netlink: 'syz.2.1574': attribute type 2 has an invalid length. [ 308.419924][T11759] netlink: 'syz.2.1574': attribute type 5 has an invalid length. [ 308.441136][T11760] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1573'. [ 308.456025][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 308.470350][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1575'. [ 309.027002][T11793] syzkaller1: entered promiscuous mode [ 309.032551][T11793] syzkaller1: entered allmulticast mode [ 309.443182][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 309.886542][T11837] batadv_slave_1: entered promiscuous mode [ 310.103609][T11846] syzkaller0: entered promiscuous mode [ 310.158345][T11846] syzkaller0: entered allmulticast mode [ 310.245754][T11816] tipc: Enabling of bearer rejected, failed to enable media [ 310.265113][T11846] netlink: 'syz.0.1593': attribute type 3 has an invalid length. [ 310.291644][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 310.572008][T11830] batadv_slave_1: left promiscuous mode [ 310.879871][T11844] lo speed is unknown, defaulting to 1000 [ 310.916045][T11844] wg1 speed is unknown, defaulting to 1000 [ 311.559585][T11893] netlink: 'syz.5.1602': attribute type 1 has an invalid length. [ 311.586219][T11893] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1602'. [ 311.611510][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1602'. [ 311.701489][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 311.762195][T11905] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 312.601036][T11942] netlink: 'syz.5.1615': attribute type 2 has an invalid length. [ 313.035304][ T170] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 313.067769][ T170] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 313.087253][ T170] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 313.144178][T11978] team0: entered promiscuous mode [ 313.160353][T11978] team_slave_0: entered promiscuous mode [ 313.188883][T11978] team_slave_1: entered promiscuous mode [ 313.224414][T11978] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 313.248199][T11978] team0: Device macvlan3 is already an upper device of the team interface [ 313.314245][T11978] team0: left promiscuous mode [ 313.325453][T11978] team_slave_0: left promiscuous mode [ 313.343387][T11978] team_slave_1: left promiscuous mode [ 313.383846][ T170] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 313.606845][T11983] syzkaller0: entered promiscuous mode [ 313.612569][T11983] syzkaller0: entered allmulticast mode [ 313.822729][T11980] lo speed is unknown, defaulting to 1000 [ 313.830882][T11980] wg1 speed is unknown, defaulting to 1000 [ 314.238972][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 314.386409][ T5146] Bluetooth: hci5: command 0x0405 tx timeout [ 315.601955][T12037] __nla_validate_parse: 4 callbacks suppressed [ 315.601977][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 316.174330][T11993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.607359][T12053] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 316.719367][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1648'. [ 316.762441][T12068] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1648'. [ 316.774402][T12068] netlink: 16110 bytes leftover after parsing attributes in process `syz.5.1648'. [ 316.881156][T12075] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1653'. [ 317.143548][T12097] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 317.174366][T12097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.280036][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.436750][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1660'. [ 317.525077][T12112] netlink: 'syz.1.1661': attribute type 32 has an invalid length. [ 317.534584][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 317.597017][T12112] bond5: Setting coupled_control to off (0) [ 317.617879][T12122] vcan1: entered promiscuous mode [ 317.642533][T12122] vcan1: entered allmulticast mode [ 317.655403][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1661'. [ 317.693309][T12132] IPv6: Can't replace route, no match found [ 317.700930][T12132] IPv6: Can't replace route, no match found [ 317.708352][T12132] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1666'. [ 317.736456][T12137] macvlan0: entered promiscuous mode [ 317.886440][T12143] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1670'. [ 317.999591][T12139] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 318.031018][T12139] bond2 (unregistering): Released all slaves [ 318.360649][T12174] bond2: Invalid ad_actor_system MAC address. [ 318.367569][T12174] bond2: option ad_actor_system: invalid value (1) [ 318.378192][T12174] bond2 (unregistering): Released all slaves [ 320.160487][T12227] lo speed is unknown, defaulting to 1000 [ 320.188560][T12227] wg1 speed is unknown, defaulting to 1000 [ 320.386036][T12256] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 320.406256][T12255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.628144][T12266] __nla_validate_parse: 5 callbacks suppressed [ 320.628164][T12266] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1704'. [ 320.645152][T12266] netlink: 'syz.5.1704': attribute type 1 has an invalid length. [ 320.652986][T12264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1705'. [ 320.674286][T12266] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1704'. [ 320.869038][T12270] syzkaller0: entered promiscuous mode [ 320.875793][T12270] syzkaller0: entered allmulticast mode [ 320.896521][T12270] netlink: 'syz.4.1707': attribute type 2 has an invalid length. [ 320.951554][T12272] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1708'. [ 320.971838][T12272] netlink: 'syz.5.1708': attribute type 9 has an invalid length. [ 320.996149][T12270] : entered promiscuous mode [ 321.175932][T12276] syzkaller1: entered promiscuous mode [ 321.189813][T12276] syzkaller1: entered allmulticast mode [ 321.652526][T12299] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1713'. [ 322.137808][T12308] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1718'. [ 322.150522][T12288] lo speed is unknown, defaulting to 1000 [ 322.266464][T12288] wg1 speed is unknown, defaulting to 1000 [ 322.654166][T12331] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1723'. [ 323.250883][T12362] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 323.281907][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1730'. [ 323.371191][T12364] syzkaller0: entered promiscuous mode [ 323.383779][T12364] syzkaller0: entered allmulticast mode [ 323.844207][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 323.940199][T12389] netlink: 212236 bytes leftover after parsing attributes in process `syz.2.1735'. [ 324.652150][T12419] macvlan0: entered promiscuous mode [ 324.802315][T12433] netlink: 'syz.1.1742': attribute type 11 has an invalid length. [ 324.843691][T12433] netlink: 'syz.1.1742': attribute type 11 has an invalid length. [ 325.309109][T12461] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.703994][T12478] __nla_validate_parse: 2 callbacks suppressed [ 325.704016][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1752'. [ 325.935934][T12495] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1754'. [ 326.006451][T12493] syzkaller1: entered promiscuous mode [ 326.012007][T12493] syzkaller1: entered allmulticast mode [ 326.157494][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'. [ 326.771009][T12544] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1768'. [ 326.838918][T12548] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1770'. [ 326.881034][T12547] netlink: 'syz.5.1769': attribute type 4 has an invalid length. [ 326.912742][T12547] syzkaller1: entered promiscuous mode [ 326.934348][T12547] syzkaller1: entered allmulticast mode [ 327.000362][T12547] syzkaller0: entered promiscuous mode [ 327.013710][T12547] syzkaller0: entered allmulticast mode [ 327.097325][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1774'. [ 327.107963][T12563] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1774'. [ 327.137328][T12547] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1769'. [ 327.339860][T12570] dvmrp1: entered allmulticast mode [ 327.544162][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 327.784521][T12596] netlink: 'syz.4.1782': attribute type 2 has an invalid length. [ 327.913977][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 328.093281][T12618] bond3: entered promiscuous mode [ 328.128711][T12618] bond3: entered allmulticast mode [ 328.155614][T12616] veth0_macvtap: entered promiscuous mode [ 328.162622][T12606] xt_ecn: cannot match TCP bits for non-tcp packets [ 328.181977][T12616] macvtap1: entered allmulticast mode [ 328.188596][T12616] veth0_macvtap: entered allmulticast mode [ 328.672773][T12642] bond10: Invalid ad_actor_system MAC address. [ 328.721380][T12642] bond10: option ad_actor_system: invalid value (1) [ 328.774931][T12642] bond10 (unregistering): Released all slaves [ 328.809720][T12648] netlink: 'syz.4.1792': attribute type 2 has an invalid length. [ 328.945341][T12650] : entered promiscuous mode [ 329.006144][T12671] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 329.026569][T12673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.226396][T12680] ip6t_srh: unknown srh invflags 4000 [ 329.638393][T12701] xt_ipcomp: unknown flags 1D [ 329.919604][T12719] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 329.942245][T12719] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 330.076391][ T5831] Bluetooth: hci5: command 0x0405 tx timeout [ 330.279735][T12746] netem: incorrect ge model size [ 330.322967][T12746] netem: change failed [ 330.491661][T12757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.517752][T12761] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 330.527960][T12761] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 330.535951][T12757] bond0: Error: Cannot enslave bond to itself. [ 330.605890][T12767] batadv_slave_0: Caught tx_queue_len zero misconfig [ 330.684953][T12767] syzkaller0: entered promiscuous mode [ 330.694287][T12767] syzkaller0: entered allmulticast mode [ 330.746312][T12772] __nla_validate_parse: 9 callbacks suppressed [ 330.746336][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1827'. [ 331.041056][T12779] netlink: 'syz.2.1831': attribute type 1 has an invalid length. [ 331.049292][T12779] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1831'. [ 331.138075][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 331.167905][T12791] macvlan0: left promiscuous mode [ 331.207965][T12791] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 331.229517][T12791] netlink: 'syz.1.1835': attribute type 2 has an invalid length. [ 331.750918][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'. [ 331.761298][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'. [ 331.971892][T12846] SET target dimension over the limit! [ 332.047255][T12850] netlink: 'syz.2.1849': attribute type 15 has an invalid length. [ 332.221868][T12861] veth0_to_team: Caught tx_queue_len zero misconfig [ 332.265349][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1852'. [ 332.490727][T12866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 332.521475][T12866] bond5 (unregistering): Released all slaves [ 332.671998][T12884] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 332.811520][T12840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.819060][T12840] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 332.881565][T12840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.894074][T12840] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 332.920463][T12840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.955235][T12840] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 333.040736][T12840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.058580][T12840] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 333.282808][T12900] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 333.390110][T12840] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 333.413725][T12840] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 333.554124][T12886] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 334.032280][T12935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.141881][T12940] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 334.234227][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 334.430562][T12961] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1875'. [ 334.646021][T12968] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.032359][T12955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.392698][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 335.866646][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 335.967284][T13032] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 336.112652][T13038] tipc: New replicast peer: 255.255.255.255 [ 336.125529][T13038] tipc: Enabled bearer , priority 10 [ 336.444940][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 336.458377][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 336.471770][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 336.494338][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 336.513757][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 336.615997][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 336.654699][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 336.940581][T13077] netlink: 'syz.2.1895': attribute type 16 has an invalid length. [ 336.950225][T13077] netlink: 'syz.2.1895': attribute type 17 has an invalid length. [ 336.995020][T13079] xt_TCPMSS: Only works on TCP SYN packets [ 337.125736][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.133009][T13077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.140676][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.147920][T13077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.276558][T13077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.301589][ T5911] lo speed is unknown, defaulting to 1000 [ 337.311795][ T5911] syz0: Port: 1 Link ACTIVE [ 337.334296][T13094] ipt_REJECT: TCP_RESET invalid for non-tcp [ 337.354102][T13094] veth0: entered promiscuous mode [ 337.369682][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 337.609931][T13102] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.817627][T13111] netlink: 'syz.0.1906': attribute type 24 has an invalid length. [ 337.866722][T13111] netlink: 'syz.0.1906': attribute type 2 has an invalid length. [ 337.906471][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 337.988272][T13111] sctp: [Deprecated]: syz.0.1906 (pid 13111) Use of int in max_burst socket option. [ 337.988272][T13111] Use struct sctp_assoc_value instead [ 338.059275][T13089] veth0: left promiscuous mode [ 338.152130][T13122] gre0: entered promiscuous mode [ 338.185830][T13126] xt_hashlimit: size too large, truncated to 1048576 [ 338.199802][T13124] netlink: 'syz.1.1909': attribute type 1 has an invalid length. [ 338.203791][T13122] gre0: entered allmulticast mode [ 338.315007][T13124] bond6: entered promiscuous mode [ 338.324089][T13124] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.418877][T13136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.585953][T13147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.799418][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.095687][T13219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.129607][T13219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.187782][T13219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.217269][T13219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.326027][T13234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.359513][T13230] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 340.374731][T13229] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 340.448194][T13238] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 340.509215][T13238] bond7: (slave bridge11): making interface the new active one [ 340.517858][T13238] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 340.893171][T13253] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 341.029408][T13264] netlink: 'syz.0.1946': attribute type 1 has an invalid length. [ 341.076405][T13266] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 341.454086][T13283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.480518][T13296] __nla_validate_parse: 7 callbacks suppressed [ 341.480538][T13296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1956'. [ 341.857070][T13316] syzkaller0: entered promiscuous mode [ 341.862771][T13316] syzkaller0: entered allmulticast mode [ 341.909608][T13316] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1963'. [ 341.956734][T13316] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 341.993289][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1966'. [ 342.003204][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1966'. [ 342.027175][T13323] netlink: 'syz.0.1965': attribute type 29 has an invalid length. [ 342.037350][T13316] netlink: 'syz.4.1963': attribute type 7 has an invalid length. [ 342.073755][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 342.357559][T13337] netlink: 'syz.0.1970': attribute type 3 has an invalid length. [ 342.502653][T13346] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1973'. [ 342.623044][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1975'. [ 342.729628][T13350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1975'. [ 342.997600][T13375] netlink: 'syz.5.1979': attribute type 178 has an invalid length. [ 343.199122][T13387] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1983'. [ 343.252419][T13389] syzkaller0: entered promiscuous mode [ 343.269550][T13389] syzkaller0: entered allmulticast mode [ 343.550783][T13396] rdma_op ffff888043e0c9f0 conn xmit_rdma 0000000000000000 [ 343.559453][T13400] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 343.686725][T13414] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1994'. [ 343.805567][T13414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.859748][T13414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.881921][T13414] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 343.904911][T13414] bond0 (unregistering): Released all slaves [ 344.138668][T13436] netlink: 'syz.0.2000': attribute type 9 has an invalid length. [ 344.192542][T13442] IPVS: length: 132 != 24 [ 344.202723][T13436] netlink: 'syz.0.2000': attribute type 10 has an invalid length. [ 344.220996][T13436] netlink: 'syz.0.2000': attribute type 10 has an invalid length. [ 344.231075][T13444] IPVS: length: 132 != 24 [ 344.237304][T13436] batadv0: entered promiscuous mode [ 344.249959][T13436] batadv0: entered allmulticast mode [ 344.266851][T13436] bridge0: port 3(batadv0) entered blocking state [ 344.291855][T13436] bridge0: port 3(batadv0) entered disabled state [ 344.318912][T13436] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 344.654903][T13469] xt_hashlimit: size too large, truncated to 1048576 [ 344.733197][T13475] netlink: 'syz.1.2012': attribute type 3 has an invalid length. [ 345.051663][T13482] netlink: 'syz.1.2014': attribute type 13 has an invalid length. [ 346.705603][T13482] macvtap0: entered allmulticast mode [ 346.711672][T13482] macvtap0: refused to change device tx_queue_len [ 346.727309][T13496] netlink: 'syz.4.2010': attribute type 1 has an invalid length. [ 346.736659][T13496] __nla_validate_parse: 5 callbacks suppressed [ 346.736686][T13496] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2010'. [ 346.753160][T13496] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2010'. [ 346.762487][T13496] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2010'. [ 346.904885][T13519] TCP: TCP_TX_DELAY enabled [ 346.976781][T13521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2019'. [ 347.214616][T13540] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2025'. [ 347.657131][T13555] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2028'. [ 348.047999][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.062870][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.167538][T13559] vlan0: left allmulticast mode [ 348.172447][T13559] veth0_vlan: left allmulticast mode [ 348.178095][T13559] vlan0: left promiscuous mode [ 348.187054][T13559] macvtap1: left promiscuous mode [ 348.192133][T13559] macvtap1: left allmulticast mode [ 348.200929][T13559] bond1: left promiscuous mode [ 348.208891][T13559] bond2: left promiscuous mode [ 348.213916][T13559] bridge2: left promiscuous mode [ 348.221406][T13559] bond3: left promiscuous mode [ 348.226359][T13559] bridge4: left promiscuous mode [ 348.262298][T13559] bond6: left promiscuous mode [ 348.268326][T13559] bridge8: left promiscuous mode [ 348.273545][T13559] bridge9: left promiscuous mode [ 348.278986][T13559] bond6: left allmulticast mode [ 348.286537][T13559] bridge8: left allmulticast mode [ 348.291603][T13559] bridge9: left allmulticast mode [ 348.305851][T13559] vlan3: left promiscuous mode [ 348.310647][T13559] bond7: left promiscuous mode [ 348.315898][T13559] bridge10: left promiscuous mode [ 348.321292][T13559] vlan3: left allmulticast mode [ 348.326823][T13559] bond7: left allmulticast mode [ 348.331710][T13559] bridge10: left allmulticast mode [ 348.375759][T13562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.434217][T13568] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 348.457437][T13568] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 348.486475][T13573] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2033'. [ 348.495981][ T170] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.510724][ T170] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.532091][T13573] netlink: 'syz.2.2033': attribute type 2 has an invalid length. [ 348.541630][ T170] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.565521][ T170] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.605173][ T170] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.632131][ T170] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.688558][T13585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2036'. [ 348.712077][T13587] netlink: 'syz.0.2037': attribute type 1 has an invalid length. [ 348.852892][T13587] bond8: entered promiscuous mode [ 348.882995][T13587] 8021q: adding VLAN 0 to HW filter on device bond8 [ 348.906248][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2039'. [ 348.917664][T13595] veth0: Caught tx_queue_len zero misconfig [ 348.927901][T13599] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 348.929566][T13595] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 348.946525][T13595] netlink: 'syz.2.2038': attribute type 3 has an invalid length. [ 348.957111][T13595] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2038'. [ 348.989474][T13599] bond8: entered promiscuous mode [ 348.996000][T13599] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.002781][T13595] NCSI netlink: No device for ifindex 813332851 [ 349.131697][T13599] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.180203][T13599] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 349.215210][T13599] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 349.238550][T13599] bond8: (slave ip6gre1): making interface the new active one [ 349.295296][T13599] ip6gre1: entered promiscuous mode [ 349.311809][T13599] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 349.416187][T13615] netlink: set zone limit has 4 unknown bytes [ 349.428956][T13617] syzkaller0: entered promiscuous mode [ 349.441140][T13617] syzkaller0: entered allmulticast mode [ 349.455009][T13619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.501227][T13614] syzkaller1: entered allmulticast mode [ 349.526306][ T5884] lo speed is unknown, defaulting to 1000 [ 349.532102][ T5884] syz0: Port: 1 Link DOWN [ 349.692566][T13633] netlink: zone id is out of range [ 349.719089][T13633] netlink: zone id is out of range [ 349.842642][T13637] netlink: 'syz.2.2047': attribute type 3 has an invalid length. [ 349.907697][T13637] ieee802154 phy1 wpan1: encryption failed: -22 [ 351.617115][T13671] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:0 [ 351.781137][T13679] macvtap1: entered promiscuous mode [ 351.791851][T13679] macvtap1: entered allmulticast mode [ 351.800798][T13679] veth1_vlan: entered allmulticast mode [ 351.809209][T13681] __nla_validate_parse: 4 callbacks suppressed [ 351.809228][T13681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2060'. [ 351.821986][T13679] macvtap2: entered promiscuous mode [ 351.854000][T13679] macvtap2: entered allmulticast mode [ 352.000791][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2063'. [ 352.222829][T13699] pim6reg: entered allmulticast mode [ 352.495863][T13716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.513827][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2070'. [ 352.514970][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2070'. [ 352.740926][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 352.780025][T13729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.821319][T13736] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.2078'. [ 352.859001][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2076'. [ 352.886832][T13739] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2079'. [ 353.056990][T13749] netlink: 'syz.1.2081': attribute type 1 has an invalid length. [ 353.564178][T13781] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2087'. [ 353.955866][T13783] ipt_REJECT: TCP_RESET invalid for non-tcp [ 354.071777][T13802] netlink: 'syz.0.2092': attribute type 8 has an invalid length. [ 354.092339][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 354.524276][ T5491] veth0_macvtap: left promiscuous mode [ 354.564418][T13825] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 355.131179][T13865] x_tables: unsorted underflow at hook 2 [ 356.356473][T13932] "syz.2.2129" (13932) uses obsolete ecb(arc4) skcipher [ 356.452549][T13932] veth0_macvtap: entered promiscuous mode [ 356.469989][T13932] macvtap2: entered allmulticast mode [ 356.514447][T13932] veth0_macvtap: entered allmulticast mode [ 356.665297][T13940] ip6tnl1: entered allmulticast mode [ 356.879004][T13951] __nla_validate_parse: 4 callbacks suppressed [ 356.879024][T13951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2133'. [ 356.908993][T13951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2133'. [ 357.020418][T13934] netlink: 'syz.5.2127': attribute type 4 has an invalid length. [ 357.023827][T13955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2134'. [ 357.197731][T13957] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 357.281085][T13957] bond0 (unregistering): Released all slaves [ 357.338266][T13970] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2136'. [ 357.869955][T13985] netlink: 'syz.5.2140': attribute type 10 has an invalid length. [ 358.011800][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2141'. [ 358.056745][T13992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2141'. [ 358.198028][T13992] sctp: [Deprecated]: syz.0.2141 (pid 13992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.198028][T13992] Use struct sctp_sack_info instead [ 358.424301][T14006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.468135][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 359.323067][T14042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2156'. [ 359.383370][T14045] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 359.430676][T14045] bond10: entered promiscuous mode [ 359.438143][T14045] 8021q: adding VLAN 0 to HW filter on device bond10 [ 359.496619][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2159'. [ 359.508112][T14044] 8021q: adding VLAN 0 to HW filter on device bond10 [ 359.518524][T14044] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 359.535168][T14044] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 359.548899][T14044] bond10: (slave vti0): making interface the new active one [ 359.556673][T14044] vti0: entered promiscuous mode [ 359.563479][T14044] bond10: (slave vti0): Enslaving as an active interface with an up link [ 359.573257][T14009] lo speed is unknown, defaulting to 1000 [ 359.584033][T14009] wg1 speed is unknown, defaulting to 1000 [ 359.665919][T14052] netlink: 'syz.5.2159': attribute type 2 has an invalid length. [ 359.714287][T14052] netlink: 'syz.5.2159': attribute type 11 has an invalid length. [ 359.739837][T14052] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2159'. [ 359.929011][T14056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.838514][T14088] syzkaller0: entered promiscuous mode [ 360.844307][T14088] syzkaller0: entered allmulticast mode [ 361.263470][T14102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.292708][T14107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.867157][T14127] netlink: 'syz.2.2188': attribute type 8 has an invalid length. [ 361.897483][T14127] __nla_validate_parse: 7 callbacks suppressed [ 361.897503][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2188'. [ 362.029089][T14144] netlink: 'syz.5.2191': attribute type 1 has an invalid length. [ 362.132472][T14144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.142006][T14147] syzkaller0: entered promiscuous mode [ 362.147978][T14147] syzkaller0: entered allmulticast mode [ 362.161120][T14150] bond2: entered allmulticast mode [ 362.197580][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2191'. [ 362.207290][T14153] bond2: (slave ip6gretap1): making interface the new active one [ 362.217536][T14153] ip6gretap1: entered allmulticast mode [ 362.227208][T14153] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 362.308886][T14155] bond0 (unregistering): Released all slaves [ 362.372639][T14165] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 362.386240][T14167] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2197'. [ 362.505085][T14171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.534459][T14175] netlink: 'syz.5.2199': attribute type 30 has an invalid length. [ 362.724396][T14189] vcan1: entered promiscuous mode [ 362.729514][T14189] vcan1: entered allmulticast mode [ 363.205865][T14198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.429871][T14224] syzkaller0: entered promiscuous mode [ 363.443854][T14224] syzkaller0: entered allmulticast mode [ 363.466934][T14230] netlink: 'syz.0.2215': attribute type 4 has an invalid length. [ 363.483754][T14230] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2215'. [ 363.512274][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 363.606293][T14239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2219'. [ 363.691379][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2221'. [ 363.761563][T14244] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2221'. [ 363.836024][T14251] sctp: [Deprecated]: syz.4.2222 (pid 14251) Use of int in maxseg socket option. [ 363.836024][T14251] Use struct sctp_assoc_value instead [ 365.012159][T14243] team0: left allmulticast mode [ 365.018225][T14243] team_slave_0: left allmulticast mode [ 365.031379][T14243] team_slave_1: left allmulticast mode [ 365.044838][T14243] team0: left promiscuous mode [ 365.049765][T14243] team_slave_0: left promiscuous mode [ 365.068400][T14243] team_slave_1: left promiscuous mode [ 365.075731][T14243] bridge0: port 3(team0) entered disabled state [ 365.088245][T14243] bridge_slave_1: left allmulticast mode [ 365.095786][T14243] bridge_slave_1: left promiscuous mode [ 365.103778][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.125740][T14243] bridge_slave_0: left allmulticast mode [ 365.131444][T14243] bridge_slave_0: left promiscuous mode [ 365.142436][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.237329][T14245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2219'. [ 365.247110][T14247] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2221'. [ 365.694126][T14277] tipc: Enabling of bearer rejected, already enabled [ 366.112483][T14309] bond0: Device is already in use. [ 366.365703][T14324] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 366.522027][T14333] netlink: 'syz.4.2253': attribute type 1 has an invalid length. [ 366.609697][T14333] bond0: entered promiscuous mode [ 366.616674][T14333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.632037][T14348] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 366.685663][T14333] bond0: entered allmulticast mode [ 366.886846][T14346] bond0: (slave bridge12): making interface the new active one [ 366.914380][T14346] bridge12: entered promiscuous mode [ 366.925726][T14346] bridge12: entered allmulticast mode [ 366.931781][T14364] __nla_validate_parse: 8 callbacks suppressed [ 366.931801][T14364] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2256'. [ 366.958299][T14346] bond0: (slave bridge12): Enslaving as an active interface with an up link [ 367.140027][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 367.170282][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 367.208508][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.208601][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 367.228250][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.244018][T14377] sock: sock_set_timeout: `syz.4.2263' (pid 14377) tries to set negative timeout [ 367.268552][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.296086][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.298887][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 367.391602][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 367.777259][T14406] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 368.095346][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2275'. [ 368.155087][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2277'. [ 368.262429][T14435] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2275'. [ 368.365792][T14435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2275'. [ 368.480682][T14451] Cannot find del_set index 2 as target [ 368.512184][T14452] kthread_run failed with err -4 [ 368.737228][T14467] netlink: 'syz.1.2284': attribute type 11 has an invalid length. [ 369.160606][T14486] syz.0.2290 (14486) used greatest stack depth: 17472 bytes left [ 369.181617][T14499] xt_SECMARK: invalid mode: 9 [ 370.450346][T14574] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 371.656399][T14650] netlink: 'syz.4.2330': attribute type 10 has an invalid length. [ 371.714025][T14643] macvlan2: entered allmulticast mode [ 371.724764][T14643] hsr0: entered allmulticast mode [ 371.729895][T14643] hsr_slave_0: entered allmulticast mode [ 371.735781][T14643] hsr_slave_1: entered allmulticast mode [ 372.180318][T14672] __nla_validate_parse: 33 callbacks suppressed [ 372.180343][T14672] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2337'. [ 372.400160][T14682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.400729][T14679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2339'. [ 378.709100][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.323194][T14692] xt_hashlimit: size too large, truncated to 1048576 [ 436.487159][T14700] delete_channel: no stack [ 436.515767][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 436.526771][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 436.536975][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 436.546759][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 436.560712][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 436.619785][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 436.633121][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 436.643112][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 436.651243][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 436.660016][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 437.019151][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 437.400766][T14743] : entered promiscuous mode [ 437.660836][T14704] lo speed is unknown, defaulting to 1000 [ 437.669109][T14704] wg1 speed is unknown, defaulting to 1000 [ 438.025449][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 438.050178][T14785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2368'. [ 438.066999][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 438.092918][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 438.241200][T14704] chnl_net:caif_netlink_parms(): no params data found [ 438.475355][T14800] macsec2: entered promiscuous mode [ 438.492554][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 438.507059][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2373'. [ 438.520833][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2374'. [ 438.531687][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2374'. [ 438.572827][T14802] syzkaller0: entered promiscuous mode [ 438.586742][T14802] syzkaller0: entered allmulticast mode [ 438.650071][T14704] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.659493][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.668918][T14704] bridge_slave_0: entered allmulticast mode [ 438.669822][T14813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.677071][T14704] bridge_slave_0: entered promiscuous mode [ 438.711238][ T5146] Bluetooth: hci6: command tx timeout [ 438.720190][T14704] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.729376][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.737116][T14704] bridge_slave_1: entered allmulticast mode [ 438.746236][T14704] bridge_slave_1: entered promiscuous mode [ 438.845309][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.859594][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.980536][T14704] team0: Port device team_slave_0 added [ 439.007888][T14704] team0: Port device team_slave_1 added [ 439.094610][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.102231][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 439.124791][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.179360][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.200117][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.213913][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.242061][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.321031][T14704] hsr_slave_0: entered promiscuous mode [ 439.327664][T14704] hsr_slave_1: entered promiscuous mode [ 439.334270][T14704] debugfs: 'hsr0' already exists in 'hsr' [ 439.340027][T14704] Cannot create hsr debugfs directory [ 439.390940][T14843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.146059][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.784643][ T5146] Bluetooth: hci6: command tx timeout [ 441.975795][T14829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.006124][T14704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.130977][T14704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.164552][T14704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 442.204816][T14704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.218349][T14704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 442.235712][T14864] x_tables: duplicate underflow at hook 3 [ 442.244211][T14704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.280962][T14866] __nla_validate_parse: 1 callbacks suppressed [ 442.280986][T14866] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2390'. [ 442.361517][T14704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 442.390415][T14704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.660248][T14704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.743142][T14704] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.786896][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.794047][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.818590][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.825786][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.864165][ T5146] Bluetooth: hci6: command tx timeout [ 443.171439][T14913] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2402'. [ 443.181994][T14913] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2402'. [ 443.202065][T14913] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2402'. [ 443.246404][T14913] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2402'. [ 443.279398][T14913] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2402'. [ 443.300089][T14913] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2402'. [ 443.320144][T14913] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2402'. [ 443.337029][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2404'. [ 443.337217][T14913] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2402'. [ 443.377899][T14917] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.601320][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.692670][T14929] netlink: 'syz.5.2409': attribute type 1 has an invalid length. [ 444.077569][T14950] ipvlan3: entered allmulticast mode [ 444.104282][T14950] syz_tun: entered allmulticast mode [ 444.156239][T14947] syzkaller0: entered allmulticast mode [ 444.411972][T14704] veth0_vlan: entered promiscuous mode [ 444.469778][T14704] veth1_vlan: entered promiscuous mode [ 444.635564][T14704] veth0_macvtap: entered promiscuous mode [ 444.683099][T14704] veth1_macvtap: entered promiscuous mode [ 444.778545][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.810737][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.932435][ T1043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.943753][ T5146] Bluetooth: hci6: command tx timeout [ 445.011434][ T1043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.023403][ T1043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.052602][ T1043] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.244058][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.254081][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.376540][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.399317][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.032650][T15005] lo speed is unknown, defaulting to 1000 [ 446.206939][T15040] syzkaller0: entered promiscuous mode [ 446.212610][T15040] syzkaller0: entered allmulticast mode [ 446.225495][T15005] wg1 speed is unknown, defaulting to 1000 [ 447.841783][T15064] bridge0: port 3(ipvlan3) entered blocking state [ 447.855942][T15064] bridge0: port 3(ipvlan3) entered disabled state [ 447.867918][T15064] ipvlan3: entered allmulticast mode [ 447.873417][T15064] bridge0: entered allmulticast mode [ 447.914163][T15064] ipvlan3: left allmulticast mode [ 447.919329][T15064] bridge0: left allmulticast mode [ 448.110546][T15075] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 448.231641][T15084] __nla_validate_parse: 35 callbacks suppressed [ 448.231663][T15084] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2445'. [ 448.894977][T15112] netlink: 'syz.4.2455': attribute type 11 has an invalid length. [ 449.111252][T15121] 8021q: VLANs not supported on lo [ 449.121033][T15127] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 449.129950][T15127] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2459'. [ 449.141149][T15127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2459'. [ 449.154436][T15127] netlink: 'syz.2.2459': attribute type 29 has an invalid length. [ 449.167736][T15128] xt_time: unknown flags 0xf4 [ 449.184951][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 449.198246][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 449.207826][T15127] netlink: 'syz.2.2459': attribute type 29 has an invalid length. [ 449.290729][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2462'. [ 449.488684][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 449.515654][T15144] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2466'. [ 449.534794][T15147] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2468'. [ 449.545640][T15147] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2468'. [ 449.650921][T15146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.672913][T15146] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.686248][T15146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.724012][T15152] netlink: 'syz.4.2469': attribute type 2 has an invalid length. [ 449.732065][T15152] netlink: 'syz.4.2469': attribute type 3 has an invalid length. [ 449.914807][T15163] xt_hashlimit: size too large, truncated to 1048576 [ 450.235665][T15176] bond1: option fail_over_mac: invalid value (16) [ 450.254584][T15182] netlink: 'syz.4.2478': attribute type 1 has an invalid length. [ 450.267752][T15176] bond1 (unregistering): Released all slaves [ 450.357954][T15182] netlink: 'syz.4.2478': attribute type 3 has an invalid length. [ 451.388306][T15237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.792902][T15255] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 451.818338][T15255] bond5 (unregistering): Released all slaves [ 452.310082][T15288] netlink: 'syz.5.2504': attribute type 21 has an invalid length. [ 452.339964][T15288] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.360288][T15279] lo speed is unknown, defaulting to 1000 [ 452.368211][T15279] wg1 speed is unknown, defaulting to 1000 [ 452.388979][T15288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.396632][T15288] IPv6: NLM_F_CREATE should be set when creating new route [ 452.404038][T15288] IPv6: NLM_F_CREATE should be set when creating new route [ 452.411282][T15288] IPv6: NLM_F_CREATE should be set when creating new route [ 452.921356][T15317] netlink: 'syz.1.2509': attribute type 5 has an invalid length. [ 453.212437][T15320] nbd: must specify a device to reconfigure [ 453.427417][T15328] netlink: 'syz.6.2514': attribute type 29 has an invalid length. [ 453.475269][T15331] __nla_validate_parse: 18 callbacks suppressed [ 453.475290][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2515'. [ 453.503423][T15329] syzkaller0: entered promiscuous mode [ 453.524632][T15329] syzkaller0: entered allmulticast mode [ 453.628580][T15311] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 454.107284][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2519'. [ 454.327445][T15382] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2523'. [ 454.356404][T15379] syzkaller0: entered promiscuous mode [ 454.361976][T15379] syzkaller0: entered allmulticast mode [ 454.579132][T15391] IPVS: persistence engine module ip_vs_pe_ not found [ 454.594240][T15397] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2527'. [ 455.047742][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2531'. [ 455.241466][T15420] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2534'. [ 455.844418][T15443] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2541'. [ 455.896960][T15444] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2541'. [ 456.204345][T15459] sctp: [Deprecated]: syz.5.2546 (pid 15459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.204345][T15459] Use struct sctp_sack_info instead [ 456.299824][T15459] sctp: [Deprecated]: syz.5.2546 (pid 15459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.299824][T15459] Use struct sctp_sack_info instead [ 456.390426][T15474] Bluetooth: MGMT ver 1.23 [ 456.448601][T15474] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2548'. [ 456.595675][T15483] validate_nla: 6 callbacks suppressed [ 456.595695][T15483] netlink: 'syz.2.2550': attribute type 2 has an invalid length. [ 456.601828][T15473] netlink: set zone limit has 4 unknown bytes [ 456.675905][T15483] netlink: 'syz.2.2550': attribute type 3 has an invalid length. [ 456.723655][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2550'. [ 457.569267][T15519] tipc: Enabled bearer , priority 0 [ 457.580805][T15519] syzkaller0: entered promiscuous mode [ 457.587457][T15519] syzkaller0: entered allmulticast mode [ 457.622453][T15519] tipc: Resetting bearer [ 457.667285][T15517] tipc: Resetting bearer [ 457.716483][T15517] tipc: Disabling bearer [ 457.778696][T15526] syzkaller0: entered allmulticast mode [ 458.275806][T15557] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 458.422788][T15566] veth1_vlan: Caught tx_queue_len zero misconfig [ 458.532086][T15570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.728191][T15579] tipc: Enabling of bearer rejected, already enabled [ 458.751297][T15584] ipt_REJECT: TCP_RESET invalid for non-tcp [ 458.779704][T15579] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 459.185392][T15603] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 459.198415][T15603] netlink: 'syz.1.2593': attribute type 3 has an invalid length. [ 459.845475][T15620] ip6t_rpfilter: unknown options [ 460.037503][T15634] netlink: 'syz.4.2600': attribute type 6 has an invalid length. [ 460.074113][T15634] __nla_validate_parse: 6 callbacks suppressed [ 460.074134][T15634] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2600'. [ 461.244322][T15641] lo speed is unknown, defaulting to 1000 [ 461.280799][T15691] netlink: 'syz.4.2611': attribute type 1 has an invalid length. [ 461.286310][T15641] wg1 speed is unknown, defaulting to 1000 [ 461.572268][T15704] netlink: 'syz.1.2616': attribute type 1 has an invalid length. [ 461.617432][T15641] tipc: can't start tipc receive workqueue [ 461.675793][T15704] 8021q: adding VLAN 0 to HW filter on device bond11 [ 461.701852][T15710] bond11: (slave ip6gretap1): making interface the new active one [ 461.728707][T15710] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 462.344442][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'. [ 462.417833][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'. [ 462.488348][T15742] macvtap3: entered promiscuous mode [ 462.501509][T15742] macvtap3: entered allmulticast mode [ 462.541037][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 462.630435][T15745] macvtap3: entered promiscuous mode [ 462.636162][T15745] macvtap3: entered allmulticast mode [ 463.037661][T15768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2631'. [ 463.175817][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2633'. [ 463.239343][T15782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.288462][T15782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.413245][T15782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.461597][T15785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2629'. [ 463.678584][ T5831] Bluetooth: hci6: command tx timeout [ 464.874663][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2636'. [ 464.910638][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2636'. [ 464.919985][T15801] netlink: 'syz.5.2636': attribute type 12 has an invalid length. [ 464.954013][T15801] netlink: 'syz.5.2636': attribute type 11 has an invalid length. [ 465.181025][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2641'. [ 465.199270][T15828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.237436][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2641'. [ 465.371573][T15830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2640'. [ 465.448624][T15843] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 465.761021][T15853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2649'. [ 465.878439][T15860] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2651'. [ 466.561245][T15882] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2 [ 466.574892][T15882] netdevsim netdevsim4: Falling back to sysfs fallback for: r1 [ 467.006010][T15897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2662'. [ 467.032285][T15898] netlink: 'syz.5.2662': attribute type 1 has an invalid length. [ 467.062340][T15898] netlink: 'syz.5.2662': attribute type 2 has an invalid length. [ 467.495785][T15906] netlink: 'syz.5.2664': attribute type 10 has an invalid length. [ 467.508139][T15906] team0: Device vxcan1 is of different type [ 467.742848][T15916] nbd: must specify at least one socket [ 467.803824][T15921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.155043][T15936] netlink: 'syz.5.2672': attribute type 4 has an invalid length. [ 468.732555][T15953] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2676'. [ 468.954123][T15958] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2678'. [ 469.268982][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 469.355217][T15976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2684'. [ 469.559689][T15970] 8021q: adding VLAN 0 to HW filter on device bond13 [ 469.652112][T15970] bond13 (unregistering): Released all slaves [ 470.330676][T16031] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 470.368777][T16034] __nla_validate_parse: 1 callbacks suppressed [ 470.368797][T16034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2700'. [ 470.808278][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'. [ 471.516133][T16088] tipc: New replicast peer: 172.20.20.187 [ 471.538223][T16088] tipc: Enabled bearer , priority 10 [ 471.744916][T16097] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2721'. [ 471.830072][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2724'. [ 471.854684][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 471.879855][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 471.919303][ T70] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.941102][ T70] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.950879][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2724'. [ 471.964878][ T70] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.974336][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 471.984798][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 471.996633][T16109] bridge_slave_0: entered promiscuous mode [ 472.108538][T16114] netlink: 'syz.1.2726': attribute type 9 has an invalid length. [ 472.130079][T16114] netlink: 'syz.1.2726': attribute type 11 has an invalid length. [ 472.140953][T16114] netlink: 'syz.1.2726': attribute type 12 has an invalid length. [ 472.154088][T16117] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2728'. [ 472.166379][T16117] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 472.217513][T16113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.231672][T16120] netlink: 'syz.5.2728': attribute type 10 has an invalid length. [ 472.273102][T16113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 472.336491][T16120] team0: Device veth0_vlan failed to register rx_handler [ 472.487620][T16113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.503952][T16126] netlink: 'syz.4.2730': attribute type 4 has an invalid length. [ 472.524927][T16113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 472.708374][T16113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.736243][T16113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 472.772745][T16138] netlink: 'syz.6.2734': attribute type 1 has an invalid length. [ 472.999386][T16149] netlink: 'syz.5.2738': attribute type 1 has an invalid length. [ 473.008432][T16149] netlink: 'syz.5.2738': attribute type 1 has an invalid length. [ 473.061132][T16113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.073515][T16113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 473.265503][T16165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.272966][T16165] IPv6: NLM_F_CREATE should be set when creating new route [ 473.280290][T16165] IPv6: NLM_F_CREATE should be set when creating new route [ 473.394910][ T3506] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.408459][ T3506] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 473.421593][ T3506] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.473883][ T3506] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 473.509456][ T3506] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.554181][ T3506] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 473.601141][ T70] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.637085][ T70] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 473.810864][T16186] syzkaller0: entered promiscuous mode [ 473.818601][T16186] syzkaller0: entered allmulticast mode [ 474.494922][T16221] netlink: 'syz.5.2762': attribute type 10 has an invalid length. [ 474.540543][T16221] team0: Device veth0_vlan failed to register rx_handler [ 474.657285][T16230] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 474.673330][T16225] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 474.723721][T16225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.811560][T16225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.039741][T16248] geneve3: entered promiscuous mode [ 475.401690][T16264] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 475.418614][T16264] syzkaller1: linktype set to 823 [ 475.527751][T16266] syzkaller0: entered promiscuous mode [ 475.555734][T16266] syzkaller0: entered allmulticast mode [ 475.786111][T16288] __nla_validate_parse: 18 callbacks suppressed [ 475.786132][T16288] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2778'. [ 475.827962][T16288] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2778'. [ 475.889237][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 475.940279][T16296] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2783'. [ 475.970596][T16301] syz.6.2782 uses old SIOCAX25GETINFO [ 475.976634][T16296] netlink: 606 bytes leftover after parsing attributes in process `syz.4.2783'. [ 475.987770][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 475.987796][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 476.200296][T16308] gre2: entered promiscuous mode [ 476.402461][ T5911] IPVS: starting estimator thread 0... [ 476.454797][T16308] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2786'. [ 476.503763][T16332] IPVS: using max 29 ests per chain, 69600 per kthread [ 476.505647][T16339] bond13: entered promiscuous mode [ 476.516947][T16339] 8021q: adding VLAN 0 to HW filter on device bond13 [ 476.590282][T16342] bond13: (slave bridge13): making interface the new active one [ 476.659449][T16342] bridge13: entered promiscuous mode [ 476.689781][T16342] bridge13: left promiscuous mode [ 476.922622][T16357] openvswitch: netlink: Flow key attr not present in new flow. [ 476.986646][T16358] openvswitch: netlink: Flow key attr not present in new flow. [ 477.374669][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'. [ 477.386592][T16388] batadv1: entered allmulticast mode [ 477.436802][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2808'. [ 477.511105][T16390] vlan4: entered allmulticast mode [ 477.524740][T16390] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 477.704930][T16399] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 477.932410][T16416] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 478.565073][T16412] lo speed is unknown, defaulting to 1000 [ 478.574386][T16412] wg1 speed is unknown, defaulting to 1000 [ 479.378457][T16486] team0: Port device dummy0 removed [ 480.064257][T16515] hsr_slave_0 (unregistering): left promiscuous mode [ 480.246983][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802842b400: rx timeout, send abort [ 480.533252][T15348] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 480.542048][T15348] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 480.560646][T15348] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 480.570292][T15348] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 480.747269][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054771400: rx timeout, send abort [ 480.756771][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802842b400: abort rx timeout. Force session deactivation [ 480.798918][T16573] __nla_validate_parse: 13 callbacks suppressed [ 480.798940][T16573] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2856'. [ 480.820781][T16573] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2856'. [ 480.830710][T16573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2856'. [ 480.893912][T16576] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2856'. [ 480.904238][T16576] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2856'. [ 480.913515][T16576] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2856'. [ 481.255631][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054771400: abort rx timeout. Force session deactivation [ 482.427996][T16495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.731136][T16588] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 482.952640][T16615] validate_nla: 4 callbacks suppressed [ 482.952662][T16615] netlink: 'syz.6.2868': attribute type 1 has an invalid length. [ 483.012787][T16617] delete_channel: no stack [ 483.057746][T16618] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2866'. [ 483.419497][T16639] x9: renamed from bridge_slave_0 (while UP) [ 485.679293][T16600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.836366][T16644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2876'. [ 485.936234][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2878'. [ 485.959802][T16654] siw: device registration error -23 [ 485.967250][T16647] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 486.645322][T16699] veth7: entered allmulticast mode [ 486.647674][T16701] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2892'. [ 486.725875][T16708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2893'. [ 486.885045][T16712] syzkaller0: entered promiscuous mode [ 486.890594][T16712] syzkaller0: entered allmulticast mode [ 487.196876][T16734] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2902'. [ 487.260311][T16737] netlink: 'syz.6.2901': attribute type 12 has an invalid length. [ 487.598195][T16755] openvswitch: netlink: EtherType 0 is less than min 600 [ 487.609567][T16755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2909'. [ 487.695974][T16757] syzkaller0: entered promiscuous mode [ 487.701664][T16757] syzkaller0: entered allmulticast mode [ 487.710059][T16757] netlink: 'syz.6.2910': attribute type 21 has an invalid length. [ 487.718074][T16757] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2910'. [ 490.038493][T16721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.066777][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2911'. [ 490.309748][T16776] veth0_to_bond: entered allmulticast mode [ 490.335499][T16768] netem: incorrect gi model size [ 490.349506][T16768] netem: change failed [ 490.504926][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 490.530482][T16790] netlink: 'syz.6.2920': attribute type 1 has an invalid length. [ 490.539413][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 490.552211][T16785] syzkaller0: entered promiscuous mode [ 490.558804][T16785] syzkaller0: entered allmulticast mode [ 490.617160][T16790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.696548][T16796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.876870][T16807] __nla_validate_parse: 1 callbacks suppressed [ 490.876892][T16807] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2924'. [ 490.921419][T16815] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2924'. [ 491.039336][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2927'. [ 491.416388][T16842] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2933'. [ 491.543036][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2936'. [ 491.804253][T16816] lo speed is unknown, defaulting to 1000 [ 491.822376][T16816] wg1 speed is unknown, defaulting to 1000 [ 491.973030][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2942'. [ 492.176000][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2947'. [ 492.268737][T16886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2947'. [ 492.407928][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 492.559110][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'. [ 493.474851][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 493.485308][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 493.495049][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 493.506373][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 493.517889][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 494.265743][T16970] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 494.303462][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.414202][T16930] lo speed is unknown, defaulting to 1000 [ 494.470356][T16970] bond8: entered promiscuous mode [ 494.476537][T16970] 8021q: adding VLAN 0 to HW filter on device bond8 [ 494.516975][T16978] bond8: (slave bridge8): making interface the new active one [ 494.545778][T16978] bridge8: entered promiscuous mode [ 494.571825][T16978] bridge8: left promiscuous mode [ 494.640601][T16930] wg1 speed is unknown, defaulting to 1000 [ 494.710937][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.892931][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.131092][T17012] tipc: Started in network mode [ 495.143080][T17012] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 495.175855][T17012] tipc: Enabled bearer , priority 24 [ 495.355611][T17016] syzkaller0: entered promiscuous mode [ 495.369002][T17016] syzkaller0: entered allmulticast mode [ 495.436778][T17028] netlink: 'syz.5.2981': attribute type 1 has an invalid length. [ 495.589864][ T5831] Bluetooth: hci7: command tx timeout [ 495.600813][T17031] bond5: entered promiscuous mode [ 495.607086][T17031] bond5: entered allmulticast mode [ 495.616503][T17031] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.801264][T17034] bridge2: entered promiscuous mode [ 495.813999][T15348] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 495.837681][T17034] bridge2: entered allmulticast mode [ 495.879145][T17034] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 495.954178][ T3506] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 495.991822][T17028] bridge3: entered promiscuous mode [ 495.998346][T17028] bridge3: entered allmulticast mode [ 496.007651][T17028] bond5: (slave bridge3): Enslaving as a backup interface with a down link [ 496.017795][T17051] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 496.017926][T17051] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 496.131244][T17060] netlink: 'syz.1.2986': attribute type 4 has an invalid length. [ 496.139378][T17060] __nla_validate_parse: 4 callbacks suppressed [ 496.139397][T17060] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2986'. [ 496.155459][T16930] chnl_net:caif_netlink_parms(): no params data found [ 496.200000][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2986'. [ 496.239618][T17060] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2986'. [ 496.252166][ T70] bridge_slave_1: left allmulticast mode [ 496.273728][ T70] bridge_slave_1: left promiscuous mode [ 496.277667][T17067] netlink: 'syz.2.2987': attribute type 32 has an invalid length. [ 496.281004][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.292958][T17067] netlink: 776 bytes leftover after parsing attributes in process `syz.2.2987'. [ 496.328486][T17064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2986'. [ 496.358181][ T70] bridge_slave_0: left allmulticast mode [ 496.374322][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.667630][ T70] dvmrp0 (unregistering): left allmulticast mode [ 496.679332][ T70] dvmrp1 (unregistering): left allmulticast mode [ 496.713055][ T70] bond5 (unregistering): (slave geneve2): Releasing active interface [ 496.837015][ T70] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 496.917896][ T70] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 497.110721][ T70] bond6 (unregistering): (slave bridge8): Removing an active aggregator [ 497.121724][ T70] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 497.130021][ T70] bond6 (unregistering): (slave bridge8): the permanent HWaddr of slave - 02:94:cf:68:72:0e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 497.197053][ T70] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 497.247827][ T70] bond7 (unregistering): (slave bridge10): Releasing active interface [ 497.328672][ T70] bond0 (unregistering): (slave bridge12): Releasing backup interface [ 497.337306][ T70] bridge12 (unregistering): left promiscuous mode [ 497.344152][ T70] bridge12 (unregistering): left allmulticast mode [ 497.397010][ T70] bond1 (unregistering): Released all slaves [ 497.410616][ T70] bond2 (unregistering): Released all slaves [ 497.424533][ T70] bond3 (unregistering): Released all slaves [ 497.439555][ T70] bond4 (unregistering): Released all slaves [ 497.452986][ T70] bond5 (unregistering): Released all slaves [ 497.473129][ T70] bond6 (unregistering): Released all slaves [ 497.496752][ T70] bond7 (unregistering): Released all slaves [ 497.510498][ T70] bond8 (unregistering): Released all slaves [ 497.523453][ T70] bond9 (unregistering): Released all slaves [ 497.545499][ T70] bond10 (unregistering): Released all slaves [ 497.560270][ T70] bond0 (unregistering): Released all slaves [ 497.575151][ T70] bond11 (unregistering): Released all slaves [ 497.598941][ T70] bond12 (unregistering): Released all slaves [ 497.618099][ T70] bond13 (unregistering): Released all slaves [ 497.639146][T16319] tipc: Node number set to 10005162 [ 497.653115][T17073] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 497.666991][ T5831] Bluetooth: hci7: command tx timeout [ 497.976371][ T70] : left promiscuous mode [ 497.980353][T17096] netlink: 'syz.6.2994': attribute type 1 has an invalid length. [ 498.151554][T17096] C: renamed from lo (while UP) [ 498.158814][T17096] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 498.176079][T17102] syzkaller0: entered promiscuous mode [ 498.181749][T17102] syzkaller0: entered allmulticast mode [ 498.199917][ T70] tipc: Disabling bearer [ 498.217638][ T70] tipc: Disabling bearer [ 498.227461][T17105] batman_adv: batadv0: Adding interface: dummy0 [ 498.235467][ T70] tipc: Left network mode [ 498.237566][T17105] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.271615][T17105] batman_adv: batadv0: Interface activated: dummy0 [ 498.296684][T16930] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.304646][T16930] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.312229][T16930] bridge_slave_0: entered allmulticast mode [ 498.321391][T16930] bridge_slave_0: entered promiscuous mode [ 498.331969][T16930] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.340138][T16930] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.348084][T16930] bridge_slave_1: entered allmulticast mode [ 498.356806][T16930] bridge_slave_1: entered promiscuous mode [ 498.371823][T17096] batadv0: mtu less than device minimum [ 498.379987][T17096] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.392656][T17096] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.404440][T17096] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.415815][T17096] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.427759][T17096] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.439756][T17096] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 498.804650][T16930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.861217][T16930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.228179][T16930] team0: Port device team_slave_0 added [ 499.262066][T16930] team0: Port device team_slave_1 added [ 499.324483][T17169] netlink: 'syz.2.3006': attribute type 1 has an invalid length. [ 499.385428][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 499.503445][T17169] bond9: entered promiscuous mode [ 499.512208][T17169] 8021q: adding VLAN 0 to HW filter on device bond9 [ 499.524124][T17184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3006'. [ 499.539770][T16930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.547344][T16930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.573756][T16930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.586861][T16930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.593935][T16930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.622545][T16930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.721853][T17184] bond9: entered allmulticast mode [ 499.744071][ T5831] Bluetooth: hci7: command tx timeout [ 499.925764][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3015'. [ 499.949735][T16930] hsr_slave_0: entered promiscuous mode [ 499.957553][T16930] hsr_slave_1: entered promiscuous mode [ 499.965958][T16930] debugfs: 'hsr0' already exists in 'hsr' [ 499.971788][T16930] Cannot create hsr debugfs directory [ 499.980212][T17192] netlink: 'syz.5.3013': attribute type 4 has an invalid length. [ 500.025235][T17199] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 500.035519][T17199] team0: Port device batadv2 added [ 500.271576][T17176] bond9: (slave bridge8): making interface the new active one [ 500.287525][T17176] bridge8: entered promiscuous mode [ 500.302432][T17176] bridge8: entered allmulticast mode [ 500.312814][T17176] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 500.326677][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3020'. [ 500.678963][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 501.224797][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.268376][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.591389][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.666373][T17262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 501.712032][T17265] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3026'. [ 501.834727][ T5831] Bluetooth: hci7: command tx timeout [ 502.289946][T17261] vlan3: entered allmulticast mode [ 502.333698][T17261] team_slave_0: entered allmulticast mode [ 502.365606][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.451434][T17275] netlink: 'syz.1.3031': attribute type 2 has an invalid length. [ 502.467289][T17275] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 502.542427][T17275] 8021q: adding VLAN 0 to HW filter on device bond13 [ 502.690572][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 502.713024][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 502.992358][T17309] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20002 [ 503.020108][T17311] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 3, id = 0 [ 503.061063][ T70] IPVS: stop unused estimator thread 0... [ 503.174660][T17315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3036'. [ 503.985903][T17349] IPv6: NLM_F_REPLACE set, but no existing node found! [ 504.127308][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 504.170472][T17357] bond14: Invalid ad_actor_system MAC address. [ 504.177323][T17357] bond14: option ad_actor_system: invalid value (1) [ 504.192531][T17357] bond14 (unregistering): Released all slaves [ 505.839991][T17300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.859772][T16930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 505.909528][T16930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.934611][T16930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 505.972403][T16930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.006818][T16930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.028564][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3040'. [ 506.070063][T16930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.084882][T16930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.105148][T16930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.124994][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 506.214865][T17389] bond2: option all_slaves_active: invalid value (222) [ 506.230702][T17389] bond2 (unregistering): Released all slaves [ 506.261351][T17381] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 506.268668][T17381] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 506.276957][T17381] bridge0: port 1(wlan0) entered disabled state [ 506.295856][T17381] bridge_slave_1: left promiscuous mode [ 506.302026][T17381] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.577745][T17404] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3046'. [ 506.589664][T16930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.605214][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 506.661682][T17410] geneve2: entered promiscuous mode [ 506.681366][T17410] geneve2: entered allmulticast mode [ 506.703427][T17413] __nla_validate_parse: 1 callbacks suppressed [ 506.703450][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3044'. [ 506.772008][T16930] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.793273][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.800510][T15358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.839321][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.844695][T17420] net_ratelimit: 14 callbacks suppressed [ 506.844716][T17420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.846597][T15358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.130775][T17432] netlink: 'syz.5.3053': attribute type 8 has an invalid length. [ 507.136274][T17436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3054'. [ 507.141770][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3053'. [ 507.191688][T17432] bond0: entered promiscuous mode [ 507.200127][T17432] bond_slave_0: entered promiscuous mode [ 507.206317][T17432] bond_slave_1: entered promiscuous mode [ 507.215203][T17432] gretap0: entered promiscuous mode [ 507.228090][T17432] bond0: left promiscuous mode [ 507.234132][T17432] bond_slave_0: left promiscuous mode [ 507.239784][T17432] bond_slave_1: left promiscuous mode [ 507.249365][T17432] gretap0: left promiscuous mode [ 507.351313][T16930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.590630][T16930] veth0_vlan: entered promiscuous mode [ 507.602119][T16930] veth1_vlan: entered promiscuous mode [ 507.630523][T16930] veth0_macvtap: entered promiscuous mode [ 507.640231][T16930] veth1_macvtap: entered promiscuous mode [ 507.658554][T16930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.674885][T16930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.689595][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.699241][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.709135][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.719432][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.788525][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.803340][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.830302][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.838814][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.032022][T17452] syzkaller1: entered promiscuous mode [ 508.073168][T17452] syzkaller1: entered allmulticast mode [ 508.107004][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3057'. [ 508.177861][T17455] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 508.218605][T17455] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 508.251282][T17455] team0: Failed to send options change via netlink (err -105) [ 508.279172][T17455] team0: Port device batadv1 added [ 508.291697][T17466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 508.317316][T17466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 508.337875][T17466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 508.353173][T17466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 508.376834][T17466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 508.738692][T17476] IPv6: sit1: Disabled Multicast RS [ 509.000724][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.041140][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 509.062565][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 509.162916][T17465] lo speed is unknown, defaulting to 1000 [ 509.195522][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.221600][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 509.232040][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 509.275621][T17465] wg1 speed is unknown, defaulting to 1000 [ 509.295327][T17498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.413766][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.445890][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 509.456153][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 509.566084][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.621660][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 509.652052][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 509.834243][T17471] lo speed is unknown, defaulting to 1000 [ 509.894684][T17471] wg1 speed is unknown, defaulting to 1000 [ 510.332559][T17533] netlink: 'syz.4.3074': attribute type 4 has an invalid length. [ 510.344932][T17533] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3074'. [ 510.463763][ T5831] Bluetooth: hci3: command tx timeout [ 510.536189][ T12] veth5: left allmulticast mode [ 510.563950][ T12] veth5: left promiscuous mode [ 510.569040][ T12] bridge6: port 2(veth5) entered disabled state [ 510.684471][ T12] veth3: left allmulticast mode [ 510.700972][ T12] veth3: left promiscuous mode [ 510.711338][ T12] bridge6: port 1(veth3) entered disabled state [ 510.808380][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3077'. [ 511.105981][ T12] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 511.116309][ T12] ip6gre1 (unregistering): left promiscuous mode [ 511.158905][ T12] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 511.260472][ T12] bond10 (unregistering): (slave vti0): Releasing backup interface [ 511.274890][ T12] vti0 (unregistering): left promiscuous mode [ 511.301243][ T12] team0: Port device erspan0 removed [ 511.590525][ T12] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 511.598972][ T12] bridge5 (unregistering): left promiscuous mode [ 511.867398][ T12] bond7 (unregistering): (slave bridge11): Releasing active interface [ 512.029785][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.040786][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.051068][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 512.061982][ T12] bond0 (unregistering): Released all slaves [ 512.074771][ T12] bond1 (unregistering): (slave lo): Releasing backup interface [ 512.083400][ T12] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 512.096343][ T12] bond1 (unregistering): Released all slaves [ 512.109930][ T12] bond2 (unregistering): Released all slaves [ 512.123096][ T12] bond3 (unregistering): Released all slaves [ 512.138400][ T12] bond4 (unregistering): Released all slaves [ 512.162669][ T12] bond5 (unregistering): Released all slaves [ 512.178235][ T12] bond6 (unregistering): Released all slaves [ 512.191113][ T12] bond7 (unregistering): Released all slaves [ 512.205331][ T12] bond8 (unregistering): Released all slaves [ 512.218509][ T12] bond9 (unregistering): Released all slaves [ 512.243034][ T12] bond10 (unregistering): Released all slaves [ 512.257752][ T12] bond11 (unregistering): Released all slaves [ 512.272427][ T12] bond12 (unregistering): Released all slaves [ 512.288174][ T12] bond13 (unregistering): Released all slaves [ 512.317435][T17465] chnl_net:caif_netlink_parms(): no params data found [ 512.357281][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 512.529458][ T12] 9: left promiscuous mode [ 512.544378][ T5831] Bluetooth: hci3: command tx timeout [ 512.673466][ T12] : left promiscuous mode [ 512.749293][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 512.773033][ T12] tipc: Disabling bearer [ 512.780375][ T12] tipc: Left network mode [ 512.918839][T17465] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.937834][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.967476][T17465] bridge_slave_0: entered allmulticast mode [ 512.978211][T17465] bridge_slave_0: entered promiscuous mode [ 513.027595][T17465] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.055574][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.073190][T17586] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3083'. [ 513.083152][T17465] bridge_slave_1: entered allmulticast mode [ 513.097723][T17465] bridge_slave_1: entered promiscuous mode [ 513.123506][T17548] lo speed is unknown, defaulting to 1000 [ 513.246190][T17548] wg1 speed is unknown, defaulting to 1000 [ 513.270420][T17465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.308178][T17595] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3084'. [ 513.336115][T17465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.346910][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 513.434664][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 513.610746][T17605] pim6reg: entered allmulticast mode [ 513.739307][T17616] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3088'. [ 513.763865][T17465] team0: Port device team_slave_0 added [ 513.797284][T17616] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 513.822461][T17465] team0: Port device team_slave_1 added [ 514.029744][T17623] syzkaller0: entered promiscuous mode [ 514.046091][T17623] syzkaller0: entered allmulticast mode [ 514.168519][T17465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.202688][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.239702][T17465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.325161][T17465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.334416][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.374045][T17465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.593767][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.623773][ T5831] Bluetooth: hci3: command tx timeout [ 514.655044][ T12] team0 (unregistering): Port device batadv2 removed [ 514.692961][ T12] pim6reg (unregistering): left allmulticast mode [ 515.036780][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 515.049323][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'. [ 515.140352][ T12] team0 (unregistering): Port device team_slave_1 removed [ 515.160682][ T12] team0 (unregistering): Port device team_slave_0 removed [ 515.300298][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 515.319378][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 515.350806][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'. [ 515.438804][T17465] hsr_slave_0: entered promiscuous mode [ 515.462770][T17465] hsr_slave_1: entered promiscuous mode [ 515.485473][T17465] debugfs: 'hsr0' already exists in 'hsr' [ 515.491520][T17465] Cannot create hsr debugfs directory [ 515.565114][T17665] syzkaller0: entered promiscuous mode [ 515.570652][T17665] syzkaller0: entered allmulticast mode [ 515.732794][T17672] netlink: 'syz.5.3100': attribute type 1 has an invalid length. [ 516.222469][T17695] Cannot find add_set index 65532 as target [ 516.467188][ T12] IPVS: stop unused estimator thread 0... [ 516.522083][T17700] syzkaller0: entered promiscuous mode [ 516.561350][T17700] syzkaller0: entered allmulticast mode [ 516.704588][ T5831] Bluetooth: hci3: command tx timeout [ 517.735320][T17748] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 517.782161][T17748] bond1 (unregistering): Released all slaves [ 517.850395][T17465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.932122][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.962891][T17465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 518.008002][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.038447][T17465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 518.091660][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.120990][T17465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 518.181371][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.401728][T17779] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 518.548019][T17809] netlink: 'syz.4.3122': attribute type 1 has an invalid length. [ 518.600589][T17797] __nla_validate_parse: 3 callbacks suppressed [ 518.600614][T17797] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3120'. [ 518.658248][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3120'. [ 518.689577][T17801] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.697652][T17801] bridge0: port 1(0x9) entered disabled state [ 518.761658][T17801] batman_adv: batadv0: Interface deactivated: dummy0 [ 518.968536][T17801] A link change request failed with some changes committed already. Interface 0x9 may have been left with an inconsistent configuration, please check. [ 519.300941][T17465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.358962][T17465] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.395152][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.402351][T15358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.487726][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.494971][T15358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.186452][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 520.196084][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 520.204042][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 520.465260][T17465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.506648][T17872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3135'. [ 520.536601][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3135'. [ 520.722490][T17465] veth0_vlan: entered promiscuous mode [ 520.768300][T17880] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 520.781496][T17465] veth1_vlan: entered promiscuous mode [ 520.896307][T17465] veth0_macvtap: entered promiscuous mode [ 520.919458][T17465] veth1_macvtap: entered promiscuous mode [ 520.968847][T17892] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3137'. [ 521.059196][T17465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.117846][T17465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.215946][ T3506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.228186][ T3506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.240642][T17897] syzkaller0: entered promiscuous mode [ 521.247236][T17897] syzkaller0: entered allmulticast mode [ 521.268862][ T3506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.294755][ T3506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.296006][T17867] infiniband syz2: set active [ 521.345558][T17867] infiniband syz2: added vxcan1 [ 521.347290][ T5912] vxcan1 speed is unknown, defaulting to 1000 [ 521.352553][T17867] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 521.364186][T17867] infiniband syz2: Couldn't open port 1 [ 521.458499][T17867] RDS/IB: syz2: added [ 521.465116][T17867] smc: adding ib device syz2 with port count 1 [ 521.481456][T17867] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 521.515455][T16316] vxcan1 speed is unknown, defaulting to 1000 [ 521.524309][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 521.696031][T17925] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3145'. [ 521.967497][T17901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.168237][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.195657][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.311903][T15350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.331523][T15350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.370866][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 522.642248][T17949] Bluetooth: MGMT ver 1.23 [ 522.705696][ T30] INFO: task syz.0.2328:14635 blocked for more than 143 seconds. [ 522.747915][ T30] Not tainted syzkaller #0 [ 522.761951][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.795481][ T30] task:syz.0.2328 state:D stack:27080 pid:14635 tgid:14633 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 522.818194][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 522.840553][ T30] Call Trace: [ 522.850522][ T30] [ 522.857563][ T30] __schedule+0x15dd/0x52d0 [ 522.862401][ T30] ? __pfx___schedule+0x10/0x10 [ 522.881768][ T30] ? schedule+0x90/0x360 [ 522.893318][ T30] schedule+0x164/0x360 [ 522.902694][ T30] schedule_preempt_disabled+0x13/0x30 [ 522.918966][ T30] __mutex_lock+0x7fe/0x1300 [ 522.941251][ T30] ? __mutex_lock+0x5ac/0x1300 [ 522.947599][ T30] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 522.953467][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 522.959846][ T30] ? __nlmsg_put+0xef/0x1b0 [ 522.965569][ T30] ? genlmsg_put+0x137/0x2e0 [ 522.970283][ T30] nfsd_nl_version_get_doit+0x17c/0xc40 [ 522.976417][ T30] ? kmem_cache_free+0x187/0x630 [ 522.981467][ T30] ? nlmon_xmit+0xb0/0x100 [ 522.990041][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 522.996735][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 523.002087][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 523.009152][ T30] ? __asan_memcpy+0x40/0x70 [ 523.024144][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 523.030321][ T30] genl_rcv_msg+0x61c/0x7a0 [ 523.035966][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.041059][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 523.048144][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 523.055038][ T30] netlink_rcv_skb+0x232/0x4b0 [ 523.059855][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.069291][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.075431][ T30] ? down_read+0x272/0x2e0 [ 523.079978][ T30] ? genl_rcv+0xd/0x40 [ 523.084743][ T30] genl_rcv+0x28/0x40 [ 523.088946][ T30] netlink_unicast+0x80f/0x9b0 [ 523.097117][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 523.100298][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 523.109078][ T30] ? netlink_sendmsg+0x650/0xb40 [ 523.115146][ T30] ? skb_put+0x11b/0x210 [ 523.119452][ T30] netlink_sendmsg+0x813/0xb40 [ 523.133655][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.139015][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.153622][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.159101][ T30] ____sys_sendmsg+0x972/0x9f0 [ 523.174292][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.179671][ T30] ? import_iovec+0x73/0xa0 [ 523.193650][ T30] ___sys_sendmsg+0x2a5/0x360 [ 523.198428][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.213697][ T30] ? futex_wake+0x4ac/0x580 [ 523.223959][ T30] ? __fget_files+0x2a/0x420 [ 523.228617][ T30] ? __fget_files+0x3a0/0x420 [ 523.233347][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 523.240434][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.246227][ T30] ? rcu_is_watching+0x15/0xb0 [ 523.251057][ T30] do_syscall_64+0x14d/0xf80 [ 523.256018][ T30] ? trace_irq_disable+0x3b/0x150 [ 523.268291][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.278301][ T30] ? clear_bhb_loop+0x40/0x90 [ 523.283110][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.289329][ T30] RIP: 0033:0x7fb83cd9c819 [ 523.294886][ T30] RSP: 002b:00007fb83dc7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.303795][ T30] RAX: ffffffffffffffda RBX: 00007fb83d015fa0 RCX: 00007fb83cd9c819 [ 523.311806][ T30] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 523.329357][ T30] RBP: 00007fb83ce32c91 R08: 0000000000000000 R09: 0000000000000000 [ 523.337856][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.346782][ T30] R13: 00007fb83d016038 R14: 00007fb83d015fa0 R15: 00007ffff80e3a68 [ 523.355436][ T30] [ 523.358572][ T30] [ 523.358572][ T30] Showing all locks held in the system: [ 523.403147][ T30] 1 lock held by rcu_exp_gp_kthr/18: [ 523.453639][ T30] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 523.483582][ T30] 1 lock held by khungtaskd/30: [ 523.488519][ T30] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 523.507058][ T30] 3 locks held by kworker/u8:11/3506: [ 523.513631][ T30] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 523.533876][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 523.542970][ T30] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 523.571177][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 523.573686][ T30] 2 locks held by kworker/u9:1/5146: [ 523.582717][ T30] #0: ffff888026c9f148 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 523.613659][ T30] #1: ffffc9000fc47c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 523.653864][ T30] 1 lock held by udevd/5196: [ 523.659067][ T30] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 523.678756][ T30] 2 locks held by getty/5591: [ 523.683940][ T30] #0: ffff8880327950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 523.713900][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 523.727228][ T30] 2 locks held by syz.3.937/9363: [ 523.737371][ T30] #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 523.753578][ T30] #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 523.774000][ T30] 2 locks held by syz.0.2328/14635: [ 523.779262][ T30] #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 523.792025][ T30] #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 523.820726][ T30] 6 locks held by syz.2.3134/17867: [ 523.836633][ T30] 2 locks held by syz.4.3151/17951: [ 523.847662][ T30] #0: ffff88806b085848 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 523.870154][ T30] #1: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 523.897076][ T30] 2 locks held by syz.4.3151/17953: [ 523.910367][ T30] #0: ffff88807ccc44d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 523.943168][ T30] #1: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 523.967094][ T30] 4 locks held by dhcpcd-run-hook/17975: [ 523.978424][ T30] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 524.004012][ T30] #1: ffffffff9a2c6508 (&____s->seqcount#2){----}-{0:0}, at: ktime_get_real_ts64+0xa9/0x3c0 [ 524.025958][ T30] #2: ffff88802f6d0778 (&sig->wait_chldexit){....}-{3:3}, at: __wake_up_common_lock+0x2f/0x1f0 [ 524.051139][ T30] #3: ffff888031522910 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1390 [ 524.067714][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 524.075836][ T30] [ 524.078340][ T30] ============================================= [ 524.078340][ T30] [ 524.093313][ T30] NMI backtrace for cpu 0 [ 524.093335][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 524.093356][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 524.093368][ T30] Call Trace: [ 524.093376][ T30] [ 524.093384][ T30] dump_stack_lvl+0xe8/0x150 [ 524.093419][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 524.093444][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 524.093473][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 524.093498][ T30] sys_info+0x135/0x170 [ 524.093517][ T30] watchdog+0xfd9/0x1030 [ 524.093548][ T30] ? watchdog+0x21a/0x1030 [ 524.093577][ T30] kthread+0x388/0x470 [ 524.093609][ T30] ? __pfx_watchdog+0x10/0x10 [ 524.093626][ T30] ? __pfx_kthread+0x10/0x10 [ 524.093648][ T30] ret_from_fork+0x51e/0xb90 [ 524.093678][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 524.093703][ T30] ? __switch_to+0xc7d/0x1450 [ 524.093731][ T30] ? __pfx_kthread+0x10/0x10 [ 524.093752][ T30] ret_from_fork_asm+0x1a/0x30 [ 524.093799][ T30] [ 524.201101][ T30] Sending NMI from CPU 0 to CPUs 1: [ 524.206858][ C1] NMI backtrace for cpu 1 [ 524.206877][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 524.206896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 524.206906][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 524.206931][ C1] RIP: 0010:unwind_next_frame+0xd20/0x23c0 [ 524.206957][ C1] Code: 7c 24 68 48 89 9c 24 80 00 00 00 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 <74> 08 48 89 df e8 66 7b b9 00 48 89 5c 24 60 4c 89 64 24 18 49 8d [ 524.206971][ C1] RSP: 0018:ffffc90000ab7538 EFLAGS: 00000246 [ 524.206985][ C1] RAX: dffffc0000000000 RBX: ffffc90000ab7618 RCX: ffffffff90337028 [ 524.206997][ C1] RDX: ffffffff90b436be RSI: 0000000000000002 RDI: ffffffff8c27d520 [ 524.207008][ C1] RBP: 1ffff92000156ec2 R08: 0000000000000013 R09: ffffffff8e75e5a0 [ 524.207019][ C1] R10: ffffc90000ab7658 R11: ffffffff81b0dc10 R12: ffffc90000ab79b0 [ 524.207030][ C1] R13: 1ffff92000156ec3 R14: ffffc90000ab7608 R15: ffffc90000ab0000 [ 524.207041][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 524.207055][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.207066][ C1] CR2: 00007f0acd943000 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 524.207083][ C1] Call Trace: [ 524.207089][ C1] [ 524.207100][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 524.207123][ C1] ? __kasan_slab_free+0x5c/0x80 [ 524.207143][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 524.207161][ C1] arch_stack_walk+0x11b/0x150 [ 524.207187][ C1] ? __kasan_slab_free+0x5c/0x80 [ 524.207207][ C1] stack_trace_save+0xa9/0x100 [ 524.207223][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 524.207238][ C1] ? __kfree_skb+0x5d/0x210 [ 524.207258][ C1] ? worker_thread+0xa53/0xfc0 [ 524.207277][ C1] ? kthread+0x388/0x470 [ 524.207291][ C1] ? ret_from_fork+0x51e/0xb90 [ 524.207309][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 524.207341][ C1] kasan_save_track+0x3e/0x80 [ 524.207357][ C1] ? kasan_save_track+0x3e/0x80 [ 524.207373][ C1] ? kasan_save_free_info+0x46/0x50 [ 524.207394][ C1] ? __kasan_slab_free+0x5c/0x80 [ 524.207435][ C1] kasan_save_free_info+0x46/0x50 [ 524.207457][ C1] __kasan_slab_free+0x5c/0x80 [ 524.207474][ C1] kmem_cache_free+0x187/0x630 [ 524.207492][ C1] ? ieee80211_iface_work+0xb8e/0x1340 [ 524.207512][ C1] ieee80211_iface_work+0xb8e/0x1340 [ 524.207533][ C1] cfg80211_wiphy_work+0x2ab/0x4a0 [ 524.207551][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 524.207572][ C1] process_scheduled_works+0xb6e/0x18c0 [ 524.207605][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 524.207628][ C1] ? assign_work+0x3d5/0x5e0 [ 524.207650][ C1] worker_thread+0xa53/0xfc0 [ 524.207682][ C1] kthread+0x388/0x470 [ 524.207697][ C1] ? __pfx_worker_thread+0x10/0x10 [ 524.207716][ C1] ? __pfx_kthread+0x10/0x10 [ 524.207732][ C1] ret_from_fork+0x51e/0xb90 [ 524.207753][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 524.207771][ C1] ? __switch_to+0xc7d/0x1450 [ 524.207790][ C1] ? __pfx_kthread+0x10/0x10 [ 524.207806][ C1] ret_from_fork_asm+0x1a/0x30 [ 524.207835][ C1] [ 524.550222][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 524.557142][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 524.566547][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 524.576813][ T30] Call Trace: [ 524.580133][ T30] [ 524.583112][ T30] vpanic+0x56c/0xa60 [ 524.587230][ T30] ? __pfx___schedule+0x10/0x10 [ 524.592193][ T30] ? __pfx_vpanic+0x10/0x10 [ 524.596716][ T30] ? __pfx_console_unlock+0x10/0x10 [ 524.602033][ T30] panic+0xc5/0xd0 [ 524.605773][ T30] ? __pfx_panic+0x10/0x10 [ 524.610210][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 524.615691][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 524.621941][ T30] watchdog+0x1023/0x1030 [ 524.626288][ T30] ? watchdog+0x21a/0x1030 [ 524.630730][ T30] kthread+0x388/0x470 [ 524.634807][ T30] ? __pfx_watchdog+0x10/0x10 [ 524.639589][ T30] ? __pfx_kthread+0x10/0x10 [ 524.644288][ T30] ret_from_fork+0x51e/0xb90 [ 524.648949][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 524.654101][ T30] ? __switch_to+0xc7d/0x1450 [ 524.658797][ T30] ? __pfx_kthread+0x10/0x10 [ 524.663495][ T30] ret_from_fork_asm+0x1a/0x30 [ 524.668333][ T30] [ 524.671892][ T30] Kernel Offset: disabled [ 524.676342][ T30] Rebooting in 86400 seconds..