last executing test programs: 2m50.302025317s ago: executing program 2 (id=560): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8010743f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r3, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r4, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000304367d6639ea1bdaff2aecb67560", @ANYRES32=r8, @ANYBLOB="0500180130000000050019010c0000000800260085160000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xca}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x256}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x59a2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0xd, 0x200, 0x1ff, 0x3, 0xfff7, 0x5, 0x7, 0x401]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x7, 0x2]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8010743f, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r3, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r4}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r4, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000304367d6639ea1bdaff2aecb67560", @ANYRES32=r8, @ANYBLOB="0500180130000000050019010c0000000800260085160000"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xca}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x256}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x59a2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0xd, 0x200, 0x1ff, 0x3, 0xfff7, 0x5, 0x7, 0x401]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x7, 0x2]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 2m49.813314242s ago: executing program 2 (id=568): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @dev={0xac, 0x14, 0x14, 0xdc}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0xc, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @dev={0xac, 0x14, 0x14, 0xdc}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffff, 0x6, 0x40, 0x9e37, 0x9}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0xae, &(0x7f0000000000), &(0x7f00000004c0)="52a0fe86f3bdfe591d2d6be8fe5a3766faf9dbf13a962bc2f43c0adf8aad52ead0f1d1eaac1568191f0b584f247524c8e553e070b425b15f4e062abd1de6b29d415af148186832ebe48f8f9344f506f11e399d7cdb4d48ea5e2585089cab455de5c729f6ca0e1d15a3f1f9284fd42c657891430dc9843101cd4c391a8308533214bb6c29d909452f35573e0c66e12d26edfe613927f8d15b3d184087fe8a5f8f75cb4b1400c209707ca3936d9855"}, 0x50) 2m49.590171386s ago: executing program 2 (id=571): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r5, 0x0) ppoll(&(0x7f0000000100)=[{r2}, {r5, 0x1008}, {r1}, {r5, 0x5002}], 0x4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="02b139f890780000"], 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100"/71], 0x190) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m49.427041942s ago: executing program 2 (id=575): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) unshare(0x20000400) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getnexthop={0x44, 0x6a, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20014040}, 0x8000040) (async) r5 = socket$kcm(0x2, 0x1, 0x0) listen(r5, 0x2000000) (async) ioctl$int_out(r3, 0x5460, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x3, 0xfffffffffffffff7, 0x0, 0x81, 0x9}}]}, 0x44}}, 0x0) 2m49.175519448s ago: executing program 2 (id=577): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000140)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) 2m48.982200262s ago: executing program 2 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) 2m39.254089086s ago: executing program 3 (id=711): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0xb3, &(0x7f0000000180)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a70ddb", 0x7d, 0x3a, 0x30d66df472e0f96c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfff}, @enc_lim={0x4, 0x1, 0xff}]}, @hopopts={0x2f, 0x0, '\x00', [@pad1]}], "ff5c8117a0576a28506d0a4a67a62b6617f0069d3b544f27b0de32616ac8cf19fd229faab8432ff5adda3aacb4618fe92a8e39d8e9f88e1524c888a8c182d227f023749ec16ec75ab71fce44c4017aec37f24b5a34"}}}}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x11c}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000085) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) unshare(0x50000400) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) getpeername$ax25(r2, &(0x7f00000002c0)={{0x3, @null}, [@default, @bcast, @default, @netrom, @null, @bcast, @rose, @bcast]}, &(0x7f0000000140)=0x48) 2m39.133366991s ago: executing program 3 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x609, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xfffffff5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x7ff0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}]}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x38}) 2m39.006309567s ago: executing program 3 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) 2m38.930715871s ago: executing program 3 (id=718): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001900)={&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x4000000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x5, 0x0, 0x72}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x28}, 0x94) 2m38.782321975s ago: executing program 3 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, 0x0, 0x0) 2m38.671914942s ago: executing program 3 (id=722): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'nq\x00', 0x1, 0x1, 0x6f}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x7c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 2m33.175704589s ago: executing program 32 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) 2m26.144096592s ago: executing program 4 (id=827): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r4 = socket$inet6(0xa, 0x3, 0x80) getsockopt$sock_buf(r4, 0x1, 0x2b, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) 2m25.908763734s ago: executing program 4 (id=830): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000151) socket$inet(0x2, 0x0, 0xe1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000040000000000000000000000000800000000000000000000000000000000000000000000000000000000000000e9d584164b48e2e60000000000000000000000000000000000000015bdf69e6c43aa970f96c362e6d5f71e2567d8dad6db50f657ddc5218fa8c9206f451cf77a"], 0x68) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x99, 0x6}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r5, 0x9f, "c1a936a785cbc10f19fe6dc69f365b35792fa1474c34be10f2f787a638037b34c02ef4db76e1332195dd192db0e379336145618a3e89342d477c151659dad3480af8d4795308adfd0ef098cdd73e8c85b119b65a098130d7e294ba8f63e668923cd4e43df49288e32807cfabe458f6765ec1a112475955234e97a302da4dff60ef0daf361aa1efdb2c99e1e28962f118d0225ed8865713974c5b222495d9aa"}, &(0x7f0000000040)=0xa7) 2m25.489295211s ago: executing program 4 (id=836): r0 = socket$caif_stream(0x25, 0x1, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00@', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private1, [@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @fragment={0x87, 0x0, 0x3, 0x0, 0x0, 0x6, 0x7}]}}}}}}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000780)=ANY=[@ANYRES32=r3], 0x12) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x10, 0x2, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x20004000) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41240, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) connect$caif(r0, &(0x7f00000003c0)=@rfm={0x25, 0x3, "974a7386d371a23ef74ea97b8a3ae5d9"}, 0x18) 2m25.296951218s ago: executing program 4 (id=839): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x2a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r4, &(0x7f0000000080)={{0x3, @default, 0x2}, [@null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, 0x0, 0x40040090) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x131986e985dac249}, 0x40010) ioctl$sock_proto_private(r0, 0x89e9, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000000)=0xa10) 2m25.086214518s ago: executing program 4 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000040f2ed3d1500000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="1112040081400100140012800b00010067656e65766500000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 2m25.023824366s ago: executing program 4 (id=844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="080005000b00"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000001700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="740000000c006c08020002000c00000098d1abab39a0fef987e280cdf91fc87a676fd0b364d05db69a108d229eb22a1c529b3072222827eac8bb423917ae98e12d1edf7c3224db52505244436e7eda59158a0356a038ebdafc65b4306e1141a8984c7105e99f4e62b89eff19375437bf"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x2000801c) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000001680)=""/58, &(0x7f00000016c0)=0x3a) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000015c0)={r3, r4, 0x3, 0xea, &(0x7f00000014c0)="cba291d43bc09490f15aabd6e0290f2d8e3581923035a3377fc63d208d98b3429a477d714fbc710c0dd38474bd1302cb82301355b7e69568b82594fb827d7406852cc31dc3be35c10a5badd26602fe56eacabb8b732aa902683cffbf82dbab27790bb73ca713de2ef0c75234c6017a0a8a50e0aec86e4646f85e3cfde7f355835554e31f30056ec9bdfc6469ff6cba1f234cd856021487177ec65946c9ad7e1c6c6abd2ad39b3c37647157ed950557e28e929f44454c3b51d7bbf150cba53674d2230028293b95934ac03fde4f63a53da19042809833f8527b315a8b6e7f6ae00f8563068bd6bee7a8e0", 0x1e, 0x7, 0x101, 0x2, 0x62d6, 0x3, 0xb481, 'syz1\x00'}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r7, 0xa01, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x44000) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000004c0)={{r0}, "33e4f676f4c452583eb531dae04f99c09b06f42ad63390c7db159dbc58a3997d56ea3c11a420640db26dd42fff32f468855f902acab9be50a1ada374fe75b204b552772470f8db41231044a525afe8840797b237d747756e6a722ae1796ccc8e31d4ae3b3684fbe434c16e0336774672390733df6892c8fce66012762e47e06366e820d435906b6324dba689eefb9e787ac45aeef6a40ed16470f669cb32de9dfe8577037954f078c114374580fde7ac600b69d03fda62d308da55cdf3dcfe77433711e2e16e4b84afb3e71f691012f958f945f60932768c9a328075c9717d3fe55401eb5800e7b188476b34fd4ba0ddfd528a9b7360083fce41b7aa3472f19bbf328a0b3241e83d9d35c230a77956c122c8373ab629fcec75974863456947ec883dfeac8ca7ad4d2544235d9ff8f2e2391c9a671b2a7b0716ce5e041e4c9d80950e77be9c20029607345c406926c792fca6f3d2a47284baf030541a4a1c8608b4037fc0e319c58b0c8141ccd77d0f2d65af8129cd3f8ee4cb8ee277d5e3114cbda9d9c39ca7ac29ea326fd56bfbb6d6099853ab3919c789e9986001c0b5393c3f151f32b9ee9bdb36f7e75275c338b61c70b262a9830afc6c6a79d6f5ec35e91e9175911284229973e3984b29110703fadbec4efade67975c4286f1ff4f2ea64f490d58a9fb23f14bc83678a1b0dbb3dd5fa9a44ea18c1db1c8dc5ce133e88e7dbcc1450e75939889f9a4df6ccd946dd0d50d8d63ba5e55cdc9980d7cbd07785c489f1d4052d7be1fab4ab3528e59669d57adc678332b26573ae75c308355eddd3bc044d6c3c87f2444baf44d00d5708e077a112920a3a6f3b74bcd09d342fa76f31de797f6cac270210b356ae3dc220ea92d56f374e1a1a1a93d996f71fa6618a2c0264a324c4152a0bde2a9ca4b96ab4ed3a47d5af74ed68da66e4a1e006b2881bcc4a4155aea9a2d3d86b1a83941d3f14df77a2e5c054e60d861bf4251698acbabe8e7a4683ebeda6eaf4d3b5e6ff15270de24da8109fa865ac69209746dec1bb022de65428b7303cb75ed9dc8a96ba93704fdb8cc8761413102aa7f4eda38546323f83f1a4d32e90d5d5ac9df4899e78c012071499c73dec697bc6b44d7a5e1b8eefcae3f0d08b4e9021e8eb65f71a13fa84fb6de71f1a0201425cfcd3fbb9f4205c660e4b36ec26fe5a7d160534067d733a5de0296c0dceeef663f9b95a31913ac52115e40dcb5e8f346609565c3ae2dd31193e3405ab885509eb2cf655f0d56b9fda1c107e6c406dd9162533482b309dc50c5396310b0a4dc2f474ae1a4230c70c47ff0ff8233cd109411b1fc111b53603628d04b1bef4887a238b0ee4452b130103fba69878f2dafdece70b7180bf47827768934cca05143925f881b18cb160c85d0046b3b6a5bc6c249df7e053fc7e93ba6ee2c23d3058b2a27da07bf8adbf0f29894027e4994a7c6e2356a4aeab70ca7023b86b8abc002498fb2fed90f789e85420abc800c29f0a8c36e3fb39130b2cd63469c508fa6e8514d3406a97ff9e9a473a7293a2819c1c50182aa9f654391a6527d967b4b1f51188f5fde0f02ade5a938778c9065bb5bbdfaac6b6bb0a67667b1672b0a74c264b04ed8f1ae62cc6d25e85102eba56cd7dff8186dbc0cd4cfed29c81842cd203761e750316f43f8dfa018455da7cba4f2dc04b7d8e91e3436916726e3b6cd00d7e4d70c28ef2f03ea5701eb406d2624b36b7e5abf9872a9a5a5f2e15b12c4289c20d9358959d9323eaa74b8dbd48a83fb0ddef53369ec6f93677d1edbf8e2d8a5e4c2b407ffc1046bff959088596159b6346368aef90d82551f4f9ee26356aa53ea184cbf35f5d39eb00f40f961265b0e3ea8fea4504aed9c79074b0543dad3bcf91d315b5b63b40e180fefb99f1b0493861af69fafe083f7a170fa086b6c2bc34013dbbbfe02883cd0c0a0af8089a8791af7d7f9c59b03cd56f2d4eb6b56fc78c601d2524d239ea325a6bf6fe0f476e1f267ad4a92ed0b1c23045a43a30cb992a7ad38d30dff129b2fd1dc36dbb2b2c808c23b919946779dbea3ae063996ba0b32789a5af2fccb8648efa802999fc04737793ccfd71d02147d3a4145f9f277c3653be4bacdee2ca64666f9c71f19a2baff740db83c62b68204e4d8c88c7967b24258bf9a56765c3312587da00ec6f36db696bfc62353223a94cfe1ac77a2e8fceee552ac00ab3e9395d9b82572900688225ad065cb2a6efb153a430d9ab36aee6dc6c4176f6756736d7d72876f9ea09606d89b369b224cf0b5073b138ca5a62ebb6121b62a8bd1758f35737952ff13f1a6767d26a6b60f2f3e0c47585b408bf208cdf5b0093e3a891061af54f79447a43c354185e37dd66b076b420ffe86ddc82e276d56c98cd6af8fcb2d946bbcce7e932957d7395191b8eeac685881fa03ca5768a04a93472c20d6352f3e6bf5f17705dfe4050a98733238af1bb3765c0371950f6aea32a38b27fdcf3d2cea65ca56bc7ea9a1c6a1bd19d00e7e3b94405003a24fa67dfb3442579b49418094306c43b6f931a9b98aaced9b383c346e0e9dd744c3beaff5273d793b7f104ed29c55547b49a4eb1faa50e3857635caea9b2d266257e3293ffd681870cd1518971dae78cd63f92d03dffabef08b586a6a48438558bbe09bf89f8d4b8646909574e65cdb92230f1ac3ace1f1c42d18d6cffc53fd0af235b31b7955bf3f7f05a87fb64eca9b077146faf7dbb3905c67f22ecb5140c26d909ce8988cee7bf624e22a021a63e224c61d374d83771f8ad4990097800e916fe556d9c18d62798e5be8e12a731dc22e6165e696158313aa219a95676eb779d7313228a83c98d9f71ffba7ed3df5d8435afdd83dbfaf2b5813e039a4f77103f452b6a1d93cecebad4559ee470859c5dee03fc472d200fa4a4f7b164e3b9ebc515423a58411f4dd443bd5d32e56d451819296cdf83cbbb37cc509404a60bb8f5f0372d94b5197497f3e55e48c562c9b700f208cf5806dfc4896a191fecff0d08dfd50a360120d166d2c67305db5fa1b188203ee1ad9211b67f208375de24bc0e4d010c6013f76cb7d538a67d5847558da5701dd89746afa828c9f5be9a5bb915f1ee1ad516a483102e3d790cf6157195da32bbf358842f6b60ab188d131d5c404dbf1a809c313ad93032699148826850f958b0ce8f1cb6ec0e7b7286d1d7cebb8df6aa4211f25e4c2ff182fdd0caaedbb5d15afff1443041c071e8284b56b1c459a248aaeed4e7a59ec7e9c07228b9b5bcb8b0732912b995305c653f11260c166287386f093a8362989ba7108c6417da0565ebc18b749a4f8f7b131d69fece4bb6cc439581f398bf1a9b06f0ba11c393800ca13976421a5c8bbd2953590f97b41ed0b54ce4c1bb63ec82ad2fe4286ea0136b7da504eae4652a19a75ce35fabddac7772a2c9315a12bb5c5a48db15d9464cfefba16e4c5ed00483d2594fce7cd3c0397ff46a2e4380f9b24bd0a62721e8a8c22c0a70f5ad38a6d4d1fd454ba13f9f89bcb4d810e88864c7f98e4adc3f8d31f9f9e89fb8841c569d222ec129219bbc2b00562a8304b7369666e7638b8835cfeda627fd4b0814cb52ee3811dce187d5745ad3cee8f3a29ff31219ce89890e362d2710e260dd94ef3ec161d16b4fa81b2a54c95940bb9f53be7f1c70fd48f23cc0f0a9b73a65357c41f22e0c04019afd27f07f8b19141c3f49f9e6ecb782f3eb94402f9074b919ed1e254677da4108beea1a350844fceeb21a91a9e8e56d75c80b17e27cf476606bade790e9dffd73f24db3ceb452cf2812875c9cca2867b5070947067e747926635f510044841bc98d7a93a0bad2e442b552cca7cc19757dd5c908c7fb39f2dcfb12c238cfa32ff1cdb3083d3b526c800f19eabd5cf6fd295fde7b6a56f9c757b8e84dc7a2f6da8c9e3e5a1de00c6059450d1a8a7616a6c71bca03a79cca2b3d813c4501331c917a23eab2cccc706b2652345fd45d9372cbba9177b367ee44644db87035271ad9c6bd50bdb3521d4a0dc748c019e439bc38f0cbf8e3e6102cba1ac64550e43fa8c6e8e70302ac158695270f4fc2e8aadfb76c4827e1c3bb5ad48e1772454d9e8bec96343f3ef4881a57e1d6ee976f21800db16f6d4357b1ea3d4b2759a2dff50bcffd007a111cf0571efc12ce7404f1b9f2e9de0f4f335e924ea33594b69b88742e815aaec8fa073393b16a401b1208179bd62ea419f2c53f6fffeeb615a753dd844e8b15fd99b6adef5f9842b6613e53436d3b581d281fc796a9a676ce0cf8d4a9a0d281349ba10c82a4033118ed7c3d278b89efc86a3edc74dd27665a58e2ea77008bbe6dd5e05b24efcd1ceb2865054a4c5fe533c279b9120b2421a51ffec3025577464fc44076a92c3736bb0166a81bb0b7394d6bd639a09af967813315d5686401121376eac7635071ada8dc6c7578b49f0ef05da42a41e8154751afca22a53bc71bf6dab76dfac7a03130cec69cb209bd4511afc21cf986b338bff2bec9ab381638b68403513dfbba33daa028e74880fdaa315b7225d350ee30ca78068ca72ada5d9a58576ac1989d1c816e1e7c5fb2d17a3f4db32120a1e6a0b7e56310d685f063bc6eefb3f18a9198af0b04c9959f666d82e21017099d47392c865ea2459120fa1c6fe737ea1df63330f664bddba2e7d8ffb914c76fd2050375acf945ba922f3a9aab4e7191d799cf2263ce50b0301953b997c8bd4647b205ec9e5866c2fd449d10962f09b83be5e17eac1d1812e0c0d19d399ba82f816a0ed9a1ebe3465a1ac51959dc2f8eada573dd97d9ece13267a8beeda22848afa582e0c56de6a953675bdb70c8ca8c7647e994f51295ed46a37a73d51f2bbba337e5585b989d5a02c770a73ef9cfd43246cd2cf9bee7ba67210a2ec6b0cd6bf4311b280a58ffc02f83f04646d2075cd2a0b1197547cdf8ef42cc1155b32bf8e90ad26a1ff9fb1293f2006eb7580b12f7908e1fd97560d235f333bb7e492cff18e444689406d4c6a609877a73492f131c5bbb3e2e40419c2390603d6af235db1fb2accec96a833f2651b0d306eca888da2220158db4852be946392d6feaae71709dbf76764152af4b4606fd7045b81cee8a68671af1abc3fe5551b5205db5a36eb2b3ee7770b6b8e561f57d4e461e5c32b282ec55ef037ec039d32f482640fca6040fccc08240ed7ce0d58eaf38d70815bc90bb45dab822f938ab1e4529dad5a0a7fd0983b814eb648cf34ec45bb847f2d9f2f6bf03b44e014c14ec7d689a6acda9c7f032df174bcb894471199e242deda1e9e7948fc1a45f3e844dfa7123ef621a0250e3a7fcf9b00b3996d8b3adf3992a4ba120bcbc04dfe903b020d45191c6305070cea31098e87eb9c7cedf7718b94cbee4817b5f55b4503ad2fca92c80015d162344bae77c66812ac884d5c3ce783c341add35ca3600a0810e86380d5a7f7ada0578ae8b1b1c4cf2a81d13dc3903093cba7b3fd6e205b8c8f90d874f455417b6feb5cd473ce4f861b19c6837d3a991e3ba43255c69a0be61be9215a5f06146382fe5ab99959e0ad47e6dc9b818966536739b11428106c0aa7d476c7f1eca2b992f13bc9da5778659313d4ee206cb82269916abdb05ac462a3cda6c7b49b1f1b394d2a24a0e58c6556eb89ce7481041776fda1fb049b37448221331e6c3c36082bf557b29251bab09f516b4fd9a374bbef763799543ad3a7f1eb5f46f513b8e729749be16cecc508042a9e0a893d8835d5a3fb66d87c9e29d70889c3b7b59c47"}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m23.185665535s ago: executing program 33 (id=722): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'nq\x00', 0x1, 0x1, 0x6f}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x7c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 2m12.434256611s ago: executing program 1 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0xa, 0xfffffffffffffffd, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4a9c4b67}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4) 2m12.381176489s ago: executing program 1 (id=955): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x8) 2m12.153486212s ago: executing program 1 (id=959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000080) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000030500"/20, @ANYRES16=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000100000000000a000100aaaaaaaaaa0000001c0012800b00010062726964676500000e00028005002c0004000000"], 0x64}}, 0x0) 2m11.7927157s ago: executing program 1 (id=963): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m11.300117974s ago: executing program 1 (id=969): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x80) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[], 0x50}}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x30, r8, 0x9, 0x70bda9, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400889c}, 0x4048000) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) getpeername$unix(r5, &(0x7f0000000a40)=@abs, &(0x7f0000000ac0)=0x6e) sendmsg$alg(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="d4f0217cb735bd7865b2fe6fefba352ae0114744580fccf4cd9a2b3552d1b256f97b7cd11432e70fb7d4a813b2aff3962a7ca0e7a355c37ecf6702b003a8e0b013c06378f6d658c1a44876ebb96069", 0x4f}, {&(0x7f0000000240)="ef7423b73fef6304d601f9481b316253f326168064adf930b004abf648bf6358d9238965cc4559fbdb", 0x29}, {&(0x7f0000000640)="99ccd745090fb17e9a78b9ee208486a3e91999be8d3301d0ac3510f195f5cd4e62bc64c10c96c684341dbcb00bb034324db3e80687da12e76d7b793afd090f858ea7fa5a03f8fc5a820ce48ccc99e484430e617473179108886149242788ec112c4ca33ca40abed29bebd65ccd605bab7027c84bf84b05c00da08ca77296cf9a94f3905871bf3f058895ce491336f4aed4644d58fd77b580ab623abab52c51c49f21944f6432f94850a26b3255d54eb553aa5f169c5e773ed1f610ffcabdbb0d70e4e9", 0xc3}, {&(0x7f0000000740)="18de63e88a3924d86152cfa3628d3e75981ecbb31a3b6a0dc6a29d739af162928d998853624237fe0d367e520b331f313dc7890c8ee13f4ccd745b9a364a57b1f0c6a75ae5ec3fe17ac4ba28835befe03dfd5fe2bbc2dea5f570ddacf4ed515df4ca65adc1819fa44229c9f2e8b797e04d525889f400dc49be96939af453cf2d33e2b4dce2976a37c009085deecb0041bd779c80c6c3", 0x96}, {&(0x7f00000005c0)="de16fb4b706983c3dbee99174c911ffd6d4ffc", 0x13}], 0x5, &(0x7f0000000880)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @iv={0x60, 0x117, 0x2, 0x4a, "34e1654ef8a241b0bbd7492d80fe028639c31631b0bfc98f75f5d60e1b5d7177e341b2af1063087e0f8aad8d7b9db28613bc14dfc56fdfa9e7a0488f2d2d6f88b7cd1fd31caa85e14076"}, @iv={0x58, 0x117, 0x2, 0x41, "2bf3fd4514740ba837987fd198ccd4a1a494840af5aa5697306619ab59c8fccc7e84e136bba1598d55ee8d7789d0bf8d77ce8804336425d641e037f4f1fbc00a86"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}], 0x160, 0x14}, 0x4051) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r1, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) 2m10.245031706s ago: executing program 1 (id=982): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010097", 0x7) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) 2m9.922993444s ago: executing program 34 (id=844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="080005000b00"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000001700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="740000000c006c08020002000c00000098d1abab39a0fef987e280cdf91fc87a676fd0b364d05db69a108d229eb22a1c529b3072222827eac8bb423917ae98e12d1edf7c3224db52505244436e7eda59158a0356a038ebdafc65b4306e1141a8984c7105e99f4e62b89eff19375437bf"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x2000801c) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000001680)=""/58, &(0x7f00000016c0)=0x3a) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000015c0)={r3, r4, 0x3, 0xea, &(0x7f00000014c0)="cba291d43bc09490f15aabd6e0290f2d8e3581923035a3377fc63d208d98b3429a477d714fbc710c0dd38474bd1302cb82301355b7e69568b82594fb827d7406852cc31dc3be35c10a5badd26602fe56eacabb8b732aa902683cffbf82dbab27790bb73ca713de2ef0c75234c6017a0a8a50e0aec86e4646f85e3cfde7f355835554e31f30056ec9bdfc6469ff6cba1f234cd856021487177ec65946c9ad7e1c6c6abd2ad39b3c37647157ed950557e28e929f44454c3b51d7bbf150cba53674d2230028293b95934ac03fde4f63a53da19042809833f8527b315a8b6e7f6ae00f8563068bd6bee7a8e0", 0x1e, 0x7, 0x101, 0x2, 0x62d6, 0x3, 0xb481, 'syz1\x00'}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r7, 0xa01, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x44000) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000004c0)={{r0}, "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"}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m55.128780131s ago: executing program 35 (id=982): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010097", 0x7) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) 3.998239307s ago: executing program 7 (id=1889): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001840), 0x4) write$cgroup_int(r6, &(0x7f0000000000)=0x6, 0x12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 3.557626612s ago: executing program 7 (id=1896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000600)="e827749185fb5a1aaf6f700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306aeaa0123cc910470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58", 0xa6}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0xffffffd6, 0x74, 0x17b5, 0x0, 0x7}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "b67e"}, @TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x4, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004500001c0000000200119078000000000000000000000000000890787a108b316390e4b0ff6d4ef41ba17200795c5ccb9697d3133f08ee426cc248705188ec28baae023be213a82ba1b9a4966d1bae8a5e31e930ddaa1d67403881cfe78e0a41d687dd24150d494f21"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x25, 0x7, 0x1, 0x0, "7609fdbb69c3386f0e22406075b5a2de153ba06b8f4caeec6c208739b9c5918337"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xa0}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000b4870964f4058c3c0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r7, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r9, 0x8b22, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000b, 0x13, r0, 0x1bf2b000) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r10, 0x4004743b, &(0x7f00000002c0)=0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280007002800000002000000000000000000000105000000080000000000000001000005000000000000000001000000000000000000"], 0x0, 0x42}, 0x20) 3.349514349s ago: executing program 6 (id=1900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="29000300010003", 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffff801, 0x2}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0xdaa, 0x0, 0x8002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0xfffffffe}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xb3546b7f3cdb42a7, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) 3.347931443s ago: executing program 7 (id=1901): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000180), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x4000) 3.202076036s ago: executing program 6 (id=1905): r0 = socket(0x26, 0x3, 0x1000) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xff, 0x4, 0x1, 0xa, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb0, 0x7, {0x6, 0xff, 0x5, 0x7, 0x0, 0x41f, 0x0, @in6=@loopback, @in6=@loopback}}]}, 0x50}}, 0x448d0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0xb8, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xe, 0xe}, {0x4, 0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xa}}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0xa6, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x6, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x22, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593009290"}]}]}}}}}}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r7, 0x800448d5, &(0x7f0000000100)) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000180)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e26, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xffff], r6, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) 2.999399619s ago: executing program 6 (id=1907): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000000)={r1, 0x2}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) 2.893932133s ago: executing program 5 (id=1909): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00000004c0)=""/192, &(0x7f0000000100)=0xc0) (async) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00000004c0)=""/192, &(0x7f0000000100)=0xc0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) accept(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) (async) accept(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x29, 0x8, 0x0, 0x1000, 0x94, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x8, 0x80, 0x9, 0x8001}}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r7, 0x0, {0x2, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) recvfrom$inet(r5, &(0x7f0000000280)=""/89, 0x59, 0x40000002, &(0x7f0000000380)={0x2, 0x4e23, @private=0xa010101}, 0x10) 2.754129781s ago: executing program 5 (id=1911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x0, 0x10}, {0xd}, {0xe, 0x8}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x18, 0x10, 0x3, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0xffff]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x24001084) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x86, &(0x7f0000000440)={@multicast, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0xaa, '!', "451afd", 0x11, "bbefdad29abc4b5de094cb9395bc8e353f0f6ade1c1a0ef9efdab648de612aaa9eacfa02e8e57f3772e6cfbe8895271746bd8c1ae933fcdb78bd38678ac13ea1bf82ee822bbb1ed346cda38dbbb42b3edd124fbac1118e3be83766d7d7baf1696000b07ef65f4e42a0ecc52b305fa446"}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020073797a300000000008e3010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000000000000000aaaab7754d6a628a0555a000000001000d6f99a5e685e99eeeca06a1e2c67f3997b7bcb875b82a8bf851a781721d3493f7cb76ababc4c62843aa22aad10736ceab1d722a376563af659e1721c14ec199bcb71"], 0x68}}, 0x0) close(r0) 2.594366331s ago: executing program 5 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c18e0fffffd9c9d8dfa8855abae4e78878bc9db294fb36980cad88b2e87c9bd08a7d50b5c8b8e42c4899844"], 0x1c}}, 0x0) 2.593994013s ago: executing program 8 (id=1916): bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xb, 0x807, 0x10001, 0x9, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000071109600002650fa5bc82d3fb0ab98061fd04fa55e0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(cipher_null-generic)\x00'}, 0x58) 2.513170814s ago: executing program 8 (id=1917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@xdp, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={r3, 0xfffd, 0x20, 0x0, 0x2}, &(0x7f0000000300)=0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={r4}, &(0x7f00000002c0)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c13024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f300000000008000140"], 0xd4}}, 0x4000010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c13024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f300000000008000140"], 0xd4}}, 0x4000010) 2.350231362s ago: executing program 7 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100000000000200000000000000", @ANYRES32=r2, @ANYBLOB="408f010008200200280012800e0001006970366772657461700000001400028006001100"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket(0x10, 0x3, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c0000000206050000000000000000000000000612000300686173683a6e65742c706f72740000000973797a320000000005002400020000000900020073797a3000000000050005000500000015000300686173683a69702c706f72742c6e65740000000016000300686173683a6e65742c706f72742c6e6574000000050001000700000014000780050014000c000000060005404e230000000000"], 0x9c}, 0x1, 0x0, 0x0, 0xa001}, 0x24040000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004804300018011000100666c6f775f6f66666c6f616400000000100002800900010073797a31000000000900010073797a30000000000900020073797a3200000000220000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2.116002748s ago: executing program 8 (id=1920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040080000000000000020000002800048024000180bbe2f1106700485f090001006d6574610000ef0014000280080001400001000008000073797a30000000000900020173697a3200000000140000001100920000000075a566a22d7185479137197126093ea39e61534280c1869ffd8bb15b3db7c3a598794ba0370436265f481a0ce2e20a478558f6feec27a348ff1b18f90ffbdda77d5a943f1b7d935f68c6038d894c9faa2ad51943abcb1780c42433d187acb792c71b47813e30967ea5f03511452a1454bb2852fdcd993a5157ab381e2b613e5f42e293e3124c7065bb05bc42d9b29606ba92ad0a656ba4f6174b8a6cfa582df452de01dfe7c996e1f4dd9a5fc69ec73b66e424d0fe91d418b5ef74154aed8135ed3044bc02e1ca936f09771ebf988417a3b7d2c2aab79cfdeb7733253edfe10957840844ea410b2305d3a2dfb1c8ee0e1a0e7cca02cb007a1f791e475b27b8ad2732d4b66ee405da41c1911a9a5094447a71a4cf3830b194e721d0a14c0eed82f8acb364e8c32df860a5c5495f8afdd6e548"], 0x7c}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040841}, 0x40804) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000b000000000000000300000000000010000000000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = socket$kcm(0x2d, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r8, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r6, r7}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000000), 0x593, r5}, 0x60) 2.112384562s ago: executing program 5 (id=1922): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x356, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x320, 0x3a, 0xff, @empty, @local, {[@fragment={0x32, 0x0, 0xfa, 0x1, 0x0, 0x1d, 0x66}, @routing={0x8, 0x4, 0x2, 0x2, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x89, 0x8, 0x4, 0x4, 0xf, 0x8, 0x1, [@private1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @mcast2]}, @hopopts={0x11, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo]}, @dstopts={0x0, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0x9, [0x9, 0x8, 0xfa86, 0x7fffffff]}}, @pad1, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}, @hopopts={0x87, 0x13, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x4, 0x5a, "6684ccbddc5223ef425381339c226518048f13127b875351fbf79b4d93647a0696944653e060570614fc48f40416d8ae95f7675244f2a478f83fd83029a4016b907a8975fe22c91b9b39dac3d470a09a7e04defb0964a46812bd"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0xf4, [0x1]}}, @hao={0xc9, 0x10, @mcast2}]}, @fragment={0x32, 0x0, 0x81, 0x1, 0x0, 0x1c, 0x65}, @fragment={0x73, 0x0, 0x5, 0x0, 0x0, 0x7, 0x66}, @hopopts={0x3a, 0x25, '\x00', [@ra, @pad1, @generic={0x6a, 0xda, "cc20030f445b235911dd5a86be6d25681a39be708fd17d453da41ef0b9579ad9ea8236f6f1618c803eea6872b823737585ce3d025dc953d8761212de658ab10714c0019d5c5b01b4b438bdd38d3dbf982619f865edf5a70846daea8995ba82130b76f09f53a7bc40a6f253841c265c429711cab9bd2f9d663162ff6a58b637dc9902caae41bb7f4fdefa21058255f0fd96f930e603925d12d5f83648b5a4985c4d1101367a52df7db8bbf5d0332a5fb771adfc7632f43927e20ba6cbbf07b95be07ec4ff7773244565031c7b26b1403833e63c969c9c7f0b861d"}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x81}, @calipso={0x7, 0x38, {0x1, 0xc, 0x2, 0x6, [0x9, 0x3ff, 0x68, 0x3, 0x6, 0xe55c]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}, @fragment={0x2b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x28}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 2.107373537s ago: executing program 7 (id=1923): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001780)={r1, r2, 0x4}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r4, 0xe4}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x0, 0x401, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8, 0x40, 0xfffffffc, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3, 0x4, 0xff, 0x29808, 0x1, 0x7, '\x00', r7, r2, 0x5, 0x2, 0x1, 0x7, @value=r2}, 0x50) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r8, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) r9 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r9, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r9, 0x5}], 0x1, 0x0, 0x0, 0x0) r10 = socket(0x11, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r11, 0x29, 0x1c, &(0x7f0000000000)={@mcast2, r12}, 0x14) r13 = socket(0x10, 0x3, 0x0) sendto$inet6(r13, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r10, &(0x7f0000000080)={0x11, 0xc, r14, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.106645043s ago: executing program 5 (id=1924): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x12, 0x1, 0x3, 0x7}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) 2.070182542s ago: executing program 0 (id=1925): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000100)) r1 = socket(0x28, 0x5, 0x1) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/250, &(0x7f0000000000)=0xfa) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) close(r2) 2.059251101s ago: executing program 8 (id=1926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) recvfrom$ax25(r3, &(0x7f0000000100)=""/87, 0x57, 0xeb59d7796265ba1a, &(0x7f00000002c0)={{0x3, @null, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) 1.989724576s ago: executing program 6 (id=1927): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac04}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.94209783s ago: executing program 0 (id=1928): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r1, &(0x7f0000000180)="f85115", 0x0}, 0x20) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) 1.881381549s ago: executing program 6 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xce}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6000040}, 0x4840) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x5c}}, 0x40044) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r6, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40054}, 0x5) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r10) sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r11, @ANYBLOB="00042dbd7000fddbdf25040000000900030073797a310000000005000400010000000900030073797a300000000005000400020000000900"], 0x50}}, 0x40010) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r11, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x68}}, 0x20000000) 1.682142491s ago: executing program 0 (id=1930): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r1, 0x5460, 0x20000000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) write(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}], 0x5}, 0x1}], 0x2, 0x0, 0x0) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @multicast1, 0x0}, &(0x7f0000000080)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="f80000002000000829bd7000fcdbdf256c000000fe8000000000000000000000000000aae000000200000000000000004e2100004e21009c0a00a0002b00000000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="ac0007000a010102000000000000000000000000fe8000000000000000000000000000ff4e2248004e2000800a00202016000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="04000000000000008000000000000000000000000000000006000000000000006d00000000000000020000000000000007000000000000000004000000000000000800000000000006000000000000000300000000000000c0ffffffffffffff07000000b46b6e000200020100000000"], 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c014) 1.552897535s ago: executing program 0 (id=1931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000c4540d5c6e02c62a3472f4762ec4493e2bac5da3f325b4feb43b1528322e9e74d10c592614815615c589832a2833f5532d0af79719259dee149c080000000000000011b10400d0a14cd43f6dea49fb4567a45586e9a542bb946b99103f7380dde2c4a4de482bad1be9d4e43b8c03a22d8eab56aa87a3752e240e179ea8", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800500100004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 387.095157ms ago: executing program 8 (id=1932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000003000000050000000500000001000200", @ANYRES32, @ANYBLOB="f8ffe59dacffb1476ef100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000010000000b00"/28], 0x50) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000040)) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0), 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e8", 0x1, 0x2400c054, &(0x7f0000000080)={0xa, 0x4e23, 0x10001, @private2={0xfc, 0x2, '\x00', 0x2}, 0x81}, 0x1c) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x97}, 0x80) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r10}, 0xc) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000140)='\x00\x00\x00\xdf\xe6i\xe6\x95\xb7\xd6\xbf\xddZ\x980\xc7\xd1\x89\xe3\x86^\x00'}, 0x30) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0xc8, 0x0, 0x0) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000080)=ANY=[@ANYBLOB="0080080080"], 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r14, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async) write$cgroup_subtree(r13, &(0x7f0000000540)=ANY=[@ANYBLOB="2d6370752037c6c62ba853bda18d29d4a361ef5e336dfb086a20d1cf36ecbfa5c7b3a3681218ddf5a616011ca3091167b7762718ef107eeabcc94bd4770d27155d114a31e8ff8ded19011ba808bdd95c2c8c732eefd3f3c8cef6877984f80f16525345c2c278040ccd029735a15a5e9bf71214e565502675bdd7f4efc902eaf5d6f3a8ef48393d3e053fbfb4908ff7f097e86db3d9434c3efeb63b847d64450c65c7de84d9e6113728f8c70f9fa5dca7a6d8f7920304d45a8a23e04c32d42ebb41a53ce1bfd9f8bc255ec907f99d770bc8c87fe39ec97cfdf4cbcfa99378fdce7791841f0f88cbcb65a9eb6073fa6b0ab2"], 0x5) 322.181141ms ago: executing program 6 (id=1933): r0 = socket$unix(0x1, 0x2, 0x0) r1 = epoll_create(0x80) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xc0002009}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3cd4e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d42822f7346b616fe28ed0b9f42b0efdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af829500000000", 0x13c}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 277.208334ms ago: executing program 0 (id=1934): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) 132.254569ms ago: executing program 7 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 64) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) (async, rerun: 64) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 32) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r3, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0xff, 0x0, 0x0, 0x0, "6a53198af9b87849"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x28, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) (async) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f00000006c0)) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) (async) bind$inet(r9, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) syz_emit_ethernet(0xa2, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00a100000086dd60fb35190068030000000000000000000000000000000001fe8000000000000000000000000000bb330b0000000000000738000000010c0502005c660000000000004c000000000000000100000000000000d90000000000000084aa1d6b0000000002000000000000000001000101000401020710000000030200fbff01000000000000000001003200000000000000"], 0x0) 66.293879ms ago: executing program 8 (id=1936): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x0, 0xffff}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 65.751212ms ago: executing program 0 (id=1937): syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8}}]}]}}}}}}}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e2200f79078b6"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x4c, 0x0, &(0x7f0000000300)) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1401000022000100000000000000000001"], 0x114}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe5f, 0x0}, 0x20044817) ioctl(r0, 0x2, &(0x7f00000000c0)="2e4dbad8d40f88530cf481d19ce5d8d6846770438ded51f4d7a2323fd35b9b5c29261c14ed235074f0af3baa4aeda0585243d3b45587c4e50e32543671def9aabdbd0ba9a89227e4e3") r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x70}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0, 0x35}, 0x30004001) 0s ago: executing program 5 (id=1938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x20000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYRES64=r7], 0xffdd) (async) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) kernel console output (not intermixed with test programs): ode [ 92.467846][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.501762][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.513269][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.588343][ T1002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598973][ T1002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.628105][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.661717][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.679175][ T5836] veth0_vlan: entered promiscuous mode [ 92.702820][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.745889][ T5836] veth1_vlan: entered promiscuous mode [ 92.766746][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.854485][ T5840] Bluetooth: hci1: command tx timeout [ 92.854504][ T5159] Bluetooth: hci0: command tx timeout [ 92.924500][ T5159] Bluetooth: hci2: command tx timeout [ 92.928803][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.942050][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.942085][ T5836] veth0_macvtap: entered promiscuous mode [ 92.985088][ T5836] veth1_macvtap: entered promiscuous mode [ 93.005309][ T5159] Bluetooth: hci4: command tx timeout [ 93.010821][ T5159] Bluetooth: hci3: command tx timeout [ 93.031792][ T5850] veth0_vlan: entered promiscuous mode [ 93.043554][ T5851] veth0_vlan: entered promiscuous mode [ 93.069149][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.087329][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.101063][ T5850] veth1_vlan: entered promiscuous mode [ 93.114627][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.141539][ T5851] veth1_vlan: entered promiscuous mode [ 93.162133][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.174532][ T5845] veth0_vlan: entered promiscuous mode [ 93.198216][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.213859][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.230939][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.240989][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.260874][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.295517][ T5845] veth1_vlan: entered promiscuous mode [ 93.352444][ T5851] veth0_macvtap: entered promiscuous mode [ 93.396083][ T5851] veth1_macvtap: entered promiscuous mode [ 93.435956][ T5850] veth0_macvtap: entered promiscuous mode [ 93.490741][ T5850] veth1_macvtap: entered promiscuous mode [ 93.552113][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.576622][ T5845] veth0_macvtap: entered promiscuous mode [ 93.594206][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.602507][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.613974][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.657171][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.667571][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.705852][ T5845] veth1_macvtap: entered promiscuous mode [ 93.718643][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.735384][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.780691][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.800606][ T5963] tipc: Started in network mode [ 93.807251][ T5963] tipc: Node identity 06f35440c241, cluster identity 4711 [ 93.814996][ T5963] tipc: Enabled bearer , priority 0 [ 93.834513][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.851804][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.854421][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.879807][ T5963] tipc: Disabling bearer [ 93.928480][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951825][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.980441][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.001557][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.037136][ T5969] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 94.063499][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.088653][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.125849][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.135793][ T5968] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 94.144016][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.155681][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.174433][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.242665][ T5968] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.251957][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.277743][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.382361][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.417156][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.545107][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.567200][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.649267][ T5983] syzkaller0: entered promiscuous mode [ 94.655520][ T5983] syzkaller0: entered allmulticast mode [ 94.708636][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.715884][ T5980] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 94.726093][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.737956][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.755786][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.795383][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.842223][ T5980] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.862473][ T5989] Zero length message leads to an empty skb [ 94.905570][ T5990] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 94.924279][ T5159] Bluetooth: hci0: command tx timeout [ 94.928759][ T5840] Bluetooth: hci1: command tx timeout [ 94.937098][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.970687][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.014127][ T5840] Bluetooth: hci2: command tx timeout [ 95.085523][ T5840] Bluetooth: hci4: command tx timeout [ 95.087530][ T5159] Bluetooth: hci3: command tx timeout [ 95.110465][ T5995] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 95.136872][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'. [ 95.152437][ T5995] dummy0: entered promiscuous mode [ 95.159820][ T5995] bridge0: port 3(dummy0) entered blocking state [ 95.169004][ T5995] bridge0: port 3(dummy0) entered disabled state [ 95.176566][ T5995] dummy0: entered allmulticast mode [ 95.203269][ T5995] bridge0: port 3(dummy0) entered blocking state [ 95.210021][ T5995] bridge0: port 3(dummy0) entered forwarding state [ 95.350880][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 95.639966][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.818565][ T6022] syzkaller1: entered promiscuous mode [ 95.861443][ T6022] syzkaller1: entered allmulticast mode [ 95.888119][ T6015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19'. [ 96.516235][ T6055] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.552914][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 96.630629][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.30'. [ 96.809147][ T6069] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 96.825679][ T6069] bond1 (unregistering): Released all slaves [ 96.853213][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 96.890276][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.247689][ T1215] cfg80211: failed to load regulatory.db [ 97.343442][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 97.414330][ T6109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.42'. [ 97.629885][ T6122] tunl0: entered promiscuous mode [ 97.674287][ T6122] netlink: 'syz.3.44': attribute type 3 has an invalid length. [ 97.866484][ T6130] ksmbd: Unknown IPC event: 3, ignore. [ 99.151596][ T6203] netlink: 'syz.4.66': attribute type 3 has an invalid length. [ 99.915307][ T6230] __nla_validate_parse: 9 callbacks suppressed [ 99.915329][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 100.000505][ T6232] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 100.079856][ T6234] pim6reg527: entered allmulticast mode [ 100.095509][ T6234] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.79'. [ 100.105430][ T6234] netlink: zone id is out of range [ 100.111182][ T6234] netlink: zone id is out of range [ 100.137780][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 100.408950][ T6244] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 100.419236][ T6244] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 100.495231][ T6220] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 100.570152][ T6248] syzkaller0: entered promiscuous mode [ 100.584341][ T6248] syzkaller0: entered allmulticast mode [ 101.036820][ T6279] : renamed from bridge_slave_0 (while UP) [ 101.415933][ T6300] warning: `syz.1.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.734153][ T5159] Bluetooth: hci0: command 0x0401 tx timeout [ 102.009282][ T6330] netlink: 'syz.0.102': attribute type 30 has an invalid length. [ 102.056659][ T6323] can: request_module (can-proto-0) failed. [ 102.112572][ T6336] netlink: 44 bytes leftover after parsing attributes in process `syz.4.105'. [ 102.138082][ T6330] bond1: option arp_missed_max: invalid value (0) [ 102.157472][ T6330] bond1: option arp_missed_max: allowed values 1 - 255 [ 102.179940][ T6330] bond1 (unregistering): Released all slaves [ 102.226637][ T6340] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 102.278456][ T6342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.108'. [ 102.553334][ T6353] netlink: 44 bytes leftover after parsing attributes in process `syz.4.112'. [ 102.577354][ T6353] netlink: 21 bytes leftover after parsing attributes in process `syz.4.112'. [ 102.586655][ T6353] netlink: 21 bytes leftover after parsing attributes in process `syz.4.112'. [ 102.604709][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 103.159533][ T6386] team0: Cannot enslave team device to itself [ 103.363509][ T6399] vlan2: entered promiscuous mode [ 103.369740][ T6399] vlan2: entered allmulticast mode [ 103.375732][ T6399] hsr_slave_1: entered allmulticast mode [ 103.385115][ T6403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.392641][ T6403] IPv6: NLM_F_CREATE should be set when creating new route [ 103.399488][ T6399] netlink: 48 bytes leftover after parsing attributes in process `syz.2.122'. [ 103.853852][ T6427] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004 [ 104.020969][ T6433] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 104.163411][ T6441] xfrm1: entered promiscuous mode [ 104.176879][ T6441] xfrm1: entered allmulticast mode [ 104.310739][ T6445] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.456864][ T6459] netlink: 'syz.0.140': attribute type 11 has an invalid length. [ 104.762833][ T6463] netem: change failed [ 104.818174][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.867907][ T6478] batadv0: entered promiscuous mode [ 104.911269][ T6478] bond0: entered promiscuous mode [ 104.949954][ T6478] bond_slave_0: entered promiscuous mode [ 104.972999][ T6478] bond_slave_1: entered promiscuous mode [ 104.996025][ T6478] hsr1: entered allmulticast mode [ 105.003623][ T6487] __nla_validate_parse: 10 callbacks suppressed [ 105.003642][ T6487] netlink: 88 bytes leftover after parsing attributes in process `syz.2.147'. [ 105.006075][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 105.022994][ T6478] batadv0: entered allmulticast mode [ 105.038962][ T6478] bond0: entered allmulticast mode [ 105.044604][ T6478] bond_slave_0: entered allmulticast mode [ 105.050563][ T6478] bond_slave_1: entered allmulticast mode [ 105.059563][ T6478] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 105.356610][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 105.404240][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.151'. [ 105.435919][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 105.496084][ T6507] netlink: 'syz.2.153': attribute type 16 has an invalid length. [ 105.529322][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.151'. [ 105.541995][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.153'. [ 105.560048][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 105.579119][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 105.743094][ T6520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 105.847939][ T6520] bond1 (unregistering): Released all slaves [ 105.957965][ T6531] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 105.995015][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.585950][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.593255][ T6528] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 106.615828][ T6528] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 106.737873][ T6537] kthread_run failed with err -4 [ 107.247951][ T6572] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 107.367405][ T6578] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 107.631372][ T6598] Bluetooth: MGMT ver 1.23 [ 108.019390][ T6609] netlink: 'syz.4.183': attribute type 1 has an invalid length. [ 108.576580][ T6640] nbd: must specify an index to disconnect [ 109.041736][ T6652] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 109.249928][ T6668] wlan0 speed is unknown, defaulting to 1000 [ 109.269232][ T6668] wlan0 speed is unknown, defaulting to 1000 [ 109.279500][ T6668] wlan0 speed is unknown, defaulting to 1000 [ 109.292408][ T6668] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.318775][ T6668] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.357954][ T6668] wlan0 speed is unknown, defaulting to 1000 [ 109.412397][ T6668] wlan0 speed is unknown, defaulting to 1000 [ 109.440035][ T6668] wlan0 speed is unknown, defaulting to 1000 [ 109.481966][ T6668] wlan0 speed is unknown, defaulting to 1000 [ 109.499243][ T6668] wlan0 speed is unknown, defaulting to 1000 [ 109.539340][ T6682] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 110.067281][ T6705] __nla_validate_parse: 19 callbacks suppressed [ 110.067300][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 110.102900][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 110.118196][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 110.676200][ T6736] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 110.703437][ T6736] netlink: 172 bytes leftover after parsing attributes in process `syz.2.224'. [ 110.728925][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 110.797727][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 110.867651][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 110.940918][ T6750] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 111.011206][ T6750] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.027910][ T6750] gretap1: entered promiscuous mode [ 111.040515][ T6750] gretap1: entered allmulticast mode [ 111.049772][ T6756] netlink: 168 bytes leftover after parsing attributes in process `syz.2.231'. [ 111.088040][ T6754] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 111.112789][ T6754] netlink: 92 bytes leftover after parsing attributes in process `syz.4.230'. [ 111.439572][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.456384][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.500310][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 111.558900][ T5899] wlan0 speed is unknown, defaulting to 1000 [ 111.861114][ T6791] bridge_slave_1: left allmulticast mode [ 111.867258][ T6791] bridge_slave_1: left promiscuous mode [ 111.873312][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.887295][ T6791] : left allmulticast mode [ 111.891832][ T6791] : left promiscuous mode [ 111.903217][ T6791] bridge0: port 1() entered disabled state [ 112.941484][ T6814] team0: Port device team_slave_1 removed [ 113.734443][ T6889] netlink: 'syz.2.259': attribute type 64 has an invalid length. [ 113.850140][ T6893] pim6reg1: entered promiscuous mode [ 113.866414][ T6893] pim6reg1: entered allmulticast mode [ 114.195550][ T6908] bridge0: port 4(batadv1) entered blocking state [ 114.202651][ T6908] bridge0: port 4(batadv1) entered disabled state [ 114.210272][ T6908] batadv1: entered allmulticast mode [ 114.221173][ T6908] batadv1: entered promiscuous mode [ 114.672944][ T6839] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 114.682592][ T6839] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 114.944853][ T6958] bond2: entered allmulticast mode [ 114.950454][ T6958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.959226][ T6958] bridge0: port 5(bond2) entered blocking state [ 114.966063][ T6958] bridge0: port 5(bond2) entered disabled state [ 114.975010][ T6958] bond2: entered promiscuous mode [ 114.981076][ T6958] bridge0: port 5(bond2) entered blocking state [ 114.987781][ T6958] bridge0: port 5(bond2) entered forwarding state [ 114.999776][ T1156] bridge0: port 5(bond2) entered disabled state [ 115.521415][ T6954] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 115.540009][ T6954] __nla_validate_parse: 10 callbacks suppressed [ 115.540031][ T6954] netlink: 224 bytes leftover after parsing attributes in process `syz.1.279'. [ 115.766390][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 116.071169][ T6985] netlink: 'syz.2.288': attribute type 11 has an invalid length. [ 116.106775][ T6985] netlink: 'syz.2.288': attribute type 39 has an invalid length. [ 116.556533][ T7010] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 116.792239][ T7024] erspan0: entered promiscuous mode [ 116.941300][ T7029] openvswitch: netlink: Message has 5368 unknown bytes. [ 116.972862][ T7029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.014958][ T7029] trusted_key: syz.2.302 sent an empty control message without MSG_MORE. [ 117.194941][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 117.261357][ T7038] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 117.293640][ T7038] netlink: 144 bytes leftover after parsing attributes in process `syz.3.304'. [ 117.324223][ T7038] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 117.356651][ T7038] netlink: 'syz.3.304': attribute type 2 has an invalid length. [ 117.376954][ T7049] netlink: 9 bytes leftover after parsing attributes in process `syz.0.307'. [ 117.384767][ T7038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.304'. [ 117.670158][ T7061] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 117.685779][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 117.745439][ T7061] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.804324][ T7061] gretap1: entered promiscuous mode [ 117.814407][ T7061] gretap1: entered allmulticast mode [ 118.077268][ T7079] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 118.335545][ T7093] netlink: 277 bytes leftover after parsing attributes in process `syz.2.318'. [ 118.721335][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'. [ 118.922463][ T7120] ip6gre1: entered allmulticast mode [ 118.929939][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 118.960472][ T7126] tipc: Enabling of bearer rejected, failed to enable media [ 119.613051][ T7154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.810742][ T7154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.984319][ T7165] tipc: Started in network mode [ 119.989264][ T7165] tipc: Node identity 2a209bf7ecb9, cluster identity 4711 [ 120.038596][ T7165] tipc: Enabled bearer , priority 0 [ 120.093219][ T7164] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 120.176431][ T7154] tipc: Resetting bearer [ 120.201656][ T7171] syzkaller0: entered promiscuous mode [ 120.219253][ T7171] syzkaller0: entered allmulticast mode [ 120.261695][ T7153] tipc: Resetting bearer [ 120.344054][ T7184] syz.4.340 uses old SIOCAX25GETINFO [ 120.366582][ T7153] tipc: Disabling bearer [ 120.595755][ T7197] netlink: 'syz.1.345': attribute type 32 has an invalid length. [ 120.603563][ T7197] __nla_validate_parse: 4 callbacks suppressed [ 120.603581][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 120.615097][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 120.726659][ T7197] bond3: Setting coupled_control to off (0) [ 120.893060][ T7214] netlink: 72 bytes leftover after parsing attributes in process `syz.3.349'. [ 120.907522][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.351'. [ 120.920027][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.351'. [ 121.860353][ T7259] openvswitch: netlink: Message has 5380 unknown bytes. [ 121.867888][ T7259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.039841][ T7272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.366'. [ 122.119380][ T7272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.366'. [ 122.409526][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 122.520814][ T7289] can: request_module (can-proto-0) failed. [ 123.053562][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.124780][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.551621][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.378'. [ 123.608613][ T7341] tipc: Enabled bearer , priority 0 [ 123.616501][ T7336] tipc: Enabling of bearer rejected, already enabled [ 123.626997][ T7347] syzkaller0: entered promiscuous mode [ 123.632508][ T7347] syzkaller0: entered allmulticast mode [ 123.665079][ T7336] tipc: Resetting bearer [ 123.768575][ T7333] tipc: Resetting bearer [ 123.811527][ T7333] tipc: Disabling bearer [ 123.906468][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.378'. [ 124.797880][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.806812][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.854152][ T7367] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 126.229442][ T7444] __nla_validate_parse: 3 callbacks suppressed [ 126.229460][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 126.257844][ T7438] bond2: Unable to set down delay as MII monitoring is disabled [ 126.298331][ T7438] bond2 (unregistering): Released all slaves [ 126.331913][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 126.408781][ T7446] netlink: 'syz.4.405': attribute type 8 has an invalid length. [ 126.538620][ T7460] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.409'. [ 126.574288][ T7460] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 126.627034][ T7463] netlink: 'syz.0.409': attribute type 2 has an invalid length. [ 126.640305][ T7462] raw_sendmsg: syz.1.411 forgot to set AF_INET. Fix it! [ 126.675954][ T7462] IPVS: length: 222 != 24 [ 126.719336][ T7463] : entered promiscuous mode [ 126.916592][ T7479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.417'. [ 127.351350][ T7502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.424'. [ 127.843293][ T7525] netlink: 232 bytes leftover after parsing attributes in process `syz.3.431'. [ 128.115987][ T7536] veth0_to_bridge: entered promiscuous mode [ 128.144427][ T7535] veth0_to_bridge: left promiscuous mode [ 128.215209][ T7538] xt_l2tp: missing protocol rule (udp|l2tpip) [ 128.417290][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 128.446029][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 128.457613][ T7552] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 128.482127][ T7552] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 128.484699][ T7546] netlink: 'syz.4.438': attribute type 15 has an invalid length. [ 128.502555][ T7551] Bluetooth: MGMT ver 1.23 [ 128.516915][ T7551] delete_channel: no stack [ 128.538008][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 128.611588][ T7551] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 128.658009][ T7551] netlink: 184 bytes leftover after parsing attributes in process `syz.2.439'. [ 129.000492][ T7574] netlink: 'syz.4.449': attribute type 29 has an invalid length. [ 129.047761][ T7574] netlink: 'syz.4.449': attribute type 29 has an invalid length. [ 129.073340][ T7578] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 129.136695][ T7578] batman_adv: batadv0: Adding interface: team0 [ 129.162547][ T7578] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.203539][ T7588] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 129.240269][ T7578] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 129.295986][ T7592] tipc: Enabling of bearer rejected, failed to enable media [ 129.695503][ T7617] netlink: 'syz.0.459': attribute type 5 has an invalid length. [ 129.808287][ T7619] bridge0: port 3(ipvlan2) entered blocking state [ 129.845760][ T7624] delete_channel: no stack [ 129.849247][ T7619] bridge0: port 3(ipvlan2) entered disabled state [ 129.888353][ T7619] ipvlan2: entered allmulticast mode [ 129.924802][ T7619] bridge0: entered allmulticast mode [ 129.939787][ T7619] ipvlan2: left allmulticast mode [ 129.947563][ T7619] bridge0: left allmulticast mode [ 129.991173][ T7629] pim6reg1: entered promiscuous mode [ 130.033852][ T7629] pim6reg1: entered allmulticast mode [ 130.087001][ T7634] netlink: 'syz.0.465': attribute type 2 has an invalid length. [ 130.331906][ T7646] IPVS: Error connecting to the multicast addr [ 130.365232][ T7647] IPVS: Error connecting to the multicast addr [ 130.505291][ T7658] sctp: [Deprecated]: syz.4.474 (pid 7658) Use of int in maxseg socket option. [ 130.505291][ T7658] Use struct sctp_assoc_value instead [ 130.525617][ T7646] bond1 (unregistering): Released all slaves [ 130.590112][ T7662] tipc: Invalid UDP bearer configuration [ 130.590178][ T7662] tipc: Enabling of bearer rejected, failed to enable media [ 130.726551][ T7669] veth1_macvtap: left promiscuous mode [ 131.422891][ T7709] validate_nla: 1 callbacks suppressed [ 131.422911][ T7709] netlink: 'syz.0.488': attribute type 21 has an invalid length. [ 131.463584][ T7704] bond2: entered promiscuous mode [ 131.469544][ T7704] bond2: entered allmulticast mode [ 131.475915][ T7704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.487477][ T7709] __nla_validate_parse: 15 callbacks suppressed [ 131.487497][ T7709] netlink: 128 bytes leftover after parsing attributes in process `syz.0.488'. [ 131.515144][ T7709] netlink: 3 bytes leftover after parsing attributes in process `syz.0.488'. [ 131.789003][ T7719] bridge_slave_0: left allmulticast mode [ 131.814611][ T7719] bridge_slave_0: left promiscuous mode [ 131.830840][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.867710][ T7719] bridge_slave_1: left allmulticast mode [ 131.875967][ T7719] bridge_slave_1: left promiscuous mode [ 131.881965][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.913522][ T7719] bond0: (slave bond_slave_0): Releasing backup interface [ 131.940307][ T7719] bond0: (slave bond_slave_1): Releasing backup interface [ 131.978649][ T7719] team0: Port device team_slave_0 removed [ 131.988514][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.997992][ T7719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.009378][ T7719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.031783][ T7727] batadv2: entered allmulticast mode [ 132.155639][ T7736] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 132.182474][ T7736] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 132.203505][ T7736] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 132.228339][ T7738] netlink: 'syz.0.500': attribute type 58 has an invalid length. [ 132.240395][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.500'. [ 132.345158][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 132.374693][ T7743] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867007][ T7771] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 132.880556][ T7771] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 133.014296][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 133.231827][ T7785] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 133.644873][ T30] audit: type=1107 audit(1759527557.116:2): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='鼬妉f蜗%Fi鋕apo 欛偔=Qe萙脢Q长'刟钶90xqr憡s$/4R姖鱕铿9hOE' [ 133.672963][ T7801] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 133.712391][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 133.721918][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 133.749812][ T7801] netlink: 'syz.3.518': attribute type 12 has an invalid length. [ 133.757760][ T7801] netlink: 'syz.3.518': attribute type 11 has an invalid length. [ 133.965336][ T7810] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 133.983252][ T7814] netlink: 248 bytes leftover after parsing attributes in process `syz.0.524'. [ 134.027328][ T7810] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 134.207119][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 134.605968][ T7844] syzkaller1: entered promiscuous mode [ 134.611506][ T7844] syzkaller1: entered allmulticast mode [ 134.810582][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 135.053080][ T7876] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 135.312805][ T7886] tipc: Started in network mode [ 135.347839][ T7886] tipc: Node identity 12fc773d81bc, cluster identity 4711 [ 135.368626][ T7886] tipc: Enabled bearer , priority 0 [ 135.395322][ T7886] syzkaller0: entered promiscuous mode [ 135.407807][ T7886] syzkaller0: entered allmulticast mode [ 135.482231][ T7886] tipc: Resetting bearer [ 135.515264][ T7884] tipc: Resetting bearer [ 135.564636][ T7884] tipc: Disabling bearer [ 136.666257][ T7949] __nla_validate_parse: 4 callbacks suppressed [ 136.666279][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.554'. [ 137.214686][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 137.301808][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 137.349621][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 137.426043][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'. [ 137.504262][ T7991] validate_nla: 5 callbacks suppressed [ 137.504282][ T7991] netlink: 'syz.0.566': attribute type 29 has an invalid length. [ 137.569354][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 137.592641][ T8005] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 137.755581][ T8017] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 137.809125][ T8020] netlink: 'syz.1.574': attribute type 10 has an invalid length. [ 137.848177][ T8022] macvlan3: entered promiscuous mode [ 137.853863][ T8022] macvlan3: entered allmulticast mode [ 137.862612][ T8022] bond3: entered promiscuous mode [ 137.870609][ T8022] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 137.881308][ T8022] bond3: left promiscuous mode [ 137.930551][ T8020] bridge0: port 3(dummy0) entered disabled state [ 137.940097][ T8020] dummy0: left allmulticast mode [ 137.953505][ T8020] dummy0: left promiscuous mode [ 137.958962][ T8020] bridge0: port 3(dummy0) entered disabled state [ 137.976329][ T8020] team0: Port device dummy0 added [ 138.210628][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.217314][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.385503][ T8049] netlink: 44 bytes leftover after parsing attributes in process `syz.1.581'. [ 138.395616][ T8049] netlink: 11 bytes leftover after parsing attributes in process `syz.1.581'. [ 138.630683][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 138.642342][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 139.037975][ T8067] unsupported nla_type 52263 [ 139.377237][ T8084] syzkaller0: refused to change device tx_queue_len [ 139.722343][ T8095] wlan0 speed is unknown, defaulting to 1000 [ 139.984674][ T8100] tipc: Started in network mode [ 139.991331][ T8100] tipc: Node identity 1e2d0c3b070e, cluster identity 4711 [ 139.999668][ T8100] tipc: Enabled bearer , priority 0 [ 140.047736][ T8099] tipc: Disabling bearer [ 140.231517][ T8112] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 140.428809][ T8115] hsr_slave_0 (unregistering): left promiscuous mode [ 141.237075][ T8169] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 141.284500][ T8171] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 141.298958][ T8169] veth3: entered promiscuous mode [ 141.311505][ T8169] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 141.356198][ T8173] tipc: Started in network mode [ 141.361291][ T8173] tipc: Node identity e0000002, cluster identity 4711 [ 141.368464][ T8173] tipc: Enabling of bearer rejected, failed to enable media [ 141.778245][ T8193] netlink: 'syz.0.621': attribute type 7 has an invalid length. [ 141.792124][ T8193] xt_socket: unknown flags 0xe4 [ 141.975091][ T8200] tipc: Enabled bearer , priority 0 [ 141.982972][ T8200] syzkaller0: entered promiscuous mode [ 141.989743][ T8200] syzkaller0: entered allmulticast mode [ 142.012053][ T8200] tipc: Resetting bearer [ 142.021411][ T8199] tipc: Resetting bearer [ 142.048329][ T8199] tipc: Disabling bearer [ 142.367576][ T8210] __nla_validate_parse: 13 callbacks suppressed [ 142.367597][ T8210] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.629'. [ 142.428114][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 142.604759][ T8221] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.634'. [ 142.618671][ T8221] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.632586][ T6843] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.654971][ T8226] netlink: 14 bytes leftover after parsing attributes in process `syz.4.635'. [ 142.663899][ T6843] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.663978][ T6843] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.692123][ T6843] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.779887][ T8226] bond0 (unregistering): left promiscuous mode [ 142.786299][ T8226] bond_slave_0: left promiscuous mode [ 142.791887][ T8226] bond_slave_1: left promiscuous mode [ 142.799824][ T8226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.809036][ T8226] bond_slave_0: left allmulticast mode [ 142.822617][ T8226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.833042][ T8226] bond_slave_1: left allmulticast mode [ 142.842875][ T8226] bond0 (unregistering): Released all slaves [ 143.074842][ T8240] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.638'. [ 143.328196][ T8250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.422149][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 143.494154][ T8266] lo: entered promiscuous mode [ 143.516298][ T8266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.555979][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 143.566647][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 143.584851][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 143.773446][ T8278] netlink: 'syz.0.650': attribute type 1 has an invalid length. [ 143.867933][ T8278] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.905468][ T8287] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.919479][ T8287] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 143.931368][ T8287] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 143.990893][ T8295] xt_limit: Overflow, try lower: 271964/0 [ 144.241023][ T8308] netlink: 'syz.0.659': attribute type 29 has an invalid length. [ 144.249878][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 144.263661][ T8308] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 144.277059][ T8308] veth0_virt_wifi: entered allmulticast mode [ 144.308509][ T8308] team0: Port device veth0_virt_wifi added [ 144.382101][ T8312] netlink: 'syz.0.659': attribute type 8 has an invalid length. [ 144.538240][ T8319] : renamed from vlan0 [ 146.215076][ T8400] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 147.019518][ T8439] netlink: 'syz.0.695': attribute type 11 has an invalid length. [ 147.451099][ T8459] __nla_validate_parse: 1 callbacks suppressed [ 147.451120][ T8459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.701'. [ 147.576111][ T8464] netlink: 44 bytes leftover after parsing attributes in process `syz.4.703'. [ 147.846893][ T8479] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 147.884125][ T8479] bond5: entered promiscuous mode [ 147.889685][ T8479] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.952201][ T8479] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.966693][ T8479] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 147.981256][ T8479] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 147.988867][ T8489] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 147.998710][ T8489] netlink: 224 bytes leftover after parsing attributes in process `syz.3.711'. [ 148.008867][ T8479] bond5: (slave wireguard0): making interface the new active one [ 148.017062][ T8479] wireguard0: entered promiscuous mode [ 148.024461][ T8479] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 148.327738][ T8501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.717'. [ 148.498150][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 148.618846][ T8513] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.626712][ T3093] IPVS: starting estimator thread 0... [ 148.713972][ T8514] IPVS: using max 25 ests per chain, 60000 per kthread [ 148.809360][ T8518] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 149.045836][ T8524] netlink: 104 bytes leftover after parsing attributes in process `syz.0.727'. [ 149.276089][ T3093] hid-generic 0005:0B57:0009.0001: unknown main item tag 0x0 [ 149.308262][ T3093] hid-generic 0005:0B57:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 149.650186][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.731'. [ 149.745607][ T8557] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 149.767746][ T8557] netlink: 224 bytes leftover after parsing attributes in process `syz.4.734'. [ 149.796310][ T8558] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 149.817260][ T8558] netlink: 224 bytes leftover after parsing attributes in process `syz.4.734'. [ 150.388579][ T8593] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 150.448314][ T8593] bond6: (slave ip6gretap1): making interface the new active one [ 150.475340][ T8593] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.483614][ T8593] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.496173][ T8593] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 150.872453][ T8620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 151.286843][ T8644] sctp: [Deprecated]: syz.0.751 (pid 8644) Use of int in maxseg socket option. [ 151.286843][ T8644] Use struct sctp_assoc_value instead [ 153.328658][ T8667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.041664][ T8680] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 154.131591][ T8667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.242495][ T8690] __nla_validate_parse: 6 callbacks suppressed [ 154.242514][ T8690] netlink: 64 bytes leftover after parsing attributes in process `syz.0.762'. [ 154.315986][ T8667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.390890][ T8695] macvlan0: entered promiscuous mode [ 154.400269][ T8695] batadv0: entered promiscuous mode [ 154.410680][ T8695] debugfs: 'hsr1' already exists in 'hsr' [ 154.417888][ T8695] Cannot create hsr debugfs directory [ 154.430351][ T8695] macvlan0: left promiscuous mode [ 154.459298][ T8695] batadv0: left promiscuous mode [ 154.510002][ T8667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.562068][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.573535][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.584786][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.596456][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.612360][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.701942][ T8698] wlan0 speed is unknown, defaulting to 1000 [ 154.953892][ T8711] netlink: 92 bytes leftover after parsing attributes in process `syz.1.770'. [ 155.124665][ T8716] bond5: ARP target 1.0.0.0 is already present [ 155.130899][ T8716] bond5: option arp_ip_target: invalid value (1) [ 155.145282][ T8716] bond5 (unregistering): Released all slaves [ 155.186392][ T8718] tipc: Enabling of bearer rejected, failed to enable media [ 155.229283][ T6845] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.258313][ T8698] chnl_net:caif_netlink_parms(): no params data found [ 155.309287][ T6845] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.362737][ T6845] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.393202][ T8724] netlink: 'syz.1.772': attribute type 12 has an invalid length. [ 155.579128][ T1156] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.604197][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.611490][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.629111][ T8698] bridge_slave_0: entered allmulticast mode [ 155.656379][ T8698] bridge_slave_0: entered promiscuous mode [ 155.685027][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.692236][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.723395][ T8698] bridge_slave_1: entered allmulticast mode [ 155.732113][ T8698] bridge_slave_1: entered promiscuous mode [ 155.850120][ T8698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.866594][ T8698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.997133][ T8698] team0: Port device team_slave_0 added [ 156.007995][ T8754] netlink: 'syz.0.782': attribute type 32 has an invalid length. [ 156.017457][ T8698] team0: Port device team_slave_1 added [ 156.041107][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 156.077768][ T8757] Bluetooth: MGMT ver 1.23 [ 156.097505][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 156.138949][ T8754] bond7: option coupled_control: invalid value (52) [ 156.148122][ T8754] bond7 (unregistering): Released all slaves [ 156.181636][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.189555][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.219692][ T8698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.264977][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.273037][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.285434][ T8768] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 156.327267][ T8768] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 156.348971][ T8698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.477958][ T8698] hsr_slave_0: entered promiscuous mode [ 156.496421][ T8698] hsr_slave_1: entered promiscuous mode [ 156.503425][ T8698] debugfs: 'hsr0' already exists in 'hsr' [ 156.524493][ T8698] Cannot create hsr debugfs directory [ 156.691936][ T5159] Bluetooth: hci5: command tx timeout [ 157.198511][ T8698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.231853][ T8698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.272863][ T8698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.304421][ T8698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.401288][ T8808] syzkaller1: entered promiscuous mode [ 157.418703][ T8808] syzkaller1: entered allmulticast mode [ 157.650437][ T8698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.708122][ T8698] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.732746][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.739985][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.760984][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.768229][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.992713][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 158.002418][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'. [ 158.034147][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 158.101794][ T8838] netlink: 'syz.0.801': attribute type 32 has an invalid length. [ 158.243071][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'. [ 158.435922][ T8698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.774656][ T5159] Bluetooth: hci5: command tx timeout [ 159.360266][ T8698] veth0_vlan: entered promiscuous mode [ 159.376571][ T8698] veth1_vlan: entered promiscuous mode [ 159.451116][ T8698] veth0_macvtap: entered promiscuous mode [ 159.462769][ T8698] veth1_macvtap: entered promiscuous mode [ 159.495941][ T8698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.528389][ T8698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.552584][ T1002] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.577793][ T1002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.608325][ T1002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.633485][ T1002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.786762][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.801287][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.900378][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.913354][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.140828][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.761'. [ 160.211011][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.258667][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.274638][ T8924] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 160.303996][ T8924] netlink: 232 bytes leftover after parsing attributes in process `syz.0.817'. [ 160.314136][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 160.351127][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'. [ 160.353539][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.372170][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.482913][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'. [ 160.493578][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'. [ 160.542437][ T8931] tunl0: entered promiscuous mode [ 160.573199][ T8931] gre0: entered promiscuous mode [ 160.634091][ T8931] gretap0: entered promiscuous mode [ 160.657811][ T8941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.819'. [ 160.779768][ T8931] ip_vti0: entered promiscuous mode [ 160.845587][ T5159] Bluetooth: hci5: command tx timeout [ 161.149204][ T8959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.827'. [ 161.197642][ T8958] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 161.209363][ T5921] IPVS: starting estimator thread 0... [ 161.307278][ T8961] IPVS: using max 24 ests per chain, 57600 per kthread [ 161.334191][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.829'. [ 161.407506][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 162.572176][ T9026] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.924394][ T5159] Bluetooth: hci5: command tx timeout [ 163.039817][ T9047] xt_l2tp: invalid flags combination: 0 [ 164.859220][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 164.870724][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 164.879120][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 164.888938][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 164.907248][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.052376][ T9130] wlan0 speed is unknown, defaulting to 1000 [ 165.181086][ T9140] __nla_validate_parse: 3 callbacks suppressed [ 165.181106][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.866'. [ 165.476939][ T9153] netlink: 'syz.1.870': attribute type 3 has an invalid length. [ 165.909238][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.872'. [ 165.972692][ T9130] chnl_net:caif_netlink_parms(): no params data found [ 166.515625][ T9194] bond8: Unable to set down delay as MII monitoring is disabled [ 166.526390][ T9194] bond8 (unregistering): Released all slaves [ 166.630794][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.656902][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.728079][ T9130] bridge_slave_0: entered allmulticast mode [ 166.756473][ T9130] bridge_slave_0: entered promiscuous mode [ 166.803273][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.835079][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.854475][ T9130] bridge_slave_1: entered allmulticast mode [ 166.889221][ T9130] bridge_slave_1: entered promiscuous mode [ 167.006932][ T5840] Bluetooth: hci6: command tx timeout [ 167.231103][ T9220] netlink: 2 bytes leftover after parsing attributes in process `syz.1.881'. [ 167.300406][ T9130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.319050][ T9130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.633643][ T9130] team0: Port device team_slave_0 added [ 167.642055][ T9241] netlink: 45 bytes leftover after parsing attributes in process `syz.1.883'. [ 167.649555][ T9130] team0: Port device team_slave_1 added [ 167.789625][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.822090][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.916792][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 167.930442][ T9130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.958833][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.966956][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.002960][ T9130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.192289][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.888'. [ 168.205947][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 168.235830][ T9130] hsr_slave_0: entered promiscuous mode [ 168.242759][ T9130] hsr_slave_1: entered promiscuous mode [ 168.254775][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.888'. [ 168.265294][ T9130] debugfs: 'hsr0' already exists in 'hsr' [ 168.271175][ T9130] Cannot create hsr debugfs directory [ 168.775714][ T9293] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 168.875639][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 168.905931][ T9297] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.915717][ T9297] bond5: (slave bond6): making interface the new active one [ 168.923846][ T9297] bond5: (slave bond6): Enslaving as an active interface with an up link [ 168.965504][ T9293] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.978186][ T9293] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 169.015122][ T9301] bond8: Removing last ns target with arp_interval on [ 169.094404][ T5840] Bluetooth: hci6: command tx timeout [ 169.102383][ T9130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.114288][ T9130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.130760][ T9130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 169.172229][ T9130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.212231][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'. [ 169.557133][ T9130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.647563][ T9337] IPVS: rr: FWM 3 0x00000003 - no destination available [ 169.655951][ T9130] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.672592][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.679835][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.740765][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.748024][ T6843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.358479][ T9362] __nla_validate_parse: 1 callbacks suppressed [ 170.358501][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 170.377324][ T9359] netlink: 60 bytes leftover after parsing attributes in process `syz.5.905'. [ 170.407007][ T9359] unsupported nlmsg_type 40 [ 170.470106][ T9130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.056933][ T9391] nbd0: detected capacity change from 0 to 127 [ 171.074914][ T5840] block nbd0: Receive control failed (result -104) [ 171.154564][ T9130] veth0_vlan: entered promiscuous mode [ 171.164820][ T5840] Bluetooth: hci6: command tx timeout [ 171.188674][ T9130] veth1_vlan: entered promiscuous mode [ 171.197130][ T9398] IPVS: Error connecting to the multicast addr [ 171.239846][ T9130] veth0_macvtap: entered promiscuous mode [ 171.252998][ T9130] veth1_macvtap: entered promiscuous mode [ 171.287612][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.316314][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.332297][ T6839] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.347215][ T6839] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.362801][ T6839] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.378281][ T6839] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.503197][ T6841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.516360][ T6841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.617505][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.627632][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.630555][ T9404] netlink: 596 bytes leftover after parsing attributes in process `syz.5.915'. [ 171.641565][ T9406] tipc: Enabled bearer , priority 0 [ 171.661466][ T9406] syzkaller0: entered promiscuous mode [ 171.668903][ T9406] syzkaller0: entered allmulticast mode [ 171.709594][ T9406] tipc: Resetting bearer [ 171.723301][ T9405] tipc: Resetting bearer [ 171.772483][ T9405] tipc: Disabling bearer [ 171.852128][ T9412] netlink: 96 bytes leftover after parsing attributes in process `syz.5.917'. [ 171.950868][ T9412] vlan2: entered allmulticast mode [ 171.999204][ T9420] sctp: [Deprecated]: syz.0.920 (pid 9420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.999204][ T9420] Use struct sctp_sack_info instead [ 172.016620][ T9412] gretap0: entered allmulticast mode [ 172.048821][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 172.065863][ T9419] Unsupported xt match [ 172.065883][ T9419] unable to load match [ 172.451104][ T9436] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 172.479459][ T9436] bond1 (unregistering): Released all slaves [ 173.092306][ T9468] netlink: 48 bytes leftover after parsing attributes in process `syz.0.932'. [ 173.181425][ T9467] vlan0: entered promiscuous mode [ 173.198802][ T9467] vlan0: entered allmulticast mode [ 173.224073][ T9467] hsr_slave_1: entered allmulticast mode [ 173.245936][ T5840] Bluetooth: hci6: command tx timeout [ 173.489590][ T9491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.496902][ T9491] IPv6: NLM_F_CREATE should be set when creating new route [ 173.620287][ T9495] netlink: 'syz.6.939': attribute type 1 has an invalid length. [ 173.695355][ T9495] netlink: 'syz.6.939': attribute type 1 has an invalid length. [ 173.733903][ T9495] netlink: 224 bytes leftover after parsing attributes in process `syz.6.939'. [ 173.750816][ T9499] netlink: 'syz.0.941': attribute type 8 has an invalid length. [ 173.953024][ T9504] bond1: option lp_interval: invalid value (0) [ 173.959983][ T9504] bond1: option lp_interval: allowed values 1 - 2147483647 [ 173.990055][ T9504] bond1 (unregistering): Released all slaves [ 174.032511][ T9503] macvlan0: entered promiscuous mode [ 174.040686][ T9503] batadv0: entered promiscuous mode [ 174.048868][ T9503] debugfs: 'hsr1' already exists in 'hsr' [ 174.055938][ T9503] Cannot create hsr debugfs directory [ 174.061842][ T9503] hsr1: entered allmulticast mode [ 174.068309][ T9503] macvlan0: entered allmulticast mode [ 174.074527][ T9503] veth1_vlan: entered allmulticast mode [ 174.081372][ T9503] batadv0: entered allmulticast mode [ 174.099149][ T9503] macvlan0: left promiscuous mode [ 174.128115][ T9503] batadv0: left promiscuous mode [ 174.229631][ T9516] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 174.258184][ T9519] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 174.748087][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 174.805152][ T9546] vlan3: entered promiscuous mode [ 174.826133][ T9546] bridge0: entered promiscuous mode [ 174.958551][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 175.008789][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.138447][ T9554] bridge_slave_1 (unregistering): left allmulticast mode [ 175.160873][ T9566] netlink: 68 bytes leftover after parsing attributes in process `syz.1.959'. [ 175.185718][ T9554] bridge_slave_1 (unregistering): left promiscuous mode [ 175.192801][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.246588][ T9574] netlink: 'syz.5.961': attribute type 17 has an invalid length. [ 175.358853][ T9574] erspan0: entered promiscuous mode [ 175.376145][ T9574] gretap0: entered promiscuous mode [ 175.452358][ T9579] __nla_validate_parse: 2 callbacks suppressed [ 175.452377][ T9579] netlink: 64 bytes leftover after parsing attributes in process `syz.6.962'. [ 175.474904][ T9579] netlink: 64 bytes leftover after parsing attributes in process `syz.6.962'. [ 175.536326][ T9582] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 175.556429][ T9583] netlink: 'syz.5.964': attribute type 1 has an invalid length. [ 175.755493][ T9588] 8021q: adding VLAN 0 to HW filter on device bond8 [ 175.767346][ T9596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.963'. [ 175.784409][ T9588] bond7: (slave bond8): making interface the new active one [ 175.800724][ T9588] bond7: (slave bond8): Enslaving as an active interface with an up link [ 175.835972][ T9582] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 175.848893][ T9596] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.003372][ T9605] netlink: 'syz.0.970': attribute type 11 has an invalid length. [ 176.026581][ T2958] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.026794][ T9605] netlink: 4112 bytes leftover after parsing attributes in process `syz.0.970'. [ 176.043322][ T2958] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.060459][ T2958] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.071191][ T2958] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.323278][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.972'. [ 176.400036][ T9622] wlan0 speed is unknown, defaulting to 1000 [ 176.487879][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 176.575393][ T9631] netlink: 'syz.6.976': attribute type 1 has an invalid length. [ 176.601057][ T9631] netlink: 'syz.6.976': attribute type 11 has an invalid length. [ 176.613806][ T9631] netlink: 220 bytes leftover after parsing attributes in process `syz.6.976'. [ 176.938575][ T9649] netlink: 'syz.6.979': attribute type 18 has an invalid length. [ 176.972201][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz.6.979'. [ 177.338626][ T9666] gtp0: entered promiscuous mode [ 177.344661][ T9666] gtp0: entered allmulticast mode [ 177.650775][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.988'. [ 178.043144][ T5159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.053510][ T5159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.079624][ T5159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.089338][ T5159] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.099114][ T5159] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.171729][ T9686] wlan0 speed is unknown, defaulting to 1000 [ 178.709398][ T9686] chnl_net:caif_netlink_parms(): no params data found [ 178.929015][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 179.105242][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.112594][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.145667][ T9686] bridge_slave_0: entered allmulticast mode [ 179.159096][ T9686] bridge_slave_0: entered promiscuous mode [ 179.177197][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.197219][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.222907][ T9686] bridge_slave_1: entered allmulticast mode [ 179.238333][ T9686] bridge_slave_1: entered promiscuous mode [ 179.427528][ T9732] hsr_slave_0 (unregistering): left promiscuous mode [ 179.479190][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.506867][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.632605][ T9686] team0: Port device team_slave_0 added [ 179.687358][ T9686] team0: Port device team_slave_1 added [ 179.865906][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.881377][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.908932][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.929525][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.940898][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.968857][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.981619][ T9757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.177759][ T9686] hsr_slave_0: entered promiscuous mode [ 180.199697][ T9686] hsr_slave_1: entered promiscuous mode [ 180.207180][ T5159] Bluetooth: hci7: command tx timeout [ 180.220454][ T9686] debugfs: 'hsr0' already exists in 'hsr' [ 180.226562][ T9686] Cannot create hsr debugfs directory [ 180.393094][ T9781] netlink: 'syz.6.1021': attribute type 11 has an invalid length. [ 180.535264][ T5921] IPVS: starting estimator thread 0... [ 180.638275][ T9786] IPVS: using max 25 ests per chain, 60000 per kthread [ 180.671060][ T9788] __nla_validate_parse: 1 callbacks suppressed [ 180.671081][ T9788] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1024'. [ 180.707428][ T9789] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1024'. [ 180.719181][ T9788] 8021q: VLANs not supported on ip6_vti0 [ 180.760678][ T9686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 180.783271][ T9789] 8021q: VLANs not supported on ip6_vti0 [ 180.800512][ T9794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.821463][ T9686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 180.848026][ T9686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 180.870164][ T9686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 180.947644][ T9804] netlink: 'syz.6.1028': attribute type 3 has an invalid length. [ 180.973813][ T9804] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1028'. [ 181.118348][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.171680][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.212532][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.219734][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.278509][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.285799][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.325318][ T9815] syz.0.1031 (9815) used greatest stack depth: 17864 bytes left [ 181.510071][ T9828] netlink: 'syz.0.1033': attribute type 10 has an invalid length. [ 181.519957][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.590031][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.597316][ T9828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.628668][ T9828] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.795974][ T9838] tipc: New replicast peer: 255.255.255.255 [ 181.802861][ T9838] tipc: Enabled bearer , priority 10 [ 181.820143][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.914579][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 181.931894][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 182.167283][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 182.284366][ T5159] Bluetooth: hci7: command tx timeout [ 182.346475][ T9686] veth0_vlan: entered promiscuous mode [ 182.362145][ T9686] veth1_vlan: entered promiscuous mode [ 182.417603][ T9858] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 182.430616][ T9686] veth0_macvtap: entered promiscuous mode [ 182.457697][ T9686] veth1_macvtap: entered promiscuous mode [ 182.486043][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805654fc00: rx timeout, send abort [ 182.496195][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805654fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 182.513034][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.597623][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.648637][ T6841] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.666841][ T6841] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.717144][ T6841] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.737048][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1039'. [ 182.739228][ T6841] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.805640][ T3093] tipc: Node number set to 3300021312 [ 182.846421][ T9873] netlink: 'syz.0.1040': attribute type 16 has an invalid length. [ 182.879142][ T9873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1040'. [ 183.017431][ T9875] netlink: 'syz.6.1042': attribute type 10 has an invalid length. [ 183.033092][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.061352][ T9875] bridge_slave_1: left allmulticast mode [ 183.067861][ T9875] bridge_slave_1: left promiscuous mode [ 183.073760][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.101098][ T9875] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 183.125642][ T9883] IPv6: NLM_F_REPLACE set, but no existing node found! [ 183.175251][ T6845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.183120][ T6845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.272284][ T9883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.281885][ T9882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1044'. [ 183.320089][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.333532][ T6845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.345652][ T9893] netlink: 'syz.6.1046': attribute type 1 has an invalid length. [ 183.349548][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.362182][ T6845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.431718][ T9894] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 183.491333][ T9894] veth3: entered promiscuous mode [ 183.500700][ T9894] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 183.520516][ T6845] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 183.535200][ T9893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.664826][ T1156] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 183.694713][ T9911] netlink: 'syz.6.1049': attribute type 1 has an invalid length. [ 183.702706][ T9911] netlink: 'syz.6.1049': attribute type 10 has an invalid length. [ 183.713344][ T9911] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1049'. [ 183.910487][ T9920] tipc: Started in network mode [ 183.917061][ T9920] tipc: Node identity 765d77d3200e, cluster identity 4711 [ 183.926343][ T9920] tipc: Enabled bearer , priority 0 [ 183.934306][ T9920] syzkaller0: entered promiscuous mode [ 183.951217][ T9920] syzkaller0: entered allmulticast mode [ 183.993694][ T9920] tipc: Resetting bearer [ 184.003974][ T9919] tipc: Resetting bearer [ 184.029125][ T9919] tipc: Disabling bearer [ 184.364243][ T5159] Bluetooth: hci7: command tx timeout [ 184.374225][ T9945] sctp: [Deprecated]: syz.5.1062 (pid 9945) Use of int in maxseg socket option. [ 184.374225][ T9945] Use struct sctp_assoc_value instead [ 184.434423][ T9955] netlink: 'syz.6.1064': attribute type 30 has an invalid length. [ 184.504878][ T9955] bond2: option arp_missed_max: invalid value (0) [ 184.511545][ T9955] bond2: option arp_missed_max: allowed values 1 - 255 [ 184.527229][ T9955] bond2 (unregistering): Released all slaves [ 185.101933][ T9988] team_slave_0: entered promiscuous mode [ 185.108021][ T9988] team_slave_1: entered promiscuous mode [ 185.125118][ T9988] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 185.133004][ T9988] team0: Device macvtap1 is already an upper device of the team interface [ 185.155039][ T9988] team_slave_0: left promiscuous mode [ 185.160580][ T9988] team_slave_1: left promiscuous mode [ 185.458692][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.774636][T10014] __nla_validate_parse: 8 callbacks suppressed [ 185.774658][T10014] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1084'. [ 185.829405][T10019] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1084'. [ 186.001153][T10021] validate_nla: 2 callbacks suppressed [ 186.001174][T10021] netlink: 'syz.0.1086': attribute type 17 has an invalid length. [ 186.043445][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 186.065226][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'. [ 186.121359][T10021] gretap0: entered promiscuous mode [ 186.131722][T10021] gretap0: left promiscuous mode [ 186.245858][T10044] netlink: 'syz.5.1093': attribute type 7 has an invalid length. [ 186.273942][T10044] netlink: 'syz.5.1093': attribute type 8 has an invalid length. [ 186.444069][ T5159] Bluetooth: hci7: command tx timeout [ 186.522447][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 186.791146][T10072] tipc: Enabled bearer , priority 0 [ 186.800375][T10072] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 186.808228][T10072] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1100'. [ 186.817790][T10072] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 187.533261][T10068] tipc: Disabling bearer [ 187.699728][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 187.796662][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1110'. [ 188.079483][T10134] macvlan0: entered promiscuous mode [ 188.087649][T10134] batadv0: entered promiscuous mode [ 188.097522][T10134] debugfs: 'hsr1' already exists in 'hsr' [ 188.103496][T10134] Cannot create hsr debugfs directory [ 188.109468][T10134] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 188.122884][T10134] hsr1: entered allmulticast mode [ 188.131093][T10134] macvlan0: entered allmulticast mode [ 188.137021][T10134] veth1_vlan: entered allmulticast mode [ 188.142768][T10134] batadv0: entered allmulticast mode [ 188.150533][T10134] macvlan0: left promiscuous mode [ 188.156975][T10139] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1116'. [ 188.167403][T10134] batadv0: left promiscuous mode [ 188.190990][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1116'. [ 188.600567][T10165] netlink: 'syz.7.1125': attribute type 19 has an invalid length. [ 189.357659][T10200] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 189.596275][T10203] bridge_slave_0: left allmulticast mode [ 189.601989][T10203] bridge_slave_0: left promiscuous mode [ 189.608342][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.664362][T10203] bond0: (slave bridge0): Releasing backup interface [ 189.892730][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.905438][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.917411][T10208] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 189.928160][T10208] bond0 (unregistering): Released all slaves [ 190.335188][T10238] netlink: 'syz.7.1148': attribute type 1 has an invalid length. [ 190.888896][T10265] __nla_validate_parse: 5 callbacks suppressed [ 190.888925][T10265] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1155'. [ 190.996576][T10272] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1157'. [ 191.065303][T10267] team0 (unregistering): Port device team_slave_0 removed [ 191.087473][T10267] team0 (unregistering): Port device team_slave_1 removed [ 191.101667][T10267] team0 (unregistering): Port device veth0_virt_wifi removed [ 191.308715][T10278] bond9 (unregistering): Released all slaves [ 191.433085][T10282] tipc: Started in network mode [ 191.440347][T10282] tipc: Node identity ac14140f, cluster identity 4711 [ 191.448102][T10282] tipc: New replicast peer: 255.255.255.255 [ 191.458549][T10282] tipc: Enabled bearer , priority 10 [ 191.487041][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 191.550471][T10282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.881136][T10312] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1171'. [ 192.307988][T10335] netlink: 'syz.7.1177': attribute type 10 has an invalid length. [ 192.327186][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 192.438090][T10323] team0 (unregistering): Port device team_slave_0 removed [ 192.464789][ T3093] tipc: Node number set to 2886997007 [ 192.478351][T10323] team0 (unregistering): Port device team_slave_1 removed [ 192.567742][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.576380][T10335] bridge_slave_1: left allmulticast mode [ 192.582190][T10335] bridge_slave_1: left promiscuous mode [ 192.591478][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.619081][T10335] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.644324][T10346] syzkaller1: entered promiscuous mode [ 192.649869][T10346] syzkaller1: entered allmulticast mode [ 192.771849][T10354] netlink: 'syz.6.1182': attribute type 1 has an invalid length. [ 192.794579][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 192.809491][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 192.820160][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 192.838605][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 192.848175][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 193.008425][T10355] wlan0 speed is unknown, defaulting to 1000 [ 193.021411][T10369] openvswitch: netlink: Key type 48 is out of range max 32 [ 193.475353][T10390] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 193.483181][T10390] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.547782][T10355] chnl_net:caif_netlink_parms(): no params data found [ 193.562084][T10394] netlink: 372 bytes leftover after parsing attributes in process `syz.7.1194'. [ 194.023444][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.031630][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.062724][T10355] bridge_slave_0: entered allmulticast mode [ 194.085295][T10355] bridge_slave_0: entered promiscuous mode [ 194.134856][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.142043][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.177941][T10355] bridge_slave_1: entered allmulticast mode [ 194.188162][T10355] bridge_slave_1: entered promiscuous mode [ 194.336495][T10355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.376411][T10355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.517627][ T5899] IPVS: starting estimator thread 0... [ 194.552539][T10355] team0: Port device team_slave_0 added [ 194.576714][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1208'. [ 194.590035][T10355] team0: Port device team_slave_1 added [ 194.624373][T10456] IPVS: using max 29 ests per chain, 69600 per kthread [ 194.658512][T10458] netlink: 'syz.6.1208': attribute type 1 has an invalid length. [ 194.699823][T10458] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1208'. [ 194.721082][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1208'. [ 194.735621][T10355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.742612][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.798051][T10355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.831019][T10355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.838268][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.869279][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1212'. [ 194.886153][T10355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.924808][ T5159] Bluetooth: hci8: command tx timeout [ 194.925705][T10474] netlink: 'syz.0.1213': attribute type 10 has an invalid length. [ 195.013646][T10474] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 195.231267][T10355] hsr_slave_0: entered promiscuous mode [ 195.247799][T10355] hsr_slave_1: entered promiscuous mode [ 195.265325][T10355] debugfs: 'hsr0' already exists in 'hsr' [ 195.298435][T10355] Cannot create hsr debugfs directory [ 195.352861][T10482] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 196.085925][T10526] netlink: 'syz.7.1223': attribute type 1 has an invalid length. [ 196.094311][T10526] nbd: error processing sock list [ 196.104194][T10526] block nbd1: shutting down sockets [ 196.428200][T10355] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 196.457965][T10355] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 196.486212][T10355] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 196.525537][T10549] __nla_validate_parse: 4 callbacks suppressed [ 196.525559][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1228'. [ 196.541651][T10355] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 196.733213][T10355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.775754][T10355] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.804625][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.811838][ T6841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.835077][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.842309][ T6848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.006764][T10576] tipc: Enabled bearer , priority 10 [ 197.015363][ T5159] Bluetooth: hci8: command tx timeout [ 197.252832][T10585] syzkaller1: entered promiscuous mode [ 197.268807][T10585] syzkaller1: entered allmulticast mode [ 197.360777][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1239'. [ 197.503603][T10355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.770404][T10615] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1246'. [ 198.068228][T10634] mac80211_hwsim hwsim2 pim6reg0: entered promiscuous mode [ 198.084362][T10634] mac80211_hwsim hwsim2 pim6reg0: entered allmulticast mode [ 198.131591][T10636] netlink: 'syz.5.1252': attribute type 11 has an invalid length. [ 198.149570][T10636] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1252'. [ 198.163378][T10638] netlink: 'syz.5.1252': attribute type 11 has an invalid length. [ 198.197640][T10638] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1252'. [ 198.276160][T10355] veth0_vlan: entered promiscuous mode [ 198.319247][T10355] veth1_vlan: entered promiscuous mode [ 198.445742][ T5159] Bluetooth: hci0: command 0x0401 tx timeout [ 198.461114][T10355] veth0_macvtap: entered promiscuous mode [ 198.473309][T10355] veth1_macvtap: entered promiscuous mode [ 198.498134][T10355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.511531][T10355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.558823][ T6848] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.579140][ T6848] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.594759][ T6848] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.608655][ T6848] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.650411][T10661] netlink: 'syz.6.1257': attribute type 1 has an invalid length. [ 198.662000][T10661] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1257'. [ 198.695557][T10661] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1257'. [ 198.765548][T10663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.784013][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.801258][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.948432][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.978312][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.084103][ T5159] Bluetooth: hci8: command tx timeout [ 199.106947][T10678] netlink: 'syz.6.1262': attribute type 58 has an invalid length. [ 199.124842][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1262'. [ 199.449676][T10695] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1269'. [ 199.499985][T10695] 0{X功: renamed from gretap0 (while UP) [ 199.529812][T10695] 0{X功: entered allmulticast mode [ 199.549537][T10695] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 199.830662][T10721] netlink: 'syz.7.1274': attribute type 23 has an invalid length. [ 199.857542][T10723] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1275'. [ 199.934848][T10723] 0{X功: entered promiscuous mode [ 199.956338][T10723] 0{X功: left promiscuous mode [ 200.454025][T10761] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 200.496726][T10761] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 200.535169][T10752] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.173850][ T5159] Bluetooth: hci8: command tx timeout [ 201.566107][ T55] block nbd0: Possible stuck request ffff888025025080: control (read@0,1024B). Runtime 30 seconds [ 201.578176][ T55] block nbd0: Possible stuck request ffff888025025240: control (read@1024,1024B). Runtime 30 seconds [ 201.590062][ T55] block nbd0: Possible stuck request ffff888025025400: control (read@2048,1024B). Runtime 30 seconds [ 201.601548][ T55] block nbd0: Possible stuck request ffff8880250255c0: control (read@3072,1024B). Runtime 30 seconds [ 202.129041][T10835] netlink: 'syz.5.1304': attribute type 1 has an invalid length. [ 202.149841][T10835] __nla_validate_parse: 7 callbacks suppressed [ 202.149864][T10835] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1304'. [ 202.220500][T10841] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 202.321295][T10841] 8021q: adding VLAN 0 to HW filter on device bond9 [ 202.341844][T10842] vlan2: entered promiscuous mode [ 202.359350][T10842] bond9: entered promiscuous mode [ 202.368925][T10842] vlan2: entered allmulticast mode [ 202.381733][T10842] bond9: entered allmulticast mode [ 202.738590][T10870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.746063][T10870] IPv6: NLM_F_CREATE should be set when creating new route [ 202.905126][T10879] netlink: 'syz.0.1313': attribute type 23 has an invalid length. [ 203.745042][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1319'. [ 203.983588][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1321'. [ 204.224711][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1325'. [ 204.238749][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1324'. [ 204.252146][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1325'. [ 204.267795][T10939] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1322'. [ 204.755238][T10958] block nbd1: server does not support multiple connections per device. [ 204.780584][T10958] block nbd1: shutting down sockets [ 204.864735][T10959] block nbd1: server does not support multiple connections per device. [ 204.888645][T10959] block nbd1: shutting down sockets [ 205.051038][ T5899] IPVS: starting estimator thread 0... [ 205.051130][T10981] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 205.092369][T10981] netlink: 'syz.5.1337': attribute type 1 has an invalid length. [ 205.174430][T10985] IPVS: using max 24 ests per chain, 57600 per kthread [ 205.242949][T10992] bond1: (slave bridge3): making interface the new active one [ 205.253587][T10992] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 205.298099][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 205.373032][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1343'. [ 205.377788][T11004] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 205.391923][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1343'. [ 205.427453][T11004] bond1 (unregistering): Released all slaves [ 205.445423][T11008] netlink: 'syz.5.1344': attribute type 10 has an invalid length. [ 205.490313][T11012] netlink: 'syz.0.1346': attribute type 21 has an invalid length. [ 206.378461][T11058] netlink: 'syz.7.1362': attribute type 11 has an invalid length. [ 206.810678][T11078] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 206.812454][T11073] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 207.066733][T11092] dvmrp0: entered allmulticast mode [ 207.219302][T11106] netlink: 'syz.5.1373': attribute type 10 has an invalid length. [ 207.301055][T11106] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 207.527827][T11117] delete_channel: no stack [ 207.611138][T11120] netdevsim netdevsim7 : renamed from netdevsim0 (while UP) [ 207.683491][T11123] tap0: tun_chr_ioctl cmd 1074025677 [ 207.690750][T11123] tap0: linktype set to 65534 [ 207.742362][T11127] __nla_validate_parse: 7 callbacks suppressed [ 207.742384][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1380'. [ 207.757135][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1378'. [ 207.783916][T11128] netlink: 'syz.6.1378': attribute type 1 has an invalid length. [ 207.802061][T11128] netlink: 'syz.6.1378': attribute type 3 has an invalid length. [ 207.825049][T11128] netlink: 'syz.6.1378': attribute type 235 has an invalid length. [ 208.003488][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1385'. [ 208.138922][T11136] netlink: 'syz.6.1383': attribute type 12 has an invalid length. [ 208.147087][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1383'. [ 208.219561][ T6835] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.254448][T11136] netlink: 'syz.6.1383': attribute type 12 has an invalid length. [ 208.262878][ T6835] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.293911][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1383'. [ 208.303101][ T6835] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.330323][ T6835] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.450967][T11155] netlink: 81 bytes leftover after parsing attributes in process `syz.7.1390'. [ 209.020737][T11196] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1398'. [ 209.134636][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1399'. [ 209.159032][T11198] netlink: 'syz.8.1399': attribute type 10 has an invalid length. [ 209.276400][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1401'. [ 209.296593][T11204] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1401'. [ 209.542116][T11216] FAULT_INJECTION: forcing a failure. [ 209.542116][T11216] name failslab, interval 1, probability 0, space 0, times 1 [ 209.579502][T11216] CPU: 1 UID: 0 PID: 11216 Comm: syz.7.1404 Not tainted syzkaller #0 PREEMPT(full) [ 209.579532][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.579553][T11216] Call Trace: [ 209.579561][T11216] [ 209.579571][T11216] dump_stack_lvl+0x189/0x250 [ 209.579614][T11216] ? __pfx____ratelimit+0x10/0x10 [ 209.579649][T11216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.579676][T11216] ? __pfx__printk+0x10/0x10 [ 209.579711][T11216] ? __lock_acquire+0xab9/0xd20 [ 209.579743][T11216] should_fail_ex+0x414/0x560 [ 209.579779][T11216] should_failslab+0xa8/0x100 [ 209.579811][T11216] kmem_cache_alloc_noprof+0x73/0x3c0 [ 209.579836][T11216] ? skb_clone+0x212/0x3a0 [ 209.579869][T11216] skb_clone+0x212/0x3a0 [ 209.579901][T11216] __netlink_deliver_tap+0x404/0x850 [ 209.579940][T11216] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.579964][T11216] netlink_deliver_tap+0x19c/0x1b0 [ 209.579989][T11216] netlink_unicast+0x7fa/0x9e0 [ 209.580033][T11216] ? __pfx_netlink_unicast+0x10/0x10 [ 209.580069][T11216] ? netlink_sendmsg+0x642/0xb30 [ 209.580089][T11216] ? skb_put+0x11b/0x210 [ 209.580114][T11216] netlink_sendmsg+0x805/0xb30 [ 209.580150][T11216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.580186][T11216] ? aa_sock_msg_perm+0xf1/0x1d0 [ 209.580218][T11216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.580250][T11216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.580273][T11216] __sock_sendmsg+0x219/0x270 [ 209.580307][T11216] ____sys_sendmsg+0x505/0x830 [ 209.580341][T11216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.580377][T11216] ? import_iovec+0x74/0xa0 [ 209.580406][T11216] ___sys_sendmsg+0x21f/0x2a0 [ 209.580435][T11216] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.580498][T11216] ? __fget_files+0x2a/0x420 [ 209.580526][T11216] ? __fget_files+0x3a0/0x420 [ 209.580566][T11216] __x64_sys_sendmsg+0x19b/0x260 [ 209.580595][T11216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.580633][T11216] ? __pfx_ksys_write+0x10/0x10 [ 209.580656][T11216] ? rcu_is_watching+0x15/0xb0 [ 209.580686][T11216] ? do_syscall_64+0xbe/0x3b0 [ 209.580712][T11216] do_syscall_64+0xfa/0x3b0 [ 209.580733][T11216] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.580766][T11216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.580788][T11216] ? clear_bhb_loop+0x60/0xb0 [ 209.580814][T11216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.580834][T11216] RIP: 0033:0x7f04b478eec9 [ 209.580861][T11216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.580878][T11216] RSP: 002b:00007f04b5542038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.580906][T11216] RAX: ffffffffffffffda RBX: 00007f04b49e5fa0 RCX: 00007f04b478eec9 [ 209.580921][T11216] RDX: 0000000002004000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 209.580935][T11216] RBP: 00007f04b5542090 R08: 0000000000000000 R09: 0000000000000000 [ 209.580947][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.580958][T11216] R13: 00007f04b49e6038 R14: 00007f04b49e5fa0 R15: 00007ffd9146b138 [ 209.580992][T11216] [ 210.816736][T11269] syzkaller0: entered promiscuous mode [ 210.822349][T11269] syzkaller0: entered allmulticast mode [ 210.866966][T11269] netlink: 'syz.5.1420': attribute type 10 has an invalid length. [ 211.668597][T11316] veth1_macvtap: left promiscuous mode [ 211.701106][T11316] macsec0: entered promiscuous mode [ 211.709215][T11316] macsec0: entered allmulticast mode [ 211.724890][T11316] veth1_macvtap: entered promiscuous mode [ 211.741215][T11316] veth1_macvtap: entered allmulticast mode [ 211.751581][T11316] macsec0: left promiscuous mode [ 211.758358][T11316] macsec0: left allmulticast mode [ 211.769497][T11316] veth1_macvtap: left allmulticast mode [ 211.929409][T11342] IPVS: length: 56 != 24 [ 212.044640][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.050830][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 212.051364][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 212.057781][ T5159] Bluetooth: hci0: command 0x0401 tx timeout [ 212.811565][T11392] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 212.972523][T11386] macvtap1: entered promiscuous mode [ 212.983469][T11386] macvtap1: entered allmulticast mode [ 213.041579][T11403] tipc: Enabling of bearer rejected, failed to enable media [ 213.139225][T11401] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 213.233147][T11415] netlink: 'syz.5.1465': attribute type 1 has an invalid length. [ 213.257078][T11415] __nla_validate_parse: 7 callbacks suppressed [ 213.257098][T11415] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1465'. [ 213.283437][T11418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1463'. [ 213.326406][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1464'. [ 213.335987][T11415] netlink: 'syz.5.1465': attribute type 1 has an invalid length. [ 213.343066][T11415] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1465'. [ 213.392424][T11403] syzkaller0: entered promiscuous mode [ 213.415262][T11403] syzkaller0: entered allmulticast mode [ 213.521506][T11427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1468'. [ 213.531446][T11427] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1468'. [ 213.580406][T11425] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1467'. [ 213.738589][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1471'. [ 213.779370][T11433] xfrm1: entered promiscuous mode [ 213.784997][T11433] xfrm1: entered allmulticast mode [ 213.809995][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 213.844586][T11440] openvswitch: netlink: Flow key attr not present in new flow. [ 213.856499][T11440] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.868926][T11440] netlink: 'syz.7.1472': attribute type 10 has an invalid length. [ 213.876965][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1472'. [ 213.887205][T11440] dummy0: entered promiscuous mode [ 213.893226][T11440] bridge0: port 2(dummy0) entered blocking state [ 213.906593][T11440] bridge0: port 2(dummy0) entered disabled state [ 213.913224][T11440] dummy0: entered allmulticast mode [ 213.934675][T11440] bridge0: port 2(dummy0) entered blocking state [ 213.941177][T11440] bridge0: port 2(dummy0) entered forwarding state [ 214.286958][T11465] IPVS: length: 239 != 24 [ 214.432329][T11476] bond3: Removing last arp target with arp_interval on [ 214.478107][T11483] netlink: 'syz.0.1481': attribute type 10 has an invalid length. [ 214.486329][T11483] netlink: 'syz.0.1481': attribute type 17 has an invalid length. [ 214.702153][T11483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.850944][T11493] netlink: 'syz.0.1484': attribute type 29 has an invalid length. [ 214.880909][T11495] netlink: 'syz.0.1484': attribute type 29 has an invalid length. [ 214.894721][T11494] netlink: 'syz.0.1484': attribute type 29 has an invalid length. [ 214.919072][T11495] netlink: 'syz.0.1484': attribute type 29 has an invalid length. [ 216.515258][T11550] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 216.532185][T11552] netlink: 'syz.5.1501': attribute type 16 has an invalid length. [ 216.561069][T11552] netlink: 'syz.5.1501': attribute type 3 has an invalid length. [ 216.635029][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.642478][T11557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.665695][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.673521][T11557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.018546][T11581] tipc: Started in network mode [ 217.040757][T11581] tipc: Node identity 2a78c3b27ed2, cluster identity 4711 [ 217.054535][T11581] tipc: Enabled bearer , priority 0 [ 217.084220][T11582] syzkaller0: entered promiscuous mode [ 217.103277][T11582] syzkaller0: entered allmulticast mode [ 217.299486][T11581] tipc: Resetting bearer [ 217.388702][T11581] tipc: Disabling bearer [ 217.612383][T11613] syzkaller1: entered promiscuous mode [ 217.644392][T11613] syzkaller1: entered allmulticast mode [ 218.035358][T11621] vlan2: entered promiscuous mode [ 218.040461][T11621] bridge0: entered promiscuous mode [ 218.360395][T11617] __nla_validate_parse: 8 callbacks suppressed [ 218.360418][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1518'. [ 218.889827][T11639] netlink: 81 bytes leftover after parsing attributes in process `syz.7.1525'. [ 219.595548][T11674] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1535'. [ 219.738301][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 220.035251][T11697] netlink: 'syz.5.1539': attribute type 1 has an invalid length. [ 220.667096][T11722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1548'. [ 220.694723][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1546'. [ 220.827390][T11721] hsr_slave_0 (unregistering): left promiscuous mode [ 220.840537][T11730] sctp: [Deprecated]: syz.8.1545 (pid 11730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.840537][T11730] Use struct sctp_sack_info instead [ 221.076868][T11742] netlink: 'syz.5.1553': attribute type 1 has an invalid length. [ 221.145980][T11742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.209118][T11745] bond4: (slave gretap1): making interface the new active one [ 221.272114][T11745] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 222.286770][T11781] netlink: 'syz.0.1562': attribute type 10 has an invalid length. [ 222.317798][T11781] openvswitch: netlink: Flow key attr not present in new flow. [ 222.356378][T11784] netlink: 'syz.8.1564': attribute type 10 has an invalid length. [ 222.434275][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.442150][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.478717][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.486007][T11784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.494623][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.501880][T11784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.524576][T11787] netlink: 'syz.5.1565': attribute type 6 has an invalid length. [ 222.544746][T11784] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 222.559816][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1567'. [ 222.697472][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 222.779474][T11795] netlink: 'syz.8.1568': attribute type 3 has an invalid length. [ 224.031017][T11822] nbd: must specify at least one socket [ 224.204103][ T7389] IPVS: starting estimator thread 0... [ 224.296413][T11833] IPVS: using max 26 ests per chain, 62400 per kthread [ 224.405727][T11840] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 224.609032][T11840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.629880][T11840] batadv_slave_1: entered promiscuous mode [ 224.647003][T11840] batadv_slave_1: entered allmulticast mode [ 224.832173][T11864] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1590'. [ 225.377421][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 225.453160][T11892] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1598'. [ 225.557448][T11897] netlink: 'syz.8.1601': attribute type 26 has an invalid length. [ 225.580616][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1601'. [ 225.622582][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1603'. [ 225.625343][T11897] netlink: 'syz.8.1601': attribute type 26 has an invalid length. [ 225.653859][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1601'. [ 225.797848][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1606'. [ 225.942308][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1607'. [ 226.060312][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1609'. [ 226.134254][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 226.934748][T11963] tc_dump_action: action bad kind [ 228.669880][T12028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.677292][T12028] IPv6: NLM_F_CREATE should be set when creating new route [ 229.221303][T12047] netlink: 'syz.7.1645': attribute type 3 has an invalid length. [ 229.259217][T12047] netlink: 'syz.7.1645': attribute type 2 has an invalid length. [ 229.739498][T12069] netlink: 'syz.6.1655': attribute type 8 has an invalid length. [ 230.287267][T12092] netlink: zone id is out of range [ 230.293222][T12092] netlink: del zone limit has 8 unknown bytes [ 230.514432][T12106] __nla_validate_parse: 7 callbacks suppressed [ 230.514454][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1667'. [ 230.785285][T12125] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1672'. [ 230.906229][T12135] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1677'. [ 231.357100][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1683'. [ 231.378228][T12148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1681'. [ 231.389827][T12148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1681'. [ 231.406198][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1683'. [ 231.489022][T12148] ip6gretap0: entered promiscuous mode [ 231.546182][T12148] debugfs: 'hsr1' already exists in 'hsr' [ 231.551983][T12148] Cannot create hsr debugfs directory [ 231.612659][T12148] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 231.666647][ T55] block nbd0: Possible stuck request ffff888025025080: control (read@0,1024B). Runtime 60 seconds [ 231.677577][ T55] block nbd0: Possible stuck request ffff888025025240: control (read@1024,1024B). Runtime 60 seconds [ 231.688802][ T55] block nbd0: Possible stuck request ffff888025025400: control (read@2048,1024B). Runtime 60 seconds [ 231.700294][ T55] block nbd0: Possible stuck request ffff8880250255c0: control (read@3072,1024B). Runtime 60 seconds [ 231.825054][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1683'. [ 231.879979][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1683'. [ 231.951874][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1683'. [ 232.117920][T12185] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 232.357409][T12194] sctp: [Deprecated]: syz.8.1691 (pid 12194) Use of int in max_burst socket option. [ 232.357409][T12194] Use struct sctp_assoc_value instead [ 232.572429][T12205] veth0: entered promiscuous mode [ 232.716979][T12210] netlink: 'syz.6.1696': attribute type 12 has an invalid length. [ 232.727768][T12210] netlink: 'syz.6.1696': attribute type 29 has an invalid length. [ 232.761101][T12210] netlink: 'syz.6.1696': attribute type 1 has an invalid length. [ 232.772383][ T5843] Bluetooth: hci8: command tx timeout [ 232.787134][T12210] netlink: 'syz.6.1696': attribute type 2 has an invalid length. [ 232.795529][T12205] veth0: left promiscuous mode [ 232.907861][T12221] netlink: zone id is out of range [ 232.913069][T12221] netlink: get zone limit has 8 unknown bytes [ 233.400555][T12250] netlink: 'syz.0.1708': attribute type 178 has an invalid length. [ 234.434742][T12299] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode [ 234.442029][T12299] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode [ 234.617639][T12300] wlan0 speed is unknown, defaulting to 1000 [ 234.787026][T12303] syzkaller1: entered promiscuous mode [ 234.793127][T12303] syzkaller1: entered allmulticast mode [ 235.208944][T12326] syz_tun: entered allmulticast mode [ 235.543635][T12344] netlink: 'syz.6.1737': attribute type 7 has an invalid length. [ 235.551649][T12322] syz_tun: left allmulticast mode [ 235.604241][T12345] __nla_validate_parse: 38 callbacks suppressed [ 235.604263][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1735'. [ 235.857316][T12357] netlink: 'syz.7.1741': attribute type 1 has an invalid length. [ 235.887954][T12357] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 235.900407][T12353] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1739'. [ 235.950584][T12353] lo: entered allmulticast mode [ 235.969350][T12353] lo: left allmulticast mode [ 236.009321][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1744'. [ 236.072902][T12370] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1745'. [ 236.261221][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1747'. [ 236.528178][T12390] netlink: 'syz.0.1750': attribute type 11 has an invalid length. [ 236.552666][T12391] netlink: 'syz.0.1750': attribute type 11 has an invalid length. [ 236.931641][T12409] can: request_module (can-proto-0) failed. [ 261.728063][ T55] block nbd0: Possible stuck request ffff888025025080: control (read@0,1024B). Runtime 90 seconds [ 261.740311][ T55] block nbd0: Possible stuck request ffff888025025240: control (read@1024,1024B). Runtime 90 seconds [ 261.752219][ T55] block nbd0: Possible stuck request ffff888025025400: control (read@2048,1024B). Runtime 90 seconds [ 261.763266][ T55] block nbd0: Possible stuck request ffff8880250255c0: control (read@3072,1024B). Runtime 90 seconds [ 273.404317][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 288.764672][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 288.765585][ T5159] Bluetooth: hci6: command 0x0406 tx timeout [ 291.817021][ T55] block nbd0: Possible stuck request ffff888025025080: control (read@0,1024B). Runtime 120 seconds [ 291.829686][ T55] block nbd0: Possible stuck request ffff888025025240: control (read@1024,1024B). Runtime 120 seconds [ 291.840790][ T55] block nbd0: Possible stuck request ffff888025025400: control (read@2048,1024B). Runtime 120 seconds [ 291.852982][ T55] block nbd0: Possible stuck request ffff8880250255c0: control (read@3072,1024B). Runtime 120 seconds [ 295.411260][T12418] pim6reg: entered allmulticast mode [ 295.454497][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1761'. [ 295.477027][T12424] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1761'. [ 295.716311][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1764'. [ 295.816219][T12444] syzkaller0: entered promiscuous mode [ 295.833481][T12444] syzkaller0: entered allmulticast mode [ 295.846783][T12441] tipc: Enabled bearer , priority 0 [ 295.869698][T12439] tipc: Resetting bearer [ 295.914148][T12439] tipc: Disabling bearer [ 295.988860][T12464] netlink: 'syz.7.1771': attribute type 2 has an invalid length. [ 296.383515][T12482] wlan0 speed is unknown, defaulting to 1000 [ 296.391764][T12487] netlink: 'syz.8.1780': attribute type 10 has an invalid length. [ 296.403970][T12487] bridge0: port 3(team0) entered blocking state [ 296.410485][T12485] netlink: 'syz.7.1779': attribute type 2 has an invalid length. [ 296.422064][T12487] bridge0: port 3(team0) entered disabled state [ 296.430742][T12485] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1779'. [ 296.440497][T12487] team0: entered allmulticast mode [ 296.448075][T12487] team_slave_0: entered allmulticast mode [ 296.459711][T12487] team_slave_1: entered allmulticast mode [ 296.466151][T12491] netlink: 'syz.7.1779': attribute type 2 has an invalid length. [ 296.472798][T12487] team0: entered promiscuous mode [ 296.480349][T12487] team_slave_0: entered promiscuous mode [ 296.486679][T12487] team_slave_1: entered promiscuous mode [ 296.494271][T12487] bridge0: port 3(team0) entered blocking state [ 296.500737][T12487] bridge0: port 3(team0) entered forwarding state [ 296.509056][T12491] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1779'. [ 296.652272][T12490] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 296.685409][T12490] bond0: option packets_per_slave: allowed values 0 - 65535 [ 296.705740][T12490] bond0 (unregistering): Released all slaves [ 296.783856][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1776'. [ 296.807961][T12500] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 296.934950][T12511] netlink: 'syz.8.1786': attribute type 1 has an invalid length. [ 296.995572][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1786'. [ 297.186769][T12511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.241099][T12512] bond1: entered promiscuous mode [ 297.675076][T12546] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1797'. [ 298.087626][T12553] netlink: 'syz.5.1800': attribute type 1 has an invalid length. [ 298.126050][T12550] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1799'. [ 298.415273][T12567] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1805'. [ 298.455717][T12567] syzkaller0: mtu less than device minimum [ 298.862892][T12595] bridge_slave_0: invalid flags given to default FDB implementation [ 299.377970][T12605] wlan0 speed is unknown, defaulting to 1000 [ 299.782965][T12630] team0 (unregistering): Port device team_slave_0 removed [ 299.794850][T12630] team0 (unregistering): Port device team_slave_1 removed [ 300.019664][T12653] netlink: 'syz.8.1827': attribute type 5 has an invalid length. [ 300.125558][T12659] IPVS: ip_vs_edit_dest(): server weight less than zero [ 300.160797][T12661] tipc: Enabled bearer , priority 0 [ 300.171361][T12661] syzkaller0: entered promiscuous mode [ 300.200197][T12661] syzkaller0: entered allmulticast mode [ 300.239520][T12661] tipc: Resetting bearer [ 300.336306][T12661] tipc: Resetting bearer [ 300.396378][T12661] tipc: Disabling bearer [ 300.798824][T12698] syz_tun: entered promiscuous mode [ 300.805024][T12698] vlan3: entered promiscuous mode [ 300.861000][T12706] __nla_validate_parse: 7 callbacks suppressed [ 300.861024][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1844'. [ 301.103553][T12721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.189667][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1851'. [ 301.189688][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1851'. [ 301.211625][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.296983][T12723] bridge_slave_1 (unregistering): left allmulticast mode [ 301.305119][T12723] bridge_slave_1 (unregistering): left promiscuous mode [ 301.312201][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.533307][T12743] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1858'. [ 301.609417][T12749] IPv6: sit1: Disabled Multicast RS [ 301.637440][T12749] sit1: entered allmulticast mode [ 301.736577][T12753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.960164][T12768] netlink: 'syz.5.1866': attribute type 11 has an invalid length. [ 301.984304][T12767] netlink: 'syz.6.1868': attribute type 11 has an invalid length. [ 302.077952][T12778] xt_time: unknown flags 0xf4 [ 302.282075][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1872'. [ 302.309408][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1872'. [ 302.319019][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1872'. [ 302.331343][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1872'. [ 302.341147][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1872'. [ 302.499678][T12792] vlan2: entered allmulticast mode [ 302.508659][T12792] bridge0: entered allmulticast mode [ 302.827882][T12812] bridge0: port 3(ipvlan2) entered blocking state [ 302.835607][T12812] bridge0: port 3(ipvlan2) entered disabled state [ 302.842478][T12812] ipvlan2: entered allmulticast mode [ 302.857550][T12812] bridge0: entered allmulticast mode [ 302.868433][T12812] ipvlan2: left allmulticast mode [ 302.873954][T12812] bridge0: left allmulticast mode [ 303.021555][T12822] veth7: entered promiscuous mode [ 303.029800][T12822] veth7: entered allmulticast mode [ 303.085348][T12833] syzkaller1: entered promiscuous mode [ 303.101384][T12833] syzkaller1: entered allmulticast mode [ 303.258447][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1889'. [ 303.316894][T12840] bond0: entered promiscuous mode [ 303.333940][T12840] bond_slave_0: entered promiscuous mode [ 303.340097][T12840] bond_slave_1: entered promiscuous mode [ 303.347528][T12840] bridge_slave_1: entered promiscuous mode [ 303.358543][T12840] bond0: left promiscuous mode [ 303.369918][T12840] bond_slave_0: left promiscuous mode [ 303.386339][T12840] bond_slave_1: left promiscuous mode [ 303.398095][T12840] bridge_slave_1: left promiscuous mode [ 303.464709][T12857] lo: entered promiscuous mode [ 303.487258][T12857] netlink: 'syz.5.1893': attribute type 2 has an invalid length. [ 303.551588][T12857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.759851][T12865] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 303.922334][T12890] netlink: 'syz.8.1903': attribute type 1 has an invalid length. [ 303.998654][T12890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.070285][T12893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.080781][T12893] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 304.097873][T12893] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 304.127132][ T5842] Bluetooth: hci7: command 0x0406 tx timeout [ 304.197477][T12890] bridge4: entered promiscuous mode [ 304.251044][T12890] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 304.261746][T12904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.460041][T12932] netlink: 'syz.5.1911': attribute type 17 has an invalid length. [ 304.691324][T12942] bond5: Unable to set up delay as MII monitoring is disabled [ 304.712508][T12942] bond5 (unregistering): Released all slaves [ 304.912692][T12958] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 304.953552][T12961] netlink: 'syz.0.1921': attribute type 10 has an invalid length. [ 305.215357][T12972] veth1_macvtap: left promiscuous mode [ 305.225781][T12973] netlink: 'syz.6.1927': attribute type 11 has an invalid length. [ 305.231252][T12972] macsec0: entered promiscuous mode [ 305.244679][T12972] macsec0: entered allmulticast mode [ 305.339549][T12974] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 305.960104][T12972] bridge0: port 3(team0) entered disabled state [ 305.966672][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.331324][T12972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.710549][T12974] veth1_macvtap: entered allmulticast mode [ 306.716883][T12974] veth1_macvtap: entered promiscuous mode [ 306.723031][T12974] macsec0: left promiscuous mode [ 306.728159][T12974] veth1_macvtap: left promiscuous mode [ 306.735555][T12974] macsec0: left allmulticast mode [ 306.740796][T12974] veth1_macvtap: left allmulticast mode [ 306.748526][T12978] __nla_validate_parse: 15 callbacks suppressed [ 306.748550][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1929'. [ 306.779798][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1929'. [ 306.789238][T12978] netlink: 'syz.6.1929': attribute type 3 has an invalid length. [ 306.834147][ T6835] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.873899][ T6835] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.882863][ T6835] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.917719][ T6835] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.196430][ T31] INFO: task syz.3.722:8511 blocked for more than 143 seconds. [ 307.208583][T13023] tipc: New replicast peer: 255.255.255.255 [ 307.226646][T13023] tipc: Enabled bearer , priority 10 [ 307.232706][ T31] Not tainted syzkaller #0 [ 307.244365][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.260734][ T31] task:syz.3.722 state:D stack:24168 pid:8511 tgid:8510 ppid:5850 task_flags:0x400140 flags:0x00080002 [ 307.273395][ T31] Call Trace: [ 307.276868][ T31] [ 307.279934][ T31] __schedule+0x1798/0x4cc0 [ 307.284633][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.289610][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.295100][ T31] ? __pfx___schedule+0x10/0x10 [ 307.300117][ T31] ? schedule+0x91/0x360 [ 307.304783][ T31] schedule+0x165/0x360 [ 307.311356][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.316950][ T31] __mutex_lock+0x7e6/0x1350 [ 307.321439][T13030] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1937'. [ 307.321579][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.338332][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 307.344605][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.349644][ T31] ? stack_trace_save+0x9c/0xe0 [ 307.355126][ T31] ? stack_depot_save_flags+0x40/0x860 [ 307.360654][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 307.366771][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 307.372784][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 307.379532][ T31] ? kmalloc_reserve+0x136/0x290 [ 307.384870][ T31] ? __alloc_skb+0x142/0x2d0 [ 307.389670][ T31] ? netlink_dump+0x1b7/0xe90 [ 307.394718][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 307.400244][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 307.406428][ T31] ? genl_rcv_msg+0x5da/0x790 [ 307.412140][ T31] ? netlink_rcv_skb+0x205/0x470 [ 307.417443][ T31] ? genl_rcv+0x28/0x40 [ 307.421657][ T31] ? netlink_unicast+0x82c/0x9e0 [ 307.427061][ T31] ? netlink_sendmsg+0x805/0xb30 [ 307.432043][ T31] ? __sock_sendmsg+0x219/0x270 [ 307.436954][ T31] ? ____sys_sendmsg+0x505/0x830 [ 307.441925][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 307.447092][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 307.452247][ T31] ? do_syscall_64+0xfa/0x3b0 [ 307.457224][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.463315][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 307.470082][ T31] ? rcu_is_watching+0x15/0xb0 [ 307.474922][ T31] ? trace_kmalloc+0x1f/0xd0 [ 307.479551][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 307.487157][ T31] ? __build_skb_around+0x257/0x3e0 [ 307.492394][ T31] genl_dumpit+0x10b/0x1b0 [ 307.496899][ T31] netlink_dump+0x6e4/0xe90 [ 307.501440][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 307.506938][ T31] ? genl_start+0x499/0x6c0 [ 307.512807][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 307.518374][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 307.524366][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 307.530637][ T31] ? genl_get_cmd+0x496/0x910 [ 307.535380][ T31] ? __pfx_genl_start+0x10/0x10 [ 307.540286][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 307.545617][ T31] ? __pfx_genl_done+0x10/0x10 [ 307.550468][ T31] genl_rcv_msg+0x5da/0x790 [ 307.555087][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.560162][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 307.566765][ T31] ? __asan_memcpy+0x40/0x70 [ 307.571375][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 307.577260][ T31] netlink_rcv_skb+0x205/0x470 [ 307.582048][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.586977][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.592119][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.597537][ T31] ? down_read+0x1ad/0x2e0 [ 307.601992][ T31] genl_rcv+0x28/0x40 [ 307.606309][ T31] netlink_unicast+0x82c/0x9e0 [ 307.611121][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 307.617519][ T31] ? netlink_sendmsg+0x642/0xb30 [ 307.622540][ T31] ? skb_put+0x11b/0x210 [ 307.626919][ T31] netlink_sendmsg+0x805/0xb30 [ 307.631745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.637771][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 307.642770][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.648587][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.654065][ T31] __sock_sendmsg+0x219/0x270 [ 307.658787][ T31] ____sys_sendmsg+0x505/0x830 [ 307.663572][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.669274][ T31] ? import_iovec+0x74/0xa0 [ 307.673877][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 307.678597][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.683906][ T31] ? __fget_files+0x2a/0x420 [ 307.688537][ T31] ? __fget_files+0x3a0/0x420 [ 307.693240][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 307.698486][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.704029][ T31] ? rcu_is_watching+0x15/0xb0 [ 307.708813][ T31] ? do_syscall_64+0xbe/0x3b0 [ 307.713514][ T31] do_syscall_64+0xfa/0x3b0 [ 307.719054][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.727863][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.734054][ T31] ? clear_bhb_loop+0x60/0xb0 [ 307.738764][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.744899][ T31] RIP: 0033:0x7f534898eec9 [ 307.749327][ T31] RSP: 002b:00007f5349825038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.758061][ T31] RAX: ffffffffffffffda RBX: 00007f5348be5fa0 RCX: 00007f534898eec9 [ 307.766116][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000007 [ 307.774156][ T31] RBP: 00007f5348a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 307.782162][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.790807][ T31] R13: 00007f5348be6038 R14: 00007f5348be5fa0 R15: 00007ffdd295f4b8 [ 307.798862][ T31] [ 307.801990][ T31] INFO: task syz.4.844:9022 blocked for more than 143 seconds. [ 307.812263][ T31] Not tainted syzkaller #0 [ 307.820164][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.829108][ T31] task:syz.4.844 state:D stack:26088 pid:9022 tgid:9014 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 307.841531][ T31] Call Trace: [ 307.845323][ T31] [ 307.848434][ T31] __schedule+0x1798/0x4cc0 [ 307.853124][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.858196][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.863080][ T31] ? __pfx___schedule+0x10/0x10 [ 307.868142][ T31] ? schedule+0x91/0x360 [ 307.872451][ T31] schedule+0x165/0x360 [ 307.877178][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.882680][ T31] __mutex_lock+0x7e6/0x1350 [ 307.889767][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.895010][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 307.901037][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.906506][ T31] ? __asan_memset+0x22/0x50 [ 307.911205][ T31] ? ____sys_sendmsg+0x505/0x830 [ 307.916218][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 307.921908][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 307.927434][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 307.933224][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 307.939598][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 307.945989][ T31] ? __nla_parse+0x40/0x60 [ 307.950434][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 307.956946][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 307.962553][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 307.969579][ T31] ? bpf_lsm_capable+0x9/0x20 [ 307.974456][ T31] ? security_capable+0x7e/0x2e0 [ 307.979532][ T31] genl_rcv_msg+0x60e/0x790 [ 307.984192][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.989250][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 307.996204][ T31] netlink_rcv_skb+0x205/0x470 [ 308.001007][ T31] ? __lock_acquire+0xab9/0xd20 [ 308.006133][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.011324][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.016868][ T31] ? down_read+0x1ad/0x2e0 [ 308.021352][ T31] genl_rcv+0x28/0x40 [ 308.027099][ T31] netlink_unicast+0x82c/0x9e0 [ 308.031937][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 308.037348][ T31] ? netlink_sendmsg+0x642/0xb30 [ 308.042327][ T31] ? skb_put+0x11b/0x210 [ 308.046855][ T31] netlink_sendmsg+0x805/0xb30 [ 308.051693][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.057628][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 308.062708][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.068160][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.073499][ T31] __sock_sendmsg+0x219/0x270 [ 308.078278][ T31] ____sys_sendmsg+0x505/0x830 [ 308.083066][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.089074][ T31] ? import_iovec+0x74/0xa0 [ 308.093613][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 308.098378][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.103836][ T31] ? __fget_files+0x2a/0x420 [ 308.108481][ T31] ? __fget_files+0x3a0/0x420 [ 308.113231][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 308.118849][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.125957][ T31] ? rcu_is_watching+0x15/0xb0 [ 308.130784][ T31] ? do_syscall_64+0xbe/0x3b0 [ 308.135691][ T31] do_syscall_64+0xfa/0x3b0 [ 308.140233][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.146165][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.152281][ T31] ? clear_bhb_loop+0x60/0xb0 [ 308.157033][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.162943][ T31] RIP: 0033:0x7fda0418eec9 [ 308.167552][ T31] RSP: 002b:00007fda050bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.176585][ T31] RAX: ffffffffffffffda RBX: 00007fda043e6180 RCX: 00007fda0418eec9 [ 308.184754][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 308.192756][ T31] RBP: 00007fda04211f91 R08: 0000000000000000 R09: 0000000000000000 [ 308.200812][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.209525][ T31] R13: 00007fda043e6218 R14: 00007fda043e6180 R15: 00007ffc80fcb838 [ 308.217605][ T31] [ 308.220889][ T31] [ 308.220889][ T31] Showing all locks held in the system: [ 308.235731][ T31] 3 locks held by ksoftirqd/0/15: [ 308.241122][ T31] 1 lock held by khungtaskd/31: [ 308.246756][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 308.256872][ T31] 2 locks held by getty/5597: [ 308.261569][ T31] #0: ffff88803390d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 308.272051][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 308.282287][ T31] 1 lock held by udevd/5907: [ 308.287103][ T31] #0: ffff888024ead358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 308.296938][ T31] 2 locks held by syz.2.580/8043: [ 308.301982][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.310388][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 308.320696][ T31] 3 locks held by syz.3.722/8511: [ 308.326348][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.335410][ T31] #1: ffff888054ab56e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 308.346537][ T31] #2: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 308.354026][T12981] tipc: Node number set to 1420477362 [ 308.357793][ T31] 2 locks held by syz.4.844/9022: [ 308.367652][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.376008][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 308.387022][ T31] 2 locks held by syz.1.982/9657: [ 308.392097][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.400857][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 308.411298][ T31] 2 locks held by kworker/0:8/12981: [ 308.417202][ T31] #0: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 308.427396][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 308.437800][ T31] 2 locks held by syz.7.1935/13019: [ 308.443047][ T31] #0: ffff888056d1f508 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 308.453873][ T31] #1: ffff88802493e258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 308.463276][ T31] 1 lock held by syz.0.1937/13025: [ 308.469073][ T31] #0: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 308.478692][ T31] 2 locks held by syz.5.1938/13026: [ 308.484285][ T31] #0: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 308.493372][ T31] #1: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 308.504806][ T31] [ 308.507170][ T31] ============================================= [ 308.507170][ T31] [ 308.516107][ T31] NMI backtrace for cpu 0 [ 308.516128][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 308.516151][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.516164][ T31] Call Trace: [ 308.516173][ T31] [ 308.516182][ T31] dump_stack_lvl+0x189/0x250 [ 308.516215][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.516242][ T31] ? __pfx__printk+0x10/0x10 [ 308.516288][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 308.516323][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 308.516354][ T31] ? __pfx__printk+0x10/0x10 [ 308.516391][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.516414][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 308.516451][ T31] watchdog+0xf93/0xfe0 [ 308.516472][ T31] ? watchdog+0x1de/0xfe0 [ 308.516493][ T31] kthread+0x711/0x8a0 [ 308.516519][ T31] ? __pfx_watchdog+0x10/0x10 [ 308.516534][ T31] ? __pfx_kthread+0x10/0x10 [ 308.516558][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.516584][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.516609][ T31] ? __pfx_kthread+0x10/0x10 [ 308.516633][ T31] ret_from_fork+0x436/0x7d0 [ 308.516654][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 308.516677][ T31] ? __switch_to_asm+0x39/0x70 [ 308.516702][ T31] ? __switch_to_asm+0x33/0x70 [ 308.516724][ T31] ? __pfx_kthread+0x10/0x10 [ 308.516748][ T31] ret_from_fork_asm+0x1a/0x30 [ 308.516785][ T31] [ 308.516795][ T31] Sending NMI from CPU 0 to CPUs 1: [ 308.668501][ C1] NMI backtrace for cpu 1 [ 308.668525][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 308.668546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.668558][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 308.668593][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 308.668611][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 308.668627][ C1] RAX: 94bb7414e2590400 RBX: ffffffff81953917 RCX: 94bb7414e2590400 [ 308.668642][ C1] RDX: 0000000000000001 RSI: ffffffff8d50d356 RDI: ffffffff8b9ec4e0 [ 308.668655][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 308.668676][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5b8630 [ 308.668690][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003955b58 [ 308.668702][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 308.668717][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.668730][ C1] CR2: 00007fff54818c08 CR3: 0000000074432000 CR4: 00000000003526f0 [ 308.668747][ C1] Call Trace: [ 308.668754][ C1] [ 308.668761][ C1] default_idle+0x13/0x20 [ 308.668782][ C1] default_idle_call+0x73/0xb0 [ 308.668804][ C1] do_idle+0x1e7/0x510 [ 308.668827][ C1] ? __pfx_do_idle+0x10/0x10 [ 308.668845][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.668884][ C1] cpu_startup_entry+0x44/0x60 [ 308.668903][ C1] start_secondary+0x101/0x110 [ 308.668919][ C1] common_startup_64+0x13e/0x147 [ 308.668955][ C1] [ 308.669596][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 308.841629][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 308.850765][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.860836][ T31] Call Trace: [ 308.864127][ T31] [ 308.867075][ T31] dump_stack_lvl+0x99/0x250 [ 308.871682][ T31] ? __asan_memcpy+0x40/0x70 [ 308.876289][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.881501][ T31] ? __pfx__printk+0x10/0x10 [ 308.886120][ T31] vpanic+0x281/0x750 [ 308.890117][ T31] ? __pfx_vpanic+0x10/0x10 [ 308.894653][ T31] ? preempt_schedule+0xae/0xc0 [ 308.899525][ T31] ? preempt_schedule_common+0x83/0xd0 [ 308.905014][ T31] panic+0xb9/0xc0 [ 308.908754][ T31] ? __pfx_panic+0x10/0x10 [ 308.913185][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 308.918567][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 308.924753][ T31] watchdog+0xfd2/0xfe0 [ 308.929013][ T31] ? watchdog+0x1de/0xfe0 [ 308.933355][ T31] kthread+0x711/0x8a0 [ 308.937461][ T31] ? __pfx_watchdog+0x10/0x10 [ 308.942201][ T31] ? __pfx_kthread+0x10/0x10 [ 308.946831][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.952062][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.957300][ T31] ? __pfx_kthread+0x10/0x10 [ 308.961918][ T31] ret_from_fork+0x436/0x7d0 [ 308.966520][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 308.971652][ T31] ? __switch_to_asm+0x39/0x70 [ 308.976442][ T31] ? __switch_to_asm+0x33/0x70 [ 308.981613][ T31] ? __pfx_kthread+0x10/0x10 [ 308.986253][ T31] ret_from_fork_asm+0x1a/0x30 [ 308.991069][ T31] [ 308.994497][ T31] Kernel Offset: disabled [ 308.998889][ T31] Rebooting in 86400 seconds..