last executing test programs: 3m34.515022909s ago: executing program 1 (id=3124): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@mpls_getroute={0x28, 0x1a, 0x2, 0x70bd29, 0x25dfdbfc, {0x1c, 0x4, 0x80, 0x6, 0xff, 0x3, 0xfd, 0x2, 0x400}, [@RTA_MULTIPATH={0xc, 0x9, {0x23ba, 0x6, 0x5, r1}}]}, 0x28}}, 0x0) 3m34.510636119s ago: executing program 1 (id=3125): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000240)={0x6, @broadcast}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x48, r0, 0x1, 0x0, 0x25dfd9fd, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20044005}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfe}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x7a, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x785f7ba087f2d9a6}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettaction={0x1c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) (rerun: 32) 3m32.16730758s ago: executing program 1 (id=3133): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x1, 0x20040891) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r8, 0xaa0f4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000180)={r6, &(0x7f0000000040)='cgroup.controllers\x00', 0x529083, &(0x7f00000000c0)={@_ha_fsid={[0x100, 0x713]}, {0x4, 0x2, 0x4ff, 0xaf85}}, 0xdad, &(0x7f0000000100), &(0x7f0000000140)=0xfffffffa}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000200)={r5}) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r11, 0xe6905000) 3m31.974454428s ago: executing program 1 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x0, 0x106) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0xe07e872420dfefca) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="58298c00", @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf251700000044000680040003003c00040067636d286165732900000000000000000000000000000000000000000000000014000000010063f9fff977b6c104a22291ad654b6f3aa379"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) bind$x25(r4, &(0x7f00000002c0), 0x12) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) recvmmsg(r0, &(0x7f0000005e40)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000140)=""/206, 0xce}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/227, 0xe3}], 0x9, &(0x7f0000000a00)=""/104, 0x68}, 0x7}, {{&(0x7f0000000a80)=@ax25={{0x3, @bcast}, [@null, @netrom, @rose, @remote, @netrom, @remote, @default]}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/102, 0x66}, {&(0x7f0000000bc0)=""/43, 0x2b}, {&(0x7f0000000c00)=""/215, 0xd7}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/58, 0x3a}, {&(0x7f0000001e00)=""/108, 0x6c}], 0x8}, 0x6}, {{&(0x7f0000001f00)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/123, 0x7b}, {&(0x7f0000002080)=""/179, 0xb3}, {&(0x7f0000002140)=""/35, 0x23}], 0x4, &(0x7f00000021c0)=""/1, 0x1}, 0x800}, {{&(0x7f0000002200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002280)=""/46, 0x2e}, {&(0x7f00000022c0)=""/96, 0x60}], 0x2}, 0x7b882f51}, {{&(0x7f0000002380)=@sco={0x1f, @none}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002400)=""/189, 0xbd}, {&(0x7f00000024c0)=""/204, 0xcc}, {&(0x7f00000025c0)=""/196, 0xc4}, {&(0x7f00000026c0)=""/103, 0x67}, {&(0x7f0000002740)=""/236, 0xec}], 0x5, &(0x7f00000028c0)=""/210, 0xd2}, 0x8000}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000029c0)=""/132, 0x84}, {&(0x7f0000002a80)=""/70, 0x46}, {&(0x7f0000002b00)=""/243, 0xf3}, {&(0x7f0000002c00)=""/106, 0x6a}, {&(0x7f0000002c80)=""/180, 0xb4}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/184, 0xb8}, {&(0x7f0000003e00)=""/87, 0x57}, {&(0x7f0000003e80)=""/98, 0x62}], 0x9, &(0x7f0000003fc0)=""/129, 0x81}, 0x5}, {{&(0x7f0000004080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000004180)=[{&(0x7f0000004100)=""/76, 0x4c}], 0x1, &(0x7f00000041c0)=""/19, 0x13}, 0x6c}, {{&(0x7f0000004200)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004280)=""/210, 0xd2}, {&(0x7f0000004380)=""/217, 0xd9}, {&(0x7f0000004480)=""/51, 0x33}, {&(0x7f00000044c0)=""/75, 0x4b}, {&(0x7f0000004540)=""/196, 0xc4}, {&(0x7f0000004640)=""/160, 0xa0}, {&(0x7f0000004700)=""/159, 0x9f}, {&(0x7f00000047c0)=""/223, 0xdf}], 0x8, &(0x7f0000004940)=""/242, 0xf2}}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004a40)=""/165, 0xa5}, {&(0x7f0000004b00)=""/123, 0x7b}], 0x2, &(0x7f0000004bc0)=""/205, 0xcd}, 0xb}, {{&(0x7f0000004cc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004d40)=""/151, 0x97}], 0x1, &(0x7f0000004e40)=""/4096, 0x1000}, 0xa}], 0xa, 0x40000002, &(0x7f00000060c0)) 3m30.881602625s ago: executing program 1 (id=3147): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020702", 0x4}, {&(0x7f0000000140)="683f0057954e8374745111caea99bc671e3d", 0x12}, {&(0x7f0000000380)="a492e95857d9dad0c70b72425db11aaf3ffd93dad703501bc83da7023584a4950f14", 0x22}], 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0xe0, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @rand_addr=' \x01\x00'}, {0x0, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000805}, 0x80) 3m30.147262105s ago: executing program 1 (id=3152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)=""/237, 0xed}], 0x3, &(0x7f0000001fc0)=""/210, 0xd2}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 3m15.07352365s ago: executing program 32 (id=3152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)=""/237, 0xed}], 0x3, &(0x7f0000001fc0)=""/210, 0xd2}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 2m43.011017752s ago: executing program 2 (id=3472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x26, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4de}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x26, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4de}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x4) (async) 2m42.857450645s ago: executing program 2 (id=3477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r1, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) sendto$inet(r1, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r1, 0xda8c) accept4(r1, &(0x7f0000000340)=@nfc, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x400, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x400}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x400, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x400}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) 2m41.929728474s ago: executing program 2 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x9) bind$bt_hci(r1, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) 2m41.877131064s ago: executing program 2 (id=3483): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000d60001002500000085100000010000009500000000090000184000000200000000000000000000a7c530b02f6803a60095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001f40)={0x0, @in6={{0xa, 0xfffc, 0x0, @mcast1}}}, &(0x7f00000002c0)=0x98) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000180)=0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket(0xa, 0xa, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000", @ANYBLOB="a573890ea3cbfff2e6064364df8e4cf45b61513d9c65385501c3ae14248b31fe5a5a2d079a983556f15fbd521883e9b9d61f6b0e4513ed80007262d7479c97ddb41dbb33f1892225e07db991c90c7821e9f1f10c8dac1d66c0dc48e5751385dba861bb9dd4ed0c4040b14696b89daca816d6b3b822c77130d40dd675a91d3d71afc2c22ea1daa3ad89b8fd09c9ca998219337c7dd26336a218c4c3c2df0521e3e6243274e0491b9d8224333819a5", @ANYRES8=0x0, @ANYRES16=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendto$inet6(r3, &(0x7f00000004c0)="ae6cb882bb8195d98d499bc04dce8c93", 0x10, 0x40800, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) 2m41.715650662s ago: executing program 2 (id=3484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1b}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x26, 0x9, 0x0, 0x25dfdbfb, {0x2}, [@nested={0x4, 0x21}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008011}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000200), 0x8) 2m40.564917493s ago: executing program 2 (id=3488): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0}, 0x90) 1m32.945277711s ago: executing program 33 (id=3488): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0}, 0x90) 12.418445991s ago: executing program 6 (id=4438): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c0004"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040), 0xc) close(r7) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bind$bt_hci(r9, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="2e000300010003", 0x7) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r11, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r11, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c002e1dc689010400001800fedf55e1836500", @ANYRES32=r11, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c000280080003007f000001"], 0x3c}}, 0xc004) 12.119702094s ago: executing program 4 (id=4441): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113700000000008510200002000000850000006900000095020000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000500)=@routing={0x4, 0x0, 0x1, 0xb0}, 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f00000005c0)={r1, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0xca}}}, &(0x7f0000000040)=0xffffffffffffff53) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$can_raw(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/70, 0x46}], 0x2}, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, r6, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x14}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x7fff, 0x7ff, 0x5c8, 0x2004, 0xffffffffffffffff, 0x5, '\x00', 0x0, r7, 0x2, 0x0, 0x5}, 0x50) 12.067315861s ago: executing program 6 (id=4443): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000904fcfffffffcdbdf2500000000", @ANYRESOCT=r6, @ANYBLOB="02550400040000001c0012800b0001006970766c616e00000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="31875429494be8924b7123b995a0b596b83b000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 6.994675965s ago: executing program 4 (id=4449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x4, 0x1}, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x1e8, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x800008}, 0xb, 0x1, 0x32, 0x5, 0xd, 0x7, 0x2, 0x1d, 0x21, 0xffffff5c, {0xffff1c72, 0x24, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}, @qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x60, 0xff, 0x6, 0x7, 0x2, 0x2, 0x78f0bb9c, 0x6}}, {0x10, 0x2, [0x0, 0x1ff, 0x400, 0x8, 0x401, 0xd]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}, @TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x80, 0x7, 0xffff, 0x1, 0x6, 0xfffffa61, 0x8}}, {0x14, 0x2, [0x6, 0x20, 0x8, 0x8001, 0x3ff, 0x6, 0xe, 0x2]}}, {{0x1c, 0x1, {0x74, 0xc, 0x9, 0x5, 0x0, 0x5, 0x6, 0x5}}, {0xe, 0x2, [0x1, 0xce, 0x3, 0xf9, 0xe]}}, {{0x1c, 0x1, {0xf9, 0x80, 0x7, 0x4, 0x1, 0x1, 0x9, 0x2}}, {0x8, 0x2, [0x91cf, 0x7ff]}}, {{0x1c, 0x1, {0x81, 0xf, 0xfffb, 0x9, 0x0, 0x800, 0xfffffffe, 0x9}}, {0x16, 0x2, [0x7, 0x0, 0x7fff, 0x6, 0xd, 0x8729, 0x8, 0x7fff, 0x2a]}}, {{0x1c, 0x1, {0x0, 0x1, 0x3, 0xfffff16d, 0x1, 0xac, 0x3, 0x2}}, {0x8, 0x2, [0xae, 0x401]}}, {{0x1c, 0x1, {0x98, 0x5, 0xb, 0x3, 0x2, 0x4, 0x6, 0x2}}, {0x8, 0x2, [0x5df, 0x5]}}, {{0x1c, 0x1, {0x9, 0xe, 0x3, 0x6, 0x1, 0x4, 0x1, 0x3}}, {0xa, 0x2, [0xa8, 0xfffb, 0x2de]}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000f914fc08050000ddfc75b00000fddbdf25", @ANYRES32=r11, @ANYBLOB="080008001104000008000200ffffffff"], 0x28}}, 0x0) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) r14 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r14, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) sendmmsg$inet6(r13, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'erspan0\x00', @multicast}) r15 = socket$netlink(0x10, 0x3, 0x4) writev(r15, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r15) 6.920091676s ago: executing program 6 (id=4450): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f27, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="63000800100003f716bd700000000000000010005313765781660447ccc809a4d5a83f577f66dd2af05f4ee08b33ff5444f1071723eb0cfd4574ec2a1e68593335aa4358ae3e4576022284de01c661c6f7dbf9f1aa33081cb8c106a9bbb67000434302789ad0cda1cda5a7d9603864a504a8d2b2", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) 6.663555535s ago: executing program 6 (id=4452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000000000000001ad22000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a3000000000140000001100010000000000000000000000f10a"], 0xf0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x6, 0x4, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x0, 0x0, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51e, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x89a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0xc, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x401, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7e, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x8, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0xfffffffc, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x805, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x2, 0x8, 0x6, 0x9, 0xfffffff8, 0x48}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffff6, 0x4, 0x6, 0x4756, 0x2b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xfe, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x6}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x11a, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x4, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0x101, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x7, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0xfff, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x8}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x8007}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x5, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0x1000000a, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5, 0x2de}, {0x1, 0xfffffff7, 0x6, 0x4f, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x8, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x5, 0xfffffffc, 0xeae8}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x3, 0xffd9}, {0x9, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4$x25(r2, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) 5.935267417s ago: executing program 0 (id=4456): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x1, @local, 'pim6reg\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000007640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x200048c4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0xa}}}}, [""]}, 0x20}}, 0x20004084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f00000029c0)={&(0x7f00000002c0)=@caif=@rfm={0x25, 0x6, "d1c5e49cb1e61b8f5c8a276908fb9ee1"}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)="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", 0xfa}, {&(0x7f00000007c0)="3df89e078325b38da66ee3e4e6efcfdeb8ed5b87b69c8812f739f552913c0ffc17f972f10f2de73622f461c56dcc79396c717cfed0953e8dd817a7f02dc9a3061f6e09fcb52613f564dc6f978bf98afdc0ccdbcbf61d5c562c3ac4bd4761bb87000000c01a6e672d02636d3679771789581a4da86ef4c454d26e870374c4b557e4e74321b7f309122c1eefd32d2ee1eae83d2cfa5caf7063135e5613e226d02fba6ed8a1d6e5d6d468758630a19072e1247a7cf9cb5bb62d2116d061ba1fda9908fc25317a6eeef1708e9fa530daf44d44345b9c7e34ea8a06406ec7b7e873676c2d14c8b2b191576e8e8dd4ea6b64c61c97042d303f79bf4759074b88653c88898b052906021998a40857014b5c1bef2dab374142ce3d83117a89024f76581e00184391d2ec1acd46d1f8d6d8357a1d0e64279ccf7d6000a5e88d966c03e26002de2d766f09f15e421c9b6ac6690fefd854abd27e0e82498419ef62a580f819dea7", 0x162}, {&(0x7f00000005c0)="4719dd87fd261f7b64d24878dad30ebb00217305245fd9b3048253a4980f383cb9beb01c7dc33b5414577c0aedc8f457db9e2386a80c5922520e0781906dd261f9e65b52402a3ba059931b16510d2337b46dcc01e2d0c7ca6951de27afa7e86b288144c55f28d9a5f6d8bbf019157282e921104d8a83ee20c252f05fda15aaa2ccc01a67b66c8d17f89736f1f76eb46a490efdbfdd1c917711ecc430f639b708e302ebf01298ddcb585925ad1d4888", 0xaf}, {&(0x7f0000000680)="6e6a84fbd5a166f5bc024d8aa333ba15960c8f6b7cdd78b2ddfd59a07c03ada62a8721461f396aeb058025596e69702d50", 0x31}, {&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000002a00)="81f0d3bd4d5424ffb19eece67e53995ab5dc38b75d0619e5721d8575afea9fe3a1ffc5a0b748beeea8d6b8021e9f44cd2fafe021498f96832c47f7b2ffd3ae95fd3ff68e7b5003267073fe54793ba2ee0066e51af7c44ed458f325866c75b01ad1fe3e849800be5e441b95c3c11456db2125e982edd56ab9793d8527f0e20e01b415f2039c944085b70d35a46421ed259d5827cc543aeb3e645cdacb08ffefebb5e733d5", 0xa4}, {&(0x7f0000001780)="2b3dc2ccfc02142805810fcc748a78172adb3095835963a9623916197b2168aa58db03817d93525574890e0d636ccbf3df734ef18a222e14f5617b403175187baf1f15537720e1554bb1470e248a8389eae1e91627ae9896590ecb54ea13dd7c58fffecbc384eee2bd965567a4505474", 0x70}, {&(0x7f0000001800)="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", 0x1000}, {0xfffffffffffffffd}, {&(0x7f0000002800)="c130b4d5828e3dd3f0081ffde80b98f41b0791521f5b3c785310f5676d67e3ff6d1c587653a2cbcda31215f86b20b1c836248f7ae986202620ff992c61e6a27593f4f86debcc03e20c756e3dd9d9e2f2c5162512f1ff42dfbb773b3424f0e63f9575255ad0638e504f71c8fda664f6f8cecc2b57c0cf7c017d17bb6195e4a7862e6f6b738de58820f866889c9b29eb25c483049a3225ab53357e2f7892abe6cc8c76560f4fdbdff8b45b342e2962e89181bff8e4f19f4e4474ff9747a3a3b3e7bb9281c8fb2939f27bfe9ac68c7f4e1ef57d15eb173521ac14e0f0018db286af1452c669c49f6934a9cdb671a8d0d3084fc5e1b0710837", 0xf7}], 0xa}, 0x20004040) sendmsg$netlink(r3, &(0x7f00000001c0), 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) accept4$phonet_pipe(r4, &(0x7f0000000240), &(0x7f0000000480)=0x10, 0x80000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x14001, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[@ANYBLOB="07001f00000000000000000086dd6000000000102c03cb697a653e336f000000500000000000ff02000000000000000000000000000100000001"], 0x0) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff020000000000000000000000000001890e000e"], 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x1, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000040000004000"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="00ff44cecf24e1a924fe9a000000000000a6868a2d56dbe23095143c420c8b106a6aa0bf3f50a2f64c139416b15a1799343598fc8ed75557702d67ac2c34db99d02402f69f72e964c07da13a0757"], 0x11) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.674395137s ago: executing program 3 (id=4458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x48}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 5.640344033s ago: executing program 6 (id=4459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b33, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0xfc}}, 0xc040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r12 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r10, r13, 0x25, 0x0, @val=@netkit={@void, @value=r10}}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r9, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r14 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r14, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r14, &(0x7f0000000240)={0x2, 0x4a20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000100000000000000", @ANYRES32=r5, @ANYBLOB="12030000000000000a000100dd"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 2.102290484s ago: executing program 0 (id=4460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, r9, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x40010) r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES16=r11, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) r13 = socket$inet6(0xa, 0x3, 0x3) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r14, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r14, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x1000000000000}}], 0x48}, 0x0) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r13, &(0x7f0000000480), 0x2e9, 0xffe0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="00000000000000003000128008000100736974002400028006000f0002073f01af4552069b230000080014"], 0x50}}, 0x0) 2.098864732s ago: executing program 3 (id=4461): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.098190188s ago: executing program 5 (id=4462): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0xe12dbf2b5d6704a) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r0, 0xf, 0x0, 0xc, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=[0x0]}, 0x40) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) sendmsg$nl_generic(r2, &(0x7f0000001d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000b80)={0x1130, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfb, {0x7}, [@typed={0x21, 0x41, 0x0, 0x0, @binary="dd8b082bef545c1bd6977288e5fdcd2217d5c69601ced064bffe4049af"}, @generic="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", @nested={0x10, 0xc4, 0x0, 0x1, [@nested={0x4, 0x158}, @nested={0x4, 0xb5}, @nested={0x4, 0x11b}]}, @nested={0x18, 0x40, 0x0, 0x1, [@typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="7e5762c5cd0f8f0c3edc62f1386922845bec9715ada942ca1d19eb3249078b8b764aea9e2931ccfcb09cf56c3c3eb289fdd99e4988510dc350e36a88fee6eb3b9d41a29fc04d35e06d5fa7452572c6cbd33819eb22ee19bc90f6012aff81055e585de4ba2374654c2cbfea2183ef7dfd7ecd92c6352d33d5f265b66d0049b02e0ee30a49df5105aa34da0447687d1e2ad7b6dac04a1634d865a8bf81e77dd7c91917131682b2df8407b33a95be84b6af63999da621c3cb09", @nested={0x10, 0xae, 0x0, 0x1, [@typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @nested={0x4, 0x14}]}, @typed={0x8, 0x131, 0x0, 0x0, @pid=r4}]}, 0x1130}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x6c, r3, 0x5aa35dd3a2be2ad9, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x42, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x645}, @broadcast, @broadcast, @random="72682c0f0037", {0xb, 0x6}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0xc800, 0x65, @random=0x9, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x6, 0x0, {0x800, 0x3, 0x0, 0x9}, 0x400, 0x8, 0x1}}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) 1.911095521s ago: executing program 4 (id=4463): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet6(0xa, 0x1, 0x100) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r8, 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r10, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet_sctp(r8, 0x0, 0xc0c0) r11 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f00000041c0)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000440)=""/168, 0xa8}, {&(0x7f0000000500)=""/25, 0x19}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000000800)=""/87, 0x57}, {&(0x7f0000000880)=""/42, 0x2a}, {&(0x7f00000008c0)=""/197, 0xc5}, {&(0x7f00000009c0)=""/23, 0x17}], 0x9}, 0x6}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000ac0)=""/207, 0xcf}, {&(0x7f0000000bc0)=""/209, 0xd1}, {&(0x7f0000000cc0)=""/120, 0x78}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/183, 0xb7}], 0x5, &(0x7f0000003f00)=""/135, 0x87}}, {{&(0x7f0000003fc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000004040)=""/54, 0x36}, {&(0x7f0000004080)=""/58, 0x3a}], 0x2, &(0x7f0000004100)=""/175, 0xaf}, 0xc8ecba2}], 0x3, 0x60, &(0x7f0000004280)={0x0, 0x989680}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.85839624s ago: executing program 6 (id=4464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a0102000000000000000000000002200000000e0a010800000000000000000a0000080900010073797a3100000000140000001100010000000000400000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8084) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x40, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x5}]}]}]}, 0x40}}, 0x8004) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x24000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x1000) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r12, &(0x7f00000009c0)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r12, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x840) 1.7513776s ago: executing program 5 (id=4465): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) 1.627677352s ago: executing program 0 (id=4466): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40) (async) 1.57106972s ago: executing program 3 (id=4467): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000b80)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) 1.50321921s ago: executing program 4 (id=4468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c9e3e260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00401600000000"], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 1.400111168s ago: executing program 5 (id=4469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0x11, 0x0, 0x1, 0x2, 0x6, @remote}, 0x5b) 1.383471063s ago: executing program 0 (id=4470): ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'dvmrp0\x00', {}, 0x3}) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x25, "3ad6e64f8c82a678026005ccf76f3d7638d9dbdc56509b372b86740a2a823a0c649f80e315244f7ae1dcc23d6f82a9292b0e4584f5110fea625ff79efcf1e0676a69881c511afc1977ccdfe8fbc1ffa0e2c6e35ba3dcfe3a69c4bee2ac111971118a88a8202e861b166503597dfe6f258c642e4044f49471dd5ac527b6c6f8cd"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r0, 0x3, 0x9, 0x5}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x87, @loopback, 0x4e21, 0x2, 'sed\x00', 0x0, 0x73ac, 0x13}, 0x2c) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x338, r3, 0x402, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x218, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0xffff, 0x87e, 0x7, 0x3, 0x400, 0x1]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x5, 0x3}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x2, 0x9}, {0x6}, {0x7, 0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x7}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0xa}, {0x5, 0x1}, {0x4, 0x7}, {0x2, 0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x9}, {}, {0x4, 0x7}, {}, {0x2, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x4}, {0x4}, {0x6, 0x7}, {0x5}, {0x6, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd25, 0x81, 0xff, 0x2, 0x7b6a, 0x2, 0x4, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x0, 0x7fff, 0x1, 0x4, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x3}, {0x7, 0x9}, {0x4, 0xa}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {}, {0x7, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x3}, {0x7, 0x6}, {0x5, 0xa}, {0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0xa}, {0x5, 0xa}, {0x2}, {0x7, 0x9}, {0x2}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x4, 0x5}, {0x3, 0x7}, {0x7, 0x3}, {0x3, 0x8}, {0x6, 0x9}, {}, {0x4}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x6, 0x7}, {0x7, 0x8}, {0x5, 0x9}, {0x7, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x6, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x5, 0x3, 0x7fff, 0x2, 0x81, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x4}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x7}, {0x0, 0x8}, {0x2}, {0x2}, {}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x8}, {0x6}, {0x4, 0x3}, {0x7, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x1, 0x4}, {0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x5}, {0x2, 0x7}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x7, 0x8}, {0x2, 0xa}, {0x6, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x7, 0x6}, {0x1, 0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x3, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x5}, {0x0, 0x2}, {0x1}, {0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x5}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x1b, 0x18, 0x48, 0x9, 0x1b, 0x1b, 0x18, 0x6c, 0x6c, 0x18, 0x3c, 0x0, 0x4, 0x36, 0x2, 0x1, 0x6, 0x9, 0x4, 0x16, 0x4, 0x6c, 0xc, 0xb, 0x1, 0x12, 0x2, 0xc, 0x30, 0x6c]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x0, 0x1, 0x6, 0x5, 0x9aa, 0x20e6, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0x4}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x5, 0x4}, {0x7, 0x2}, {0x6}, {0x1, 0x7}, {0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0xa}, {0x2, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0x5}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x3}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x7}, {0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0x5}, {0x4, 0xa}, {0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x4}, {0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0xb}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x3, 0xc, 0x6, 0x2, 0xb, 0x36, 0x6c, 0x0, 0x6c, 0x5, 0xb, 0xb, 0x1b, 0x68, 0x60, 0xb, 0x9, 0x6, 0x4, 0x6c, 0xb, 0x36, 0x3, 0x18, 0x12, 0x16, 0x36, 0x36, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0xc, 0x48, 0x3, 0xc, 0x9, 0x30, 0x4, 0x9, 0x60, 0x48, 0x2, 0x1b, 0x60, 0x6, 0x0, 0x9, 0x4, 0xe, 0x24, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x40, 0x60, 0x3, 0x6c, 0x18, 0x12, 0x16, 0x1b, 0x30, 0x18, 0x9, 0xc, 0x2, 0x30, 0x0, 0x6, 0x6c, 0x30, 0x30, 0x16, 0x18, 0x5, 0x24, 0x24, 0xb, 0x6]}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000081}, 0x840) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) ioctl$XFS_IOC_GETPARENTS(r2, 0xc028583e, &(0x7f0000000ac0)={{[0x2, 0x4, 0x8, 0x6]}, 0x0, 0x1, 0x7, 0x0, &(0x7f0000000a40)=[{{@align=0x6, {0x4, 0x2, 0xfff, 0x94f}}, 0x4, 0x0, '-\x00'}, {{@align=0xf, {0x3, 0x3, 0x3, 0x1ff}}, 0x1, 0x0, '&{#\x00'}, {{@_ha_fsid={[0x10000, 0x1]}, {0xac, 0xe130, 0x56, 0xd}}, 0x2, 0x0, ':)\x00'}]}) r4 = accept4(r2, &(0x7f0000000b00)=@nfc, &(0x7f0000000b80)=0x80, 0x800) (async) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000cc0)={r0, &(0x7f0000000bc0)='%:,\x00', 0x0, &(0x7f0000000c00)={@align=0x40, {0x2, 0x0, 0x8, 0x1}}, 0xd, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x80000000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, r8, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x34}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfcf}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f0000000f40)={r2, &(0x7f0000000e40)=']-)^+}\xf8\x00', 0x301000, &(0x7f0000000e80)={@align=0x400, {0xa1d9, 0x0, 0x7ec8, 0x401}}, 0x800, &(0x7f0000000ec0), &(0x7f0000000f00)=0x1}) setsockopt$inet_tcp_int(r6, 0x6, 0x8, &(0x7f0000000f80)=0x2, 0x4) (async) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001140)={'gre0\x00', &(0x7f00000010c0)={'gretap0\x00', 0x0, 0x8, 0x10, 0x5, 0xd1ac0000, {{0xc, 0x4, 0x3, 0x3e, 0x30, 0x67, 0x0, 0x4, 0x2f, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x12, [@multicast2, @multicast2, @multicast2, @remote, @multicast1, @private=0xa010100]}, @noop]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0x3, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x1, 0x3c07, 0x7, 0x58}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000012c0)={'ip6_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x15, 0x7f, 0x0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8020, 0x7, 0xc, 0x4}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000001400)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x88, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000001440)={0x4, 0x9, 0xda, 0x4, 0xfffffff7, 0x7ff}) (rerun: 32) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000001540)) 1.076599877s ago: executing program 4 (id=4471): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@mpls_delroute={0x48, 0x19, 0x20, 0x70bd29, 0x25dfdbfe, {0x1c, 0x10, 0x20, 0x40, 0x0, 0x3, 0xfd, 0x8, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_DST={0x8, 0x1, {0x9}}, @RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xac}]}, 0x48}, 0x1, 0x0, 0x0, 0x20001080}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x20004004) clock_gettime(0xffefff1f, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) ioctl$FIONCLEX(r1, 0x5450) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) 1.023938364s ago: executing program 5 (id=4472): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x0, 0x100008, 0x10004, 0x209}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000680)}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000b00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x0, 0x0, 0x0, @private0, @remote}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000800)=@raw=[@exit, @generic={0x9, 0x2, 0xc, 0x7, 0x55a45f78}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x1, 0x6, 0x6, 0x5, 0x8, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r2, &(0x7f0000000900)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/214, 0xd6}], 0x1, &(0x7f0000000580)=""/243, 0xf3}, 0x10160) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000008c0)={0x6, 'syzkaller1\x00', {0xa}, 0x372}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000b97711556a8230c0ada8ef0100"/39], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r9}, 0x48) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES64=r10], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="740000002100000527bd7000fedbdf250a1020020b00000506000000080017004e224e2214000100fe8000000000000000000000000000915db45d337d677d000000000000000000000000021400110076657468305f766972745f7769666900140001002001000000000000000000e600000002"], 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r10], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r11 = socket$inet_icmp(0x2, 0x2, 0x1) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@map=r12, 0xffffffffffffffff, 0x26}, 0x20) sendmmsg$inet(r11, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000cc0)}}], 0x1, 0x240048d0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000004c0)={0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 'nq\x00', 0x2, 0x800, 0x2b}, 0x2c) 1.021988214s ago: executing program 3 (id=4473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x400c0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x52}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd69}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x24, 0x5a, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket(0x26, 0x3, 0x10000) sendmsg$inet_sctp(r3, &(0x7f0000000880)={&(0x7f0000000380)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="04433c427052fafe110fb85620cac8cb78f4e3f5073dfaa2bf52a21c7ee3fbdd93c08d03d78846a71a5670826650c12eb6918f9eec1b7a6530c767a426a584b7d2e6d9c583bb2ce66935f2774384edd939681d7020436c3717c07bff5f00b2f355c3355354a8cb9010332b3da282114d9071d72f8b63a4179fa0ca7fe5654da7d0", 0x81}, {&(0x7f0000000480)="168c6d787e4c981c207d9168215b7f196d3a090ec9bba872623c83a613fcf46d49f7b05b62c2b6f794b448ce41a43b4d2a1fbe372fe3b14c8856638b801d7a2ea296a16a2db31a1f", 0x48}, {&(0x7f0000000500)="a3c19281d99182607c71d430594b3cd41d41d923af3f5f1908aae8f37db41b576957c5db3a9aac99c899371549e2afaaeb088b583157aaace44cbf12246fa3ca7426d797d12ef2f0603a703e8ac258d8fc32cb5e47462d993e98352c1cfb13fd68bfba79752f17e815a6566001b17c0ef4f6750d9e5851f2789f22e522135c553b797781cc1132a2ed587e2ac9f43e116b4706d4f6137ef7b10bf4910e2b85655bb464a987127f4caa8a76d0742534ffe405c9b6cc16eb2494afa1658c1d7801c4517b78e82b5b", 0xc7}, {&(0x7f0000000600)="59119b857b47a6097e28a9e4d4bd7c532d529d511e960fc092a0dbcadf09c71c6177b8638ed5a2290a739488a206b6376ad0da8855bf767190079ab244f9960ba1e1459e4484e10e41af84736fe03c0312e17b250a0963f8bc177aab5e1583859da17bac026976a84160c2bb4142d139dea9cff4cf3f537beef288aad15f716896154c9b68bd2e5b8806fd4aa0eab65ccd7976a96feae9427db5a2e22def5884c746565f4143f2430a8106ea816bd7a479e4cec8e2489ec913278744f0a678637c3b6d7ca6de5a7fb6baf11e0b31b4fc10d44b93bc09895f2afcdc330e20", 0xde}, {&(0x7f0000000700)="110ff12762f81c4168811059266601faf936c5e763b6769568a3e89051555c16458b31a12fd3ab2a40fba458413a0dd0d155207354800e26ee48ec500cd43dce2cb29d0312ecd2f6e6f583956f19fb479f193a74dc66140039fef72db9a55602e9b53fd6fd902e0dd91e2720bd77e3a4bd02c230ada63c8e5a1cbe7c7da9f7ab8443b7a9b01c5fec2a61725cb978453c943630f4d0aa1ae48e8be1797872b5ea2b3126585abf70f51c941e4b3c8c", 0xae}], 0x5, &(0x7f0000000840)=[@dstaddrv6={0x20, 0x84, 0x8, @local}], 0x20, 0x2}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000b80)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x6c, r9, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7636b0f1, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "30c48efb72"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x22008020) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000d80)={'veth1_macvtap\x00', 0x100}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000dc0)={0x0, 0x96, "8fc5ebec078a842ddb81a81a8c1f51850adeccf3afbff67fd84171123b53350c8fc5f7cc1925e5ce8648396aa4c27bd5660b6d0fe9b00ff17e363f5cb1c93a8d1e85c03e8973a0204d3553eed1957ca62b4f54606364c193bb1763e6006351a694674ac52df8e0fa0298f1714f4e266209e0ce0867af375c4d9cc7b2d23c69878f8ce30f5ebffc19ca1473e6f00324c9ca207d452527"}, &(0x7f0000000e80)=0x9e) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000ec0)={r11, 0x81}, 0x8) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00), r4) (async) syz_emit_ethernet(0x100, &(0x7f0000000f40)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x7, 0x0, 0x3}}, {@llc={0x4, {@llc={0x4e, 0xf4, "3a8b", "8e6a1bcba825ecda3d246ac5829d76c83e778b064fd34140cc684425d280a3cf2e10b0e73261b92b2f86955be4ffe5e0597d9b4a56e12815c9120daff1884139077bcf59e36882ecc4dd2b7cc93bd6b182d1a9ab85429031c37096ddbdceafd02b8be11cd54c8b88930aa9e43b0da5b4c3d8f663c799bb5cae3220a218a4f144bf537ad062cc4a3eb62bd40e4edfb0d273ac427ce5ed9858bffd6dfda68db972a123cecbc518daa54b738e718f574d88b87ad2ea9204bf2f892cb6ef38921b5e8e36c5452e20b9bcba35699ce1e8e1ad61699a58d4ae94d4b3c3b2c72e776e5e230bffe4569b"}}}}}, &(0x7f0000001040)={0x1, 0x3, [0xe31, 0xdc1, 0x823, 0xbe4]}) (async) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000001080)=@ccm_128={{0x304}, "c5596b4ccc456a8c", "9e04048be7592040c1129204e87aeb81", "fca28647", "3785912b647a01e1"}, 0x28) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x5, '\x00', 0x0, r8, 0x1, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001240)={r12, &(0x7f0000001140)="6419eb93dba6e3461e1d3521fd39e66522934bbf71069b791bc1dfdd59ad78e5e6b59b306b34d35a31fc87cca438a2b7fc83ea20ff64f629419b8c928e7039aaf9ce6cfec03e564b5794abc4fafd6346a0e7cd27545ed2", &(0x7f00000011c0)=""/83, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000012c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x44000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001600)={'syztnl2\x00', &(0x7f0000001580)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x80, 0x7, 0x50, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x51, 0x81, 0x9}}) 913.342597ms ago: executing program 0 (id=4474): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2b, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000004000000000000008110f4ff000000009500000700000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010403000000000000000000030004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x22088808) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010000002fcff3d3b800008000010fad26df3a96815de74c21b29ec095c2457", @ANYRES32=0x0, @ANYBLOB="0315000000040000080004000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2b, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) getpid() (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000004000000000000008110f4ff000000009500000700000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010403000000000000000000030004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x22088808) (async) close(0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010000002fcff3d3b800008000010fad26df3a96815de74c21b29ec095c2457", @ANYRES32=0x0, @ANYBLOB="0315000000040000080004000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) 713.906934ms ago: executing program 0 (id=4475): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1412, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x885}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 681.065735ms ago: executing program 4 (id=4476): socket$inet6(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100025bd060000000000000000000800150002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000105c660db11bef9564c013372563f5a7108dddf1ae6375b2e313f0b31549a8d0e037ee1524b38595360345e138d188c0b9ef4e45f77164fcbd", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r3], 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0xa, 0xc28, 0x9, 0x8, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x80000001, 0x1, 0x1, 0x7, 0x40, 0x7, 0x10, 0x8000, 0x5, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x5, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x1, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0xb4, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x4, 0x9, 0x0, 0x4, 0x10, 0x6, 0x5, 0x2, 0x7a, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x9, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0x2000000b, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x8, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xeaa, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x6, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0b, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x5, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xe, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) r13 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r13, 0x50) sendmsg$inet(r13, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 680.276762ms ago: executing program 5 (id=4477): socket(0x10, 0x80003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1d, 0x2, 0x6) recvfrom$packet(r3, 0x0, 0x0, 0x4001, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x400, 0x2, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004040) 679.921351ms ago: executing program 3 (id=4478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x25dfdbfd, {{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x5}, {@in6=@local, 0x0, 0x3c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x25dfdbfd, {{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x5}, {@in6=@local, 0x0, 0x3c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (async) 411.19159ms ago: executing program 3 (id=4479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x8090) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r1, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x4ee4, 0x8, 0x40]}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$XDP_UMEM_REG(r6, 0x118, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x5c}}, 0x40044) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x1407, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000171c000180090001006d617371000000000c0002800800024000000008140000001100010000000000000000000000000a00"/152], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 0s ago: executing program 5 (id=4480): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000009c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0x8, 0x9, 0x3c05, 0x1, "0c3df8", 0x5}}) r2 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="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", 0xfd, 0x800, &(0x7f00000002c0)={0x11, 0xf7, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) kernel console output (not intermixed with test programs): rsing attributes in process `syz.4.2870'. [ 366.601698][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2871'. [ 366.608248][T16186] macvlan0: entered promiscuous mode [ 366.616048][T16186] macvlan0: entered allmulticast mode [ 366.622716][T16186] bond12: entered promiscuous mode [ 366.628195][T16186] veth0_to_bond: entered promiscuous mode [ 366.637655][T16186] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 366.646994][T16186] bond12: left promiscuous mode [ 366.661085][T16186] veth0_to_bond: left promiscuous mode [ 366.717001][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2871'. [ 366.834790][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'. [ 367.648004][ T30] audit: type=1800 audit(1779817497.297:8): pid=16253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2885" name="memory.events" dev="tmpfs" ino=2921 res=0 errno=0 [ 367.825547][T16268] xt_CONNSECMARK: invalid mode: 0 [ 368.420226][T16298] x_tables: duplicate underflow at hook 1 [ 369.082415][T16327] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 369.285982][T16332] bond8: entered promiscuous mode [ 369.312821][T16342] macvlan2: entered promiscuous mode [ 369.318985][T16342] macvlan2: entered allmulticast mode [ 369.327461][T16342] bond8: (slave macvlan2): Opening slave failed [ 369.761428][T16364] block nbd0: Unsupported socket: should be TCP or UNIX. [ 369.763730][T16363] netlink: 'syz.4.2913': attribute type 64 has an invalid length. [ 370.240882][T16392] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 370.286760][T16392] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 370.551132][T16409] netlink: 'syz.1.2926': attribute type 1 has an invalid length. [ 370.566966][T16409] netlink: 'syz.1.2926': attribute type 2 has an invalid length. [ 370.953508][T16423] syzkaller0: entered promiscuous mode [ 370.993349][T16423] syzkaller0: entered allmulticast mode [ 371.055128][T16423] tipc: Enabled bearer , priority 0 [ 371.118270][T16422] tipc: Resetting bearer [ 371.254202][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.267565][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.277806][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.287563][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.300924][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.309314][T16422] tipc: Disabling bearer [ 371.384360][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.396584][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.406793][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.417682][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.430983][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.469075][T16442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.523239][T16442] __nla_validate_parse: 21 callbacks suppressed [ 371.523264][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 371.758586][T16454] netlink: 'syz.3.2939': attribute type 1 has an invalid length. [ 371.820989][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2939'. [ 371.944584][T16460] bond0: entered promiscuous mode [ 371.974273][T16460] bond_slave_0: entered promiscuous mode [ 371.989247][T16460] bond_slave_1: entered promiscuous mode [ 371.995404][T16460] team0: entered promiscuous mode [ 372.001399][T16460] team_slave_0: entered promiscuous mode [ 372.014373][T16460] team_slave_1: entered promiscuous mode [ 372.163918][T16475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2942'. [ 372.451280][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 372.482646][T16488] netlink: 'syz.2.2947': attribute type 5 has an invalid length. [ 372.497260][T16488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2947'. [ 372.816236][T16500] netlink: 'syz.3.2949': attribute type 49 has an invalid length. [ 372.874047][T16488] geneve4: entered promiscuous mode [ 372.885060][T16488] geneve4: entered allmulticast mode [ 373.063103][T16500] ip6gretap0: entered promiscuous mode [ 373.088232][T16500] ip6gretap0: entered allmulticast mode [ 373.152933][T13232] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 373.195027][T13232] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 373.235960][T13232] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 373.263830][T13232] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 373.339174][T16510] tipc: Enabling not permitted [ 373.366197][T16510] tipc: Enabling of bearer rejected, failed to enable media [ 373.561449][ T5631] Bluetooth: hci5: command tx timeout [ 374.246371][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2960'. [ 374.329659][T16542] IPv6: sit1: Disabled Multicast RS [ 374.571201][T16551] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 374.653754][T16559] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2961'. [ 374.753590][T16551] bond10: entered promiscuous mode [ 374.777752][T16551] 8021q: adding VLAN 0 to HW filter on device bond10 [ 374.810504][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 374.872685][T16560] netlink: 18192 bytes leftover after parsing attributes in process `syz.4.2963'. [ 374.912608][T16557] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.629396][T16577] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 375.654836][ T5631] Bluetooth: hci5: command tx timeout [ 375.673370][T16577] netlink: 'syz.2.2965': attribute type 1 has an invalid length. [ 375.913304][T16582] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2967'. [ 375.973045][T16578] bond11: (slave geneve5): making interface the new active one [ 375.983164][T16578] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 376.006859][ T6214] netdevsim netdevsim2 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0 [ 376.029221][ T6214] netdevsim netdevsim2 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0 [ 376.050107][T16585] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 376.059358][T16592] No such timeout policy "syz1" [ 376.124944][ T6214] netdevsim netdevsim2 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0 [ 376.270794][ T6214] netdevsim netdevsim2 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0 [ 376.302032][T16603] netlink: 'syz.4.2971': attribute type 1 has an invalid length. [ 376.520154][T16603] bond6: entered promiscuous mode [ 376.525967][T16603] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.583296][T16605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.606025][T16605] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 376.628379][T16605] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 376.673637][T16605] bond6: (slave ip6gre1): making interface the new active one [ 376.695262][T16605] ip6gre1: entered promiscuous mode [ 376.704574][T16605] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 376.716909][T16436] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.734619][T16436] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.742508][T16436] bridge_slave_0: entered allmulticast mode [ 376.750665][T16436] bridge_slave_0: entered promiscuous mode [ 376.759811][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.767105][T16436] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.774749][T16436] bridge_slave_1: entered allmulticast mode [ 376.783284][T16436] bridge_slave_1: entered promiscuous mode [ 376.857596][T16625] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2977'. [ 376.936395][T16627] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.000044][T16436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.027699][T16436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.162694][T16436] team0: Port device team_slave_0 added [ 377.176243][T16436] team0: Port device team_slave_1 added [ 377.220727][T16436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.230094][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.256971][T16436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.285492][T16436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.293122][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.326292][T16436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.370915][T16639] tipc: Enabled bearer , priority 0 [ 377.513193][T16436] hsr_slave_0: entered promiscuous mode [ 377.527757][T16436] hsr_slave_1: entered promiscuous mode [ 377.718045][ T5631] Bluetooth: hci5: command tx timeout [ 378.182608][T16662] netlink: zone id is out of range [ 378.213250][T16662] netlink: del zone limit has 4 unknown bytes [ 378.243100][T16436] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.267433][T16667] netlink: 'syz.1.2990': attribute type 1 has an invalid length. [ 378.275525][T16436] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.322421][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'. [ 378.333530][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 378.425361][T16667] 8021q: adding VLAN 0 to HW filter on device bond12 [ 378.434414][T16673] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 378.457390][T16673] bond12: entered allmulticast mode [ 378.502162][T16436] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.528520][T16436] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.643564][T16670] syz_tun: entered promiscuous mode [ 378.682732][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.692181][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.721881][ T5730] tipc: Node number set to 2320588223 [ 378.744529][T16436] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.757199][T16436] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.886792][T16436] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.933211][T16436] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.987754][T16692] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2996'. [ 379.009301][T16698] netlink: 'syz.2.2997': attribute type 4 has an invalid length. [ 379.062552][T16693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2997'. [ 379.404277][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3003'. [ 379.599227][T16716] bond9: option resend_igmp: invalid value (32767) [ 379.608965][T16716] bond9: option resend_igmp: allowed values 0 - 255 [ 379.618436][T16716] bond9 (unregistering): Released all slaves [ 379.798206][ T5631] Bluetooth: hci5: command tx timeout [ 379.907486][T16727] netlink: 'syz.2.3007': attribute type 1 has an invalid length. [ 379.971265][T16436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.986400][T16436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.005923][T16733] bond12: (slave gretap3): making interface the new active one [ 380.016615][T16733] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 380.026151][T16436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.038820][T16436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.046868][T16436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.060814][T16436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.069170][T16436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.080751][T16436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.171142][T16436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.194480][T16436] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.207108][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.214292][ T5776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.234479][T13231] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.241981][T13231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.687052][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'. [ 380.781972][T16753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.791036][T16760] netlink: 'syz.1.3010': attribute type 12 has an invalid length. [ 380.820475][T16436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.852739][T16757] syzkaller0: entered promiscuous mode [ 380.880553][T16757] syzkaller0: entered allmulticast mode [ 380.928921][T16765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3013'. [ 381.111597][T16436] veth0_vlan: entered promiscuous mode [ 381.163634][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 381.196054][T16436] veth1_vlan: entered promiscuous mode [ 381.270988][T16436] veth0_macvtap: entered promiscuous mode [ 381.301226][T16436] veth1_macvtap: entered promiscuous mode [ 381.304716][T16784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3018'. [ 381.374376][T16436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.416691][T16436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.464289][ T6229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.493438][ T6229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.520333][ T6229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.634949][ T6229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.961689][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.996888][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.140762][T16818] netlink: 'syz.2.3029': attribute type 21 has an invalid length. [ 382.194153][T16821] netlink: 'syz.4.3030': attribute type 1 has an invalid length. [ 382.202922][T16821] __nla_validate_parse: 1 callbacks suppressed [ 382.202943][T16821] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3030'. [ 382.276353][T16824] xt_l2tp: v2 doesn't support IP mode [ 382.497409][T16818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3029'. [ 382.536756][T13231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.556484][T13231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.732391][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3032'. [ 382.741898][T16830] netlink: 'syz.1.3031': attribute type 2 has an invalid length. [ 382.876337][T16833] nbd: must specify a size in bytes for the device [ 382.926585][T16833] netlink: 4284 bytes leftover after parsing attributes in process `syz.0.2931'. [ 383.005265][T16833] syzkaller0: entered promiscuous mode [ 383.029154][T16833] syzkaller0: entered allmulticast mode [ 383.588443][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.601095][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.616253][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.642556][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.653258][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.924805][T16852] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.984760][T16852] bridge_slave_0 (unregistering): left allmulticast mode [ 384.022038][T16852] bridge_slave_0 (unregistering): left promiscuous mode [ 384.060896][T16852] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.268086][ T5637] syz_tun (unregistering): left allmulticast mode [ 384.675238][T16872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3042'. [ 384.699532][T16872] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 384.818363][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'. [ 384.878645][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 384.968705][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'. [ 385.066371][T16879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3044'. [ 385.081588][T16879] netlink: 'syz.0.3044': attribute type 1 has an invalid length. [ 385.210238][T16880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 385.410349][T16884] 8021q: adding VLAN 0 to HW filter on device bond13 [ 385.487382][T16891] bond13 (unregistering): Released all slaves [ 385.721915][ T5631] Bluetooth: hci3: command tx timeout [ 386.334218][T16925] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 386.695912][T16844] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.730090][T16844] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.755470][T16844] bridge_slave_0: entered allmulticast mode [ 386.809652][T16844] bridge_slave_0: entered promiscuous mode [ 386.857731][T16844] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.901680][T16844] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.917872][T16844] bridge_slave_1: entered allmulticast mode [ 386.940585][T16844] bridge_slave_1: entered promiscuous mode [ 387.219059][T16844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.294975][T16844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.463167][T16968] netlink: 'syz.3.3067': attribute type 1 has an invalid length. [ 387.475439][T16966] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 387.478775][T16844] team0: Port device team_slave_0 added [ 387.493495][T16966] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 387.520664][T16966] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 387.550412][T16844] team0: Port device team_slave_1 added [ 387.708406][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.719976][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.748647][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.799016][ T5631] Bluetooth: hci3: command tx timeout [ 387.841163][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.853298][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.898112][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.931373][T16982] netlink: zone id is out of range [ 387.955954][T16982] netlink: zone id is out of range [ 387.961585][T16982] netlink: zone id is out of range [ 387.973828][T16982] netlink: zone id is out of range [ 387.980862][T16982] netlink: zone id is out of range [ 387.986137][T16982] netlink: zone id is out of range [ 387.991678][T16982] netlink: zone id is out of range [ 387.997013][T16982] netlink: zone id is out of range [ 388.002609][T16982] netlink: zone id is out of range [ 388.022666][T16844] hsr_slave_0: entered promiscuous mode [ 388.037169][T16844] hsr_slave_1: entered promiscuous mode [ 388.058974][T16844] debugfs: 'hsr0' already exists in 'hsr' [ 388.071418][T16844] Cannot create hsr debugfs directory [ 388.115226][T16982] tipc: Enabled bearer , priority 0 [ 388.261664][T16982] syzkaller0: entered promiscuous mode [ 388.269823][T16982] syzkaller0: entered allmulticast mode [ 388.278836][T16982] tipc: Resetting bearer [ 388.301574][T16980] tipc: Resetting bearer [ 389.888188][ T5631] Bluetooth: hci3: command tx timeout [ 390.901909][T16980] tipc: Disabling bearer [ 391.236122][T17024] __nla_validate_parse: 8 callbacks suppressed [ 391.236143][T17024] netlink: 1432 bytes leftover after parsing attributes in process `syz.3.3082'. [ 391.703328][T16844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.796954][T17049] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3088'. [ 391.809886][T16844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.852439][T16844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 391.884685][T16844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 391.897635][T16844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 391.958857][ T5631] Bluetooth: hci3: command tx timeout [ 392.013888][T17049] bond13 (unregistering): Released all slaves [ 392.165902][T17048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3087'. [ 392.203947][T17048] tipc: Invalid UDP bearer configuration [ 392.204009][T17048] tipc: Enabling of bearer rejected, failed to enable media [ 392.272546][T17046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3087'. [ 392.298055][T17046] tipc: Invalid UDP bearer configuration [ 392.298113][T17046] tipc: Enabling of bearer rejected, failed to enable media [ 392.564457][T16844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.613122][T16844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.653658][T16844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 392.696877][T16844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 392.717176][T16844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 392.995217][T17093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3096'. [ 393.007138][T16844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.062831][T16844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.092686][T16844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 393.103559][T17096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3096'. [ 393.151319][T16844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 393.190397][T16844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 393.586841][T16844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.637067][T16844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.679161][T16844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 393.721452][T16844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 393.750172][T16844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 393.790890][T17120] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3103'. [ 393.814610][T17116] net_ratelimit: 51 callbacks suppressed [ 393.814632][T17116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.874084][T17116] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3102'. [ 393.902715][T17116] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3102'. [ 394.677736][T16844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.719244][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.737608][T16844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.825736][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.854743][T16844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.907311][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'. [ 394.923547][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.965918][T16844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.017681][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.195108][T17170] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 395.445812][T16844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.561219][T17179] syzkaller0: entered promiscuous mode [ 395.571055][T17179] syzkaller0: entered allmulticast mode [ 395.821562][T17188] xt_ecn: cannot match TCP bits for non-tcp packets [ 395.904637][T17193] netlink: 'syz.1.3121': attribute type 2 has an invalid length. [ 395.915617][T17193] netlink: 'syz.1.3121': attribute type 2 has an invalid length. [ 398.467062][T16844] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.474475][T17207] __nla_validate_parse: 3 callbacks suppressed [ 398.474496][T17207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3126'. [ 398.624249][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.631531][ T5776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.695721][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.702984][ T5776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.157815][T17231] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3134'. [ 399.753705][T17254] syzkaller1: entered allmulticast mode [ 399.766058][T17257] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 399.846893][T17260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3142'. [ 400.282762][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3147'. [ 400.304043][T17280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.353130][T17282] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3145'. [ 400.395187][T17285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3147'. [ 400.425651][T17285] netlink: 'syz.1.3147': attribute type 2 has an invalid length. [ 400.455109][T17285] netlink: 'syz.1.3147': attribute type 1 has an invalid length. [ 400.476914][T17285] netlink: 'syz.1.3147': attribute type 1 has an invalid length. [ 400.503696][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3147'. [ 400.517646][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.774472][T16844] veth0_vlan: entered promiscuous mode [ 400.843796][T16844] veth1_vlan: entered promiscuous mode [ 400.953818][T16844] veth0_macvtap: entered promiscuous mode [ 400.974429][T17298] netlink: 'syz.0.3153': attribute type 11 has an invalid length. [ 401.052391][T16844] veth1_macvtap: entered promiscuous mode [ 401.159344][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.192508][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.236055][T13231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.280682][T13231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.307545][T17311] tls_set_device_offload: netdev not found [ 401.315633][T13231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.332063][T13231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.345072][T17311] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3156'. [ 401.590196][T13231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.613840][T13231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.709177][ T5776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.731495][ T5776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.948592][T17329] xt_limit: Overflow, try lower: 604147548/4200216962 [ 402.082093][T17335] netlink: 69 bytes leftover after parsing attributes in process `syz.2.3035'. [ 402.476271][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.499194][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.510913][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.522955][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.532635][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.930457][T17357] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3170'. [ 403.232651][T17369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.417026][T17374] ip6t_srh: unknown srh match flags 4000 [ 403.592512][T17379] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 403.619671][T17379] netlink: 'syz.0.3176': attribute type 2 has an invalid length. [ 403.655401][T17379] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 403.678503][T17382] sctp: [Deprecated]: syz.3.3177 (pid 17382) Use of int in maxseg socket option. [ 403.678503][T17382] Use struct sctp_assoc_value instead [ 403.696584][T17381] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 403.712951][T17379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3176'. [ 403.729803][T17381] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3176'. [ 403.746953][T17382] geneve1: entered promiscuous mode [ 403.767834][T17381] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 403.777132][T17382] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3177'. [ 403.786652][T17381] netlink: 'syz.0.3176': attribute type 8 has an invalid length. [ 403.808153][T17381] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3176'. [ 403.833379][T17381] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3176'. [ 404.480491][T17402] netlink: 'syz.0.3183': attribute type 4 has an invalid length. [ 404.599602][ T5626] Bluetooth: hci4: command tx timeout [ 405.133440][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'. [ 405.135593][T17343] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.150079][T17343] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.157406][T17343] bridge_slave_0: entered allmulticast mode [ 405.167963][T17343] bridge_slave_0: entered promiscuous mode [ 405.177719][T17343] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.185034][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.192401][T17343] bridge_slave_1: entered allmulticast mode [ 405.200103][T17343] bridge_slave_1: entered promiscuous mode [ 405.324805][T17343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.345385][T17343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.394646][T17444] dvmrp0: left allmulticast mode [ 405.453593][T17446] syzkaller1: entered promiscuous mode [ 405.459505][T17446] syzkaller1: entered allmulticast mode [ 405.542801][T17343] team0: Port device team_slave_0 added [ 405.552736][T17343] team0: Port device team_slave_1 added [ 405.596547][T17343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.604045][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.635575][T17343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.662986][T17343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.683866][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.729886][T17343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.872992][T17343] hsr_slave_0: entered promiscuous mode [ 405.895929][T17343] hsr_slave_1: entered promiscuous mode [ 405.914071][T17343] debugfs: 'hsr0' already exists in 'hsr' [ 405.923715][T17343] Cannot create hsr debugfs directory [ 406.646448][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3204'. [ 406.680279][ T5626] Bluetooth: hci4: command tx timeout [ 406.828633][T17343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.061365][T17489] bond1 (unregistering): Released all slaves [ 407.138051][T17510] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 407.281075][T17343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.313967][T17343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.338060][T17343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 407.545776][T17522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.568893][T17343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.592778][T17343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.621553][T17343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 407.777158][T17533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3211'. [ 407.831390][T17534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3211'. [ 408.197723][T17343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.256427][T17343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.292109][T17343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 408.389776][T17552] netlink: 'syz.0.3216': attribute type 1 has an invalid length. [ 408.455275][T17552] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 408.761567][ T5626] Bluetooth: hci4: command tx timeout [ 408.805595][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'. [ 408.825952][T17343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.838828][T17343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.847218][T17343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.861430][T17343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.870187][T17343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.897374][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 408.909677][T17343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.918900][T17343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.961243][T17343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.090278][T17343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.137088][T17549] gretap1: entered promiscuous mode [ 409.192943][T17343] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.222080][T13231] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.229360][T13231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.294779][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.302040][ T6229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.874316][T17600] syzkaller0: entered promiscuous mode [ 409.914646][T17600] syzkaller0: entered allmulticast mode [ 410.107688][T17612] bridge_slave_1: left allmulticast mode [ 410.114158][T17612] bridge_slave_1: left promiscuous mode [ 410.120643][T17612] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.158467][T17612] bond0: (slave bond_slave_0): Releasing backup interface [ 410.210568][T17612] bond0: (slave bond_slave_1): Releasing backup interface [ 410.264215][T17612] team0: Port device team_slave_0 removed [ 410.325936][T17612] team0: Port device team_slave_1 removed [ 410.347028][T17612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.355574][T17612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.384439][T17612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.392209][T17612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.405488][T17612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 410.839155][ T5626] Bluetooth: hci4: command tx timeout [ 411.261946][T17343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.526185][T17658] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 411.547483][T17627] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 411.553144][T17658] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3233'. [ 411.595306][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3233'. [ 411.763738][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 412.235168][T17682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.310202][T17686] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3239'. [ 412.354716][T17343] veth0_vlan: entered promiscuous mode [ 412.423646][T17343] veth1_vlan: entered promiscuous mode [ 412.557699][T17343] veth0_macvtap: entered promiscuous mode [ 412.616662][T17343] veth1_macvtap: entered promiscuous mode [ 412.706785][T17343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.741580][T17343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.793029][ T6212] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.818921][ T5776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.860296][ T5776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.883063][ T5776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.154367][T13232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.199782][T13232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.275234][T17721] syzkaller1: entered promiscuous mode [ 413.287515][T17721] syzkaller1: entered allmulticast mode [ 413.399474][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.430349][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.553095][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3250'. [ 413.602204][T17736] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3251'. [ 413.667624][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3251'. [ 413.708896][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3251'. [ 413.834230][T17747] vxcan0: tx address claim with dest, not broadcast [ 413.891059][T17752] netlink: 'syz.2.3252': attribute type 4 has an invalid length. [ 414.254024][T17762] __nla_validate_parse: 1 callbacks suppressed [ 414.254045][T17762] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3256'. [ 414.332825][T17762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.397038][T17762] netlink: 'syz.4.3256': attribute type 1 has an invalid length. [ 414.502739][T17776] IPv6: addrconf: prefix option has invalid lifetime [ 414.542110][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.559675][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.570012][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.583520][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.594749][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.828357][T13231] batadv0: left allmulticast mode [ 414.851360][T13231] batadv0: left promiscuous mode [ 414.869949][T13231] bridge0: port 3(batadv0) entered disabled state [ 414.971795][T13231] bridge_slave_1: left promiscuous mode [ 414.997395][T13231] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.042481][T13231] bridge_slave_0: left allmulticast mode [ 415.052676][T13231] bridge_slave_0: left promiscuous mode [ 415.058732][T13231] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.611655][T13231] gretap0 (unregistering): left promiscuous mode [ 415.637501][T13231] bond2 (unregistering): (slave gretap1): Releasing active interface [ 415.702639][T13231] bond8 (unregistering): (slave gretap2): Releasing backup interface [ 415.751886][T13231] bond12 (unregistering): (slave gretap3): Releasing active interface [ 415.828616][T13231] bond11 (unregistering): (slave geneve5): Releasing active interface [ 415.866762][T13231] bond7 (unregistering): (slave geneve3): Releasing active interface [ 416.121737][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.143756][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.163676][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.176556][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.184816][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.513260][T13231] bond1 (unregistering): Released all slaves [ 416.530860][T13231] bond2 (unregistering): Released all slaves [ 416.553471][T13231] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 416.565624][T13231] bond3 (unregistering): Released all slaves [ 416.587011][T13231] bond4 (unregistering): Released all slaves [ 416.613268][T13231] bond5 (unregistering): Released all slaves [ 416.633209][T13231] bond6 (unregistering): Released all slaves [ 416.653492][T13231] bond0 (unregistering): Released all slaves [ 416.674820][T13231] bond7 (unregistering): Released all slaves [ 416.681419][ T5631] Bluetooth: hci2: command tx timeout [ 416.714959][T13231] bond8 (unregistering): (slave bond9): Releasing backup interface [ 416.723894][T13231] bond8 (unregistering): Released all slaves [ 416.742226][T13231] bond9 (unregistering): Released all slaves [ 416.764439][T13231] bond10 (unregistering): Released all slaves [ 416.786672][T13231] bond11 (unregistering): Released all slaves [ 416.811735][T13231] bond12 (unregistering): Released all slaves [ 417.122765][T13231] tipc: Disabling bearer [ 417.167586][T13231] tipc: Left network mode [ 418.283960][ T5631] Bluetooth: hci1: command tx timeout [ 418.453528][T17861] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 418.722803][T17861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.759186][ T5631] Bluetooth: hci2: command tx timeout [ 419.133586][T17875] tipc: Enabling not permitted [ 419.168396][T17875] tipc: Enabling of bearer rejected, failed to enable media [ 419.692501][T17895] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3283'. [ 419.715375][T17895] 8021q: VLANs not supported on ip_vti0 [ 419.796578][T17901] netlink: 'syz.4.3286': attribute type 1 has an invalid length. [ 419.805534][T17901] nbd: error processing sock list [ 419.818499][T17899] IPVS: length: 174 != 8 [ 420.358395][ T5631] Bluetooth: hci1: command tx timeout [ 420.442108][T17920] netlink: 'syz.2.3291': attribute type 2 has an invalid length. [ 420.506537][T17920] netlink: 'syz.2.3291': attribute type 2 has an invalid length. [ 420.687487][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3294'. [ 420.825763][T17925] bridge_slave_1: left allmulticast mode [ 420.838328][ T5631] Bluetooth: hci2: command tx timeout [ 420.842469][T17925] bridge_slave_1: left promiscuous mode [ 420.851469][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.865269][T17925] bridge_slave_0: left allmulticast mode [ 420.874923][T17925] bridge_slave_0: left promiscuous mode [ 420.881093][T17925] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.963000][T13231] veth1_to_team: left promiscuous mode [ 420.976961][T13231] hsr_slave_0: left promiscuous mode [ 421.030543][T13231] veth1_macvtap: left promiscuous mode [ 421.038428][T13231] veth1_vlan: left promiscuous mode [ 421.043905][T13231] veth0_vlan: left promiscuous mode [ 421.477857][T13231] pim6reg527 (unregistering): left allmulticast mode [ 421.669144][T13231] team0 (unregistering): Port device team_slave_1 removed [ 421.685821][T13231] team0 (unregistering): Port device team_slave_0 removed [ 421.893539][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3298'. [ 422.161950][T17774] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.174125][T17774] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.189711][T17774] bridge_slave_0: entered allmulticast mode [ 422.199813][T17774] bridge_slave_0: entered promiscuous mode [ 422.210210][T17774] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.222565][T17774] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.231937][T17774] bridge_slave_1: entered allmulticast mode [ 422.253159][T17774] bridge_slave_1: entered promiscuous mode [ 422.340289][T17968] tipc: Started in network mode [ 422.347541][T17968] tipc: Node identity 4, cluster identity 4711 [ 422.378185][T17968] tipc: Node number set to 4 [ 422.443887][ T5631] Bluetooth: hci1: command tx timeout [ 422.498830][T17774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.512088][T17774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.607121][T17774] team0: Port device team_slave_0 added [ 422.629123][T17774] team0: Port device team_slave_1 added [ 422.676918][T13231] IPVS: stop unused estimator thread 0... [ 422.715525][T17774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.723171][T17774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.753269][T17774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.816940][T17774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.826831][T17774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.859374][T17774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.918672][ T5631] Bluetooth: hci2: command tx timeout [ 423.096674][T17774] hsr_slave_0: entered promiscuous mode [ 423.105381][T17774] hsr_slave_1: entered promiscuous mode [ 423.116757][T17774] debugfs: 'hsr0' already exists in 'hsr' [ 423.123200][T17774] Cannot create hsr debugfs directory [ 423.223670][ T6214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.236513][ T6214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.249169][ T6214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 423.327956][T17807] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.335417][T17807] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.344122][T17807] bridge_slave_0: entered allmulticast mode [ 423.363189][T17807] bridge_slave_0: entered promiscuous mode [ 423.436247][T17807] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.461688][T17807] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.469270][T17807] bridge_slave_1: entered allmulticast mode [ 423.477416][T17807] bridge_slave_1: entered promiscuous mode [ 423.651057][T17999] bond1: option lp_interval: invalid value (0) [ 423.681559][T17999] bond1: option lp_interval: allowed values 1 - 2147483647 [ 423.713696][T17999] bond1 (unregistering): Released all slaves [ 423.792923][ T6214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.804176][ T6214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.815127][ T6214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 424.033239][ T6214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.045010][ T6214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.057398][ T6214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 424.102363][T17807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.128909][T17807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.251755][ T6214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.266771][ T6214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.279978][ T6214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 424.308202][T17807] team0: Port device team_slave_0 added [ 424.347615][T17807] team0: Port device team_slave_1 added [ 424.479578][T18036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3317'. [ 424.493406][T17807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.500673][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.528004][ T5631] Bluetooth: hci1: command tx timeout [ 424.534286][T17807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.548006][T17807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.555029][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.583263][T17807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.768354][T18041] netlink: 'syz.2.3319': attribute type 3 has an invalid length. [ 424.889342][ T6227] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.897826][ T6227] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.915052][T17807] hsr_slave_0: entered promiscuous mode [ 424.923321][T17807] hsr_slave_1: entered promiscuous mode [ 424.931477][T17807] debugfs: 'hsr0' already exists in 'hsr' [ 424.937436][T17807] Cannot create hsr debugfs directory [ 424.993358][ T6212] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.014624][ T6212] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.089294][T18051] netlink: 'syz.0.3322': attribute type 10 has an invalid length. [ 425.189581][ T6219] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.207540][ T6219] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.260522][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3323'. [ 425.385738][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'. [ 425.490513][T18061] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 425.518804][T18061] bond0: (slave lo): Error: Device can not be enslaved while up [ 425.537425][ T6227] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.547704][ T6227] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.607714][ T6214] bridge_slave_1: left allmulticast mode [ 425.654845][ T6214] bridge_slave_1: left promiscuous mode [ 425.685755][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.713367][ T6214] bridge_slave_0: left allmulticast mode [ 425.726588][ T6214] bridge_slave_0: left promiscuous mode [ 425.741713][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.030895][ T6214] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 426.326741][ T6214] bond1 (unregistering): (slave geneve2): Releasing active interface [ 426.675659][ T6214] bond1 (unregistering): Released all slaves [ 426.697294][ T6214] bond2 (unregistering): Released all slaves [ 426.722093][ T6214] bond3 (unregistering): Released all slaves [ 426.749158][ T6214] bond4 (unregistering): Released all slaves [ 426.769370][ T6214] bond0 (unregistering): Released all slaves [ 426.787354][ T6214] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 426.811133][ T6214] bond5 (unregistering): Released all slaves [ 426.831507][ T6214] bond6 (unregistering): Released all slaves [ 426.847689][ T6214] bond7 (unregistering): Released all slaves [ 426.865575][ T6214] bond8 (unregistering): Released all slaves [ 426.963955][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 427.181286][T17774] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.220181][T17774] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.348651][ T6214] : left promiscuous mode [ 427.379848][T18106] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3334'. [ 427.524073][T17774] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.574055][T17774] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.660961][ T6214] tipc: Disabling bearer [ 427.682533][ T6214] tipc: Disabling bearer [ 427.690867][ T6214] tipc: Left network mode [ 427.734462][ T6214] IPVS: stopping master sync thread 6647 ... [ 427.845051][T17774] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.858162][T17774] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.129506][T17774] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.147163][T17774] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.967440][T18169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3347'. [ 428.982144][T18167] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3348'. [ 429.036989][ T30] audit: type=1804 audit(1779817558.687:9): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3349" name="/newroot/94/cgroup.controllers" dev="tmpfs" ino=499 res=1 errno=0 [ 429.127256][ T30] audit: type=1800 audit(1779817558.687:10): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3349" name="cgroup.controllers" dev="tmpfs" ino=499 res=0 errno=0 [ 429.443472][T17774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.466874][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.475122][T17774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.497843][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.512831][T17774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.540849][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.635740][T17774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.666287][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.318488][ T6214] veth1_vlan: left allmulticast mode [ 430.335319][ T6214] veth1_macvtap: left promiscuous mode [ 430.360969][ T6214] veth1_vlan: left promiscuous mode [ 430.383556][ T6214] veth0_vlan: left promiscuous mode [ 430.416471][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3357'. [ 431.003869][ T6214] team0 (unregistering): Port device team_slave_1 removed [ 431.047730][ T6214] team0 (unregistering): Port device team_slave_0 removed [ 431.363850][T18247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3359'. [ 431.519283][T18255] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3361'. [ 431.553196][T18255] openvswitch: netlink: Flow key attr not present in new flow. [ 431.577213][T17807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.606079][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.659173][T17807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 431.695875][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.723070][T17807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 431.802342][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.868746][T17807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 431.890472][ T6214] IPVS: stop unused estimator thread 0... [ 431.927024][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.935316][T18264] xt_hashlimit: size too large, truncated to 1048576 [ 432.104635][T17774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.377851][T17774] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.475363][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.482656][ T6212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.548138][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.555411][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.662497][T18291] IPVS: Error connecting to the multicast addr [ 432.721103][T18289] netlink: 'syz.4.3368': attribute type 1 has an invalid length. [ 432.747990][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 432.770971][T18289] netlink: 'syz.4.3368': attribute type 1 has an invalid length. [ 432.876880][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 432.906784][T18291] syzkaller0: entered promiscuous mode [ 432.923260][T18291] syzkaller0: entered allmulticast mode [ 433.063258][T18303] bond3 (unregistering): Released all slaves [ 433.281950][T17807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.778347][T17807] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.833697][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.840981][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.943046][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.950277][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.146871][T18368] openvswitch: netlink: IP tunnel TTL not specified. [ 437.294272][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'. [ 438.235422][T17774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.513494][T17774] veth0_vlan: entered promiscuous mode [ 438.579156][T17774] veth1_vlan: entered promiscuous mode [ 438.702516][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 438.776858][T17774] veth0_macvtap: entered promiscuous mode [ 438.832348][T17774] veth1_macvtap: entered promiscuous mode [ 438.887605][T17807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.915231][T18440] netlink: 'syz.0.3393': attribute type 83 has an invalid length. [ 438.986002][T17774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.011944][T18446] IPv6: Can't replace route, no match found [ 439.035723][T17774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.052430][T18446] IPv6: Can't replace route, no match found [ 439.111972][ T6229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.171530][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.225166][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.295420][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.463698][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3396'. [ 439.586522][T18462] vlan2: entered allmulticast mode [ 439.621712][T18462] bridge_slave_0: entered allmulticast mode [ 439.811179][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.850480][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.932438][T13232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.967348][T13232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.982609][T18479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3399'. [ 440.030546][T18479] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 440.130392][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.142349][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.253014][T17807] veth0_vlan: entered promiscuous mode [ 440.253478][T18482] netlink: 'syz.3.3254': attribute type 27 has an invalid length. [ 440.272426][T18482] netlink: 'syz.3.3254': attribute type 4 has an invalid length. [ 440.313168][T18482] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3254'. [ 440.380269][T17807] veth1_vlan: entered promiscuous mode [ 440.635936][T17807] veth0_macvtap: entered promiscuous mode [ 440.712386][T17807] veth1_macvtap: entered promiscuous mode [ 440.899989][T17807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.984155][T17807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.042086][ T150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.105413][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.184866][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.229907][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.647210][T13230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.694244][T13230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.783801][T18547] bond0: option miimon: invalid value (18446744071829782528) [ 441.808107][T18547] bond0: option miimon: allowed values 0 - 2147483647 [ 441.925643][T13230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.964966][T13230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.148663][T18558] pimreg3: entered allmulticast mode [ 442.644032][T18582] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3426'. [ 442.852742][T18567] geneve1: entered allmulticast mode [ 442.945305][T18573] veth0_to_bond: entered allmulticast mode [ 443.230280][T18604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'. [ 443.249526][T18607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.306238][ T5625] IPVS: starting estimator thread 0... [ 443.333214][T18577] bond3: peer notification delay (25) is not a multiple of miimon (28933), value rounded to 0 ms [ 443.383731][T18577] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 443.445330][T18577] bond3 (unregistering): Released all slaves [ 443.480232][T18611] IPVS: using max 26 ests per chain, 62400 per kthread [ 443.611131][T18596] tipc: Started in network mode [ 443.628964][T18596] tipc: Node identity 4, cluster identity 4711 [ 443.657252][T18596] tipc: Node number set to 4 [ 443.995432][T18581] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.039518][T18581] syzkaller0: entered promiscuous mode [ 444.052026][T18581] syzkaller0: entered allmulticast mode [ 445.167532][ T5625] IPVS: starting estimator thread 0... [ 445.307985][T18682] IPVS: using max 28 ests per chain, 67200 per kthread [ 445.319731][T18693] netlink: 'syz.2.3448': attribute type 1 has an invalid length. [ 445.942228][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 446.730537][T18749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3461'. [ 446.836112][T18757] netlink: 'syz.2.3461': attribute type 4 has an invalid length. [ 447.187517][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3463'. [ 447.251523][T18772] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 447.453798][ T6219] nci: nci_rsp_packet: unknown rsp opcode 0xf [ 447.642598][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'. [ 448.271959][T18826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3478'. [ 450.310001][T18779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.834623][T18870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.909494][T18872] xt_hashlimit: invalid interval [ 451.013683][T18877] netlink: 'syz.0.3491': attribute type 10 has an invalid length. [ 451.039078][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3493'. [ 451.094307][T18877] team0: Port device dummy0 added [ 451.393165][T18892] netlink: 'syz.3.3497': attribute type 2 has an invalid length. [ 451.406954][T18892] x_tables: duplicate underflow at hook 2 [ 451.449872][T18895] netlink: 'syz.0.3499': attribute type 4 has an invalid length. [ 451.680510][T18903] netlink: 'syz.3.3501': attribute type 11 has an invalid length. [ 451.730039][T18903] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 451.982928][T18915] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 452.398504][T18928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3509'. [ 452.615233][T18933] xt_CONNSECMARK: invalid mode: 0 [ 452.630839][T18935] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3511'. [ 452.668837][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 452.910015][T18950] netlink: 'syz.4.3516': attribute type 64 has an invalid length. [ 453.153136][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3518'. [ 453.951430][T18986] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3525'. [ 453.990130][T18990] netlink: 'syz.4.3527': attribute type 9 has an invalid length. [ 453.992892][T18986] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3525'. [ 454.028342][T18987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.255272][T19040] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 455.388721][T19050] tipc: Enabled bearer , priority 0 [ 455.446345][T19050] syzkaller0: entered promiscuous mode [ 455.485113][T19050] syzkaller0: entered allmulticast mode [ 455.577048][T19049] tipc: Resetting bearer [ 455.685235][T19049] tipc: Disabling bearer [ 455.710004][T19059] bond0: option miimon: invalid value (18446744071829782528) [ 455.718880][T19059] bond0: option miimon: allowed values 0 - 2147483647 [ 455.763575][T19059] netlink: 'syz.4.3545': attribute type 83 has an invalid length. [ 455.926659][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3548'. [ 456.327679][T19085] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3554'. [ 456.494637][T19094] Bluetooth: MGMT ver 1.23 [ 456.591225][T19086] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 456.629389][T19097] netlink: 'syz.5.3556': attribute type 10 has an invalid length. [ 456.654256][T19087] veth3: entered allmulticast mode [ 456.716066][T19097] ipvlan0: entered allmulticast mode [ 456.725340][T19097] veth0_vlan: entered allmulticast mode [ 456.745310][T19097] team0: Device ipvlan0 failed to register rx_handler [ 456.987161][T19113] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.3559'. [ 457.264964][T19126] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3562'. [ 457.405881][T19130] syzkaller0: entered promiscuous mode [ 457.419694][T19130] syzkaller0: entered allmulticast mode [ 457.467494][T19130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.570277][T19137] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3567'. [ 458.236007][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3574'. [ 458.253447][T19156] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.384565][T19160] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3575'. [ 461.197695][T19173] netlink: 'syz.5.3578': attribute type 1 has an invalid length. [ 461.230844][T19173] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3578'. [ 461.627693][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3582'. [ 461.749215][T19202] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 461.769106][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'. [ 461.812563][T19190] skbuff: bad partial csum: csum=65535/2 headroom=70 headlen=65543 [ 461.824420][T19202] bond3: entered promiscuous mode [ 461.833046][T19202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.957842][T19208] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3587'. [ 462.180985][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3588'. [ 462.702838][T19235] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3595'. [ 462.848729][T19239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3597'. [ 462.955089][T19239] netlink: 'syz.5.3597': attribute type 1 has an invalid length. [ 463.031969][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 463.180095][T19254] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3601'. [ 463.390527][T19259] netlink: 'syz.0.3602': attribute type 2 has an invalid length. [ 463.462137][T19268] netlink: 'syz.3.3605': attribute type 1 has an invalid length. [ 463.569200][T19273] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3606'. [ 463.642051][T19277] syz_tun: refused to change device tx_queue_len [ 463.817032][T19284] netlink: 'syz.4.3610': attribute type 20 has an invalid length. [ 463.825302][T19284] IPv6: NLM_F_CREATE should be specified when creating new route [ 463.835310][T19287] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.522238][T19318] tunl0: entered promiscuous mode [ 464.534494][T19318] netlink: 'syz.4.3618': attribute type 3 has an invalid length. [ 464.734032][T19324] syzkaller0: entered promiscuous mode [ 464.759607][T19324] syzkaller0: entered allmulticast mode [ 464.905418][T19334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.967196][T19334] ipvlan2: entered allmulticast mode [ 464.981351][T19334] syz_tun: entered allmulticast mode [ 465.055367][T19334] netlink: 'syz.5.3625': attribute type 1 has an invalid length. [ 465.063713][T19337] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.804147][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 465.816299][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 465.825923][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 465.839480][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 465.847248][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 466.551837][T19359] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.559369][T19359] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.566667][T19359] bridge_slave_0: entered allmulticast mode [ 466.574306][T19359] bridge_slave_0: entered promiscuous mode [ 466.583108][T19359] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.590820][T19359] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.598763][T19359] bridge_slave_1: entered allmulticast mode [ 466.606804][T19359] bridge_slave_1: entered promiscuous mode [ 466.646207][T19359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.660538][T19359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.694022][T19359] team0: Port device team_slave_0 added [ 466.702637][T19359] team0: Port device team_slave_1 added [ 466.732389][T19359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.739592][T19359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.767697][T19359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.781214][T19359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.788301][T19359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.814639][T19359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.868898][T19359] hsr_slave_0: entered promiscuous mode [ 466.875451][T19359] hsr_slave_1: entered promiscuous mode [ 466.881938][T19359] debugfs: 'hsr0' already exists in 'hsr' [ 466.887708][T19359] Cannot create hsr debugfs directory [ 467.075072][T19359] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.085351][T19359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.096057][T19359] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 467.114324][T19359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.122627][T19359] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 467.133862][T19359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.142067][T19359] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 467.152707][T19359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.194096][T19359] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.201373][T19359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.208878][T19359] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.216014][T19359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.292463][T19359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.309981][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.317933][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.337664][T19359] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.352789][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.359987][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.375975][T13230] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.383163][T13230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.795808][T19359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.878464][ T5626] Bluetooth: hci6: command tx timeout [ 468.049560][T19359] veth0_vlan: entered promiscuous mode [ 468.067387][T19359] veth1_vlan: entered promiscuous mode [ 468.143241][T19359] veth0_macvtap: entered promiscuous mode [ 468.154903][T19359] veth1_macvtap: entered promiscuous mode [ 468.175337][T19359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.196913][T19359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.216471][ T5776] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.231535][ T5776] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.249199][ T5776] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.261054][ T5776] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.366251][ T5776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.380018][ T5776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.429412][ T5776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.439589][ T5776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.958612][ T5626] Bluetooth: hci6: command tx timeout [ 472.038500][ T5626] Bluetooth: hci6: command tx timeout [ 474.118463][ T5626] Bluetooth: hci6: command tx timeout [ 498.518218][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 501.560751][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.158172][ T5625] page_pool_release_retry() stalled pool shutdown: id 126, 1 inflight 60 sec [ 508.758210][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 518.172930][T19418] __nla_validate_parse: 9 callbacks suppressed [ 518.172949][T19418] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3633'. [ 518.416852][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3638'. [ 518.436785][T19429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3638'. [ 518.466146][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3638'. [ 518.475473][T13231] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.490670][T19429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3638'. [ 518.510504][T13231] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.557105][T13231] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.594901][T13231] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.663389][T19437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 518.724976][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 518.794351][T19440] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3641'. [ 518.804039][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 518.813570][T19440] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3641'. [ 518.850347][T19445] sctp: [Deprecated]: syz.0.3643 (pid 19445) Use of int in maxseg socket option. [ 518.850347][T19445] Use struct sctp_assoc_value instead [ 519.624595][T19473] netlink: 'syz.5.3652': attribute type 1 has an invalid length. [ 519.669604][T19473] netlink: 'syz.5.3652': attribute type 1 has an invalid length. [ 519.692078][T19484] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 519.707328][T19483] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20001 [ 519.726393][T19473] netlink: 'syz.5.3652': attribute type 1 has an invalid length. [ 520.435474][T19511] bond1: option all_slaves_active: invalid value (222) [ 520.452801][T19511] bond1 (unregistering): Released all slaves [ 521.212619][T19536] xt_hashlimit: max too large, truncated to 1048576 [ 521.937274][T19561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.945083][T19561] batadv_slave_1: entered promiscuous mode [ 522.315523][T19570] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 522.991560][T19592] xt_limit: Overflow, try lower: 604147548/4200216962 [ 524.146291][T19628] bridge0: port 1(veth1_to_bridge) entered blocking state [ 524.185752][T19628] bridge0: port 1(veth1_to_bridge) entered disabled state [ 524.194110][T19628] veth1_to_bridge: entered allmulticast mode [ 524.213054][T19628] veth1_to_bridge: entered promiscuous mode [ 524.221008][T19628] bridge0: port 1(veth1_to_bridge) entered blocking state [ 524.228370][T19628] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 524.573674][T19649] syzkaller0: entered promiscuous mode [ 524.579536][T19649] syzkaller0: entered allmulticast mode [ 524.694043][T19649] tipc: Enabled bearer , priority 0 [ 524.790543][T19648] tipc: Resetting bearer [ 524.902930][T19660] __nla_validate_parse: 15 callbacks suppressed [ 524.902952][T19660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3703'. [ 524.932618][T19648] tipc: Disabling bearer [ 525.322955][T19672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 526.354409][T19716] syzkaller0: entered promiscuous mode [ 526.375399][T19716] syzkaller0: entered allmulticast mode [ 526.512264][T19724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3720'. [ 526.541811][T19716] tipc: Started in network mode [ 526.555224][T19726] netlink: 'syz.0.3721': attribute type 1 has an invalid length. [ 526.570436][T19716] tipc: Node identity 161dc15581bf, cluster identity 4711 [ 526.580812][T19716] tipc: Enabled bearer , priority 0 [ 526.587478][T19726] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.3721'. [ 526.617547][T19725] netlink: 'syz.4.3722': attribute type 12 has an invalid length. [ 526.648307][T19715] tipc: Resetting bearer [ 526.713514][T19715] tipc: Disabling bearer [ 526.991621][T19739] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3725'. [ 527.061400][T19749] netlink: 'syz.5.3727': attribute type 3 has an invalid length. [ 527.069831][T19749] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3727'. [ 527.456994][T19760] netlink: 'syz.6.3731': attribute type 21 has an invalid length. [ 527.483435][T19760] IPv6: NLM_F_CREATE should be specified when creating new route [ 527.858719][T19773] syzkaller0: entered promiscuous mode [ 527.871112][T19773] syzkaller0: entered allmulticast mode [ 527.917127][ T24] IPVS: starting estimator thread 0... [ 528.028568][T19776] IPVS: using max 27 ests per chain, 64800 per kthread [ 528.076800][T19773] tipc: Enabled bearer , priority 0 [ 528.101259][T19772] tipc: Resetting bearer [ 528.322480][T19772] tipc: Disabling bearer [ 528.553821][T19805] netlink: 'syz.6.3742': attribute type 2 has an invalid length. [ 528.589265][T19805] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3742'. [ 528.944222][T19820] tc action pedit 'at' offset 15763 out of bounds [ 528.977133][T19827] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 528.999580][T19827] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 529.741674][T19860] : entered promiscuous mode [ 529.811908][T19864] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3759'. [ 529.839760][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3758'. [ 529.858663][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3758'. [ 529.934415][T19862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3758'. [ 530.027579][T19877] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3763'. [ 530.050040][T19879] xt_hashlimit: size too large, truncated to 1048576 [ 530.066729][T19877] netlink: 'syz.6.3763': attribute type 2 has an invalid length. [ 530.106913][T19877] netlink: 'syz.6.3763': attribute type 1 has an invalid length. [ 530.257083][T19888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3765'. [ 530.404859][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3765'. [ 530.790979][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3770'. [ 530.836917][T19901] syzkaller1: entered promiscuous mode [ 530.874898][T19901] syzkaller1: entered allmulticast mode [ 530.906700][T19908] vlan2: entered allmulticast mode [ 531.132976][T19919] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 531.479762][T19933] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3780'. [ 531.545861][T19936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 531.597516][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 531.602547][T19936] xfrm1: entered promiscuous mode [ 531.637122][T19936] xfrm1: entered allmulticast mode [ 531.817587][T19948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3784'. [ 532.535570][T19973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3789'. [ 532.556645][T19973] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.151901][T19987] nbd: couldn't find a device at index 0 [ 533.189535][T19987] netlink: 'syz.6.3793': attribute type 10 has an invalid length. [ 533.228380][T19987] macvlan1: entered promiscuous mode [ 533.251301][T19987] macvlan1: entered allmulticast mode [ 533.320164][T19987] veth1_vlan: entered allmulticast mode [ 533.367340][T19987] team0: Port device macvlan1 added [ 533.566548][T20003] tipc: Enabling not permitted [ 533.580821][T20003] tipc: Enabling of bearer rejected, failed to enable media [ 533.966780][T20017] syzkaller0: entered promiscuous mode [ 533.996305][T20017] syzkaller0: entered allmulticast mode [ 534.066132][T20021] sctp: [Deprecated]: syz.5.3806 (pid 20021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.066132][T20021] Use struct sctp_sack_info instead [ 534.311678][T20034] xt_hashlimit: size too large, truncated to 1048576 [ 534.359817][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 534.439753][T20040] netlink: 'syz.3.3812': attribute type 15 has an invalid length. [ 535.307313][T20075] __nla_validate_parse: 4 callbacks suppressed [ 535.307337][T20075] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3822'. [ 536.360986][T20113] syzkaller0: entered promiscuous mode [ 536.380766][T20113] syzkaller0: entered allmulticast mode [ 536.469788][T20120] Bluetooth: MGMT ver 1.23 [ 536.495511][T20113] tipc: Started in network mode [ 536.528718][T20113] tipc: Node identity 2a29ef17afa2, cluster identity 4711 [ 536.556140][T20113] tipc: Enabled bearer , priority 0 [ 536.610291][T20111] tipc: Resetting bearer [ 536.789480][T20111] tipc: Disabling bearer [ 536.820725][T20137] openvswitch: netlink: Missing key (keys=40, expected=80) [ 536.951858][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3839'. [ 537.054754][T20143] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3841'. [ 537.383780][T20157] netlink: 'syz.3.3847': attribute type 1 has an invalid length. [ 537.700885][T20162] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 537.747777][T20162] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3848'. [ 537.793638][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3848'. [ 538.154081][T20190] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3856'. [ 538.168935][T20190] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3856'. [ 538.377195][T20200] tipc: Enabling of bearer rejected, failed to enable media [ 538.516079][T20207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3858'. [ 539.167104][T20231] netlink: 'syz.5.3862': attribute type 1 has an invalid length. [ 539.227352][T20231] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3862'. [ 539.252244][T20231] netlink: 'syz.5.3862': attribute type 1 has an invalid length. [ 539.275426][T20231] netlink: 'syz.5.3862': attribute type 8 has an invalid length. [ 539.313806][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3864'. [ 539.413116][T20225] netlink: 'syz.6.3861': attribute type 8 has an invalid length. [ 539.454118][T20225] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.462007][T20225] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.480573][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 539.741038][T20252] netlink: 'syz.4.3868': attribute type 1 has an invalid length. [ 539.853716][T20252] netlink: 'syz.4.3868': attribute type 3 has an invalid length. [ 540.177403][T20270] team0: entered promiscuous mode [ 540.194757][T20270] team_slave_0: entered promiscuous mode [ 540.218383][T20270] team_slave_1: entered promiscuous mode [ 540.269184][T20283] No such timeout policy "syz1" [ 540.275887][T20284] No such timeout policy "syz1" [ 540.408576][T20286] netlink: 'syz.6.3879': attribute type 1 has an invalid length. [ 540.538716][T20286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.559956][T20296] __nla_validate_parse: 12 callbacks suppressed [ 540.559994][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3881'. [ 540.624957][T20296] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.3881'. [ 541.113895][T20322] sctp: [Deprecated]: syz.0.3890 (pid 20322) Use of int in max_burst socket option. [ 541.113895][T20322] Use struct sctp_assoc_value instead [ 541.319946][T20325] batadv0: entered promiscuous mode [ 541.334720][T20325] macsec1: entered promiscuous mode [ 541.345413][T20325] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 541.372083][T20325] batadv0: left promiscuous mode [ 541.527618][T20341] netlink: 'syz.6.3897': attribute type 1 has an invalid length. [ 541.764120][T20345] ip6gre0: Master is either lo or non-ether device [ 541.829889][T20353] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 541.915452][T20345] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3897'. [ 541.993490][T20341] veth3: entered promiscuous mode [ 542.038676][T20341] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 542.083679][T20345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.113040][ T6212] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 542.128728][T20365] geneve2: entered promiscuous mode [ 542.147209][T20365] geneve2: entered allmulticast mode [ 542.192050][ T6219] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.216581][ T6219] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.269155][ T57] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 542.273167][ T6219] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.335506][ T6219] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.493182][T20378] netlink: 'syz.0.3909': attribute type 1 has an invalid length. [ 543.553804][T20423] netlink: 'syz.4.3917': attribute type 1 has an invalid length. [ 543.623875][T20431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3917'. [ 543.713240][T20433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3917'. [ 543.973428][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3920'. [ 543.990595][T20431] bond1: (slave bridge1): making interface the new active one [ 544.081608][T20431] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 544.134882][T20433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.036069][T20484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3932'. [ 545.246581][T20497] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 545.363858][T20497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3935'. [ 545.605037][T20467] H: renamed from dummy0 (while UP) [ 545.667146][T20516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3941'. [ 546.293040][T20549] netlink: 'syz.0.3950': attribute type 15 has an invalid length. [ 546.403227][T20538] syzkaller0: entered allmulticast mode [ 546.538462][T20561] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3953'. [ 546.567777][T20561] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3953'. [ 546.629904][T20568] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3954'. [ 546.892479][T20579] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3956'. [ 546.964017][T20579] vlan0: entered promiscuous mode [ 547.017095][T20583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.089505][T20573] "syz.0.3955" (20573) uses obsolete ecb(arc4) skcipher [ 547.221916][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3960'. [ 547.693067][T20609] netlink: 'syz.0.3965': attribute type 1 has an invalid length. [ 547.721058][T20609] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3965'. [ 547.955464][T20615] netlink: 'syz.3.3964': attribute type 1 has an invalid length. [ 548.013933][T20625] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 548.020886][T20620] vlan2: entered promiscuous mode [ 548.041389][T20620] bridge0: entered promiscuous mode [ 548.363380][T20630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.546355][T20644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3974'. [ 548.572548][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3974'. [ 548.714984][T20655] openvswitch: netlink: Message has 4096 unknown bytes. [ 549.336584][T20673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.366982][T20669] tipc: Enabled bearer , priority 14 [ 549.374818][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3987'. [ 549.386643][T20670] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 549.420118][ T6214] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.733471][ T57] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.782922][ T57] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.812827][ T57] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.838744][ T57] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.132036][T20721] netlink: 'syz.6.3995': attribute type 11 has an invalid length. [ 550.501951][ T5785] tipc: Node number set to 2544025941 [ 550.553170][T20732] syzkaller0: entered promiscuous mode [ 550.580782][T20732] syzkaller0: entered allmulticast mode [ 551.052146][T20761] x_tables: duplicate underflow at hook 1 [ 551.330454][T20784] __nla_validate_parse: 1 callbacks suppressed [ 551.330491][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4013'. [ 551.570371][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4017'. [ 551.884638][T20808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4018'. [ 552.186741][T20820] syzkaller0: entered promiscuous mode [ 552.201439][T20820] syzkaller0: entered allmulticast mode [ 552.227744][T20828] openvswitch: netlink: EtherType 50a is less than min 600 [ 552.343813][T20820] tipc: Enabled bearer , priority 0 [ 552.401237][T20818] tipc: Resetting bearer [ 552.467210][T20818] tipc: Disabling bearer [ 552.630148][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4026'. [ 553.205298][T20871] SET target dimension over the limit! [ 553.286445][T20873] syzkaller0: entered promiscuous mode [ 553.311177][T20873] syzkaller0: entered allmulticast mode [ 553.477364][T20873] tipc: Enabled bearer , priority 0 [ 553.495303][T20886] netlink: 'syz.5.4041': attribute type 1 has an invalid length. [ 553.581898][T20889] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4041'. [ 553.594536][T20886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.610515][T20872] tipc: Resetting bearer [ 553.638435][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 553.667165][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4042'. [ 553.702222][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4042'. [ 553.712272][T20895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4043'. [ 553.732742][T20892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.750892][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4041'. [ 553.796845][T20899] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4044'. [ 553.833026][T20872] tipc: Disabling bearer [ 554.803838][T20950] GUP no longer grows the stack in syz.6.4060 (20950): 200000002000-20000000a000 (200000001000) [ 554.815987][T20949] syzkaller0: entered promiscuous mode [ 554.823169][T20949] syzkaller0: entered allmulticast mode [ 554.833674][T20950] CPU: 0 UID: 0 PID: 20950 Comm: syz.6.4060 Not tainted syzkaller #0 PREEMPT(full) [ 554.833706][T20950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 554.833729][T20950] Call Trace: [ 554.833741][T20950] [ 554.833753][T20950] dump_stack_lvl+0xe8/0x150 [ 554.833786][T20950] __get_user_pages+0x2378/0x2720 [ 554.833818][T20950] ? __gup_longterm_locked+0xc4e/0x1630 [ 554.833865][T20950] ? __gup_longterm_locked+0xc4e/0x1630 [ 554.833891][T20950] ? down_read_killable+0x1bb/0x340 [ 554.833923][T20950] __gup_longterm_locked+0xdcf/0x1630 [ 554.833965][T20950] ? sanity_check_pinned_pages+0x7af/0x870 [ 554.834001][T20950] gup_fast_fallback+0x1d84/0x20d0 [ 554.834032][T20950] ? kernel_text_address+0xa5/0xe0 [ 554.834070][T20950] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 554.834130][T20950] ? __pfx_gup_fast_fallback+0x10/0x10 [ 554.834164][T20950] ? pin_user_pages_fast+0x4d/0xb0 [ 554.834192][T20950] iov_iter_extract_pages+0x37b/0x5f0 [ 554.834241][T20950] extract_iter_to_sg+0xefb/0x25d0 [ 554.834290][T20950] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 554.834335][T20950] ? rcu_is_watching+0x15/0xb0 [ 554.834366][T20950] ? __asan_memset+0x22/0x50 [ 554.834397][T20950] af_alg_get_rsgl+0x4b6/0x8e0 [ 554.834448][T20950] skcipher_recvmsg+0x392/0x1140 [ 554.834505][T20950] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 554.834536][T20950] ? aa_sock_msg_perm+0xf1/0x1b0 [ 554.834577][T20950] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 554.834606][T20950] ? security_socket_recvmsg+0x7e/0x2c0 [ 554.834629][T20950] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 554.834662][T20950] sock_recvmsg+0x172/0x1b0 [ 554.834693][T20950] sock_read_iter+0x251/0x320 [ 554.834720][T20950] ? __pfx_sock_read_iter+0x10/0x10 [ 554.834757][T20950] ? bpf_lsm_file_permission+0x9/0x20 [ 554.834789][T20950] ? security_file_permission+0x75/0x260 [ 554.834823][T20950] vfs_read+0x582/0xa70 [ 554.834865][T20950] ? __pfx_vfs_read+0x10/0x10 [ 554.834909][T20950] ? __fget_files+0x2a/0x420 [ 554.834947][T20950] ksys_read+0x150/0x270 [ 554.834981][T20950] ? __pfx_ksys_read+0x10/0x10 [ 554.835024][T20950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.835048][T20950] do_syscall_64+0x15f/0xf80 [ 554.835069][T20950] ? trace_irq_disable+0x3b/0x140 [ 554.835102][T20950] ? clear_bhb_loop+0x40/0x90 [ 554.835131][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.835153][T20950] RIP: 0033:0x7f4c9eb9ce59 [ 554.835187][T20950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.835206][T20950] RSP: 002b:00007f4c9f9a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.835231][T20950] RAX: ffffffffffffffda RBX: 00007f4c9ee15fa0 RCX: 00007f4c9eb9ce59 [ 554.835247][T20950] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 0000000000000007 [ 554.835261][T20950] RBP: 00007f4c9ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 554.835275][T20950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.835288][T20950] R13: 00007f4c9ee16038 R14: 00007f4c9ee15fa0 R15: 00007ffd222b8bb8 [ 554.835326][T20950] [ 555.244506][T20949] tipc: Enabled bearer , priority 0 [ 555.350844][T20945] tipc: Resetting bearer [ 555.374009][T20962] nft_compat: unsupported protocol 0 [ 555.408032][T20945] tipc: Disabling bearer [ 555.903930][T20991] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.936326][T20996] netlink: 'syz.4.4073': attribute type 7 has an invalid length. [ 555.947695][T20994] x_tables: duplicate underflow at hook 1 [ 556.010414][T20991] syzkaller0: entered promiscuous mode [ 556.051246][T20991] syzkaller0: entered allmulticast mode [ 556.177355][T20991] tipc: Enabled bearer , priority 0 [ 556.214500][T20987] tipc: Resetting bearer [ 556.291164][T20987] tipc: Disabling bearer [ 556.372747][T21010] __nla_validate_parse: 8 callbacks suppressed [ 556.372770][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4076'. [ 556.557044][T21008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.700115][T21004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.719195][T21004] bond2: (slave bond3): Enslaving as an active interface with an up link [ 556.834702][T21010] bond2 (unregistering): (slave bond3): Releasing backup interface [ 556.856839][T21010] bond2 (unregistering): Released all slaves [ 556.898920][T21016] syzkaller0: entered promiscuous mode [ 556.904865][T21016] syzkaller0: entered allmulticast mode [ 556.931966][T21013] tipc: Started in network mode [ 556.947232][T21013] tipc: Node identity 6662a2e7c5fc, cluster identity 4711 [ 556.968668][T21013] tipc: Enabled bearer , priority 0 [ 557.002008][T21011] tipc: Resetting bearer [ 557.109642][T21011] tipc: Disabling bearer [ 557.126563][T21035] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 557.236938][T21051] netlink: 'syz.3.4085': attribute type 21 has an invalid length. [ 557.255929][T21051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4085'. [ 557.542799][T21055] netlink: 'syz.0.4087': attribute type 10 has an invalid length. [ 557.597058][T21055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.640299][T21055] team0: Port device netdevsim1 added [ 557.714207][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4089'. [ 557.735379][T21060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4089'. [ 557.768237][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 557.804741][T21065] veth1_macvtap: left promiscuous mode [ 558.257425][T21085] syzkaller0: entered promiscuous mode [ 558.276019][T21085] syzkaller0: entered allmulticast mode [ 558.296232][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4097'. [ 558.420763][T21085] tipc: Enabled bearer , priority 0 [ 558.493103][T21083] tipc: Resetting bearer [ 558.581885][T21083] tipc: Disabling bearer [ 558.670387][T21101] netlink: 'syz.3.4102': attribute type 11 has an invalid length. [ 558.687252][T21100] netlink: 'syz.5.4103': attribute type 2 has an invalid length. [ 558.715114][T21101] netlink: 180760 bytes leftover after parsing attributes in process `syz.3.4102'. [ 558.726024][T21102] netlink: 'syz.3.4102': attribute type 11 has an invalid length. [ 558.746116][T21102] netlink: 180760 bytes leftover after parsing attributes in process `syz.3.4102'. [ 558.919340][T21110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4105'. [ 558.965641][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4105'. [ 559.279463][T21135] macvtap1: entered promiscuous mode [ 559.300715][T21135] macvtap1: entered allmulticast mode [ 559.306517][T21135] veth1_vlan: entered allmulticast mode [ 559.334207][T21133] macvtap2: entered promiscuous mode [ 559.340062][T21133] macvtap2: entered allmulticast mode [ 559.631390][T21152] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 559.650527][T21152] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 559.683378][T21152] tipc: Enabled bearer , priority 0 [ 559.734436][T13230] tipc: Resetting bearer [ 559.869649][T21162] netlink: 'syz.5.4119': attribute type 11 has an invalid length. [ 559.977047][T21164] netlink: 'syz.0.4120': attribute type 1 has an invalid length. [ 560.102936][T21175] netlink: 'syz.5.4123': attribute type 1 has an invalid length. [ 560.291499][T21179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.349143][T21179] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 560.410615][T21189] syzkaller0: entered promiscuous mode [ 560.416821][T21189] syzkaller0: entered allmulticast mode [ 560.426008][T21191] netlink: 'syz.0.4128': attribute type 1 has an invalid length. [ 560.483673][T21189] tipc: Enabled bearer , priority 0 [ 560.506101][T21188] tipc: Resetting bearer [ 560.586289][T21188] tipc: Disabling bearer [ 560.912879][T21213] sch_tbf: burst 12 is lower than device bridge2 mtu (1514) ! [ 561.007728][T21219] vlan2: entered allmulticast mode [ 561.014460][T21219] erspan0: entered allmulticast mode [ 561.028307][T21219] openvswitch: netlink: EtherType 50a is less than min 600 [ 561.314766][T21229] netlink: 'syz.6.4138': attribute type 11 has an invalid length. [ 561.693770][T21240] syzkaller0: entered promiscuous mode [ 561.718031][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.729601][T21240] syzkaller0: entered allmulticast mode [ 561.833934][T21245] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.925552][T21245] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 561.966051][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.973290][ T6229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.991009][T21247] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 561.998782][ T5785] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 562.012960][T21258] tipc: Enabled bearer , priority 0 [ 562.036073][T21238] tipc: Resetting bearer [ 562.126858][T21238] tipc: Disabling bearer [ 562.192031][T21260] nftables ruleset with unbound set [ 562.710418][T21281] __nla_validate_parse: 12 callbacks suppressed [ 562.710441][T21281] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4157'. [ 562.826738][T21281] h: entered promiscuous mode [ 563.008580][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.038232][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4158'. [ 563.137553][T21299] netlink: 'syz.0.4161': attribute type 1 has an invalid length. [ 563.199885][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4158'. [ 563.406969][T21302] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.447148][T21302] bond4: (slave bond5): making interface the new active one [ 563.477047][T21302] bond4: (slave bond5): Enslaving as an active interface with an up link [ 563.532378][T21310] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4163'. [ 563.548631][T21305] tipc: Enabling of bearer rejected, already enabled [ 563.754831][T21328] netlink: 'syz.0.4167': attribute type 4 has an invalid length. [ 564.324666][T21352] openvswitch: netlink: Duplicate or invalid key (type 0). [ 564.342247][T21352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.377299][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4174'. [ 564.418175][T21357] xt_nfacct: accounting object `syz1' does not exist [ 564.484805][T21357] xt_hashlimit: max too large, truncated to 1048576 [ 564.762880][T21373] nbd: must specify an index to disconnect [ 564.769369][T21374] openvswitch: netlink: Unknown key attributes 2 [ 565.383415][T21400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4192'. [ 565.405930][T21398] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4191'. [ 565.475553][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4193'. [ 565.506743][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4193'. [ 565.543816][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'. [ 565.636975][T21410] bond3: option xmit_hash_policy: invalid value (64) [ 565.676917][T21418] sctp: [Deprecated]: syz.6.4192 (pid 21418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.676917][T21418] Use struct sctp_sack_info instead [ 565.707073][T21410] bond3 (unregistering): Released all slaves [ 565.723601][T21408] nbd: device at index 64 is going down [ 565.969330][T21426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.121492][T19427] udevd[19427]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 567.868669][T21509] netlink: 'syz.5.4219': attribute type 23 has an invalid length. [ 567.881788][T21506] syzkaller1: entered promiscuous mode [ 567.902125][T21506] syzkaller1: entered allmulticast mode [ 569.108407][T21552] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 569.135162][T21555] __nla_validate_parse: 4 callbacks suppressed [ 569.135184][T21555] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4230'. [ 569.331864][T21556] sctp: [Deprecated]: syz.0.4231 (pid 21556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.331864][T21556] Use struct sctp_sack_info instead [ 569.585167][T21565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4235'. [ 569.601515][T21556] syzkaller0: entered promiscuous mode [ 569.618092][T21556] syzkaller0: entered allmulticast mode [ 569.659079][T21565] ipvlan2: entered allmulticast mode [ 569.678071][T21565] syz_tun: entered allmulticast mode [ 569.997416][T21581] netlink: 'syz.3.4238': attribute type 1 has an invalid length. [ 570.021027][T21582] netlink: 'syz.3.4238': attribute type 1 has an invalid length. [ 570.244055][T21572] bond2: option fail_over_mac: invalid value (16) [ 570.255007][T21572] bond2 (unregistering): Released all slaves [ 570.384646][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4241'. [ 570.809938][T21607] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.577794][T21589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4241'. [ 574.895014][T21625] : entered promiscuous mode [ 574.906321][T21637] netlink: 'syz.0.4250': attribute type 3 has an invalid length. [ 575.316252][T21663] syzkaller0: entered promiscuous mode [ 575.328273][T19968] Bluetooth: hci1: command 0x0405 tx timeout [ 575.341169][T21663] syzkaller0: entered allmulticast mode [ 575.360596][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4258'. [ 575.393479][T21664] netlink: 'syz.0.4258': attribute type 1 has an invalid length. [ 575.438553][T21664] netlink: 'syz.0.4258': attribute type 2 has an invalid length. [ 577.882339][T21639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.112869][T21677] netlink: 'syz.6.4260': attribute type 1 has an invalid length. [ 578.152192][T21680] netlink: 'syz.4.4261': attribute type 1 has an invalid length. [ 578.365053][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.505485][T21691] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 578.533455][T21691] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 578.669895][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4266'. [ 578.699052][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4266'. [ 578.791757][T21695] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 579.353286][T21734] syzkaller0: entered promiscuous mode [ 579.368516][T21734] syzkaller0: entered allmulticast mode [ 579.492352][T21734] tipc: Enabled bearer , priority 0 [ 579.515068][T21733] tipc: Resetting bearer [ 579.594628][T21733] tipc: Disabling bearer [ 579.734982][T21746] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4275'. [ 579.846056][T21752] netlink: 'syz.5.4277': attribute type 1 has an invalid length. [ 579.872755][T21752] netlink: 'syz.5.4277': attribute type 2 has an invalid length. [ 579.896006][T21752] netlink: 'syz.5.4277': attribute type 1 has an invalid length. [ 579.949624][T21751] syzkaller0: entered promiscuous mode [ 579.973545][T21751] syzkaller0: entered allmulticast mode [ 580.027321][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4281'. [ 580.064067][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4281'. [ 580.194399][T21772] IPv6: addrconf: prefix option has invalid lifetime [ 580.201417][T21772] IPv6: addrconf: prefix option has invalid lifetime [ 580.469222][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4284'. [ 580.504378][T21790] veth3: entered allmulticast mode [ 580.513186][T21790] netlink: 'syz.0.4286': attribute type 4 has an invalid length. [ 580.805691][T21798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'. [ 580.817023][T21796] netlink: 'syz.3.4287': attribute type 64 has an invalid length. [ 580.900632][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'. [ 580.957782][T21801] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 581.683692][T21837] netlink: 'syz.0.4298': attribute type 18 has an invalid length. [ 581.713556][T13230] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.724582][T13230] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.735748][T13230] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.745638][T13230] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.814802][T21838] netlink: 'syz.0.4298': attribute type 6 has an invalid length. [ 582.763491][T21751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.007375][T21846] netlink: 'syz.3.4301': attribute type 2 has an invalid length. [ 583.030833][T21846] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4301'. [ 583.137084][T21856] syzkaller0: entered promiscuous mode [ 583.160078][T21856] syzkaller0: entered allmulticast mode [ 583.220663][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4305'. [ 583.233060][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4305'. [ 583.265611][T21859] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4304'. [ 583.285402][T21859] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20002 [ 583.307612][T21864] netlink: 'syz.3.4306': attribute type 49 has an invalid length. [ 583.554549][T21864] ip6gretap0: entered promiscuous mode [ 583.569268][T21864] ip6gretap0: entered allmulticast mode [ 583.626960][T21868] vet: renamed from veth0_vlan (while UP) [ 584.006748][T21886] sctp: Trying to GSO but underlying device doesn't support it. [ 584.505694][T21916] netlink: 'syz.0.4318': attribute type 10 has an invalid length. [ 584.951355][T21937] __nla_validate_parse: 5 callbacks suppressed [ 584.951376][T21937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4321'. [ 586.110449][T21990] netlink: 'syz.5.4332': attribute type 1 has an invalid length. [ 586.304552][T21990] bond2: entered promiscuous mode [ 586.312356][T21990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.386179][T22005] bond2: (slave bridge1): making interface the new active one [ 586.399026][T22005] bridge1: entered promiscuous mode [ 586.432710][T22005] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 586.722204][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4338'. [ 587.311930][T22042] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4344'. [ 587.548944][T22054] gretap1: entered promiscuous mode [ 587.576751][T22054] batman_adv: batadv0: Adding interface: gretap1 [ 587.600886][T22054] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.690426][T22054] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 588.244608][T22084] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4350'. [ 588.266400][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4350'. [ 588.570350][T22091] syzkaller0: entered promiscuous mode [ 588.609171][T22091] syzkaller0: entered allmulticast mode [ 588.814517][T22112] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003 [ 589.160352][T22122] netlink: 'syz.5.4359': attribute type 1 has an invalid length. [ 589.172327][T22122] netlink: 'syz.5.4359': attribute type 2 has an invalid length. [ 590.679990][ T5626] Bluetooth: hci6: command 0x0406 tx timeout [ 592.232093][T22104] netlink: 'syz.3.4355': attribute type 29 has an invalid length. [ 592.240332][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4355'. [ 592.250182][T22109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4357'. [ 592.362733][T22126] tipc: Enabling of bearer rejected, failed to enable media [ 592.464202][T22148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4363'. [ 592.671898][T22157] netlink: 'syz.6.4365': attribute type 9 has an invalid length. [ 592.868646][T22167] Cannot find add_set index 4 as target [ 593.156180][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4373'. [ 593.375860][T22198] pim6reg: entered allmulticast mode [ 593.511775][T22198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4377'. [ 593.584775][T22205] siw: device registration error -23 [ 593.606521][T22193] syzkaller0: entered promiscuous mode [ 593.625224][T22193] syzkaller0: entered allmulticast mode [ 593.686927][T22187] tipc: Enabled bearer , priority 0 [ 593.701234][T22207] netlink: 'syz.4.4378': attribute type 1 has an invalid length. [ 593.721902][T22186] tipc: Resetting bearer [ 593.823790][T22186] tipc: Disabling bearer [ 593.905954][T22221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4382'. [ 593.939773][T22220] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4380'. [ 593.949427][T22220] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4380'. [ 593.965897][T22221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4382'. [ 593.990155][T22182] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 594.014028][T22182] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 594.092646][T22182] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 594.132080][T22182] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 594.215774][T22182] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 594.223523][T22182] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 594.349511][T22182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 594.383704][T22182] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 594.452279][T22182] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 594.479511][T22182] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 594.540698][T22241] netlink: 'syz.5.4389': attribute type 1 has an invalid length. [ 594.548814][T22241] netlink: 'syz.5.4389': attribute type 1 has an invalid length. [ 594.556774][T22241] netlink: 'syz.5.4389': attribute type 1 has an invalid length. [ 594.565177][T22241] netlink: 'syz.5.4389': attribute type 2 has an invalid length. [ 594.575375][T22241] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4389'. [ 594.621230][T22182] tipc: Resetting bearer [ 594.705794][T22182] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 594.729496][T22182] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 594.811891][T22250] sctp: [Deprecated]: syz.6.4392 (pid 22250) Use of int in maxseg socket option. [ 594.811891][T22250] Use struct sctp_assoc_value instead [ 595.019971][T22254] bond3: option min_links: invalid value (18446744073709551614) [ 595.027701][T22254] bond3: option min_links: allowed values 0 - 2147483647 [ 595.038770][T22254] bond3 (unregistering): Released all slaves [ 595.082139][T22259] sctp: [Deprecated]: syz.6.4394 (pid 22259) Use of int in max_burst socket option deprecated. [ 595.082139][T22259] Use struct sctp_assoc_value instead [ 595.098202][T22256] sctp: [Deprecated]: syz.6.4394 (pid 22256) Use of int in max_burst socket option deprecated. [ 595.098202][T22256] Use struct sctp_assoc_value instead [ 595.215775][T22252] tipc: Enabling of bearer rejected, already enabled [ 595.609722][T22274] bridge2: port 1(vlan3) entered blocking state [ 595.645020][T22274] bridge2: port 1(vlan3) entered disabled state [ 595.679064][T22274] vlan3: entered allmulticast mode [ 595.708273][T22274] bridge2: entered allmulticast mode [ 595.742521][T22274] vlan3: left allmulticast mode [ 595.747495][T22274] bridge2: left allmulticast mode [ 596.723824][T22319] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 597.050768][T22336] netlink: 'syz.6.4418': attribute type 1 has an invalid length. [ 597.224322][T22340] netlink: 'syz.5.4419': attribute type 12 has an invalid length. [ 597.306788][T22349] __nla_validate_parse: 7 callbacks suppressed [ 597.306810][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 597.351594][T22342] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 597.364539][T22342] bond6 (unregistering): Released all slaves [ 597.536478][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4422'. [ 597.580634][T22356] openvswitch: netlink: Unknown nsh attribute 0 [ 597.663807][T22349] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 597.729714][T22349] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 597.769656][T22349] gretap2: entered promiscuous mode [ 597.781585][T22349] gretap2: entered allmulticast mode [ 597.860689][T22370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4426'. [ 597.868648][T22351] vlan3: entered promiscuous mode [ 597.876006][T22351] hsr0: entered promiscuous mode [ 597.884979][T22351] vlan3: entered allmulticast mode [ 597.906536][T22351] hsr0: entered allmulticast mode [ 597.930836][T22351] hsr_slave_0: entered allmulticast mode [ 597.939168][T22351] hsr_slave_1: entered allmulticast mode [ 598.884833][T22418] netlink: 'syz.5.4439': attribute type 2 has an invalid length. [ 599.072877][T22426] netlink: 'syz.4.4441': attribute type 9 has an invalid length. [ 599.159901][T22432] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4443'. [ 604.175592][T22448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4447'. [ 604.315698][T22448] ipvlan2: entered promiscuous mode [ 604.326151][T22462] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4448'. [ 604.516667][T22473] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4451'. [ 604.576346][T22459] syzkaller0: entered promiscuous mode [ 604.645797][T22459] syzkaller0: entered allmulticast mode [ 604.648611][T22483] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4453'. [ 604.739784][T22471] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 604.771038][T22471] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 605.610652][T22516] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4459'. [ 605.623928][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4459'. [ 605.814432][T22519] netlink: 'syz.6.4459': attribute type 1 has an invalid length. [ 608.872703][T22516] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 608.878733][T22519] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 609.111175][T22529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 609.193211][T22532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4460'. [ 609.212111][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 610.044351][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4471'. [ 610.065738][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4471'. [ 610.486779][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4476'. [ 610.684220][T22539] bond3: (slave gre0): Device is not bonding slave [ 610.719858][T22539] bond3: option active_slave: invalid value (gre0) [ 610.772242][T22539] bond3 (unregistering): Released all slaves [ 610.985393][T22610] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 610.998756][ T31] INFO: task syz.2.3488:18859 blocked for more than 143 seconds. [ 611.028658][ T31] Not tainted syzkaller #0 [ 611.041056][T22610] bond0: (slave lo): Error: Device can not be enslaved while up [ 611.042641][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.074525][ T31] task:syz.2.3488 state:D stack:26248 pid:18859 tgid:18858 ppid:16844 task_flags:0x400140 flags:0x00080002 [ 611.104970][T22597] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 611.119425][ T31] Call Trace: [ 611.132294][ T31] [ 611.147507][ T31] __schedule+0x1821/0x5740 [ 611.165194][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 611.182122][ T31] ? __pfx___schedule+0x10/0x10 [ 611.192278][ T31] ? schedule+0x90/0x360 [ 611.202447][ T31] schedule+0x164/0x360 [ 611.215989][ T31] schedule_preempt_disabled+0x13/0x30 [ 611.230911][ T31] __mutex_lock+0x7f7/0x1550 [ 611.251619][ T31] ? __mutex_lock+0x608/0x1550 [ 611.271449][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 611.288305][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 611.299258][ T31] ? __nlmsg_put+0xef/0x1b0 [ 611.308034][ T31] ? genlmsg_put+0x137/0x2e0 [ 611.317879][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 611.349663][ T31] ? __nla_parse+0x40/0x60 [ 611.367493][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 611.399447][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 611.424807][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 611.434354][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 611.442673][ T31] ? __asan_memcpy+0x40/0x70 [ 611.447371][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 611.459837][ T31] genl_rcv_msg+0x61c/0x7a0 [ 611.464459][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.469652][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 611.475810][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 611.482784][ T31] ? __asan_memcpy+0x40/0x70 [ 611.487517][ T31] ? __skb_clone+0x63/0x7a0 [ 611.492582][ T31] netlink_rcv_skb+0x232/0x4b0 [ 611.497514][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.502660][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.508156][ T31] ? down_read+0x270/0x2e0 [ 611.512647][ T31] ? genl_rcv+0xd/0x40 [ 611.516766][ T31] genl_rcv+0x28/0x40 [ 611.521405][ T31] netlink_unicast+0x75c/0x8e0 [ 611.526269][ T31] netlink_sendmsg+0x813/0xb40 [ 611.531291][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.536898][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 611.542023][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 611.547521][ T31] ____sys_sendmsg+0x972/0x9f0 [ 611.556847][ T31] ? __might_fault+0xaf/0x130 [ 611.580911][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.588192][ T31] ? import_iovec+0x73/0xa0 [ 611.592934][ T31] ___sys_sendmsg+0x2a5/0x360 [ 611.597702][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 611.602855][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.608703][ T31] ? futex_wake+0x4ac/0x580 [ 611.613486][ T31] ? __fget_files+0x2a/0x420 [ 611.618218][ T31] ? __fget_files+0x3a0/0x420 [ 611.623261][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 611.628405][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.634258][ T31] ? rcu_is_watching+0x15/0xb0 [ 611.641916][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 611.681961][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.691947][ T31] do_syscall_64+0x15f/0xf80 [ 611.696619][ T31] ? trace_irq_disable+0x3b/0x140 [ 611.702274][ T31] ? clear_bhb_loop+0x40/0x90 [ 611.707055][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.713138][ T31] RIP: 0033:0x7fa56f79ce59 [ 611.717848][ T31] RSP: 002b:00007fa570654028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.727404][ T31] RAX: ffffffffffffffda RBX: 00007fa56fa15fa0 RCX: 00007fa56f79ce59 [ 611.737143][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 611.745354][ T31] RBP: 00007fa56f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 611.753802][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.762390][ T31] R13: 00007fa56fa16038 R14: 00007fa56fa15fa0 R15: 00007ffe056bb138 [ 611.770741][ T31] [ 611.773983][ T31] [ 611.773983][ T31] Showing all locks held in the system: [ 611.785237][ T31] 1 lock held by khungtaskd/31: [ 611.797072][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 611.812398][ T31] 5 locks held by kworker/u8:6/141: [ 611.817710][ T31] 2 locks held by getty/5381: [ 611.860980][ T31] #0: ffff88803783f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 611.889053][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 611.912532][ T31] 2 locks held by syz.1.3152/17295: [ 611.918348][ T31] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.926658][ T31] #1: ffffffff8ec8b220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 611.937082][ T31] 2 locks held by syz.2.3488/18859: [ 611.942445][ T31] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.951186][ T31] #1: ffffffff8ec8b220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 611.961976][ T31] 2 locks held by syz.4.4476/22591: [ 611.967246][ T31] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 611.976393][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 611.987896][ T31] [ 611.994556][ T31] ============================================= [ 611.994556][ T31] [ 612.023277][ T31] NMI backtrace for cpu 0 [ 612.023308][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 612.023332][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.023345][ T31] Call Trace: [ 612.023353][ T31] [ 612.023364][ T31] dump_stack_lvl+0xe8/0x150 [ 612.023394][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 612.023421][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 612.023447][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 612.023477][ T31] sys_info+0x135/0x170 [ 612.023499][ T31] watchdog+0xfd3/0x1030 [ 612.023539][ T31] ? watchdog+0x1c9/0x1030 [ 612.023576][ T31] kthread+0x389/0x470 [ 612.023604][ T31] ? __pfx_watchdog+0x10/0x10 [ 612.023632][ T31] ? __pfx_kthread+0x10/0x10 [ 612.023662][ T31] ret_from_fork+0x514/0xb70 [ 612.023688][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 612.023711][ T31] ? __switch_to+0xc79/0x1410 [ 612.023745][ T31] ? __pfx_kthread+0x10/0x10 [ 612.023774][ T31] ret_from_fork_asm+0x1a/0x30 [ 612.023818][ T31] [ 612.023826][ T31] Sending NMI from CPU 0 to CPUs 1: [ 612.138324][ C1] NMI backtrace for cpu 1 [ 612.138344][ C1] CPU: 1 UID: 0 PID: 5776 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 612.138366][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.138378][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 612.138415][ C1] RIP: 0010:check_preemption_disabled+0x3/0xe0 [ 612.138438][ C1] Code: 28 8c 48 c7 c6 40 b6 28 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 53 65 8b 05 87 1f 90 07 65 8b 0d 7c 1f 90 07 f7 c1 ff ff ff [ 612.138455][ C1] RSP: 0018:ffffc90004f17420 EFLAGS: 00000202 [ 612.138470][ C1] RAX: 0000000000000001 RBX: ffffffff8230fd96 RCX: ffff888027bb9ec0 [ 612.138484][ C1] RDX: 00000000768ee0a5 RSI: ffffffff8c28b640 RDI: ffffffff8c28b600 [ 612.138498][ C1] RBP: dffffc0000000000 R08: ffffffff8176f256 R09: ffffffff8e95cca0 [ 612.138512][ C1] R10: ffffc90004f17578 R11: ffffffff81b0f020 R12: ffffc90004f17560 [ 612.138527][ C1] R13: 1ffff920009e2ea5 R14: ffffc90004f17528 R15: ffffffff8176f256 [ 612.138541][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 612.138557][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.138569][ C1] CR2: 00007ffca9e8cd98 CR3: 00000000788f6000 CR4: 00000000003526f0 [ 612.138586][ C1] Call Trace: [ 612.138593][ C1] [ 612.138602][ C1] ? unwind_next_frame+0xa6/0x2550 [ 612.138627][ C1] rcu_is_watching+0x15/0xb0 [ 612.138649][ C1] ? kasan_save_free_info+0x46/0x50 [ 612.138671][ C1] ? unwind_next_frame+0xa6/0x2550 [ 612.138692][ C1] unwind_next_frame+0xd5/0x2550 [ 612.138717][ C1] ? unwind_next_frame+0xa6/0x2550 [ 612.138740][ C1] ? kasan_save_track+0x3e/0x80 [ 612.138764][ C1] ? kasan_save_free_info+0x46/0x50 [ 612.138793][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.138823][ C1] arch_stack_walk+0x11b/0x150 [ 612.138849][ C1] ? kasan_save_free_info+0x46/0x50 [ 612.138873][ C1] stack_trace_save+0xa9/0x100 [ 612.138901][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 612.138933][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 612.138954][ C1] kasan_save_track+0x3e/0x80 [ 612.138977][ C1] ? kasan_save_track+0x3e/0x80 [ 612.139000][ C1] ? kasan_save_free_info+0x46/0x50 [ 612.139049][ C1] ? __asan_memset+0x22/0x50 [ 612.139072][ C1] kasan_save_free_info+0x46/0x50 [ 612.139092][ C1] __kasan_slab_free+0x5c/0x80 [ 612.139118][ C1] kfree+0x1c5/0x640 [ 612.139140][ C1] ? skb_release_data+0x828/0xa60 [ 612.139170][ C1] skb_release_data+0x828/0xa60 [ 612.139203][ C1] __kfree_skb+0x5d/0x210 [ 612.139229][ C1] nsim_dev_trap_report_work+0x7de/0xb90 [ 612.139268][ C1] ? process_scheduled_works+0xa70/0x1860 [ 612.139291][ C1] process_scheduled_works+0xb5d/0x1860 [ 612.139328][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.139351][ C1] ? assign_work+0x3d5/0x5e0 [ 612.139372][ C1] worker_thread+0xa53/0xfc0 [ 612.139408][ C1] kthread+0x389/0x470 [ 612.139431][ C1] ? __pfx_worker_thread+0x10/0x10 [ 612.139449][ C1] ? __pfx_kthread+0x10/0x10 [ 612.139473][ C1] ret_from_fork+0x514/0xb70 [ 612.139494][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 612.139513][ C1] ? __switch_to+0xc79/0x1410 [ 612.139542][ C1] ? __pfx_kthread+0x10/0x10 [ 612.139566][ C1] ret_from_fork_asm+0x1a/0x30 [ 612.139599][ C1] [ 612.517607][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 612.524648][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 612.533799][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.543896][ T31] Call Trace: [ 612.547219][ T31] [ 612.550277][ T31] vpanic+0x56c/0xa60 [ 612.554309][ T31] ? __pfx___schedule+0x10/0x10 [ 612.559216][ T31] ? __pfx_vpanic+0x10/0x10 [ 612.563762][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 612.569956][ T31] panic+0xc5/0xd0 [ 612.573708][ T31] ? __pfx_panic+0x10/0x10 [ 612.578160][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 612.583582][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 612.589777][ T31] watchdog+0x102c/0x1030 [ 612.594144][ T31] ? watchdog+0x1c9/0x1030 [ 612.598599][ T31] kthread+0x389/0x470 [ 612.602705][ T31] ? __pfx_watchdog+0x10/0x10 [ 612.607408][ T31] ? __pfx_kthread+0x10/0x10 [ 612.612038][ T31] ret_from_fork+0x514/0xb70 [ 612.616657][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 612.621879][ T31] ? __switch_to+0xc79/0x1410 [ 612.626588][ T31] ? __pfx_kthread+0x10/0x10 [ 612.631202][ T31] ret_from_fork_asm+0x1a/0x30 [ 612.636006][ T31] [ 612.639982][ T31] Kernel Offset: disabled [ 612.644509][ T31] Rebooting in 86400 seconds..