last executing test programs: 5.169219464s ago: executing program 0 (id=6772): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000b80)=0x1349cdec, 0x80000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe131}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001af4ae072e9da78e8dcea88c00000000000c4b20a0e29b00000071120e000000000095000000000000008a57f9cf6db46f693ee605316fd91cad8677813a19320800a8027862c983420fe44d6764d13cb5b4f2e911c7307bf942cb4ccdfd42c7884c9e2df8481e3f74715e96a82d9fec43c0444fb1824b49920700000029b7f5b7f01664150ceb10a50ce0aa8ab38dd62f077473171749ebd665f6a2895fb96939"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4.80667486s ago: executing program 0 (id=6782): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfd, 0x1}, 0xe) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000040), 0x12) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x6, 0x11, 0x0, 0x1, [@generic='\x00\x00']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) close(r2) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}}}, &(0x7f0000000280)=0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000f287a0060f06080045"], 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x25, 0x1, 0x7fff6, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) 4.15809677s ago: executing program 2 (id=6788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd2}, 0xb6) 4.157241916s ago: executing program 4 (id=6790): r0 = socket(0x9, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) 4.153803881s ago: executing program 2 (id=6791): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000b00)=[{}], 0x8, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000b00)=[{}], 0x8, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) sendmsg$kcm(r1, &(0x7f0000003400)={&(0x7f0000000d40)=@ll={0x11, 0x1, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="7e95d70f7b0623a968d433ac83a8fd957493e9938f3e51634cc5aa4caa10d4a8669d9daa1e161c4e7a13bb95b2ef216685ed2eaa200b9ab2e00a069a8c96700de564eda754f1d4d96ea4e529d59d291f0f54a5e0e9163b814ef1dc52a537255c8f933e00f8a49dd96861ef7d426855b0b15a9fc2ec2eb8974155383de6037715dff802ae58cb438a685df5e6ad488577dad51c9be1d977bffffcd28947085348b6ce5a96de03525798470bf3d8f2e6952a", 0xb1}, {&(0x7f0000000e80)="a18ab8c669ea38009ef808bcdbfb5e9d9e042343ae174f04d3618c25c9b5521061", 0x21}], 0x2, &(0x7f0000001300)=[{0xb8, 0x10f, 0x5, "53f5e7ec66a0c2cca621837d65845819581e761082cae1f235dc847ba9949ed2dfe0b936a9966409f222600f5554eef827dd7bfeb6e7bca2b15fe13e38b16b0d4659220c465a94844cf73dfb6be0a167147f25685e96b51336b95bf6850d59d6f99fcfd54fb3ca1e086621088df5b41bb9915a17fa6ecbd3f1f7f4c028ff903c446130aee19180ce06f96251220f020b8731917d0db0c6bc737c905f1e6825f5a24d127226031fee"}, {0x1010, 0xff, 0xad, "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"}, {0x1010, 0x1, 0x5, "8f784c6359c5af445c324ccca8ed1f86d2dbccc72df837eb0a4acbf751bbb676a8f69eea384ec99defb8889db2cc45219b648f7a21b0c4274a801d33de8678600ac818c701984f81f51ad5093ea99f6bc6bd918700ef6febca07cdb84193c1b7064ae86969e64d8bc0fe5e0a053b73d74f2b4c1613e6dc5e006a29fb79dab40c432422553a9b86b640f57762f80c13bbb74bac7b5b666436667055237bbeb441471056391696b42d47b01b9683b336010e49e35babdbe7081124738191a70601911798af20bd4b4c17e269a5855025488e60a51f00940fd934551f55d4b3f3bb68edd45dd189921aad4c2e5a2e14555c69d1b25a4e9b865da357fd00928ce380beedd0cc92e65e03c3972f28bdeecb41a1bf985930a9b8299b2e7d7fb38f11f2766c10f5a470e1117208c330f406f8e3e4a448bca8fd9760215525d2ef78220ad1d3d90d376cdf772271c2725982d187f2c52667f09b6acafa5ee7fbab23c26dfb4fec3ad06d8ed9c4beba7e495b4685ea38a0e22fa25a14fec6783e068a00c2201d38b160f65a4a09ba7c2ab40c0b72c1d2f406e686f608e9e451c759ff2c8621bbfba7c91f629be597b36dc0913bfc448941ac97ade5081a66421b2d17f1fce84e26d3044080a6cb5f00598003d39118b82978578e24e9f8a1ca108cdbc908bed4fb76d75c6e1f223ceb14ec04f8beacf9f8bb438afefdcceea9bc62272d1586d5de82d8db66486e1b20c434722f50517b21bedceb7d27d36abd092a3077b2e2cbed412ea2dd3706e212c4527bb1f1fb6691c98f66dbce831dd8ea59afa9072d5038650b5288f842d7a92a1073b36b194946e3e659d18ceb11381e308df761ff3f287f2da0e0c6fc462b90e8caa99549c8171932085998248fb50b3affd1ef7b8822d830f83f49cd87642b0b4bac9c27af975961241da5ca27ed5ab02c6d163ad99af69e3508ec23bfed8f71f86bf243b342fb96380a2ca3b350f500814942472df2aa93e439a50778704856a0ee412734653ab9e19e8111f45b7a34340f16b63a0e6314dd4464de6f03c21ca09680536a5056dc3c92d590786067d2a0453fce03330e51f8b745aee7842d7098293c5f6931895dc0e3776ce29cb16c3b73c068e92b427c2737940a3c0f425a4f79061387ebeed63e7c128c2537e677453619dfd0c462532281891ab17707feae0b13d8dfaa870192af2b4f40d83bb7f4f37159ea15d8ca455c95231a39f50cfccf982097985929e5c97cf57ac5de20fabd1f015abebb891419cca1e7c0aa1232e3b693c344cbd6c758609ef25954a42e567d7001bdcec5419b40168d9946dd82b35fdb61418a9209ff024a0aba99b33466674130ed13692512ceeb5e329a504607337ae70f214dedf9386c7fb776d356630f5e5fe6c531142ba83c8d1f10863fa7d0e9ab41f4ea0ae52e492f375cc24826b73b4f1119753fd7786c44e520f80e9d89c910afcabc3700d1abf002b1446195118b863d35c9de66afd76d3b1db43fcc8c79916282d1a0103035d54c9b1e235838da0efdc24b445d9e4e773a24ea6f04e313d78c07ec51204e77c46dd92e2cc392e8b761836267db1e466f040caee64445ed7aa9f1c4476d30ffe124632684aeb2640ed9c7fb061dd05e083e1759d2ebb88692234e2264e29ce979d1195abb3a1006cb29501e5ec09b37471d6ac7579970c6b7e4a42897ce87514facc9d4d4e3b39e04e16f2a73d0fc48759ba3635cc9b02f5849201bc3bd365ea06a6d9a213582bb9dc03f1a8c36c6bfd1abc2c27ff38bbef5b947e94fb9f6cf29e8cf3df355e1aa83a2e02af2f708ed37bfa8552d3b6a6a7e4ba852806b7b2cbd39e6a24151e4b6bcbb43aef6dd074a1c39585233a2bc46f0c1f717686078a433e77052c45683c787f5765f1505eea03997693bb4a4aca22b65daffde1aee16aede0cc530afd3e647e6dd00a497ce35fbf2dd72576823fc1a41bf4345df4700e321714722a7ac2f18bd2519fcdc776c0e247fb3a08bc1394ffdaf057718a9f596eeb55d90ebcb894bf57670a3eefd4d6181d0c766ce13f0b1522ae2cd890fdb1083d55ebbc8f25adc8fafe9842df2a28b45b9c5a46d044a375d0a55f4efc6760e54bb9d217ccb0aed14d33435905f1d1e4b7ca07dd7c9460069960772ecd5b918254ff119fc638c7cc47f89858fd0836870c552f1533142ec0d34e92af54113a8d172ddbc957d9a5791b4cd644e56d95e57892daa74ccccc6dd0830a82e4a8701920cafb642011c2cb6f20b42109c06c3446eaff9953f2e087ce08045434f1ed7965ab2626be0fbb444db19d7568732fccfd71b62ba78e39611a215017542bf38ad363f0768f4aa394f0b9eaaf4b7b53c00d6b014ae203e919a8ec5292c124cb9a942a20cd865d0371248f4631667202fbad9256173ffa21553e2c790f165c2bb3aaffc8bf8b7cb5234b592beecd07fe01d32bca300b66d04cd54f756b42cd3c6ef6c3e7456d11224fe581072c44dceb426ad8d89d9035e2e3b363717d17ad9ef37a537da8ede946f5187f4c70d241dd683eca68a8ac31a7120ec16570ce11f3032459a35a4f235235b37a7ba263eb7ae4b34cfa66cc4d5e378ad778b9bacf743ccf1ab622d306a8c05f794666eed1b32c4558ba34101f7d5749f41c538e0c6ee93816205da40c2d0e8a7d3784d3187dd80ec88edccd55e465d975b855283446ce272186c4771349ed9c098f209bf5ff891006ae2c4afe56b306774fe2398ea9dad539b079775a83407faa4cb18cc4be422e5f647b97b90351211260e512d16ff3c7f0ad5345a4788f353865e5f2760b499ac0765aef5d10c1178fa7205edb4a151645463502fce2a29e650d3ce213af845a30cc93690200fd304d0291bbae3bd6a843e7954634e53a5acda25151fdb5ac0ff0c06ee7e8fe79a34557ed7e934a0ace2a86f7de49faa200a71434aaf6d65e9f8e90739ef29922db12c96809d4c0c69e9564c7177b2eab6ace208ebb8cb43c06c6f832c7331d3220d6a813c27064081b56e8806ce7dbc54fe24d095bc4836b4e572b5371d2cd005d2d2c8ba61d958505da81d6a662deffb2afbaadc2ce29bf50f1c8d38133712a70a68c63c90c1f20440b6ace3e0db9b5d3ca9849a295c2e0b5c4c3046c57e2514873fe81a36a4e23fd4476227b430d5102ce87d958429e6d657e2c44d18f1582b0854fca11e5f0eebd8b4705a582e2118b023ef29bb29b578027903848fc068b8ef107de51bdae43ae8afe52e06c73258c867e7913ce99e978fe6b279f779a1366d3dcc8bd7db150abd8a04bebad1c49c2df2414f57ca51d36885a825eae86cfe186026701e765cd1276d40d94c1328eb3e23f0e44e5173baf773304fd0a6ee20eec4b482c4a803e9f747fd61c0e3835a17d578a559fe892d2840f84b213f9ea86b5531b2b5ec7b7c4f1b17a86c408807ac8cf906710f258d200415e2404aa59d73b69657d470ae8da17249bea29f3d0a3c71d7b457c3864790e4f7aedbb5503b9e01e1656118efb06e622771099667cce7ff8d19a21425cfc7c2143785fb8d6c6bb13b00daf00c58efc4293582b7cb19c4fa5dbc0117f00e55bb781f3fc45f898cae46881358d608130a11792cc3c7635dba284a31fffdca312f6861bf3cd9437ed6b914a73c261da1641b0cc07f6cf4bdcc9cf3ec8c74c2112239f990c7e33d979ff82e03f91cb627ccd6d8f31512534feb2f47aa16bcffdef0a3d0f95ce72cbc683faac80bbcf7f870c7939e244c9afb14d9d45d1f6902f5fe367cf1a87eb7af96ad61dafaaa6bd697bdddeacc60a81aafa0e11f1bd67365565506d1ff6e3933430c96527e790fe36c768d942b0152807ba14f2217301afc249ebdf075c24a74bdadffba98453cb618eac62c970a4e606f979ead97ccd4232399449dd99b399fafbaeef3fa648278e42d7b6575f7b868168e67e275e61c757dfc3c6c955ed5818a37ee7ef31c31c4029f58fada219c3211496fe5426433554451d6f752d74fa245d55fee143ed21293571d91954d052cfb6c3d3e8d127dff66b233fe18ab7449b96ebb53fa784d77817d9228b2df936087c8b358b9711f302b5065995cce0164ccd14a228f50a4afc41faa972cb4af93a3f97c9466a34cddaae9be0c3f5ab9d8c79fb1af7329268df9bdf04db644abaaf0e5042c2ccd13f17fbca8c657ca7809401fbe577cecfee0a52fa119faeaad5d24285be8c638708213bb4634834cf01634fd66f825002862fa865fa173cfda20ed6306fd43c66d7caf640c05ca3f75a491214d8a29131bf03acc068426e148c698b62bfd188784868ec76ec50a126b6efe6d62d79103878ebf3c9fdcaaa09a46593f8eb1043bac15bcb17a0e4a16bf9e1476aa87d4f3d2967cb55a6d5f1ebf4f2f5e777313e3069426cadc191e02b9b767fc462e4be60242299b35ebc9316f6fa6766fd34408ce08efa0bc56883b6b42a610dc0c2fc1842941a47d2961bf2bbb8d17024a1f5981d41825dfe7716f33864cb8a1b8ba8444b1f8b7a93e7934178575bb8b3e23363b49c7f34eb730f3dc4ba21fe9fd48e3f5dfc757b0bdd8ab1a643888cad4137ccbef847529fe0126a7159dcff066a4bd30e049a65a6a801e4704f0085b866128f527987678071f2b7f70cd4f3e00a8ae9c043a8d4ed865735a2544734168619d797245419d05f360158cd22e09a976276bf1fd1b5c99c75d92e6104e8f7a08abffac2d7c2c159ef51458f458f927f641f1c50082dd111998762f35b2244254a916f630c053340898bd6e091d5172d8965beac2a2305111d76acf46cedfbc14675b803f6508cb499fb3faa695f463ef76cdd0a8489b9778246d7c8c15f51f706317c97a189ccf01b1627091ec051789f26c152b36b77534779c2ff28af72fcb3884aa642bb5c2e9ee7ed1f4310f86b671adbdc65a1c0096c45363145677a26f671320302df10d8bda0fe73582ab5925b82b8f0f2f0d55b3b0ba4a0f1963570af09adaca08b399c539f60fa4a1b8ceb088b6efe488c42f4ccbd56f56d27b6acebba01bc1e353a6a3de7c9b4402cabd555f7e1fa2e65b98f0a0bd39b42d17cfe1e6aa7eac4350dfe5b774c7e47746b57a300ef9328c1ea0e5791502bbfa563dee64bea12a0d88a8518e3d0751833d4d56709951c236457a15515e5625351b6afa5d1de9b231683b647c46693ca9a670bf9cf61bbcde41b26be4e60d393546f99e9c8b8a822257e6ad38c282f2379dc91243f9937ed585fbeec00191cf096019fa8f8793e0084fd677ed2e032c39b84215cd7aad4699167ff4585d25486304538f847a9d5e83b1a43c0107fa73f062a764f39154c5ae5652ccb7969dfe38cccbb3a78c44b4ee167ec5e7360703b0d11ddb4ea2929274462cceddbf6bcb30e0dc04ebd17de33340f4222816778f40d0c44dc39b677372a02c51bd42b4240ed7dd39204e0295cce55cbe97b55b09a594bc8c12c7f32506aed0fd2dbc64d03ffea8de7058a670ab933dcb64eae351f9fbfeeb8a68f82e79e5ee1babb3817b92eb9eead0e2de92603c38da2bdd31852edf9192654e1a050eca2f98f76357b7cb23af1cbf482398e9f4e0a7803cda65325c3d3a90628c0d5f33707f2367f734167af27229392a53d2098e94ac2f0baf217b39b0567a4935105a61ade1bc75d10bf5cdaa714db9124e65601ea85204ba3cc6f3c95d5522e5f91a29c8aa7e930f6810d30a7cbd0b6c617e57032e27278a044f55bd20bcb87a6c644bf561162991fadf9c5560f906be4836301a4cafb49cdab7964db1a897d8ff33d6"}], 0x20d8}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f0000000f00)={0x3, 0xcaf4, 0x0, @empty, 'pimreg1\x00'}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000009c0)={{r6, &(0x7f0000000040)='$2\x00', 0x18000, &(0x7f00000000c0)={@align=0x2, {0x3, 0x7, 0x9, 0xb0df}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000001c0)}, 0x8, &(0x7f00000008c0)=[{0x2, 0x1, &(0x7f0000000200)='\x00', &(0x7f0000000240)="ae9d320836fa97400cf5e7f68bbd4d306256b586a18f0797f273cfe044d67507", 0x20}, {0x1, 0x8, &(0x7f0000000280)='-\\[!/@:@{\x00', &(0x7f00000002c0)="6e2267b3b22f55bd556f19286def3d2bddd76e9746fc5859bca8f5691fb1c0e6d427093bdb09a66122d9ad8ba0b45743570f8d9d404f1b6ca551a986223cc81ae1e2e42dd33b8e06a90d2a5fa52491612449aeb56c93d3063b2337bd9be2741c07c94207f772d4c1f964d49b4174c27a0c187f79073438d5e8a5c3b99a178b8a5193af9a72536696c7b3fc08e20992457a60ea3be584d639781a03988e14", 0x9e, 0x28}, {0x3, 0xfffffcb9, &(0x7f0000000380)='+\x00', &(0x7f0000000400)="dbc05a06f382d6925b4d522dd9a2ebed84f8802aaff4f628de860993b517a125ba6647fd86c4ea4c1f24ee9e88243183a332dca98031b6bedce5cfeb553ee29987e9", 0x42, 0xa}, {0x3, 0xfffffffa, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="52e1c827f033fb11b041e5d29e5e503a1573be2ec360a9634f4f6bcd74aac8d9ba0a0631a02a587e9018cb378b8492a9a28dc608177277ba78c0ff882246f2144cb89aa73ff4fd10d9393aea6736b9ed1bfb874eddf52013f62a2b0c752bdedbe8a9d0cceefa63f38db90a2b97b14e7922252662c775eaccd3", 0x79, 0x2}, {0x3, 0x2, &(0x7f0000000540)='/,}\x00', &(0x7f0000000580)="20ceff4c2659be93fb987d40ff79d4061919d1a287d36da1a6a0164ec82133539a1b2f4198e10ecd61b275735689cc597e0154af95f032d8a4e0173ca785508158df602a247e5712f09b9ab935860f2fd9276270e6603a4146369633abe9be78669e81009d816fabcb96f4c4fb7ab3f72e2a238bc810ffcd41a0630e49cfdaba66", 0x81, 0x2}, {0x0, 0xb, &(0x7f0000000640)='\x00', &(0x7f0000000680)="aebc4122b95900dbd137e37416f30d98dcc7c98727033439782283c76b5b9098832c9230f209b71445d571e7dd6626b7f8874c85cb8659d70e1581f6575f2716c28567211faefaaba65fd3e5d02c374a35e8ef4409a3b089857e77f23e4c505069c692b8e63de549e48f4817b353e06acdcd16da859065b21b068b52334df76ccbb41ec7d0ace18e22ea44a31fb03580cbf6964ca002b9889c46779293b3b6", 0x9f}, {0x0, 0x9, &(0x7f0000000740)='&*&:\x00', &(0x7f0000000780)="ba8fb3d698b26f8f7d08093137864cf1505a0bf90177e17a4a487a679923fec54395ebf2500c7024b44319173dfd60877cf785a7", 0x34, 0x28}, {0x1, 0x5, &(0x7f00000007c0)='}[/!:][${t\x00', &(0x7f0000000800)="f74a88ac9788c88d513c16246a538e32c4d01d6235a45da1a97262f8cf5a854d559c3efd144fce150a189e523b627b1f0e6113ab0a85e09abd4c07e52565316f3d21ffc4c37fafa984686a2b2b3913975fa6e1a1d8d69e9a73af64a25a8cf2f378a2fb7b32865df157a643d3599c3038ea4d5f4c781e00c4fe06a7ecb99b73bdc639ae7b20", 0x85, 0x20}]}) getsockopt$inet6_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f00000003c0)) (async) getsockopt$inet6_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f00000003c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="7989"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) socket(0x1e, 0xe, 0x664) (async) socket(0x1e, 0xe, 0x664) 4.148171024s ago: executing program 4 (id=6794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ffb7261d7098a0209ab4cfdc00", 'i}oz', "96083e3263ae7725"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) recvfrom(r1, 0x0, 0x0, 0x50, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r2, &(0x7f0000000800), 0x0}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0) 4.147126902s ago: executing program 3 (id=6795): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f3e}]}}}]}, 0x3c}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x4004) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r8, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44d0}, 0x400c0d0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r17) ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r18, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r19], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf250200000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100e9ea2fecc88d33be96a423fd272e8e14ebac791ac106001a1afb17ccfcffc7f2ec00"/51, @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 4.010807023s ago: executing program 1 (id=6796): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.984778185s ago: executing program 1 (id=6797): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0xe, @local, 0x80000001}, @in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1000}], 0x58) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000400500"/20, @ANYRES32, @ANYBLOB="b29c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000040000000700"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000b9f60018130000", @ANYRES32=r3, @ANYBLOB="000000000000000085000000260000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$netlink(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x533140, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r6, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 3.227306772s ago: executing program 4 (id=6798): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@alg={0x110, 0x10, 0x4, 0x70bd27, 0x25dfdbfd, {{'blake2s-128-generic\x00'}, '\x00', '\x00', 0x2000, 0x2200}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x4829}, {0x8, 0x1, 0x40}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0xfffffffe}]}, 0x110}, 0x1, 0x0, 0x0, 0x40020}, 0x8001) 778.102064ms ago: executing program 3 (id=6799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, 0x0, 0x850) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x602b2, 0x40c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) 774.991179ms ago: executing program 1 (id=6800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "bd3477bcd0fc636b", "0aad493bc513a8768e6917ea79c5de042217979390b1b9e729d17743f2dede96", "fdc4e7fa", "5a9ffb9342587272"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r6, 0x1, 0x0, 0x1000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x86dd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x4008890) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r10, r1, 0x0, r1}, 0x10) 767.901471ms ago: executing program 0 (id=6801): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000095975ce800000000000800006d3dd60011195f1a6a2f3895ae7ab5188cdfbd06dc2b0d00c81a14af7bf723a0f0b395122794a93ed3943f227c197031ae611d7874b4d2cb204209a9ab6ad4447da5c628003c7a655a57d1b13c65914ef703e4459ed3b71a9d9ad1ee9acfc1f5adbc36d7163a0c14cec79b35d5769a47897e97599622337e841dcf81ff2ffb89a3508caeda6da2f8098e0f48ab58015ce2304ad01be1dd02476c17f953880eb0d4aab2cc", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) sendto$unix(r2, &(0x7f0000000440)="ef54b5b07a148aa13d320bd6394b584870bfe6f2741bf1b06e4498979141f2bb34178ab965d47b91031c585b4e9c641706115643befcd47371ab1002c16ab5cf4763c83bcac381316c31dc4a5afa7341b03dde57edb093f6e12b090591a59f805e2656fa3a784c035aee185eccd2c55668993a3d36ad401b7573d1f2a887f21bd7ca56392d087a809d7f638164898ee0fa252cf049bc198f46ecb98ef50f9ed134f6da8154665fcac8a5b69ce426e108a225d366cb18403992ae49a05e57", 0xbe, 0x24040800, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa8, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44ecd6bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a9f1333}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a9067e5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd41d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12a8441f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f8b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000041) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000e000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000095975ce800000000000800006d3dd60011195f1a6a2f3895ae7ab5188cdfbd06dc2b0d00c81a14af7bf723a0f0b395122794a93ed3943f227c197031ae611d7874b4d2cb204209a9ab6ad4447da5c628003c7a655a57d1b13c65914ef703e4459ed3b71a9d9ad1ee9acfc1f5adbc36d7163a0c14cec79b35d5769a47897e97599622337e841dcf81ff2ffb89a3508caeda6da2f8098e0f48ab58015ce2304ad01be1dd02476c17f953880eb0d4aab2cc", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) (async) sendto$unix(r2, &(0x7f0000000440)="ef54b5b07a148aa13d320bd6394b584870bfe6f2741bf1b06e4498979141f2bb34178ab965d47b91031c585b4e9c641706115643befcd47371ab1002c16ab5cf4763c83bcac381316c31dc4a5afa7341b03dde57edb093f6e12b090591a59f805e2656fa3a784c035aee185eccd2c55668993a3d36ad401b7573d1f2a887f21bd7ca56392d087a809d7f638164898ee0fa252cf049bc198f46ecb98ef50f9ed134f6da8154665fcac8a5b69ce426e108a225d366cb18403992ae49a05e57", 0xbe, 0x24040800, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa8, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44ecd6bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a9f1333}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a9067e5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd41d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12a8441f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f8b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000041) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000e000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) 757.54868ms ago: executing program 4 (id=6802): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000001900)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x12c, 0x12, 0xa01, 0x0, 0x0, {0x9, 0x2}, [@nested={0x116, 0x3d, 0x0, 0x1, [@generic="1ff314c76b8c768cff55f8aee78d5e1e3ad77b20bcf6abd044ee694e699c8b04694f49267ca715d001ca2205314ad80c9fe4a58660397a55fa4594ba543d087dde4f605c9e4a824cbd958c7e6a412b2ab4419f0620b18931d4ce162e04ffb9cf0468e3b570271296f081a45f7a366e339c8794c7efb62418de322fa964d3d20959710a4390af5360243125789890fc9df6403b0a74b9a0f6684dfc3b867721833d0112b4d9005e2643492aa76b7c7ad39a81", @typed={0x8, 0x1b, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x2c, 0x15c, 0x0, 0x1, [@nested={0x4, 0xc6}, @typed={0x20, 0x91, 0x0, 0x0, @binary="d75c1fbd048981b82679056a2858d0e9bf9a932de88ec90b4bed7033"}, @nested={0x4, 0xaa}]}, @typed={0x8, 0x5b, 0x0, 0x0, @u32=0x10001}, @typed={0x8, 0x163, 0x0, 0x0, @ipv4=@empty}]}]}, 0x12c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x2}, {0x8000000000000000}, 0x0, 0x0, 0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)="71b77bcb", 0x4, 0x0, &(0x7f0000000600)={0x2, 0xb1, {0x1, 0xc, 0x8e, "239e32890e42aa7b1d69b446d6265d576b06189f90a6f458d062cb8f9037148cfbaaf450bebd058cd0a40df571b8c5c0b2d5c7fbebf3acb6f97225d8727d0c64af6ea8fc3d20b632c8906de2edfd215cae6157a6c846d4719f4c5a991b1795be39318be5d6f2989abd39cfc1c376f7fd64e3883c52aa6d414d008b6bd16e9ded44c0c4fe1e5e779a1c8f859325c9", 0x16, "dad1f94d609e1eb1d9c9e0410c7926581047d7e06305"}, 0xf5, "e2e3044f1f382da32180cb6547515a29309f02bd280cbd89b52670a802f51e394b764174a9e71f6cf8c3fb6bff2e157a7cf92abd964003a66d302450ce2d10ec7563617002249cae48e8e9f8dee8b91f31c3e1ed499ad89be5caaa02d8f32b867f34598bc0db5ce87fa543910444b0de18a4fe7c358d4a76359d35c1036479feb2416d0f203f8b74b02ccf6ce84ebaa28311e017692a58bc2800d2038162142ff4fb85dab172db32a8f8985068ba9b8acc497b100c791af3f4836aa7f43bce97769e0eb90e6f4e76e524cb7fcf631ce84e9a5b6c7a6f9220a7979609dea4eadeea9afe310410ecc1f47b45c7cf8f7db32ca5212cff"}, 0x1b2}) 690.74777ms ago: executing program 2 (id=6803): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\x00', 0x20080, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x1000]}, {0x1000, 0x2, 0x4, 0x10000}}, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x9}) openat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) 673.277239ms ago: executing program 3 (id=6804): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@allocspi={0x1d0, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {0x8}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, @algo_aead={0x8c, 0x12, {{'aegis256\x00'}, 0x200, 0xc0, "6232ea00cbd3c3e811c4ac7f53d71586bcd636e69c7c1dfb62fa5d2ebcdc589f9b010b359d6ea446d14b01c237db5bdf6ade5524d6379145bdb4175a528dbcf0"}}]}, 0x1d0}}, 0x0) 657.072606ms ago: executing program 1 (id=6805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_extract_tcp_res$synack(&(0x7f00000003c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3f08004600003000000000d906907800000000ac1414aa0702000000000000", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="6c8000019078ffff0303ae9c"], 0x0) r2 = socket(0x11, 0x4, 0x6) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a0, 0x1a, 0x300, 0x70bd2a, 0x25dfdbfd, {0x6}, [@nested={0x130, 0x4e, 0x0, 0x1, [@generic="55aa090a4121ff4a1d959fb36e8f5a789753f5fee80594b9c559628402c2d51d62748d83a9eb2d61770aee2d3f20fc03ff25ce673a9f5fd6b4d40c0477700328894d7c8f39414bdf42db9cb7f4a7cee8c6be38373a418c46c9d7903ec481ae358891901dcd5222bb64e65c76f1", @generic="5dfb3aceceaa430ef892038a8cc0c75caa00e8da48c694b64857286f4ae081b3224bb4df002c45fcc5170a", @nested={0x4, 0x72}, @nested={0x4, 0x55}, @typed={0x8b, 0x62, 0x0, 0x0, @binary="3a46b2451b1fdee37f036a7b398a92011a20b16afb64317b3a6626d8c66605888a9ef23409f13432058b40c9f985952f35218615c25e0516206d736626a43cc8109761ad075db13c8422f5203aecac9f22122880c2d81c2f40d0ad156d7af8df18d6e4f87357a900801e7e64a89248c01353ee9bd103e0774c2c85d79e97fd46259a5e52f8821c"}]}, @typed={0x8, 0x88, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x86, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x8b, 0x0, 0x0, @pid=r5}, @generic="f6d2a6d91ed80964225b1c4c0dc62613784ed667f3985531ec87d1080879e1580d81bc5bbdfb7d9f7b7e90c3616c5693078babd7ea9e646899b2", @typed={0x8, 0x74, 0x0, 0x0, @fd=r0}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x60}, 0x8004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000140), &(0x7f0000000280)=r10}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r12, &(0x7f00000000c0)={0x1d, r13}, 0x10) 590.20656ms ago: executing program 2 (id=6806): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140d, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000011) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000200)="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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, 0xc, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000001340), &(0x7f0000001380)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001700)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001440)={0x25c, r3, 0x101, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x911}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private0, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcae6}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8a}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8013}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4f7}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b4a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000001740)={0xffffff62, 0x6, 0xffff, 0x8}, 0x10) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000001780), &(0x7f00000017c0)=0x12, 0x0) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000001800)={0x7a, "f3278ad6c3a887b3ab3ee6a24b3197e47b8f339ccccf5f990e96bb3281839987ccfe9798a734e95c5c490365944843dfb8a17d99318d1f64f2ca585bf241f7f1c00ac978f9aa070fd173d757f6615be252907b0e6736b6632cb76490c8ab87c5b91da1a15fc8f6dd1aa6f43942c90815abeff68ebb8aa7b34dfa4faf26e352b2"}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000001900)={{r2}, 0x4, &(0x7f00000018c0)=[0xfffffffffffffff8, 0x0, 0x5, 0x100000001], 0x7, 0x6}) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000001980)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={0xffffffffffffffff, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000001b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0x8, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d40)={0x11, 0x0, 0x0}, &(0x7f0000001d80)=0x14) sendmsg$nl_route(r5, &(0x7f0000002040)={&(0x7f0000001a00), 0xc, &(0x7f0000002000)={&(0x7f0000001dc0)=@ipmr_newroute={0x228, 0x18, 0x800, 0x70bd2c, 0x25dfdbfd, {0x80, 0x80, 0x80, 0xa, 0xfd, 0x1, 0xfe, 0x4, 0x300}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}, @RTA_TABLE={0x8, 0xf, 0x7ec4}, @RTA_NH_ID={0x8, 0x1e, 0x41a}, @RTA_METRICS={0xca, 0x8, 0x0, 0x1, "cde404fd327b8b22f6834b16579ee7ed5b6a8df4f453ecec7d9182a9a728e4074628a81ad924260c43487be06d6ec620d647033f1d30466269466b4d21c116a3d4194c128142a41824a8185b62c627c3b57842366b300474b7e8d065cfffc7a0f74c53d2b4e4b08be52b8421800b8720689572c72a6baeaadb8831c9cfe8faf9780f9babc9a74eaf4f368978b839e4e1f39c0823084aec2c7004b6e420923b6a1f7fbf82bbed729d71e41f0744045809e9bde7a8daaaad001515a43a53c2c7a4ef1f707afb4f"}, @RTA_IIF={0x8, 0x3, r6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_METRICS={0x103, 0x8, 0x0, 0x1, "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"}, @RTA_TABLE={0x8, 0xf, 0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x228}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = openat$cgroup_freezer_state(r5, &(0x7f0000002080), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) r9 = accept4$inet(r5, &(0x7f00000020c0)={0x2, 0x0, @local}, &(0x7f0000002100)=0x10, 0x800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r2) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000021c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x24, r10, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x37}]}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x8041) sendto$packet(r5, &(0x7f00000022c0)="3244bd62ec0a42a863c421122733df2d2ad95d8a0c09303b654b44596130b904be16cd2826fbc998f160e0b33af834c99b15de6374a2ac3d87a266f55ca92a26ca3f5079f1c1c0a84627610cd554982238338058319bf434df5c8867eb79ff5f7daad91acea1bd235a275c734c9857c1d566e8a5c7a95cc34d95b7b3ed", 0x7d, 0x0, &(0x7f0000002340)={0x11, 0x9, r7, 0x1, 0x2, 0x6, @broadcast}, 0x14) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000023c0), r5) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000002480)={&(0x7f0000002380), 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, r12, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008880) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f00000024c0)={r7, 0x1, 0x6, @local}, 0x10) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000002640)={r5, &(0x7f0000002540)='freezer.state\x00', 0x2cc100, &(0x7f0000002580)={@_ha_fsid={[0x2ace, 0x8]}, {0x6, 0x9, 0x4}}, 0xc2, &(0x7f00000025c0), &(0x7f0000002600)=0x4}) 589.23172ms ago: executing program 4 (id=6807): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES64=r0], 0x48}}, 0x400400c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001240)={'ip6tnl0\x00', &(0x7f00000011c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x20, 0x80, 0x9, 0x8}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x14, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0xb, 0x5, 0x6, 0x1e, 0x10}], &(0x7f0000000100)='GPL\x00', 0xa, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x10, '\x00', r1, @fallback=0x6, r2, 0x8, &(0x7f0000001280)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x0, 0x5, 0xf}, 0x10, r4, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001340)=[{0x5, 0x3, 0x2, 0x2}, {0x4, 0x5, 0x1, 0x2}], 0x10, 0x5}, 0x94) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 571.39705ms ago: executing program 0 (id=6808): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000006c0)={r2, &(0x7f00000005c0)="e3e2ed5b38fba912203e8ab41e592aa04823ffa600b60cc112077bc4ee13e6e847517fcf6669a8238f478d67dfb67a4a341423f0cf2b6493f8ad30b3351c792466f0967833446ae7b6db666cac6b97016d1e4dda5d38d509c94a884ebd8f2085a3d0cafa37d247264d2069d95b4da3c5264ca584698a431c0b7e436d9e36b357168a9043d4abef306aa367654e3ef2d250db9df893ac8c1aa814550d77b77e98d71a6af9595aa21c3a2511695e5c474590cc369045c8ccc93adb294af510a527334578c0ebd13bd171322dac92c811046a3fc976fa07f0ea8d99c12e8359467a"}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x324, r3, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x101}, @NL80211_ATTR_FRAME_MATCH={0x57, 0x5b, "38bf3e535c6b782525b9db2137c345491bd18ba856791c77a1fde97585e3dabb17e77395016fa958294794b40d4619813ec6d737b85c315ac9332948dfb305d33eeb9034e8874b11aabc41e7abd1ea246cf671"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0xa2, 0x5b, "d9b57cb050f3e29aee8f35f9092b06ece4e1808e115eed0367a955f7a86596d3d4799833f3c110675688217b4ef785e8aec37937289549762a99dcacf1bd9b8a84390313e59eb23e3d4671f224a28f571e7cb280d85afbb4f35178ebf7bd0d75d6b87d8ff87ddf8956f4e3531086dd68f369fd69efbc11ab2ccc3dd4f80ca4f37485826822feb12aa0ba7f7d4407172a824b58b47d41b6cf0914d1cdd966"}, @NL80211_ATTR_FRAME_MATCH={0x71, 0x5b, "8aad18b048622e27e9f30fc59bacf1b1c42067f19b89c7aaf92b5d7361ad2e4a27db66c6bda873206e3e1490e7e2de66eedfae8f3c81e5c68d44796f39d58d213d2fc7fa57530e52fadc0c17929e129cf861f506fe485cc69ca915e53b2e1d88e9516e889e4f9b32d950bec07a"}, @NL80211_ATTR_FRAME_MATCH={0xf8, 0x5b, "4fb93b699332de34d0366d2f3d1e32e491d432a48cc9ef8ce4f43d52f381978737b3fc0d8b0692149167f230176edcec6001baddb058e0ed052dec9e5152d7710319da3e049eb0bd386c7389293857f3d2ce5d4ad24599d9479be821dbeb40c36f558d84281cdd5017441cb4f37a95e445f0a48c29a633dd1526a132153133021b6a6a317a8435f1a5c44479db0dc4bcbd0286c529b2ef18a59e70565189d72890a8baec23d251de8191bbf4d74b7f4e02811a629287cc80d3bf366d6dfad01cbc9b1f062a7b38949ce5752f92dadd6658e652912d69301a045aeadbc4b9a87b1a33169261af6554323c4b7a33d3bba63f21cfd3"}, @NL80211_ATTR_FRAME_MATCH={0x8a, 0x5b, "3817930ecc2c29a086c3313449fa17e9c2d4d5366100768e7f12a14b8f108f996996781dd138b7d0bfc3d875513b9d8fb07f399f5281aba3aa6d520cf22011fbb9bf0961918aa683004fc388627fc6baaa9cef4534725f924fd4482fa59ca119ec029b87255a5a7b2355f337dc6daec1341b159dfca719f87709d320a2c5ffdbbd54dc89c30b"}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xb}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r10, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x1e, 0xa01, 0x70bd2a, 0x0, {0x7}, [@generic="6eec498ba7"]}, 0x1c}}, 0x0) 551.5475ms ago: executing program 3 (id=6809): r0 = socket$netlink(0x10, 0x3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0xc1) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0xc1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4204e05}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3534}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x5000) socket$nl_crypto(0x10, 0x3, 0x15) (async) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@get={0x100, 0x13, 0x10, 0x70bd29, 0x25dfdbff, {{'cts-cbc-aes-ce\x00'}, '\x00', '\x00', 0x4400, 0x2000}, [{0x8, 0x1, 0x1ff}, {0x8, 0x1, 0xfffffffa}, {0x8, 0x1, 0xc}, {0x8, 0x1, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x200008c0) 410.41349ms ago: executing program 2 (id=6810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) (async, rerun: 32) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001031dbd700afadbdf250200"], 0x14}}, 0x0) socket$inet(0x2, 0x800, 0x6) (async, rerun: 32) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080001050600030080"], 0x22e) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000200000008001b000000000010001a800c002d80080001"], 0x38}}, 0x4000040) 409.286365ms ago: executing program 4 (id=6811): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20048018) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x800, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 406.122942ms ago: executing program 1 (id=6812): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x8}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 213.831542ms ago: executing program 3 (id=6813): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) (async) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000003100)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3fd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4880) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000240)={'team_slave_0\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)=ANY=[@ANYBLOB="399f7790", @ANYRES16=r3, @ANYBLOB="87002dbd700000000000a26d317d48ab2d1e0000000a0004007770616e3100000008"], 0x28}, 0x1, 0x0, 0x0, 0x404c8b5}, 0x24014) 145.82484ms ago: executing program 0 (id=6814): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$sock(r0, &(0x7f0000003200)=[{{&(0x7f0000001280)=@ieee802154={0x24, @short={0x2, 0x1, 0xfffc}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001300)="e2dd7c9594cb8341f5aae45545", 0xd}, {&(0x7f0000001340)="ffc69102", 0x4}], 0x2, &(0x7f00000013c0)=[@timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}}, {{&(0x7f0000001400)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001480)="5f8b494c1f2ec74258172195ae4b55c4ce971627fce952323c00efc37680b8913aa10138505bc788c3c9aaf9968712e2e59a09db288a1ab16526939719c147eadf8d4a603608e22aa7125a0c69b53be42530388e8b1d9348cc224a291077fd85114a13d39bffab3327ac7ea78d4cdfdbd3d841", 0x73}, {&(0x7f0000001500)="2ab3dc07aa4cb502168bb664635c59c4b0f5873f6e95ec88c3535fabec62a1c00c13ebdcd14c3d5911949d6ab51f868f8df40d873dbd8ca17dc2746cfab6a7187ed6448f000815c885961b413c354b209ac4c0410efdd1c1c59bf2032afda8e67697ce", 0x63}, {&(0x7f0000001580)="52df5e39314a5eae112ed7480e1ffe147cf39b07cf6f83f5", 0x18}, {&(0x7f00000015c0)="02b1e7df6a9fbdf95a6cfb4888ca4bbcc275feaebe8f126459e5798a04c3e18eb39090254d762c9f40f65ce9cfbee300bca326dd840ad245b54c209f44202ef883f4410ce8c8217cb223335bfd19d0336801ac721ab8d08f53c311b4cb09f2f85541bd142b7ca6f6ceec839d654e24021a7271702d56e531409bdb692b1dc1f630bda1e293009482f73d2cf97472e4087a1b3d4f8409348aa724367171b97af5cdd14a91b7a08f43e41e54ff86c99e62e5a49d78703bc3db0eeca4de", 0xbc}, {&(0x7f0000001880)="4d6f91abd901bf03a3f884c884bd24f5114aed702c7907422c7e85d237ff6ddb8330dfdcdc2e4ff2ff2f87885720a16b4bd8b4648a11aeddf004e68aa5b4ece70df1fe84eb5577cf65b2c27c458fc64700d18a6d08a569f10667f2929d3dba8bcaa7c4f229fefb31e5cad1a14dbd9712f89092b604c236da1c0a4dd839666553ae84fd99d1c1d94fa981ba4be7314665d7cff2b8f01c6b2a5d643336cd308d97b0b2b38e06c63a3743eede0c5dd3f9d135516d6252c377d16ac46503ab994fa0563f1a6135e6ad0f766be29d13ba87e54ab9f9679a791b12776791470722fe8c966da0aed46946501f69356e97a8799ba59de02c57fa6ddb73681556e28aa45de62f07efc788e73949ec58007879c17a58741b1053664e9fdf76d1c58fb4204ea9ee5298bce27b1ecde3e2e92f91c41dd00b6f4d71c8b613465eda74eaf9e0ae7f37b485b0c86bc0728e6e9ba92c4379dc1b793b4278f7f592d91fbc32eca7451e45608b761d6eef8721a92ec8e85d544f8be8d3effac0c0cdd7cefb9ff6a30eaac75714cf57a294144e55ab874b953d9cbda4fcad4db5755778f13e41830c026888b7d2238fda6484ca5f7cbf977b4a5926b0614c96d99e902968681121b58885c5e193afc9ef171260204fd3697c505cfa65f7e53fb9f3c4c38c82e134e97f683ffa064f629b97c59a9bed4420f332f5971a13c98d39d5a3e27aea3aa09b72f1e65bf557d3a063a960ebb2bc31afa77758a1771c1e6e1979e5c8c22b953bb7aa1515fea353fbd0961ca3ca39019829c9c42ba11cc51705c5f21a545ae80cb9eba15500051157f9f864b3d9fab497439424d42cf6ec8c46cf5f334d5d785090e86dc7523d017b9bed16a2a37a56e2b98f0cb58d047d5f9b6e0df4e12d35c3e1852e67c4013fedbff0545f261c4161efe65f2be2257e359399fad8fa607333a22e9a418f52241d1a2819f436cd07cb0dd3f3f6bf788c80e0cc765dfcb97a2246f11d18da5f48c8be6962cbb626a834ae19177ce656e6a40c215f395ab538bc2bd45a9337b9bf8e62747f0e73b3279ac04f5bf8ea23ba8df9fbf9d1681ed2b7a3e4a82620da03c47dc481efd8be3472d1c35e49adb8cfa50b270f64974c0cd106e692bad65eca2de5845c82dc7cb37a8571a37cb077be6672382864aaed388e2f966a73000a6215366ffb61b1fcd383b157cbceacfb72edcb610dbb96649f117d739b139bb5de25d532275fabc61ef2a805047d1ab98ba05a12bedc32579ba58ba8e2a471707f9c2d7e51f62372f25293ecf47cd98db752331ecbc9491ffdf0e0269ae5dcaa903fa72107958126a3ec0fbea8d583074919b0f447d62723754cea52347e6ddde67c080176a425e417ce72d2daf008d41f099595375e6aaccab6df75702b4c3ef87ab85a760bc0a64a7558e8795740846e34e5db66bd4ff7c02a0249062d1b7afd1f11c35b7591ff9a1c11c9950a72b7b3a255a62cea00fa73bcf896a5f2f977a7e6b76b485f3700c95d2e004c8aa01517bdf2a810de63116632e3c56ca9cc1313562c0dd315a8cbe06b83c6b17d3c8e4337b918eae59b5298457498b2c026809bd5962b4dbf78c7144689d614132fba23f79fbafbea8b4101d69cbd1b02216eb45c3777b5891634f0c46e50d383c0378785611f98a5500c7fab3d3541f582eae5b14a97d1a4c3fdb7408404fbc7dbc837d60e075455f3f97634d57c85fb138483e407c696eb507d052fdcf607c283eb3d81ea16f557d25aa8f853a0399ef148c1def9eaf55d7aab0db99d3ea05351cb738b13b232716b33d9eda4f22a09a964a2895cffd09d8a57c2cdfef640c6a6a8fbddeb8821582f0b22e10e2ee26f6abb7f710bb771e310a92f22d610138c48df1bb40717a5a3146fbcf432889483435fa47a3271b784928bab27823ebd56cc86a00c5125df3c347b8384502cedd1584053c0fc3a07c3a3cfc46909d3e16079f525a6fda68fe40b85981a2c1c90eb71f9e7097cfb3dd8663ebc8748403acb7ae0d526945fdb60774fc2205bd9c3d48e224cbdf55c8049a2248f30020904eef0f4d7b01358536709620f35b41f17977cb9ee0d093566001b12ec1e39d9faa0b49f25ddf7c6a3c843eb2390d7be9b783203876a003b0c19cac4ad3ce4481d132ca89bf4fcc4b33e7d779beee037237dfee10a1bad1b48b3970f20e9ab4dc8ad11f37d527da4d5f7c000a4ad203374aea38c2403df622d463c47da94b3e81eeb4489c414074316dc8fdb600e98463c60ca4059d40e7e23654a5fe514ddabdfd408b2948a55982e077b52b6ae70886cd9d0c9a5b1cfac9b703cce98944ee53660880be2a867292508be178bbc00afc5dad721dbdd124606c7e5d5e2c61b79a6310189b7d9b18cdaa1e9cd719f4cb4e906de8d3601336875842b57ba46e70c570062d15a06d6e0421b9b3a6a04c8b5ca2a6f8cca6edc6017cc2e1da9980bc8324751a0b18ec7051ff1411ce989dc54dc1c0e68fb5c54ac4fbafc34b092e1aa425bb0ba89e98a99e15d254970eb71263d9ffd115ae68cce69773c34b820f3dcfefe4635b8182202703cad0e43f5663148db3294d88519148f2675c62f81a327f5f79ae00e0f19d5b900a1e5402d35ed8710330568befefca190889d95fd4c399a8d2b3ecc6d8740ef8e99244d8a0707b48939ab3bf18a2536b95e3e20b4a4b14f1282cba7913af104cb7b5eafa7c33055a01b087ded60d90c35b1ed3961cd133b0eb9f3d5e2f4b7ea1b37a1c9144faffdea90a603e94b68116c2c95f4f3de0a0ab68d7e99882612a4a9ffafdb0a72d4ddaf40b5925740dea3e5eb60a374d8aa15431f9433c8156c452351c638d5b49cb4a44139a92d8a05dd8630fda431c9161f56fde38e90bc300cc709bf540b6ba47fd07efc777e460be38481b57973f475152e94d5c16d3ee03573d94c696c3f0b737bb83542c24e89028c4e9a2d7cce60d1fc7a5771cf4bbdddd3129857063f3ea028fb224b0f4a26ee83c44f2124765300b3b9cffa6583b23b1e07248b75346fb6986f35597a89d0f4879eb90df8d7cfb5c57cb7fdb8955f1cf7ba03eb40e7195ff29fa7cf87f36738411255f2638fe21c992ae01c843176b59b1111fbd2a80974054e13c8e361171d347a1cb6a7bf2f84059d25305882796f8dbfe343647c4be4db8033306935c282e078984429f0a93466ba225ef98065e661fd761da3239e84ed64fa72460e1b332af8338d544f5bcdb52df8125aba64a6c753a29df1e5b31dfde433e5c2f931b4371ec4063b17c2a4e2a2d9034e5e88267ebeecba4228bea084ba5e449dce56ac639182e475357252c51b69c30ac76e7b43a8372309d1aa7de06476b4c67b9b77d907c22a38b1829a50e2840bd5a82c8314cd353a934bb4f2fec413b58733ec297853bf447f51336efcce284e7c7cf90ca295e1ae73291faae759553c17cd258591bde9848f68dd11fad3aeb6e95cad67d9275283285017f2509f939e1b81d2073d38a60e470b43969f431b814f2450a6b659c7a6bdaf73b8bdb0d816ba7eb833ceccdf98e816cb5d66a727c46a5a3a8dfe3f273f075a46494f6e3710bfd28c9b974e37d8eab75eac3ee03add67fdf9366accc248dc044c465e5b31e15dc3cbd0d35c47957bfcf069aa7b7ebc0bd49ddbb3e7facf7910f571e4983431432c026e12df626092ec3e02bf19ee26590a1379fe2ac9589911e91793fec4964d10a5f4ac414d69ed20f0017ac4f30770f6876280995cce96dd3052194d5a0252e08bb005c947a92e0960e387d38680f367696003c4bd2b848ac5af273111ea9c067e865a3cc25e7cd4fb1b253fcb2487d4aaf8972a15f0c3ce08050c1c1fbe010f4b312c284877fa7b51cbab1f99f821cdbcf00e61c41b43b7c1dc06d59d950a1f18d7446f66c07d8c64393574ae91ab1a9bafedd1b8207f0276befd0d77afb8d1927ca053328bcfe977e0742f8bbc41368828aca94a0981f32c64fb51a81d3f7f1a2db187826a070c8852e3838c8963d733598fb6a0ac12c6e0cceaddace7f1ce577e534c2b24c022445c2c07f72eb1a912636b88fc068331712b67ba8b3435753d3e7232b81ea8f5df9e458b111f50b2b66c484ede3e4ea03deee6aea9b500a1aabf81459f98e5598113f5f350a861db070a6ff18389d2eda9e49ee518244e4914ccf185a93260f7dd8aca90f51cb20a81c22e9260cc2f2751db809cf492a0234c84005a554da1466958e89028f4662d9360fe6263dbc2ae6e4f90bfd4202c0ef63444cea6446d7726beaa2e231a11042bbb6d261dd9ea9d374c938ab0c65ed09f2d6dd75547895d137092acc3600b66396ca3f2d75adce6dbc77f07cea63d133ec66152b79214c58acca816d3f8418f25d187792e3f197bc44503bc9946081c0a01256f4e89c3dd24477312a216422b5b55be7b8b327f066c94ca6418b7013e45aab2a261e7bee2deaf0ca198f2322eaca80a357a9522f43b3df9766d6ee31c8389c890e45a3a3f0ae76a646ab58a9e7d5ea77b1419a8dbcb66ab292494d5634a19ead151167610f068fd8c0c722e62c313f7bbde43444a0e70888f27432c57ff2d037cfb4eec2029cba073a364882785cc1d5d28ec2ad29982a642937ad5f2dd9829450b91e42391f523163fc888956efaf902fa2ace32264defbc18c021908a86f82f849aade5b85c8c5fae389b08c9375782c719169163208db16ac57057976595eb6ad1d52db287e619fff074f9044d28256efb49d6a191a146acdd175a676a40ed3aabcb7eb5fab9b14d4461a3ccf8d3dd90ce8b399c2254ebc15be8d4a7fba9f0065a1bf6e7e0c4562059ee8a66f153fcabe3dbea46d901b5bfd7714d5c5e2f8d9f82a1aa471fc08500d0461675123f693df6211b0bf4c5164b5b83e11dd0aad2a0d43bec37f76ea258d53de8c7b5a2e7d8d547e83c572389c041e76ca13645afd9873824e854fc99af78f5e2c3487ce2bb4aee2a0e0f7a4929a40633e70611bdf50d45ace58e76f6ebf456ddfd4c8aadcfdd7f8e072fda3b3b8e129c62607fa2355b21abbdf0dee4d8cbcaa252b91959fcb4c2ffc139f980f14e5be78cca91add069607fea4bb1b5a6d0f204b795c8f8c72c80447d4246bb3a2cfe6b2e491bce6adc7270944cbfc560bde24215d4915dc6254802cb48846a78ac1501d039cf2925192b9fa92ece184ccdc121414aee814ae241f7bd66e792fd5d6d2c50c7440b8fc0a866b6eef0d4ad0167971ee3d85dccb8fd66ef4adb59cc08ec51189b828df200d346627f06672d8d87de37db4b36041fdba781025b86595a148292795804ce96b7259848f9bc7bf26f9414ac6bc044fb7c7461e2ca69089295786b8cd9603cf689f9127973e4feb44283928e8226d69de9101291b89a8ac157a0f7e71edcc445ee70f705bce7ad69f1d6af591b5ee579a5301c458006280522cad0553515a7e9d4ebcb61ad9ce57a76e0b4aa27b999fa3bf902918e44307bc3cf9ce1dad38aac501139a0598684c2c26d65274b16f8380f98bd8408d885814d6cc90e0415f8740a015f57a733a213b4df3828bc96433bab8ebf37df38ddbc245887d63659522010f37ea480e7827157727978edb306d8974af758349cb2c55ccf025ed013099837b260a9fc299e2dacb949eb78135c7d3a6f68b76ac7c215622edae1cb52902015c28845587bdf47e47a74e67604e8aa81feff99feb994ed3fccf344390b42e5a5c3942267cb3a4fa80b8babf516565d1195edd78fbf4081955f533d6123fa128a200780331070c8a91f569acef6b10c2e2a", 0x1000}, {&(0x7f0000002880)="7c2895d6920cf509f4e51e9d8e8418df2f7f1de7e6124c37f05f9513e3fb45abd641ebae5ee7c6671cc7dea7218778877a388659c01c278fa9b1093a574114dc9514965f24cde5c980711ae4cc899c69e1a35024a026e26700caba74cc3a58d89982fdfa41a9cad58cffa3ba96da70ec8509d0c1dced4fcefe86d2648d36c560ba1381dd85bb9446578f78482b96", 0x8e}, {&(0x7f0000002940)="59940872a393bc9738529a02fbe41374d5b32e7cf319159d2d871de39e37d0b7958437a479c9621635d218d3286fd755d94c743442b8f105c5911037ecef6eacbafc855eafcba105c43f4b950d6f7b34d427a0c0a60e39e8172aa37415f43fbc4dc760cd3a9f736642d5ba0b2363078d6b844a3c98ae9e9d8d6932c673c1d70a6f9829ea3e78b54def6193ff704f82e8c214955372", 0x95}, {&(0x7f0000002a00)="e6e98e265c6e29a98a836f40ed6aec3ebab0eeb9b33f13123c902650a83a0353efa07a315dfdfb8aff056c0e7ee944affa174a00120aa391e6c61bf5f55bf70ee99ea53f2ee7f5bd13f9deafebd0836e873b9cbd2769b51c01cda05dbec82358abd6e49d2e904be47cd5ef42ad06aa3f909e1106", 0x74}, {&(0x7f0000002a80)="a317a700d180a7a9b50c4354fa59a317b688899267a4afaf58d8d916dc1b7d6fae74b9dcbf7ab022b53745c69678a8575ac730bfedac306bf7de5cdb078f218b207117cb87bd80deab9dfbf2ac3f09991a6280e0eaac1e21956551990c2b80bc02d2aff63baf06f20486589742507bdfe6d54fffbe220fb387470e67315f717b6bf8af641c2e7784f73395252721d8", 0x8f}, {&(0x7f0000002b40)="6a1f20fe680202d1f87e7cfeeb2d692b20e2c27d4e8ee65145d1f63ae65084dae5af7ceb7631b5601dca424cec7a231fd598790487dd2a", 0x37}], 0xa, &(0x7f0000002c40)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}, {{&(0x7f0000002cc0)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d40)="6b9ba31a8132f43c4726b4e7a8736f800f8e53323c9ab383cb3c317a3caffb936ff14d0703797e3596ca0e49aea8889bd2fd5bd8636adca4b67a82f387fb70278872beadb7e5b479896f1b7a1816fd38fdee90537e6ece90fdd303c1bc4f1c82353843fc37518609536f04121c27d69e2cc0b228", 0x74}], 0x1, &(0x7f0000002e00)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{&(0x7f0000002ec0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="f0b4d1bc0b50f45a4274bb082422482b8a14be1e92e33e0423f6e9bb49bfd6f2b9d5cd8c6097151e9adafc3644221f19eea133403323dd0fae8349ba180245316191a8fb3be8106249c11f7fcaac35f788a16175dd178b23ad942566e8ea78a66c26", 0x62}], 0x1}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003000)="ac67f90f313d82abf6911115bf3d7648ef50939232b60db5e8c4eb9750975a032405461e93549232a2597e6c39008da6bddf40cbe764812d32189a812e38114d51cf8cb54a09", 0x46}, {&(0x7f0000003080)="245951325791a80906f861f8a283b2199528335f50b6b3aaab0b62c8ce1f27c7536c9c35a469098399e9f2363172e3", 0x2f}, {&(0x7f00000030c0)="f45ed576adee8f4d3304cb94c67b1a432a2b6a3b30b76e6fc3c1d8e450cdb66bc68198142d3f7a2a27c79d2454f43b29544ea16f3928490a08e34557de115bcc86c443b07f8fee992066ee4e76b10863b187b9ed39571167566521881cf1732cbfaf21c93d18af6a9ddb8094bf48e3edcc3223f7b3cd9c052f4697ac283d017e401f64779dd0b4fafe62ee008496f419d8738d70df685b36a53d736acf039a8f93b64416357f9812eb59a709fa0035f349bb86463ef1c760d4db18a20407053fac92eb0ab30739bb3b890fdb08498c8c051cd153", 0xd4}], 0x3}}], 0x5, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000340)=0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8, 0x7, 0x81, 0x2, {{0x21, 0x4, 0x1, 0x6, 0x84, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x20, 0xec, 0x0, 0xc, [0x26, 0x3, 0x0, 0xc8ac, 0x9, 0x1, 0x800]}, @ssrr={0x89, 0x7, 0x80, [@broadcast]}, @generic={0x44, 0x5, "2a1f7a"}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x1d, 0x0, 0x5, [0x5, 0x2, 0x3, 0x5, 0x3, 0x6]}, @timestamp={0x44, 0x14, 0x43, 0x0, 0x0, [0x1, 0x59d8, 0x7fffffff, 0x2]}, @end, @timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0x5, [{@broadcast, 0x9}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001000)={0x2, 0x0, 0xfffffff9, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001040)=[{0x5, 0x1, 0x10, 0x4}], 0x10, 0x4000}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf250100000008000700", @ANYRES32=r1, @ANYBLOB="24ad58b92c28e0a12cd717cecf50ef3e99f76ba7354ebecbbee9888ee31e56f9917ccc745f3ea06db924fade7c1a5c661c832d92a308d6a21f45addd79534118bcbeb99e85ff6d97c599a09fea39a1ffc494007e4b87dba33506407b"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) (async) socket(0x1f, 0x5, 0x1) 74.534291ms ago: executing program 1 (id=6815): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x3, 0xfffffffb, @vifc_lcl_ifindex, @empty}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) listen(0xffffffffffffffff, 0x3) sendfile(r0, r4, 0x0, 0x20000000002) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl(r5, 0x1, &(0x7f0000000040)="1ece5ed78e8de053c8016f733b9c55aba3e29911414e") bind$bt_hci(r8, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {0x10}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44094}, 0x24004004) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r9, 0xc028583e, &(0x7f00000001c0)={{[0x6, 0x0, 0x4, 0x3]}, 0x0, 0x2, 0x4, 0x0, &(0x7f0000000100)=[{{@_ha_fsid={[0x2, 0x5]}, {0x216, 0x2, 0x9, 0x9}}, 0x401, 0x0, 'memory.current\x00'}, {{@align=0x80000000, {0xe, 0x500, 0x55, 0x2}}, 0x2d32, 0x0, 'veth0_to_hsr\x00'}, {{@_ha_fsid={[0x0, 0x2]}, {0x5, 0x2, 0x7, 0x5}}, 0x6, 0x0, 'veth0_to_hsr\x00'}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="1a0000b8beb7f41800", @ANYRES16=r11, @ANYBLOB="df4800000000000000000c0000000c000380040005000400038018000180140002007369743000"/50], 0x38}}, 0x0) 73.239343ms ago: executing program 2 (id=6816): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x81}, 0xc000) poll(&(0x7f0000000740)=[{r4, 0xa403}], 0x1, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r7, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f00000024c0)='\'', 0x1}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.480437ms ago: executing program 0 (id=6817): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@empty, 0x48, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000104000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100677265746170000018000280050013000100000005000a000000000004001200"], 0x48}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 0s ago: executing program 3 (id=6818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500087e248f5020000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028005001600000000001400030065727370616e30000000000000000000"], 0x50}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000b80)=[{&(0x7f0000000140)=""/10, 0xa}, {0x0, 0x61}], 0x2, 0x7, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) kernel console output (not intermixed with test programs): alid protocol: 12 255.255.255.255:20003 [ 633.390900][T24701] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5151'. [ 633.400497][T24701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5151'. [ 633.453049][T24706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5152'. [ 633.468179][T24594] xfrm0 speed is unknown, defaulting to 1000 [ 634.109022][T24732] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5156'. [ 634.211680][T24725] syzkaller0: entered promiscuous mode [ 634.227855][T24725] syzkaller0: entered allmulticast mode [ 634.254824][T24594] xfrm0 speed is unknown, defaulting to 1000 [ 634.666921][T24752] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 634.855105][T24594] xfrm0 speed is unknown, defaulting to 1000 [ 635.413832][T24795] xt_hashlimit: max too large, truncated to 1048576 [ 635.435450][T24787] syzkaller0: entered promiscuous mode [ 635.437691][T24795] No such timeout policy "syz1" [ 635.444400][T24787] syzkaller0: entered allmulticast mode [ 635.463281][T24594] xfrm0 speed is unknown, defaulting to 1000 [ 635.610378][T24800] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5177'. [ 635.647429][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5179'. [ 638.546046][T24594] xfrm0 speed is unknown, defaulting to 1000 [ 638.726966][T24825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5184'. [ 638.759967][T24825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5184'. [ 638.798954][T24825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5184'. [ 638.819433][T24825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5184'. [ 638.852873][T24826] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5184'. [ 638.874066][T24826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5184'. [ 638.888251][T24826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5184'. [ 639.057484][T24841] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 639.095060][T24594] xfrm0 speed is unknown, defaulting to 1000 [ 639.166224][T24843] validate_nla: 5 callbacks suppressed [ 639.166242][T24843] netlink: 'syz.2.5190': attribute type 4 has an invalid length. [ 639.208607][T24843] netlink: 'syz.2.5190': attribute type 4 has an invalid length. [ 639.438809][T24594] xfrm0 speed is unknown, defaulting to 1000 [ 639.474372][T24856] __nla_validate_parse: 1 callbacks suppressed [ 639.474391][T24856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5194'. [ 639.491041][T24857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5193'. [ 639.502442][T24857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5193'. [ 639.670867][T24863] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 639.730478][T24865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5197'. [ 639.791349][T24867] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 640.057210][T24876] block nbd4: Unsupported socket: should be TCP or UNIX. [ 640.077917][T24878] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 640.094548][T24876] block nbd4: not configured, cannot reconfigure [ 640.475282][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888077bf3400: rx timeout, send abort [ 640.485168][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888077bf3400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 640.499861][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056567000: rx timeout, send abort [ 640.509452][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056567000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 640.731844][T17522] IPVS: starting estimator thread 0... [ 640.833574][T24914] IPVS: using max 38 ests per chain, 91200 per kthread [ 641.052236][T24931] netlink: 'syz.4.5218': attribute type 21 has an invalid length. [ 641.094630][T24932] vlan3: entered allmulticast mode [ 641.099813][T24932] bridge_slave_0: entered allmulticast mode [ 641.147691][T24939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5218'. [ 641.189653][T24931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5218'. [ 641.239332][T24934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5216'. [ 641.273483][T24934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5216'. [ 641.552540][T24959] netlink: 'syz.2.5225': attribute type 7 has an invalid length. [ 641.576425][T24950] syzkaller0: entered promiscuous mode [ 641.595543][T24950] syzkaller0: entered allmulticast mode [ 641.608070][T24961] IPVS: ip_vs_edit_dest(): server weight less than zero [ 641.664087][T24961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5226'. [ 641.691037][T24963] netlink: 'syz.2.5227': attribute type 1 has an invalid length. [ 641.693484][T24961] netlink: 'syz.1.5226': attribute type 1 has an invalid length. [ 641.835401][T24966] netlink: 'syz.1.5228': attribute type 8 has an invalid length. [ 641.861798][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5228'. [ 642.145629][T24979] netlink: 'syz.4.5231': attribute type 27 has an invalid length. [ 642.168370][T24979] netlink: 'syz.4.5231': attribute type 4 has an invalid length. [ 642.739431][T25014] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 642.756198][T25014] bond7 (unregistering): Released all slaves [ 642.812092][T25023] bridge0: left allmulticast mode [ 642.928572][T25028] netlink: 'syz.3.5245': attribute type 11 has an invalid length. [ 643.394644][T25056] pim6reg: entered allmulticast mode [ 643.401322][T25056] pim6reg: left allmulticast mode [ 643.611521][T25067] x_tables: duplicate underflow at hook 1 [ 643.687372][T25074] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 643.732484][T25076] tipc: Failed to remove unknown binding: 66,0,0/0:1573929629/1573929630 [ 643.758599][T25076] tipc: Failed to remove unknown binding: 66,0,0/0:1573929629/1573929630 [ 644.207670][T25102] IPv6: NLM_F_REPLACE set, but no existing node found! [ 644.252552][T25107] validate_nla: 1 callbacks suppressed [ 644.252571][T25107] netlink: 'syz.3.5270': attribute type 1 has an invalid length. [ 644.739095][T25130] netlink: 'syz.1.5278': attribute type 11 has an invalid length. [ 644.802626][T25132] SET target dimension over the limit! [ 644.839797][T25142] netlink: 'syz.4.5282': attribute type 21 has an invalid length. [ 644.884803][T25142] IPv6: NLM_F_CREATE should be specified when creating new route [ 644.928694][T25146] __nla_validate_parse: 19 callbacks suppressed [ 644.928714][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5284'. [ 645.140611][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5287'. [ 645.225568][T25167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5289'. [ 645.344883][T25174] tc_dump_action: action bad kind [ 645.638547][T25196] netlink: 212332 bytes leftover after parsing attributes in process `syz.1.5298'. [ 645.668953][T25196] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 645.761782][T25203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5302'. [ 645.837325][T25203] 8021q: adding VLAN 0 to HW filter on device bond12 [ 646.264743][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5310'. [ 646.295121][T25233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5310'. [ 646.328506][T25231] netlink: zone id is out of range [ 646.351277][T25231] netlink: zone id is out of range [ 646.376811][T25231] netlink: get zone limit has 4 unknown bytes [ 646.482273][T25209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 646.490300][T25209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 646.498278][T25209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 646.506236][T25209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 646.514227][T25209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 646.522413][T25209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 646.522425][T25215] infiniband syz0: set down [ 646.522525][T25215] infiniband syz0: added veth0_vlan [ 646.653830][T25215] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 646.677070][T25215] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 646.698663][T25215] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 646.755786][T25215] RDS/IB: syz0: added [ 646.776704][T25215] smc: adding ib device syz0 with port count 1 [ 646.804001][T25215] smc: ib device syz0 port 1 has no pnetid [ 646.990452][T25260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.039019][T25260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.177228][T25255] syzkaller0: entered promiscuous mode [ 647.183301][T25255] syzkaller0: entered allmulticast mode [ 647.214746][T25277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5322'. [ 648.710736][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 648.718149][ T25] block nbd0: Dead connection, failed to find a fallback [ 648.725451][ T25] block nbd0: shutting down sockets [ 648.730693][ T25] blk_print_req_error: 68 callbacks suppressed [ 648.730720][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 648.747614][ T25] buffer_io_error: 135 callbacks suppressed [ 648.747633][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 648.761624][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 648.770235][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 648.778399][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 648.786837][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 648.796185][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 648.809434][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 648.817706][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 648.825803][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 648.841882][ T1687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.851435][ T1687] Buffer I/O error on dev nbd0, logical block 0, async page read [ 648.861211][ T1687] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.870923][ T1687] Buffer I/O error on dev nbd0, logical block 1, async page read [ 648.879907][ T1687] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.889516][ T1687] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.900297][ T1687] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.909699][ T1687] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.920040][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.943587][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.963949][T22952] ldm_validate_partition_table(): Disk read failed. [ 648.988606][T22952] Dev nbd0: unable to read RDB block 0 [ 648.996561][T22952] nbd0: unable to read partition table [ 649.017152][T22952] ldm_validate_partition_table(): Disk read failed. [ 649.026450][T22952] Dev nbd0: unable to read RDB block 0 [ 649.041427][T22952] nbd0: unable to read partition table [ 650.985070][T25321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'. [ 651.241436][T25325] macvlan1: left promiscuous mode [ 651.286722][T25325] net_ratelimit: 48 callbacks suppressed [ 651.286742][T25325] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 651.341678][T25335] netlink: 'syz.1.5339': attribute type 1 has an invalid length. [ 651.410386][T25335] 8021q: adding VLAN 0 to HW filter on device bond9 [ 651.433371][T25335] bond8: (slave bond9): making interface the new active one [ 651.467368][T25335] bond8: (slave bond9): Enslaving as an active interface with an up link [ 651.523022][T25335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5339'. [ 651.555224][T25338] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 651.589747][T25335] 8021q: adding VLAN 0 to HW filter on device bond8 [ 651.601645][T25344] netlink: 'syz.0.5341': attribute type 49 has an invalid length. [ 651.647757][T25338] ip6erspan1: entered allmulticast mode [ 651.668952][T25346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5342'. [ 651.880402][T25349] can: request_module (can-proto-0) failed. [ 652.266056][T25377] xt_l2tp: v2 tid > 0xffff: 1114244 [ 652.438615][T25385] xt_TCPMSS: Only works on TCP SYN packets [ 652.459215][T25385] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5352'. [ 652.544388][T25389] xt_TCPMSS: Only works on TCP SYN packets [ 652.595496][T25389] syzkaller1: entered promiscuous mode [ 652.643899][T25389] syzkaller1: entered allmulticast mode [ 652.683228][T25396] sctp: [Deprecated]: syz.1.5357 (pid 25396) Use of int in max_burst socket option deprecated. [ 652.683228][T25396] Use struct sctp_assoc_value instead [ 652.895549][T25403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5359'. [ 653.459364][T25428] netlink: 'syz.2.5365': attribute type 1 has an invalid length. [ 653.480595][T25428] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 654.260611][T25478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5382'. [ 654.327330][T25478] vlan5: entered promiscuous mode [ 654.343695][T25478] erspan0: entered promiscuous mode [ 654.661417][T25501] ip_vti0: entered promiscuous mode [ 654.679947][T25501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5389'. [ 654.874113][T25516] bond7: option fail_over_mac: invalid value (16) [ 654.896912][T25516] bond7 (unregistering): Released all slaves [ 654.975104][T25526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5396'. [ 655.149157][T25539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 655.156528][T25539] IPv6: NLM_F_CREATE should be set when creating new route [ 655.163974][T25539] IPv6: NLM_F_CREATE should be set when creating new route [ 655.171221][T25539] IPv6: NLM_F_CREATE should be set when creating new route [ 655.314450][T25545] netlink: 'syz.4.5404': attribute type 20 has an invalid length. [ 655.333534][T25545] IPv6: NLM_F_CREATE should be specified when creating new route [ 655.352007][T25545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5404'. [ 655.401727][T25555] netlink: 'syz.2.5405': attribute type 21 has an invalid length. [ 655.441076][T25555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5405'. [ 656.048798][T25587] nbd3: detected capacity change from 0 to 63 [ 656.085723][T25590] block nbd0: NBD_DISCONNECT [ 656.091678][T25590] block nbd0: Send disconnect failed -32 [ 656.107384][T25590] block nbd0: Send disconnect failed -32 [ 656.189646][ T5629] block nbd3: Receive control failed (result -104) [ 656.279509][T25610] xt_TPROXY: Can be used only with -p tcp or -p udp [ 656.294374][T25608] netlink: 'syz.3.5419': attribute type 5 has an invalid length. [ 656.428122][T25616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5421'. [ 656.570004][T25627] geneve3: entered promiscuous mode [ 656.575963][T25627] geneve3: entered allmulticast mode [ 656.844581][T25640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5429'. [ 657.344342][T25656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5432'. [ 659.896731][T25665] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 660.178838][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5439'. [ 663.188368][T25660] pimreg5001287: entered allmulticast mode [ 663.210956][T25677] macvlan4: entered promiscuous mode [ 663.221914][T25677] geneve0: entered promiscuous mode [ 663.256973][T25670] macvlan5: entered promiscuous mode [ 663.288219][T25688] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 663.372131][T25700] netlink: 'syz.0.5444': attribute type 30 has an invalid length. [ 663.432131][T25698] lo speed is unknown, defaulting to 1000 [ 663.457038][T25698] lo speed is unknown, defaulting to 1000 [ 663.481682][T25698] lo speed is unknown, defaulting to 1000 [ 663.511243][T25698] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 663.537831][T25709] TCP: TCP_TX_DELAY enabled [ 663.539163][T25698] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 663.564224][T25698] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 663.620180][T25698] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 663.642651][T25714] syz_tun: entered allmulticast mode [ 663.659528][T25698] lo speed is unknown, defaulting to 1000 [ 663.667700][T25698] lo speed is unknown, defaulting to 1000 [ 663.677586][T25698] lo speed is unknown, defaulting to 1000 [ 663.725901][T25698] lo speed is unknown, defaulting to 1000 [ 663.761461][T25698] lo speed is unknown, defaulting to 1000 [ 663.809942][T25698] lo speed is unknown, defaulting to 1000 [ 663.828674][T25698] lo speed is unknown, defaulting to 1000 [ 663.849920][T25698] lo speed is unknown, defaulting to 1000 [ 663.985738][T25732] netlink: 'syz.4.5453': attribute type 23 has an invalid length. [ 664.130531][T25741] syzkaller1: entered promiscuous mode [ 664.155055][T25741] syzkaller1: entered allmulticast mode [ 664.198414][T25741] 8021q: VLANs not supported on ip6gre0 [ 664.315842][T25753] netlink: 6212 bytes leftover after parsing attributes in process `syz.1.5460'. [ 664.353170][T25748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 664.360507][T25748] IPv6: NLM_F_CREATE should be set when creating new route [ 664.367838][T25748] IPv6: NLM_F_CREATE should be set when creating new route [ 664.411097][T25749] syzkaller0: entered promiscuous mode [ 664.417284][T25749] syzkaller0: entered allmulticast mode [ 664.438840][T25756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5462'. [ 664.450888][T25756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5462'. [ 664.670344][T25770] netlink: 'syz.1.5464': attribute type 1 has an invalid length. [ 667.528336][T25770] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 667.596107][T25792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.611775][T25792] IPv6: NLM_F_CREATE should be set when creating new route [ 667.619091][T25792] IPv6: NLM_F_CREATE should be set when creating new route [ 667.891454][T25814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5474'. [ 668.030966][T25819] bond7 (unregistering): Released all slaves [ 668.074414][T25820] netlink: 'syz.0.5474': attribute type 83 has an invalid length. [ 668.171833][T25838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5480'. [ 668.209892][T25838] netlink: 'syz.3.5480': attribute type 5 has an invalid length. [ 668.247686][T25824] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 668.247718][T25838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5480'. [ 668.262013][T25838] geneve4: entered promiscuous mode [ 668.269623][T25838] geneve4: entered allmulticast mode [ 668.315259][T25824] xfrm0 speed is unknown, defaulting to 1000 [ 668.537815][T25855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5486'. [ 668.656686][T25864] netlink: 'syz.4.5489': attribute type 23 has an invalid length. [ 668.770873][T25867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 668.791112][T25871] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5491'. [ 668.906767][T25874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5493'. [ 668.966176][T25878] netlink: 'syz.0.5495': attribute type 1 has an invalid length. [ 669.165846][T25893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5499'. [ 669.184602][T25893] block nbd0: not configured, cannot reconfigure [ 669.396481][T25907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5502'. [ 669.407032][T25907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.607139][T25915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5504'. [ 669.625161][T25824] lo speed is unknown, defaulting to 1000 [ 670.058525][T25931] dvmrp0: entered allmulticast mode [ 670.135282][T25928] syzkaller0: entered promiscuous mode [ 670.151301][T25928] syzkaller0: entered allmulticast mode [ 670.170843][T25925] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 670.263803][T25943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5512'. [ 670.286432][T25925] xfrm0 speed is unknown, defaulting to 1000 [ 670.478802][T25954] openvswitch: netlink: IP tunnel dst address not specified [ 670.522627][T25954] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5515'. [ 670.556867][T19856] bridge_slave_1: left allmulticast mode [ 670.577153][T19856] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.606610][T19856] bridge_slave_0: left allmulticast mode [ 670.625564][T19856] bridge_slave_0: left promiscuous mode [ 670.641965][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5516'. [ 670.654182][T19856] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.749130][T19856] erspan0: left allmulticast mode [ 670.766263][T19856] erspan0: left promiscuous mode [ 670.771547][T19856] bridge12: port 1(erspan0) entered disabled state [ 670.802811][T19856] pimreg3: left allmulticast mode [ 671.076000][T19856] bond2 (unregistering): (slave geneve2): Releasing active interface [ 671.120683][T19856] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 671.133388][T19856] bridge3 (unregistering): left promiscuous mode [ 671.185894][T19856] bond14 (unregistering): (slave bridge11): Releasing active interface [ 671.200055][T19856] bridge11 (unregistering): left promiscuous mode [ 671.206703][T19856] bridge11 (unregistering): left allmulticast mode [ 671.231173][T19856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.242915][T19856] bond_slave_0: left allmulticast mode [ 671.251275][T19856] bond0 (unregistering): (slave bond11): Releasing backup interface [ 671.264864][T19856] bond11 (unregistering): left allmulticast mode [ 671.271525][T19856] bond0 (unregistering): Released all slaves [ 671.281833][T19856] bond1 (unregistering): Released all slaves [ 671.295625][T19856] bond2 (unregistering): Released all slaves [ 671.319850][T19856] bond3 (unregistering): Released all slaves [ 671.337626][T19856] bond4 (unregistering): Released all slaves [ 671.360021][T19856] bond5 (unregistering): Released all slaves [ 671.373870][T19856] bond6 (unregistering): Released all slaves [ 671.387471][T19856] bond7 (unregistering): Released all slaves [ 671.413669][T19856] bond8 (unregistering): Released all slaves [ 671.428477][T19856] bond9 (unregistering): Released all slaves [ 671.442214][T19856] bond10 (unregistering): Released all slaves [ 671.456238][T19856] bond11 (unregistering): Released all slaves [ 671.476140][T19856] bond12 (unregistering): Released all slaves [ 671.504284][T19856] bond13 (unregistering): Released all slaves [ 671.521868][T19856] bond14 (unregistering): Released all slaves [ 671.787552][T19856] tipc: Left network mode [ 671.948072][T25970] can: request_module (can-proto-0) failed. [ 672.063984][T25984] xt_connbytes: Forcing CT accounting to be enabled [ 672.107237][T25984] xt_bpf: check failed: parse error [ 672.599818][T26002] x_tables: duplicate underflow at hook 2 [ 672.611208][T25925] lo speed is unknown, defaulting to 1000 [ 672.622128][T26007] netlink: 'syz.4.5528': attribute type 12 has an invalid length. [ 673.007979][T26021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5533'. [ 673.150819][T26028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5536'. [ 673.180553][T26027] netlink: 'syz.4.5535': attribute type 1 has an invalid length. [ 673.191500][T26027] netlink: 756 bytes leftover after parsing attributes in process `syz.4.5535'. [ 673.215193][T26024] syzkaller1: entered promiscuous mode [ 673.221073][T26024] syzkaller1: entered allmulticast mode [ 674.135255][T26053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5542'. [ 674.145307][T26053] netlink: 'syz.2.5542': attribute type 7 has an invalid length. [ 674.174640][T26053] netlink: 'syz.2.5542': attribute type 8 has an invalid length. [ 674.186594][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5542'. [ 674.253459][T26053] bridge0: entered promiscuous mode [ 674.275730][T26053] ip6gretap0: entered promiscuous mode [ 674.317420][T26053] erspan0: entered promiscuous mode [ 674.374899][T26053] debugfs: 'hsr0' already exists in 'hsr' [ 674.391986][T26053] Cannot create hsr debugfs directory [ 674.410421][T26053] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 674.438760][T26060] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 674.447881][T26060] 0ªX¹¦Dö»: entered allmulticast mode [ 674.466945][T26066] C: renamed from lo [ 674.484623][T26066] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 674.771143][T26090] __nla_validate_parse: 1 callbacks suppressed [ 674.771161][T26090] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5552'. [ 674.787139][T26090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5552'. [ 675.233672][T26098] syzkaller0: entered promiscuous mode [ 675.245202][T26098] syzkaller0: entered allmulticast mode [ 675.272528][T26096] tipc: Enabled bearer , priority 0 [ 675.339576][T26096] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5555'. [ 675.371030][T26110] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5558'. [ 675.435100][T26110] bond10 (unregistering): Released all slaves [ 675.472337][T26095] tipc: Resetting bearer [ 675.552022][T26095] tipc: Disabling bearer [ 675.568123][T26120] netlink: 'syz.0.5560': attribute type 1 has an invalid length. [ 675.577409][T26121] netlink: 'syz.0.5560': attribute type 1 has an invalid length. [ 675.765647][T26123] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5561'. [ 675.790533][T26120] veth7: entered promiscuous mode [ 675.800873][T26130] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5562'. [ 675.844948][T26120] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 675.865677][T26137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5561'. [ 675.885767][T26137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5561'. [ 675.901302][T26121] veth9: entered promiscuous mode [ 675.932302][T26121] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 676.175042][T19856] IPVS: stop unused estimator thread 0... [ 676.289896][T26166] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5567'. [ 676.444865][T26172] netlink: 'syz.3.5569': attribute type 62 has an invalid length. [ 676.583977][T26172] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 676.645471][T26178] pim6reg: entered allmulticast mode [ 677.157035][T26197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5577'. [ 677.268472][T26220] netlink: 'syz.1.5583': attribute type 1 has an invalid length. [ 677.295041][T26220] netlink: 'syz.1.5583': attribute type 1 has an invalid length. [ 677.466147][T26224] syzkaller0: entered promiscuous mode [ 677.480825][T26224] syzkaller0: entered allmulticast mode [ 677.919872][T26252] tunl0: entered promiscuous mode [ 677.936034][T26252] netlink: 'syz.1.5590': attribute type 3 has an invalid length. [ 678.064497][T26265] netlink: 'syz.3.5594': attribute type 21 has an invalid length. [ 678.205565][T26265] vlan5: entered allmulticast mode [ 678.228999][T26265] bond0: entered allmulticast mode [ 678.234653][T26265] bond6: entered allmulticast mode [ 678.394044][T26282] syzkaller0: entered promiscuous mode [ 678.408133][T26282] syzkaller0: entered allmulticast mode [ 678.428246][T26285] netlink: 'syz.4.5601': attribute type 5 has an invalid length. [ 678.437563][T26282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.125927][T26328] netlink: 'syz.0.5614': attribute type 11 has an invalid length. [ 679.919909][T26397] netlink: 'syz.2.5632': attribute type 1 has an invalid length. [ 680.056399][T26397] bond8: entered promiscuous mode [ 680.074165][T26397] 8021q: adding VLAN 0 to HW filter on device bond8 [ 680.121821][T26410] ipvlan2: entered allmulticast mode [ 680.132625][T26410] bond8: entered allmulticast mode [ 680.193594][T26397] bond8: (slave bridge5): making interface the new active one [ 680.201234][T26397] bridge5: entered promiscuous mode [ 680.205544][T26418] __nla_validate_parse: 11 callbacks suppressed [ 680.205562][T26418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5638'. [ 680.207348][T26397] bridge5: entered allmulticast mode [ 680.233744][T26397] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 680.439395][T26428] x_tables: duplicate underflow at hook 2 [ 680.466936][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5641'. [ 680.714990][T26446] syzkaller0: entered promiscuous mode [ 680.736454][T26446] syzkaller0: entered allmulticast mode [ 680.803163][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5647'. [ 680.871259][T26460] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5650'. [ 680.939413][T26460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5650'. [ 680.958956][T26464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5650'. [ 681.147278][T26478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5653'. [ 681.217390][T26478] netlink: 'syz.2.5653': attribute type 1 has an invalid length. [ 681.242794][T26478] netlink: 'syz.2.5653': attribute type 2 has an invalid length. [ 681.435739][T26488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5654'. [ 681.575957][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5656'. [ 681.660471][T26495] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5656'. [ 682.003413][T26513] syzkaller0: entered promiscuous mode [ 682.022427][T26513] syzkaller0: entered allmulticast mode [ 682.218469][T26534] syzkaller0: entered promiscuous mode [ 682.232749][T26534] syzkaller0: entered allmulticast mode [ 683.258903][T26592] netlink: 'syz.4.5688': attribute type 2 has an invalid length. [ 683.484378][T26599] team0 (unregistering): Port device team_slave_0 removed [ 683.521915][T26599] team0 (unregistering): Port device team_slave_1 removed [ 683.687415][T26618] tipc: Enabling of bearer rejected, failed to enable media [ 683.978995][T26623] team0: Cannot enslave team device to itself [ 684.343996][T26651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.344005][T26650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.418358][T26653] syzkaller0: entered promiscuous mode [ 684.434816][T26655] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 684.437735][T26653] syzkaller0: entered allmulticast mode [ 684.629227][T26671] syzkaller0: entered promiscuous mode [ 684.634916][T26671] syzkaller0: entered allmulticast mode [ 684.758671][T26673] netlink: 'syz.4.5708': attribute type 2 has an invalid length. [ 684.759358][T26680] netlink: 'syz.3.5710': attribute type 5 has an invalid length. [ 684.774798][T26682] netlink: 'syz.2.5711': attribute type 4 has an invalid length. [ 685.155803][T26714] netlink: 'syz.3.5719': attribute type 1 has an invalid length. [ 685.252039][T26714] bond13: entered promiscuous mode [ 685.260150][T26714] 8021q: adding VLAN 0 to HW filter on device bond13 [ 685.281965][T26725] 8021q: adding VLAN 0 to HW filter on device bond13 [ 685.292381][T26725] bond13: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 685.324698][T26725] bond13: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 685.329270][T26729] netlink: 'syz.2.5723': attribute type 1 has an invalid length. [ 685.348458][T26725] bond13: (slave ip6gre1): making interface the new active one [ 685.356273][T26725] ip6gre1: entered promiscuous mode [ 685.363169][T26725] bond13: (slave ip6gre1): Enslaving as an active interface with an up link [ 685.433990][T26732] __nla_validate_parse: 82 callbacks suppressed [ 685.434011][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'. [ 685.450214][T26734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.501919][T26736] x_tables: duplicate entry at hook 2 [ 685.665775][T26745] syzkaller0: entered promiscuous mode [ 685.671341][T26745] syzkaller0: entered allmulticast mode [ 685.809577][T26752] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 685.909624][T26762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5731'. [ 686.045727][T26772] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5736'. [ 686.057460][T26768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5733'. [ 686.337207][T26785] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5739'. [ 686.431026][T26787] netlink: 'syz.2.5741': attribute type 4 has an invalid length. [ 686.433473][T26789] netlink: 'syz.1.5740': attribute type 4 has an invalid length. [ 686.447942][T26789] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5740'. [ 686.482897][ T1687] block nbd3: Possible stuck request ffff8880276c0000: control (read@0,1024B). Runtime 30 seconds [ 686.495460][ T1687] block nbd3: Possible stuck request ffff8880276c01c0: control (read@1024,1024B). Runtime 30 seconds [ 686.508173][ T1687] block nbd3: Possible stuck request ffff8880276c0380: control (read@2048,1024B). Runtime 30 seconds [ 686.519325][T26793] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.5740'. [ 686.520028][ T1687] block nbd3: Possible stuck request ffff8880276c0540: control (read@3072,1024B). Runtime 30 seconds [ 686.948533][T26815] batadv0: entered promiscuous mode [ 686.956033][T26815] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 686.967227][T26815] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 686.999138][T26815] batadv0: left promiscuous mode [ 687.056698][T26826] nbd: couldn't find device at index 1694498816 [ 687.092277][T26827] syzkaller0: entered promiscuous mode [ 687.099055][T26827] syzkaller0: entered allmulticast mode [ 687.132524][T26827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5751'. [ 687.184236][T26827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5751'. [ 687.204627][T26827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5751'. [ 687.256516][T26833] netlink: 'syz.0.5754': attribute type 4 has an invalid length. [ 687.482368][T26850] netlink: 'syz.2.5760': attribute type 9 has an invalid length. [ 687.511168][T26850] netlink: 'syz.2.5760': attribute type 1 has an invalid length. [ 687.710523][T26861] xt_ecn: cannot match TCP bits for non-tcp packets [ 687.719670][T26864] tipc: Enabling of bearer rejected, failed to enable media [ 688.060568][T26892] netlink: 'syz.4.5772': attribute type 10 has an invalid length. [ 688.104239][T26892] team0: Port device geneve1 added [ 688.115236][T19854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.141068][T19854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.168486][T19854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.198338][T19854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.425678][T26908] netlink: 'syz.3.5775': attribute type 4 has an invalid length. [ 689.266169][T26921] veth1_vlan: left allmulticast mode [ 689.421824][T17524] lo speed is unknown, defaulting to 1000 [ 689.442447][T17524] syz2: Port: 1 Link DOWN [ 692.450479][T26954] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 692.454552][T19860] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.501384][T19860] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 692.536478][T19860] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.559080][T19860] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 692.580249][T26969] syz_tun: refused to change device tx_queue_len [ 692.618195][T26991] xt_hashlimit: size too large, truncated to 1048576 [ 692.636956][T19860] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.671816][T19860] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 692.699222][T19860] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.737094][T19860] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 692.813487][T26993] tunl0: entered promiscuous mode [ 692.824791][T26993] netlink: 'syz.2.5792': attribute type 4 has an invalid length. [ 692.851319][T26995] __nla_validate_parse: 13 callbacks suppressed [ 692.851339][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5793'. [ 692.878152][T26993] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5792'. [ 692.891423][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 692.904043][T26995] netlink: 'syz.3.5793': attribute type 1 has an invalid length. [ 692.912842][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 692.924524][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 692.933924][T26995] netlink: 'syz.3.5793': attribute type 2 has an invalid length. [ 692.947784][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 692.958896][T26999] netlink: 'syz.4.5794': attribute type 5 has an invalid length. [ 692.968589][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 692.996684][T26999] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5794'. [ 693.017602][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.027071][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.035665][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.044848][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.056248][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 693.193565][T27013] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.5797'. [ 693.267877][T27013] netlink: 'syz.3.5797': attribute type 1 has an invalid length. [ 693.334631][T27020] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.5797'. [ 693.386455][T27020] netlink: 'syz.3.5797': attribute type 1 has an invalid length. [ 693.559418][T19855] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 693.571610][T19855] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 693.606419][T27038] bond14: entered promiscuous mode [ 693.611899][T27038] bond14: entered allmulticast mode [ 693.612110][T27027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.617892][T27038] 8021q: adding VLAN 0 to HW filter on device bond14 [ 693.839240][T27055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5803'. [ 693.922358][T26996] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 693.930944][T26996] xfrm0 speed is unknown, defaulting to 1000 [ 694.016290][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'. [ 694.038228][T27061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5807'. [ 694.105695][ T30] audit: type=1804 audit(1782765048.634:14): pid=27065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5808" name="/newroot/525/cgroup.controllers" dev="tmpfs" ino=2711 res=1 errno=0 [ 694.155028][ T30] audit: type=1800 audit(1782765048.664:15): pid=27065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5808" name="cgroup.controllers" dev="tmpfs" ino=2711 res=0 errno=0 [ 694.379318][T27078] netlink: 'syz.2.5812': attribute type 1 has an invalid length. [ 694.543334][T26996] lo speed is unknown, defaulting to 1000 [ 694.812786][T26996] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.819975][T26996] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.827556][T26996] bridge_slave_0: entered allmulticast mode [ 694.845445][T26996] bridge_slave_0: entered promiscuous mode [ 694.854166][T26996] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.861431][T26996] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.874931][T26996] bridge_slave_1: entered allmulticast mode [ 694.884218][T26996] bridge_slave_1: entered promiscuous mode [ 694.910402][T26996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.922108][T26996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.950734][T26996] team0: Port device team_slave_0 added [ 694.958563][T26996] team0: Port device team_slave_1 added [ 694.981236][T26996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.988734][T26996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.015524][T26996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.028213][T26996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.035720][T26996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.062501][T26996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.100049][T26996] hsr_slave_0: entered promiscuous mode [ 695.103041][ T5629] Bluetooth: hci1: command tx timeout [ 695.106925][T26996] hsr_slave_1: entered promiscuous mode [ 695.107566][T26996] debugfs: 'hsr0' already exists in 'hsr' [ 695.124962][T26996] Cannot create hsr debugfs directory [ 695.234024][T26996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.245134][T26996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 695.256207][T26996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 695.337241][T26996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.350904][T26996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 695.363913][T26996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 695.442544][T26996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.452996][T26996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 695.463884][T26996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 695.536464][T26996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.546886][T26996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 695.557380][T26996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 695.669540][T26996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 695.679534][T26996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.688052][T26996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 695.703936][T26996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.713194][T26996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 695.722058][T26996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 695.730185][T26996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 695.740058][T26996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.803752][T26996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.822501][T26996] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.837497][T19854] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.844639][T19854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.857924][T19855] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.865132][T19855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.147605][T26996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.195704][T26996] veth0_vlan: entered promiscuous mode [ 696.209347][T26996] veth1_vlan: entered promiscuous mode [ 696.236702][T26996] veth0_macvtap: entered promiscuous mode [ 696.246666][T26996] veth1_macvtap: entered promiscuous mode [ 696.267269][T26996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.280477][T26996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.296263][T19852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.305219][T19852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.316138][T19852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.325309][T19852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.428165][T19862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.436750][T19862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.465059][T19860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.473674][T19860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.182998][ T5629] Bluetooth: hci1: command tx timeout [ 699.264995][ T5629] Bluetooth: hci1: command tx timeout [ 699.514575][T27110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.343697][ T5629] Bluetooth: hci1: command tx timeout [ 716.544433][ T1687] block nbd3: Possible stuck request ffff8880276c0000: control (read@0,1024B). Runtime 60 seconds [ 716.556724][ T1687] block nbd3: Possible stuck request ffff8880276c01c0: control (read@1024,1024B). Runtime 60 seconds [ 716.567827][ T1687] block nbd3: Possible stuck request ffff8880276c0380: control (read@2048,1024B). Runtime 60 seconds [ 716.579007][ T1687] block nbd3: Possible stuck request ffff8880276c0540: control (read@3072,1024B). Runtime 60 seconds [ 717.593082][ T4992] udevd[4992]: worker [24206] /devices/virtual/block/nbd3 is taking a long time [ 721.411356][T27124] netlink: 'syz.2.5817': attribute type 1 has an invalid length. [ 721.508618][T27131] gretap0: entered promiscuous mode [ 721.540170][T27131] vlan2: entered promiscuous mode [ 721.582460][T27127] tipc: Started in network mode [ 721.608069][T27127] tipc: Node identity 82460d85e199, cluster identity 4711 [ 721.620710][T27127] tipc: Enabled bearer , priority 0 [ 721.645907][T27149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5822'. [ 721.669911][T27149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5822'. [ 721.709926][T27139] syzkaller0: entered promiscuous mode [ 721.716552][T27139] syzkaller0: entered allmulticast mode [ 721.723720][T27139] tipc: Resetting bearer [ 721.773761][T27149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5822'. [ 721.794685][T27154] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5824'. [ 721.805560][T27125] tipc: Resetting bearer [ 724.894594][T27125] tipc: Disabling bearer [ 724.916325][T17522] tipc: Node number set to 1675562373 [ 725.089450][T27184] tipc: New replicast peer: 255.255.255.255 [ 725.096905][T27184] tipc: Enabled bearer , priority 10 [ 725.329780][T27200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5837'. [ 725.425370][T27204] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 725.444562][T27200] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5837'. [ 725.550274][T27211] netlink: zone id is out of range [ 725.581661][T27211] netlink: zone id is out of range [ 725.632999][T27211] netlink: zone id is out of range [ 725.658709][T27211] netlink: zone id is out of range [ 725.685349][T27211] netlink: zone id is out of range [ 725.695548][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5843'. [ 725.713518][T27211] netlink: zone id is out of range [ 725.731152][T27211] netlink: zone id is out of range [ 725.756495][T27211] netlink: zone id is out of range [ 725.762403][T27211] netlink: zone id is out of range [ 725.768718][T27211] netlink: zone id is out of range [ 725.786266][T27235] syzkaller0: entered promiscuous mode [ 725.792891][T27235] syzkaller0: entered allmulticast mode [ 726.176355][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 726.195540][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 726.208882][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.224352][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.234945][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 726.474372][T27257] bridge_slave_1: left allmulticast mode [ 726.488376][T27257] bridge_slave_1: left promiscuous mode [ 726.516258][T27257] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.557204][T27257] bridge_slave_0: left allmulticast mode [ 726.583137][T27257] bridge_slave_0: left promiscuous mode [ 726.605945][T27257] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.716890][T27273] sctp: [Deprecated]: syz.4.5856 (pid 27273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.716890][T27273] Use struct sctp_sack_info instead [ 726.874009][T27263] syzkaller0: entered promiscuous mode [ 726.883790][T27263] syzkaller0: entered allmulticast mode [ 726.911320][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5858'. [ 727.099635][T27288] IPVS: persistence engine module ip_vs_pe_À not found [ 728.307133][ T5623] Bluetooth: hci5: command tx timeout [ 730.358890][T27280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5858'. [ 730.368098][T27280] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5858'. [ 730.378162][T27280] veth1_to_bridge: entered allmulticast mode [ 730.386273][ T5623] Bluetooth: hci5: command tx timeout [ 730.394844][T27280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5858'. [ 730.404085][T27280] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5858'. [ 730.414282][T27284] tunl0: entered promiscuous mode [ 730.421334][T27284] netlink: 'syz.1.5858': attribute type 4 has an invalid length. [ 730.430137][T27284] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5858'. [ 730.475794][T27313] netlink: 'syz.2.5865': attribute type 11 has an invalid length. [ 730.513696][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5865'. [ 730.597741][T27307] veth1_vlan: left promiscuous mode [ 730.613815][T27307] veth0_vlan: left promiscuous mode [ 730.639309][T27307] veth0_vlan: entered promiscuous mode [ 730.648426][T27323] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5867'. [ 730.659834][T27307] veth1_vlan: entered promiscuous mode [ 730.671087][T27307] veth1_macvtap: left promiscuous mode [ 730.681113][T27307] veth0_macvtap: left promiscuous mode [ 730.688111][T27307] veth0_macvtap: entered promiscuous mode [ 730.697101][T27307] veth1_macvtap: entered promiscuous mode [ 730.709378][T27307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.718412][T27307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.726820][T27307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.735503][T27307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.748841][T27307] net_ratelimit: 16 callbacks suppressed [ 730.748854][T27307] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 730.771975][T27313] netlink: 'syz.2.5865': attribute type 11 has an invalid length. [ 730.784308][T17522] xfrm0 speed is unknown, defaulting to 1000 [ 730.796987][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5865'. [ 730.845298][T27247] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 730.847745][ T5809] syz0: Port: 1 Link ACTIVE [ 730.877239][T27247] xfrm0 speed is unknown, defaulting to 1000 [ 731.178928][T27343] netlink: 'syz.1.5874': attribute type 18 has an invalid length. [ 731.197418][T27342] tc_dump_action: action bad kind [ 731.236344][T19855] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.247849][T27343] netlink: 'syz.1.5874': attribute type 18 has an invalid length. [ 731.253919][T19855] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.351517][T19855] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.364202][T19855] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.521810][T27361] netlink: 'syz.1.5879': attribute type 3 has an invalid length. [ 731.797769][T27381] xt_limit: Overflow, try lower: 604147548/4200216962 [ 731.857121][T27383] netlink: 'syz.2.5885': attribute type 2 has an invalid length. [ 731.884094][T27383] netlink: 'syz.2.5885': attribute type 1 has an invalid length. [ 731.899896][T27383] netlink: 'syz.2.5885': attribute type 2 has an invalid length. [ 731.908347][T27383] netlink: 'syz.2.5885': attribute type 2 has an invalid length. [ 731.986834][T27391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5888'. [ 732.183416][T27405] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 732.195928][T27405] bond6 (unregistering): Released all slaves [ 732.227855][T27247] lo speed is unknown, defaulting to 1000 [ 732.367662][T27416] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5894'. [ 732.454799][T27422] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5895'. [ 732.464729][ T5623] Bluetooth: hci5: command tx timeout [ 732.481956][T27425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5897'. [ 732.494780][T27426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5897'. [ 732.829544][T27447] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5902'. [ 732.844706][T27447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5902'. [ 732.863496][T27447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5902'. [ 732.937079][T27455] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.004528][T27247] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.012102][T27247] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.021688][T27247] bridge_slave_0: entered allmulticast mode [ 733.030995][T27247] bridge_slave_0: entered promiscuous mode [ 733.061759][T27247] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.072565][T27247] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.080254][T27247] bridge_slave_1: entered allmulticast mode [ 733.090343][T27247] bridge_slave_1: entered promiscuous mode [ 733.169585][T27247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.190634][T27247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.264411][T27247] team0: Port device team_slave_0 added [ 733.275583][T27247] team0: Port device team_slave_1 added [ 733.336545][T27247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.350147][T27247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.378021][T27247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.392566][T27247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.395591][T27472] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5910'. [ 733.399758][T27247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.437313][T27247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.437805][T27472] x_tables: unsorted underflow at hook 2 [ 733.498316][T27247] hsr_slave_0: entered promiscuous mode [ 733.506325][T27247] hsr_slave_1: entered promiscuous mode [ 733.513371][T27247] debugfs: 'hsr0' already exists in 'hsr' [ 733.519411][T27247] Cannot create hsr debugfs directory [ 733.894610][T27247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 733.969933][T27497] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5917'. [ 734.107293][T27247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 734.278261][T27247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 734.543524][ T5623] Bluetooth: hci5: command tx timeout [ 734.580815][T27247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 734.632496][T27531] syzkaller0: entered promiscuous mode [ 734.653973][T27531] syzkaller0: entered allmulticast mode [ 735.328528][T19854] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 735.359389][T26937] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 735.368000][T19854] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 735.440014][T27247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 735.473185][T26937] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 735.491327][T27247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.499528][T27247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 735.512938][T27247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.531604][T27247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 735.531896][T27582] validate_nla: 3 callbacks suppressed [ 735.531909][T27582] netlink: 'syz.0.5938': attribute type 58 has an invalid length. [ 735.568862][T27247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.589878][T27247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 735.609805][T27247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.641796][T27589] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 735.797005][T27599] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 736.027921][T27247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.064856][T17524] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 736.112312][T27247] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.139438][T19857] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.146653][T19857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.241647][T19857] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.249252][T19857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.567982][T27647] netlink: 'syz.0.5957': attribute type 12 has an invalid length. [ 736.634329][T27647] bond6: option primary_reselect: invalid value (255) [ 736.649440][T27647] bond6 (unregistering): Released all slaves [ 736.685470][T27654] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 736.980068][T27667] netlink: 'syz.4.5963': attribute type 11 has an invalid length. [ 737.000355][T27670] netlink: 'syz.2.5964': attribute type 18 has an invalid length. [ 737.057601][T19855] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.075008][T27670] netlink: 'syz.2.5964': attribute type 18 has an invalid length. [ 737.092878][T19855] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.141648][T19855] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.164148][T19855] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.174303][T27680] __nla_validate_parse: 11 callbacks suppressed [ 737.174319][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5967'. [ 737.189372][T27676] netlink: 'syz.1.5966': attribute type 1 has an invalid length. [ 737.293403][T27685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5968'. [ 737.330075][T27685] bridge6: port 1(dummy0) entered blocking state [ 737.356378][T27685] bridge6: port 1(dummy0) entered disabled state [ 737.373937][T27685] dummy0: entered allmulticast mode [ 737.391391][T27685] dummy0: entered promiscuous mode [ 737.400907][T27692] netlink: 'syz.0.5970': attribute type 4 has an invalid length. [ 737.409405][T27692] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5970'. [ 737.426705][T27247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.436766][T27692] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.5970'. [ 737.581976][T27247] veth0_vlan: entered promiscuous mode [ 737.619923][T27247] veth1_vlan: entered promiscuous mode [ 737.659519][T27703] netlink: 'syz.1.5972': attribute type 11 has an invalid length. [ 737.707558][T27247] veth0_macvtap: entered promiscuous mode [ 737.783180][T27247] veth1_macvtap: entered promiscuous mode [ 737.897098][T27712] netlink: 'syz.4.5975': attribute type 8 has an invalid length. [ 737.907115][T27247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.963909][T27715] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5976'. [ 737.975376][T27247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.029372][T19858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.070654][T19858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.116465][T19858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.149018][T19858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.341815][T19852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.372417][T19852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.484294][T19852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.516978][T19852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.581520][T27743] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 738.596673][T27743] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 738.941358][T27765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5989'. [ 738.957776][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5991'. [ 739.096034][T27769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5992'. [ 739.221643][T27772] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5993'. [ 739.422925][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 739.671637][T27793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5998'. [ 740.395497][T27829] set match dimension is over the limit! [ 740.959444][T27851] netlink: 'syz.0.6018': attribute type 1 has an invalid length. [ 741.056785][T27851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 741.138826][T27855] bond6: (slave geneve2): making interface the new active one [ 741.181946][T27865] netlink: 'syz.2.6023': attribute type 2 has an invalid length. [ 741.189838][T27855] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 741.216531][T27865] syzkaller0: entered promiscuous mode [ 741.226596][T27865] syzkaller0: entered allmulticast mode [ 741.466926][T27879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.497322][T27884] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 742.164012][T27912] netlink: 'syz.2.6032': attribute type 27 has an invalid length. [ 742.278915][T27917] vcan1: entered promiscuous mode [ 742.308382][T27917] vcan1: entered allmulticast mode [ 742.554446][T27941] vlan0: entered promiscuous mode [ 742.572469][T27938] syzkaller0: entered promiscuous mode [ 742.585871][T27938] syzkaller0: entered allmulticast mode [ 742.607850][T27946] __nla_validate_parse: 3 callbacks suppressed [ 742.607869][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6043'. [ 742.626815][T27946] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6043'. [ 742.838017][T27956] syzkaller0: entered promiscuous mode [ 742.854804][T27956] syzkaller0: entered allmulticast mode [ 742.997651][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6049'. [ 743.062331][T27957] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6045'. [ 743.078213][T27961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6048'. [ 743.111041][T27971] netlink: 'syz.4.6051': attribute type 58 has an invalid length. [ 743.122895][T27971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6051'. [ 743.206013][T27965] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 743.238443][T27974] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 743.256063][T27979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6052'. [ 743.278736][T27974] bond7 (unregistering): Released all slaves [ 743.305666][T27983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6052'. [ 743.329370][T27965] xfrm0 speed is unknown, defaulting to 1000 [ 743.488857][T27987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.493905][T27987] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6054'. [ 743.734102][T27999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6059'. [ 743.801227][T28001] bond8: Unable to set down delay as MII monitoring is disabled [ 743.818104][T28001] bond8 (unregistering): Released all slaves [ 744.012341][T28018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.370364][T27965] lo speed is unknown, defaulting to 1000 [ 745.231561][T28046] Cannot find add_set index 0 as target [ 745.457206][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 745.471343][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 745.480500][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 745.489763][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 745.499113][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 745.732386][T28059] netlink: 'syz.3.6076': attribute type 16 has an invalid length. [ 745.760761][T28059] netlink: 'syz.3.6076': attribute type 17 has an invalid length. [ 745.870912][T28059] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.878801][T28059] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.049390][T28059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.070174][T28059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.081441][T28069] netlink: 'syz.2.6079': attribute type 24 has an invalid length. [ 746.135961][T28070] netlink: 'syz.2.6079': attribute type 23 has an invalid length. [ 746.195893][T19860] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.220779][T19860] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.247730][T19860] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.283265][T19860] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.502478][T28095] syzkaller0: entered promiscuous mode [ 746.511176][T28095] syzkaller0: entered allmulticast mode [ 746.614465][T28099] blkio.reset_stats is deprecated [ 746.627965][ T1687] block nbd3: Possible stuck request ffff8880276c0000: control (read@0,1024B). Runtime 90 seconds [ 746.638853][ T1687] block nbd3: Possible stuck request ffff8880276c01c0: control (read@1024,1024B). Runtime 90 seconds [ 746.651422][ T1687] block nbd3: Possible stuck request ffff8880276c0380: control (read@2048,1024B). Runtime 90 seconds [ 746.662777][ T1687] block nbd3: Possible stuck request ffff8880276c0540: control (read@3072,1024B). Runtime 90 seconds [ 746.906124][T28049] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 746.935742][T28049] xfrm0 speed is unknown, defaulting to 1000 [ 747.582897][ T5623] Bluetooth: hci2: command tx timeout [ 747.741421][T28049] lo speed is unknown, defaulting to 1000 [ 747.902853][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 748.079964][T28170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.323121][T19856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.348393][T19856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.393204][T28187] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 748.453128][T28182] __nla_validate_parse: 8 callbacks suppressed [ 748.453147][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6107'. [ 748.544357][T28194] lo: Caught tx_queue_len zero misconfig [ 748.570102][T28049] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.579605][T28049] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.603885][T28049] bridge_slave_0: entered allmulticast mode [ 748.617478][T28049] bridge_slave_0: entered promiscuous mode [ 748.648151][T28200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6109'. [ 748.665000][T28049] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.683916][T28049] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.713172][T28049] bridge_slave_1: entered allmulticast mode [ 748.735594][T28049] bridge_slave_1: entered promiscuous mode [ 748.820888][T28049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.854805][T28049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.873872][T28203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6110'. [ 748.946329][T28049] team0: Port device team_slave_0 added [ 748.971338][T28049] team0: Port device team_slave_1 added [ 749.043723][T28213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6112'. [ 749.091614][T28049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.117466][T28049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.177876][T28049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.228152][T28049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.242509][T28224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6115'. [ 749.252017][T28049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.320327][T28049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.426424][T28235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6114'. [ 749.456523][T28235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6114'. [ 749.470176][T28238] openvswitch: netlink: IP tunnel TTL not specified. [ 749.480686][T28238] netlink: 'syz.4.6120': attribute type 3 has an invalid length. [ 749.625761][T28241] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6121'. [ 749.635447][T28049] hsr_slave_0: entered promiscuous mode [ 749.663438][ T5623] Bluetooth: hci2: command tx timeout [ 749.674990][T28049] hsr_slave_1: entered promiscuous mode [ 749.681988][T28049] debugfs: 'hsr0' already exists in 'hsr' [ 749.688239][T28049] Cannot create hsr debugfs directory [ 749.696824][T28241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6121'. [ 749.722756][T28243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'. [ 749.726158][T28241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.947815][T28251] netlink: 'syz.1.6126': attribute type 1 has an invalid length. [ 750.279905][T28049] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.322091][T28049] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.358106][T28269] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 750.439007][T28271] IPv6: sit2: Disabled Multicast RS [ 750.499608][T28049] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.530480][T28049] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.642406][T28049] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.657829][T28049] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.833617][T28049] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.858018][T28049] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.355101][T28320] xt_l2tp: missing protocol rule (udp|l2tpip) [ 751.356217][T28049] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 751.375399][T28319] xt_l2tp: missing protocol rule (udp|l2tpip) [ 751.390908][T28049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 751.410376][T28049] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 751.452210][T28049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 751.476668][T28049] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 751.515547][T28049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 751.622467][T28049] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 751.651536][T28049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.744951][ T5623] Bluetooth: hci2: command tx timeout [ 751.769308][T28342] netlink: 'syz.2.6148': attribute type 1 has an invalid length. [ 751.811321][T28342] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 751.972069][T28049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.030467][T28361] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 752.100945][T28049] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.128826][T19856] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.136125][T19856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.174646][T19860] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.181864][T19860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.250524][T28376] tipc: Enabling of bearer rejected, failed to enable media [ 752.436889][T28384] netlink: 'syz.3.6158': attribute type 1 has an invalid length. [ 752.920774][T28404] bond1: Unable to set up delay as MII monitoring is disabled [ 752.932007][T28404] bond1 (unregistering): Released all slaves [ 753.250278][T28441] x_tables: duplicate underflow at hook 3 [ 753.277649][T28441] IPVS: sed: FWM 3 0x00000003 - no destination available [ 753.369117][T28049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.488072][T28049] veth0_vlan: entered promiscuous mode [ 753.531411][T28049] veth1_vlan: entered promiscuous mode [ 753.615805][T28458] __nla_validate_parse: 19 callbacks suppressed [ 753.615822][T28458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6176'. [ 753.652549][T28049] veth0_macvtap: entered promiscuous mode [ 753.685098][T28049] veth1_macvtap: entered promiscuous mode [ 753.736243][T28049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.770780][T28049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.798399][T19857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.820601][T19857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.834141][ T5623] Bluetooth: hci2: command tx timeout [ 753.867102][T19857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.904462][T19857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.178081][T19860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.196076][T19860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.248559][T19860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.275601][T19860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.526227][T28505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6190'. [ 754.580025][T28507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6189'. [ 754.870259][T28518] Bluetooth: MGMT ver 1.23 [ 755.057288][T28524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6196'. [ 755.095222][T28524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6196'. [ 755.116303][T28526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6197'. [ 755.163766][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 755.187111][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 755.195858][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 755.205917][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 755.215193][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 755.264193][T28531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6198'. [ 755.359649][T28533] veth1_macvtap: renamed from vlan0 [ 755.623216][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6203'. [ 755.891991][T17235] syz_tun (unregistering): left allmulticast mode [ 755.939752][T28570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6208'. [ 756.107427][T19855] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.144663][T19855] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.232368][T19855] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.379842][T28602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6213'. [ 756.417265][T19856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.461118][T19856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.559042][T19855] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.707835][T28527] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 756.822044][T19856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.833549][T19856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.855402][T28527] xfrm0 speed is unknown, defaulting to 1000 [ 756.968841][T19856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.994360][T19856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.050811][T28624] 8021q: VLANs not supported on ip_vti0 [ 757.229415][T19856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.251577][T19856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.269798][ T5629] Bluetooth: hci4: command tx timeout [ 757.650234][T28655] netlink: 'syz.3.6227': attribute type 7 has an invalid length. [ 757.688466][T28655] netlink: 'syz.3.6227': attribute type 8 has an invalid length. [ 758.199882][T19856] vlan2: left allmulticast mode [ 758.241066][T19856] bridge_slave_0: left allmulticast mode [ 758.271409][T19856] vlan2: left promiscuous mode [ 758.281512][T19856] bridge_slave_0: left promiscuous mode [ 758.297695][T19856] bridge0: port 3(vlan2) entered disabled state [ 758.352429][T19856] pim6reg: left allmulticast mode [ 758.358279][T19856] pimreg5001287: left allmulticast mode [ 758.689503][T19856] bond2 (unregistering): (slave gretap1): Releasing active interface [ 758.723552][T19856] team0: Port device geneve1 removed [ 758.769863][T19856] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 758.778454][T19856] bridge5 (unregistering): left allmulticast mode [ 758.795693][T19856] bond0 (unregistering): Released all slaves [ 758.808132][T19856] bond1 (unregistering): Released all slaves [ 758.826530][T19856] bond2 (unregistering): Released all slaves [ 758.845419][T19856] bond3 (unregistering): Released all slaves [ 758.861745][T19856] bond4 (unregistering): (slave veth3): Releasing active interface [ 758.880298][T19856] bond4 (unregistering): Released all slaves [ 758.894098][T19856] bond5 (unregistering): Released all slaves [ 758.908253][T19856] bond6 (unregistering): Released all slaves [ 758.921443][T19856] bond7 (unregistering): Released all slaves [ 758.953877][T28699] bond10: entered promiscuous mode [ 758.959290][T28699] bond10: entered allmulticast mode [ 758.965327][T28699] 8021q: adding VLAN 0 to HW filter on device bond10 [ 758.973646][ T5809] xfrm0 speed is unknown, defaulting to 1000 [ 758.980298][T28527] lo speed is unknown, defaulting to 1000 [ 758.996591][ T5809] syz1: Port: 1 Link DOWN [ 759.036563][T28723] __nla_validate_parse: 6 callbacks suppressed [ 759.036583][T28723] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6243'. [ 759.060831][T19857] smc: removing ib device syz1 [ 759.131153][ T5809] xfrm0 speed is unknown, defaulting to 1000 [ 759.348452][ T5629] Bluetooth: hci4: command tx timeout [ 759.415762][T28735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6247'. [ 759.457707][T19857] smbdirect: ib_dev[syz1] removed [ 759.470248][T28737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6247'. [ 760.028942][T28763] netlink: 'syz.1.6249': attribute type 1 has an invalid length. [ 760.343364][T28769] gre1: entered promiscuous mode [ 760.350151][T28777] xt_hashlimit: size too large, truncated to 1048576 [ 760.352969][T28769] gre1: entered allmulticast mode [ 760.776480][T28527] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.814918][T28527] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.839979][T28527] bridge_slave_0: entered allmulticast mode [ 760.867283][T28527] bridge_slave_0: entered promiscuous mode [ 760.892329][T28527] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.903337][T28527] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.910985][T28527] bridge_slave_1: entered allmulticast mode [ 760.920170][T28527] bridge_slave_1: entered promiscuous mode [ 760.954871][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 761.041499][T28527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.061680][T28527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.280763][T28527] team0: Port device team_slave_0 added [ 761.305317][T28527] team0: Port device team_slave_1 added [ 761.426442][ T5629] Bluetooth: hci4: command tx timeout [ 761.467572][T28527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.482697][T28527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.554506][T28527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.599202][T28527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.612694][T28527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.676580][T28527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.780542][T28527] hsr_slave_0: entered promiscuous mode [ 761.788392][T28527] hsr_slave_1: entered promiscuous mode [ 761.820319][T28527] debugfs: 'hsr0' already exists in 'hsr' [ 761.830133][T28527] Cannot create hsr debugfs directory [ 762.811028][T19856] tipc: Left network mode [ 762.999091][T28762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 763.413449][T28800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.514328][ T5629] Bluetooth: hci4: command tx timeout [ 763.525861][T28527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 763.554726][T28527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.606701][T28818] ip6gre1: entered allmulticast mode [ 763.646307][T28828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6263'. [ 763.706139][T28527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 763.740076][T28527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.765358][T28527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 763.794996][T28527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.946112][T28527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 763.987755][T28527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.011208][T28837] syzkaller0: entered promiscuous mode [ 764.018094][T28837] syzkaller0: entered allmulticast mode [ 764.037239][T28849] vlan2: entered promiscuous mode [ 764.042306][T28849] bridge0: entered promiscuous mode [ 764.543083][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 765.114613][T28875] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6275'. [ 765.129878][T28876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6276'. [ 765.380859][T28880] syzkaller0: entered promiscuous mode [ 765.401199][T28880] syzkaller0: entered allmulticast mode [ 765.427237][T28888] netlink: 'syz.2.6278': attribute type 1 has an invalid length. [ 765.476331][T28527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.693712][T28888] 8021q: adding VLAN 0 to HW filter on device bond11 [ 765.711599][T28885] bond2: (slave veth0_to_bond): Releasing backup interface [ 765.737472][T28896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6280'. [ 765.752132][T28885] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 765.835350][T28892] macvlan2: entered promiscuous mode [ 765.850076][T28892] macvlan2: entered allmulticast mode [ 765.874038][T28892] bond11: entered promiscuous mode [ 765.885048][T28892] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 765.895649][T28892] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 765.914266][T28892] bond11: left promiscuous mode [ 765.991801][T19856] hsr_slave_0: left promiscuous mode [ 766.021058][T19856] hsr_slave_1: left promiscuous mode [ 766.070980][T19856] veth1_macvtap: left promiscuous mode [ 766.090128][T19856] veth0_macvtap: left promiscuous mode [ 766.104665][T19856] veth1_vlan: left promiscuous mode [ 766.121356][T19856] veth0_vlan: left promiscuous mode [ 766.510581][T19852] smc: removing ib device syz0 [ 766.846475][T17522] syz0: Port: 1 Link DOWN [ 766.905578][T28527] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.938414][T19852] smbdirect: ib_dev[syz0] removed [ 766.984863][T19862] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.992051][T19862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.048711][T19862] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.055915][T19862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.874852][T28981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6296'. [ 768.102271][T28991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6298'. [ 768.234528][T28995] xt_hashlimit: size too large, truncated to 1048576 [ 772.271985][T19862] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.281409][T19862] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.533792][T29033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6302'. [ 772.571784][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6302'. [ 772.675625][T29045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6305'. [ 772.704184][T19856] IPVS: stop unused estimator thread 0... [ 772.932225][T28527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.198990][T29076] tipc: Enabled bearer , priority 0 [ 773.282178][T29081] can: request_module (can-proto-5) failed. [ 773.298066][T29087] openvswitch: netlink: Missing key (keys=40, expected=100) [ 773.376787][T29076] syzkaller0: entered promiscuous mode [ 773.384676][T29076] syzkaller0: entered allmulticast mode [ 773.391136][T29076] tipc: Resetting bearer [ 773.526186][T29101] netlink: 'syz.3.6318': attribute type 10 has an invalid length. [ 773.567730][T19862] tipc: Resetting bearer [ 773.575543][T29074] tipc: Resetting bearer [ 776.487751][T29074] tipc: Disabling bearer [ 776.508735][T29101] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.519430][T29101] bond0: (slave team0): Enslaving as an active interface with an up link [ 776.696448][T29129] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.6321'. [ 776.715348][ T1687] block nbd3: Possible stuck request ffff8880276c0000: control (read@0,1024B). Runtime 120 seconds [ 776.728581][ T1687] block nbd3: Possible stuck request ffff8880276c01c0: control (read@1024,1024B). Runtime 120 seconds [ 776.739750][ T1687] block nbd3: Possible stuck request ffff8880276c0380: control (read@2048,1024B). Runtime 120 seconds [ 776.751309][ T1687] block nbd3: Possible stuck request ffff8880276c0540: control (read@3072,1024B). Runtime 120 seconds [ 776.786769][T28527] veth0_vlan: entered promiscuous mode [ 776.811931][T28527] veth1_vlan: entered promiscuous mode [ 776.879887][T28527] veth0_macvtap: entered promiscuous mode [ 776.892278][T28527] veth1_macvtap: entered promiscuous mode [ 776.927690][T28527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.973999][T29139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6324'. [ 776.977402][T28527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.003749][T29134] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 777.029398][T29135] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 777.085241][T19860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.100826][T19860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.140268][T29148] netlink: 'syz.3.6326': attribute type 4 has an invalid length. [ 777.151345][T19860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.171297][T19860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.175577][T29148] netlink: 'syz.3.6326': attribute type 4 has an invalid length. [ 777.274143][T29148] syzkaller0: entered promiscuous mode [ 777.279779][T29148] syzkaller0: entered allmulticast mode [ 777.388151][T29155] syzkaller0: entered promiscuous mode [ 777.394613][T29155] syzkaller0: entered allmulticast mode [ 777.434394][T29155] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 777.719207][T29165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.505353][T19860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.513432][T19860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.616146][T19862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.632377][T19862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.712316][T29182] team0: Device xfrm0 is of different type [ 780.775101][T29188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6193'. [ 780.786595][T29188] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6193'. [ 780.802231][T29190] netlink: 'syz.3.6338': attribute type 39 has an invalid length. [ 781.016088][T29206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6342'. [ 781.079943][T29212] netlink: 400 bytes leftover after parsing attributes in process `syz.0.6344'. [ 781.120563][T29214] netlink: 400 bytes leftover after parsing attributes in process `syz.0.6344'. [ 781.335242][T29228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6349'. [ 781.366468][T29228] block nbd0: Unsupported socket: should be TCP or UNIX. [ 781.594300][T29244] netlink: 'syz.3.6356': attribute type 29 has an invalid length. [ 781.684648][T29250] netlink: 'syz.1.6358': attribute type 1 has an invalid length. [ 781.751309][T29250] netlink: 'syz.1.6358': attribute type 2 has an invalid length. [ 781.774738][T29259] netlink: 'syz.0.6359': attribute type 32 has an invalid length. [ 781.798992][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6359'. [ 781.861340][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 781.879652][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 781.896296][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 781.914875][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 781.928141][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 781.984680][T29259] bond1: option coupled_control: invalid value (192) [ 782.040848][T29259] bond1 (unregistering): Released all slaves [ 782.309143][T29279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6363'. [ 782.446863][T29295] netlink: 'syz.4.6366': attribute type 1 has an invalid length. [ 782.522105][T29295] macvlan2: entered promiscuous mode [ 782.546743][T29295] macvlan2: entered allmulticast mode [ 782.723158][T29310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6370'. [ 782.787000][T29310] bond1: Invalid ad_actor_system MAC address. [ 782.793564][T29310] bond1: option ad_actor_system: invalid value (1) [ 782.882553][T29310] bond1 (unregistering): Released all slaves [ 783.133414][T29315] syzkaller0: entered promiscuous mode [ 783.139025][T29315] syzkaller0: entered allmulticast mode [ 783.156978][T29263] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 783.165265][T29263] lo speed is unknown, defaulting to 1000 [ 784.000437][ T5623] Bluetooth: hci0: command tx timeout [ 784.030830][T29344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.073413][ T5623] Bluetooth: hci0: command tx timeout [ 786.845778][T29375] syzkaller0: entered promiscuous mode [ 786.855044][T29375] syzkaller0: entered allmulticast mode [ 786.918316][T29375] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 787.391845][T29263] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.399388][T29263] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.410409][T29263] bridge_slave_0: entered allmulticast mode [ 787.419303][T29263] bridge_slave_0: entered promiscuous mode [ 787.435023][T29263] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.442436][T29263] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.450524][T29263] bridge_slave_1: entered allmulticast mode [ 787.460825][T29263] bridge_slave_1: entered promiscuous mode [ 787.531371][T29404] syzkaller1: entered promiscuous mode [ 787.539049][T29404] syzkaller1: entered allmulticast mode [ 787.550289][T29263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.563481][T29263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.672590][T29263] team0: Port device team_slave_0 added [ 787.698768][T29263] team0: Port device team_slave_1 added [ 787.778778][T29263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.795824][T29263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.829544][T29263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.850203][T29263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.859288][T29263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.886213][T29263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.036857][T29263] hsr_slave_0: entered promiscuous mode [ 788.059438][T29263] hsr_slave_1: entered promiscuous mode [ 788.078189][T29263] debugfs: 'hsr0' already exists in 'hsr' [ 788.091560][T29263] Cannot create hsr debugfs directory [ 788.157547][ T5623] Bluetooth: hci0: command tx timeout [ 788.195239][T29440] netlink: 'syz.3.6398': attribute type 3 has an invalid length. [ 788.203716][T29440] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6398'. [ 788.289304][T29443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6399'. [ 788.351088][T29445] bond1 (unregistering): Released all slaves [ 788.363157][T17524] IPVS: starting estimator thread 0... [ 788.463818][T29448] IPVS: using max 39 ests per chain, 93600 per kthread [ 788.550981][T29263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.585345][T29452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6402'. [ 788.637931][T29453] netlink: 'syz.4.6402': attribute type 1 has an invalid length. [ 788.658009][T29455] netlink: 'syz.0.6403': attribute type 1 has an invalid length. [ 788.666601][T29452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6402'. [ 788.727586][T29263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.806626][T29462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6403'. [ 788.831193][T29455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 788.851593][T29455] bond1: (slave bond2): making interface the new active one [ 788.862063][T29455] bond1: (slave bond2): Enslaving as an active interface with an up link [ 788.888597][T29457] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 788.937218][T29263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.990259][T29462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 789.111404][T29263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.197133][T29474] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6409'. [ 789.304147][T29476] No such timeout policy "syz0" [ 789.395733][T29476] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 789.435421][T29476] lo speed is unknown, defaulting to 1000 [ 789.490954][T29481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6412'. [ 790.130216][T29263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 790.177913][T29263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 790.220081][T29263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 790.232918][ T5623] Bluetooth: hci0: command tx timeout [ 790.236893][T29263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 790.251726][T29263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 790.284153][T29263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 790.444674][T29263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 790.461266][T29263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.488063][T29515] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001 [ 790.522466][T29517] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6421'. [ 790.569623][T29517] syzkaller0: entered promiscuous mode [ 790.581678][T29517] syzkaller0: entered allmulticast mode [ 790.590285][T29517] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6421'. [ 791.026747][T29263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.046866][T29546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6430'. [ 791.056578][T29263] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.077413][T19855] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.084592][T19855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.101990][T29550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.120736][T29549] netlink: 'syz.4.6431': attribute type 1 has an invalid length. [ 791.131130][T19855] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.138358][T19855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.223964][T29547] syzkaller0: entered promiscuous mode [ 791.230726][T29547] syzkaller0: entered allmulticast mode [ 791.332099][T29556] netlink: 'syz.1.6433': attribute type 1 has an invalid length. [ 791.425253][T29556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.568623][T29556] bond1: (slave geneve2): making interface the new active one [ 791.591284][T29556] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 791.662511][T29572] netlink: 'syz.4.6437': attribute type 6 has an invalid length. [ 792.014696][T29595] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 792.338097][T29263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.504187][T29628] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 792.539443][T29263] veth0_vlan: entered promiscuous mode [ 792.640433][T29263] veth1_vlan: entered promiscuous mode [ 792.726692][T29263] veth0_macvtap: entered promiscuous mode [ 792.770659][T29263] veth1_macvtap: entered promiscuous mode [ 792.786133][T29645] IPv6: NLM_F_REPLACE set, but no existing node found! [ 792.794754][T29642] syzkaller0: entered promiscuous mode [ 792.800285][T29642] syzkaller0: entered allmulticast mode [ 792.832151][T29645] netlink: 'syz.1.6455': attribute type 2 has an invalid length. [ 792.841832][T29645] netlink: 'syz.1.6455': attribute type 2 has an invalid length. [ 792.912035][T29263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.930296][T29263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.946495][T19854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.964303][T19854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.989397][T19854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.009562][T19854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.067276][T29653] netlink: 'syz.0.6458': attribute type 1 has an invalid length. [ 793.208101][T19857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.228391][T19857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.297238][T19859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.309142][T19859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.651342][T29678] netlink: 'syz.3.6467': attribute type 4 has an invalid length. [ 793.696976][T29678] __nla_validate_parse: 5 callbacks suppressed [ 793.696992][T29678] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6467'. [ 793.788072][T17526] IPVS: starting estimator thread 0... [ 793.845145][T29678] .`: renamed from bond0 [ 793.883135][T29692] IPVS: using max 26 ests per chain, 62400 per kthread [ 794.359049][T29719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6479'. [ 794.707360][T29742] netlink: 'syz.0.6487': attribute type 2 has an invalid length. [ 794.730382][T29742] netlink: 'syz.0.6487': attribute type 1 has an invalid length. [ 794.841876][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6489'. [ 794.851368][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6489'. [ 794.968762][T29755] netlink: 'syz.4.6490': attribute type 4 has an invalid length. [ 794.990054][T29755] netlink: 'syz.4.6490': attribute type 9 has an invalid length. [ 795.276219][T29762] netlink: 'syz.4.6494': attribute type 2 has an invalid length. [ 795.315806][T29762] : entered promiscuous mode [ 795.430484][T29768] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 795.490768][T29767] Bluetooth: MGMT ver 1.23 [ 795.566142][T29776] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6497'. [ 795.584923][T29767] team0: Device ipvlan2 is already an upper device of the team interface [ 795.645546][T29777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6497'. [ 795.674882][T29777] netlink: 'syz.3.6497': attribute type 1 has an invalid length. [ 795.703753][T29777] netlink: 'syz.3.6497': attribute type 2 has an invalid length. [ 795.728709][T29783] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6498'. [ 795.768634][T29784] x_tables: duplicate underflow at hook 2 [ 795.793222][T29782] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6498'. [ 795.835602][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 795.866247][T29795] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6502'. [ 795.906109][T29786] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 796.258238][T29816] syzkaller0: entered promiscuous mode [ 796.281966][T29816] syzkaller0: entered allmulticast mode [ 796.332391][T29819] pim6reg527: entered allmulticast mode [ 796.370368][T29816] team1: entered promiscuous mode [ 796.378085][T29816] team1: entered allmulticast mode [ 796.633972][T29840] netlink: 'syz.2.6516': attribute type 5 has an invalid length. [ 796.828829][T29851] netlink: 'syz.0.6519': attribute type 62 has an invalid length. [ 796.851774][T29851] openvswitch: netlink: IP tunnel dst address not specified [ 796.884576][T29859] sch_fq: defrate 0 ignored. [ 797.193604][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 797.333661][T29879] tipc: Started in network mode [ 797.344012][T29879] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 797.367902][T29879] tipc: Enabled bearer , priority 10 [ 797.705309][T29905] syzkaller0: entered promiscuous mode [ 797.731453][T29905] syzkaller0: entered allmulticast mode [ 797.757822][T29905] tc action pedit offset 136 out of bounds [ 798.483271][ T3217] tipc: Node number set to 4269801492 [ 798.528808][T29957] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 798.539231][T29957] bond1 (unregistering): Released all slaves [ 798.798465][T29969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.830116][T29973] tipc: Started in network mode [ 798.836299][T29973] tipc: Node identity d655d2f412bd, cluster identity 4711 [ 798.845030][T29973] tipc: Enabled bearer , priority 0 [ 798.857084][T29973] syzkaller0: entered promiscuous mode [ 798.873841][T29973] syzkaller0: entered allmulticast mode [ 798.885485][T29976] block nbd0: not configured, cannot reconfigure [ 798.920702][T29977] Cannot find set identified by id 0 to match [ 798.995889][T29972] tipc: Resetting bearer [ 799.065446][T29972] tipc: Disabling bearer [ 799.301243][T29993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.310879][T29993] bond0: (slave bond1): Enslaving as an active interface with an up link [ 799.688916][T30003] validate_nla: 2 callbacks suppressed [ 799.688937][T30003] netlink: 'syz.1.6568': attribute type 1 has an invalid length. [ 799.785727][T30003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 799.809325][T30026] __nla_validate_parse: 21 callbacks suppressed [ 799.809337][T30026] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6573'. [ 799.859421][T30017] bond2: (slave gretap1): making interface the new active one [ 799.886652][T30017] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 800.092351][T30032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.235989][T30041] netlink: 'syz.3.6577': attribute type 10 has an invalid length. [ 800.273289][T30048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6580'. [ 800.275631][T30043] syzkaller0: entered promiscuous mode [ 800.298943][T30043] syzkaller0: entered allmulticast mode [ 800.312495][T30041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.339829][T30041] .`: (slave batadv0): Enslaving as an active interface with an up link [ 800.390674][T30041] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6577'. [ 803.681914][T30074] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6583'. [ 803.717183][T30074] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6583'. [ 803.727009][T30076] netlink: 'syz.1.6584': attribute type 2 has an invalid length. [ 803.738964][T30077] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6583'. [ 803.755313][T30077] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6583'. [ 803.840851][T30081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6585'. [ 803.999236][T30101] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6588'. [ 804.080231][T30104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.092062][T30104] netlink: 'syz.4.6589': attribute type 1 has an invalid length. [ 804.121922][T30104] netlink: 'syz.4.6589': attribute type 11 has an invalid length. [ 804.142000][T30104] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6589'. [ 804.322111][T30115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 804.329423][T30115] IPv6: NLM_F_CREATE should be set when creating new route [ 804.336758][T30115] IPv6: NLM_F_CREATE should be set when creating new route [ 804.344056][T30115] IPv6: NLM_F_CREATE should be set when creating new route [ 804.902118][T30153] syzkaller1: entered promiscuous mode [ 804.910282][T30153] syzkaller1: entered allmulticast mode [ 804.929648][T30157] __nla_validate_parse: 3 callbacks suppressed [ 804.929667][T30157] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6606'. [ 804.961709][T30157] netlink: 'syz.3.6606': attribute type 21 has an invalid length. [ 804.973305][T30157] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6606'. [ 805.204547][T30181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6610'. [ 805.259458][T30125] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 805.353971][T30187] netlink: 'syz.2.6615': attribute type 1 has an invalid length. [ 805.366350][T30185] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 805.393130][T30187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 805.440941][T30187] bond2: (slave veth3): Enslaving as an active interface with a down link [ 805.450171][T30185] lo speed is unknown, defaulting to 1000 [ 805.472025][T30187] bond2: (slave veth0_to_bond): making interface the new active one [ 805.482441][T30187] veth0_to_bond: entered promiscuous mode [ 805.489691][T30187] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 805.641141][T30189] netlink: 'syz.0.6614': attribute type 1 has an invalid length. [ 805.687645][T30189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 805.716645][T30185] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6614'. [ 805.851801][T30185] bond4: (slave geneve2): making interface the new active one [ 805.896823][T30185] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 805.986040][T30203] bond3: option lp_interval: invalid value (0) [ 805.992451][T30203] bond3: option lp_interval: allowed values 1 - 2147483647 [ 806.017899][T30203] bond3 (unregistering): Released all slaves [ 806.027230][T30207] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6618'. [ 806.238634][T30219] x_tables: unsorted entry at hook 3 [ 806.247782][T30219] x_tables: unsorted entry at hook 3 [ 806.387329][T30225] netlink: 'syz.2.6626': attribute type 1 has an invalid length. [ 806.417404][T30225] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6626'. [ 806.459830][T30225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6626'. [ 806.516843][T30234] netlink: 'syz.4.6627': attribute type 21 has an invalid length. [ 806.559795][ T5623] Bluetooth: hci0: command 0x0c20 tx timeout [ 806.588050][T30234] IPv6: NLM_F_CREATE should be specified when creating new route [ 806.678587][T30234] netlink: 'syz.4.6627': attribute type 1 has an invalid length. [ 806.780688][T30243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.799492][ T1687] block nbd3: Possible stuck request ffff8880276c0000: control (read@0,1024B). Runtime 150 seconds [ 806.811254][ T1687] block nbd3: Possible stuck request ffff8880276c01c0: control (read@1024,1024B). Runtime 150 seconds [ 806.822535][ T1687] block nbd3: Possible stuck request ffff8880276c0380: control (read@2048,1024B). Runtime 150 seconds [ 806.834749][ T1687] block nbd3: Possible stuck request ffff8880276c0540: control (read@3072,1024B). Runtime 150 seconds [ 807.007791][T30253] netlink: 'syz.3.6637': attribute type 1 has an invalid length. [ 807.016655][T30253] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6637'. [ 807.068115][T30259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6633'. [ 807.088369][T30262] bridge_slave_1: left allmulticast mode [ 807.088949][T30259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6633'. [ 807.107034][T30262] bridge_slave_1: left promiscuous mode [ 807.134296][T30262] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.168675][T30262] bridge_slave_0: left allmulticast mode [ 807.175459][T30262] bridge_slave_0: left promiscuous mode [ 807.181531][T30262] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.422425][T30285] netlink: 'syz.2.6643': attribute type 21 has an invalid length. [ 807.439356][T30285] IPv6: NLM_F_CREATE should be specified when creating new route [ 807.464063][T30285] netlink: 'syz.2.6643': attribute type 1 has an invalid length. [ 807.541676][T30285] netlink: 'syz.2.6643': attribute type 2 has an invalid length. [ 807.996905][T30322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.086240][T30315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.166367][T30315] bond3 (unregistering): Released all slaves [ 808.678787][T30351] syzkaller0: entered promiscuous mode [ 808.685988][T30363] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 808.698067][T30363] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 808.703858][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 808.722583][T30351] syzkaller0: entered allmulticast mode [ 811.364844][T30415] SET target dimension over the limit! [ 812.287008][T30419] netlink: 'syz.3.6681': attribute type 1 has an invalid length. [ 812.319732][T30419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.329350][T30419] __nla_validate_parse: 7 callbacks suppressed [ 812.329368][T30419] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.6681'. [ 812.349494][T30419] 0ªX¹¦Dö»: renamed from gretap0 [ 812.364412][T30419] 0ªX¹¦Dö»: entered allmulticast mode [ 812.409882][T30419] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 812.507117][T30433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6687'. [ 813.001531][T30458] netlink: 'syz.3.6694': attribute type 1 has an invalid length. [ 813.099704][T30462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6695'. [ 813.128508][T30462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6695'. [ 813.262542][T30468] gretap0: entered promiscuous mode [ 813.275890][T30468] vlan2: entered promiscuous mode [ 813.533051][T30482] tipc: Enabled bearer , priority 0 [ 813.628948][T30490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6704'. [ 814.031135][T30508] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6711'. [ 814.041129][T30509] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6711'. [ 814.072503][T30511] syzkaller0: entered promiscuous mode [ 814.107457][T30511] syzkaller0: entered allmulticast mode [ 814.175633][T30511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6709'. [ 814.190558][T30513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6712'. [ 814.304937][T30480] tipc: Disabling bearer [ 814.675202][T30550] xt_TPROXY: Can be used only with -p tcp or -p udp [ 814.823962][T30563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6727'. [ 815.068812][T30580] netlink: 'syz.1.6730': attribute type 1 has an invalid length. [ 815.150525][T30584] syzkaller0: entered promiscuous mode [ 815.179310][T30584] syzkaller0: entered allmulticast mode [ 815.236767][T30597] sctp: [Deprecated]: syz.4.6733 (pid 30597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 815.236767][T30597] Use struct sctp_sack_info instead [ 815.401888][T19859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.416869][T19859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.647563][ T3217] IPVS: starting estimator thread 0... [ 815.756183][T30625] IPVS: using max 33 ests per chain, 79200 per kthread [ 815.903423][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 819.307649][T30678] netlink: 'syz.4.6749': attribute type 12 has an invalid length. [ 819.328617][T30678] netlink: 'syz.4.6749': attribute type 29 has an invalid length. [ 819.345061][T30678] __nla_validate_parse: 6 callbacks suppressed [ 819.345076][T30678] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6749'. [ 819.366840][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.366840][T30685] Use struct sctp_assoc_value instead [ 819.367732][T30678] netlink: 'syz.4.6749': attribute type 3 has an invalid length. [ 819.393875][T30678] netlink: 'syz.4.6749': attribute type 2 has an invalid length. [ 819.413287][T30678] netlink: 'syz.4.6749': attribute type 3 has an invalid length. [ 819.428690][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.428690][T30685] Use struct sctp_assoc_value instead [ 819.429123][T30678] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6749'. [ 819.449814][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.449814][T30685] Use struct sctp_assoc_value instead [ 819.462406][T30683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6751'. [ 819.469197][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.469197][T30685] Use struct sctp_assoc_value instead [ 819.501282][T30689] ip6erspan0: entered allmulticast mode [ 819.517348][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.517348][T30685] Use struct sctp_assoc_value instead [ 819.556832][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.556832][T30685] Use struct sctp_assoc_value instead [ 819.566168][T19862] veth0_to_bond: left promiscuous mode [ 819.608347][T30693] netlink: 'syz.3.6752': attribute type 1 has an invalid length. [ 819.618489][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.618489][T30685] Use struct sctp_assoc_value instead [ 819.681018][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.681018][T30685] Use struct sctp_assoc_value instead [ 819.722957][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.722957][T30685] Use struct sctp_assoc_value instead [ 819.774116][T30685] sctp: [Deprecated]: syz.0.6750 (pid 30685) Use of int in maxseg socket option. [ 819.774116][T30685] Use struct sctp_assoc_value instead [ 819.805181][T30693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 819.830004][T30690] syzkaller1: entered promiscuous mode [ 819.857163][T30690] syzkaller1: entered allmulticast mode [ 820.018019][T30713] tipc: Enabling not permitted [ 820.037445][T30713] tipc: Enabling of bearer rejected, failed to enable media [ 820.057422][T30718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6760'. [ 820.246789][T30728] vlan2: entered allmulticast mode [ 820.258273][T30728] veth1_virt_wifi: entered allmulticast mode [ 820.315010][T30731] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6764'. [ 820.324854][T30731] sctp: [Deprecated]: syz.2.6764 (pid 30731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.324854][T30731] Use struct sctp_sack_info instead [ 820.455776][T30735] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.463482][T30735] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.654893][T30747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6768'. [ 820.683332][T30735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.710948][T30735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.869913][T30757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6767'. [ 820.939019][T30735] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 820.959955][T30735] team1: left promiscuous mode [ 820.967010][T30735] team1: left allmulticast mode [ 820.972787][T30735] vlan2: left allmulticast mode [ 820.977727][T30735] veth1_virt_wifi: left allmulticast mode [ 821.113965][T19857] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.137017][T19857] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.163391][T19857] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.184891][T19857] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.202356][T30770] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6772'. [ 821.600955][T30805] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:9 [ 821.772197][T30811] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6784'. [ 821.825737][T30806] tipc: Started in network mode [ 821.834460][T30806] tipc: Node identity 122457367ed, cluster identity 4711 [ 821.844630][T30806] tipc: Enabled bearer , priority 0 [ 821.883803][T30815] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6785'. [ 821.933101][T30804] syzkaller0: entered promiscuous mode [ 821.943838][T30804] syzkaller0: entered allmulticast mode [ 821.953559][T30804] tipc: Resetting bearer [ 822.017917][T30798] tipc: Resetting bearer [ 825.384609][T30798] tipc: Disabling bearer [ 825.398225][T30848] 8021q: VLANs not supported on nlmon0 [ 825.414736][T26959] tipc: Node number set to 1827952438 [ 825.595152][T30861] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6801'. [ 825.816364][T30876] syzkaller0: entered promiscuous mode [ 825.845082][T30876] syzkaller0: entered allmulticast mode [ 825.949217][T30894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6812'. [ 826.005257][T30894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6812'. [ 826.229338][T30910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6815'. [ 826.318721][T30912] syzkaller0: entered promiscuous mode [ 826.325248][T30915] netlink: 'syz.0.6817': attribute type 1 has an invalid length. [ 826.335126][T30912] syzkaller0: entered allmulticast mode [ 826.430208][T30915] bond6: entered promiscuous mode [ 826.451048][T30915] 8021q: adding VLAN 0 to HW filter on device bond6 [ 826.569281][ T5623] block nbd0: Receive control failed (result -1) [ 826.579297][ T5623] [ 826.581662][ T5623] ====================================================== [ 826.588679][ T5623] WARNING: possible circular locking dependency detected [ 826.595733][ T5623] syzkaller #0 Not tainted [ 826.600245][ T5623] ------------------------------------------------------ [ 826.607349][ T5623] kworker/u9:2/5623 is trying to acquire lock: [ 826.613517][ T5623] ffff88805c6fd360 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 826.622955][ T5623] [ 826.622955][ T5623] but task is already holding lock: [ 826.630335][ T5623] ffff888028d38668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 826.639244][ T5623] [ 826.639244][ T5623] which lock already depends on the new lock. [ 826.639244][ T5623] [ 826.649657][ T5623] [ 826.649657][ T5623] the existing dependency chain (in reverse order) is: [ 826.658684][ T5623] [ 826.658684][ T5623] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 826.666354][ T5623] __mutex_lock+0x19d/0x1550 [ 826.671488][ T5623] nbd_queue_rq+0x373/0x1150 [ 826.676618][ T5623] blk_mq_dispatch_rq_list+0x499/0x1990 [ 826.682715][ T5623] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 826.689585][ T5623] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 826.696102][ T5623] blk_mq_run_work_fn+0x16c/0x300 [ 826.701772][ T5623] process_scheduled_works+0xa8e/0x14e0 [ 826.707876][ T5623] worker_thread+0xa47/0xfb0 [ 826.713019][ T5623] kthread+0x388/0x470 [ 826.717631][ T5623] ret_from_fork+0x514/0xb70 [ 826.722762][ T5623] ret_from_fork_asm+0x1a/0x30 [ 826.728156][ T5623] [ 826.728156][ T5623] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 826.735388][ T5623] __mutex_lock+0x19d/0x1550 [ 826.740525][ T5623] nbd_queue_rq+0xc1/0x1150 [ 826.745569][ T5623] blk_mq_dispatch_rq_list+0x499/0x1990 [ 826.751666][ T5623] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 826.758533][ T5623] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 826.765330][ T5623] blk_mq_run_work_fn+0x16c/0x300 [ 826.770896][ T5623] process_scheduled_works+0xa8e/0x14e0 [ 826.777163][ T5623] worker_thread+0xa47/0xfb0 [ 826.782304][ T5623] kthread+0x388/0x470 [ 826.786904][ T5623] ret_from_fork+0x514/0xb70 [ 826.792031][ T5623] ret_from_fork_asm+0x1a/0x30 [ 826.797331][ T5623] [ 826.797331][ T5623] -> #4 (set->srcu){.+.+}-{0:0}: [ 826.804466][ T5623] __synchronize_srcu+0xc9/0x2f0 [ 826.809958][ T5623] elevator_switch+0x1e8/0x7b0 [ 826.815262][ T5623] elevator_change+0x2fa/0x480 [ 826.820570][ T5623] elevator_set_default+0x375/0x440 [ 826.826305][ T5623] blk_register_queue+0x3f3/0x4e0 [ 826.831863][ T5623] __add_disk+0x6cb/0xe30 [ 826.836722][ T5623] add_disk_fwnode+0xfb/0x4b0 [ 826.841930][ T5623] nbd_dev_add+0x733/0xb60 [ 826.846882][ T5623] nbd_init+0x15f/0x1e0 [ 826.851677][ T5623] do_one_initcall+0x250/0x870 [ 826.856960][ T5623] do_initcall_level+0x10a/0x1a0 [ 826.862512][ T5623] do_initcalls+0x59/0xa0 [ 826.867364][ T5623] kernel_init_freeable+0x29d/0x3e0 [ 826.873073][ T5623] kernel_init+0x1d/0x1d0 [ 826.877913][ T5623] ret_from_fork+0x514/0xb70 [ 826.883203][ T5623] ret_from_fork_asm+0x1a/0x30 [ 826.888503][ T5623] [ 826.888503][ T5623] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 826.896456][ T5623] __mutex_lock+0x19d/0x1550 [ 826.901648][ T5623] elevator_change+0x1af/0x480 [ 826.906924][ T5623] elevator_set_none+0xb5/0x140 [ 826.912294][ T5623] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 826.918606][ T5623] nbd_start_device+0x189/0xb30 [ 826.924058][ T5623] nbd_genl_connect+0x1597/0x1c10 [ 826.929605][ T5623] genl_family_rcv_msg_doit+0x233/0x340 [ 826.935670][ T5623] genl_rcv_msg+0x614/0x7a0 [ 826.940693][ T5623] netlink_rcv_skb+0x226/0x4a0 [ 826.945964][ T5623] genl_rcv+0x28/0x40 [ 826.950902][ T5623] netlink_unicast+0x7bb/0x940 [ 826.956190][ T5623] netlink_sendmsg+0x813/0xb40 [ 826.961506][ T5623] sock_sendmsg_nosec+0x13a/0x180 [ 826.967152][ T5623] ____sys_sendmsg+0x54e/0x850 [ 826.972431][ T5623] ___sys_sendmsg+0x2a5/0x360 [ 826.977888][ T5623] __x64_sys_sendmsg+0x1b1/0x290 [ 826.983352][ T5623] do_syscall_64+0x174/0x580 [ 826.988464][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.994866][ T5623] [ 826.994866][ T5623] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 827.003455][ T5623] blk_alloc_queue+0x544/0x690 [ 827.008736][ T5623] __blk_mq_alloc_disk+0x194/0x390 [ 827.014353][ T5623] nbd_dev_add+0x494/0xb60 [ 827.019272][ T5623] nbd_init+0x15f/0x1e0 [ 827.023934][ T5623] do_one_initcall+0x250/0x870 [ 827.029202][ T5623] do_initcall_level+0x10a/0x1a0 [ 827.034649][ T5623] do_initcalls+0x59/0xa0 [ 827.039490][ T5623] kernel_init_freeable+0x29d/0x3e0 [ 827.045197][ T5623] kernel_init+0x1d/0x1d0 [ 827.050032][ T5623] ret_from_fork+0x514/0xb70 [ 827.055158][ T5623] ret_from_fork_asm+0x1a/0x30 [ 827.060432][ T5623] [ 827.060432][ T5623] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 827.067648][ T5623] fs_reclaim_acquire+0x71/0x100 [ 827.073089][ T5623] __kmalloc_noprof+0xbc/0x720 [ 827.078375][ T5623] tls_sw_sendmsg+0x599/0x2860 [ 827.083665][ T5623] sock_sendmsg_nosec+0x90/0x180 [ 827.089124][ T5623] sock_sendmsg+0x1ca/0x2d0 [ 827.094138][ T5623] splice_to_socket+0xb5e/0x12a0 [ 827.099596][ T5623] direct_splice_actor+0x101/0x160 [ 827.105233][ T5623] splice_direct_to_actor+0x57b/0xcb0 [ 827.111114][ T5623] do_splice_direct+0x195/0x290 [ 827.116472][ T5623] do_sendfile+0x52e/0x7c0 [ 827.121401][ T5623] __se_sys_sendfile64+0x144/0x1a0 [ 827.127024][ T5623] do_syscall_64+0x174/0x580 [ 827.132120][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.138524][ T5623] [ 827.138524][ T5623] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 827.146595][ T5623] __lock_acquire+0x1520/0x2cf0 [ 827.152043][ T5623] lock_acquire+0x106/0x350 [ 827.157047][ T5623] lock_sock_nested+0x41/0x100 [ 827.162325][ T5623] inet_shutdown+0x6a/0x390 [ 827.167334][ T5623] nbd_mark_nsock_dead+0x2cb/0x550 [ 827.172949][ T5623] recv_work+0x1cee/0x1e10 [ 827.177869][ T5623] process_scheduled_works+0xa8e/0x14e0 [ 827.183952][ T5623] worker_thread+0xa47/0xfb0 [ 827.189055][ T5623] kthread+0x388/0x470 [ 827.193626][ T5623] ret_from_fork+0x514/0xb70 [ 827.198720][ T5623] ret_from_fork_asm+0x1a/0x30 [ 827.203990][ T5623] [ 827.203990][ T5623] other info that might help us debug this: [ 827.203990][ T5623] [ 827.214199][ T5623] Chain exists of: [ 827.214199][ T5623] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 827.214199][ T5623] [ 827.227216][ T5623] Possible unsafe locking scenario: [ 827.227216][ T5623] [ 827.234935][ T5623] CPU0 CPU1 [ 827.240282][ T5623] ---- ---- [ 827.245626][ T5623] lock(&nsock->tx_lock); [ 827.250029][ T5623] lock(&cmd->lock); [ 827.256512][ T5623] lock(&nsock->tx_lock); [ 827.263432][ T5623] lock(sk_lock-AF_INET6-NBD); [ 827.268269][ T5623] [ 827.268269][ T5623] *** DEADLOCK *** [ 827.268269][ T5623] [ 827.276389][ T5623] 3 locks held by kworker/u9:2/5623: [ 827.281653][ T5623] #0: ffff888033b98140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 827.292873][ T5623] #1: ffffc90003cc7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 827.304627][ T5623] #2: ffff888028d38668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 827.313943][ T5623] [ 827.313943][ T5623] stack backtrace: [ 827.319825][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 827.319843][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 827.319854][ T5623] Workqueue: nbd0-recv recv_work [ 827.319876][ T5623] Call Trace: [ 827.319885][ T5623] [ 827.319894][ T5623] dump_stack_lvl+0xe8/0x150 [ 827.319912][ T5623] print_circular_bug+0x2e1/0x300 [ 827.319933][ T5623] check_noncircular+0x12e/0x150 [ 827.319953][ T5623] __lock_acquire+0x1520/0x2cf0 [ 827.319969][ T5623] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 827.319989][ T5623] ? try_to_wake_up+0x8c5/0x14d0 [ 827.320011][ T5623] ? inet_shutdown+0x6a/0x390 [ 827.320031][ T5623] lock_acquire+0x106/0x350 [ 827.320044][ T5623] ? inet_shutdown+0x6a/0x390 [ 827.320066][ T5623] ? __queue_work+0x1ea/0x10a0 [ 827.320088][ T5623] lock_sock_nested+0x41/0x100 [ 827.320107][ T5623] ? inet_shutdown+0x6a/0x390 [ 827.320127][ T5623] inet_shutdown+0x6a/0x390 [ 827.320148][ T5623] nbd_mark_nsock_dead+0x2cb/0x550 [ 827.320167][ T5623] recv_work+0x1cee/0x1e10 [ 827.320184][ T5623] ? __lock_acquire+0x683/0x2cf0 [ 827.320199][ T5623] ? register_lock_class+0x31/0x2e0 [ 827.320214][ T5623] ? __lock_acquire+0x683/0x2cf0 [ 827.320231][ T5623] ? __pfx_recv_work+0x10/0x10 [ 827.320248][ T5623] ? do_raw_spin_lock+0x12b/0x2f0 [ 827.320267][ T5623] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 827.320287][ T5623] ? process_scheduled_works+0xa20/0x14e0 [ 827.320309][ T5623] ? rcu_is_watching+0x15/0xb0 [ 827.320327][ T5623] ? process_scheduled_works+0xa20/0x14e0 [ 827.320345][ T5623] process_scheduled_works+0xa8e/0x14e0 [ 827.320373][ T5623] ? __pfx_process_scheduled_works+0x10/0x10 [ 827.320399][ T5623] ? assign_work+0x3cf/0x5d0 [ 827.320419][ T5623] worker_thread+0xa47/0xfb0 [ 827.320447][ T5623] kthread+0x388/0x470 [ 827.320462][ T5623] ? __pfx_worker_thread+0x10/0x10 [ 827.320481][ T5623] ? __pfx_kthread+0x10/0x10 [ 827.320495][ T5623] ret_from_fork+0x514/0xb70 [ 827.320512][ T5623] ? __pfx_ret_from_fork+0x10/0x10 [ 827.320527][ T5623] ? __switch_to+0xc89/0x1420 [ 827.320549][ T5623] ? __pfx_kthread+0x10/0x10 [ 827.320563][ T5623] ret_from_fork_asm+0x1a/0x30 [ 827.320585][ T5623] [ 827.618605][T30926] bond6: (slave bridge2): making interface the new active one [ 827.630897][T30926] bridge2: entered promiscuous mode [ 827.648576][T30926] bond6: (slave bridge2): Enslaving as an active interface with an up link