last executing test programs: 1m57.801961972s ago: executing program 0 (id=323): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) (async) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000080)='0', 0x1) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x0, 0x7, {{0x1c, 0x4, 0x3, 0x6, 0x70, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x24, 0x2f, 0x0, 0x4, [0x2, 0x800, 0x8001, 0x81, 0x2, 0x0, 0x2, 0x6]}, @timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0x6, [{@empty, 0x9a}, {@multicast1, 0xe2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xc06}, {@broadcast, 0x400}]}, @timestamp={0x44, 0x14, 0xd0, 0x0, 0x9, [0xd86, 0x5, 0x9, 0x5]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x77, 0xffffffff, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x2, 0x1400000}}) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="8abcc3a95576597fad74ad6aa6e56dd4a7035a4ca58fcebff9b5d964288d391b00798e8f61b384e969384e2316d7355d1bd5a2a581cece4110bc9d72b33b4bd0a353ca7f3a45308330cd210d7a", 0x4d}, {&(0x7f0000000280)="061b938d328b735ac568e9e54aff1c20807faf59fda29ff0", 0x18}], 0x2, &(0x7f00000005c0)=[@ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x9d, 0x0, 0x2, [0x9, 0x6, 0x2ef, 0x0, 0x0, 0x1]}, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x5, [0x401, 0xfffffffd, 0x2]}, @timestamp_addr={0x44, 0x54, 0x81, 0x1, 0x2, [{@rand_addr=0x64010101, 0x4}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x4}, {@local, 0x2}, {@broadcast, 0x96}, {@multicast1}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x8}, {@broadcast, 0x2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x84, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1f, 0xe6, [@private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @loopback, @multicast2]}, @end, @cipso={0x86, 0xb, 0x3, [{0x2, 0x5, "017e9e"}]}, @end, @ssrr={0x89, 0x17, 0x78, [@rand_addr=0x64010101, @multicast2, @multicast1, @broadcast, @multicast1]}, @noop, @end, @cipso={0x86, 0x13, 0x3, [{0x7, 0x8, "f5b6e2a6c465"}, {0x7, 0x3, 'W'}, {0x1, 0x2}]}, @ssrr={0x89, 0x1b, 0xfb, [@multicast1, @broadcast, @empty, @local, @multicast1, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xf, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x2f, 0x3, 0x9, [{@loopback, 0x8001}, {@local, 0x7}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x14, 0xf8, 0x1, 0x7, [{@multicast1, 0x38b}, {@broadcast, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}], 0x210}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1m57.776344571s ago: executing program 0 (id=324): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01010100ffffffff000000008c1f00000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 1m57.615534394s ago: executing program 0 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x14, 0x7512, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40090) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r2, 0xf13, 0x0, 0x25dfdbf8, {}, [@TIPC_NLA_PUBL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x41) 1m55.86023162s ago: executing program 0 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x34, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x34, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r3, 0x200, 0x70bd2d, 0x25dfcbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7b}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x0, 0xd4, 0x80}, @NL80211_ATTR_MAC, @NL80211_ATTR_USER_PRIO={0x64}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5a, 0xd2, 0x3}]}, 0x4e}, 0x1, 0x0, 0x0, 0x890}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0], 0x3c}}, 0x4008804) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0], 0x3c}}, 0x4008804) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x0) r6 = getpid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000100)=r6) (async) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000100)=r6) 1m55.660736408s ago: executing program 0 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, &(0x7f0000000400)=0x19018) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 1m55.364571421s ago: executing program 0 (id=336): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}, {&(0x7f0000000000)={0x58, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="859b94b4aa6a8adeca4502949b78195bd17d894d3159767370634067b2621b8180ea0b7376872016e1eefabb09cee053056774ae4335159356df241376621bb4fbe90fa0eaf538"]}, 0x58}, {&(0x7f0000000200)={0x2bc, 0x2d, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x298, 0xbe, 0x0, 0x1, [@generic="7aed9f3bd7df74e0605f7e85c830ad3d015bf3c7ae5d9de3e456d67333b20991e1389bbc81b8bae014006f80cea0aa342d05a3b6aab3f04dcdc5ce680c2c350c77d7e5c6eea6b0cf5dfe090b118d98cde02600213ca1eafebdda9ed90b2ea32cc1887d130ac0f9a2f9831b8a819331be32cc0b8cb21439fc5a26a16b8f35fdc761464c8371daee93142d8c9ac228eadfed989ac023b922c2880c313bea042249fa059503acbe486b9b0535607752ca0980b75281076c142066538a9af0ecba58bd9ad6ef7e1d63542fe6a635638260dce657e3f7457b0f", @nested={0x4, 0x163}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="a2a7aa37b74338b18346059c326fdec03b763755abdaa2e51bde304198e4193f6cfa9e2c7f4d5689edbe26f8c3aa46befc775b14f8098fec3aaf47b5497ace8d6d334fbbc95fe13a9e8daa76c145135d1ae2753906f74c94d35bbb18ef59821553f327d4be6abe4c70e828db2421c816ece75370a5a697218b09ca16e9222fd716f42734acbabcc591a5192a2d3ba3e6f4f860733d2e7a01efa3ae862abb0bdcd928582799b849f271c22f7ffbb239b6462e47b2adacdadbaf91a5b9f053adf316b347912ac36713ed14fe17a879e1ba519778", @nested={0x4, 0x77}, @generic="36e2f8cd99b521d8b784f57421887347ff0594ca1da0e705f82c05f8ecf59afa519b29d6b223f279a561f426498505c32bb8a14fab270a661c7d216999c90a578b5b124e502951f4c49877092db6cf155327685df774e2f7eddda7c15b64288ad11ef28db74b31c1d9464d40dc4ad99e63e380956fd87e024608863bd1fa66baf026a5322474473c1c786ddf4b4501302930b2316daa0dcb0c31fb94fcc8f57934a9406218d945eade1658a2fe78c02854395071677981f3e7f0fba4b0122905d84a23f469a79f720b84", @nested={0x4, 0x5c}]}, @typed={0x5, 0x123, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0x5}]}, 0x2bc}], 0x3}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}, {&(0x7f0000000000)={0x58, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="859b94b4aa6a8adeca4502949b78195bd17d894d3159767370634067b2621b8180ea0b7376872016e1eefabb09cee053056774ae4335159356df241376621bb4fbe90fa0eaf538"]}, 0x58}, {&(0x7f0000000200)={0x2bc, 0x2d, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x298, 0xbe, 0x0, 0x1, [@generic="7aed9f3bd7df74e0605f7e85c830ad3d015bf3c7ae5d9de3e456d67333b20991e1389bbc81b8bae014006f80cea0aa342d05a3b6aab3f04dcdc5ce680c2c350c77d7e5c6eea6b0cf5dfe090b118d98cde02600213ca1eafebdda9ed90b2ea32cc1887d130ac0f9a2f9831b8a819331be32cc0b8cb21439fc5a26a16b8f35fdc761464c8371daee93142d8c9ac228eadfed989ac023b922c2880c313bea042249fa059503acbe486b9b0535607752ca0980b75281076c142066538a9af0ecba58bd9ad6ef7e1d63542fe6a635638260dce657e3f7457b0f", @nested={0x4, 0x163}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="a2a7aa37b74338b18346059c326fdec03b763755abdaa2e51bde304198e4193f6cfa9e2c7f4d5689edbe26f8c3aa46befc775b14f8098fec3aaf47b5497ace8d6d334fbbc95fe13a9e8daa76c145135d1ae2753906f74c94d35bbb18ef59821553f327d4be6abe4c70e828db2421c816ece75370a5a697218b09ca16e9222fd716f42734acbabcc591a5192a2d3ba3e6f4f860733d2e7a01efa3ae862abb0bdcd928582799b849f271c22f7ffbb239b6462e47b2adacdadbaf91a5b9f053adf316b347912ac36713ed14fe17a879e1ba519778", @nested={0x4, 0x77}, @generic="36e2f8cd99b521d8b784f57421887347ff0594ca1da0e705f82c05f8ecf59afa519b29d6b223f279a561f426498505c32bb8a14fab270a661c7d216999c90a578b5b124e502951f4c49877092db6cf155327685df774e2f7eddda7c15b64288ad11ef28db74b31c1d9464d40dc4ad99e63e380956fd87e024608863bd1fa66baf026a5322474473c1c786ddf4b4501302930b2316daa0dcb0c31fb94fcc8f57934a9406218d945eade1658a2fe78c02854395071677981f3e7f0fba4b0122905d84a23f469a79f720b84", @nested={0x4, 0x5c}]}, @typed={0x5, 0x123, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0x5}]}, 0x2bc}], 0x3}, 0x0) epoll_create1(0x0) 1m54.298429699s ago: executing program 4 (id=354): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r2, 0x0, r3, 0x0, 0xfffffffffffffff1, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r8, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x2000c000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xd5, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x1e, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6072a670}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', r4, @lirc_mode2, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0xd, 0x5, 0xfffffff9}, 0x10, r9, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000640)=[{0x0, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x7, 0x2}, {0x2, 0x1, 0x9, 0xa}], 0x10, 0x5}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) pipe(&(0x7f0000000000)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) splice(r2, 0x0, r3, 0x0, 0xfffffffffffffff1, 0x8) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) close(r5) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r8, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x2000c000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xd5, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x1e, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6072a670}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', r4, @lirc_mode2, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0xd, 0x5, 0xfffffff9}, 0x10, r9, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000640)=[{0x0, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x7, 0x2}, {0x2, 0x1, 0x9, 0xa}], 0x10, 0x5}, 0x94) (async) 1m54.124478343s ago: executing program 4 (id=357): r0 = socket(0x9, 0x4, 0xfff) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x0, 0x4e4, 0x9, 0xb7, 0x5]}, &(0x7f0000000080)=0x54) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000100)) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e21, @loopback}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@empty}, &(0x7f00000001c0)=0x14) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x4bee, 0x2, 0x8003, 0xc71, 0x0, 0x12f, 0x4, 0x7, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r1, 0x9}, &(0x7f00000002c0)=0xc) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000300)=0x7) shutdown(0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000380), 0x4) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000003c0)={0x7f, 0x8, 0xe50, 0x101, 0x0, 0x434c}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x2, @local, 0x9}], 0x2c) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={r2, 0x7}, &(0x7f00000004c0)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x44280, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000540)=""/169) (async) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000600)={0x9, 0x100, 0x8, 0x800, 0x5ca1}) (async, rerun: 64) setsockopt(r4, 0x80000001, 0x9, &(0x7f0000000640)="d5a9eb20a314440622c1eb3d64760eb195cbc395587b9698eb5ce266549e39a0a638a7dbfc776c18a6b444768bd7d7bceb16817785cb72c91d0464dd4572b2c15a8a6b35af9b97681076b53137812231f2a91969f18f4e326b54dd4e037d7bc30672c9230c5c98745ce5bbfbdff09bf7d32001b3c7b58dd6db66fd6dfd107592f7b65f9377028ffa5cf2bb71901013a0003c08a3b66f321a5b551989676590d8be1c693474e1a8e9d64c60ed4925b9d35eb07468c584f019dddfdfb5ca0dc9274f75508bef22679d61618063f74bf2cc553de683fc2042416beb81a28408242c99d342631897a04932a367", 0xeb) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000740)={r4}) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000780)=0x2e0, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000008c0)={r4, &(0x7f00000007c0)='\x00', 0x200, &(0x7f0000000800)={@align=0x7, {0xfff, 0x8, 0x8909, 0x2}}, 0x2, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x6ac}) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000900)={r2}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000980)={r8, 0x81}, &(0x7f00000009c0)=0x8) (async, rerun: 32) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000a00), &(0x7f0000000a40)=0x8) (rerun: 32) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000a80)={r8, 0x7}, &(0x7f0000000ac0)=0x8) 1m53.917647469s ago: executing program 4 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m53.777063045s ago: executing program 4 (id=363): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c0500001800130700000000fcdbdf25e0000002000000000000000000000000ac14143d000000000000000000000000000000004c210002000000005c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff020000000000000000000000000001000000fe32000000fe80000000000000000000000000001b0000000000000000000000000000000000000000000000000a0000000000000000000000000000000000080000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a00040022000000000000003d0101007368613235362d737373653300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a807000081b1455d298b332c2830b481c0fbb331bd03fdd1bb8caf1442ffcaf40fd15b23608564b2cda79c292c4d9c573635b3e969b3e2c48bee99ad509517d0b382fbf29ee13408a6ac77a7ee9514322ca31d6053d625dd84e0c24c22ca8f12ad2810c8beff90d42b57f6a9b2050c1c0359e23c35a7b37ecb6bed6494ba364b663f4260f7ffce6f9193ca09287df87fbbef8b2af0a5004c7e3a253db42c87d62009cfe79fd740bb298ddf78c7e14034d8c660af4d031a33ef8eddec2ab04e39ed8849b2411e29535c8c9a634eac875995c6cdf109a03a5268cd50f1f06004139b69608fc593a363c237ca17caab11946e35e81b761040da180000000c001c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x95}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x3c, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a4563e36e614b3a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd0c}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x228}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40004) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c0500001800130700000000fcdbdf25e0000002000000000000000000000000ac14143d000000000000000000000000000000004c210002000000005c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff020000000000000000000000000001000000fe32000000fe80000000000000000000000000001b0000000000000000000000000000000000000000000000000a0000000000000000000000000000000000080000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a00040022000000000000003d0101007368613235362d737373653300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a807000081b1455d298b332c2830b481c0fbb331bd03fdd1bb8caf1442ffcaf40fd15b23608564b2cda79c292c4d9c573635b3e969b3e2c48bee99ad509517d0b382fbf29ee13408a6ac77a7ee9514322ca31d6053d625dd84e0c24c22ca8f12ad2810c8beff90d42b57f6a9b2050c1c0359e23c35a7b37ecb6bed6494ba364b663f4260f7ffce6f9193ca09287df87fbbef8b2af0a5004c7e3a253db42c87d62009cfe79fd740bb298ddf78c7e14034d8c660af4d031a33ef8eddec2ab04e39ed8849b2411e29535c8c9a634eac875995c6cdf109a03a5268cd50f1f06004139b69608fc593a363c237ca17caab11946e35e81b761040da180000000c001c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) (async) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x95}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x3c, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a4563e36e614b3a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd0c}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x228}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40004) (async) 1m53.487969787s ago: executing program 4 (id=366): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002000)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x3000, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c0000000c0a010100000000000000000a0000060900020073797a310000000009000c0005800800034000000002140000001100010000000000000000000100000a00"/100], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x102, 0xfffffffe}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m53.355851097s ago: executing program 4 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x14}}, 0xc080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x725102, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000140)={'batadv_slave_1\x00', @random="4d009b0f1b2b"}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005f40)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x5, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x80) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, r1, 0x120, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x200000c1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x890c, &(0x7f0000000300)=@add_del={0x2, 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0100001900010029bd7000fbdbdf25fe880000000000000000000000000101fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000f8867baeac1e0101000000000000000000000000000004d63c0037000200000000000000000000000000ffff000000000735000000031000090000000000000001000100ff010000000000000000000000000001000004d42b00000002000000000000000000000000000000000000000000000002016a00ff0700000800000005000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r12 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r12, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x75bb, 0x63}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x1, 0x3, 0x0, {0x7, 0x1a1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x180, 0x9, 0x40}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x5}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x8000, 0x1, 0x7, 0x8}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x800, {0x2, 0x8, 0xffff, 0x4}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8d1) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1m40.283359901s ago: executing program 32 (id=336): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}, {&(0x7f0000000000)={0x58, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="859b94b4aa6a8adeca4502949b78195bd17d894d3159767370634067b2621b8180ea0b7376872016e1eefabb09cee053056774ae4335159356df241376621bb4fbe90fa0eaf538"]}, 0x58}, {&(0x7f0000000200)={0x2bc, 0x2d, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x298, 0xbe, 0x0, 0x1, [@generic="7aed9f3bd7df74e0605f7e85c830ad3d015bf3c7ae5d9de3e456d67333b20991e1389bbc81b8bae014006f80cea0aa342d05a3b6aab3f04dcdc5ce680c2c350c77d7e5c6eea6b0cf5dfe090b118d98cde02600213ca1eafebdda9ed90b2ea32cc1887d130ac0f9a2f9831b8a819331be32cc0b8cb21439fc5a26a16b8f35fdc761464c8371daee93142d8c9ac228eadfed989ac023b922c2880c313bea042249fa059503acbe486b9b0535607752ca0980b75281076c142066538a9af0ecba58bd9ad6ef7e1d63542fe6a635638260dce657e3f7457b0f", @nested={0x4, 0x163}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="a2a7aa37b74338b18346059c326fdec03b763755abdaa2e51bde304198e4193f6cfa9e2c7f4d5689edbe26f8c3aa46befc775b14f8098fec3aaf47b5497ace8d6d334fbbc95fe13a9e8daa76c145135d1ae2753906f74c94d35bbb18ef59821553f327d4be6abe4c70e828db2421c816ece75370a5a697218b09ca16e9222fd716f42734acbabcc591a5192a2d3ba3e6f4f860733d2e7a01efa3ae862abb0bdcd928582799b849f271c22f7ffbb239b6462e47b2adacdadbaf91a5b9f053adf316b347912ac36713ed14fe17a879e1ba519778", @nested={0x4, 0x77}, @generic="36e2f8cd99b521d8b784f57421887347ff0594ca1da0e705f82c05f8ecf59afa519b29d6b223f279a561f426498505c32bb8a14fab270a661c7d216999c90a578b5b124e502951f4c49877092db6cf155327685df774e2f7eddda7c15b64288ad11ef28db74b31c1d9464d40dc4ad99e63e380956fd87e024608863bd1fa66baf026a5322474473c1c786ddf4b4501302930b2316daa0dcb0c31fb94fcc8f57934a9406218d945eade1658a2fe78c02854395071677981f3e7f0fba4b0122905d84a23f469a79f720b84", @nested={0x4, 0x5c}]}, @typed={0x5, 0x123, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0x5}]}, 0x2bc}], 0x3}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}, {&(0x7f0000000000)={0x58, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="859b94b4aa6a8adeca4502949b78195bd17d894d3159767370634067b2621b8180ea0b7376872016e1eefabb09cee053056774ae4335159356df241376621bb4fbe90fa0eaf538"]}, 0x58}, {&(0x7f0000000200)={0x2bc, 0x2d, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x298, 0xbe, 0x0, 0x1, [@generic="7aed9f3bd7df74e0605f7e85c830ad3d015bf3c7ae5d9de3e456d67333b20991e1389bbc81b8bae014006f80cea0aa342d05a3b6aab3f04dcdc5ce680c2c350c77d7e5c6eea6b0cf5dfe090b118d98cde02600213ca1eafebdda9ed90b2ea32cc1887d130ac0f9a2f9831b8a819331be32cc0b8cb21439fc5a26a16b8f35fdc761464c8371daee93142d8c9ac228eadfed989ac023b922c2880c313bea042249fa059503acbe486b9b0535607752ca0980b75281076c142066538a9af0ecba58bd9ad6ef7e1d63542fe6a635638260dce657e3f7457b0f", @nested={0x4, 0x163}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="a2a7aa37b74338b18346059c326fdec03b763755abdaa2e51bde304198e4193f6cfa9e2c7f4d5689edbe26f8c3aa46befc775b14f8098fec3aaf47b5497ace8d6d334fbbc95fe13a9e8daa76c145135d1ae2753906f74c94d35bbb18ef59821553f327d4be6abe4c70e828db2421c816ece75370a5a697218b09ca16e9222fd716f42734acbabcc591a5192a2d3ba3e6f4f860733d2e7a01efa3ae862abb0bdcd928582799b849f271c22f7ffbb239b6462e47b2adacdadbaf91a5b9f053adf316b347912ac36713ed14fe17a879e1ba519778", @nested={0x4, 0x77}, @generic="36e2f8cd99b521d8b784f57421887347ff0594ca1da0e705f82c05f8ecf59afa519b29d6b223f279a561f426498505c32bb8a14fab270a661c7d216999c90a578b5b124e502951f4c49877092db6cf155327685df774e2f7eddda7c15b64288ad11ef28db74b31c1d9464d40dc4ad99e63e380956fd87e024608863bd1fa66baf026a5322474473c1c786ddf4b4501302930b2316daa0dcb0c31fb94fcc8f57934a9406218d945eade1658a2fe78c02854395071677981f3e7f0fba4b0122905d84a23f469a79f720b84", @nested={0x4, 0x5c}]}, @typed={0x5, 0x123, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0x5}]}, 0x2bc}], 0x3}, 0x0) epoll_create1(0x0) 1m38.315787185s ago: executing program 33 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x14}}, 0xc080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x725102, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000140)={'batadv_slave_1\x00', @random="4d009b0f1b2b"}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005f40)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x5, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x80) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, r1, 0x120, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x200000c1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x890c, &(0x7f0000000300)=@add_del={0x2, 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0100001900010029bd7000fbdbdf25fe880000000000000000000000000101fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000f8867baeac1e0101000000000000000000000000000004d63c0037000200000000000000000000000000ffff000000000735000000031000090000000000000001000100ff010000000000000000000000000001000004d42b00000002000000000000000000000000000000000000000000000002016a00ff0700000800000005000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r12 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r12, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x75bb, 0x63}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x1, 0x3, 0x0, {0x7, 0x1a1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x180, 0x9, 0x40}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x5}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x8000, 0x1, 0x7, 0x8}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x800, {0x2, 0x8, 0xffff, 0x4}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8d1) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2.067050707s ago: executing program 5 (id=1747): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd47, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae", @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x400c849}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000000500)=""/114, 0x72}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x4, 0x2000, 0x0) 1.863905655s ago: executing program 3 (id=1751): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) close(0x3) (async) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0), 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000014}, 0x80) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000014}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) 1.601466468s ago: executing program 5 (id=1754): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7105017f0306170202f900090f0286f3e7b3a1c36e52609caba08a51f2652c618f297f8bf5390fa61b7facb27e63965d3d40a5e23e"], 0x103) r4 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f0000000840)={&(0x7f0000000000)=0xfffffffffffffffa, 0x2, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000800)}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r5, 0x1, 0xe, 0x0, &(0x7f0000000080)) sendto$inet(r4, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) 1.574018083s ago: executing program 3 (id=1755): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01002000"], 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) 1.444321235s ago: executing program 2 (id=1758): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r1 = socket$inet6(0xa, 0x800, 0x1) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d00)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "12bc81684d8717a5"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4004) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.377782266s ago: executing program 3 (id=1759): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x8c}}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='\'\x00', 0x0, &(0x7f0000000080)={@align=0x10000, {0x0, 0x1, 0x5, 0x7c14261c}}, 0x401, &(0x7f00000000c0), &(0x7f0000000100)=0xfffeffff}) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000001600)={{'\x00', 0x1}, {}, 0x103, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="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", 0x1e9, 0x0, &(0x7f0000000400)={0x2, 0x10e4, {0x1, 0xc, 0xd7, "49915245b1a64d86d9ddbdaf3bb408e3399392af2b9187dc4760e3d4b2e80b507f25301c2e346f2623d3aebc02f240f2f0edd481045e9b28794cb60055c33b9da754e1a1ccad78421a00604e98282ce2848d30c37af1d574a451c5ae49ff3e3678ad06ecdf8c0231e93719dcff11f71378b1b5e6d121a23a731299c652cae53ec48851fd82af2ada62c774df451b61d60995d22902701bc0ad2f2d85533e59995a10efa93a9270818aa52b43429c421a89d5d88d9f7d41ecbd99b4118c4c6df85074cb9e71ba7766f6ceef97b8ab84924a5c003846475d", 0x1000, "01300a9bd175894b9395bcdb59e9cdfcbb55989c5a08260ca85d90c9395da92747731f4bc8e3f8c6f7166ae34667b438664b48fadda1f551cfe924e8699fb8dd096e25c8b98d8a5ef33a4b736545ae7d8936606143cbac65fd9a9e588f151e9c0466305ee159b8b8fe619c5ef4ed05e29c97006bfc271436c8161426a9ec8995aaee8c26c64f90e824ead1a29e7475f6baf4c956b7d8949753e621a93e341944679527734d25e773c11a394f8f3ddea24da2d0a1af6f17f5c80749a4038f2034d0d2649b5049070e8503ef90ed1097d2b8016dc94e19d1769cc74a20f085fd550e59dc7e177d4897706c338984c3503e1fbbac218c58e7f66df0874da915119c0a375a33222da12b4915e96a573aaad6dabf87d06178ca5dbfbb1751cf18f1af8fababf43b68d30dd8bfed03d9e748966e3f58ab8e7752640d621a18eb4d093913f0e133a90f2caef6d19fa563ec5fdfb309e67ac237603e9f3f1ffe091f1ead9f252dec80c786b8fd6f57b56d441b78dd8bf34904d27bd9f7ae7ff8fee0fc3c34b4f08130d470a6880ec8ba7330c666535a29412eaa89247bd416632a7abbd6da8fa6b2620758bac86f1456196458edf2239719b43f16d447421f98ebb8b72a594df793dc4c166bd669d4f61c46a920941f6a8cc832ce943f487ee06562b4e898674b6d0784927f7c88a7d722226f346feb59ed762af6fa4d563e552bbf3662d7e50d7607ca1c70486a7336778378d910ea7c7594f93737fe72175a8518e7d9036012c529fbd2db4c68f5aac251a296dad2ed483655f1a8e6655f6a44c6a5e24b80cca51986c7c72fabd4d5905244d828aaa88cb83b5988ae2e18e6035f046010bea4b8f04b83f3d45b1b79e7d61bd90337c187f4a6d42e158d399012166b62ecfcd7bb2cfc9972ef6192c65fb31962877dafcd222525408fadf6325a2c0ecfd47922e3ceb9087c5ec6477ba9d8f8440d3bf1ea7e0e6d555466c8a36b37015c53228179726cf81436e3a01385f09a53c159b8f4baf183df82eb907de3a5db540f214531dc581bf37f10eb1c55db596fdc62be02469c1be5659e32e60b3c66d7ca965fa6135e9db71487a6cd9209618305a786bde61ebfe578910f76c598b749ab7585ccbf9c08bc3bee03056a1ceaa0db712960dffb716ea39689e62fbfa6b1f0b75105c67fed611519efe32d9504c49df7a258fd007d34b7b6f87deba2ef4f0f82decbba5a67a29e98987021ae36df1f978e0630baa942aeebadea91d885ab85af2cfdefc8b4acee029012775bacdaa244a865337f60a6d50a797e1369ed2c5268b158dc4ed41c122f535a1fb90bc1d9bbf4e51b2ef8a8bc7ec4519ac786976a3a2771b104c66ac5ac1c35e787b0dee8466c864cee46efc3b6db9ff4822ccf08b1dae9c92b970ced4ba603aea90c2eae386273db667d96c79574159711b133ff8315200a9e57e45579f44c4b642a59fa61b014e52933e5f9332091854933bad1fc3a6309fd8a964f4c882bbc6fb94c6815024eff8e314705b9cf69671f05830827de31e5717aedf74b6eac099ff3169c49a5c830bc7a3bb8536f1ba364f8dba9ab6ea9221a71c59f2bed7000637b00398cf872c5f1916615b6f31e8809883a3f325db8010396f5aba4956f3b346f607e73f76353e0719a124d6dd5d81c3df85b6eeac1ebfa469052a9df0ad0584215d7fbf5699435d7834b2a1556ba241a1c807e73e4319e21cc04d7f8ac27b6a189cf2bc11c188533dcf8fe3c2e4b53ea9cdabf029882e5613550567c3b530de5b44cb77efd0eef6c27b9e47d0130bc79e1a7d11b302ce4e2db5d0f101dee9056bf6ef06d932f78f4ab4a1d1d60834cc07e7c7cdb2381dd3e69c99a47a5811f9df51489f1f5558cdc0c82dfca6cd198c3c86dad46dea71a81b058f1d62444c08fe2e5c62925cd0157e08b2a317ae97076beadfcefb926ce738ec25e21012404e8fd83306855c8e200e956aea2b308b8ad2675bf59b80fcdaecd5419bb5e3b73aa64ab69933cb47272398c348bc52ee2e55f17cf78bde3404186b401319a6bdce1daf0fdc6e7c1682ffe474b26cbacc0a75298b5c7b0c4fcd8761ce49b3705f10339b40f85a49fdae1d0b7b1c18985ad612638fc29b0e4cc3222df8811b38af82e8de182243518e38c3640cad48fa54039381dfd105b4ce20b7e560c3f9dba3b7e539c9bb6375f248d9f5a2260abe47428c0f996611e98f5e3b957665305e7342aa8c4e8022711c7cd021fa53a3b27aeeea5a7ee72ba20ec98ca5828e37816ddc77100d021224424b14946cc076e35f6f48e65fbe634c324e5ad5a7f777cde13c971205d10d5e359b36cc2e2efa64b58bfb9fabd94725252794f36dfda5f22c104153c770d59464014b3872482237d40f6b28b8a9a78ad2f606a84fae1946422f882a9bd98a87a5d7bf9da231cd4ff63b88b865fa7e902332dce2a35bb272e28c0e1df91278ca25662ee2c0f0223408d2b436b11c787a735cf8c744d20fdbef40ddf9930607c905567446f4c5ee9d0c7f089fbcb4310305f73dfe01fd4a5e8e85610331367a491236656a96c62fac1d558ffd20f80e7d581f1917652ce886286fdf7ebbab279a4ccd2dbb894959e59d2d00568c781850d72fc1d589be08d480d633a5c25eb81a98d1352aed629133590be6f431c014e0627000e5857e9f5ff8bb5637ed28e15adb7d02fca77dffac99e9145edfb8091b321c37c070a8871c6e84ed343ebb3e9fe2e5ffb2f004babf7e68972c38356b574c7f16da45e48c7e40c22dc78b5af6879050feb95b674ca04dbe0a67e9876bf77edec3e57fb2541d9e7613bbbeeb46fcc021d847dcce8c4dfdc4f36a1384937595023b707e86d3e96eaf1d6acff4d7cf9196f5cc1ff124ee0a35425af12ee43bdd2dc1c46a1e7c9c6b2a2e187c2b305785f5ebb2a07ea81658f3aefc5fbc32ba16999823a44a368ebc50e0c0e57b31fc1b651a84338dc5335c4ac36f4156a9646d7eeb263c9481f96875fb1888cfd99689aa93ce82d2b86ce824580386c813864b40b6a5eee73e44fb4e35a0bfa53607394c65a30b903ce69274caef9dff1270b907128961d7cc72ff347562ef02392588024e2214145b020b58df5c2b5a5d4d697f8b72413796188bf588a42e4a59ad925113739abcd7ebdd89b88d75fe9728d5eb2696b0c3252ddce4c00038f6d59192a5aaf2147a2709a98a05bf9506006c145515363572b0b85e4f18baeaf928f776e03aadc8a0ceb7f8d9d7c604777fbab5a83f456a2947771d926fde248bb68a039ccb73f6275e72d7e3d28402eabb539a62d88f0e62e19a926711a81ed8765810458c6923d67e4f516087a1dd6de5a559143c6f563369a4842a346675491fbecae1b5effc2b319e787115a7dcc9d2df9db798a5cbdd3136f259278949f11125bca0ab4d6c1e834b9a8b3b56a8be129e264263dadff416554671f3769ab5995f3de6b2abc2cbcd699fff9af1daf753005559e7c7e02cf8ebd83f0ea1bae374f61eae9a78d4e27aef2462e9ba74332acc2d934698e23a0cc0a733c195a6675962a5e8e7de14b07fcf16f143afc8420217bdca661b9a9b96959e86ce347ac3a5f3520418153af0223f10f56b40e0464065768dba7082551f0f8a16a15320fb0f000bb4518aacb6d9952517fa596590732558d7724b365a44ece8ebaf916f59d78b7562aab55d8aa0df5f85c1252ca24e1b5a4bc60aeff7bfecfe7ecb5796b52d874c5ed04c608b2163e9c68535955974ecec9ca62ffe78b7acb8968981d30d2158c5797a391473e38a3aa15577457cab27cf54d45f87929d3f9c8b5c10d1daba3df340d697689527729019d134dd441a06ce190cff4054c535df9b1813c1b48ddcbae9286aaaa899d10020428579ce69b036c54479500337763d5a13995faa4a6408834652391f209f3562235f94b8d80279c87259b5e1236ef39c5422b201778a19fbfc7a3fe59d91ee7dd2e99ed8010f62ed86594cc118be249999999b49e3d2c689f1552d5a30ec9932941751c823d4fb325b124dd1d4a679f52833404b3205cb03c986b56d53ee76eeab34977fb5ebd09a98e0281e32ff2e7840ac1e45a9b50b94f98eabaebfa8b6c644dfdf166fe32f8b944a75a7f23ef649a4a9b14bd38879a8109c474ceb8f908b1a9c6c9e60bbcbae08789bf61e85f15c49645fbbd4bb6d4bcdf82605e1eea0243d298eb78003522fa03cdac239bbacd470467decf2e4e883f9091a81e33da6e542f4ed94841b94438ee437dbdf8c3a37b98c768ae42660e212a087e35ed1f168b0bc47724860a66c6e16564f74670128e8be053e1805f92c643515734ac36e9e9e3f1a1511cce3f1c3dca728d175c0ed1f8dcd03ce1fae0d566b4bc7b03d210e440dccc60611761d22e38f3a2ae8205ad84a8eab3ad9bdd3106fc2cd90fba7cda4e0754252ffd0312f54225bf2f265351315f83d6317ffe8bfc3e05a5d53e489c930e25ebb1042c6057bd3babe39cf582965dade267b97810640f14f3d2756e0930a4a34613c6ffbe346f68c39c47b302c89e63419d61e665356034cd56e1bb27176069dd73f072356adffe5e2d05d7b8bd3eeac4ecc52227c10b80c261372221a05aff2d9df718ea3e771d22e9bd4306715f20efd59950e8ca3582b661a3d8faefef921b2b38b35419a432522fb6d4d899296f1b03ba18cf3c6ab7dc20480e25db5f22f34e61ef62ba489eab92a5e86a25ff3a7f1ccb60c6c7e753109d1961362995c26c404e4e286b66e733ded9734a7a3b8172a0e94cc7f5bf2afd9504a53aa6cf356bda492203cc650e62c94880be066f1ecdc6cebccbb5f49cfedd160481eb1fe094cd5f58641fc95090871ed8e23547ad63171aa441b32d604a7477c637f7b2e0eb311bde2935422d5f5b72c8f13d3457c4a3c402982a8a44a7aa0b32664b409ac1fea70a7568b74463bf3e66c5e9fcbb052d2c3f0a1f25caf8ea9a6a24b5aea5e9f7e47f67cf1b8ba4b2c6d16dbdb51837b5387822afb345d61bf26eedcc3a452bab9079d8728a976b1576676e40ebadddd200f492d77a02503c31f9a77085a1705026b51b9de88e5396ee90138dba2f5041d6a180f46367d18500f917b8ff487b3860034e0a44a54cd34095f9fe924405d24f6f7931ea9cd452f5657f0ef15f077c06af2d2c5ab6716da893311bf9b1b6ca6d1066542499bb98b23163b0a7c03b9b06ebfa952881b35bece8fd5ebb5bc28eae35be18db455362980318bf01a70e7b79ecd27aa6cf0ecc7a244adfe1658d870f4ce526611c3c19d74d16f9925987c1a6d6f8da4f4a74cdfd5c63c6cf16cb41fd3207b46d5c19a208daf9d40fe76d095a8d97c85ad0ae95e01c008262900ca26ff5e376e30f5e1921cf021160fc2cfeb4f6ad911876e21dcff4378c307be38c92f6af38a658ee4dd19e7fcfa9c921ce45355f72d5d9305613eab6e65b498e36734e76271dabef8ab80f316d8ce7cd485ac1dff71185508ec9076b77d9ee1e158948ce848dfb06efac3b85e990ae6f3d85a3891d633ccb8b27cefea87e0c63c294d6eb98e436d7ba7cce6e903dedff17bacfcaaff2cf2b61801d5763ea26dc06fbcdb2e2e8391fcdbc22129221289c10ddd6a125ff0f242dd6e37d54407348f8c740e292a5a3651371b5ca1a154c40d6aa12184a35c4e58599965385185f20567d718ced764e288bd27f4883a763e42b996152d104fee4377beb0f418272ff87ae9b41c528a445255b1813b3624dc22881992b25a3436bd0e1130d3669249ff0004d2138d6bf20ed4f364077"}, 0xf2, "7a8a97085f667c0a172cb397877b8aaff74e0d5054843ccec3cac0389f648b454073b5da1d92b2c15eb55c25cce685c49d05c17c71923ce7a143fdb7d4a5bc049aae8e62ba581bf8117d571b7c70966e806f31187a0320b478fd84cf3f8349ef5c8a77b073d42637ccc54a905b29c08e2ed6b93ac32d16c4552c5a98d656ab665f3c0a4ad7f787350d6062b521a4d726faeb8056088bc1d461199255f16eb348f04fa8f56c3c4917110da6a2d0c4cbcb17ade610673de4f05c98b7fd46fb4653fb27417807b56f2aa91474cfdd04df69f2926057792e1657607c3a93aa11e890ed78748016e8953771c049a6f8f519efd4d1"}, 0x11e2}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 1.331507933s ago: executing program 1 (id=1760): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$key(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0xc0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000000)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.225289768s ago: executing program 5 (id=1761): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="13e5e7b7bf83cf2b523743417ae47f6ba2f7cd9be80ad9ea177b81b1ae5c0f2007fb2467e308b35201d012c9fa82233a6dff9ed72921570f465621cb5176987249a338ac40282f2ef2fb4538700929d8a30e4c9db415390b13095678da748e005438b99df35f5e55bdb0cf6da053139065ae737c35f3d822cb6f57de45f37b1ac73e56a4801547d2e51b4d23ba296187ab91018688309b5512add15d1a5d1bfe7eb52679367d74f76c2717b7683b89ca1256acc27716ad6c26671e853dd2cf1c5477e3b9dd61eb57fbdae54eabfdf299a6c72d2db5395e45b54b841c02d294c1468f245492cb5f227eadf16345c125c0", 0xf0}, {&(0x7f0000001880)="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", 0x1f5}, {&(0x7f0000000240)="75348e078abc921f46d9faeab3ecb125f3177d267b8e7ecca0d832293047f55038a6792f62a401e1cad53e2472c5d03135089b17a50cbf1ee53090b0e756859335e928deff0d86e993fc0247565dc343d9786d127278fdcdfb81ee6ac1366276e401a829b6e0c6b93f971c6c39175a016ef5df6acf0c793837e384fbc75e5ce2af4da1f163261d48cb8e63ae61955a15da1422bd282921ba0505fdac0f755020eb362831f23fbe1b2cd8697e0e9ba68e0e60318269f67d613db0751fa01ab0f53d6e93d2d30b442957ef7ea4824562ecde698885e76cd5479910fe4b881ee7032e0c4fc481b88a61db06bb1ca35d337c278dba5fa9", 0xf5}, {&(0x7f0000001a80)="cf6e5a7c4bd566c1be1e02ba5a3be5512a5f0845cdb688086e4fa91c08dff44bbd39385940709c8192936b90b6e03df249d5cb0a4bfcb74c2e7e9af5492ae257864beb86f758", 0x46}, {&(0x7f00000003c0)="f032fd9f509dc0a46d602c06fa0456f1504644dc7ec3ac62c979763ec285dafa42b4f6dd85cfa98f73989cd7e79e81fb21d478460b57a9731df808c335f140501af2d10475d4a765ed1de2407da9e0feb22035b3", 0x54}, {&(0x7f0000000440)="9d5d5ac2d1e0434c7920d6487ded36d63218752ad2ed05f935522a5d16d7cd885552a1820afbcf46b6d92bf2718ebad8112fe175aac088024c1d78c3739bb1c9b226", 0x42}], 0x6, &(0x7f0000000540)=[{0x38, 0x110, 0x8, "02ceb96a1b8a90f0ee32c331406a18407dce06e0a98a8800e0e727069df722c41e"}, {0x80, 0x0, 0xefc2, "06b6f6ecc5f4f8362c39e34333e4170df22b112141546e557031d5ae4e34dab61b79e4198c0d68e2e8a657f291f5b48f7f564c118ad368cef172de8f17e472c9d4a3dd48b3b12f02aab8ef7a8b7f57d1006e9d0a855db42c62f0e878f277682f855b516f81c29cc8e4cd38"}, {0x58, 0x84, 0x7f, "6bcd94662749ec3298dec393b9d7f69e0439c611deca27901f433a93493e9fa4b01f94231cc4e63248c07bbb3258218336613563eafbde7ce03edd910d2071bfdb99"}, {0xd8, 0x10c, 0x7, "f2bc952aa9d307a2374fee0fdbe991e47d5716d534ca09249d56e63ca098daab2607cb667990dbb0dc255bf4237f29346d563784ee4530170e4118a97094758401ceae3e823da5f30dc902e459764be04ddb43997b7b8f26c2acbb69fe79cb73aa313f9ff774583404bb9ef95c6ea6dac01f482a0b3f1b237f804b545dcdac9c1b7fe550b3a457339dae199ecd04b9f407a7bcf7fdb932c05ec9349c60b1f5b95b43beb6f49dfe717b0c5d081e10c24e9b454dcde8c49b1a6755c36a9a60ff9f736e6a3739c4af"}, {0xffffffffffffffa1, 0x112, 0x3, "273722a4fe3e1d022f116c6d9d07e6f612b716e373a56e1e5f79dd10ce90244aa5f0bd5b1effb75f0ccf56c2ec9686042a187982108aa54e"}, {0x90, 0x10e, 0x3000, "e8a1ea6f24c2859fd382dab2d8a7140d559dbd2c2eba8ecfb0dd3f7cf6396696d4e62e4fb80bfb4cb189bff7b98fea1477cde86d0a1bff4e4e9531af23e843c5a8402b41c558f528149374ae7847893ed0e941242b22ef9acd41649b5a2a87654767c8ecde6374af23a8c700f1b4943ffc0aa686e94c8091cad53a6208"}, {0x1010, 0x104, 0x1, "b9fca0f223369d76f442e141928bc216fbafb214272673adc0b0e7142498f4dbdaa8ad2fb58f1c8eab5d0a52eaf0ac102a46d63928aca33fc99e8a44bd75c6c438e9573acc5ceeb8a88286e36ddb3b116c54c7e478d35c1d6196c7a8626c2000a60d42b8a22857d7e0d45d05730ad8b805b66c84471776b1ee3a8cc6450c048c69237ddeb131375cb2c97a8f67fc18e811227f62f83b382a1a83f075ef35490209ffc2b3576fca80cfc4ab30f6e88d5ad1fb7ed253f5e853b2622c680906c6410a2a5b59f7efe5fdf82f3a1daee9d9a56ca94ae34250addb26d07dc5c4fd9ac1d50dcb15eb0637416cc2bd105e8da91c7ae04bef36e4ab4e3e2350f77dc10493988378e545eba5827ba5938efcf0644981fd961b6db25c6022b0abdfba5efe6d483a4fa989805a77685ea94382ca72b4fb22d2b96fd1b29b0ef6b26820968dc8900f978add80df40ede33d5749776ace6cf4e054f3ff1c4d82dc1fe694629596542b0abc827745d72abf9ee6b924babb45f3da2a7d3d42be2ca33ff76572aa4c2770eda548f6c930c969245eb0c2913db4a14522ddef4e3a8bc335e82d6fe30ffbc93862d59daa5789936101437f5994a8f9bd1dd25726298c9f1b6d1c8c6f9184ea7401e3dd9a36ace1ca75d8dc98f321e4a2c68075d786e76853fca24ebc5b801e81f1f74fa64b9953fe375493ae78015204047c82db1e70bc7bc80cab3f32dc719adbd94b5c7836ab2e6bf6cc1099c448a761280b93e6adbd6aeb832405f7be3075dea4ac8346a147dbcecf552b40d2e4957a30eec8c23f553d0cb832ee1b7bfb14874eafcebd4295e0fee8b1616202f318dc3c523282f02268e2db451c24ca0ce7048b9075118f631eb27257799046074032e2f524058711d3c37ead009563f32390b99acced1b37f629e81282d492fdaa1652ec3593cf53aee2d47686c9260bdb127ecca7f6bd12a6a3c369805063c3aeb13631bb0bed503cc36d637f00a2eab25f45292e07fdeaa48e78f5457548f16fbc18598f897139a81081dd6901169fc253f7b8d1894f62f7bbf9bb37ce7eff817a2d3079c0cf89c8ed6c9e95b778c3055c744602aae21bec72b19905112d5b44eed1c19e0fdb63133872bd0d1ac420a29e500e088c15e7db19d55dc971a10813b82f5188aa161e0d9fcb6a17014e9df9818068303484fc669b9a614f68fcc7eb4b6bf9fe0de1938c5ec0ed45fae67ad95dc8e1d4ae2883b165d3408e9e21612754b6e8f098c13b42d81070c5c1cb95b1c9b23d6c8d643155568df062fbb736ac92626c35dbe4cd9f16c076da13e429888896312d23770dabf8593e44f2be0760cf119b192ad3dcf93a065900d57c6d7f30287c09e6ca8c36f5e7281ec4f47c142f9d87e75baa3de10a0022416ce63597b8b3e28a58f3959758d2121a1da35bc19f4345f25d4d854a252addcb3298b6625718d8870353308b0b6dc6333db035e0d7b39a708f49fd8909fe202b89fca25d27cb6bf84bf0a5d8ec140ab12fff66e622132895eff469e47e6792b94a9023fa0b07d59c21fd1556623379e2185352a275035b86a0f100c57247d9942bd997a3c496c87234b80ffe832ad0860a438ddb01695cc7826c926f3589d8384dce973fcb013a2f92e09c09122e3cb097a56110e1b87bfface3a13d0e887b0cdef7ccbdfb42312a7870c5cc88c821d9dc06fc06c4dac9b41d46e0ef873e76630fffa50bec6086aca88df28e6b927fea46dcbca062264d8191f79e4fb4a3e7bd82b8170dcec96a750392a167ca1c83f7d46a904ce9a4e9765aaca2776ccf58dc40297e6e406beb3caf6ff3280e8eaa2d2ef646679988d3e475538ff3f86eecc6d52862942601e2a26d7aee8b01fe4495737b6b5e76815bf5698498b659c97d0cc7cec1badedbe5b2e451ec24dd3a9e603749119d283c81956babc503c300c9305adb59ae16bc060668bcdd72760b4ceac1871e85748635d74e98cc47714138eb4b2ae52b2c1071e8dd6947ab4492534ad955e24f6e1d89e546b1ed3cd57c453dff359ee2904ae8b084a8493dd86fd7e408a6e21729f5403e0b0bfd238c750e1cbf57df5acfa6af78dda0f745c2c7cd14847127fac2d5511f6ee3d0cb9edb5740b5dc8e8653a093dbe5c24df4dda506e275b965aa703bff455ad032b72740f796dcfef218e31bd10ded67589ad0aa144b9a488a4e7fdc8415108c682e2e678f80a99c7677901592b9af018a84da218cb1ba523c9232aee83d4cab5bf88c2440b07ba9122412580cb4e8fe1cf1886ce39baf238f61fe24ce42ff6a9b114ebb05d1f8eeac68b500c385e99c36d070893307e190bc3062b12c96506645e7719636d6e663e44650e07f80c7f470b85c7cf267eab111083f55a560dc464ec513d64c9ddafc50ed5743baabe25b07506f4f5f5e9051d714e6ecd089a1846dbb84b10303be9f4aa7aef26775f61b0a814e5dfc185f4c33e1c42b6d31e46f102cce9a001ae31cb0f3fbfc04e3ff0bede2f9db8cefe516ec6f3fcea03fbe87005b7d59b1e4da417760eca16578b61f9cba804919d39dd905b7f2add0ee53cd57dfd8460d234b405376ae06892da2021ad3c1ae51d55d663cd99ddd9624b14d513e28c1df0f6ad25f0b5b9c23ebd0ed122515101c141b0cf5fbc9fbcf66618a7688c0e14924c42e91d0cde9617eb2f393a9a0f9e833c83f5645f189e438d8788f2f3f5d50082f4424e23244539a103ef247e6b52caa5151c25ac7acd5e80560aaca81da89ba36ac6cefe325078ab2c86a2bffb23783e7ec9a7829d9d92656a85eca503980b93ae900edd0ecf239467ff7e3c7d09bc58adc24bf2ee4c9b50dc2637bc28748474245785ff135134b9a2c1b55bf22e5d970c66c1e1085e14a94ed47c35e3f188b2484f97dba277e24e807c4d8cb553dba8bbd59a1552ddf7183b44229308e65d82b7c34d45da125ad8f4a1219a7a55b9294723a164cff25f71172cdb9af18ee06b1ebed8f7930b97ce6fe422ee42ea454c8cf7ccf475be27dbc03a539650ca7f8130e24d8169a08bcceb9254732d42ce36c4e7c11ac51ff710a1a22c2112f7a92cf3eb6e65a8442933a62fd6951cc0f0b5a6cd657901a829f456c377e6c2666a8536376d5b3d460bee721523237647538ddc50d6a14b16707f44ed9b9e70584307193554f79ed5ec2c28d79ce5484406149f61a629efd8342a08b66687afea781296f2375a0ad6491aa7e7bc0f8b5ee33f9544db7b49696ef92e8f22f2b0bbfbfd6c0b4c462cb30c4a69b3db712bd9da9ddfb98df698bb11fa955c34989cf58fb5ad6650893bda2d68d8e3590862ca7c5255e5df8ffcbd30a1ca077e1b4a8c03faf4565361350e32402fe55c7943c07d41d9e5b2c5d196f7703e75abf8795137f963f2f6971acd3989c59bd26837fe044d218c51786e6895c892599fe8d40f87824c0c52b17357fa17424eee3706205d7f90c1753c4f1a8f4e18ba1252b30db79ddba7832f4b406528d57914c8f893b82b4495e3fd1823ac1485da9121380893a676f95da54753019fa87f87ab3cf384c6fc8d847d95d26373b51bdb82ca48d70a56ed84ca7f297938192d34c1ea6a8f8d3ecc9ea22769669f25449fc9a816f25df654431dcbc2049b8fd14f2e2638ea6ac7139dd9e3bf2876c04668ef19277d793dde869cc5bc4f79ea1398a1a2594e2d87e9593ec5c73b099f109f817cf73ea0a9dbe4e2d13166d3638f536039a8230051c6376bbf59b77124ac1b406adc72b58171b1554dc3e577fc8c02514c4509f3cf0e08497501e574ddf83eeb5e9570bc006ed22b9ab9319a69c3f41a4e9d38dea5fd6112b3d2c901441de9efb5e69b7c2e69b90837d6e8ff223b98554cf85a4485a8abf8dd631c3553391f75936824e90d92275dada3f097b6ea4dce74064f588e481422c53e63a341d4909aa2d62088b25ae33cc1bf1619a39bb0e853bafe8dc7bc669672992dcffb9114073854efc5c49c17dbe82347e8b448681610fba4debedd058e344c3159792b6fbf76693003902c1b2cbfdfdb514e6d3ba1331f4c1cead4087664f9e64830509b488c1a7be52fbf4364150ed1d2f14b102ad06036d3e585573e5c403a85629682141c25958f0b9e0c641ecb942134f02d472a457a527f1f784a005fbe8ad421149f46dc0aa75a1f874413926ace5826f0a1a5cae7d6a1efeecee8cb6b0b91d7ef4e9642883d24f95e9620e622f8f690973da033387551e12f9aaf3f572764ce3411b674e1ce377c4fb6b616fce1d13591577397a546756f0a85b6336c92e146c321cdfb888b54e0f9877abf55a5f2300ba6caf045b14a27873257410d2ec3b5fe63f60b48da354aeba1d6e7c1f349105a0caae070346bb899200f9447ddc34569a01ea4921bc80c725cd135ebe9c900c69cb30b302c812499a10f2343807d19fff5ea1a19a30a7fae779fde320f75751285a31ba7aaa1be616acd8badf7178104b831c2be2d3828a322f050dbba56b1b4a84d06906ca29977f013473264679def367e97cea83105bc3e065fd9a89e6cc2b6f895099290b35e4d0b4eabf9def7a87da8e46b91a286c2c0004faede9ae54818e6b942d9f36c551defe86747a511e0f21a22f8b9f713466d5e84b743a3672f8066b068b0dc4fc5b4c8ab8bcaea0010efecf443b5b5478aa54ee7ddd656e56101cf06ca2e88b603bd6a43c0a9c3dc1fc18d666c741b033fcf1930302f6a6c0b3b6c404fce82d133b904f31d253c6895fd64cfd98dc6830636c3f02c0eb81103eda66e0d2063dc3f479b34e92dbe69ab7972d383e27774616b60153ce72c2e0243a0e897e16f61061110bdae3d90898c5ada92d16c46b99a599e0564524f7f9725b3d6916cfa4da6e76f31aa54d5c6712b017d1a3088bdc637cfee9870c1a34f1255baa4b97c397c1137eca809f939b55ed1647a2941d417735bed119d34ef1288dddfb84126f9b52f103ad501651cf9544e8c484e780fc073d984099c47d2590b47847567d96f5d46cd1d1f8b64c806665c6157b2d05383e9572379d3e1eab1c6aac4cae595a4166370b9f36fbe362407444733ff27e75c34938d3cc74a5b19cff4c5dbbe653aadeefe6057a4fd9e7db1a05e1e874ac297f9cff1e4fe5acdb009851a064eecd118bc7a20831d557b32d1d92ef952116d63aa06f0eadb5dca006669c884de1a0ea6b8ac6d3400ad1a91f84ef9c2dd2c4b02ed08d2b0f74dfa86273b5ad73d14dfd999ede5d327a7b91fb5da55f269797c9a782d5b2b7355ac63242641a99b65225ec55b137f159ab199392c7f5daf292ab11bff79fc1d8f1bcf686a791f1be7a34ed4ff09e4392e49a7445b9bfce079da2cb58febf53bc319b5466adee8eae7efffd3cb1be8713a2718c793162ca66d85ad63a696b5adf8378efefb65f3e8762ea09f38032d48cb9a585abb16666d7c687416b31f888e54f65f1ab08721276b8cf53c1cfad4e1d92b5d23e2ed7fd2d1ab980c73a5a40b1c1d1ed472190eead7108750a54bcccf0e7bad9cfdd8dfcb96677667a447f6e9f2b67d01d8a35d7218151acdedc79abeb77d8b9ddcd64cafe159cdbff8ec9c9e6cb845fe489ec845be6ff407d025f7ed6fe3e7fae704d89dc02b16ad9a19f48b38ab96c613d7865645a8b435bd0678e9ecf115d607ba24211fc68dbeda880aab33ad054a11c460bd103f4bc1c9ada78c970b6699fb4be555d5720cecea536c23a8c57f5b2aed08f73e10c19be73a40daf23444c6c3751f71a8be17bfc2638cba1489396e8247cfa8efe9a6d5504ea0bee7ad966063758f45c"}], 0x12d0}, 0x40) 1.141768342s ago: executing program 3 (id=1762): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x80000000, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000240)="9a20c605213b48d7656afd0c8659618573cd013f845a7d49b0985043c500ae88651482dd9cd0e1764d3cee57c9b34b92eafbc16fce4cbc06347277525f8f9d0494e3a48369eb144033dc33bad9a15e93888ba941eb3f2eacafe0d5b2c1f168ed5173f19f2f2e5275c7c7090f54eaa63f2a8b1823a90afd445d8cc74dcae493cd2579cbf247cd463f4583bdf637a908ffa232d67affbc04de71c0fe9959cd881d56385d0d1cc2fc801b7b5b8fe9edb8aaab2c09bc47cd35958c8496570d41656c829481ea7efeaeee85c010fe7c17c4d438b401d2e9386179", &(0x7f0000000340)=@udp6=r0, 0x1}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) (async) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f00000000c0)=""/238, 0xee}, &(0x7f00000001c0), 0x10}, 0x20) sendto$inet6(r0, &(0x7f0000001100)="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"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) 1.116012783s ago: executing program 6 (id=1763): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async, rerun: 32) close(0x3) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x18, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000240), 0x12) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4a, &(0x7f0000000ac0)={0xff00, 0x0}, 0x8) (rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4b9c}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffff2c8e}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c5}, 0x20008040) 1.10768897s ago: executing program 1 (id=1764): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000680), 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'vxcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000001740)={0x1d, r2, 0x0, {0x1, 0x0, 0x2}, 0xfd}, 0x18) (async) recvmsg$qrtr(r0, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000340)=[{&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000002c0)=""/73, 0x49}], 0x3, &(0x7f0000000380)=[{0x80, 0x0, 0x0, ""/109}, {0xc0, 0x0, 0x0, ""/175}, {0x68, 0x0, 0x0, ""/85}, {0xe0, 0x0, 0x0, ""/207}], 0x288, 0xc0000100}, 0x38, 0x2002) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, r3) (rerun: 32) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000b40)={0x0, 0xfffffffffffffe82, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x634075a94cb93520) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000001}, 0x4000) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) unshare(0x26020480) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="9552", 0x2}], 0x1}}], 0x1, 0x4044805) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x10000008ebc, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_AUTHENTICATE(r7, 0x0, 0x4000) (async, rerun: 64) setsockopt$inet_tcp_int(r6, 0x6, 0x0, &(0x7f0000000000)=0x3, 0x4) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0xc0, 0x2f}, {0x6, 0x0, 0x0, 0x1000000, 0x400000, 0x0, 0x3, 0xffffffff}, {0xfffffffffdfffff8, 0x8000000000000002, 0xba26, 0xfffffffffffffffc}, 0x0, 0x406e6bc0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in=@empty, 0x0, 0x3, 0x3, 0x6, 0x0, 0x8}}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000005d00)=0x1, 0x4) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9) 1.025389227s ago: executing program 2 (id=1765): syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800480000340000000000059078ac1414bb0a010103440405038903ce830300000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="01000000100001000000000000fcff200000000a28000000000a01080000000000000000f800000708000240000000020900010073797a310000000014010000000000000000000000000add39644aba4f00000000009cda498b5f34c3d5d161a8eb167d4c2acbb50d06f1f52bda710d08005e30d5fcbe53b90a0ade07e8c38592af492647ece2bcbf07924f397029f07151378194e77ec88465e68cca574dbbdfad2b541cd6eb2015906647e58271fa5f0888a157c39f9f0a539c623354f2b989c1c5f39fb7684131b90e689813e602e88c3288de8a56fe798b95ba0dc89c"], 0x50}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb23ad3e978f65c1071d4f0af9f0967caedcc2a1f1fdecab4edc8f187463e541a0ee8ed5b2b8cc96daea1646266b928d0e20597", 0x37}, {&(0x7f0000000300)="783ba07e415c1edc57264a00104ca31e78306465ff1ffb865e", 0x19}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x20048000) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'xfrm0\x00', 0x5a8d}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x34}}, 0x20000000) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x80080}, 0x400c010) 1.003864258s ago: executing program 5 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x1, @multicast2, 0x4e20, 0x3, 'nq\x00', 0xa, 0xb68, 0x1b}, 0x2c) (async, rerun: 32) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000101ecfc4d63211c2", @ANYRES32=0x0, @ANYBLOB="102200000000000014001400767863616e310000000000000000000008000d000004000008001b006100000008000400bf00000005002700010000000800040000800000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c801}, 0x60000010) 936.740266ms ago: executing program 6 (id=1767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}}}, 0x2e) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000000f00000000000001000000001400000000000000290000000b0000002000000000000000"], 0x30}}], 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xa, 0x20}}) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) r12 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x20048850) 817.537301ms ago: executing program 1 (id=1768): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400d1}, 0x4000080) 804.80585ms ago: executing program 5 (id=1769): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b5c176104c34f1e4ba00010000000c00018008000400ee"], 0x20}}, 0x0) getsockopt$MRT6(r1, 0x29, 0x4e, 0x0, &(0x7f0000000bc0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet_int(r9, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r10, 0x0, 0x18, 0x0, &(0x7f0000003d00)) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="fb604090f4a7a85168fff160348fb9515185531414f1df43621ef0f59120f4e3c1d4538472493b3899248822afc0797861be50f5aa9eb689893d918eb10d8dec6cf4af115a09cc68cace082af8b12b65bc7251844313851c2cf7eb7818823e0352b732d4e663acf6cc9d7466fa92ab036216a6bb71c69577b69ad4800e166402e29afeec4b46be04e64a12bc", @ANYRES16=r8, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r11, @ANYBLOB="04002f80"], 0x20}}, 0x0) 716.156068ms ago: executing program 2 (id=1770): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x400c010) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r2, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) 661.960639ms ago: executing program 1 (id=1771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}], 0x1, 0x8000) (async) recvmsg(r2, 0x0, 0x0) (async, rerun: 64) poll(&(0x7f0000000040)=[{r2, 0x10}], 0x1, 0x3) (rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x280, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}, @migrate={0x9c, 0x11, [{@in6=@loopback, @in=@local, @in=@rand_addr=0x64010102, @in6=@remote, 0x2b, 0x0, 0x0, 0x3502, 0xe, 0x8}, {@in=@private=0xa010101, @in=@loopback, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3c, 0x4, 0x0, 0x34ff, 0xa, 0xa}]}, @algo_crypt={0x11d, 0x2, {{'cbc-twofish-avx\x00'}, 0x6a8, "6bfd16f732762f67caba6e0da1d4ac0a5d0455c7b80acdec82b27364129624f6ecb531eafe0ff44a18ea4e410fbb27fa218ced102572c03d69f0b0e08385e60f4a49052ff5555d7fdcf6b96e003f0c20fca2dfb25abf8e668da317cc75d0c25d04551dec107a483721b1b803a7029b63bbe4ad59600d099db034eb48a298dd80079f1a26f74a62cd9bf866ee2dc07d1a2271b45c2b675b0323bb6da8913082a3c79a504284f09a5ec47554a9e2b37e3ac18ffa57324059cac47c6935a2df1ce74793ac10269a5cb18f143766c949cf63073b4fda08"}}]}, 0x280}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x2a, 0x107, 0x2, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x200, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffd, 0x6e6bb5}}, 0xb8}}, 0x0) 610.192389ms ago: executing program 6 (id=1772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x6ef5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 541.335577ms ago: executing program 2 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x400, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xf01}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x14}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7fffffff}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4068854) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf2502180000080000000208000100ac141400a002"], 0x24}}, 0x0) 393.325517ms ago: executing program 6 (id=1774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, '\x00', "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x3303, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x9, 0xc}, &(0x7f00000001c0)=0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="55ee4addb0838779ff7a51df6a147ea6d9f4894d", 0x14}], 0x1}, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x6, 0x30}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r9, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000700)={0x24, r2, 0x801, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4, 0x2000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0xc0010) 337.89538ms ago: executing program 1 (id=1775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) 288.038711ms ago: executing program 5 (id=1776): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be0800633f8018"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0xfffffff8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}, 0x36e7, 0x50, 0x2, 0x0, 0xa0, 0x5c8, 0x10}, 0x9c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000304000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="3502000081280000180012800e000100776972656775617264000000040000050000005b1cf0f140ffe69d54e3230290b3522f256f9e7eba43eebea6e163e94c130d2f0411aec576ac8a711d52cade9a2f8b492315e08f5ce0d8d0128dad193505442aacc59e572c1fcffda89bde930bded49676e402e116a0804b7104bfa575cef9591178c447509f09885b3d6aca31d1ef3852127265dce0ff593ece6c09eae0dbde10bee3"], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be0800633f8018"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0xfffffff8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}, 0x36e7, 0x50, 0x2, 0x0, 0xa0, 0x5c8, 0x10}, 0x9c) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000304000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="3502000081280000180012800e000100776972656775617264000000040000050000005b1cf0f140ffe69d54e3230290b3522f256f9e7eba43eebea6e163e94c130d2f0411aec576ac8a711d52cade9a2f8b492315e08f5ce0d8d0128dad193505442aacc59e572c1fcffda89bde930bded49676e402e116a0804b7104bfa575cef9591178c447509f09885b3d6aca31d1ef3852127265dce0ff593ece6c09eae0dbde10bee3"], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async) 233.468655ms ago: executing program 6 (id=1777): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x120, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x24, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x4, 0x0, 0x1}}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0xc, 0x0, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x170, 0x24, 0xd0f, 0x200001, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xff, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xe, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT], 0x38}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x1, 0xb}) close(r3) 232.468704ms ago: executing program 2 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001b1d00070000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080002800400130008000400070000000c00240069d0d385efc6b62708000400010100"], 0x54}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_ID={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0xfff, 0x9]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0xffffff80, 0x10001]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c080}, 0x40) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) 231.911348ms ago: executing program 3 (id=1779): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffc, {0x3}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x7, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x400d1}, 0x48854) r2 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0xa6, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1}}, {@generic={0x8035, "a96403c483d574c1d19e9eb3183325b4841c4b89d06e3b0149b1a77e622eaff022eca6d25ded2a0194c405738342585d0ec22015f732993671e5e905ade07a35fe1b8d1ba1834008b697f01d4b29292e27f03931eb85ee1e885722e4e7c672a67b0ef5577b01ed0b70cb6ad2b7090aaa0229b7d7124dcc5bae665033d46f1bb9b2f6bc43fb65f03102794d0fff1159b13f73a693"}}}, &(0x7f00000002c0)={0x0, 0x3, [0x8c2, 0x8b4, 0xf38, 0x551]}) getsockname$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$rfkill(0xffffffffffffffff, &(0x7f0000000300)={0x5, 0x9, 0x0, 0x0, 0x1}, 0x8) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000005c0)={0xc73, 0x9, 0x5d0, 0x6, 0x400}) readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) 184.276219ms ago: executing program 1 (id=1780): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x4, @rand_addr=0x64010102, 0x4e21, 0x2, 'wlc\x00', 0x8, 0xba, 0x58}, 0x2c) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x4}}, 0x10) r3 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x11c2, &(0x7f0000000bc0)={@remote, @remote, @void, {@ipv4={0x800, @gre={{0x1f, 0x4, 0x3, 0xc, 0x11b4, 0x65, 0x0, 0x43, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@timestamp={0x44, 0x14, 0x3a, 0x0, 0xd, [0x1, 0xba, 0x7fff, 0x1f3a]}, @rr={0x7, 0xf, 0xa6, [@rand_addr=0x64010101, @local, @private=0xa010102]}, @generic={0x44, 0x7, "0a25fffd3f"}, @lsrr={0x83, 0xf, 0xad, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102]}, @cipso={0x86, 0x16, 0x3, [{0x2, 0xe, "228a5c6439f0a4f26927fe11"}, {0x6, 0x2}]}, @generic={0x3a4cdf0fd81031f8, 0x12, "9e1683e61f69e57ed11068d13219af3b"}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x6d, 0x3, [0x2, 0x9b8], "11326c7c2ee08708d75e04139a1da2d11abed9f67c24b96af6090697c6019fb012268fa13cf63620170124db88ea10595d2625f6e4ee789ea3ab4d1491a1fddd2e4f37e8fd4413ff603a8ad476f54db2358e3db50ac27fc725870b493e80fedbb40a7def9dc598f29c06b9f7f1"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x66e6, 0x5], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0x8], "86255d705b9ebf7ab8629bd6490f3cebfd2ff84bbb37ca558ac185a74288059f9d061de9bb90827f74f1b3522e367564ba9d89c5d1c971e85653ab2d7e6c3b53318b210f5f4f06491fe7cdf4ccdef5b025edb829c21c201a809ce82219eff7ffe1f7947d57d62242f9b1e315e268ab4a0ff3a89cb39802422a63584bafd7cb5dd990e3254bce139690eafeb702ebd6efeb57d70a0b9ea7af0c29cdf9e81d418fc1b971c931a8bedf84bc28"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x7, 0x1, 0x0, 0x2, 0x5, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x8, 0x3, 0x0, 0x3, 0x6, 0x2}, 0x2, {0x3, 0x2, 0x1, 0x0, 0x1, 0x0, 0x2}}}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0xe1fc2aa1f3e42086, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) 157.368687ms ago: executing program 6 (id=1781): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611161000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}}, 0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x1c, r2, 0x11d, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r5) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240108c4}, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000022000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) 1.041288ms ago: executing program 3 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0xa, 0x0, &(0x7f0000000180)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @mcast1, [{0x4, 0x20, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a141cf44d89d9f6ee47e87c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff000000000000000000"}]}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x20, 0x200, 0x70bd29, 0x25dfdbfc, {0x8}, [@typed={0x14, 0x93, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @generic="ddc20ff705e4cdb579ccdff358055594a1a4c1", @typed={0xc, 0x94, 0x0, 0x0, @u64=0x97}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r4 = socket(0x840000000002, 0x3, 0xfa) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x48, &(0x7f0000000080)={0xa, 0x0}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x200, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdc, 0x3, "a67df7ad85fef92d0f454cfd0a5191f090ba93a62bb1ec6bb8a4b7d9c58b32b0b60c25ccdf6141fba7d6fc8fc891444ed2153b58f34dda635e2bd07225c119ffff6de565a5679f9e26710073635a7feeb64efd8980fdaa80eeccca384d140c98462c1f3b48d3e6bfa6fb3455931cbdb4d91475562cf5fc6dcf345a3247b0b3337ce978351002353bb0e97d2edbdc89906ff125ba0c12938219d483bedec1c71dbd0aaad9c31f72643c21a20e21c0bc5ce289e0cf5adb242a55bb6b75ce065b671f2caebd1afc1a69fb5bd038a44456d90003c32b4e939ca5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc7c4}, @TIPC_NLA_NODE_ID={0xac, 0x3, "a39f8b1393979d5325754a9f8714b405db49882d4ea7272e00ace4fb311e28077abfbb993cc4f8d8f4ef8bbd27beb5eead44213506a1339832ed73b17f26ab65b870785695de5345d9fd82b35b380898a24c4f7dbf2cb9c37b77369cef90f76454c68dafdf44f5da1637d1ad647fcc3762c80bc9c5e6beac556c889b5b8ffef50219e02d0b02d139056c747d2409f6c83cc45053d2ab4066ef446e7683bf17b096649dcb895937fd"}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x908}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb, 0x3, "242e3a758e5303"}]}]}, 0x200}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="b5e729bd7000fbdbb50f040000000c00018008000300010000"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='8\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000000840)=0x2, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r9) 0s ago: executing program 2 (id=1783): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r4, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r2, &(0x7f0000001e80)=[{{&(0x7f00000006c0)=@nl=@unspec, 0x80, &(0x7f0000000840)=[{&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000800)=""/22, 0x16}], 0x2, &(0x7f0000000880)=""/166, 0xa6}, 0x8000}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/82, 0x52}, {&(0x7f0000001a00)=""/114, 0x72}, {&(0x7f0000001a80)=""/244, 0xf4}], 0x4, &(0x7f0000001bc0)=""/48, 0x30}, 0x7f}, {{&(0x7f0000001c00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/98, 0x62}, {&(0x7f0000001d00)=""/126, 0x7e}], 0x2, &(0x7f0000001dc0)=""/172, 0xac}}], 0x3, 0x10100, &(0x7f0000001f40)={0x0, 0x3938700}) connect$inet(r7, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x17, &(0x7f00000001c0)=ANY=[@ANYBLOB="3a169dcd", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008078300001000000850000004400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000f8ffffff00000000020000001839000002000000000000000000000018320000030000000000000000000000180000000200000000000000ffff0000"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x15, &(0x7f00000002c0)=""/21, 0x41100, 0x1, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xa1d5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r1], 0x0, 0x10, 0x41}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r14, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x4}, 0xe) shutdown(r14, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f0000000080)={0x0, 0xce, 0x8000, 0x7, 0x10003, 0x5aa8, 0x0, 0x9, r15}, &(0x7f0000000140)=0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r9, r4, 0x25, 0x10, @val=@iter={&(0x7f0000000540)=@cgroup={0x1, r2, 0x3df}, 0x10}}, 0x20) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r16, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0xc006) close(r5) kernel console output (not intermixed with test programs): 96][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.881663][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.898987][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.912561][ T5651] veth1_macvtap: entered promiscuous mode [ 75.927748][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.042190][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.046125][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.058729][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.106563][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.143832][ T5648] veth0_vlan: entered promiscuous mode [ 76.178758][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.210417][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.222960][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.251558][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.256149][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.274708][ T5836] Zero length message leads to an empty skb [ 76.275234][ T5648] veth1_vlan: entered promiscuous mode [ 76.318744][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.344401][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.354760][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.363976][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.385613][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.540771][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.549160][ T5648] veth0_macvtap: entered promiscuous mode [ 76.571318][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.591318][ T5648] veth1_macvtap: entered promiscuous mode [ 76.648562][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 76.711922][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.734161][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.734433][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.742798][ T5842] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.768292][ T5636] Bluetooth: hci2: command tx timeout [ 76.773764][ T5636] Bluetooth: hci1: command tx timeout [ 76.779806][ T5639] Bluetooth: hci0: command tx timeout [ 76.784890][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.844326][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.864755][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.903121][ T5844] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.919615][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.926278][ T5639] Bluetooth: hci4: command tx timeout [ 76.930110][ T5636] Bluetooth: hci3: command tx timeout [ 76.939432][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.971469][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.383712][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.401579][ T5863] trusted_key: syz.1.12 sent an empty control message without MSG_MORE. [ 77.430304][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.555881][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.593114][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.701837][ T5876] tipc: Can't bind to reserved service type 1 [ 77.973174][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.034919][ T5894] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 78.095919][ T5897] IPVS: length: 127 != 8 [ 78.319823][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'. [ 78.334642][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 78.412500][ T5908] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 78.464802][ T5908] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 78.550541][ T5912] netlink: 48 bytes leftover after parsing attributes in process `syz.2.28'. [ 78.573851][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 78.795592][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32'. [ 79.013132][ T5937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.307852][ T5948] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 79.325048][ T5945] bond1: option resend_igmp: invalid value (32767) [ 79.331931][ T5945] bond1: option resend_igmp: allowed values 0 - 255 [ 79.368892][ T5945] bond1 (unregistering): Released all slaves [ 79.387659][ T5948] netlink: 'syz.3.39': attribute type 21 has an invalid length. [ 79.409311][ T5952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.470489][ T5954] xt_hashlimit: size too large, truncated to 1048576 [ 80.012739][ T5980] syzkaller0: entered promiscuous mode [ 80.025269][ T5980] syzkaller0: entered allmulticast mode [ 80.035047][ T5989] xt_ecn: cannot match TCP bits for non-tcp packets [ 80.038969][ T5980] TC_ACT_REPEAT abuse ? [ 80.100886][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.134918][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.143996][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.299280][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.511653][ T6002] bond1: option min_links: invalid value (18446744073709551614) [ 80.522525][ T6002] bond1: option min_links: allowed values 0 - 2147483647 [ 80.537319][ T6002] bond1 (unregistering): Released all slaves [ 80.617687][ T6013] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 80.634936][ T6013] bond1 (unregistering): Released all slaves [ 80.812247][ T6023] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 80.904023][ T6023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.953142][ T6036] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 81.304998][ T6051] __nla_validate_parse: 13 callbacks suppressed [ 81.305018][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.68'. [ 81.363016][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.68'. [ 81.374253][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.68'. [ 81.550759][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.587500][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.594597][ T6069] tipc: Started in network mode [ 81.604038][ T6069] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 81.635313][ T6069] tipc: Enabled bearer , priority 10 [ 81.685325][ T6071] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 81.739703][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.815314][ T6073] netlink: 'syz.3.74': attribute type 2 has an invalid length. [ 81.865620][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 81.887136][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 81.973577][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 82.211519][ T3314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.221189][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.236546][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.310597][ T6100] netlink: zone id is out of range [ 82.332421][ T6100] netlink: zone id is out of range [ 82.550168][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.578469][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.685095][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.695024][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.709211][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.772476][ T6126] netlink: 'syz.0.85': attribute type 4 has an invalid length. [ 82.865957][ T5741] tipc: Node number set to 10136234 [ 83.713156][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 83.833464][ T6168] veth1_macvtap: left promiscuous mode [ 84.118063][ T6188] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.703363][ T5831] net_ratelimit: 62 callbacks suppressed [ 84.703380][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.914472][ T6215] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 85.352799][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.582462][ T6246] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 85.736197][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.743412][ T6252] netlink: 'syz.1.115': attribute type 30 has an invalid length. [ 85.968671][ T6252] bond1: option arp_missed_max: invalid value (0) [ 86.004914][ T6252] bond1: option arp_missed_max: allowed values 1 - 255 [ 86.060219][ T6252] bond1 (unregistering): Released all slaves [ 86.072433][ T6271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.081396][ T6271] IPv6: NLM_F_CREATE should be set when creating new route [ 86.088756][ T6271] IPv6: NLM_F_CREATE should be set when creating new route [ 86.130552][ T6278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.447217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.548683][ T6294] Bluetooth: MGMT ver 1.23 [ 86.592438][ T6291] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 86.643363][ T6291] bond2 (unregistering): Released all slaves [ 86.657988][ T6300] __nla_validate_parse: 7 callbacks suppressed [ 86.658007][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 86.736916][ T998] cfg80211: failed to load regulatory.db [ 86.771821][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.823424][ T6300] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 86.987272][ T6300] team1: entered promiscuous mode [ 87.019467][ T6300] team1: entered allmulticast mode [ 87.101803][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 87.101984][ T6323] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 87.127970][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 87.217775][ T6323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.576167][ T5740] IPVS: starting estimator thread 0... [ 87.597881][ T6341] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 87.638260][ T6341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.135'. [ 87.706475][ T6344] IPVS: using max 33 ests per chain, 79200 per kthread [ 87.809403][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.980212][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.989719][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.998421][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.198640][ T6385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.227698][ T5831] IPVS: starting estimator thread 0... [ 88.326248][ T6392] IPVS: using max 29 ests per chain, 69600 per kthread [ 88.415839][ T6400] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.148'. [ 88.672074][ T6417] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 88.676617][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 88.854913][ T6417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.952052][ T6403] team0 (unregistering): Port device team_slave_0 removed [ 89.001252][ T6403] team0 (unregistering): Port device team_slave_1 removed [ 89.129919][ T6443] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 89.139020][ T6402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.156774][ T6443] netlink: 228 bytes leftover after parsing attributes in process `syz.4.156'. [ 89.290973][ T6451] netlink: 240 bytes leftover after parsing attributes in process `syz.4.156'. [ 89.329785][ T6443] netlink: 'syz.4.156': attribute type 5 has an invalid length. [ 89.357212][ T6443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 89.589864][ T6460] dvmrp0: entered allmulticast mode [ 89.694631][ T6472] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 89.823337][ T6472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.879757][ T6486] netlink: 'syz.3.169': attribute type 25 has an invalid length. [ 89.900417][ T5831] net_ratelimit: 4 callbacks suppressed [ 89.900434][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.924416][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 90.107037][ T6486] netlink: 'syz.3.169': attribute type 25 has an invalid length. [ 90.210943][ T6500] veth1_to_bond: entered allmulticast mode [ 90.267981][ T6500] veth1_to_bond (unregistering): left allmulticast mode [ 90.319738][ T6500] bond0: (slave bond_slave_1): Releasing backup interface [ 90.438336][ T6497] syz.0.174 (6497) used greatest stack depth: 17944 bytes left [ 90.540033][ T6520] bridge0: port 3(gretap0) entered blocking state [ 90.546890][ T6520] bridge0: port 3(gretap0) entered disabled state [ 90.554120][ T6520] gretap0: entered allmulticast mode [ 90.561380][ T6520] gretap0: entered promiscuous mode [ 90.572161][ T6520] bridge0: port 3(gretap0) entered blocking state [ 90.578784][ T6520] bridge0: port 3(gretap0) entered forwarding state [ 90.777139][ T6535] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 90.785947][ T6535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.798580][ T6535] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 90.806861][ T6535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.926254][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.094140][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.167268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.177942][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.258044][ T6569] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 91.486431][ T5636] Bluetooth: hci4: command tx timeout [ 91.584551][ T6590] netlink: 'syz.0.206': attribute type 58 has an invalid length. [ 91.761752][ T6605] __nla_validate_parse: 80 callbacks suppressed [ 91.761769][ T6605] netlink: 404 bytes leftover after parsing attributes in process `syz.2.208'. [ 91.819901][ T6600] netlink: 260 bytes leftover after parsing attributes in process `syz.1.207'. [ 91.894114][ T6606] xt_CT: No such helper "snmp_trap" [ 91.966608][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.055951][ T6622] Bluetooth: MGMT ver 1.23 [ 92.213333][ T6630] syzkaller0: entered promiscuous mode [ 92.221439][ T6630] syzkaller0: entered allmulticast mode [ 92.723014][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'. [ 92.727213][ T6660] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 93.006393][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.660657][ T6638] bridge_slave_0: left allmulticast mode [ 93.666507][ T6638] bridge_slave_0: left promiscuous mode [ 93.673455][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.691391][ T6638] bridge_slave_1: left allmulticast mode [ 93.697191][ T6638] bridge_slave_1: left promiscuous mode [ 93.703014][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.716685][ T6638] bond0: (slave bond_slave_0): Releasing backup interface [ 93.729805][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.760026][ T6638] team0: Port device team_slave_0 removed [ 93.788158][ T6638] team0: Port device team_slave_1 removed [ 93.795884][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.804674][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.815773][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.823906][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.843467][ T6651] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 94.111567][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.231'. [ 94.253702][ T6688] bridge: RTM_NEWNEIGH with invalid ether address [ 94.343124][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 94.386998][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 94.482689][ T6698] netlink: 104 bytes leftover after parsing attributes in process `syz.3.238'. [ 94.531416][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 94.798091][ T6723] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 94.805905][ T6712] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 94.994259][ T6732] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 95.067464][ T6732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.085843][ T6736] netlink: 'syz.1.249': attribute type 11 has an invalid length. [ 95.086380][ T5831] net_ratelimit: 4 callbacks suppressed [ 95.086394][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.100034][ T6735] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 95.126280][ T6736] netlink: 228 bytes leftover after parsing attributes in process `syz.1.249'. [ 95.138062][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 95.180835][ T6732] macvlan2: entered promiscuous mode [ 95.186541][ T6732] macvlan2: entered allmulticast mode [ 95.459265][ T6750] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:0 [ 95.545665][ T6753] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 95.566510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.711565][ T6765] netlink: 'syz.3.260': attribute type 30 has an invalid length. [ 95.956284][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.984857][ T6782] nbd: socks must be embedded in a SOCK_ITEM attr [ 96.126725][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.562935][ T6813] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.769572][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.024138][ T6840] __nla_validate_parse: 7 callbacks suppressed [ 97.024155][ T6840] netlink: 156 bytes leftover after parsing attributes in process `syz.1.282'. [ 97.060906][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 97.167050][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.444394][ T6850] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 97.485434][ T6850] syzkaller0: entered promiscuous mode [ 97.494189][ T6850] syzkaller0: entered allmulticast mode [ 97.501768][ T6849] tipc: Started in network mode [ 97.507223][ T6849] tipc: Node identity c2332ceb2d09, cluster identity 4711 [ 97.515896][ T6849] tipc: Enabled bearer , priority 0 [ 97.689763][ T6849] tipc: Resetting bearer [ 97.733770][ T6849] tipc: Disabling bearer [ 97.740398][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 97.742844][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 97.939234][ T6885] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 97.975828][ T6885] netlink: 'syz.4.291': attribute type 11 has an invalid length. [ 97.997789][ T6885] netlink: 224 bytes leftover after parsing attributes in process `syz.4.291'. [ 98.065121][ T6894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.295'. [ 98.087754][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.131346][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.167823][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.202516][ T6904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.210730][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.245186][ T6903] bridge0: entered promiscuous mode [ 98.252575][ T6903] bridge0: entered allmulticast mode [ 98.258993][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 98.653614][ T6930] netlink: 'syz.2.308': attribute type 12 has an invalid length. [ 98.666528][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 98.692131][ T6930] netlink: 'syz.2.308': attribute type 12 has an invalid length. [ 98.700126][ T3289] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.705160][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 98.718332][ T3289] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.730462][ T3289] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.744596][ T3289] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.818486][ T6933] IPv6: sit1: Disabled Multicast RS [ 98.828964][ T6933] sit1: entered allmulticast mode [ 99.707098][ T6984] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 99.769574][ T6988] bridge_slave_0: left allmulticast mode [ 99.775273][ T6988] bridge_slave_0: left promiscuous mode [ 99.781809][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.792924][ T6988] bridge_slave_1: left allmulticast mode [ 99.801272][ T6988] bridge_slave_1: left promiscuous mode [ 99.807280][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.820779][ T6988] bond1: (slave veth0_to_bond): Releasing backup interface [ 99.832536][ T6988] bond0: (slave bond_slave_0): Releasing backup interface [ 99.842612][ T6988] bond0: (slave bond_slave_1): Releasing backup interface [ 99.853229][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.860823][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.870746][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.878582][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.286569][ T24] net_ratelimit: 59 callbacks suppressed [ 100.286588][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.326826][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.580914][ T6927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.706925][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 102.002881][ T7011] vlan2: entered allmulticast mode [ 102.009818][ T7011] bridge_slave_0: entered allmulticast mode [ 102.030130][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.054397][ T7025] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 102.072845][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.094403][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.203570][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.236909][ T7027] bridge_slave_0 (unregistering): left allmulticast mode [ 102.268740][ T7027] bridge_slave_0 (unregistering): left promiscuous mode [ 102.300419][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.323617][ T7037] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 102.366493][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.393078][ T7037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.471306][ T7034] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 102.485242][ T7037] bond2: entered promiscuous mode [ 102.490705][ T7037] bond2: entered allmulticast mode [ 102.508557][ T7034] __nla_validate_parse: 2 callbacks suppressed [ 102.508576][ T7034] netlink: 52 bytes leftover after parsing attributes in process `syz.2.337'. [ 102.526376][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.622027][ T7034] bond3: option fail_over_mac: invalid value (16) [ 102.641152][ T7034] bond3 (unregistering): Released all slaves [ 102.756401][ T7054] netlink: 'syz.1.343': attribute type 61 has an invalid length. [ 102.782791][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.343'. [ 102.911362][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 102.931653][ T7063] veth1_macvtap: left promiscuous mode [ 102.940417][ T7065] netlink: 'syz.2.348': attribute type 3 has an invalid length. [ 102.994533][ T7065] lo speed is unknown, defaulting to 1000 [ 103.048516][ T7065] lo speed is unknown, defaulting to 1000 [ 103.089710][ T7065] lo speed is unknown, defaulting to 1000 [ 103.134011][ T7076] tipc: Failed to remove unknown binding: 66,0,0/0:1342717312/1342717313 [ 103.163702][ T7076] tipc: Failed to remove unknown binding: 66,0,0/0:1342717312/1342717313 [ 103.194009][ T7080] syzkaller0: entered promiscuous mode [ 103.199840][ T7080] syzkaller0: entered allmulticast mode [ 103.305329][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 103.334593][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.406797][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.671193][ T5756] lo speed is unknown, defaulting to 1000 [ 103.680774][ T7065] infiniband sz1: set active [ 103.690962][ T7065] infiniband sz1: added lo [ 103.798539][ T7065] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 103.814928][ T7065] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 103.833679][ T7065] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 103.919384][ T7065] RDS/IB: sz1: added [ 103.933785][ T7065] smc: adding ib device sz1 with port count 1 [ 103.960696][ T7065] smc: ib device sz1 port 1 has no pnetid [ 103.982500][ T7124] netlink: 1188 bytes leftover after parsing attributes in process `syz.4.363'. [ 103.988886][ T24] lo speed is unknown, defaulting to 1000 [ 104.017914][ T7065] lo speed is unknown, defaulting to 1000 [ 104.028954][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 104.039310][ T7130] netlink: 'syz.3.365': attribute type 12 has an invalid length. [ 104.050314][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'. [ 104.063455][ T7130] netlink: 'syz.3.365': attribute type 29 has an invalid length. [ 104.081187][ T7130] netlink: 148 bytes leftover after parsing attributes in process `syz.3.365'. [ 104.100398][ T7130] netlink: 'syz.3.365': attribute type 3 has an invalid length. [ 104.119233][ T7130] netlink: 'syz.3.365': attribute type 2 has an invalid length. [ 104.128379][ T7130] netlink: 35 bytes leftover after parsing attributes in process `syz.3.365'. [ 104.128453][ T9] IPVS: starting estimator thread 0... [ 104.240648][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.368'. [ 104.256181][ T7138] IPVS: using max 33 ests per chain, 79200 per kthread [ 104.382229][ T7143] netlink: 'syz.3.368': attribute type 2 has an invalid length. [ 104.390443][ T7142] netlink: 'syz.3.368': attribute type 2 has an invalid length. [ 104.447726][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.533418][ T7065] lo speed is unknown, defaulting to 1000 [ 104.614768][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.624687][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.633988][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.878477][ T7065] lo speed is unknown, defaulting to 1000 [ 105.307618][ T7177] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 105.345262][ T7065] lo speed is unknown, defaulting to 1000 [ 105.454918][ T7183] net_ratelimit: 1 callbacks suppressed [ 105.454939][ T7183] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 105.489972][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.691713][ T7065] lo speed is unknown, defaulting to 1000 [ 106.526343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.550798][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.858791][ T7260] xt_hashlimit: size too large, truncated to 1048576 [ 106.924724][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.939201][ T7262] bridge_slave_0 (unregistering): left allmulticast mode [ 106.946965][ T7262] bridge_slave_0 (unregistering): left promiscuous mode [ 106.954140][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.431790][ T7293] wg1: entered promiscuous mode [ 107.437117][ T7293] wg1: entered allmulticast mode [ 107.568401][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.633518][ T7302] __nla_validate_parse: 15 callbacks suppressed [ 107.633538][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 107.650081][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.722513][ T7304] netlink: 64 bytes leftover after parsing attributes in process `syz.3.415'. [ 107.738994][ T7304] syzkaller1: entered promiscuous mode [ 107.744635][ T7304] syzkaller1: entered allmulticast mode [ 107.853874][ T7306] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.865160][ T7306] xt_hashlimit: size too large, truncated to 1048576 [ 108.134047][ T7324] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.419'. [ 108.145311][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.419'. [ 108.445871][ T7338] bond2: Unable to set up delay as MII monitoring is disabled [ 108.450471][ T7342] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 108.463359][ T7342] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 108.473041][ T7338] bond2 (unregistering): Released all slaves [ 108.621910][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.675493][ T7353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.427'. [ 108.802328][ T7354] netlink: 60 bytes leftover after parsing attributes in process `syz.3.427'. [ 109.088658][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.375280][ T7361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 109.618025][ T7373] ip6t_srh: unknown srh match flags 4000 [ 109.656368][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.898388][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'. [ 109.913793][ T7395] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 109.914268][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.437'. [ 109.977712][ T7397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.439'. [ 109.987846][ T7397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.439'. [ 110.009150][ T7399] netlink: 'syz.1.440': attribute type 2 has an invalid length. [ 110.156119][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.339397][ T7419] ip6t_REJECT: ECHOREPLY is not supported [ 110.566427][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.643012][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.654901][ T7443] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 110.662763][ T7443] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 110.672771][ T7443] netlink: 'syz.1.455': attribute type 8 has an invalid length. [ 110.686540][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.849988][ T998] lo speed is unknown, defaulting to 1000 [ 110.895530][ T7455] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.496453][ T7490] hsr0: entered allmulticast mode [ 111.501802][ T7490] hsr_slave_0: entered allmulticast mode [ 111.508515][ T7490] hsr_slave_1: entered allmulticast mode [ 111.523462][ T7490] hsr0: left allmulticast mode [ 111.528514][ T7490] hsr_slave_0: left allmulticast mode [ 111.534061][ T7490] hsr_slave_1: left allmulticast mode [ 111.726256][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.734409][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.742563][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.754548][ T7500] netlink: 'syz.1.476': attribute type 13 has an invalid length. [ 111.764961][ T7500] macsec0: entered allmulticast mode [ 111.869731][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020fb7c00: rx timeout, send abort [ 111.923660][ T7508] netlink: 'syz.3.480': attribute type 18 has an invalid length. [ 111.942047][ T7508] netlink: 'syz.3.480': attribute type 18 has an invalid length. [ 112.127685][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.371327][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f18c00: rx timeout, send abort [ 112.379781][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020fb7c00: abort rx timeout. Force session deactivation [ 112.776477][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.871310][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880676c6c00: rx timeout, send abort [ 112.879996][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880676c6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.895552][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f18c00: abort rx timeout. Force session deactivation [ 113.247464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.417085][ T7519] __nla_validate_parse: 24 callbacks suppressed [ 113.417104][ T7519] netlink: 44 bytes leftover after parsing attributes in process `syz.3.483'. [ 113.603797][ T7525] netlink: 14 bytes leftover after parsing attributes in process `syz.2.486'. [ 113.692448][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.487'. [ 113.706146][ T7527] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 113.925384][ T7535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.941017][ T7536] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 113.958288][ T7541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.088614][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 114.148899][ T7553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.493'. [ 114.316824][ T7564] netlink: 14 bytes leftover after parsing attributes in process `syz.1.497'. [ 114.584866][ T7585] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 114.596286][ T7585] xfrm0 speed is unknown, defaulting to 1000 [ 114.603768][ T7585] xfrm0 speed is unknown, defaulting to 1000 [ 114.611305][ T7585] xfrm0 speed is unknown, defaulting to 1000 [ 114.661475][ T7587] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 114.667770][ T7587] syzkaller1: linktype set to 823 [ 114.764861][ T7585] infiniband syz1: set active [ 114.769764][ T5756] xfrm0 speed is unknown, defaulting to 1000 [ 114.775979][ T7585] infiniband syz1: added xfrm0 [ 114.798522][ T7585] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 114.814696][ T7585] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 114.825415][ T7591] netlink: 'syz.1.506': attribute type 2 has an invalid length. [ 114.832009][ T7585] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 114.842318][ T7591] netlink: 100 bytes leftover after parsing attributes in process `syz.1.506'. [ 114.895356][ T7585] RDS/IB: syz1: added [ 114.902835][ T7585] smc: adding ib device syz1 with port count 1 [ 114.909713][ T7585] smc: ib device syz1 port 1 has no pnetid [ 114.915938][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 114.928750][ T7585] xfrm0 speed is unknown, defaulting to 1000 [ 114.935184][ T42] xfrm0 speed is unknown, defaulting to 1000 [ 114.967987][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 115.023097][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.508'. [ 115.033652][ T7598] ip6t_srh: unknown srh match flags 5F28 [ 115.110924][ T7602] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 115.142663][ T7602] netlink: 'syz.1.509': attribute type 3 has an invalid length. [ 115.153044][ T7585] xfrm0 speed is unknown, defaulting to 1000 [ 115.395912][ T7585] xfrm0 speed is unknown, defaulting to 1000 [ 115.637711][ T7585] xfrm0 speed is unknown, defaulting to 1000 [ 115.784442][ T7620] netlink: 'syz.2.515': attribute type 2 has an invalid length. [ 115.828299][ T7585] xfrm0 speed is unknown, defaulting to 1000 [ 115.886377][ T5756] net_ratelimit: 7 callbacks suppressed [ 115.886394][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.185302][ T7634] netlink: 'syz.3.519': attribute type 142 has an invalid length. [ 116.279729][ T7639] lo speed is unknown, defaulting to 1000 [ 116.286872][ T7639] lo speed is unknown, defaulting to 1000 [ 116.294844][ T7639] lo speed is unknown, defaulting to 1000 [ 116.307739][ T7639] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.322385][ T7639] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.351235][ T7639] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.392987][ T7639] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.428405][ T7639] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.587740][ T7639] lo speed is unknown, defaulting to 1000 [ 116.609297][ T7639] lo speed is unknown, defaulting to 1000 [ 116.618803][ T7639] lo speed is unknown, defaulting to 1000 [ 116.629282][ T7639] lo speed is unknown, defaulting to 1000 [ 116.647054][ T7639] lo speed is unknown, defaulting to 1000 [ 116.927435][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.962531][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.962531][ T7679] Use struct sctp_sack_info instead [ 116.993189][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.993189][ T7679] Use struct sctp_sack_info instead [ 117.039990][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.039990][ T7679] Use struct sctp_sack_info instead [ 117.052929][ T7685] syzkaller1: entered promiscuous mode [ 117.057905][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.057905][ T7679] Use struct sctp_sack_info instead [ 117.064055][ T7685] syzkaller1: entered allmulticast mode [ 117.079067][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.079067][ T7679] Use struct sctp_sack_info instead [ 117.091541][ T7685] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 117.101268][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.101268][ T7679] Use struct sctp_sack_info instead [ 117.124335][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.124335][ T7679] Use struct sctp_sack_info instead [ 117.152560][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.152560][ T7679] Use struct sctp_sack_info instead [ 117.170067][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.170067][ T7679] Use struct sctp_sack_info instead [ 117.207692][ T7679] sctp: [Deprecated]: syz.3.531 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.207692][ T7679] Use struct sctp_sack_info instead [ 117.406553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.415206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.423580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.496518][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.509727][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.520002][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.532563][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.540835][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.924654][ T7717] x_tables: duplicate underflow at hook 1 [ 117.966281][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.035026][ T7722] : entered promiscuous mode [ 118.103903][ T7724] netlink: 'syz.1.544': attribute type 9 has an invalid length. [ 118.206896][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.295697][ T7703] lo speed is unknown, defaulting to 1000 [ 118.648463][ T7703] xfrm0 speed is unknown, defaulting to 1000 [ 118.966425][ T7757] netlink: 'syz.1.555': attribute type 24 has an invalid length. [ 118.989428][ T7758] __nla_validate_parse: 11 callbacks suppressed [ 118.989445][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 119.007504][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.029136][ T7703] lo speed is unknown, defaulting to 1000 [ 119.101565][ T7766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.557'. [ 119.252363][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 119.265005][ T7773] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.559'. [ 119.294014][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 119.337375][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.406262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.418233][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 119.450517][ T7782] netlink: 6 bytes leftover after parsing attributes in process `syz.1.562'. [ 119.485619][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.497976][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.509112][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.518828][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 119.528273][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.531707][ T7786] netlink: 64 bytes leftover after parsing attributes in process `syz.2.563'. [ 119.544627][ T7786] netlink: 64 bytes leftover after parsing attributes in process `syz.2.563'. [ 119.546249][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.566856][ T5641] Bluetooth: hci5: command tx timeout [ 119.717041][ T7795] netlink: 'syz.1.565': attribute type 8 has an invalid length. [ 119.767511][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.791400][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.834086][ T7703] bridge_slave_0: entered allmulticast mode [ 119.865228][ T7703] bridge_slave_0: entered promiscuous mode [ 119.883878][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.898118][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.926223][ T7703] bridge_slave_1: entered allmulticast mode [ 119.958033][ T7703] bridge_slave_1: entered promiscuous mode [ 120.079329][ T7703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.112349][ T7703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.252802][ T7703] team0: Port device team_slave_0 added [ 120.269672][ T7703] team0: Port device team_slave_1 added [ 120.343502][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.359098][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.435335][ T7703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.475987][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.490409][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.517555][ T7703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.534907][ T7783] lo speed is unknown, defaulting to 1000 [ 120.616986][ T7832] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 120.635619][ T7832] bond2 (unregistering): Released all slaves [ 120.988315][ T7703] hsr_slave_0: entered promiscuous mode [ 121.015445][ T7703] hsr_slave_1: entered promiscuous mode [ 121.034340][ T7703] debugfs: 'hsr0' already exists in 'hsr' [ 121.043932][ T7857] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 121.060212][ T7703] Cannot create hsr debugfs directory [ 121.065947][ T7857] netlink: 'syz.3.581': attribute type 3 has an invalid length. [ 121.083026][ T7783] xfrm0 speed is unknown, defaulting to 1000 [ 121.096439][ T42] net_ratelimit: 9 callbacks suppressed [ 121.096455][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.124009][ T7859] ip6gre0: Master is either lo or non-ether device [ 121.184758][ T7864] netlink: 'syz.2.583': attribute type 10 has an invalid length. [ 121.247767][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.576653][ T7885] netlink: 'syz.1.587': attribute type 21 has an invalid length. [ 121.646608][ T5636] Bluetooth: hci5: command tx timeout [ 121.652082][ T5641] Bluetooth: hci6: command tx timeout [ 121.668016][ T7783] lo speed is unknown, defaulting to 1000 [ 121.706842][ T7879] netlink: 'syz.1.587': attribute type 2 has an invalid length. [ 121.727793][ T7879] netlink: 'syz.1.587': attribute type 8 has an invalid length. [ 121.804059][ T7885] bond0: entered promiscuous mode [ 121.830570][ T7885] bond_slave_0: entered promiscuous mode [ 121.840712][ T7885] bond_slave_1: entered promiscuous mode [ 121.857877][ T7885] bond0: left promiscuous mode [ 121.867846][ T7885] bond_slave_0: left promiscuous mode [ 121.883807][ T7885] bond_slave_1: left promiscuous mode [ 121.901730][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.136332][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.196916][ T7703] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.217789][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.234430][ T7703] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.268403][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.281434][ T7703] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.301857][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.332657][ T7703] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.367471][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.419323][ T7919] openvswitch: netlink: Key type 8198 is out of range max 32 [ 122.563204][ T58] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 122.864178][ T7703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.926423][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.988499][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.996163][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.003622][ T7783] bridge_slave_0: entered allmulticast mode [ 123.013799][ T7783] bridge_slave_0: entered promiscuous mode [ 123.027727][ T7703] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.037330][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.044838][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.053318][ T7783] bridge_slave_1: entered allmulticast mode [ 123.060625][ T7783] bridge_slave_1: entered promiscuous mode [ 123.093711][ T7783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.108441][ T7783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.136279][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.143524][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.166358][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.186766][ T7783] team0: Port device team_slave_0 added [ 123.195711][ T7783] team0: Port device team_slave_1 added [ 123.210859][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.218061][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.282216][ T7924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.295303][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.322803][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.350296][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.360540][ T7783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.401401][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.425067][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.476281][ T7783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.494779][ T7964] netlink: 'syz.1.605': attribute type 3 has an invalid length. [ 123.621135][ T7968] vlan2: entered allmulticast mode [ 123.622735][ T7970] block nbd0: not configured, cannot reconfigure [ 123.627086][ T7968] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 123.661381][ T7783] hsr_slave_0: entered promiscuous mode [ 123.669714][ T7783] hsr_slave_1: entered promiscuous mode [ 123.676611][ T7783] debugfs: 'hsr0' already exists in 'hsr' [ 123.682784][ T7783] Cannot create hsr debugfs directory [ 123.726803][ T5641] Bluetooth: hci5: command tx timeout [ 123.726822][ T5636] Bluetooth: hci6: command tx timeout [ 123.968643][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.096983][ T7998] __nla_validate_parse: 18 callbacks suppressed [ 124.097001][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 124.189278][ T7998] bridge3: port 1(veth0_to_bond) entered blocking state [ 124.200341][ T7998] bridge3: port 1(veth0_to_bond) entered disabled state [ 124.208341][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.223581][ T7998] veth0_to_bond: entered allmulticast mode [ 124.242757][ T7998] veth0_to_bond: entered promiscuous mode [ 124.273497][ T7998] bridge3: port 1(veth0_to_bond) entered blocking state [ 124.280639][ T7998] bridge3: port 1(veth0_to_bond) entered forwarding state [ 124.563078][ T8021] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 124.790428][ T8021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.817086][ T8025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.828563][ T8025] bond3: (slave batadv0): making interface the new active one [ 124.838821][ T8025] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 124.864005][ T7783] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.880794][ T7783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.903665][ T7703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.920223][ T7783] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.953741][ T7783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.992962][ T7783] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 125.022024][ T7783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.041801][ T7783] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 125.062747][ T7783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.071902][ T8039] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.623'. [ 125.084525][ T8039] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.623'. [ 125.252716][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.275465][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.290758][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.298006][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.340963][ T8061] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 125.351873][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.359085][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.562190][ T7703] veth0_vlan: entered promiscuous mode [ 125.613899][ T7703] veth1_vlan: entered promiscuous mode [ 125.738259][ T7703] veth0_macvtap: entered promiscuous mode [ 125.789084][ T7703] veth1_macvtap: entered promiscuous mode [ 125.806240][ T5636] Bluetooth: hci6: command tx timeout [ 125.806378][ T5641] Bluetooth: hci5: command tx timeout [ 125.859126][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.889857][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.955337][ T3289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.970140][ T3289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.005635][ T3289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.060253][ T3289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.212076][ T8102] net_ratelimit: 8 callbacks suppressed [ 126.212093][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.227349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.250288][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.258801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.287532][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.369418][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.465456][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.623270][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 126.632754][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 126.642959][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 126.815498][ T7783] veth0_vlan: entered promiscuous mode [ 126.815503][ T8135] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 126.832420][ T8135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.840706][ T7783] veth1_vlan: entered promiscuous mode [ 126.842894][ T8095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.871439][ T8109] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 126.874602][ T7783] veth0_macvtap: entered promiscuous mode [ 126.900952][ T7783] veth1_macvtap: entered promiscuous mode [ 126.956195][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.014141][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.086947][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.114188][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.141362][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.189691][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.206578][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.274799][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.299636][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.339837][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.445151][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.476715][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.625327][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.633696][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.768442][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.793405][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.886676][ T5641] Bluetooth: hci6: command tx timeout [ 128.150872][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 128.186204][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 128.218269][ T8193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.655'. [ 128.381889][ T8203] veth3: entered allmulticast mode [ 128.385386][ T8205] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 128.530380][ T8207] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 129.191582][ T8246] tipc: Started in network mode [ 129.228460][ T8246] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 129.282842][ T8246] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 129.322383][ T8246] tipc: Enabled bearer , priority 10 [ 129.362156][ T8255] netlink: 14 bytes leftover after parsing attributes in process `syz.1.660'. [ 129.634604][ T8270] Bluetooth: MGMT ver 1.23 [ 129.935609][ T8284] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 129.975127][ T8284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.676'. [ 130.011025][ T8284] team0: entered allmulticast mode [ 130.026306][ T8284] team_slave_0: entered allmulticast mode [ 130.043880][ T8284] team_slave_1: entered allmulticast mode [ 130.061811][ T8284] bridge0: port 1(team0) entered blocking state [ 130.080094][ T8284] bridge0: port 1(team0) entered disabled state [ 130.090808][ T8289] netlink: 164 bytes leftover after parsing attributes in process `syz.2.678'. [ 130.100855][ T8284] team0: entered promiscuous mode [ 130.124484][ T8284] team_slave_0: entered promiscuous mode [ 130.140963][ T8284] team_slave_1: entered promiscuous mode [ 130.157808][ T8284] bridge0: port 1(team0) entered blocking state [ 130.164246][ T8284] bridge0: port 1(team0) entered forwarding state [ 130.381982][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 130.438052][ T5769] tipc: Node number set to 1 [ 130.446116][ T8305] netlink: 116 bytes leftover after parsing attributes in process `syz.2.682'. [ 130.844885][ T8331] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 130.844885][ T8331] Please contact the netfilter-devel mailing list or update your nftables rules. [ 130.894696][ T8333] netlink: 'syz.6.689': attribute type 1 has an invalid length. [ 131.150996][ T8345] netlink: 100 bytes leftover after parsing attributes in process `syz.2.693'. [ 131.195474][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.693'. [ 131.247081][ T24] net_ratelimit: 23 callbacks suppressed [ 131.247100][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.274923][ T8359] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.696'. [ 131.496413][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.541333][ T8367] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 131.698389][ T8367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.727506][ T8384] openvswitch: netlink: Missing valid actions attribute. [ 131.769201][ T8384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.794583][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.701'. [ 132.055467][ T8397] xt_l2tp: v2 sid > 0xffff: 1114112 [ 132.126668][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.288476][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.458153][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.524876][ T8426] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 132.541926][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.645983][ T8433] netlink: 'syz.6.717': attribute type 4 has an invalid length. [ 132.660717][ T8433] netlink: 224 bytes leftover after parsing attributes in process `syz.6.717'. [ 132.783450][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.944814][ T8448] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 133.055209][ T8456] netlink: 'syz.5.723': attribute type 21 has an invalid length. [ 133.065315][ T8456] netlink: 'syz.5.723': attribute type 22 has an invalid length. [ 133.073355][ T8456] netlink: 'syz.5.723': attribute type 23 has an invalid length. [ 133.099634][ T8456] netlink: 'syz.5.723': attribute type 25 has an invalid length. [ 133.329027][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.566348][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.603841][ T8479] ip6tnl1: entered allmulticast mode [ 133.680402][ T8486] nbd: must specify a device to reconfigure [ 133.727101][ T8486] netem: change failed [ 134.559405][ T8542] __nla_validate_parse: 11 callbacks suppressed [ 134.559426][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 135.193193][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 135.228695][ T8576] block nbd3: not configured, cannot reconfigure [ 135.231397][ T8570] bond1: entered promiscuous mode [ 135.247364][ T8570] bond1: entered allmulticast mode [ 135.253674][ T8570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.263206][ T8568] netlink: 132 bytes leftover after parsing attributes in process `syz.6.761'. [ 135.305466][ T8574] macvlan2: entered allmulticast mode [ 135.319002][ T8574] dummy0: entered allmulticast mode [ 135.339259][ T8574] dummy0: entered promiscuous mode [ 135.611725][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.770'. [ 135.669245][ T8599] sctp: [Deprecated]: syz.2.769 (pid 8599) Use of int in maxseg socket option. [ 135.669245][ T8599] Use struct sctp_assoc_value instead [ 135.717552][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.6.771'. [ 135.905839][ T8613] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 136.028544][ T8615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.061319][ T8622] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:9 [ 136.447185][ T42] net_ratelimit: 9 callbacks suppressed [ 136.447203][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.533427][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.788'. [ 136.575606][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.788'. [ 136.604870][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 136.614547][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 136.616508][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.650102][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 136.687268][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.247929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.258647][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.275821][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.496313][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.736893][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.529707][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.129922][ T8631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.386727][ T8706] lo: entered promiscuous mode [ 139.419266][ T8706] validate_nla: 1 callbacks suppressed [ 139.419282][ T8706] netlink: 'syz.5.804': attribute type 2 has an invalid length. [ 139.580004][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'. [ 139.605981][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'. [ 139.823485][ T8733] veth1_to_bond: entered allmulticast mode [ 139.859861][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'. [ 139.921091][ T8733] veth1_to_bond (unregistering): left allmulticast mode [ 139.990431][ T8733] bond0: (slave bond_slave_1): Releasing backup interface [ 140.104055][ T8752] netlink: 404 bytes leftover after parsing attributes in process `syz.1.816'. [ 140.246743][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.819'. [ 140.269308][ T8763] netlink: 'syz.6.819': attribute type 30 has an invalid length. [ 140.309626][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.819'. [ 140.483041][ T8776] netlink: 876 bytes leftover after parsing attributes in process `syz.3.824'. [ 140.521015][ T8777] Driver unsupported XDP return value 0 on prog (id 170) dev N/A, expect packet loss! [ 140.698802][ T8789] Can't find ip_set type [ 140.700596][ T8790] Can't find ip_set type [ 140.802691][ T8798] netlink: 'syz.6.827': attribute type 23 has an invalid length. [ 140.912645][ T8799] veth5: entered allmulticast mode [ 141.513526][ T8836] netlink: 'syz.6.842': attribute type 33 has an invalid length. [ 141.599750][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.844'. [ 141.616617][ T8840] netlink: 'syz.1.840': attribute type 39 has an invalid length. [ 141.656443][ T24] net_ratelimit: 13 callbacks suppressed [ 141.656459][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.915772][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.924223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.038372][ T8847] syzkaller0: entered promiscuous mode [ 142.043973][ T8847] syzkaller0: entered allmulticast mode [ 142.241636][ T8864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.431738][ T8878] netlink: 32 bytes leftover after parsing attributes in process `syz.6.854'. [ 142.691060][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.707349][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.937802][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.946269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.344263][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.535590][ T8892] netlink: 14 bytes leftover after parsing attributes in process `syz.3.856'. [ 143.730716][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.244482][ T8892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.277200][ T8892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.299655][ T8892] bond0 (unregistering): Released all slaves [ 144.569734][ T8916] netlink: 'syz.5.861': attribute type 23 has an invalid length. [ 144.688568][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.863'. [ 144.909772][ T8941] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.867'. [ 145.008572][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 145.334254][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.361571][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.581868][ T8977] sctp: [Deprecated]: syz.1.877 (pid 8977) Use of int in maxseg socket option. [ 145.581868][ T8977] Use struct sctp_assoc_value instead [ 145.607268][ T8981] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 145.618591][ T8981] netlink: 228 bytes leftover after parsing attributes in process `syz.3.878'. [ 145.662132][ T8980] rdma_op ffff8880692b89f0 conn xmit_rdma 0000000000000000 [ 145.738582][ T8983] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 145.767609][ T8983] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 145.907859][ T5641] block nbd0: Receive control failed (result -32) [ 146.084247][ T9007] xfrm1: entered allmulticast mode [ 146.335012][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 146.364702][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 146.662871][ T9048] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 146.848649][ T5769] net_ratelimit: 20 callbacks suppressed [ 146.848666][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.863875][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.943781][ T9068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.963756][ T9056] bond4: (slave gre0): Device is not bonding slave [ 146.970581][ T9056] bond4: option active_slave: invalid value (gre0) [ 146.981901][ T9056] bond4 (unregistering): Released all slaves [ 147.013281][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.903'. [ 147.120939][ T9068] netlink: 'syz.5.903': attribute type 8 has an invalid length. [ 147.353061][ T9085] Bluetooth: MGMT ver 1.23 [ 147.384092][ T9086] tipc: Enabled bearer , priority 0 [ 147.436340][ T9083] tipc: Disabling bearer [ 147.466497][ T9082] sch_fq: defrate 0 ignored. [ 147.492783][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.529000][ T9098] netlink: 48 bytes leftover after parsing attributes in process `syz.5.909'. [ 147.887942][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.926922][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.418719][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 149.968270][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.301169][ T9087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.312116][ T9107] netlink: 1 bytes leftover after parsing attributes in process `syz.3.911'. [ 150.512272][ T9131] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 150.512294][ T9131] sctp: [Deprecated]: syz.3.919 (pid 9131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.512294][ T9131] Use struct sctp_sack_info instead [ 150.526371][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.557704][ T9134] sctp: [Deprecated]: syz.3.919 (pid 9134) Use of int in maxseg socket option. [ 150.557704][ T9134] Use struct sctp_assoc_value instead [ 151.006728][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.068590][ T9166] netlink: 72 bytes leftover after parsing attributes in process `syz.6.932'. [ 151.139555][ T9177] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 151.150426][ T9177] netlink: 280 bytes leftover after parsing attributes in process `syz.2.935'. [ 151.185372][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 151.200562][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.218180][ T9169] syzkaller0: entered promiscuous mode [ 151.225394][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.233816][ T9169] syzkaller0: entered allmulticast mode [ 151.240042][ T9187] netlink: 'syz.1.934': attribute type 2 has an invalid length. [ 151.251839][ T9187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.309341][ T9184] team0: Device xfrm0 is of different type [ 151.336314][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 151.367136][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 151.377319][ T24] syz1: Port: 1 Link DOWN [ 151.385505][ T5831] xfrm0 speed is unknown, defaulting to 1000 [ 151.391655][ T5756] xfrm0 speed is unknown, defaulting to 1000 [ 151.405417][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 151.751256][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.943'. [ 152.050728][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.500074][ T9233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.522524][ T9233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.202298][ T9240] team0: entered promiscuous mode [ 153.218640][ T9246] syzkaller0: entered promiscuous mode [ 153.230833][ T9246] syzkaller0: entered allmulticast mode [ 153.421862][ T9251] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 153.538474][ T9233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.579963][ T9233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.689094][ T9270] syzkaller0: entered promiscuous mode [ 153.699805][ T9270] syzkaller0: entered allmulticast mode [ 153.710090][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 153.780084][ T9233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.819139][ T9233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.849800][ T9270] team0: left promiscuous mode [ 153.854716][ T9270] team_slave_0: left promiscuous mode [ 153.860861][ T9270] team_slave_1: left promiscuous mode [ 153.867174][ T9270] bridge0: port 1(team0) entered disabled state [ 153.909043][ T9270] gretap0: left allmulticast mode [ 153.924479][ T9270] gretap0: left promiscuous mode [ 153.938464][ T9270] bridge0: port 3(gretap0) entered disabled state [ 153.960841][ T9270] bridge_slave_1: left allmulticast mode [ 153.974638][ T9270] bridge_slave_1: left promiscuous mode [ 153.981493][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.092833][ T9233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.115337][ T9233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.285269][ T9302] netlink: 'syz.5.966': attribute type 2 has an invalid length. [ 154.299225][ T9300] netlink: 288 bytes leftover after parsing attributes in process `syz.2.965'. [ 154.383357][ T9302] xt_hashlimit: size too large, truncated to 1048576 [ 154.508650][ T142] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.512693][ T9314] IPVS: ip_vs_edit_dest(): server weight less than zero [ 154.540556][ T142] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.564202][ T9314] xt_hashlimit: size too large, truncated to 1048576 [ 154.594968][ T9317] netlink: 'syz.6.970': attribute type 11 has an invalid length. [ 154.604037][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.622583][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.624729][ T9317] netlink: 'syz.6.970': attribute type 11 has an invalid length. [ 154.657059][ T9317] netlink: 204 bytes leftover after parsing attributes in process `syz.6.970'. [ 154.764088][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.781830][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.843282][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.855294][ T9324] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.972'. [ 154.865007][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.884707][ T9234] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.899208][ T9234] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.031950][ T9234] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.051536][ T9234] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.208411][ T9234] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.233547][ T9234] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.302627][ T9234] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.312689][ T9234] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.460581][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.982'. [ 155.501040][ T9354] netlink: 'syz.6.981': attribute type 1 has an invalid length. [ 155.508968][ T9354] netlink: 'syz.6.981': attribute type 2 has an invalid length. [ 155.585534][ T9362] bond4: entered promiscuous mode [ 155.590901][ T9362] bond4: entered allmulticast mode [ 155.597736][ T9362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.740842][ T9376] netlink: 'syz.6.986': attribute type 21 has an invalid length. [ 155.773386][ T9376] netlink: 'syz.6.986': attribute type 1 has an invalid length. [ 155.814687][ T9376] netlink: 'syz.6.986': attribute type 2 has an invalid length. [ 155.845150][ T9376] netlink: 'syz.6.986': attribute type 2 has an invalid length. [ 156.200073][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'. [ 156.203752][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.995'. [ 156.232385][ T9394] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 156.842585][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1005'. [ 156.912356][ T9445] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1008'. [ 156.923407][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1005'. [ 157.074839][ T9451] netlink: 'syz.2.1009': attribute type 39 has an invalid length. [ 157.120203][ T9451] hsr_slave_0: left promiscuous mode [ 157.142671][ T9451] hsr_slave_1: left promiscuous mode [ 157.244182][ T9462] Cannot find add_set index 0 as target [ 157.289993][ T6172] udevd[6172]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 157.320950][ T6172] udevd[6172]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 157.464705][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 157.674507][ T9475] syz_tun: entered promiscuous mode [ 157.816764][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1021'. [ 157.924196][ T9495] openvswitch: netlink: Key type 8198 is out of range max 32 [ 157.960621][ T9495] geneve2: entered promiscuous mode [ 157.967142][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1023'. [ 157.983859][ T202] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 36849 - 0 [ 158.002999][ T202] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 36849 - 0 [ 158.026879][ T202] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 36849 - 0 [ 158.051010][ T202] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 36849 - 0 [ 158.062147][ T9498] netlink: 'syz.6.1023': attribute type 39 has an invalid length. [ 158.120387][ T29] audit: type=1800 audit(1780723091.359:2): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1026" name="memory.events" dev="tmpfs" ino=390 res=0 errno=0 [ 158.239334][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 158.392959][ T1022] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.410432][ T1022] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.480848][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.497807][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.508351][ T9529] netlink: 'syz.6.1028': attribute type 2 has an invalid length. [ 158.540031][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.548782][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.603594][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.648615][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.664753][ T9540] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.694897][ T9540] Cannot find add_set index 0 as target [ 158.711590][ T9536] xt_hashlimit: size too large, truncated to 1048576 [ 159.430179][ T9580] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 159.603737][ T9590] netlink: 'syz.2.1045': attribute type 11 has an invalid length. [ 159.693488][ T9590] gretap1: entered promiscuous mode [ 159.723187][ T9590] batman_adv: batadv0: Adding interface: gretap1 [ 159.740154][ T9590] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 159.762658][ T9590] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 159.828910][ T9596] syzkaller0: entered promiscuous mode [ 159.850481][ T9596] syzkaller0: entered allmulticast mode [ 159.900387][ T9596] netlink: 'syz.5.1048': attribute type 5 has an invalid length. [ 159.933785][ T48] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.946471][ T48] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.955381][ T48] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.001302][ T48] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.033305][ T9608] pim6reg: entered allmulticast mode [ 160.064579][ T9608] pim6reg: left allmulticast mode [ 160.274890][ T9623] syz_tun: Device is already in use. [ 160.435423][ T9627] veth0_to_bond: left allmulticast mode [ 160.441869][ T9636] Bluetooth: hci1: too big key_count value 32770 [ 160.462079][ T9627] veth0_to_bond: left promiscuous mode [ 160.475539][ T9639] __nla_validate_parse: 9 callbacks suppressed [ 160.475555][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 160.491311][ T9627] bridge3: port 1(veth0_to_bond) entered disabled state [ 160.503119][ T9627] bond0: (slave bond_slave_0): Releasing backup interface [ 160.514993][ T9627] bond0: (slave bond_slave_1): Releasing backup interface [ 160.534366][ T9627] team_slave_0: left allmulticast mode [ 160.543819][ T9627] team0: Port device team_slave_0 removed [ 160.551263][ T9627] team_slave_1: left allmulticast mode [ 160.561922][ T9627] team0: Port device team_slave_1 removed [ 160.569340][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.577557][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.589317][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.597239][ T9627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.607411][ T9627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.624273][ T9] lo speed is unknown, defaulting to 1000 [ 161.049617][ T9666] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 161.072021][ T9666] bond5: entered promiscuous mode [ 161.079133][ T9666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.235432][ T9626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.567716][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1071'. [ 163.638653][ T9697] syzkaller1: entered promiscuous mode [ 163.671213][ T9697] syzkaller1: entered allmulticast mode [ 163.851382][ T9713] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 163.872954][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 163.884991][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 163.993969][ T9727] blkio.reset_stats is deprecated [ 164.014613][ T9725] netlink: 'syz.5.1081': attribute type 1 has an invalid length. [ 164.283234][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.291334][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.298183][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.304958][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.311776][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.318557][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.325297][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.332056][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.338815][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.345553][ T9743] tc action pedit offset must be on 32 bit boundaries [ 164.352317][ T9743] 0: reclassify loop, rule prio 0, protocol 800 [ 166.431221][ T9681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.449163][ T9692] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1071'. [ 166.866789][ T9756] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1091'. [ 167.215439][ T9792] syzkaller0: entered promiscuous mode [ 167.232071][ T9792] syzkaller0: entered allmulticast mode [ 167.252791][ T9792] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 167.304332][ T9804] netlink: 'syz.6.1102': attribute type 1 has an invalid length. [ 167.338191][ T9805] netlink: 'syz.6.1102': attribute type 1 has an invalid length. [ 167.360140][ T9804] netlink: 280 bytes leftover after parsing attributes in process `syz.6.1102'. [ 167.380883][ T9805] netlink: 280 bytes leftover after parsing attributes in process `syz.6.1102'. [ 167.521767][ T9813] sctp: [Deprecated]: syz.6.1104 (pid 9813) Use of int in maxseg socket option. [ 167.521767][ T9813] Use struct sctp_assoc_value instead [ 167.587564][ T9815] syzkaller0: entered promiscuous mode [ 167.604695][ T9815] syzkaller0: entered allmulticast mode [ 167.710528][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1108'. [ 167.725573][ T9827] nbd: must specify a device to reconfigure [ 168.404503][ T9868] netlink: 'syz.1.1119': attribute type 4 has an invalid length. [ 169.710342][ T9891] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1128'. [ 169.724944][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1128'. [ 169.735604][ T9891] nbd: must specify at least one socket [ 169.752965][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1128'. [ 169.768362][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1128'. [ 169.791946][ T9893] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1129'. [ 169.835586][ T9898] netlink: 'syz.5.1124': attribute type 1 has an invalid length. [ 170.060430][ T9916] syz_tun: refused to change device tx_queue_len [ 172.453578][ T9967] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 172.511404][ T9981] __nla_validate_parse: 5 callbacks suppressed [ 172.511421][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 172.527445][ T5641] Bluetooth: hci6: command tx timeout [ 172.681555][ T9990] netlink: 'syz.3.1154': attribute type 11 has an invalid length. [ 172.727406][ T9995] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 172.762871][ T9995] team0: left allmulticast mode [ 172.829004][ T9995] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.871691][ T9995] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.883462][ T9998] syzkaller0: entered promiscuous mode [ 172.899045][ T9998] syzkaller0: entered allmulticast mode [ 173.174968][T10028] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 173.204344][T10028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.255717][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 173.282582][T10032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1164'. [ 173.335776][T10032] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1164'. [ 173.358300][T10039] veth0: entered promiscuous mode [ 173.448780][T10043] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1167'. [ 173.675302][T10059] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 174.357203][T10033] veth0: left promiscuous mode [ 174.384106][T10078] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 174.558488][T10084] openvswitch: netlink: IP tunnel TTL not specified. [ 174.582230][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1181'. [ 174.658518][T10088] C: renamed from lo (while UP) [ 174.664100][T10090] netlink: 'syz.6.1181': attribute type 1 has an invalid length. [ 174.678984][T10092] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1183'. [ 174.679222][T10088] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.771928][T10090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.025808][T10118] netlink: 'syz.6.1190': attribute type 21 has an invalid length. [ 175.073974][T10112] bond2: option resend_igmp: invalid value (32767) [ 175.105378][T10112] bond2: option resend_igmp: allowed values 0 - 255 [ 175.134928][T10112] bond2 (unregistering): Released all slaves [ 175.530528][T10138] sctp: [Deprecated]: syz.5.1196 (pid 10138) Use of int in max_burst socket option deprecated. [ 175.530528][T10138] Use struct sctp_assoc_value instead [ 176.202230][T10185] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1209'. [ 176.230553][T10187] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 176.239279][ T5769] IPVS: starting estimator thread 0... [ 176.261853][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1209'. [ 176.302587][T10187] netlink: zone id is out of range [ 176.322965][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 176.333752][T10187] netlink: zone id is out of range [ 176.344941][T10187] netlink: zone id is out of range [ 176.350248][T10188] IPVS: using max 34 ests per chain, 81600 per kthread [ 176.359205][T10187] netlink: zone id is out of range [ 176.384947][T10187] netlink: zone id is out of range [ 176.910400][T10221] netlink: 'syz.1.1217': attribute type 15 has an invalid length. [ 176.975053][T10221] netlink: 'syz.1.1217': attribute type 15 has an invalid length. [ 177.024301][ T3314] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 256 - 0 [ 177.045537][ T3314] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 177.069728][ T3314] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 177.105772][ T3314] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 177.228441][ T1018] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.253986][ T1018] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.298264][ T1018] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.317914][ T1018] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.764802][T10282] netlink: 'syz.2.1230': attribute type 39 has an invalid length. [ 178.175844][T10303] __nla_validate_parse: 10 callbacks suppressed [ 178.175863][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 178.198253][ T3314] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 178.525536][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 178.769052][T10330] syzkaller0: entered promiscuous mode [ 178.778462][T10330] syzkaller0: entered allmulticast mode [ 180.766877][ C1] net_ratelimit: 824 callbacks suppressed [ 180.766916][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 181.061527][T10293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.242678][T10366] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.243395][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1251'. [ 181.275183][T10362] syzkaller0: entered promiscuous mode [ 181.291849][T10362] syzkaller0: entered allmulticast mode [ 181.297930][T10367] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1251'. [ 181.443095][T10379] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1256'. [ 181.648865][T10387] syzkaller0: entered promiscuous mode [ 181.681804][T10387] syzkaller0: entered allmulticast mode [ 181.757089][T10394] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 181.803287][T10396] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1262'. [ 181.980693][T10404] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 182.005324][T10404] batman_adv: batadv0: Adding interface: wlan0 [ 182.013383][T10404] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.040516][T10404] batman_adv: batadv0: Interface activated: wlan0 [ 182.045889][T10410] ip6t_srh: unknown srh invflags 4000 [ 182.065062][T10407] IPv6: sit1: Disabled Multicast RS [ 182.072941][T10407] sit1: entered allmulticast mode [ 182.398249][T10433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1276'. [ 182.585849][T10444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 182.610377][T10444] batadv1: entered promiscuous mode [ 182.618084][T10444] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 182.627733][T10444] team0: Failed to send options change via netlink (err -105) [ 182.644510][T10444] team0: Port device batadv1 added [ 182.646793][T10449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.659007][T10446] macvlan0: entered promiscuous mode [ 182.666683][T10446] macvlan0: entered allmulticast mode [ 183.286176][T10487] netlink: 'syz.5.1293': attribute type 10 has an invalid length. [ 183.386947][T10497] Cannot find add_set index 46338 as target [ 183.401624][T10500] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1295'. [ 183.461387][T10497] syzkaller1: entered promiscuous mode [ 183.494532][T10497] syzkaller1: entered allmulticast mode [ 183.522552][T10506] netlink: 'syz.1.1299': attribute type 5 has an invalid length. [ 183.537131][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1299'. [ 183.768249][T10517] xt_TCPMSS: Only works on TCP SYN packets [ 183.865538][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 183.944016][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 183.960404][T10529] tap0: tun_chr_ioctl cmd 1074025672 [ 183.975132][T10529] tap0: ignored: set checksum disabled [ 183.997381][ T24] IPVS: starting estimator thread 0... [ 184.025444][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1309'. [ 184.078759][T10522] can: request_module (can-proto-4) failed. [ 184.096480][T10533] IPVS: using max 37 ests per chain, 88800 per kthread [ 184.120971][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 184.142381][T10541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1311'. [ 184.155392][T10542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.166615][T10541] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1311'. [ 184.176187][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 184.197565][T10542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.232202][T10542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.262641][ T35] netdevsim netdevsim1 : set [0, 1] type 1 family 0 port 8472 - 0 [ 184.292400][ T35] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 184.314511][ T35] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 184.329524][ T35] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 184.577252][T10562] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1319'. [ 184.827301][T10580] Cannot find add_set index 46338 as target [ 185.366514][T10615] nftables ruleset with unbound chain [ 185.575562][T10629] netlink: 'syz.5.1334': attribute type 2 has an invalid length. [ 185.980712][T10632] bridge0: left promiscuous mode [ 185.985791][T10632] bridge0: left allmulticast mode [ 186.001108][T10632] team0: left promiscuous mode [ 186.006963][T10632] batadv1: left promiscuous mode [ 186.411400][T10632] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 186.429521][ T24] lo speed is unknown, defaulting to 1000 [ 186.435697][T10639] 8021q: VLANs not supported on gre0 [ 186.444763][ T24] sz1: Port: 1 Link DOWN [ 186.463153][T10666] lo speed is unknown, defaulting to 1000 [ 186.477294][ T3342] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.513028][ T3342] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.549783][ T3342] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.632951][ T3342] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.722590][T10678] netlink: 'syz.6.1343': attribute type 4 has an invalid length. [ 186.962085][T10691] tunl0: entered promiscuous mode [ 186.972472][T10692] xt_l2tp: wrong L2TP version: 0 [ 186.976279][T10691] netlink: 'syz.5.1350': attribute type 3 has an invalid length. [ 187.340738][T10712] syzkaller0: entered promiscuous mode [ 187.356445][T10712] syzkaller0: entered allmulticast mode [ 187.397948][T10718] netlink: 'syz.5.1356': attribute type 83 has an invalid length. [ 188.224890][T10759] ip6t_srh: unknown srh match flags 5F28 [ 188.482671][T10777] __nla_validate_parse: 15 callbacks suppressed [ 188.482734][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1377'. [ 188.959231][T10779] xt_hashlimit: size too large, truncated to 1048576 [ 189.383433][T10799] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 189.415596][T10799] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1383'. [ 189.794807][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1391'. [ 189.964585][T10834] syzkaller0: entered promiscuous mode [ 189.990541][T10834] syzkaller0: entered allmulticast mode [ 190.015104][T10839] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1393'. [ 190.045234][T10839] netlink: 'syz.3.1393': attribute type 9 has an invalid length. [ 190.195794][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'. [ 190.468011][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1401'. [ 190.491477][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1401'. [ 190.625806][T10862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1403'. [ 190.682238][T10864] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 190.713424][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1404'. [ 190.733205][T10865] netlink: 'syz.6.1404': attribute type 6 has an invalid length. [ 190.734933][T10868] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 190.749642][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1404'. [ 190.751476][T10865] netlink: 'syz.6.1404': attribute type 6 has an invalid length. [ 190.862474][T10868] bond0: entered promiscuous mode [ 190.873093][T10868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.955602][T10875] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.984844][T10875] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 190.995951][T10875] bond0: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 191.130665][T10890] netlink: zone id is out of range [ 191.149313][T10890] netlink: zone id is out of range [ 191.161779][T10890] netlink: zone id is out of range [ 191.178450][ T4955] Bluetooth: hci1: command 0x0406 tx timeout [ 191.184538][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 191.190994][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 191.197229][ T5646] Bluetooth: hci4: command 0x0406 tx timeout [ 191.276495][T10890] netlink: zone id is out of range [ 191.304341][T10890] netlink: zone id is out of range [ 191.310495][T10890] netlink: zone id is out of range [ 191.315815][T10890] netlink: zone id is out of range [ 191.321311][T10890] netlink: zone id is out of range [ 191.359622][T10899] netlink: 'syz.3.1411': attribute type 58 has an invalid length. [ 191.581000][T10893] syzkaller0: entered promiscuous mode [ 191.586884][T10893] syzkaller0: entered allmulticast mode [ 191.587323][T10914] netlink: 'syz.1.1416': attribute type 4 has an invalid length. [ 191.694850][T10914] .`: renamed from bond0 (while UP) [ 191.943500][T10928] xt_hashlimit: size too large, truncated to 1048576 [ 192.444311][T10969] netlink: 'syz.1.1433': attribute type 4 has an invalid length. [ 192.496289][T10969] netlink: 'syz.1.1433': attribute type 4 has an invalid length. [ 192.569500][ T24] C speed is unknown, defaulting to 1000 [ 192.580663][T10973] : renamed from bond0 (while UP) [ 192.593045][ T24] sy2: Port: 1 Link DOWN [ 192.610137][ T42] C speed is unknown, defaulting to 1000 [ 192.622648][ T42] sy2: Port: 1 Link ACTIVE [ 192.634422][T10982] syzkaller0: entered promiscuous mode [ 192.652542][T10982] syzkaller0: entered allmulticast mode [ 192.753869][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.780800][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.906403][T10988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.968102][T10995] erspan0: entered allmulticast mode [ 193.264219][T11007] syzkaller0: entered promiscuous mode [ 193.293496][T11007] syzkaller0: entered allmulticast mode [ 193.308067][T11010] vet: renamed from veth0_vlan [ 193.422427][T11019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.433948][T11019] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.481529][T11019] veth1_vlan: left promiscuous mode [ 193.495063][T11019] vet: left promiscuous mode [ 193.502767][T11019] vet: entered promiscuous mode [ 193.511439][T11019] veth1_vlan: entered promiscuous mode [ 193.522819][T11019] tipc: Resetting bearer [ 193.529210][T11019] tipc: Resetting bearer [ 193.537385][T11019] veth1_macvtap: left promiscuous mode [ 193.544651][T11019] veth0_macvtap: left promiscuous mode [ 193.551971][T11019] veth0_macvtap: entered promiscuous mode [ 193.561615][T11019] veth1_macvtap: entered promiscuous mode [ 193.577111][T11019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.587652][T11019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.596693][T11019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.605062][T11019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.616686][T11019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.625189][T11019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.635318][T11019] net_ratelimit: 46 callbacks suppressed [ 193.635335][T11019] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 193.657976][ T42] lo speed is unknown, defaulting to 1000 [ 193.664312][T11026] __nla_validate_parse: 7 callbacks suppressed [ 193.664330][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 193.683685][ T42] sz1: Port: 1 Link ACTIVE [ 193.690910][ T3342] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 193.724799][ T3342] bond2: (slave veth0_to_bond): making interface the new active one [ 193.738531][ T3342] veth0_to_bond: entered promiscuous mode [ 193.748398][ T3342] veth0_to_bond: entered allmulticast mode [ 193.757344][ T3342] bond2: active interface up! [ 193.824910][ T1018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.834852][ T1018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.847101][ T42] lo speed is unknown, defaulting to 1000 [ 193.858649][ T1018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.868175][ T1018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.881341][ T3314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.001041][T11038] openvswitch: netlink: IP tunnel dst address not specified [ 194.021724][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'. [ 194.190984][T11048] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1458'. [ 194.211689][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372402][T11051] syzkaller0: entered promiscuous mode [ 194.378226][T11051] syzkaller0: entered allmulticast mode [ 194.901704][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 194.912274][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'. [ 195.278646][T11080] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1469'. [ 196.417239][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 196.459877][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'. [ 196.680282][T11099] netlink: 'syz.3.1475': attribute type 83 has an invalid length. [ 196.734334][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1476'. [ 196.788766][T11104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.872004][T11104] macvlan2: entered promiscuous mode [ 196.893840][T11104] macvlan2: entered allmulticast mode [ 196.902935][T11104] bond6: entered promiscuous mode [ 196.917062][T11104] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.939477][T11104] bond6: left promiscuous mode [ 196.964875][T11118] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1478'. [ 197.092569][T11124] xt_hashlimit: size too large, truncated to 1048576 [ 197.380943][T11148] netlink: 'syz.2.1487': attribute type 5 has an invalid length. [ 197.389965][T11149] Cannot find set identified by id 65535 to match [ 197.398969][T11150] netlink: 'syz.2.1487': attribute type 5 has an invalid length. [ 197.863984][T11176] netlink: 'syz.6.1497': attribute type 7 has an invalid length. [ 197.936056][T11176] syz_tun: entered promiscuous mode [ 197.943123][T11176] syz_tun: left promiscuous mode [ 197.994745][ T3314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.004915][ T3314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.126293][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.372222][T11157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.383872][T11157] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 198.455511][T11157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.461711][T11157] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 198.505220][T11157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.515701][T11157] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 198.537895][T11157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.545276][T11157] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 198.599562][T11157] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 198.612984][T11157] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 198.627467][T11157] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 198.635109][T11157] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 198.669025][T11157] batman_adv: batadv0: Interface deactivated: wlan0 [ 198.827515][T11230] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 199.040181][T11239] Cannot find add_set index 0 as target [ 199.264994][T11243] __nla_validate_parse: 6 callbacks suppressed [ 199.265012][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1514'. [ 199.344431][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1514'. [ 199.384515][T11243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1514'. [ 199.423355][T11243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1514'. [ 199.501101][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 199.708208][T11266] netlink: 'syz.5.1520': attribute type 12 has an invalid length. [ 199.742870][T11266] netlink: 'syz.5.1520': attribute type 1 has an invalid length. [ 199.782701][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 199.796277][T11269] netlink: 'syz.3.1522': attribute type 8 has an invalid length. [ 199.820031][T11269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1522'. [ 199.965279][T11280] ip6gretap0: entered promiscuous mode [ 199.990828][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 200.000543][T11280] openvswitch: netlink: Missing key (keys=40, expected=80) [ 200.217269][T11293] netlink: 'syz.5.1529': attribute type 1 has an invalid length. [ 200.226107][T11293] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1529'. [ 200.322909][T11301] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 200.460211][T11310] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1534'. [ 200.625192][T11320] xt_l2tp: wrong L2TP version: 0 [ 200.707085][T11327] netlink: 'syz.5.1536': attribute type 1 has an invalid length. [ 200.830776][ T29] audit: type=1804 audit(1780723134.079:3): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1540" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=882 res=1 errno=0 [ 201.012704][ T29] audit: type=1800 audit(1780723134.079:4): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1540" name="cgroup.controllers" dev="tmpfs" ino=882 res=0 errno=0 [ 201.042963][T11333] xt_ecn: cannot match TCP bits for non-tcp packets [ 201.154633][T11342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.864689][T11376] sctp: [Deprecated]: syz.2.1554 (pid 11376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.864689][T11376] Use struct sctp_sack_info instead [ 201.912729][T11376] netlink: 'syz.2.1554': attribute type 1 has an invalid length. [ 201.968899][T11376] netlink: 'syz.2.1554': attribute type 58 has an invalid length. [ 203.625364][T11487] netlink: 'syz.2.1585': attribute type 1 has an invalid length. [ 203.692684][T11487] bond7: (slave bridge5): making interface the new active one [ 203.721721][T11487] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 204.190690][T11529] xt_l2tp: invalid flags combination: 8 [ 204.271706][T11533] netlink: 'syz.2.1598': attribute type 4 has an invalid length. [ 204.787622][T11559] syzkaller1: entered promiscuous mode [ 204.813454][T11559] syzkaller1: entered allmulticast mode [ 205.795122][T11618] v: renamed from ip_vti0 (while UP) [ 206.055761][T11631] __nla_validate_parse: 15 callbacks suppressed [ 206.055778][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1625'. [ 206.564721][T11666] xt_limit: Overflow, try lower: 271964/0 [ 206.630389][T11672] netlink: 'syz.6.1636': attribute type 12 has an invalid length. [ 206.667728][T11672] netlink: 'syz.6.1636': attribute type 29 has an invalid length. [ 206.697880][T11672] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1636'. [ 206.711438][T11672] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1636'. [ 206.861855][T11679] netlink: 'syz.5.1639': attribute type 27 has an invalid length. [ 206.882529][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1641'. [ 206.904115][T11679] netlink: 'syz.5.1639': attribute type 4 has an invalid length. [ 206.933193][T11679] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1639'. [ 207.006279][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 207.091909][T11699] openvswitch: netlink: IP tunnel dst address not specified [ 207.222597][T11707] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1648'. [ 207.257829][T11707] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 207.270966][T11707] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1648'. [ 207.284671][T11707] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1648'. [ 207.481617][T11714] IPVS: persistence engine module ip_vs_pe_@ not found [ 207.508567][T11717] xt_TCPMSS: Only works on TCP SYN packets [ 207.518657][T11717] vlan0: entered promiscuous mode [ 207.560213][T11717] team0: Port device vlan0 added [ 207.632418][T11719] netlink: 'syz.6.1653': attribute type 5 has an invalid length. [ 207.658892][T11719] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1653'. [ 207.711018][T11725] syzkaller0: entered promiscuous mode [ 207.724792][T11725] syzkaller0: entered allmulticast mode [ 207.753599][T11727] netlink: 'syz.6.1656': attribute type 10 has an invalid length. [ 207.771218][T11727] syz_tun: entered promiscuous mode [ 207.840258][T11727] : (slave syz_tun): Enslaving as an active interface with an up link [ 207.956398][T11739] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 208.145294][T11745] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 208.438897][T11761] ip6gretap0: left promiscuous mode [ 208.542614][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 208.609792][T11761] macsec0: left allmulticast mode [ 208.659052][T11761] geneve2: left promiscuous mode [ 208.689235][T10668] C speed is unknown, defaulting to 1000 [ 208.700262][T10668] sy2: Port: 1 Link DOWN [ 208.874813][T11777] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 208.915078][T11777] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.937539][T11777] gretap3: entered promiscuous mode [ 208.947824][T11777] gretap3: entered allmulticast mode [ 208.970079][ T1018] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 256 - 0 [ 208.989416][ T1018] netdevsim netdevsim1 : unset [0, 1] type 1 family 0 port 8472 - 0 [ 209.017598][ T1018] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.037421][ T1018] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 36849 - 0 [ 209.053858][ T1018] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 209.068333][ T1018] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 209.087872][ T1018] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.106330][ T1018] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 36849 - 0 [ 209.154154][T11798] netlink: 'syz.2.1672': attribute type 11 has an invalid length. [ 209.172693][ T1018] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 209.200698][ T1018] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 209.229557][ T1018] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.274728][ T1018] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 36849 - 0 [ 209.292028][ T1018] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 209.304081][ T1018] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 209.331164][ T1018] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.346247][ T1018] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 36849 - 0 [ 209.399383][T11818] block nbd0: Unsupported socket: should be TCP or UNIX. [ 209.440763][T11818] validate_nla: 1 callbacks suppressed [ 209.440783][T11818] netlink: 'syz.1.1674': attribute type 15 has an invalid length. [ 209.471251][T11813] netlink: 'syz.5.1673': attribute type 12 has an invalid length. [ 209.731633][T11809] lo speed is unknown, defaulting to 1000 [ 209.760938][T11828] netlink: 'syz.6.1678': attribute type 12 has an invalid length. [ 209.786098][T11829] 8021q: VLANs not supported on sit0 [ 210.010947][T11845] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.199450][T11852] syzkaller0: entered promiscuous mode [ 210.225051][T11852] syzkaller0: entered allmulticast mode [ 210.517468][T11862] xt_hashlimit: max too large, truncated to 1048576 [ 210.710656][T11809] xfrm0 speed is unknown, defaulting to 1000 [ 211.044772][T11882] netlink: 'syz.5.1692': attribute type 1 has an invalid length. [ 211.232036][T11889] netlink: 'syz.5.1694': attribute type 1 has an invalid length. [ 211.256255][T11889] __nla_validate_parse: 4 callbacks suppressed [ 211.256273][T11889] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1694'. [ 211.310904][T11809] C speed is unknown, defaulting to 1000 [ 211.343704][T11889] gre2: entered promiscuous mode [ 211.352623][T11889] gre2: entered allmulticast mode [ 211.561478][T11895] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 211.853045][ T29] audit: type=1804 audit(1780723145.099:5): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1700" name="/newroot/222/cgroup.controllers" dev="tmpfs" ino=1143 res=1 errno=0 [ 211.915070][ T29] audit: type=1800 audit(1780723145.099:6): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1700" name="cgroup.controllers" dev="tmpfs" ino=1143 res=0 errno=0 [ 211.961354][T11920] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1701'. [ 212.022444][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1702'. [ 212.171282][T11927] syzkaller1: entered allmulticast mode [ 212.601988][T11945] netlink: 'syz.2.1709': attribute type 39 has an invalid length. [ 212.603306][T11944] IPVS: length: 239 != 24 [ 213.032510][T11939] tipc: Failed to remove unknown binding: 66,1,1/0:2489325842/2489325844 [ 213.493309][T11975] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.562169][T11975] bond5: (slave lo): Enslaving as an active interface with an up link [ 213.578657][T11975] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 213.621223][T11991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.215252][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 214.255519][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 214.289974][T12014] netlink: 'syz.2.1728': attribute type 3 has an invalid length. [ 214.305602][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 214.320296][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 214.345326][T12014] netlink: 'syz.2.1728': attribute type 3 has an invalid length. [ 214.383312][T12021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1728'. [ 214.422476][T12015] bond5: option mode: unable to set because the bond device has slaves [ 215.221295][T12059] tipc: Started in network mode [ 215.234289][T12059] tipc: Node identity ac14142f, cluster identity 4711 [ 215.244112][T12059] tipc: New replicast peer: 0.0.0.0 [ 215.252727][T12059] tipc: Enabled bearer , priority 10 [ 215.303836][T12070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1746'. [ 215.316600][T12057] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 215.334681][T12057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1742'. [ 215.622611][T12082] macsec1: entered promiscuous mode [ 215.697643][T12080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.716944][T12086] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 215.817921][T12099] netlink: 'syz.6.1752': attribute type 21 has an invalid length. [ 215.826188][T12098] netlink: 'syz.6.1752': attribute type 21 has an invalid length. [ 215.838436][T12099] netlink: 'syz.6.1752': attribute type 4 has an invalid length. [ 215.849327][T12099] netlink: 'syz.6.1752': attribute type 5 has an invalid length. [ 215.858241][T12098] netlink: 'syz.6.1752': attribute type 4 has an invalid length. [ 215.868221][T12099] netlink: 'syz.6.1752': attribute type 21 has an invalid length. [ 215.886337][T12098] netlink: 'syz.6.1752': attribute type 5 has an invalid length. [ 215.939316][T12099] netlink: 'syz.6.1752': attribute type 4 has an invalid length. [ 215.958914][T12099] netlink: 'syz.6.1752': attribute type 5 has an invalid length. [ 216.368936][T10668] tipc: Node number set to 2886997039 [ 216.605638][T12147] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20000 [ 216.663281][T12153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.080272][T12180] __nla_validate_parse: 8 callbacks suppressed [ 217.080292][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 217.122643][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 217.359137][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1776'. [ 217.449461][T12196] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20001 [ 217.583651][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'. [ 217.630021][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1784'. [ 217.647197][T12212] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1783'. [ 217.751247][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 217.814103][T12219] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 218.158323][T12236] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1791'. [ 218.258734][T12236] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.265940][T12236] bridge0: port 3(bond6) entered blocking state [ 218.273113][T12236] bridge0: port 3(bond6) entered disabled state [ 218.280831][T12236] bond6: entered allmulticast mode [ 218.289191][T12236] bond6: entered promiscuous mode [ 218.297374][T12236] bridge0: port 3(bond6) entered blocking state [ 218.303956][T12236] bridge0: port 3(bond6) entered forwarding state [ 219.087948][ T58] bridge0: port 3(bond6) entered disabled state [ 223.006796][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.297315][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 247.326303][ T30] INFO: task syz.0.336:7030 blocked for more than 143 seconds. [ 247.333959][ T30] Not tainted syzkaller #0 [ 247.342796][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.352433][ T30] task:syz.0.336 state:D stack:27112 pid:7030 tgid:7028 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 247.364605][ T30] Call Trace: [ 247.368157][ T30] [ 247.371096][ T30] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 247.375596][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 247.380653][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 247.387420][ T30] ? __pfx___schedule+0x10/0x10 [ 247.392415][ T30] ? schedule+0x90/0x360 [ 247.396936][ T30] schedule+0x164/0x360 [ 247.413306][ T30] schedule_preempt_disabled+0x13/0x30 [ 247.446622][ T30] __mutex_lock+0x7f7/0x1550 [ 247.481552][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 247.508075][ T30] ? __mutex_lock+0x608/0x1550 [ 247.544790][ T30] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 247.570264][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 247.596178][ T30] ? __asan_memset+0x22/0x50 [ 247.612321][ T30] ? __nla_validate_parse+0x2480/0x2dc0 [ 247.646682][ T30] nfsd_nl_listener_set_doit+0x141/0x1670 [ 247.658875][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 247.676819][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 247.696359][ T30] ? __nla_parse+0x40/0x60 [ 247.720497][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 247.742358][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 247.796638][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 247.822387][ T30] ? __asan_memcpy+0x40/0x70 [ 247.839232][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 247.868985][ T30] ? bpf_lsm_capable+0x9/0x20 [ 247.888995][ T30] ? security_capable+0x7e/0x2c0 [ 247.903453][ T30] genl_rcv_msg+0x61c/0x7a0 [ 247.920118][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.934975][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 247.964030][ T30] netlink_rcv_skb+0x232/0x4b0 [ 247.999543][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.031531][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.053550][ T30] ? down_read+0x270/0x2e0 [ 248.066397][ T30] ? genl_rcv+0xd/0x40 [ 248.078208][ T30] genl_rcv+0x28/0x40 [ 248.098529][ T30] netlink_unicast+0x75c/0x8e0 [ 248.117196][ T30] netlink_sendmsg+0x813/0xb40 [ 248.141866][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.166155][ T30] ? page_table_check_set+0x126/0x510 [ 248.178402][ T30] ? lock_acquire+0x106/0x350 [ 248.192451][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.221919][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.249317][ T30] ____sys_sendmsg+0x972/0x9f0 [ 248.271636][ T30] ? __might_fault+0xaf/0x130 [ 248.276733][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.282078][ T30] ? import_iovec+0x73/0xa0 [ 248.286900][ T30] ___sys_sendmsg+0x2a5/0x360 [ 248.291611][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 248.296610][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.301844][ T30] ? __fget_files+0x2a/0x420 [ 248.306511][ T30] ? __fget_files+0x3a0/0x420 [ 248.311223][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 248.316268][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.321753][ T30] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 248.327478][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 248.332789][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.338892][ T30] do_syscall_64+0x174/0x580 [ 248.343485][ T30] ? trace_irq_disable+0x3b/0x140 [ 248.348576][ T30] ? clear_bhb_loop+0x40/0x90 [ 248.353264][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.359264][ T30] RIP: 0033:0x7fa76999ce59 [ 248.363730][ T30] RSP: 002b:00007fa76a900028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.372556][ T30] RAX: ffffffffffffffda RBX: 00007fa769c16090 RCX: 00007fa76999ce59 [ 248.380841][ T30] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 248.388888][ T30] RBP: 00007fa769a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 248.397116][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.405108][ T30] R13: 00007fa769c16128 R14: 00007fa769c16090 R15: 00007ffc1dc45b48 [ 248.413228][ T30] [ 248.418064][ T30] [ 248.418064][ T30] Showing all locks held in the system: [ 248.425911][ T30] 1 lock held by khungtaskd/30: [ 248.457714][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 248.467790][ T30] 3 locks held by kworker/u8:2/35: [ 248.472934][ T30] 3 locks held by kworker/1:1/42: [ 248.478104][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 248.489157][ T30] #1: ffffc90000b27c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 248.499517][ T30] #2: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 248.510586][ T30] 2 locks held by kworker/u8:5/142: [ 248.515791][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 248.527949][ T30] #1: ffffc90002f4fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 248.540795][ T30] 2 locks held by getty/5391: [ 248.545487][ T30] #0: ffff8880322540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 248.555427][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 248.565676][ T30] 1 lock held by syz-executor/5634: [ 248.570969][ T30] #0: ffff888079d44ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 248.580961][ T30] 1 lock held by syz-executor/5643: [ 248.586545][ T30] #0: ffff88807ba04ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 248.596849][ T30] 1 lock held by syz-executor/5651: [ 248.602071][ T30] #0: ffff88807d4fcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 248.612394][ T30] 3 locks held by kworker/1:3/5733: [ 248.618623][ T30] #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 248.629094][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 248.638197][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 248.647295][ T30] 2 locks held by syz.0.336/7029: [ 248.652355][ T30] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 248.660695][ T30] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 248.671120][ T30] 2 locks held by syz.0.336/7030: [ 248.676286][ T30] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 248.684510][ T30] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 248.695104][ T30] 2 locks held by syz.4.367/7140: [ 248.700702][ T30] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 248.709233][ T30] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 248.719622][ T30] 2 locks held by syz-executor/7703: [ 248.724929][ T30] #0: ffff888056868ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 248.734937][ T30] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 248.746079][ T30] 1 lock held by syz-executor/7783: [ 248.751307][ T30] #0: ffff888056d88ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 248.822954][ T30] [ 248.830592][ T30] ============================================= [ 248.830592][ T30] [ 248.840088][ T30] NMI backtrace for cpu 1 [ 248.840113][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 248.840132][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.840142][ T30] Call Trace: [ 248.840149][ T30] [ 248.840156][ T30] dump_stack_lvl+0xe8/0x150 [ 248.840180][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 248.840201][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 248.840222][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 248.840246][ T30] sys_info+0x135/0x170 [ 248.840266][ T30] watchdog+0xfd3/0x1030 [ 248.840294][ T30] ? watchdog+0x1c9/0x1030 [ 248.840322][ T30] kthread+0x389/0x470 [ 248.840352][ T30] ? __pfx_watchdog+0x10/0x10 [ 248.840373][ T30] ? __pfx_kthread+0x10/0x10 [ 248.840393][ T30] ret_from_fork+0x514/0xb70 [ 248.840414][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 248.840431][ T30] ? __switch_to+0xc79/0x1410 [ 248.840456][ T30] ? __pfx_kthread+0x10/0x10 [ 248.840477][ T30] ret_from_fork_asm+0x1a/0x30 [ 248.840508][ T30] [ 248.840515][ T30] Sending NMI from CPU 1 to CPUs 0: [ 248.951641][ C0] NMI backtrace for cpu 0 [ 248.951657][ C0] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 248.951675][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.951686][ C0] Workqueue: krds_cp_wq#7/3 rds_connect_worker [ 248.951709][ C0] RIP: 0010:__lock_acquire+0x83d/0x2cf0 [ 248.951729][ C0] Code: 4d 03 eb c3 89 e8 25 ff 1f 00 00 c1 ed 03 81 e5 00 60 00 00 09 c5 48 89 d8 48 c1 e8 20 29 c5 89 c1 c1 c1 04 31 e9 01 d8 29 cb <89> ca c1 c2 06 31 da 01 c1 29 d0 89 d6 c1 c6 08 31 c6 01 ca 29 f1 [ 248.951742][ C0] RSP: 0000:ffffc900015f7538 EFLAGS: 00000087 [ 248.951755][ C0] RAX: 00000000b0869eac RBX: 00000000d8b89be7 RCX: 00000000684a9ec6 [ 248.951766][ C0] RDX: 0000000000000008 RSI: ffff88801b38ca08 RDI: ffff88801b38be00 [ 248.951777][ C0] RBP: 00000000907ca130 R08: ffffffff8971850f R09: ffff888048e16068 [ 248.951788][ C0] R10: 0000000000000000 R11: fffff520002beed4 R12: ffff88801b38ca08 [ 248.951799][ C0] R13: ffff88801b38ca08 R14: ffff88801b38be00 R15: 0000000000000003 [ 248.951810][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 248.951822][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.951838][ C0] CR2: 000055870a011048 CR3: 000000007dc60000 CR4: 00000000003526f0 [ 248.951852][ C0] Call Trace: [ 248.951858][ C0] [ 248.951872][ C0] ? __ipv6_chk_addr_and_flags+0x187/0x7e0 [ 248.951895][ C0] reacquire_held_locks+0x104/0x190 [ 248.951913][ C0] ? release_sock+0x2f/0x260 [ 248.951934][ C0] lock_release+0x199/0x3c0 [ 248.951949][ C0] ? __inet6_bind+0x399/0xf60 [ 248.951967][ C0] release_sock+0x147/0x260 [ 248.951987][ C0] __inet6_bind+0x399/0xf60 [ 248.952008][ C0] kernel_bind+0x13e/0x1c0 [ 248.952025][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 248.952046][ C0] ? rds_tcp_conn_path_connect+0x335/0x930 [ 248.952069][ C0] rds_tcp_conn_path_connect+0x53e/0x930 [ 248.952094][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 248.952114][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 248.952135][ C0] ? process_scheduled_works+0xa70/0x1860 [ 248.952152][ C0] ? process_scheduled_works+0xa70/0x1860 [ 248.952170][ C0] rds_connect_worker+0x1d8/0x290 [ 248.952185][ C0] ? process_scheduled_works+0xa70/0x1860 [ 248.952201][ C0] process_scheduled_works+0xb5d/0x1860 [ 248.952228][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.952246][ C0] ? assign_work+0x3d5/0x5e0 [ 248.952262][ C0] worker_thread+0xa53/0xfc0 [ 248.952289][ C0] kthread+0x389/0x470 [ 248.952306][ C0] ? __pfx_worker_thread+0x10/0x10 [ 248.952320][ C0] ? __pfx_kthread+0x10/0x10 [ 248.952338][ C0] ret_from_fork+0x514/0xb70 [ 248.952356][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 248.952371][ C0] ? __switch_to+0xc79/0x1410 [ 248.952392][ C0] ? __pfx_kthread+0x10/0x10 [ 248.952410][ C0] ret_from_fork_asm+0x1a/0x30 [ 248.952434][ C0] [ 249.241952][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 249.248846][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 249.257939][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.267990][ T30] Call Trace: [ 249.271269][ T30] [ 249.274191][ T30] vpanic+0x56c/0xa60 [ 249.278161][ T30] ? __pfx___schedule+0x10/0x10 [ 249.283002][ T30] ? __pfx_vpanic+0x10/0x10 [ 249.287485][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 249.293626][ T30] panic+0xc5/0xd0 [ 249.297328][ T30] ? __pfx_panic+0x10/0x10 [ 249.301730][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 249.307094][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 249.313256][ T30] watchdog+0x102c/0x1030 [ 249.317583][ T30] ? watchdog+0x1c9/0x1030 [ 249.322000][ T30] kthread+0x389/0x470 [ 249.326065][ T30] ? __pfx_watchdog+0x10/0x10 [ 249.330741][ T30] ? __pfx_kthread+0x10/0x10 [ 249.335324][ T30] ret_from_fork+0x514/0xb70 [ 249.339902][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 249.345000][ T30] ? __switch_to+0xc79/0x1410 [ 249.349677][ T30] ? __pfx_kthread+0x10/0x10 [ 249.354258][ T30] ret_from_fork_asm+0x1a/0x30 [ 249.359023][ T30] [ 249.362328][ T30] Kernel Offset: disabled [ 249.366640][ T30] Rebooting in 86400 seconds..