last executing test programs: 56.744721024s ago: executing program 1 (id=5257): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000001e6400000000000045040300010000001704000001000a00b7040000ff010000720af2fe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000000000000000000000000007a4604baa70bda5d5f18f54e9638350a6dd81a55ab5528efd1ef5a564908db7cce99e5c569c2947763b90e03b6d1a53b590e4ff4867f0d86b9af58244866b9df33634c8d85ce1b3bfa3e5bec6989c907c2f46b9a837676e07d87bb7dba3f34694ceb5b9faf10eece00bcfd503ed3f3048782665a848d79e443de4ba97db3a9bde69be7612cb1441c61eadd5bb4494ff2eb189c2ab3a241c12f764c0719650c1b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000a"], 0x2c}, 0x1, 0xc00000000000000}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000002740)) (async) pipe(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt(r6, 0x1, 0x6, 0x0, &(0x7f00000008c0)) (async) getsockopt(r6, 0x1, 0x6, 0x0, &(0x7f00000008c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r10, &(0x7f0000001480)=""/4096, 0x38) write$nci(r3, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0x3, 0x2, 0x2, 0x2, 0x1, 0x1, 0x6, {0x3, 0x1, ','}, 0x4, 0xf, 0xfc, 0x70, 0x1, 's'}}, 0x13) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x8c, r11, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400008, 0x2}}}}, [@NL80211_ATTR_FRAME={0x66, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_b, @random="51b28310e0ed", {0x5, 0x9}}, 0x64ec, @default, 0x15da, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x4, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x8, 0x3, 0x2, 0x0, {0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x400}}, @void, @void, @val={0x76, 0x6, {0xfb, 0x1, 0x31, 0xfff}}, [{0xdd, 0x6, "c185dd2d0ac5"}, {0xdd, 0x6, "e172fcd8c1eb"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048041}, 0x841) 55.761899776s ago: executing program 1 (id=5275): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="65f6363a84957075fc06c500000000003f0000240012800b0001006272696467650000140002800500070006efffff04", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 55.490242888s ago: executing program 1 (id=5281): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000b0000f2000200000f00000008000300", @ANYRES32=r2, @ANYBLOB="08003200000400000800390009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="14a0a50070696d36b8ef67300000000008bf275e67e193bd2726051c0ecba1df0ef9cc9415b343831f26fe0c0017800400070004000400"], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x3}}) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000000006907864019445111c9a9e930fd6e1", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) (async) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb9423523599751d1ec0cffc8792cd8000080", 0x3a, 0x0, 0x0, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x2, @empty}]}, &(0x7f0000000180)=0x10) (async) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000280)=0x5, 0x4) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000008143005467276a2aea85bafec23c9c8be2885d03cd9884a13f55967d91b06185bbcaa89f45104486d81e7ecd1349e3bf05aa99", @ANYRES16=r10, @ANYBLOB="120a2abd7000ffdbdf2502000000050012000200000008000b000300000005000600010000000c001000000400000000000006000e000d0000000500220001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x2000c084) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x3ac, 0x30, 0x800, 0x0, 0x0, {}, [{0x398, 0x1, [@m_simple={0x260, 0x30, 0x0, 0x0, {{0xb}, {0x15c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x6, 0x3}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0xfe, 0x3, 'GPL\x00\xd3\xdbk\x04\x14_\xf2t\xa8\xd6v\xa7)?a\xf0\x17\xa4u~+K\x8d\xd1_HVV\xe8mFQ\f\xda\xb2(*t\x12\xdeU\x9cg\x84\'\xf0\xdb\x8f\xf44\x84\xb03\xcc\x82W\xd4\x86\xb9\xaf\xef\xf9Y\xafcLq+\x1d\xb6\xde2\x95*\x18\x9b\xae\x1f\x9b\xe9\x18yy0\b\x87\xab1$\x89\xb3\xbf\x8c\xa6\xfc\n\xe4\xc9\x7f/E\xdd\xb1\x15C\x94~\x8e\x96\x00\x94\tN\xc45M\xe2\xfb\xc6\x140x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}]}}]}, 0x88}}, 0x20000000) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffe}]}, 0x48}}, 0x40001) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x50, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="418cb04d5101"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000070a01021d945ae9637a9f540000000109000100732be53e44e55f4fe4d5797a3100000030"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd}, {0xc}, {0xc}, {0x8, 0x2}, {0x6, 0x3}, {0xb, 0x4}, {0xa, 0x4}, {0x8, 0x2}]}, @fwd={0x4}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000600)=""/194, 0x79, 0xc2, 0x1, 0x1, 0x10000}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x48) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000010ef5f6ccf0e00000900000000200000", @ANYRES32=r12, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000000000000000000ce08bdf304a1a705c61f3334e64bf8ca1e447f9342f8574402b8935943aa33ecde21c7b1f49deef66054a80247e475866c6db2cf58a008b2776118db64d91de79383d42f58bc6bee1203cdd8efdcfa510000004000000020d8450c3b1d3808d02a14080000001b7e53f524e24a302065be027b4258344e1b34fac35af26c25e706915199640909cc2c02af8b5cf8bc9c2961472ae91581"], 0x50) 2.201052603s ago: executing program 5 (id=5800): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) (async) pipe(&(0x7f0000000540)={0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f0000000040)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0xb6}], &(0x7f0000000100)='GPL\x00', 0xf, 0x99, &(0x7f0000000140)=""/153, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r1, r2, r3, r4, r5]}, 0x94) 2.054319956s ago: executing program 5 (id=5801): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000011c0)=@broute={'broute\x00', 0x20, 0x4, 0x1148, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x55, 0x1a, 'dummy0\x00', 'vlan1\x00', 'vcan0\x00', 'macvlan1\x00', @local, [0x0, 0xff, 0x0, 0x0, 0xff], @broadcast, [], 0x886, 0x886, 0x8b6, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x3}, {0xfffffffb}, {0x61}, {0x4eb, 0x1}, {0x3, 0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x41c, 0x2}], [{0xc, 0x1}, {0xfffffffc, 0x40}, {0x1, 0x4}, {0x1, 0x2}, {0xc, 0x32}, {0x9, 0x89d4282}, {0x9, 0x3}, {0x5, 0x4}, {0x5, 0x8}, {0x40, 0x3}, {0x4, 0xa}], 0x4, 0x1}, {[{0x8, 0x3}, {0x0, 0x3}, {0xd73, 0x3}, {0x4}, {0x9}, {0x9, 0x1}, {0x6, 0x3}, {0x70e6, 0x1}, {0xca, 0x3}, {0x1}, {0x6, 0x3}], [{0x0, 0x2}, {0xff, 0x3}, {0x7, 0x81}, {0x76, 0x1}, {0x4, 0x1}, {0x19, 0xe93f}, {0x3, 0x3}, {0x2, 0xb81}, {0x1, 0x7}, {0xde8, 0xffff1513}, {0x4d4c, 0x3}], 0x7, 0x4}, {[{0x6, 0x2}, {0x6, 0x3}, {0x0, 0x3}, {0x800, 0x3}, {0x2, 0x1}, {0x5, 0x2}, {0xfffffff8, 0x2}, {0x8, 0x3}, {0xd}, {0x3462, 0x3}, {0x7fff, 0x2}], [{0x2, 0x800}, {0x2, 0x9}, {0x8, 0x4b0a}, {0x2}, {0x618f9bac, 0x7fffffff}, {0x7, 0x4}, {0x8, 0x40}, {0x882, 0x3ff}, {0x9, 0x1}, {0x401, 0xe0}, {0x1, 0x7}], 0x1, 0x4}, {[{0x10, 0x1}, {0x7, 0x1}, {0x8, 0x1}, {0x9}, {0x7}, {0x7, 0x1}, {0xfffffff8, 0x1}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x2}, {0x2000}], [{0x400, 0x9c}, {0x5, 0x4}, {0x3ff, 0x9}, {0x5, 0x1}, {0x3, 0xacbb}, {0x1ff, 0x9}, {0x8, 0x75}, {0x8, 0x6}, {0x101, 0x4c0}, {0xc, 0x8000}, {0x1, 0x2}], 0x2, 0x4}, {[{0x5, 0x3}, {0xfffff001, 0x1}, {0xfffffffc}, {0x3, 0x1}, {0x1200000}, {0x4}, {0xf5, 0x2}, {0x8a, 0x1}, {0x6, 0x2}, {0xac0}, {0x58c62228, 0x2}], [{0xfffffbff, 0x1}, {0xf5, 0x2}, {0x2, 0x10001}, {0x4, 0xe}, {0x9, 0x9}, {0x2, 0x3}, {0xb, 0x9}, {0xfffffffc, 0x1}, {0x1, 0x18}, {0xfffffff3, 0xe2}, {0xfffff801, 0x5}], 0xa, 0xfe}, {[{0xc7b, 0x1}, {0x2}, {0x6}, {0x8, 0x3}, {0x3, 0x3}, {0x8000}, {0xfff, 0x3}, {0x7f, 0x3}, {0x2, 0x3}, {0x4, 0x2}, {0x7}], [{0x5, 0x4}, {0x9, 0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x2, 0xf0}, {0x6, 0x1}, {0x9, 0xa0}, {0x6, 0x9}, {0x3, 0x1}, {0x9, 0x8}, {0x800, 0xe}], 0x2, 0x4}, {[{0x7182, 0x2}, {0x5}, {0x9, 0x1}, {0x3, 0x2}, {0x5}, {0x9fbb, 0x3}, {0xfff, 0x2}, {0x8, 0x2}, {0x2c0, 0x6}, {0x8000, 0x1}, {0x0, 0x3}], [{0x7, 0x21f8}, {0x100, 0x7}, {0x5, 0xfffffc01}, {0x8, 0x1}, {0x2, 0x72}, {0x9f8, 0x1}, {0xc01b, 0x3}, {0x5, 0x2}, {0x0, 0x401}, {0xd}, {0x6, 0x9}], 0x0, 0xb}, {[{0x401, 0x3}, {0x7fff, 0x3}, {0x7, 0x2}, {0x63, 0x2}, {0x2, 0x2}, {0x9}, {0x8001, 0x2}, {0x8, 0x2}, {0x101, 0x1}, {0xf, 0x1}], [{0x4, 0x3ff}, {0x441, 0x6}, {0x7, 0x6}, {}, {0x8e8, 0x10000}, {0x9, 0xfffffbff}, {0x2, 0x684}, {0x81, 0x8000}, {0xc, 0x7}, {0x6, 0x4}, {0x3fc, 0x7ff}], 0x1, 0x7}, {[{0x7fff}, {0x5, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x200, 0x2}, {0x6, 0x3}, {0xfe5fbf8}, {0x91d3, 0x1}, {0x5}, {0xe4, 0x3}, {0xffffffff, 0x3}], [{0x0, 0xa166}, {0x0, 0xd023}, {0xfffffff7, 0x8}, {0x9}, {0x1000, 0x3ff}, {0x3, 0x40}, {0x2, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x7f, 0x2d}, {0x6, 0xffff6158}], 0x9, 0x5}, {[{0x4, 0x3}, {0x7, 0x2}, {0x8}, {0x4, 0x1}, {0xa}, {}, {0x3, 0x3}, {0xb7e1, 0x1}, {0x63c8, 0x3}, {0x10001}, {0x3, 0x2}], [{0x40, 0x7}, {0x356, 0xffff0000}, {0x1, 0x2}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x3}, {0xab26, 0x2}, {0x5, 0x2}, {0x9b8d, 0x2}, {0x351, 0xffff}, {0x2, 0x5}], 0x0, 0x8}, {[{0x3, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x9cb}, {0xfffffff8, 0x3}, {0xfffffffb, 0x2}, {0x1, 0x2}, {0x8, 0x3}, {0x8}, {0x0, 0x1}, {0x8, 0x2}], [{0x2, 0x95f}, {0x1, 0xfffffffb}, {0x7f, 0x2}, {0x5}, {0x8, 0x81}, {0x80000000, 0x1000}, {0xfffffffa, 0x6}, {0x159, 0x7}, {0x9, 0x1}, {0x0, 0x8}, {0xd, 0x2f}], 0x1, 0x7}], 0x7, 0x1}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xffffff50}}}}, {0x11, 0x68, 0x8100, 'pimreg\x00', 'bridge_slave_1\x00', 'ip6gre0\x00', 'veth0_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x316, 0x35e, 0x396, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x32, [{0x4, 0x6, 0xfc, 0x8}, {0xe, 0x2a, 0x80, 0x6d}, {0x6da, 0x80, 0x5, 0x7ff80}, {0x81, 0x7, 0x9, 0x7}, {0x9, 0x6, 0x1, 0xffffff67}, {0x8, 0x7, 0x8, 0x100}, {0x4, 0x7}, {0x5, 0x4, 0x7, 0x8}, {0x3, 0x8, 0x1, 0x1ff}, {0xb6, 0x0, 0xfb, 0x4}, {0x9, 0x8, 0x2d, 0x4}, {0x7, 0x81, 0x9, 0x2}, {0x9, 0x35, 0x4, 0x4}, {0x40, 0x0, 0x0, 0x3}, {0x7, 0x2, 0x4, 0x100}, {0xfff7, 0x1, 0x81, 0x4}, {0x1, 0x0, 0xd4, 0x8}, {0x7, 0x6, 0x8, 0x5}, {0x5, 0x1, 0x5, 0x8}, {0x7, 0x2, 0x10, 0x7}, {0x73b4, 0xd4, 0x81, 0xa6}, {0x2b8, 0x3, 0x4, 0x1}, {0x1, 0xaa, 0x1}, {0x2, 0x9, 0x94, 0x6}, {0x2, 0x7f, 0x4, 0x9}, {0xe43e, 0x1, 0x6, 0x1}, {0x8, 0x99, 0x1, 0x2}, {0x2, 0x2, 0xa, 0x1}, {0x9, 0x78, 0xfd, 0xfffffffe}, {0x1, 0x13, 0x10, 0xffffff7f}, {0x200, 0x0, 0xf7, 0xf39c}, {0x8, 0xd, 0x0, 0xfffffffe}, {0x7, 0x10, 0x3, 0x4}, {0x800, 0x7, 0x6, 0x6}, {0x0, 0x0, 0xf0, 0xa8d2}, {0x8, 0x5, 0xb, 0x1}, {0xfffa, 0x40, 0x3, 0xf087}, {0x8, 0x2, 0x42, 0xf}, {0xf15b, 0xf8, 0xa, 0x2}, {0x800, 0xb, 0x0, 0x10000}, {0x7, 0x8, 0x14, 0x5}, {0xff, 0xe, 0x0, 0x40}, {0x8, 0xf7, 0x7, 0xbe}, {0x1, 0xa5, 0x0, 0x1}, {0xcc42, 0x8, 0xf, 0x2}, {0x8edb, 0x7f, 0x58, 0x7}, {0x10, 0x0, 0x2, 0x3}, {0x1, 0x10, 0x90, 0x6}, {0x87, 0xb, 0x8, 0x5}, {0x4, 0x1, 0xc, 0x8}, {0x401, 0x9, 0x4a, 0x2}, {0xe04, 0x5, 0x4, 0x5}, {0x12, 0x1}, {0x1, 0x9, 0x80, 0x8}, {0xb9, 0x0, 0x2, 0x3ff}, {0x5, 0xf8, 0x4, 0x7a34}, {0xaa4, 0x2, 0x62, 0x101}, {0xbe3, 0x4, 0xff, 0x3}, {0x3ff, 0x4, 0x43, 0x3}, {0x3, 0x4, 0x5, 0xfffffffa}, {0x5, 0x4, 0x2, 0x2}, {0xe, 0x2, 0x23, 0xf}, {0x8, 0x8, 0x2, 0x67}, {0x2, 0x7, 0x2, 0x80}], {0x4}}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'veth0_to_hsr\x00', 0x0, 0x3, 0x21c1, 0x7, 0x9, 0x2, {}, {0x4}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x75, 0x3, {0x4}}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x11, 0x0, 0x805, 'wg2\x00', 'gretap0\x00', 'gretap0\x00', 'tunl0\x00', @empty, [0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff], 0xe6, 0xe6, 0x11e, [@mac={{'mac\x00', 0x0, 0x10}, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}}}, @time={{'time\x00', 0x0, 0x18}, {{0x2, 0x2, 0x1aec, 0x8f47, 0x0, 0x60}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}, {0x9, 0x20, 0x88be, 'hsr0\x00', 'pim6reg\x00', 'macsec0\x00', 'batadv0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x2e6, 0x31e, 0x34e, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x8, [{0x3a79, 0x7, 0x0, 0x16}, {0xee7a, 0x4, 0x2, 0xffffffff}, {0x8, 0x0, 0x8, 0x9}, {0xfff7, 0x5, 0x40, 0x5}, {0x3, 0x7, 0xe, 0x2}, {0x1, 0x5b, 0x91, 0x8}, {0x7, 0x0, 0xc, 0x10}, {0xc, 0x0, 0x0, 0x5391}, {0x2, 0x2, 0xf7, 0x4e}, {0x7, 0xd, 0xe, 0x2}, {0x5, 0xe2, 0xf5, 0x401}, {0x0, 0x9, 0x4, 0x7}, {0x5a2, 0xed, 0x7, 0x5}, {0x9, 0xff, 0x1, 0x10001}, {0xf3, 0x12, 0x7f, 0xde32}, {0x5, 0xa9, 0xf7, 0x100}, {0xffff, 0x0, 0x0, 0xfffff000}, {0x5, 0x3, 0x9, 0x3}, {0xc93d, 0x1, 0x2}, {0xe, 0x7, 0x81}, {0x9, 0x6, 0x8, 0x4}, {0x6, 0x2, 0x5, 0x60}, {0xdde, 0x9, 0x7, 0x36}, {0x2, 0x8, 0xd, 0x470}, {0xad35, 0xff, 0x0, 0x5}, {0xc, 0x17, 0x5, 0x8}, {0x7, 0x2, 0x4, 0x8}, {0x1, 0x7, 0xf7, 0x3}, {0x7, 0xd, 0x10, 0x7fff}, {0x7, 0x4, 0x0, 0x3}, {0xfffd, 0x0, 0x7f, 0x7}, {0x6, 0x7, 0x6, 0x4}, {0x1, 0x1, 0xfb, 0xffffffff}, {0x8e9e, 0x2, 0x3, 0x55}, {0xe2b9, 0x2, 0x7f, 0x800}, {0x4, 0x9, 0x9, 0x1}, {0x0, 0x6, 0x44, 0x3}, {0xffff, 0x6, 0x0, 0x700}, {0xd1, 0x3, 0x0, 0x1}, {0x3, 0x3, 0xf4, 0xe}, {0x6, 0x6, 0x8, 0x7fffffff}, {0x1, 0x1, 0x2, 0x10}, {0x0, 0x4, 0x0, 0x3}, {0x0, 0xfe, 0x6e, 0xc9}, {0xff, 0x7, 0x7, 0x4}, {0x7, 0x93, 0x7, 0x84}, {0x2, 0x25, 0x2, 0x8}, {0xe7, 0x4, 0x5, 0x5d7ae7ca}, {0xbfb, 0x59, 0x42, 0x1c0c}, {0x39a6, 0x0, 0x8, 0x3800000}, {0x8, 0x5, 0x9, 0x10001}, {0x2, 0x6, 0x0, 0x4}, {0x5, 0x2, 0x40, 0xffff}, {0x8, 0x3, 0x6, 0x3}, {0x200, 0xff, 0x1, 0xfffffffe}, {0x9, 0xd3, 0x10, 0xfff}, {0x9, 0xf9, 0x9, 0x4}, {0x4, 0x8, 0xa, 0x9}, {0x8001, 0x0, 0x1, 0x7}, {0x0, 0xc, 0x8, 0x6}, {0x81, 0x2, 0x80, 0x3}, {0x40, 0x0, 0x5}, {0x6, 0x9, 0x7, 0x3}, {0x5, 0x7, 0x40, 0x69a000}], {0x7}}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x6, 0x8, 0x1, 0x13, 0xb6}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffd}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x11c0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001280)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x8000000000000001, 0x1e6, 0x396a, 0x4], 0x1, &(0x7f0000001240)=[{}], 0x0, [{}]}, 0x88) r1 = socket(0x6, 0x5, 0x3) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000001340)={0x5, 0x71}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0x40000) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000014c0)={'veth1_virt_wifi\x00', {0x2, 0x4e20, @local}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001580)={'syztnl0\x00', &(0x7f0000001540)={'tunl0\x00', 0x0, 0x7800, 0x700, 0xb, 0x8, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x68, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, {[@end]}}}}}) sendmsg$nl_route(r2, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@bridge_setlink={0x40, 0x13, 0x800, 0x81, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0xc400, 0x50000}, [@IFLA_TXQLEN={0x8, 0xd, 0x7}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x158b}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040c5}, 0x73eae91b3b3b6d70) getsockname$packet(r1, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000016c0)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001700)={0x0, 0xfffa, 0xe, 0x1, 0x6, 0x2}, &(0x7f0000001740)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001780)={r6}, &(0x7f00000017c0)=0x8) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000001800)=@req3={0x7fffffff, 0x10, 0x4, 0x5, 0x4, 0xd, 0xffff5687}, 0x1c) r7 = socket(0xb, 0x4, 0xfffffff1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001880), r3) sendmsg$NET_DM_CMD_START(r8, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r9, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2400c800) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5ec7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x8890) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001ac0), r3) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001b00)=0x200000, 0x4) recvmsg$can_raw(r7, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/101, 0x65}], 0x1, &(0x7f0000001c00)}, 0x0) r11 = socket$kcm(0x29, 0x7, 0x0) r12 = accept$inet6(r1, &(0x7f0000001c80)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001cc0)=0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000001d00)={r12, r0}) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000001d40)=0x3, 0x4) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) socket$alg(0x26, 0x5, 0x0) 1.679631889s ago: executing program 2 (id=5807): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1bc, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0xe5, 0x91, "d9ec14490d6756c49cbd6c09697459c7bf27bfb21e96a18a9f8623087260d7e1283f379281661419d3b6c3375c5966ba0ebfdb5caac1c9cf0bcafa9aad8ebcf04c2447e463995efa484d013e32ceeeb2ae97a6740ed124b0e40abc9166461e0df5595c4ca3d5f8d13f867c4910552974909727e122f839fbb7a3f559df39e56e13125c4052b15ca41755ac39e7c222843ce46d376ece990657609524ec7f82bd6f36226e6005712e7dab92d8a3008f97924fa690bdd4c722978b5347f3d3124a29a71e6be475be600eb484e762d6254bdcdf15e63be2006342ecd29298ce19b8a2"}, @NL80211_ATTR_IE={0x71, 0x2a, [@supported_rates={0x1, 0x1, [{0x1}]}, @random_vendor={0xdd, 0x49, "eb0e5f6fd8a011c471af7194e4eeef2303fd5b82878fc55af395a7791b79f33ce998c2b6c59bcc624d8d2e42f4d90451cce9f3f23ebd0648845769fb6bdd230bc6f629fec60fb33ea4"}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x1, 0x48, @device_b, 0x8, 0x7f, 0x7fff}}, @tim={0x5, 0x3, {0x6, 0x5e, 0xc}}, @challenge={0x10, 0x1, 0xa4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x1bc}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000340)={'veth0_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000300)) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, 0x0, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0002800800070000000000000000000000003e0486af20f5df0bc866bf232e000000"], 0x3c}}, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0xc30, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x5, 0xa}, {0x4, 0x5}, {0x5, 0xfff2}}, ["", "", ""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.501077889s ago: executing program 5 (id=5811): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000040)=0x8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 1.412919239s ago: executing program 5 (id=5812): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x800, @loopback, 0x100}, 0x1c, 0x0}}], 0x1, 0x4000004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000003000000000000140001"], 0x30}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfff8}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x1c}}, 0x4040054) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) (async) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x6) (async) listen(r5, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000081) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001700)=ANY=[@ANYRES16=r8, @ANYBLOB="b543000000000000000005"], 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000200)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'lblc\x00', 0x1, 0x1, 0x40}, 0x2c) r10 = socket$kcm(0xa, 0x2, 0x0) (async) r11 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}, 0x20040004) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000f80)={0x368, 0x1, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x4}}, @NFQA_EXP={0x34, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, @NFQA_CT={0x14c, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10a}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, @NFQA_PAYLOAD={0x17, 0xa, "c80cbdad597396f2fa467a4e947eca0236b258"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x80000000}}, @NFQA_PAYLOAD={0xd2, 0xa, "aeba31e047e5a37e32fef10c37d82132ac2265d27b3ff7f1aae4d464b30b0029dd4708047c863e2bfe8245ad10b819727ab160a153b213317a817db110fdffffffd34e8dbe989b4970ecdf243bd8492d48a7afde9e3e8979c9017ae380ef58de08ca54542a4c2825ff0e7418acf127a44ca3e3f7a51e95072de13b3c4e147b12a38134c3317508d58cf1a5a0d44ebb5690cb9c911c9afa3a6ee6e230eb19be008e8087ccb3d65cad04a8727f75be0830cd54f145e84c4ca0a97b944427e476f4d024b9a1cbf7deb83f6856b17180"}, @NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2b}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x81, 0x7, 0x3ff, 0x80000001, 0x8000, 0x9]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}]}, 0x368}}, 0x20000800) (async) socket$alg(0x26, 0x5, 0x0) 1.227291976s ago: executing program 5 (id=5815): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @loopback}}]}}]}, 0x48}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x5}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r6], 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x70, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x8000}}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x70}}, 0x20000001) r13 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r13, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0) r14 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$alg(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="c306b0a4a0d5aed6798e5f36705914451cb856cb8356377ced64388da4c6f09d46181718dd1f2c5465a4d05bde4f5abf05af645cbe79811d55f75dba00864a90048fe49b9b77b12407b322f91608411f57bf087e5eb131dac54e5b0e8a6dbe4bdb1888b5306ee57d79a34fbd245052ecfaef4bc1b4b96cd07338732a84a03cd587528604c880e2d667e44af8b9a2854cfcaec083fa4f0ca4e58687abe824635582216ea6cb4700ceead35082ea", 0xad}], 0x1, &(0x7f00000001c0)=[@iv={0xf0, 0x117, 0x2, 0xdc, "13ebcb97e43d1f695fde87380b468c5bb51adc28e897899f6cc88f5885855cf18fe39621a3fcf52417c5456e9444ff79956b47678f9105de59fb03c2043e35c8e1af5b45819ccab0f663f4bb7e5b85470c46a27877b07d60782ce41c4dc882d12cf2192f446ef4a9e6e9d1bab8587ea695b6ceb5c1c6db00776f15ea356ac5ddfa9843fbaa5ca4fa8fe26105e2821c6ce814981689035696545369d6a7429b0d006e440cc47e8a5f18bb6182c0210b12ecce573a9b2a96853a38cb07024e853287f704bdce2cd58c4cb74c5c5500b8e789f85695d9c7bde1aeeede6f"}, @iv={0x98, 0x117, 0x2, 0x7d, "0e719a3bf5f39bbdc5f84302b0fd3f1fa0957243c1a50155af548f137941d1d8162013d3c8e4a0202b88bdd2db619cd72ba28a713efad9d85c3ff243dc81fd328b7fed1a3f6f94b440ae17fd9a38d380a3b8b5102609a502ea5322ab4fa1c2cee9ee092aee563f8108dfea754b3786394b0087dbc0df54d6f34c42ab91"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x38, 0x117, 0x2, 0x20, "b7aefafc4da0e28c151f3c8098cc438a9357375d66c2904f4fa24d93fbec736a"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x220, 0x40040}, 0x4000800) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010026bd7000fbdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB='\f\x00}'], 0x28}, 0x1, 0x0, 0x0, 0x2400c880}, 0x40040) 1.167957651s ago: executing program 0 (id=5816): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x6, 0x6}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000006c0)={0x0, 0x8, 0x8, 0x1}) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000240000000000889078000000000000000000000000000890780200000000000000f537e37a5d8cdd38dd34fa727d7e543a8a0e23a79a0420ec351693ce129cdb562bf5a99e7abf1c65461bd564adbb4ec4bf27263b2174660d597fb9cb3dd629b1e75068d76844f56549c0ddaf08e47da86a21df1ff2ea3a3fc772ac883ddc71c26c9134c53491701af9b408f1f54d5fa4c35bcbb08f5e672f1f508d8d7fbc7199fdf85740de3ee1f46b99c1240c0c150f"], 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000ac0)={r5, 0x0, 0xf6, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000060000001800000000000000000000000300000018610000030000000000000009000000183a0000050000000000000000000000184c0000ffffffff00000000000000001831000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff04000000bfa200000000000007020000f8ffff1bb803000008000000b70085000000820000006d74f0fffcffffff1800000004000000000000000c000000000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.11695733s ago: executing program 3 (id=5818): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000ca000100354eca10446acbf42338ac1bda2abd70002208c1e12a60e313f32f04fddbdf2500000000c070c6ee0971a554b50c9fcb178b6b73cbf3a3", @ANYRES32=0x0, @ANYBLOB="022001008a340300140003006e657464657673696d3000000000000018001680140001801000060026040000ff03000009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="02090206ff0700000000000000a20000"], 0x10}, 0x1, 0x7}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x1, 0x7ff, 0x3, 0x0}, &(0x7f0000000080)=0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r7) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCSFLAGS(r7, 0x40047459, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000005c0)={{0xa, 0x4e24, 0x8, @mcast2, 0x8000}, {0xa, 0x4e21, 0x4, @mcast2, 0x7}, 0x0, {[0xfffffff7, 0x1, 0x6, 0x8001, 0xa, 0x16b2, 0x7ff, 0x4]}}, 0x5c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r6, 0x7}, &(0x7f0000000580)=0x8) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r9, 0x89e0, 0x500) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000407910000000000000670000c200000000950005000000000071a13928b72c696950a4edd77f9876d874394900f3bde847f8c78119dfbc27abc969c82ce6f6f0b2e10179582eed3525598659f1307bc7dea42e897c2305fd2a9989f18e0b716808f6491a914b82ce112e8a52578b3a8078cfd0b7d34cd51a741cdf3bdf46d174934650e575b0f5097a4d8f97c4b165abe4bb2be76d95cdba3f0b3a790af9d04d66016aeb34cf29cfd883a854803074ce6d65e4f15f11719754006007593f2f12b706682b684633803352f0e8ce93a2570ca6dd0ff917652d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000003c0)={'gretap0\x00', r10, 0x7800, 0x7800, 0x1, 0x4, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x67, 0x0, 0x3e, 0x29, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x3d, 0x3, 0x2, [{@empty, 0x4}, {@broadcast, 0x5}, {@remote, 0x7ff}, {@local, 0x6}, {@loopback, 0x81}, {@local, 0xca3}, {@loopback, 0x9e9}, {@remote, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x64, 0x3, 0x0, [{@remote, 0x10}]}]}}}}}) r11 = socket$inet6(0xa, 0x3, 0x100) sendmmsg$inet6(r11, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) 1.094770087s ago: executing program 2 (id=5819): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x26, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26, 0x7, 0x0, @void, @value, @void, @void, r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff1400000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000b5000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r5, 0x2) accept4(r5, 0x0, 0x0, 0x80800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) 967.746812ms ago: executing program 3 (id=5820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000002600)=0x0) syz_open_procfs$namespace(r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x36}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004804) 909.024796ms ago: executing program 0 (id=5821): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty=0x2900, @multicast1}}}], 0x20}}], 0x1, 0x4880) 904.854514ms ago: executing program 5 (id=5823): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d235f45", 0x5}], 0x1}}], 0x1, 0x40060) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000000c0)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shutdown(r1, 0x1) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00890000000000070000000000000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="0100010000000000000000040000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000001b0000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61126500000000006113770000000000bf2000000000000015000500511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="b423ca05f1022050eb5298f97a3db6ab81879b8208b854cc38512492a077a15f9fd01c05c889764520067801ad42ee102b3abdfd144b9e98b29a1395d032d0e654348d82e2f50941b4e13f420868772668c0fc2048b9b7dd3d287a53fae797922a9c6c7b46a6962b1db2c974f070e219643eee7c73dba3262280bdc94cc8be5cffcbe03c44f68cbc2550ff7cbfcc437cd1e7f77453f9d548b1c28d4d9f06eff95cdc80db6df132d42b22b9f03352d58b49d13017108158fcbe0270dd8287dfd8e81b6588b156fc23c46ff8469a7861921a89c0bb0d9b61f2392dfa6d9fe8733aabde112e6e7f56db6f82b66a", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet(0x2, 0x2, 0x1) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 833.438892ms ago: executing program 3 (id=5824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x113c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x1128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xac, 0x3, "3f90baab2bb0444c0a7ff01c9045564049591c80d668a4a186623bb6c2ad043547049dc7cdcf09c1fc58ef4cb92fb0e8788f5559b3f95a296f1c7ad48b384c3c48f2884bc4328685b8314343f555ff7a1a546e2cd526d07921b0721c90c5bde66b27490c61ea302bde7f6733c37a65334f5a8f95edc85a25d368ae3a4c1f67ff711b35171304f8aab0dc9857aee80ab5e41507137e80877dff1a63301aed1c73aac7fb10a53a394a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "94fd943a07267f9dade512ce963335ae1429844cbae5fb177463c69cf33191096586ff3cc8195365ecd6e52aa5719ee822479a70d11a4a9cfcc873ad8d8636cc7a7de8ad964dbfcc1e500be485f7a513f9ac15349e22e035ea1d56f7bb9d7333441e43764c28db2100eddf755da1feee4c3595455b96079dd848fa8dfc9dfd12fde126ab381c02bcab78eeef5ffcd37826056ac52d8c76574cfff6110800560dbe8dbee77b47bc0ef22d3bacd5ea49a246f73836a7cccdfb84c1acc71929a1e7eaa12d44b45aab5a83098d8a5371f812fc87b89a2782a15628020bbecbbec05bbe020916fc21049ea3a0438d1a24a1905aa2c5a8f80e68eb434b785313e0675ad775ae020bd4ff38d371d8b046f91ce2549e733afd85cc1381e82889d295836f8104bb01d0c9b7b780282fa4cd9023caa5dc961d469365d9e9c1d40c1662e0a0805b3da36041a972173e90954f4e38af7644ec89374239e2907131e9761970302149b83459645bcf29e83e9acc606a5ecb3c5350bc47a6f5c9fd8ca4392f986c75be9add5f416f3e1657e737dbfc296ac3d85323c19a324b3691cf32c2aea51308e1b1957571d880d73d1c87575f409f67da0d954f20e842702de4fe59d91f91a6e4be0506b18eca53740d65f7c9111a7640fae13d0f841b76fedd19c29fae400484d37cccad075a876c450013ca38daaf2d2ede3dcc9b264f15bdd453d80a0db8a4ae27932939476aab7f3bcd7914b7b4660b9bca66fad3a182ab24d0aef98efd89b5863ef5307cf01a40d772dc4b6785891839815746b7d2e3594991ea03cd92a0ed3b577fde5e24e5eea6a53f0a769194b25b1cb1f7aeb5e6a283f7ba29ccad0a7ef4afb7e0e7c7a23fc81cacc7845aa695731a547cd033ef8432cb5e6acfe5ca791b6a0fad92cbae273216d718bab30f2e6bf8a9de6c07890475bd11c8a3e7ab85e9708167519c4176542968c19ec01e1650b855a6c39d2e34d824cb9284bdab5159be2b42e92f50a2429f58c76bc63b291a9c0d4f66124d020a03f5db0ffc9deb33fd3fcc309464ed3d159618d4466f490008430554597e7d4d006ad8f7676d14aa26f9da8d548bc292be9c7a5104f0da56f46124be08167398646f60fe59e2abbff676c07ddc2f0cfe96c8c0f515b524dd09e04c587efbd80b95323709698ea0145b86f6e9581571736d337a5e6f5848e54ac06a22aa9c3901870d9ae1ec4097be301ceaca1f8d96e87c149c7d6b20457b797bca62cff02c115da01c498915a7653cd10cfcf9629351c2ee290fac7be7bfafd0e89654a0bb3e95f6779915f0b38fada21cf6ab981e54c3f6c13ee8d335bd2baa63f7c2cd2aed6e9998e3e778526fb51425cfabdcc901388e2a5dc111fb0ea164210be6bcf4db7137c43d296019895c0c4c65befa85dd062c5f9fe84fc0adcd2f8b02c16396afebbaa920b6f705be71e1c3dc927506d4ad410a3fd2740264ca0e3c4bba39891c6cdd2d2135c3f6e007822b7833167b6a62768ad73f53c3e8cf7a92367bba48cf9e4408c57ae831f08a103ad3c4c4fcecd6ce0de637986ddde1f6ac45fe16e9c44c784033021d7fdc0f8407d4cd29d7077b9bc44f48f7db62252aef8c4dcbb2669675a39a0721a78471a9f8ba7c10c89eeea908a1d2a14e29bd8289dee052ab243cc6bcbbaf9ab73f3e8d2e0d7c4246607d9f6d092dc84cd041a450d2dc4d1b160eedc26e4966c7e5740c912b9a01954799361ef2897deb6cc431e558be300f945fa35e0f273a2c661d4ef7edba0eef0ab389f2774d58cc12333b7854efc26f42efcfd0464a6d38312e3580274438b8bf18ad596a3ecc47bd1417a5610bc64d2a9f3fc6c7ea23cec08f0df76c9b5c7b29743448f45d5fdd92ee57e83ec635207e5f3e8686742a86c0289baa269b69f75e65b6194f34c4e93a348f6594524212fd56afc675544b4294d7bc8301d0c0a9a761c7c94524dd73733d334210eb40c23c76dc991d31f3b7d2d8e5a8ccbb59c9482e576bb94f2bfeb065bd0277b6551c5ed126b2723072b5aaafb36be1f451c61957b7242b13f88001ffa9afd9a9b544cd6d18805949c4877cec2c6f6f5f7336982bab6a2e8f8fe140613f6e611cc613f3e8b57fa70731e3283ed02ddebb5281d18388b20b8a0ff9db3606e44b8d754c84012b22086801e879b5503124ec0d163239b00eb8197f2b64dc922d43f46f252759b09140e3913cfcd13ae7503ed4c786b9c99d87d9e6326f25b118de289038ec613872725476e93a9e3bbca6384b1226abbedd6ed535d854f0b39e6c893119e3180fd7d04639825a1bf76cf70a5817bf3f60ef98ea57b00da213073d3a5add15858ee8ff081abd7bf669ac762666ab24b301b3d971f4db864c6a1c24860428688d371de6a2811c88c1a091c73bb341f32cdf0cea0a9e4f96a05cf96af7dd16129298ea274993d58f86067d7d0381bcbf683267c8512527aca7dcb8bc3b12d9cc0ecf45714f361452ea59faeb71e465019cf0575149565aa0aac7af0d306776bd983f4462a5424e38696514608ed3d6ca236f3550d1b4d1291d05220e710824251ffc1f571ee1649f706dbec7448ab6be5d78a31abdcffe012eb693a5804d68272918d9c4c1054d4fbd1c9ed3ec189bec7653b0bfcb20891c75178fab69a78e02f57c0427dc0e66078a71dae2a442f131917279169d8ef69772c05977be5783b7fe0528dabcb8173f1a9a7fa39ab5845149ce82455ee6adacd2dfa772ab46e50a623a872704f8b40322f791b88d7e628e1ea78651aa8bbb50182734e3094db098a2f25461354c322652245dca2ba08577d95bdd0e05bc0713c3c81669bec5be339b024f98bb08f8ff924fa97415055b08247988959d4de77910ecd0b0408e4236274f6288c4ff010a5416a9a35ff780ce74bd6b575a26434de1193fbd15d2a143e2a3c87f155931be568c758281a7a050d18a2aaee70022c5dedfcfda8d587e9f74dd20ab4ca0f73dd25c944ef8021fecafdc2364d3bbe18456a2682b49389c9d17995c19c0b49a3e6da63b7cb980dac7b303351ea707724299b7b4cf51c9694be222b25ca7da8bc8d15911974b85de3c819b8d01c0ee273df13378a834d3a2e58abb41d7bc47214be78e85e0bdbe6d91c93fa85d5cdc4da5b7c0631ae9a7627b9df577cd8b2ce6d747841e3e3c210ceff9918a3fb8e559d43a5a62972508b50a06c15be629c338fd7c6f3e3cd069ea71344fdcc18d978e446aaf732f783e6de83f41602b16b9d5a91aa1b30c6381816f1534396d261395a1674e80a081750913665fe5b4eb30b5c9535f96423fd2920a76496b1aa43c06d89a0f48b0945a74ae1f17fc79e5fc530c1fd9ca40bff25a1b8fcc2f6902a741a105816ac5b56ec0b72cf33fc9a622f34be96a02f7ff1f02bf0c4de92dcd92deb7438fb5ad84dea6fac3d25b53ff0ca6e3b0587ef95a0888c7c3853d702ba6dbba7e64ff92e4b4ac08545a604e070e3ee55a8f0664c0cfbf19393b7b0df845649663773aef874cc0620ece67846cc3e4d71692a2085ddbd8f3ed170c145c82c45897a1fcdc96bfd80bf5226b47f7d025746fbafdfc4da95affd98906b9cdd66f0add24e1ea83b6744cacbc76e0b9429ab03cfb6701aedacc8c8fc6930ab7d209eed04e84bd5a141924616a956fba593ae8c5c418ac4107ede36f446eea71f34378926ac85507fd052e0dc6e227229d3c992843835eb5ef639828a8ac99c6cd7663f8f0890acf0229826bf254f36803b195b7ae25c9bc363d3575984b99f0ea6fd464282818caa163e463d5ccff87ff503444b9123654242e7785ed81435421d285c37f320c51d8a7fda4e330891122e3ad1613b2f79503a15ce478be3409e9929487c2bb509c5c6cd7b295543cc19283d13d9ef3f46f6213736643ec0e8cdf067d8eca61f4d2c627bb169f74b3eee84a95b1a938476275fb59a782232c351f0d16a7e76231cfef8ee4bb1a60c200ee22579963049fa8f0473d8c541ad3bc06e75171a01651a810566a8207941e379da95172ee8dc1de670413b5eca94e55142e7542285c3eb4f612f3a5ca2a97ada9f1c0e8d1a798bff16f3a7de9876fbeb0e1a7489c73fc9c23d8a3da88d4c3529c779005abfced8c51713fb7a55f7b07fea518e3384fa73fc649a4945a4c37caa5b4c334fb6b68eb5cabd92ecfef713c8dd7eb438c6aa691c9d34e8e8167673fa82ef15e8dc0f2feabf436c9d44d333052c4e92f80d9686655bbcd4f23426556fd347cff8ababb6f9f1c78249cc321ce9f4ac761f24b77d2155dd746c297ec1a33c2b6d50dc3bcfc5b8dea4053109f5acaa2c9fab13b1dfc0f7d50b407d12b3b730467a6ad4b23018f08c71f36275908658585ced3528cec6953550bf3d98696a0ddfde413a8732d810443818e1cf0a0fbf541f26ecb2480b672fa352133a01e7b889d2f4024a9e70ff6eb7cac83f86d1cb3cee4cabc2a4e333e1bf7f4c940b158611ea3b09e22d768af68696d938b955b8b47de8a685702a675d3a94d141ad441e76addfce490af2daab8e80344be2a0d1e462dfc517266f08bb9a011f6110e7826002fc7eb1f96f461fbf73b1b2e34b50c26e2e8988ff4282e5f291dc7b636e2e87b97554a959ea38b30659bbd324fc5d299a528a2845cd383804ef09b4a201fd38e817329a09c018de2c5c706eb0eedb9853608191595a35832ce71dd21c23e77b8dcada8d0219d6b62c9733cdb15cd088b2a61fde8806d66bb5d7373e8eb8c36c223c2c7c2eeffdcba98f80265659d1e6cc846087b3a543d1ae3f5420ad8eb91a7ea2bb62d997c10197c584e68c02b922f849172f49976f3b105dd6f84e790744d31e869641b9670ca7011c7864799aad2beb90146332dd2316ffd8bca283facfd366c4b47be07b92bc0539b6a2e02b62a93393a9987c1205082139af2681bcd0618d5951064d52b09a22781b4c2f0206f9ca3c387426f973c84cbfe6ecaab4611d1dfd625e06567e5048998cfb4dbfbcbb3e7fc8a5ce747208ab2d288d80389069510908ee108adb24f3d61d7d8f80b171beb1aba696f4f1b642c2e45943cde1813f6fa18c189da21061ba40e738727a739b5150e26dc6bbb860bd892d8494a0715e41d6d889ce68a5721954287355497b46f399ad84cd7227c30e41d992854f4798b0204d6c73e7d6ef3959cd47ab48b582648b23d16ccc4214e8489dcc49338ddd0b57384a23d13e82d3778e96c154220837455ce6eec7bbe4a975e2725968ee6672d2fc8377054bf8bed2cc61e809f6c0290cbfd3001ee4cf3f4b9e5b69fe66ab8e321a87dad9dfc060b080e1be9b1d0d4ffe443a3f122fd6c68330d240ec31f3ac59bf0f2d701a9175694c955f3259b3a36d8cb5639103219a36c119c46d8c79877abb707a02f23cf71fc95f64ab603e683f67f6cc14dc3454e6f50fef93ade060bb1afcb6b4657805a63fba062c100ab86ef40efe9033fced2dbf05b02bffc834bb4b2b10dd157443e2758aae3ef30b86979410c1d347af36bb6615bc4d50add0fd59b652f9cea821bf30a52ad8afd93a197a82efa0def4b1458da4c33913901f66a50a97995375e2a9956e44fbe9adbb935e1ea5d9b875b1522041f2e3904e8466355aa288573c0b0fdfb46915ed5eee26783055254490296c61757c66bca232f29480e4a7e479a5cb4e577e62478ddac7c979c2fb27b6c8af29883691b9a3a391b7bb36e6234c5f2afccb8f7cc7d2181f8c8c32347fe34e27fd376532991e681f4e08481f964cd83d26fc8c6d9120231fe6dd7572243bdc1d9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x70cd}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "1255ee250e41b134a0d7d06754a7d4ed8dd79d86b6ec27b6a6"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x113c}}, 0x40000c0) 720.515886ms ago: executing program 3 (id=5826): close(0x3) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) (async) close(0xffffffffffffffff) r1 = socket(0xb, 0x80805, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x46, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3000ff8300000001000000000000017c797f9198bc741af9e23136272abbf5ed3e30b641f4a3b0e6c1953d332820d5ca0f8f2b59f1cd98f94b7ce80be160b45bcea6d0b11ed10be72f1454e4658f20000000000059576523864c0f6707000000000000002a6d0b22b3b7f8c770ff9a1823db9ff0e67bcbf7c83bd0"], 0x7e, 0x1}], 0x1, 0x8045) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaba08004500003c00000000000690780a010102ac1414aa00010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc000000907800001312b3e480a7613088fd714100027d003b110000"], 0x0) (async, rerun: 64) recvfrom$rxrpc(r1, 0x0, 0x0, 0x1, 0x0, 0x0) (rerun: 64) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) 719.948739ms ago: executing program 0 (id=5827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000001000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000f0fc13b7d4106ddb400000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd57, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYBLOB="cf0367e10cad0893dc8eeb943462fd8dfb5bb9978fdbc230a98720a29dd4bf1ba557cf0c1d796b753c3354c8090c75de0412f6da4a0def04f0fffcc5288cc2d49a6e02cd266000dd337ad47ae5f5d4bf348eb002a8b64017bd2887c5514dfca25911f9bfc0f39c7c6df43a1890b4ba037c4abf847ef13b3c29d4483fd43a343a1e68e11802db98df7c823635794e055627767fc7cbfcbaea7ad95fb152890a7d6b6d515d77fc731d45da2a03bdddc8c433964650cbea7258f4f4391bb86ed49da988694929a10743a6a0ae31ce9d24888b34fb245cad6e6d79", @ANYRES8=r2, @ANYRES16=r2], 0xcc}}, 0x4048842) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@generic={0x1, 0x4, 0x5}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xfffffffb}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000000100)={'syzkaller0\x00', @link_local}) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) bind$can_raw(r8, &(0x7f0000000480)={0x1d, r9}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000000), 0x4) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000a000000000000000000000005001b000100000000000000000000000000001c022b6a8219c24e5bd0dbf661b8d40f2896c2105068c7aae6b0461c8855f72c7c2a0cc3f7c31d123fe14b20d28f99d5758110e2353539708e58c8ddf38ddb726300581d88e1caa5ff516e2c462a3522dfcf9f8989be9f1935eadd9cad8ee53c032f7916f58e"], 0x24}}, 0x0) 651.576508ms ago: executing program 4 (id=5828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xac, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0x6d}}}}, [@NL80211_ATTR_KEYS={0x3c, 0x51, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "47b1fcdef8"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7e21f3396f"}]}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x171b}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x0, 0x0, 0x0, {0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3}, 0x70e, 0x0, 0xf}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100, {0x1000, 0x0, 0x8, 0xd}}}]}, 0xac}}, 0x4064081) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x543504b4}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4deef2039e9c5aca}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x51}, 0x0) 539.063453ms ago: executing program 4 (id=5829): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x14}}, 0x50}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x2, 0x11, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000140)={0x4, {{0xa, 0x4e21, 0x9, @remote, 0x8}}}, 0x88) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 452.963298ms ago: executing program 3 (id=5830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000046c0)=""/4111, 0x100f}], 0x1}}], 0x1, 0x120, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a000100000002000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) 399.952243ms ago: executing program 0 (id=5831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) unshare(0x2c060000) unshare(0x24020400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x1}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) r6 = socket(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r8, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) sendfile(r1, r1, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400edff0f000104000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x4000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) 369.442549ms ago: executing program 3 (id=5832): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'veth1_to_hsr\x00', 0x20}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000e677440000000000000a20000000000a0108000000008d090000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000022c0000000e0a01080000000000000000010000000900020073797a32000000000900010073795a3000000000140000001000016177d32839341f345b8f"], 0xb0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000120000000900020073797a30000000000900010073797a30000000001400038008000140000000000800024000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c000480080001400000000006"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x22138f8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd256c}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ae69e9}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x212050dd}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1876e3b7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @timestamp, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000ea) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf2505000000180001801416adb4b76c616e31000000000000000000000005000700060000005d5bdb105867ca7df5770391ad1c83230d06f2f4e30f09d3b25f351b40fde7d09a772fd9c0b743256b507607"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newpolicy={0x234, 0x13, 0x200, 0x70bd2c, 0x25dfdbfc, {{@in6=@mcast1, @in=@loopback, 0x4e20, 0x2, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x3c, r10}, {0x6, 0x2, 0x1, 0x3, 0x2, 0xb, 0xff, 0x6}, {0x0, 0xffffffffffffffff, 0x31, 0x2}, 0x9, 0x6e6bbc, 0x0, 0x0, 0x1, 0x3}, [@etimer_thresh={0x8}, @algo_auth={0x127, 0x1, {{'blake2b-512\x00'}, 0x6f8, "503d0f106b5c5ae5cd6d4bdd3be2538db3495052ac59c9d8818baf63d3f1d171b750b05f421030ad6fc41f367d6e793c11f9a0b5d1da0763e51b23daf5265f4965fce491c6b97159ce7240c910d0cd52bf5459e0aff34f04b7112722d9555f6d8aa3be9071657246899b4357a1f4c54e785cb27605fdeed036175fd3ba3fe6359934bfcdf22682c0b7fea50fccd5cce10263f16aa4bbfc811d1642105106a00fb32e46957d36e25b39e95ed0d2ddc7ba8ddaa73bd784bce0fe1bdc7a8de2e7215cd444666ade036f98781c2b1e0ee0959624661d15dbadefb372747c86e296"}}, @algo_auth_trunc={0x4c, 0x14, {{'sha512-arm\x00'}, 0x0, 0x200}}]}, 0x234}}, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) 308.889165ms ago: executing program 4 (id=5833): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "3f25378bca"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) r13 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@remote, @remote, @default, @default, @bcast, @remote, @default, @default]}, &(0x7f0000000240)=0x48, 0x80000) listen(r13, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x80}, 0x1) r14 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r14, 0x890c, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null, @bpq0, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r15, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) 218.465841ms ago: executing program 4 (id=5834): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0}, 0x300440f1) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000500)=r0, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x13, 0x4, "e2cd"}, @fastopen={0x22, 0xc, "ce2781a9dfe9bc8597d9"}]}}}}}}}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x0, 0x0, 0x1e, 0x0, "6ecd799c7d82e4a44411977816c806890fce90b0d6c5229f4e9dcaa2e01d158b9c4562769d1361f3a87278ce2368c00a084ea317e69e038b1baba6586a03822dbbcfdc2d5d5b1ccfef0cef7b2266c9a7"}, 0xd8) 201.128852ms ago: executing program 2 (id=5835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) 132.855126ms ago: executing program 0 (id=5836): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040044) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040044) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) (async) 113.153544ms ago: executing program 2 (id=5837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bind$inet6(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 79.391242ms ago: executing program 4 (id=5838): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x1, 0x3, [0xff, 0x7f, 0x80]}, &(0x7f0000000100)=0xe) (async) getsockname$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}]}, 0x1c}}, 0x40) (async) getpeername$netrom(r0, &(0x7f00000002c0)={{0x3, @null}, [@default, @bcast, @default, @rose, @default, @netrom, @rose, @netrom]}, &(0x7f0000000340)=0x48) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={r1, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000400)={r3, 0x3ff, 0x3}, &(0x7f0000000440)=0x8) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1005}, 0x40000) (async) ioctl$FITHAW(r0, 0xc0045878) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r0) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/time_for_children\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r6, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x5c}}, 0x20040055) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xac, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000a40)={r2, 0x7}, &(0x7f0000000a80)=0x8) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x288, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xfc, 0x5b, "87b2591e2b9415e67dbb318eddb15f19f88b811b14b65e070f719392c15e5a45c81f12c13c02c29f6d1200a5b2288465f890dccd8b2e39a87aad4c47943d99e19f1764ad1174e17d88c3377432802ad412310e0530aab151bc04daba0a257cff0ba565114561db017178a5cae24bfdd4c643aeeee448c571ccefb3343b0627d993b6e6eecb8620c67938ddb5d32389f9a104b63ae0c074943b386fff6d561c3f917545858d18fb70d1b12ad2ac92a97af37f4042a0f3a81bd9410d013cbdc5616d963fbc2de065ebcc482647f292ee2b83a977131e8b5b78b5ff3836d0e123a1f80248d4d03c5a960e14884a7cc94dee066b84ea6fe8f7b4"}, @NL80211_ATTR_FRAME_MATCH={0x102, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x17, 0x5b, "f0fb6634a352c75a98a2c3d532f79b52311ba7"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x101}, @NL80211_ATTR_FRAME_MATCH={0x43, 0x5b, "df326ca400da5ec6aaa6a57a391a96c12fd46c03d63be512a804c833a76b58fc03bef374be743bf45d0d9ab1bf56c2de8cac52708839764e7be536dac4341e"}]}, 0x288}, 0x1, 0x0, 0x0, 0x80}, 0xc080) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x2, 0x6, 0x500, 0x0, 0x0, {0xb, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xbad3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x4c}}, 0x4008810) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x80, r9, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'netdevsim'}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '@[\''}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20040801) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001240)={'tunl0\x00', &(0x7f0000001200)={'gre0\x00', 0x0, 0x1, 0xf810, 0x9, 0xfffffff8, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @remote, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001f00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001900)={0x5ac, r10, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd960}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf753}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x101, 0x7, 0x7, 0x6}, {0x6, 0x5, 0xc, 0x8}, {0x3, 0x7, 0x7, 0xbc}, {0xfff, 0x8b, 0x8, 0x80000000}, {0x0, 0x6, 0xc5, 0x4}, {0x1, 0xa, 0x2, 0xf}, {0x4, 0x0, 0x8, 0x2}, {0xfc01, 0x6, 0x2, 0xffffffff}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8}, 0x40) 29.020743ms ago: executing program 0 (id=5839): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffd}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 14.905276ms ago: executing program 2 (id=5840): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf2505"], 0x1618}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) close(r2) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', r7, 0x10, 0x1, 0x4, 0x70, {{0x24, 0x4, 0x0, 0x5, 0x90, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "157fbdc6efb934b2"}]}, @noop, @timestamp={0x44, 0x8, 0x87, 0x0, 0x0, [0x5]}, @timestamp={0x44, 0x8, 0x3e, 0x0, 0x1, [0x4]}, @generic={0x7, 0x5, "994b69"}, @ssrr={0x89, 0x17, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback, @empty]}, @generic={0x86, 0xd, "18f44a7cfe61d96897c970"}, @cipso={0x86, 0x32, 0x0, [{0x0, 0xd, "cf98078ba1cc2cbf5a01e5"}, {0x6, 0x12, "160000b7181501315e8361eae00e6133"}, {0x6, 0xd, "9a03e65e1c1ebe6619e5ab"}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@deltclass={0x5c, 0x29, 0x0, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {0x9, 0x4}, {0xe, 0x10}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0xb7}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xa}}, @TCA_RATE={0x6, 0x5, {0xf, 0xe1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf2505"], 0x1618}], 0x1}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) (async) close(r3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) close(r2) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) close(r5) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', r7, 0x10, 0x1, 0x4, 0x70, {{0x24, 0x4, 0x0, 0x5, 0x90, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "157fbdc6efb934b2"}]}, @noop, @timestamp={0x44, 0x8, 0x87, 0x0, 0x0, [0x5]}, @timestamp={0x44, 0x8, 0x3e, 0x0, 0x1, [0x4]}, @generic={0x7, 0x5, "994b69"}, @ssrr={0x89, 0x17, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback, @empty]}, @generic={0x86, 0xd, "18f44a7cfe61d96897c970"}, @cipso={0x86, 0x32, 0x0, [{0x0, 0xd, "cf98078ba1cc2cbf5a01e5"}, {0x6, 0x12, "160000b7181501315e8361eae00e6133"}, {0x6, 0xd, "9a03e65e1c1ebe6619e5ab"}]}]}}}}}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@deltclass={0x5c, 0x29, 0x0, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {0x9, 0x4}, {0xe, 0x10}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0xb7}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xa}}, @TCA_RATE={0x6, 0x5, {0xf, 0xe1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 0s ago: executing program 4 (id=5841): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000b00)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x9ac8546e0387b197}, {0x1, 0xf0, 0x4}, 0x2}, {0x1, 0x0, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0x1}, {0x3, 0x0, {0x0, 0x0, 0x4}, {0x1, 0x1}, 0x1, 0x2}], 0x80) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000b00)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x9ac8546e0387b197}, {0x1, 0xf0, 0x4}, 0x2}, {0x1, 0x0, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0x1}, {0x3, 0x0, {0x0, 0x0, 0x4}, {0x1, 0x1}, 0x1, 0x2}], 0x80) (async) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) (async) kernel console output (not intermixed with test programs): eve2: entered promiscuous mode [ 391.826800][T18625] geneve2: entered allmulticast mode [ 391.857957][T18629] __nla_validate_parse: 15 callbacks suppressed [ 391.857974][T18629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3665'. [ 391.860313][T18621] veth1_macvtap: left promiscuous mode [ 391.926122][ T3492] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 391.942834][ T3492] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 391.973383][T18632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3666'. [ 391.982566][ T3492] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 391.983264][ T3492] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 392.053179][T18632] netlink: 'syz.0.3666': attribute type 11 has an invalid length. [ 392.077535][T18632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3666'. [ 392.219699][T18637] team0: Device ip6gre1 is of different type [ 392.279609][T18645] netlink: 'syz.1.3671': attribute type 4 has an invalid length. [ 392.416682][T18653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3675'. [ 392.962618][T18680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3687'. [ 393.170515][T18694] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3691'. [ 393.432323][T18707] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 393.468884][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3696'. [ 393.486866][T18707] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 393.625229][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3700'. [ 393.650079][T18720] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3699'. [ 393.924998][T18743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3702'. [ 394.285508][T18769] syzkaller1: entered promiscuous mode [ 394.291227][T18769] syzkaller1: entered allmulticast mode [ 394.302608][T18767] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 394.314053][T18767] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 394.838030][T18808] syzkaller0: entered promiscuous mode [ 394.856410][T18808] syzkaller0: entered allmulticast mode [ 394.875494][T18808] tipc: Enabled bearer , priority 0 [ 394.922013][T18808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 394.986442][T18808] tipc: Resetting bearer [ 395.041623][T18807] tipc: Resetting bearer [ 395.111627][T18807] tipc: Disabling bearer [ 395.281412][T18834] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 395.408789][T18835] netlink: 'syz.0.3727': attribute type 3 has an invalid length. [ 395.486827][ T7776] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.563892][T18853] geneve2: entered promiscuous mode [ 395.606325][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.628913][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.653320][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.722830][T18855] syzkaller1: entered promiscuous mode [ 395.730298][T18855] syzkaller1: entered allmulticast mode [ 395.797463][ T5886] Bluetooth: hci2: command 0x0405 tx timeout [ 395.939845][T18873] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 395.954991][T18875] netlink: 'syz.4.3737': attribute type 13 has an invalid length. [ 396.075062][T18875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.150464][T18881] team0: Cannot enslave team device to itself [ 396.251524][T18884] netlink: 'syz.0.3741': attribute type 1 has an invalid length. [ 396.392158][T18870] infiniband syz1: set active [ 396.397490][T18870] infiniband syz1: added bond0 [ 396.454620][T18870] RDS/IB: syz1: added [ 396.467425][T18870] smc: adding ib device syz1 with port count 1 [ 396.486607][T18870] smc: ib device syz1 port 1 has pnetid [ 396.952454][T18909] netlink: 'syz.2.3748': attribute type 13 has an invalid length. [ 396.961067][T18909] __nla_validate_parse: 11 callbacks suppressed [ 396.961083][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3748'. [ 397.033955][ T7776] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.047545][T18909] netlink: 'syz.2.3748': attribute type 13 has an invalid length. [ 397.061084][ T7776] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.067503][T18911] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3749'. [ 397.070174][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3748'. [ 397.102428][ T7776] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.115021][ T7776] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.124723][T18911] netlink: 'syz.0.3749': attribute type 16 has an invalid length. [ 397.154334][T18911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3749'. [ 397.221257][T18915] netlink: 'syz.3.3751': attribute type 1 has an invalid length. [ 397.229384][T18915] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3751'. [ 397.281477][T18917] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3752'. [ 397.362292][T18921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3753'. [ 397.549654][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3758'. [ 397.848313][T18942] netlink: 'syz.1.3762': attribute type 1 has an invalid length. [ 397.856078][T18942] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3762'. [ 397.952032][T18949] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3763'. [ 398.742321][T18993] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 398.783419][T18993] netlink: 'syz.1.3774': attribute type 1 has an invalid length. [ 398.804893][T18993] netlink: 'syz.1.3774': attribute type 2 has an invalid length. [ 398.824554][T18993] syzkaller1: entered promiscuous mode [ 398.839865][T18993] syzkaller1: entered allmulticast mode [ 398.870393][T18993] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 399.315805][T19020] netlink: 'syz.0.3781': attribute type 1 has an invalid length. [ 399.420842][T19025] vlan2: entered allmulticast mode [ 399.426005][T19025] bond0: entered allmulticast mode [ 399.522447][T19028] netlink: 'syz.3.3784': attribute type 10 has an invalid length. [ 399.562188][T19028] bridge0: port 3(dummy0) entered disabled state [ 399.586435][T19039] netlink: 'syz.3.3784': attribute type 10 has an invalid length. [ 399.586471][T19028] dummy0: left allmulticast mode [ 399.640340][T19028] dummy0: left promiscuous mode [ 399.645463][T19028] bridge0: port 3(dummy0) entered disabled state [ 399.707732][T19028] team0: Port device dummy0 added [ 399.778285][T19039] team0: Port device dummy0 removed [ 399.826988][T19039] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 399.867989][T19045] tipc: Started in network mode [ 399.872882][T19045] tipc: Node identity 16761a709a7a, cluster identity 4711 [ 399.894029][T19045] tipc: Enabled bearer , priority 0 [ 399.908987][T19045] syzkaller0: entered promiscuous mode [ 399.914573][T19045] syzkaller0: entered allmulticast mode [ 399.954347][T19045] tipc: Resetting bearer [ 399.974907][T19044] tipc: Resetting bearer [ 400.047603][T19044] tipc: Disabling bearer [ 400.371030][T19076] sctp: [Deprecated]: syz.2.3801 (pid 19076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.371030][T19076] Use struct sctp_sack_info instead [ 400.880995][T19097] bond2: (slave gretap1): making interface the new active one [ 400.889801][T19097] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 401.191832][T19113] veth0: entered promiscuous mode [ 401.199268][T19113] veth0: left promiscuous mode [ 401.253751][T19116] bridge0: port 1(batadv1) entered blocking state [ 401.278228][T19116] bridge0: port 1(batadv1) entered disabled state [ 401.295024][T19116] batadv1: entered allmulticast mode [ 401.321991][T19116] batadv1: entered promiscuous mode [ 401.493008][T19130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.719131][T19143] tipc: Enabled bearer , priority 0 [ 401.726801][T19143] syzkaller0: entered promiscuous mode [ 401.737662][T19143] syzkaller0: entered allmulticast mode [ 401.760105][ T9304] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 401.769782][ T9304] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 401.783195][T19143] tipc: Resetting bearer [ 401.794906][T19141] tipc: Resetting bearer [ 401.814085][T19141] tipc: Disabling bearer [ 402.081066][T19157] __nla_validate_parse: 15 callbacks suppressed [ 402.081085][T19157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3829'. [ 402.252580][T19170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3833'. [ 402.263969][T19170] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3833'. [ 402.285007][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3833'. [ 402.505661][T19184] validate_nla: 3 callbacks suppressed [ 402.505679][T19184] netlink: 'syz.3.3836': attribute type 29 has an invalid length. [ 402.559714][T19188] ip6gretap0: mtu less than device minimum [ 402.863408][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3843'. [ 403.002718][T19219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3846'. [ 403.042271][T19219] netlink: 'syz.2.3846': attribute type 1 has an invalid length. [ 403.130034][T19219] bond4: entered promiscuous mode [ 403.144456][T19219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 403.205753][T19224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.228241][T19224] bond4: (slave bond5): making interface the new active one [ 403.235773][T19224] bond5: entered promiscuous mode [ 403.245355][T19224] bond4: (slave bond5): Enslaving as an active interface with an up link [ 403.254710][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3847'. [ 403.268917][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3847'. [ 403.284290][T19229] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3847'. [ 403.289849][T19231] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3848'. [ 403.459125][T19244] netlink: 'syz.2.3849': attribute type 1 has an invalid length. [ 403.875819][T19266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.955854][T19266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.556661][T19309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.892743][T19334] dvmrp1: entered allmulticast mode [ 404.974965][T19338] netlink: 'syz.1.3885': attribute type 1 has an invalid length. [ 405.060666][T19345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.093785][T19344] team0: Mode changed to "loadbalance" [ 405.211245][T19355] x_tables: ip_tables: udp match: only valid for protocol 17 [ 405.406601][T19376] netlink: 'syz.2.3895': attribute type 10 has an invalid length. [ 405.479640][T19379] netlink: 'syz.2.3895': attribute type 10 has an invalid length. [ 405.775026][T19376] team0: Port device dummy0 added [ 405.807756][T19379] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 405.861167][T19379] team0: Failed to send options change via netlink (err -105) [ 405.871388][T19379] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 405.887974][T19379] team0: Port device dummy0 removed [ 405.904975][T19379] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 405.993562][T19402] netlink: 'syz.0.3900': attribute type 1 has an invalid length. [ 406.061452][T19397] syzkaller0: entered promiscuous mode [ 406.067109][T19397] syzkaller0: entered allmulticast mode [ 406.108939][T19402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.175431][T19408] bond3: (slave veth3): Enslaving as an active interface with a down link [ 406.536643][T19423] siw: device registration error -23 [ 406.704218][T19428] netlink: 'syz.4.3906': attribute type 4 has an invalid length. [ 406.760666][T19431] netlink: 'syz.4.3906': attribute type 4 has an invalid length. [ 407.984433][T19402] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 408.001684][T19421] tipc: Enabled bearer , priority 0 [ 408.015920][T19419] tipc: Disabling bearer [ 408.099188][T19435] __nla_validate_parse: 15 callbacks suppressed [ 408.099859][T19435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3908'. [ 408.415425][T19452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3913'. [ 408.579333][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3916'. [ 408.675557][T19458] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 408.744305][T19469] gretap2: entered promiscuous mode [ 408.922508][T19458] "syz.3.3916" (19458) uses obsolete ecb(arc4) skcipher [ 409.016739][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3919'. [ 409.040383][T19480] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 409.064715][T19480] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3919'. [ 409.144355][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3919'. [ 409.174189][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3919'. [ 409.210403][T19497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3922'. [ 409.234759][T19499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3923'. [ 409.248795][T19499] netlink: 'syz.2.3923': attribute type 5 has an invalid length. [ 409.257053][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3919'. [ 409.358743][T19503] veth0: entered promiscuous mode [ 409.364566][T19503] veth0: left promiscuous mode [ 409.912760][T19539] block nbd0: NBD_DISCONNECT [ 409.989480][T19539] block nbd0: Send disconnect failed -32 [ 409.995159][T19539] block nbd0: shutting down sockets [ 410.016515][T19540] geneve2: entered promiscuous mode [ 410.032086][T19540] geneve2: entered allmulticast mode [ 410.099201][ T36] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 19999 - 0 [ 410.291025][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 410.304561][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 410.316699][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 410.423775][T19569] sctp: [Deprecated]: syz.2.3943 (pid 19569) Use of int in maxseg socket option. [ 410.423775][T19569] Use struct sctp_assoc_value instead [ 410.721266][T19583] chnl_net:caif_netlink_parms(): no params data found [ 410.958794][T19592] netlink: 'syz.1.3950': attribute type 8 has an invalid length. [ 411.142588][T19600] netlink: 'syz.3.3954': attribute type 2 has an invalid length. [ 411.191242][T19600] netlink: 'syz.3.3954': attribute type 2 has an invalid length. [ 411.389931][T19615] openvswitch: netlink: IP tunnel dst address not specified [ 411.403621][ T30] audit: type=1107 audit(1758804515.246:6): pid=19614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 411.570390][T19630] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 411.703540][T19630] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 411.997861][T19648] netlink: 'syz.2.3969': attribute type 5 has an invalid length. [ 412.171825][T19670] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 412.258478][T19678] pim6reg1: entered promiscuous mode [ 412.263805][T19678] pim6reg1: entered allmulticast mode [ 412.499028][T19691] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 412.518055][T19693] C: renamed from lo (while UP) [ 412.524076][T19692] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 412.531831][T19691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.582993][T19692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.583084][T19691] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 413.069064][T19738] netlink: 'syz.0.3996': attribute type 9 has an invalid length. [ 413.074853][T19739] netlink: 'syz.0.3996': attribute type 9 has an invalid length. [ 413.182161][T19742] syzkaller0: entered promiscuous mode [ 413.188515][T19742] syzkaller0: entered allmulticast mode [ 413.651730][T19749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.859209][T19760] netlink: 'syz.4.4003': attribute type 1 has an invalid length. [ 413.885862][T19760] __nla_validate_parse: 21 callbacks suppressed [ 413.885878][T19760] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4003'. [ 413.909596][T19763] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4004'. [ 413.952013][T19767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4006'. [ 414.073723][T19771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 414.131328][T19771] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.144622][T19771] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 414.154884][T19782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4008'. [ 414.964590][T19827] netlink: 'syz.0.4021': attribute type 1 has an invalid length. [ 415.162172][T19840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4021'. [ 415.260352][T19833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.300977][T19833] bond4: (slave bond5): making interface the new active one [ 415.334871][T19833] bond4: (slave bond5): Enslaving as an active interface with an up link [ 415.348055][T19844] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 415.355825][T19844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.403318][T19845] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 415.417877][T19845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.763970][T19863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4029'. [ 416.081157][T19874] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4034'. [ 416.103333][T19875] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4034'. [ 416.134657][T19878] netlink: 'syz.2.4035': attribute type 1 has an invalid length. [ 417.167216][ T5885] Bluetooth: hci2: command 0x0405 tx timeout [ 417.358359][T19878] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 417.544816][T19890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4040'. [ 417.891528][T19897] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4041'. [ 418.231106][T19928] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 418.237588][T19928] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 419.180209][T19972] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 419.230752][T19974] __nla_validate_parse: 1 callbacks suppressed [ 419.230768][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 419.331098][T19981] veth0_to_team: mtu less than device minimum [ 419.375490][T19986] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4070'. [ 419.390843][T19986] netlink: 'syz.0.4070': attribute type 1 has an invalid length. [ 419.406257][T19986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.487353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.577621][T19995] netlink: 'syz.3.4072': attribute type 2 has an invalid length. [ 419.831178][T20014] openvswitch: netlink: IPv4 tun info is not correct [ 419.852647][T20012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4077'. [ 420.123198][T20039] netlink: 'syz.0.4082': attribute type 21 has an invalid length. [ 420.178346][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4082'. [ 420.226275][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'. [ 420.237462][T20042] netlink: 'syz.0.4082': attribute type 13 has an invalid length. [ 420.246122][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'. [ 420.264723][T20046] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4086'. [ 420.355079][T20046] vlan3: entered allmulticast mode [ 420.363390][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'. [ 420.371340][T20046] gretap0: entered allmulticast mode [ 420.372874][T20042] netlink: 'syz.0.4082': attribute type 13 has an invalid length. [ 420.405131][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'. [ 420.457660][T20051] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4088'. [ 420.566107][T20060] netlink: 'syz.2.4089': attribute type 10 has an invalid length. [ 420.644869][T20060] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 420.762769][T20074] netlink: 'syz.3.4093': attribute type 10 has an invalid length. [ 421.098790][T20097] bridge4: entered promiscuous mode [ 421.112898][T20097] bridge4: entered allmulticast mode [ 421.162505][T20101] netlink: 'syz.0.4102': attribute type 5 has an invalid length. [ 421.199620][T20104] openvswitch: netlink: IP tunnel dst address not specified [ 421.293940][T20101] tipc: Enabled bearer , priority 0 [ 421.422969][T20100] tipc: Resetting bearer [ 421.444375][T20122] netlink: 'syz.4.4107': attribute type 13 has an invalid length. [ 422.213858][T20115] delete_channel: no stack [ 422.407552][ T8318] tipc: Node number set to 2349603440 [ 422.816880][T20100] tipc: Disabling bearer [ 422.847849][T20122] veth0_macvtap: left promiscuous mode [ 422.854230][T20122] macvtap0: entered allmulticast mode [ 422.872419][T20122] macvtap0: refused to change device tx_queue_len [ 423.317849][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 423.372944][T20154] tipc: Started in network mode [ 423.384676][T20154] tipc: Node identity 262431d2fb52, cluster identity 4711 [ 423.393992][T20154] tipc: Enabled bearer , priority 0 [ 423.419971][T20154] syzkaller0: entered promiscuous mode [ 423.435283][T20154] syzkaller0: entered allmulticast mode [ 423.451235][T20155] tipc: Enabled bearer , priority 0 [ 423.465833][T20154] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 423.499571][T20155] syzkaller0: MTU too low for tipc bearer [ 423.515543][T20155] tipc: Disabling bearer [ 423.532371][T20154] tipc: Resetting bearer [ 423.541550][T20153] tipc: Resetting bearer [ 423.576260][T20153] tipc: Disabling bearer [ 423.592257][T20164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.721322][T20171] team0: Device gtp0 is up. Set it down before adding it as a team port [ 423.764289][T20173] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 424.078195][T20194] netlink: 'syz.4.4133': attribute type 1 has an invalid length. [ 424.592682][T20215] __nla_validate_parse: 7 callbacks suppressed [ 424.592698][T20215] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4139'. [ 425.310598][T20264] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4152'. [ 425.969663][T20282] wg2: entered promiscuous mode [ 425.974567][T20282] wg2: entered allmulticast mode [ 426.131520][T20297] pim6reg1: entered promiscuous mode [ 426.144107][T20297] pim6reg1: entered allmulticast mode [ 426.355803][T20311] validate_nla: 1 callbacks suppressed [ 426.355820][T20311] netlink: 'syz.0.4169': attribute type 3 has an invalid length. [ 426.380310][T20311] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4169'. [ 426.389959][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4171'. [ 426.433532][T20311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4169'. [ 426.459117][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4171'. [ 426.486768][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4172'. [ 426.707902][T20336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'. [ 427.019511][T20356] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4183'. [ 427.169207][T20367] syzkaller0: entered allmulticast mode [ 427.594706][T20384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.614395][T20384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.625453][T20384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 427.766003][T20384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.786488][T20384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.829972][T20384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 427.847358][T20393] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4195'. [ 427.989174][T20384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.017161][T20384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.033739][T20384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 428.233876][T20384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.244936][T20384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.256754][T20384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 428.432238][ T3492] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.457113][ T3492] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 428.470326][ T3492] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.493220][ T3492] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.505287][ T3492] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 428.524789][ T3492] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.563201][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.587298][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 428.607278][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.676445][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.701547][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 428.719552][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.739978][T20444] netlink: 'syz.0.4209': attribute type 12 has an invalid length. [ 428.785532][T20444] geneve3: entered promiscuous mode [ 428.809987][T20444] geneve3: entered allmulticast mode [ 428.825914][ T36] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.851175][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.867605][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.893575][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.975137][T20459] netlink: 'syz.0.4215': attribute type 10 has an invalid length. [ 428.988303][T20462] netlink: 'syz.2.4216': attribute type 18 has an invalid length. [ 429.023778][T20459] team0: Device hsr_slave_0 failed to register rx_handler [ 429.326708][T20470] wg2: entered promiscuous mode [ 429.335214][T20470] wg2: entered allmulticast mode [ 429.675139][T20503] netlink: 'syz.3.4225': attribute type 10 has an invalid length. [ 429.795620][T20512] netlink: 'syz.2.4226': attribute type 1 has an invalid length. [ 429.866593][T20512] __nla_validate_parse: 8 callbacks suppressed [ 429.866610][T20512] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4226'. [ 430.058550][T20529] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4227'. [ 430.130443][T20531] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4227'. [ 430.302300][ T12] dvmrp1 (unregistering): left allmulticast mode [ 430.743893][ T12] bond0 (unregistering): Released all slaves [ 430.845202][ T12] bond1 (unregistering): Released all slaves [ 430.859226][ T12] bond2 (unregistering): Released all slaves [ 430.874785][ T12] bond3 (unregistering): Released all slaves [ 430.982321][ T12] bond4 (unregistering): Released all slaves [ 430.995127][ T12] bond5 (unregistering): Released all slaves [ 431.100223][ T12] bond6 (unregistering): Released all slaves [ 431.113891][ T12] bond7 (unregistering): Released all slaves [ 431.214681][ T12] bond8 (unregistering): Released all slaves [ 431.227260][ T12] bond9 (unregistering): Released all slaves [ 431.241448][ T12] bond10 (unregistering): Released all slaves [ 431.259503][T20529] gretap0: entered promiscuous mode [ 431.272799][T20531] 0ªî{X¹¦: renamed from gretap0 [ 431.281380][T20531] 0ªî{X¹¦: left promiscuous mode [ 431.286590][T20531] 0ªî{X¹¦: entered allmulticast mode [ 431.299353][T20531] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 431.323680][T20537] tipc: Enabled bearer , priority 0 [ 431.422577][T20537] tipc: Disabling bearer [ 431.495911][ T12] tipc: Disabling bearer [ 431.520728][ T12] tipc: Left network mode [ 431.568136][T20560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4234'. [ 431.598502][ T12] IPVS: stopping master sync thread 14038 ... [ 431.629596][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4234'. [ 431.638695][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4234'. [ 431.679623][T20562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4238'. [ 431.873204][T20567] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4240'. [ 431.914746][T20567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4240'. [ 431.967305][T20567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4240'. [ 432.121069][T20580] netlink: 'syz.4.4242': attribute type 1 has an invalid length. [ 432.129012][T20580] netlink: 'syz.4.4242': attribute type 1 has an invalid length. [ 432.660145][T20604] netlink: 'syz.1.4249': attribute type 1 has an invalid length. [ 433.144825][T20611] 0ªî{X¹¦: left allmulticast mode [ 433.538983][T20611] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.546689][T20611] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.780558][T20611] wg2: left promiscuous mode [ 433.785196][T20611] wg2: left allmulticast mode [ 434.119893][T20611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.175870][T20611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.603566][T20611] vlan0: left promiscuous mode [ 434.615526][T20611] bond2: left promiscuous mode [ 434.621804][T20611] gretap1: left promiscuous mode [ 434.627517][T20611] vlan0: left allmulticast mode [ 434.632395][T20611] bond2: left allmulticast mode [ 434.638821][T20611] gretap1: left allmulticast mode [ 434.649458][T20611] geneve2: left promiscuous mode [ 434.654492][T20611] geneve2: left allmulticast mode [ 434.683410][T20611] bond4: left promiscuous mode [ 434.689158][T20611] bond5: left promiscuous mode [ 434.792636][ T12] hsr_slave_0: left promiscuous mode [ 434.822811][ T12] hsr_slave_1: left promiscuous mode [ 435.097194][T20667] IPv6: addrconf: prefix option has invalid lifetime [ 437.192410][ T9301] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.201037][ T9301] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 437.210256][ T9301] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.218942][ T9301] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.227952][ T9301] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 437.236377][ T9301] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.281750][T20650] !: renamed from dummy0 [ 437.316287][ T9301] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.366045][ T9301] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 437.390078][ T9301] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.427546][ T9301] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.435923][ T9301] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 437.497605][T20676] __nla_validate_parse: 5 callbacks suppressed [ 437.497625][T20676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4269'. [ 437.503725][ T9301] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.575593][T20675] pim6reg1: entered promiscuous mode [ 437.585448][T20675] pim6reg1: entered allmulticast mode [ 437.727149][T20692] netlink: 'syz.1.4271': attribute type 1 has an invalid length. [ 437.749596][T20692] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 437.922628][T20711] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4280'. [ 438.408129][T20737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4286'. [ 438.451649][T20738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4286'. [ 438.631942][T20735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.715704][T20752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4290'. [ 438.732308][T20755] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4291'. [ 439.040011][T20770] netlink: 'syz.1.4296': attribute type 10 has an invalid length. [ 439.116382][T20770] team0: Device veth1_macvtap failed to register rx_handler [ 439.294078][T20792] tipc: Failed to remove unknown binding: 66,1,1/1107318962:2704768659/2704768661 [ 439.478673][T20799] tap0: tun_chr_ioctl cmd 1074025677 [ 439.504219][T20799] tap0: linktype set to 784 [ 440.345253][T20861] netlink: 'syz.4.4323': attribute type 1 has an invalid length. [ 440.393247][T20861] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4323'. [ 440.838023][T20887] netlink: 'syz.2.4328': attribute type 25 has an invalid length. [ 440.899272][T20891] netlink: 'syz.0.4329': attribute type 7 has an invalid length. [ 440.907369][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4329'. [ 441.006594][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4329'. [ 441.210510][T20908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4330'. [ 441.962473][T20939] netlink: 'syz.0.4338': attribute type 33 has an invalid length. [ 441.975146][T20939] netlink: 'syz.0.4338': attribute type 33 has an invalid length. [ 442.037167][ T5885] Bluetooth: hci1: command 0x0406 tx timeout [ 442.267857][T20962] netlink: 'syz.4.4342': attribute type 1 has an invalid length. [ 442.275970][T20962] netlink: 'syz.4.4342': attribute type 1 has an invalid length. [ 442.497645][T20977] netlink: 'syz.0.4354': attribute type 10 has an invalid length. [ 442.533874][T20977] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 442.547171][T20977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.617449][T20982] __nla_validate_parse: 9 callbacks suppressed [ 442.617466][T20982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4355'. [ 442.671295][T20985] syzkaller1: entered promiscuous mode [ 442.678041][T20985] syzkaller1: entered allmulticast mode [ 442.798737][T20994] netlink: 'syz.3.4360': attribute type 21 has an invalid length. [ 442.804684][T20995] lo: Caught tx_queue_len zero misconfig [ 442.827436][T20994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4360'. [ 442.887900][T20998] netlink: 'syz.0.4362': attribute type 1 has an invalid length. [ 442.914691][T20997] netlink: 'syz.0.4362': attribute type 1 has an invalid length. [ 442.943983][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4364'. [ 443.032822][T21001] Unsupported ieee802154 address type: 0 [ 443.038375][T20997] nbd0: detected capacity change from 0 to 127 [ 443.111458][T20998] nbd5: detected capacity change from 0 to 127 [ 443.155461][ T5886] block nbd5: Receive control failed (result -32) [ 443.155470][ T5885] block nbd0: Receive control failed (result -32) [ 443.406057][T21033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4371'. [ 443.523612][T21041] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4374'. [ 443.551991][T21041] netlink: 'syz.0.4374': attribute type 21 has an invalid length. [ 443.583952][T21041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4374'. [ 443.634411][T21048] netlink: 'syz.4.4376': attribute type 1 has an invalid length. [ 443.644268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.765628][T21055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4380'. [ 443.780633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 444.044400][T21078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4383'. [ 444.084265][T21078] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4383'. [ 444.086559][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4386'. [ 444.109204][T21078] netlink: 'syz.0.4383': attribute type 5 has an invalid length. [ 444.145789][T21078] netlink: 'syz.0.4383': attribute type 6 has an invalid length. [ 444.315055][T21095] delete_channel: no stack [ 444.431274][T21099] dvmrp0: entered allmulticast mode [ 444.437475][T21099] dvmrp0: left allmulticast mode [ 444.442521][T21099] dvmrp1: left allmulticast mode [ 444.995818][T21145] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 445.004056][ T5886] Bluetooth: hci2: command 0x0405 tx timeout [ 445.146325][T21156] veth0: entered promiscuous mode [ 445.175238][T21156] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 445.186714][T21156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.202090][T21149] can: request_module (can-proto-0) failed. [ 445.211297][T21148] veth0: left promiscuous mode [ 445.344125][T21161] netlink: 'syz.4.4408': attribute type 13 has an invalid length. [ 445.756804][T21188] netlink: 'syz.4.4415': attribute type 10 has an invalid length. [ 445.778344][T21186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.435705][T21235] tipc: Enabled bearer , priority 0 [ 446.472332][T21235] syzkaller0: entered promiscuous mode [ 446.485055][T21235] syzkaller0: entered allmulticast mode [ 446.506589][T21241] tc_dump_action: action bad kind [ 446.515758][T21235] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 446.544532][T21235] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 446.559284][T21237] netlink: 'syz.3.4428': attribute type 7 has an invalid length. [ 446.574993][T21234] tipc: Resetting bearer [ 446.616655][T21234] tipc: Disabling bearer [ 446.790321][T21256] tipc: Enabled bearer , priority 0 [ 446.820295][T21262] tipc: Enabling of bearer rejected, already enabled [ 446.901239][T21256] tipc: Disabling bearer [ 447.589689][T21305] geneve4: entered promiscuous mode [ 447.595192][T21305] geneve4: entered allmulticast mode [ 447.662273][T21310] __nla_validate_parse: 24 callbacks suppressed [ 447.662290][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'. [ 447.704507][ T12] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 2] type 2 family 0 port 256 - 0 [ 447.715914][ T12] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 447.740685][ T12] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 447.755369][ T12] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 447.786679][T21312] vlan0: entered promiscuous mode [ 447.792511][T21312] vlan0: entered allmulticast mode [ 447.806029][T21312] veth0_vlan: entered allmulticast mode [ 447.809606][T21314] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4451'. [ 448.562840][ T5886] Bluetooth: hci2: link tx timeout [ 448.568960][ T5886] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 448.579709][ T5872] Bluetooth: hci2: link tx timeout [ 448.584893][ T5872] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 448.635709][T21338] wg2: left promiscuous mode [ 448.641856][T21355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4461'. [ 448.644903][T21338] wg2: left allmulticast mode [ 448.779493][T21338] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 448.874831][T21338] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 448.909701][ T7779] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.934782][ T7779] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.974543][ T7779] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.995135][ T7779] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.039437][T21369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4465'. [ 449.094320][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 449.126541][T21374] macvlan3: entered promiscuous mode [ 449.133269][T21374] macvlan3: entered allmulticast mode [ 449.251077][T21380] validate_nla: 5 callbacks suppressed [ 449.251095][T21380] netlink: 'syz.3.4468': attribute type 7 has an invalid length. [ 449.292051][T21380] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4468'. [ 449.498591][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4472'. [ 449.652299][T21406] netlink: 'syz.1.4476': attribute type 7 has an invalid length. [ 449.682399][T21406] netlink: 'syz.1.4476': attribute type 8 has an invalid length. [ 449.792868][T21413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4479'. [ 449.907738][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 449.941393][T21410] vlan2: entered allmulticast mode [ 449.946548][T21410] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 450.008373][T21420] block nbd0: NBD_DISCONNECT [ 450.013017][T21420] block nbd0: Send disconnect failed -32 [ 450.027464][T21420] block nbd0: shutting down sockets [ 450.245782][T21432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4484'. [ 450.427391][T21441] wg2: entered allmulticast mode [ 450.598746][ T5872] Bluetooth: hci2: command 0x0405 tx timeout [ 450.741504][T21460] openvswitch: netlink: Key type 16144 is out of range max 32 [ 450.750410][T21458] netlink: 'syz.0.4492': attribute type 10 has an invalid length. [ 450.801126][T21460] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 450.907143][T21467] team0: Caught tx_queue_len zero misconfig [ 451.008815][T21479] xt_policy: too many policy elements [ 451.722792][T21520] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 451.855530][T21520] bond4: entered promiscuous mode [ 451.861386][T21520] bond4: entered allmulticast mode [ 451.867793][T21520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.925440][T21486] netlink: 'syz.0.4498': attribute type 4 has an invalid length. [ 451.930044][T21520] netlink: 'syz.3.4509': attribute type 3 has an invalid length. [ 452.848806][T21575] __nla_validate_parse: 6 callbacks suppressed [ 452.848823][T21575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4520'. [ 452.915623][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4519'. [ 452.918870][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4520'. [ 453.213636][T21593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4524'. [ 453.454661][T21603] syzkaller1: entered promiscuous mode [ 453.461695][T21603] syzkaller1: entered allmulticast mode [ 453.655704][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4528'. [ 453.743607][T21622] veth0: entered promiscuous mode [ 453.803390][T21622] veth0: left promiscuous mode [ 454.213907][T21634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4532'. [ 454.254134][T21634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4532'. [ 454.320121][T21634] syz_tun: entered promiscuous mode [ 454.354556][T21634] syz_tun: left promiscuous mode [ 454.787779][T21668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.162898][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4552'. [ 455.182249][T21694] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4551'. [ 455.292468][T21705] pim6reg527: entered allmulticast mode [ 455.295327][T21702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4553'. [ 455.313210][T21703] netlink: 'syz.2.4550': attribute type 1 has an invalid length. [ 455.527563][T21714] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 455.777820][T21730] netlink: 'syz.4.4561': attribute type 1 has an invalid length. [ 455.927800][T21745] xt_bpf: check failed: parse error [ 456.082939][T21748] netlink: 'syz.0.4566': attribute type 7 has an invalid length. [ 456.101909][T21751] netlink: 'syz.4.4565': attribute type 1 has an invalid length. [ 456.134386][T21760] netlink: 'syz.1.4567': attribute type 2 has an invalid length. [ 456.300019][T21751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.406429][T21764] veth5: entered promiscuous mode [ 456.422468][T21764] bond3: (slave veth5): Enslaving as an active interface with a down link [ 457.279941][T21836] xt_socket: unknown flags 0x50 [ 457.397537][ T5886] Bluetooth: hci5: command 0x0406 tx timeout [ 457.473214][T21846] rdma_rxe: rxe_newlink: failed to add bond0 [ 457.605773][T21856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.848162][T21870] netlink: 'syz.0.4595': attribute type 12 has an invalid length. [ 457.881016][T21871] __nla_validate_parse: 11 callbacks suppressed [ 457.881032][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4597'. [ 457.968748][T21880] netem: unknown loss type 0 [ 457.973778][T21880] netem: change failed [ 458.098306][T21886] sock: sock_timestamping_bind_phc: sock not bind to device [ 458.113021][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 458.317256][T21900] netlink: 'syz.1.4605': attribute type 1 has an invalid length. [ 458.331734][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4605'. [ 458.536211][T21919] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 458.778616][T21938] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.4619'. [ 458.790522][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4618'. [ 458.836619][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4619'. [ 459.073696][T21958] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4623'. [ 459.136627][T21973] netlink: 'syz.1.4626': attribute type 3 has an invalid length. [ 459.347562][T21985] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4629'. [ 459.743209][T22013] netlink: 'syz.0.4638': attribute type 1 has an invalid length. [ 459.966832][T22031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4643'. [ 460.068386][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4644'. [ 461.434254][T22013] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 462.087796][T22072] veth0: entered promiscuous mode [ 462.113679][T22071] veth0: left promiscuous mode [ 462.182595][T22077] Bluetooth: MGMT ver 1.23 [ 462.199634][T22077] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 462.276248][T22077] netlink: 'syz.1.4661': attribute type 21 has an invalid length. [ 462.294659][T22077] IPv6: NLM_F_CREATE should be specified when creating new route [ 462.324202][T22077] netlink: 'syz.1.4661': attribute type 1 has an invalid length. [ 462.471523][T22086] bond7: (slave bridge3): making interface the new active one [ 462.496086][T22086] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 462.517447][ T5886] Bluetooth: hci0: command 0x0406 tx timeout [ 462.604396][T22092] ip6tnl0: Caught tx_queue_len zero misconfig [ 463.356445][T22117] wg2: entered promiscuous mode [ 463.375532][T22117] wg2: entered allmulticast mode [ 463.713819][T22137] netlink: 'syz.0.4671': attribute type 1 has an invalid length. [ 463.742199][T22137] __nla_validate_parse: 15 callbacks suppressed [ 463.742217][T22137] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4671'. [ 463.906720][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4674'. [ 464.399384][T22162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4680'. [ 464.528102][T22162] veth1_macvtap: left promiscuous mode [ 464.650761][T22168] tipc: Enabled bearer , priority 0 [ 467.601004][T22172] syzkaller0: entered promiscuous mode [ 467.607512][T22172] syzkaller0: entered allmulticast mode [ 467.675114][T22181] tipc: Resetting bearer [ 467.770986][T22167] tipc: Resetting bearer [ 467.825680][T22167] tipc: Disabling bearer [ 467.844566][T22187] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.4685'. [ 467.855384][T22187] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.4685'. [ 468.058791][T22201] netlink: 'syz.1.4689': attribute type 1 has an invalid length. [ 468.075378][T22203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4691'. [ 468.085466][T22201] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4689'. [ 468.271822][T22213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4695'. [ 468.563101][T22222] bond0: (slave rose0): Error: Device can not be enslaved while up [ 468.723211][T22232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4700'. [ 468.769810][T22234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4702'. [ 468.911531][T22238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4703'. [ 468.932630][T22240] netlink: 'syz.3.4704': attribute type 1 has an invalid length. [ 469.085966][T22249] netlink: 'syz.3.4707': attribute type 1 has an invalid length. [ 469.099403][T22249] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4707'. [ 469.117986][T22253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4708'. [ 469.126369][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4709'. [ 469.146440][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4709'. [ 469.309175][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4710'. [ 469.350623][T22262] netlink: 'syz.3.4712': attribute type 21 has an invalid length. [ 469.403966][T22262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4712'. [ 469.414259][T22267] veth1_to_bond: entered allmulticast mode [ 469.415990][T22265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4713'. [ 469.422609][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4714'. [ 469.461357][T22267] bond0: (slave bond_slave_1): Releasing backup interface [ 469.620320][T22277] netlink: 'syz.0.4717': attribute type 1 has an invalid length. [ 469.634238][T22278] netlink: 'syz.3.4718': attribute type 33 has an invalid length. [ 470.292522][T22320] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 470.327508][T22320] netlink: 'syz.0.4731': attribute type 1 has an invalid length. [ 470.352507][T22320] netlink: 'syz.0.4731': attribute type 1 has an invalid length. [ 470.370782][T22320] netlink: 'syz.0.4731': attribute type 2 has an invalid length. [ 470.645387][T22342] netlink: 'syz.3.4737': attribute type 1 has an invalid length. [ 470.882730][T22354] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 471.506664][T22388] tipc: New replicast peer: 255.255.255.255 [ 471.531060][T22388] tipc: Enabled bearer , priority 10 [ 471.605382][T22400] Bluetooth: MGMT ver 1.23 [ 471.653502][T22401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.819893][T22408] syzkaller1: entered promiscuous mode [ 471.825399][T22408] syzkaller1: entered allmulticast mode [ 472.068165][T22417] tipc: Enabling of bearer rejected, failed to enable media [ 472.267433][T22426] lo: Caught tx_queue_len zero misconfig [ 472.303345][T22432] NCSI netlink: No device for ifindex 0 [ 472.344285][T22428] team0: Device gtp1 is of different type [ 472.647346][ T9043] tipc: Node number set to 3715510738 [ 472.717750][T22460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.761685][ T5886] Bluetooth: hci3: command 0x0406 tx timeout [ 472.923875][T22467] geneve3: entered promiscuous mode [ 472.991200][T22467] geneve3: entered allmulticast mode [ 473.069866][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 473.105153][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 473.137197][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 473.204090][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 473.357769][T22480] nbd4: detected capacity change from 0 to 63 [ 473.379028][ T5872] block nbd4: Receive control failed (result -32) [ 473.664042][T22507] validate_nla: 7 callbacks suppressed [ 473.664059][T22507] netlink: 'syz.2.4788': attribute type 1 has an invalid length. [ 473.704574][T22520] netlink: 'syz.1.4792': attribute type 6 has an invalid length. [ 473.726507][T22524] netlink: 'syz.3.4793': attribute type 7 has an invalid length. [ 473.911680][T22537] vcan0: entered allmulticast mode [ 473.978204][T22541] __nla_validate_parse: 35 callbacks suppressed [ 473.978221][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4799'. [ 474.100802][T22543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4800'. [ 474.194293][T22558] vlan0: entered allmulticast mode [ 474.200271][T22558] bond0: entered allmulticast mode [ 474.221331][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4804'. [ 474.251250][T22556] netlink: 'syz.4.4804': attribute type 27 has an invalid length. [ 474.949330][T22580] netlink: 'syz.2.4808': attribute type 11 has an invalid length. [ 474.957686][T22580] netlink: 4112 bytes leftover after parsing attributes in process `syz.2.4808'. [ 475.129905][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4812'. [ 475.238449][T22592] sctp: [Deprecated]: syz.2.4813 (pid 22592) Use of int in maxseg socket option. [ 475.238449][T22592] Use struct sctp_assoc_value instead [ 475.288110][T22592] netlink: 'syz.2.4813': attribute type 1 has an invalid length. [ 475.314895][T22602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4814'. [ 475.360742][T22602] netlink: 'syz.0.4814': attribute type 1 has an invalid length. [ 475.444048][T22607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4817'. [ 475.746805][T22621] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4822'. [ 476.068332][T22629] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.086379][T22629] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 476.128567][T22629] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.147313][T22629] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 476.200536][T22632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4826'. [ 476.245232][T22642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4830'. [ 476.374795][T22629] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.450849][T22629] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 476.487614][T22629] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.536726][T22629] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 476.588383][T22654] nbd0: detected capacity change from 0 to 127 [ 476.601771][ T5872] block nbd0: Receive control failed (result -32) [ 476.743872][T22629] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.813420][T22629] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 476.866700][T22629] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.884988][T22629] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 477.156140][T22629] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.201586][T22629] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 477.238476][T22629] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.263163][T22629] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 477.383614][T22696] geneve3: entered promiscuous mode [ 477.389101][T22696] geneve3: entered allmulticast mode [ 477.397885][ T7776] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 477.435640][T12901] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 477.455480][T12901] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 477.477374][T12901] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 477.617626][T22710] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 477.636190][T22703] netlink: 'syz.3.4842': attribute type 7 has an invalid length. [ 477.644793][T12901] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.660363][T12901] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 477.669620][T12901] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.678292][T12901] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 477.699851][ T7772] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.714826][ T7772] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 477.724150][ T7772] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.738774][ T7772] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 477.781395][ T7772] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.805703][ T7772] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 477.821528][ T7772] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.837756][ T7772] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 477.874260][T12901] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.902397][T12901] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 477.915366][T12901] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.926316][T12901] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 478.091515][T22723] bond0: (slave 0!): Releasing backup interface [ 478.110796][T22723] bridge_slave_0: left allmulticast mode [ 478.116467][T22723] bridge_slave_0: left promiscuous mode [ 478.148096][T22723] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.180676][T22723] bridge_slave_1: left allmulticast mode [ 478.186456][T22723] bridge_slave_1: left promiscuous mode [ 478.192958][T22723] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.243460][T22723] bond0: (slave bond_slave_0): Releasing backup interface [ 478.273402][T22723] team0: Port device team_slave_0 removed [ 478.295886][T22723] team0: Port device team_slave_1 removed [ 478.303600][T22723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.328487][T22723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.364409][T22723] bond0: (slave wlan1): Releasing backup interface [ 478.384724][T22723] bond2: (slave gretap1): Releasing active interface [ 478.414334][T22731] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.428685][T22723] bond4: (slave bond5): Releasing backup interface [ 478.450383][T22715] netlink: 'syz.4.4846': attribute type 4 has an invalid length. [ 478.944930][T22765] netlink: 'syz.1.4858': attribute type 12 has an invalid length. [ 479.114460][T22772] __nla_validate_parse: 10 callbacks suppressed [ 479.114478][T22772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4859'. [ 479.409987][T22780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4861'. [ 479.547720][T22788] netlink: 'syz.0.4863': attribute type 1 has an invalid length. [ 479.581678][T22788] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4863'. [ 479.647349][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4860'. [ 480.052718][T22807] vlan4: entered allmulticast mode [ 480.083074][T22807] hsr0: entered allmulticast mode [ 480.111943][T22807] hsr_slave_0: entered allmulticast mode [ 480.124249][T22807] hsr_slave_1: entered allmulticast mode [ 480.138232][T22812] netlink: 'syz.3.4870': attribute type 1 has an invalid length. [ 480.393358][T22816] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 480.515130][T22812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 480.523359][ T7772] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 480.590895][T22814] syzkaller0: entered promiscuous mode [ 480.596457][T22814] syzkaller0: entered allmulticast mode [ 480.718145][T12901] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 482.232661][T22822] veth9: entered promiscuous mode [ 482.241711][T22822] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 482.354211][T22835] netlink: 'syz.3.4875': attribute type 1 has an invalid length. [ 482.372568][T22833] netlink: 'syz.1.4876': attribute type 18 has an invalid length. [ 482.403884][T22835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.634036][T22845] netlink: 'syz.1.4878': attribute type 15 has an invalid length. [ 483.188085][T22874] team0: Caught tx_queue_len zero misconfig [ 483.626740][T22894] tipc: Enabled bearer , priority 13 [ 483.643952][T22894] tipc: Enabling of bearer rejected, already enabled [ 483.761458][T22906] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4898'. [ 483.897699][T22914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4899'. [ 484.522386][T22938] netlink: 'syz.4.4909': attribute type 15 has an invalid length. [ 484.738433][T22949] netlink: 'syz.4.4911': attribute type 28 has an invalid length. [ 484.746400][T22949] netlink: 'syz.4.4911': attribute type 3 has an invalid length. [ 484.758115][ T9043] tipc: Node number set to 2392138877 [ 484.759062][T22949] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4911'. [ 484.789487][T22951] netlink: 'syz.4.4911': attribute type 28 has an invalid length. [ 484.804368][T22951] netlink: 'syz.4.4911': attribute type 3 has an invalid length. [ 484.818091][T22951] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4911'. [ 484.830063][T22954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4913'. [ 484.869422][T22954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4913'. [ 484.889682][T22954] macvtap1: entered promiscuous mode [ 484.894999][T22954] macvtap1: entered allmulticast mode [ 484.911834][T22954] bond0: entered promiscuous mode [ 484.931540][T22954] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 484.938936][T22954] team0: Device macvtap1 failed to register rx_handler [ 484.952571][T22954] bond0: left promiscuous mode [ 485.060865][T22963] delete_channel: no stack [ 485.154238][T22960] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4914'. [ 486.505376][T23038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4934'. [ 486.644147][ T3482] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 486.928408][ T3482] bond0 (unregistering): Released all slaves [ 487.040450][ T3482] bond1 (unregistering): Released all slaves [ 487.153212][ T3482] bond2 (unregistering): Released all slaves [ 487.167673][ T3482] bond3 (unregistering): Released all slaves [ 487.179918][T23018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4929'. [ 487.195467][T23019] netlink: 'syz.1.4930': attribute type 1 has an invalid length. [ 487.206348][T23019] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4930'. [ 487.237668][T23019] NCSI netlink: No device for ifindex 539571205 [ 487.309078][ T3482] : left promiscuous mode [ 487.462476][ T3482] tipc: Left network mode [ 487.495682][T23056] tipc: Enabled bearer , priority 0 [ 487.514153][T23054] syzkaller0: entered promiscuous mode [ 487.554108][T23054] syzkaller0: entered allmulticast mode [ 487.645502][T23057] tipc: Resetting bearer [ 487.683024][T23057] tipc: Disabling bearer [ 487.910476][T23084] netlink: 'syz.1.4949': attribute type 33 has an invalid length. [ 487.943229][T23084] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.4949'. [ 487.965320][T23084] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 488.342777][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 488.388294][T23111] openvswitch: netlink: Missing key (keys=40, expected=100) [ 488.523745][T23116] tc_dump_action: action bad kind [ 488.574180][T23119] tc_dump_action: action bad kind [ 488.805534][ T3482] hsr_slave_0: left promiscuous mode [ 488.834761][ T3482] hsr_slave_1: left promiscuous mode [ 488.941159][ T3482] pim6reg (unregistering): left allmulticast mode [ 489.061999][ T3482] vlan1 (unregistering): left allmulticast mode [ 489.068472][ T3482] veth0_vlan (unregistering): left allmulticast mode [ 489.646461][T23138] netem: change failed [ 489.675866][T23145] 8021q: VLANs not supported on lo [ 489.841764][T23158] netlink: 4120 bytes leftover after parsing attributes in process `syz.4.4970'. [ 489.992554][T23166] netlink: 'syz.3.4971': attribute type 10 has an invalid length. [ 490.508445][ T3482] IPVS: stop unused estimator thread 0... [ 490.525215][T23202] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4980'. [ 490.553292][T23198] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 490.584805][T23198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 490.592323][T23198] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 490.630025][T23198] 8021q: adding VLAN 0 to HW filter on device bond9 [ 490.637740][T23198] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 490.681429][T23211] netlink: 'syz.0.4983': attribute type 10 has an invalid length. [ 490.689606][T23211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4983'. [ 490.701173][T23198] 8021q: adding VLAN 0 to HW filter on device bond10 [ 490.709308][T23198] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 490.759292][T23198] 8021q: adding VLAN 0 to HW filter on device bond11 [ 490.766737][T23211] dummy0: entered promiscuous mode [ 490.781125][T23211] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 490.802571][T23198] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 490.873855][T23198] 8021q: adding VLAN 0 to HW filter on device bond12 [ 490.882398][T23198] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 490.919869][T23198] 8021q: adding VLAN 0 to HW filter on device bond13 [ 490.928103][T23198] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 490.960050][T23198] 8021q: adding VLAN 0 to HW filter on device bond14 [ 490.967416][T23198] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 490.985775][T23221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4984'. [ 491.032521][T23198] 8021q: adding VLAN 0 to HW filter on device bond15 [ 491.090181][T23198] 8021q: adding VLAN 0 to HW filter on device bond16 [ 491.160239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 491.234175][T23198] 8021q: adding VLAN 0 to HW filter on device bond17 [ 491.243085][T23239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4986'. [ 491.303710][T23198] 8021q: adding VLAN 0 to HW filter on device bond18 [ 491.633370][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4994'. [ 491.652769][T23261] bridge0: port 2(batadv2) entered blocking state [ 491.661297][T23261] bridge0: port 2(batadv2) entered disabled state [ 491.669658][T23261] batadv2: entered allmulticast mode [ 491.677470][T23261] batadv2: entered promiscuous mode [ 491.818659][T23271] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4997'. [ 492.021851][T23290] nft_compat: unsupported protocol 0 [ 492.148681][T12901] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 492.158451][T12901] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 492.430107][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5007'. [ 492.441135][T23306] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 492.477904][T23306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.836963][T23342] syz.3.5017 (23342) used obsolete PPPIOCDETACH ioctl [ 492.878128][T23345] 8021q: adding VLAN 0 to HW filter on device bond6 [ 492.926632][T23345] bond6: (slave gretap1): making interface the new active one [ 492.935756][T23345] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 493.115957][T23359] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 493.153308][T23359] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 493.353804][T23385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5027'. [ 493.556089][T23397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5034'. [ 494.592456][T23442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 494.956646][T23482] __nla_validate_parse: 6 callbacks suppressed [ 494.956663][T23482] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5051'. [ 495.235608][T23489] syzkaller0: entered promiscuous mode [ 495.241515][T23489] syzkaller0: entered allmulticast mode [ 495.528465][T23517] validate_nla: 9 callbacks suppressed [ 495.528484][T23517] netlink: 'syz.2.5059': attribute type 21 has an invalid length. [ 495.576538][T23510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.616819][T23517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5059'. [ 495.854478][T23530] netlink: 'syz.4.5063': attribute type 1 has an invalid length. [ 495.863194][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5064'. [ 495.864369][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5063'. [ 497.772088][T23563] tipc: Enabling of bearer rejected, failed to enable media [ 497.814006][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5075'. [ 497.828317][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5075'. [ 497.848644][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5074'. [ 498.025739][T23585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5080'. [ 498.044355][T23586] veth7: entered promiscuous mode [ 498.050228][T23586] veth7: entered allmulticast mode [ 498.056149][T23582] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5079'. [ 498.186096][T23598] netlink: 'syz.4.5083': attribute type 1 has an invalid length. [ 498.232635][T23585] hsr_slave_0 (unregistering): left promiscuous mode [ 498.388475][T23604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5086'. [ 498.590631][T23622] netlink: 'syz.0.5092': attribute type 11 has an invalid length. [ 498.626230][T23622] netlink: 'syz.0.5092': attribute type 11 has an invalid length. [ 498.868674][T23635] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 498.882469][T23635] syzkaller0: linktype set to 778 [ 499.020340][T23630] syzkaller0: entered promiscuous mode [ 499.025906][T23630] syzkaller0: entered allmulticast mode [ 500.892045][T23670] netlink: 'syz.1.5104': attribute type 1 has an invalid length. [ 500.931725][T23678] __nla_validate_parse: 3 callbacks suppressed [ 500.931743][T23678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5107'. [ 501.024375][T23682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5108'. [ 501.133671][T23692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.243160][T23702] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5112'. [ 501.260475][T23703] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5114'. [ 501.449829][T23715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5118'. [ 501.463543][T23715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5118'. [ 501.473770][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5118'. [ 501.758950][T23729] netlink: 'syz.2.5126': attribute type 1 has an invalid length. [ 501.766813][T23729] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.5126'. [ 501.822090][T23731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.125586][T23753] netlink: 'syz.3.5132': attribute type 1 has an invalid length. [ 502.158594][T23753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5132'. [ 502.230057][T23761] tipc: Enabling of bearer rejected, failed to enable media [ 502.251828][T23763] tipc: Enabling of bearer rejected, failed to enable media [ 502.268675][T23763] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5136'. [ 503.045603][T23826] netlink: 'syz.2.5155': attribute type 29 has an invalid length. [ 503.498314][T23858] netlink: 'syz.0.5163': attribute type 1 has an invalid length. [ 503.548351][T23854] netlink: 'syz.1.5164': attribute type 4 has an invalid length. [ 503.829052][T23876] netlink: 'syz.4.5172': attribute type 15 has an invalid length. [ 504.236810][T23915] tipc: Enabled bearer , priority 0 [ 504.249406][T23915] syzkaller0: entered promiscuous mode [ 504.255357][T23915] syzkaller0: entered allmulticast mode [ 504.290965][T23915] tipc: Resetting bearer [ 504.925939][T23900] tipc: Resetting bearer [ 504.944186][T23900] tipc: Disabling bearer [ 505.175725][ T3482] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 505.180213][T23949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.319418][T23956] wg2: left allmulticast mode [ 505.334575][T23956] vlan0: left allmulticast mode [ 505.339846][T23956] veth0_vlan: left allmulticast mode [ 505.349463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 505.358398][T23956] bond4: left allmulticast mode [ 505.375660][T23958] syzkaller0: entered promiscuous mode [ 505.384576][T23958] syzkaller0: entered allmulticast mode [ 505.442259][ T49] bond5: (slave ip6gretap1): link status up again after 0 ms [ 505.477313][ T49] bond5: (slave ip6gretap1): link status up again after 0 ms [ 505.485784][T23960] ip6gre1: entered allmulticast mode [ 505.519377][ T49] bond5: (slave ip6gretap1): link status up again after 0 ms [ 505.530024][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 505.647503][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 505.757099][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 506.134017][T23975] tipc: New replicast peer: 255.255.255.255 [ 506.145346][T23975] tipc: Enabled bearer , priority 10 [ 506.199314][ T49] net_ratelimit: 2 callbacks suppressed [ 506.199334][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 506.251582][T23979] __nla_validate_parse: 18 callbacks suppressed [ 506.251599][T23979] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5200'. [ 506.291896][T23983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5199'. [ 506.347563][T12901] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 506.359115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 506.480671][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 506.607871][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 506.652614][T24010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5207'. [ 506.678022][T24010] openvswitch: netlink: Flow actions attr not present in new flow. [ 506.759713][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 506.781622][T24014] tipc: Enabled bearer , priority 0 [ 506.804348][T24014] syzkaller0: entered promiscuous mode [ 506.817380][T24014] syzkaller0: entered allmulticast mode [ 506.861100][T24013] tipc: Resetting bearer [ 506.906707][T24013] tipc: Disabling bearer [ 506.916138][T24022] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5212'. [ 506.925107][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5209'. [ 506.944174][T24023] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5209'. [ 506.968834][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.118670][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.197395][T24043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5214'. [ 507.201208][T24044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5218'. [ 507.222266][T24044] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5218'. [ 507.246953][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.321469][T24049] xt_limit: Overflow, try lower: 271964/0 [ 507.434029][T24055] netlink: 'syz.0.5222': attribute type 1 has an invalid length. [ 507.456591][T24055] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5222'. [ 507.531762][T24059] bridge0: port 1(batadv1) entered blocking state [ 507.541285][T24059] bridge0: port 1(batadv1) entered disabled state [ 507.548271][T24059] batadv1: entered allmulticast mode [ 507.554646][T24059] batadv1: entered promiscuous mode [ 507.709262][T24072] netlink: 'syz.2.5227': attribute type 1 has an invalid length. [ 507.724183][T24072] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.733251][T24072] team0: Cannot enslave team device to itself [ 507.817363][T24077] tap0: tun_chr_ioctl cmd 1074025677 [ 507.822834][T24077] tap0: linktype set to 65534 [ 508.023264][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 508.034010][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 508.050171][T24084] veth0: entered promiscuous mode [ 508.073278][T24082] veth0: left promiscuous mode [ 508.434568][T24105] IPVS: set_ctl: invalid protocol: 43 172.20.20.51:20003 [ 508.942994][T24134] netlink: 'syz.1.5247': attribute type 1 has an invalid length. [ 508.961884][T24134] nbd: couldn't find a device at index 1 [ 509.021900][T24144] veth0: entered promiscuous mode [ 509.057837][T24133] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 509.439480][T24163] netlink: 'syz.1.5257': attribute type 5 has an invalid length. [ 509.506814][T24179] IPv6: sit1: Disabled Multicast RS [ 509.546593][T24179] sit1: entered allmulticast mode [ 509.642972][T24188] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 509.652133][T24188] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 509.768807][T24141] veth0: left promiscuous mode [ 509.947560][T24203] smc: net device erspan0 applied user defined pnetid SYZ0 [ 509.985271][T24208] tipc: Enabled bearer , priority 0 [ 509.994198][T24208] syzkaller0: entered promiscuous mode [ 510.004663][T24208] syzkaller0: entered allmulticast mode [ 510.024167][T24208] tipc: Resetting bearer [ 510.035268][T24204] tipc: Resetting bearer [ 510.057873][T24204] tipc: Disabling bearer [ 510.066593][T24210] tipc: Enabled bearer , priority 0 [ 510.074267][T24210] syzkaller0: entered promiscuous mode [ 510.081020][T24210] syzkaller0: entered allmulticast mode [ 510.113979][T24210] tipc: Resetting bearer [ 510.132432][T24209] tipc: Resetting bearer [ 510.172598][T24209] tipc: Disabling bearer [ 510.373030][T24224] netlink: 'syz.1.5275': attribute type 1 has an invalid length. [ 510.728281][T24246] sock: sock_timestamping_bind_phc: sock not bind to device [ 510.766318][T24246] netlink: 'syz.0.5282': attribute type 2 has an invalid length. [ 510.795305][T24246] nbd: must specify a device to reconfigure [ 511.277695][ T36] net_ratelimit: 31 callbacks suppressed [ 511.277713][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 511.326404][T24279] tipc: Enabled bearer , priority 0 [ 511.338606][ T5872] Bluetooth: hci2: link tx timeout [ 511.343751][ T5872] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 511.364847][T24276] tipc: Disabling bearer [ 511.428562][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 511.567209][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 511.700124][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 511.719211][T24298] __nla_validate_parse: 24 callbacks suppressed [ 511.719229][T24298] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5303'. [ 511.841786][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 511.943561][T24308] netlink: 'syz.4.5305': attribute type 22 has an invalid length. [ 511.971779][T24297] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 511.977920][T12901] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 511.988079][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5305'. [ 512.109105][T24308] netlink: 'syz.4.5305': attribute type 22 has an invalid length. [ 512.127559][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5305'. [ 512.140415][ T7772] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 512.215354][T24314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5307'. [ 512.250900][T24314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5307'. [ 512.277716][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 512.301947][T24314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5307'. [ 512.317522][T24314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5307'. [ 512.350088][ T5885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.362237][ T5885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.380703][ T5885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.394031][ T5885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.403514][ T5885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.410716][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.095183][T24352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5317'. [ 513.164291][T24358] netlink: 'syz.4.5317': attribute type 2 has an invalid length. [ 513.193053][T24358] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5317'. [ 513.393467][T24366] sctp: [Deprecated]: syz.4.5321 (pid 24366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.393467][T24366] Use struct sctp_sack_info instead [ 513.410135][ T5885] Bluetooth: hci2: command 0x0405 tx timeout [ 513.418392][T24364] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5320'. [ 513.877501][T24394] netlink: 'syz.2.5330': attribute type 19 has an invalid length. [ 514.123639][T24316] chnl_net:caif_netlink_parms(): no params data found [ 514.233288][T24404] netlink: 'syz.0.5334': attribute type 5 has an invalid length. [ 514.345866][T24413] tipc: Trying to set illegal importance in message [ 514.517637][ T5872] Bluetooth: hci1: command tx timeout [ 514.984090][T24316] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.991531][T24316] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.999111][T24316] bridge_slave_0: entered allmulticast mode [ 515.006705][T24316] bridge_slave_0: entered promiscuous mode [ 515.024770][T24316] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.047937][T24316] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.067628][T24316] bridge_slave_1: entered allmulticast mode [ 515.080599][T24316] bridge_slave_1: entered promiscuous mode [ 515.200183][T24316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.210997][T24453] IPVS: length: 175 != 8 [ 515.223043][T24316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.334825][T24316] team0: Port device team_slave_0 added [ 515.366672][T24316] team0: Port device team_slave_1 added [ 515.492039][T24468] 8021q: adding VLAN 0 to HW filter on device team1 [ 515.500953][T24316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.509542][T24316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.557346][T24316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.585955][T24316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.602491][T24316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.646156][T24316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.736424][T24485] netlink: 'syz.2.5355': attribute type 29 has an invalid length. [ 515.786705][T24485] netlink: 'syz.2.5355': attribute type 29 has an invalid length. [ 515.809970][T24316] hsr_slave_0: entered promiscuous mode [ 515.818941][T24316] hsr_slave_1: entered promiscuous mode [ 515.826689][T24316] debugfs: 'hsr0' already exists in 'hsr' [ 515.842797][T24316] Cannot create hsr debugfs directory [ 516.016601][T24501] netlink: 'syz.3.5360': attribute type 1 has an invalid length. [ 516.108048][T24507] netlink: 'syz.4.5362': attribute type 83 has an invalid length. [ 516.108914][T24508] netlink: 'syz.4.5362': attribute type 83 has an invalid length. [ 516.379001][ T7786] net_ratelimit: 17 callbacks suppressed [ 516.379018][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 516.558683][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 516.579026][T24316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.593091][T24316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.601372][ T5872] Bluetooth: hci1: command tx timeout [ 516.630654][T24316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 516.648357][T24316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.719339][T12901] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 516.749796][T24535] tipc: Enabled bearer , priority 0 [ 516.826449][T24535] syzkaller0: entered promiscuous mode [ 516.836161][T24535] syzkaller0: entered allmulticast mode [ 516.865108][T24551] netlink: 'syz.0.5372': attribute type 11 has an invalid length. [ 516.873754][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 516.887028][T24551] __nla_validate_parse: 10 callbacks suppressed [ 516.887045][T24551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5372'. [ 516.996176][T24555] netlink: 'syz.2.5374': attribute type 1 has an invalid length. [ 517.010878][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5373'. [ 518.629275][T24537] tipc: Resetting bearer [ 518.639757][T24555] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 518.672089][T24526] tipc: Resetting bearer [ 518.687953][ T5872] Bluetooth: hci1: command tx timeout [ 518.726735][T24526] tipc: Disabling bearer [ 518.773287][T24560] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 518.774479][ T7772] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.837160][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'. [ 518.898870][T24572] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5377'. [ 518.974290][T24316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.987944][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 519.017889][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5379'. [ 519.027640][T24316] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.059167][T24576] nbd: nbd0 already in use [ 519.071039][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.078238][ T7786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.104556][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.111775][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.218141][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 519.348077][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 519.360346][T24595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5384'. [ 519.478112][T12901] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 519.553421][T24602] validate_nla: 2 callbacks suppressed [ 519.553437][T24602] netlink: 'syz.4.5386': attribute type 1 has an invalid length. [ 519.592018][T24602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.802390][T24316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.989327][T24617] FAULT_INJECTION: forcing a failure. [ 519.989327][T24617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.133965][T24617] CPU: 1 UID: 0 PID: 24617 Comm: syz.4.5389 Not tainted syzkaller #0 PREEMPT(full) [ 520.134013][T24617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.134041][T24617] Call Trace: [ 520.134050][T24617] [ 520.134057][T24617] dump_stack_lvl+0x189/0x250 [ 520.134081][T24617] ? __pfx____ratelimit+0x10/0x10 [ 520.134100][T24617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.134120][T24617] ? __pfx__printk+0x10/0x10 [ 520.134141][T24617] ? __might_fault+0xb0/0x130 [ 520.134172][T24617] should_fail_ex+0x414/0x560 [ 520.134200][T24617] _copy_from_user+0x2d/0xb0 [ 520.134219][T24617] ___sys_sendmsg+0x158/0x2a0 [ 520.134240][T24617] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.134291][T24617] ? __fget_files+0x2a/0x420 [ 520.134304][T24617] ? __fget_files+0x3a0/0x420 [ 520.134328][T24617] __x64_sys_sendmsg+0x19b/0x260 [ 520.134351][T24617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.134384][T24617] ? __pfx_ksys_write+0x10/0x10 [ 520.134402][T24617] ? rcu_is_watching+0x15/0xb0 [ 520.134425][T24617] ? do_syscall_64+0xbe/0x3b0 [ 520.134447][T24617] do_syscall_64+0xfa/0x3b0 [ 520.134464][T24617] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.134482][T24617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.134499][T24617] ? clear_bhb_loop+0x60/0xb0 [ 520.134519][T24617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.134537][T24617] RIP: 0033:0x7f520158eec9 [ 520.134554][T24617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.134568][T24617] RSP: 002b:00007f51ff7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.134587][T24617] RAX: ffffffffffffffda RBX: 00007f52017e5fa0 RCX: 00007f520158eec9 [ 520.134600][T24617] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 520.134611][T24617] RBP: 00007f51ff7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 520.134623][T24617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.134633][T24617] R13: 00007f52017e6038 R14: 00007f52017e5fa0 R15: 00007ffca9e736a8 [ 520.134663][T24617] [ 520.714920][T24316] veth0_vlan: entered promiscuous mode [ 520.757773][ T5872] Bluetooth: hci1: command tx timeout [ 520.766676][T24316] veth1_vlan: entered promiscuous mode [ 520.830327][T24641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5393'. [ 521.016516][T24316] veth0_macvtap: entered promiscuous mode [ 521.070862][T24316] veth1_macvtap: entered promiscuous mode [ 521.113749][T24316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.147856][T24652] tipc: Enabled bearer , priority 0 [ 521.221151][T24653] syzkaller0: entered promiscuous mode [ 521.226662][T24653] syzkaller0: entered allmulticast mode [ 521.272545][T24316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.332889][T24651] tipc: Resetting bearer [ 521.383167][T24651] tipc: Disabling bearer [ 521.396637][ T7772] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.406768][ T7772] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.553120][ T3482] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.609546][ T3482] net_ratelimit: 11 callbacks suppressed [ 521.609563][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 521.618481][T24685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5404'. [ 521.664689][T24683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5405'. [ 521.679608][T24677] tipc: New replicast peer: 255.255.255.255 [ 521.686772][T24677] tipc: Enabled bearer , priority 10 [ 521.723726][ T7786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.805952][ T9301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 521.951830][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.978706][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.052718][ T9301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.084019][ T9301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.084520][T24702] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5409'. [ 522.128309][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 522.145466][T24702] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 522.172121][T24702] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.180855][T24702] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.252266][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5411'. [ 522.263663][ T9301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 522.397368][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 522.416244][T24719] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5412'. [ 522.449872][T24722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5300'. [ 522.487709][T24722] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 522.507151][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 522.570108][T24730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5415'. [ 522.579585][T24730] bridge_slave_1: left allmulticast mode [ 522.585925][T24730] bridge_slave_1: left promiscuous mode [ 522.591908][T24730] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.629985][T24730] bridge_slave_0: left allmulticast mode [ 522.642172][T24730] bridge_slave_0: left promiscuous mode [ 522.667406][T24730] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.839053][T12901] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 522.980092][T24746] veth1_macvtap: left promiscuous mode [ 522.989459][T24746] macsec0: entered promiscuous mode [ 522.994988][T24746] macsec0: entered allmulticast mode [ 523.027037][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.038058][T24754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5420'. [ 523.161285][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.207908][T24754] netlink: 'syz.0.5420': attribute type 10 has an invalid length. [ 523.219813][T24754] geneve1: entered allmulticast mode [ 523.361401][T24775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5426'. [ 523.378348][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.656005][T24784] syzkaller0: entered promiscuous mode [ 523.682516][T24784] syzkaller0: entered allmulticast mode [ 525.566979][T24809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5435'. [ 525.665520][T24817] bridge0: entered promiscuous mode [ 525.694846][T24817] bridge0: entered allmulticast mode [ 525.877669][T24842] sctp: [Deprecated]: syz.0.5443 (pid 24842) Use of int in maxseg socket option. [ 525.877669][T24842] Use struct sctp_assoc_value instead [ 526.045407][T24853] unknown channel width for channel at 909000KHz? [ 526.224010][T24864] netlink: 'syz.5.5448': attribute type 1 has an invalid length. [ 526.235022][T24864] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5448'. [ 526.271432][T24864] nbd: illegal input index 1048576 [ 526.282107][T24863] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5449'. [ 526.541006][T24886] batadv1: left allmulticast mode [ 526.546082][T24886] batadv1: left promiscuous mode [ 526.565139][T24886] bridge0: port 1(batadv1) entered disabled state [ 526.807447][ T3482] net_ratelimit: 11 callbacks suppressed [ 526.807466][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 526.983042][ T7772] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 527.655454][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 527.898301][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 527.931869][T24953] netlink: 'syz.2.5472': attribute type 1 has an invalid length. [ 528.081355][T24963] netlink: 'syz.3.5475': attribute type 11 has an invalid length. [ 528.128676][T24962] netlink: 'syz.3.5475': attribute type 11 has an invalid length. [ 528.141765][T24953] bond7: entered promiscuous mode [ 528.157718][T24953] 8021q: adding VLAN 0 to HW filter on device bond7 [ 528.177050][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 528.177219][T24965] __nla_validate_parse: 3 callbacks suppressed [ 528.177232][T24965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5475'. [ 528.197104][T24967] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5476'. [ 528.331014][T24960] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.364051][T24960] bond7: (slave bond8): making interface the new active one [ 528.380709][T24960] bond8: entered promiscuous mode [ 528.386728][T24960] bond7: (slave bond8): Enslaving as an active interface with an up link [ 528.499162][ T7772] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 528.607128][ T7772] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 528.608411][T24983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5479'. [ 528.639661][T24983] hsr_slave_1: left promiscuous mode [ 528.717051][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 528.827343][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 528.907132][T25001] netlink: 'syz.4.5485': attribute type 1 has an invalid length. [ 528.932374][T25001] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5485'. [ 528.971953][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5486'. [ 528.999195][T25005] netlink: 'syz.0.5486': attribute type 2 has an invalid length. [ 529.024815][T25005] netlink: 'syz.0.5486': attribute type 3 has an invalid length. [ 529.064449][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5486'. [ 529.097945][ T7786] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 529.130347][T25015] delete_channel: no stack [ 529.338757][T25026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5493'. [ 529.390197][ T8319] IPVS: starting estimator thread 0... [ 529.479468][T25030] IPVS: using max 27 ests per chain, 64800 per kthread [ 529.804847][T25063] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5501'. [ 529.827431][T25063] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5501'. [ 529.934293][T25065] netlink: 'syz.3.5503': attribute type 1 has an invalid length. [ 529.963269][T25065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5503'. [ 533.687880][ T9301] net_ratelimit: 24 callbacks suppressed [ 533.687898][ T9301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 533.826950][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 534.078178][ T9301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 534.187753][ T3482] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 534.224748][T25194] netlink: 'syz.0.5554': attribute type 8 has an invalid length. [ 535.140367][T25208] __nla_validate_parse: 5 callbacks suppressed [ 535.140387][T25208] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5560'. [ 536.866993][T25228] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5565'. [ 537.056313][T25219] syzkaller0: entered promiscuous mode [ 537.086150][T25219] syzkaller0: entered allmulticast mode [ 539.245918][T25238] C: entered allmulticast mode [ 539.262369][T25238] tunl0: entered allmulticast mode [ 539.278735][T25238] gre0: entered allmulticast mode [ 539.295390][T25238] gretap0: entered allmulticast mode [ 539.355365][T25238] erspan0: entered allmulticast mode [ 539.393482][T25238] ip_vti0: entered allmulticast mode [ 539.406234][T25238] ip6_vti0: entered allmulticast mode [ 539.425538][T25238] sit0: entered allmulticast mode [ 539.449484][T25238] ip6tnl0: entered allmulticast mode [ 539.480162][T25238] ip6gre0: entered allmulticast mode [ 539.546310][T25238] syz_tun: entered allmulticast mode [ 539.560280][T25238] ip6gretap0: entered allmulticast mode [ 539.584571][T25238] bond0: entered allmulticast mode [ 539.590606][T25238] bond_slave_0: entered allmulticast mode [ 539.596476][T25238] bond_slave_1: entered allmulticast mode [ 539.602730][T25238] dummy0: entered allmulticast mode [ 539.620007][T25238] team0: entered allmulticast mode [ 539.628003][T25238] team_slave_0: entered allmulticast mode [ 539.633845][T25238] team_slave_1: entered allmulticast mode [ 539.652063][T25238] nlmon0: entered allmulticast mode [ 539.669486][T25238] batadv0: entered allmulticast mode [ 539.682698][T25238] veth0: entered allmulticast mode [ 539.698815][T25238] veth1: entered allmulticast mode [ 539.712227][T25238] wg0: entered allmulticast mode [ 539.720196][T25238] wg1: entered allmulticast mode [ 539.733741][T25238] wg2: entered allmulticast mode [ 539.740401][T25238] veth0_to_bridge: entered allmulticast mode [ 539.759721][T25238] bridge_slave_0: entered allmulticast mode [ 539.775165][T25238] veth1_to_bridge: entered allmulticast mode [ 539.791348][T25238] bridge_slave_1: entered allmulticast mode [ 539.806334][T25238] veth0_to_bond: entered allmulticast mode [ 539.816218][T25238] veth1_to_bond: entered allmulticast mode [ 539.844264][T25238] veth0_to_team: entered allmulticast mode [ 539.864814][T25238] veth1_to_team: entered allmulticast mode [ 539.882154][T25238] veth0_to_batadv: entered allmulticast mode [ 539.901028][T25238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.915352][T25238] batadv_slave_0: entered allmulticast mode [ 539.933528][T25238] xfrm0: entered allmulticast mode [ 539.957982][T25238] veth0_to_hsr: entered allmulticast mode [ 539.978976][T25238] hsr_slave_0: entered allmulticast mode [ 539.996114][T25238] veth1_to_hsr: entered allmulticast mode [ 540.009435][T25238] hsr_slave_1: entered allmulticast mode [ 540.021254][T25238] hsr0: entered allmulticast mode [ 540.034431][T25238] veth1_virt_wifi: entered allmulticast mode [ 540.058466][T25238] veth0_virt_wifi: entered allmulticast mode [ 540.069944][T25238] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 540.079167][T25238] veth1_vlan: entered allmulticast mode [ 540.095030][T25238] veth0_vlan: entered allmulticast mode [ 540.119531][T25238] vlan0: left promiscuous mode [ 540.124529][T25238] vlan0: entered allmulticast mode [ 540.130874][T25238] vlan1: entered allmulticast mode [ 540.142269][T25238] macvlan0: entered allmulticast mode [ 540.161929][T25238] macvlan1: entered allmulticast mode [ 540.171828][T25238] ipvlan0: entered allmulticast mode [ 540.182283][T25238] ipvlan1: entered allmulticast mode [ 540.193057][T25238] veth1_macvtap: entered allmulticast mode [ 540.207577][T25238] veth0_macvtap: entered allmulticast mode [ 540.224625][T25238] macvtap0: entered allmulticast mode [ 540.235633][T25238] geneve0: entered allmulticast mode [ 540.251413][T25238] geneve1: entered allmulticast mode [ 540.267987][T25238] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 540.275153][T25238] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 540.284551][T25238] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 540.302293][T25238] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 540.333959][T25238] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 540.364588][T25238] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 540.386685][T25238] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 540.402294][T25238] macvlan2: entered allmulticast mode [ 540.408834][T25238] bridge1: entered allmulticast mode [ 540.414289][T25238] macvlan3: entered allmulticast mode [ 540.421367][T25238] macvlan4: entered allmulticast mode [ 540.428120][T25238] bond1: entered allmulticast mode [ 540.445990][T25238] : entered allmulticast mode [ 540.455470][T25238] bridge2: entered allmulticast mode [ 540.461583][T25238] ip6tnl1: entered allmulticast mode [ 540.467857][T25238] syztnl0: entered allmulticast mode [ 540.473280][T25238] bond2: entered allmulticast mode [ 540.479164][T25238] gretap1: entered allmulticast mode [ 540.490331][T25238] veth2: entered allmulticast mode [ 540.495654][T25238] veth3: entered allmulticast mode [ 540.501479][T25238] veth4: entered allmulticast mode [ 540.508084][T25238] veth5: entered allmulticast mode [ 540.513383][T25238] geneve2: entered allmulticast mode [ 540.519164][T25238] bond3: entered allmulticast mode [ 540.524374][T25238] syztnl1: entered allmulticast mode [ 540.530449][T25238] bridge3: entered allmulticast mode [ 540.535826][T25238] syztnl2: entered allmulticast mode [ 540.541462][T25238] bridge4: entered allmulticast mode [ 540.547110][T25238] ip6erspan0: entered allmulticast mode [ 540.553423][T25238] vlan2: entered allmulticast mode [ 540.562501][T25238] bond4: left promiscuous mode [ 540.573098][T25238] bond4: entered allmulticast mode [ 540.581270][T25238] veth6: entered allmulticast mode [ 540.586676][T25238] veth7: entered allmulticast mode [ 540.593772][T25238] ip6tnl2: entered allmulticast mode [ 540.604327][T25238] vxlan0: entered allmulticast mode [ 540.612304][T25238] bridge5: entered allmulticast mode [ 540.625536][T25238] bridge6: entered allmulticast mode [ 540.636497][T25238] bond5: entered allmulticast mode [ 540.642724][T25238] ip6gretap1: entered allmulticast mode [ 540.648593][T25238] veth9: entered allmulticast mode [ 540.664524][T25238] veth8: entered allmulticast mode [ 540.670547][T25238] veth9: left promiscuous mode [ 540.682200][T25238] bond6: entered allmulticast mode [ 540.691540][T25238] ipip0: entered allmulticast mode [ 540.706523][T25238] ip6tnl3: entered allmulticast mode [ 540.713578][T25238] ip6tnl4: entered allmulticast mode [ 540.725759][T25238] team1: entered allmulticast mode [ 540.734617][T25238] bridge0: left promiscuous mode [ 540.802440][T25290] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 540.827048][ T9301] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.867935][ T9301] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.993348][ T9301] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.014174][ T9301] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.039990][ T9301] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.060685][ T9301] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.103987][T25308] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 541.124249][ T9301] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.153152][ T9301] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.373385][T25334] netlink: 'syz.2.5598': attribute type 3 has an invalid length. [ 543.381533][T25334] netlink: 'syz.2.5598': attribute type 3 has an invalid length. [ 543.821713][T25377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5617'. [ 543.914085][T25379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5620'. [ 543.977126][T25387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5623'. [ 543.993380][T25387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5623'. [ 544.188449][T25391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.204158][T25391] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.266182][T25391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.338208][T25391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.366699][T25391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.384393][T25391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.405187][T25391] veth1_vlan: left promiscuous mode [ 544.412820][T25391] veth0_vlan: left promiscuous mode [ 544.420767][T25391] veth0_vlan: entered promiscuous mode [ 544.431817][T25391] veth1_vlan: entered promiscuous mode [ 544.452990][T25391] veth0_macvtap: left promiscuous mode [ 544.461439][T25391] veth0_macvtap: entered promiscuous mode [ 544.492788][T25391] bond_slave_0: entered promiscuous mode [ 544.498819][T25391] bond_slave_1: entered promiscuous mode [ 544.504539][T25391] dummy0: entered promiscuous mode [ 544.513483][T25391] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 544.530571][T25391] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 544.539715][T25391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.559029][T25391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.577165][T25391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.596125][T25391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.612874][T25391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 544.627675][T25391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 544.640532][T25391] 8021q: adding VLAN 0 to HW filter on device team1 [ 544.718067][T12901] bond5: (slave ip6gretap1): link status up again after 0 ms [ 544.747963][ T9301] bond5: (slave ip6gretap1): link status up again after 0 ms [ 544.759914][ T7786] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.772083][ T7786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.783282][ T7786] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.793840][ T36] bond5: (slave ip6gretap1): link status up again after 0 ms [ 544.811112][ T7786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.828702][ T36] bond5: (slave ip6gretap1): link status up again after 0 ms [ 544.857344][T12901] bond5: (slave ip6gretap1): link status up again after 0 ms [ 544.902570][ T7772] bond5: (slave ip6gretap1): link status up again after 0 ms [ 544.940932][ T7786] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.950890][ T36] bond5: (slave ip6gretap1): link status up again after 0 ms [ 544.966032][ T7786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.977541][ T49] bond5: (slave ip6gretap1): link status up again after 0 ms [ 545.000501][ T7786] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.011477][T12901] bond5: (slave ip6gretap1): link status up again after 0 ms [ 545.029713][ T7786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.046125][T12901] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 545.090881][T12901] bond5: active interface up! [ 545.153265][ T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 545.418330][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5639'. [ 546.228625][ T9301] net_ratelimit: 9 callbacks suppressed [ 546.228644][ T9301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 546.395768][ T9301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 546.512630][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 546.688165][ T49] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 546.919084][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 547.097240][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 548.855184][T25491] wg2: left promiscuous mode [ 548.862790][T25491] wg2: left allmulticast mode [ 548.947853][T25491] geneve3: left promiscuous mode [ 548.956681][T25491] geneve3: left allmulticast mode [ 548.998109][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 549.060034][T25491] bond7: left promiscuous mode [ 549.075398][T25491] bond8: left promiscuous mode [ 549.103244][ T49] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 549.122264][ T49] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 549.151930][ T49] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 549.172669][ T49] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 549.200241][T12901] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 549.347397][ T7772] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 549.457176][ T9301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 549.627049][T12901] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 556.538533][T25632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5727'. [ 557.079132][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 557.148245][T25633] bond_slave_0: left promiscuous mode [ 557.154125][T25633] bond_slave_1: left promiscuous mode [ 557.190284][T25633] dummy0: left promiscuous mode [ 557.572366][T25633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.371461][ T49] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.430760][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.457078][ T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.465982][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.552542][ T49] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.587156][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.604169][ T49] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.617626][T25683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5739'. [ 558.629049][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.827060][T25701] tipc: Started in network mode [ 558.832215][T25701] tipc: Node identity 0900000000000000ffffffffffffffff, cluster identity 4711 [ 558.855954][T25701] netlink: 'syz.5.5744': attribute type 1 has an invalid length. [ 558.874336][T25701] netlink: 'syz.5.5744': attribute type 2 has an invalid length. [ 558.888726][T25701] netlink: 'syz.5.5744': attribute type 1 has an invalid length. [ 558.905473][T25701] netlink: 1156 bytes leftover after parsing attributes in process `syz.5.5744'. [ 559.295008][T25719] tipc: Enabled bearer , priority 0 [ 559.395230][T25729] bond0: (slave dummy0): Releasing backup interface [ 559.414194][T25729] bond0: (slave bond_slave_0): Releasing backup interface [ 559.425866][T25729] bond0: (slave bond_slave_1): Releasing backup interface [ 559.450661][T25729] team0: Port device team_slave_0 removed [ 559.469827][T25729] team0: Port device team_slave_1 removed [ 559.476154][T25729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.495806][T25729] bond2: (slave gretap1): Releasing active interface [ 559.514362][T25729] bond5: (slave ip6gretap1): Releasing backup interface [ 559.525463][T25729] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 9a:4e:cb:eb:cc:b6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 559.554375][T25729] bond5: (slave veth9): Removing an active aggregator [ 559.563942][T25729] bond5: (slave veth9): Releasing backup interface [ 559.574069][T25711] tipc: Resetting bearer [ 559.705079][T25747] netlink: 'syz.3.5757': attribute type 10 has an invalid length. [ 560.417458][T25286] tipc: Node number set to 150994944 [ 561.291571][T25711] tipc: Disabling bearer [ 561.304632][T25741] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 561.314063][T25744] macsec0: entered promiscuous mode [ 561.320331][T25744] macsec0: entered allmulticast mode [ 561.331841][T25749] batadv0: entered promiscuous mode [ 561.361788][T25749] batadv0: entered allmulticast mode [ 561.382493][T25749] macsec0: left promiscuous mode [ 561.394429][T25749] macsec0: left allmulticast mode [ 561.404375][T25749] batadv0: left allmulticast mode [ 561.561295][T25767] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5762'. [ 561.590162][T25769] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5762'. [ 561.666658][T25772] netlink: 'syz.3.5764': attribute type 1 has an invalid length. [ 561.716336][T25772] bond7 (unregistering): Released all slaves [ 561.802999][T25780] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5766'. [ 562.072608][T25801] IPVS: Error connecting to the multicast addr [ 562.084338][T25802] IPVS: Error connecting to the multicast addr [ 562.094900][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5771'. [ 562.136780][T25804] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5773'. [ 562.162881][T25806] tipc: Enabled bearer , priority 0 [ 562.183790][T25804] gretap0: entered promiscuous mode [ 562.194100][T25806] syzkaller0: entered promiscuous mode [ 562.202853][T25804] netlink: 'syz.5.5773': attribute type 8 has an invalid length. [ 562.206772][T25806] syzkaller0: entered allmulticast mode [ 562.221917][T25806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5775'. [ 562.252574][T25808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5776'. [ 562.336124][T25815] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5773'. [ 562.361110][T25815] 0ªî{X¹¦: renamed from gretap0 [ 562.399842][T25815] 0ªî{X¹¦: left promiscuous mode [ 562.409655][T25815] 0ªî{X¹¦: entered allmulticast mode [ 562.419171][T25815] net_ratelimit: 5 callbacks suppressed [ 562.419186][T25815] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 562.445835][T25806] tipc: Resetting bearer [ 562.464653][T25806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.473197][T25806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.590012][T25805] tipc: Resetting bearer [ 562.670787][T25805] tipc: Disabling bearer [ 562.745351][T25837] netlink: 'syz.4.5784': attribute type 1 has an invalid length. [ 562.755544][T25837] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5784'. [ 562.837085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.919865][T25844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5786'. [ 563.485386][T25846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.606447][T25882] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 563.613039][T25882] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 564.511160][T25932] netlink: 'syz.0.5808': attribute type 4 has an invalid length. [ 564.561881][T25938] tipc: Enabled bearer , priority 0 [ 564.569628][T25938] syzkaller0: entered promiscuous mode [ 564.575116][T25938] syzkaller0: entered allmulticast mode [ 564.589943][T25938] tipc: Resetting bearer [ 564.731536][T25929] tipc: Resetting bearer [ 564.778607][T25929] tipc: Disabling bearer [ 564.921159][T25960] netlink: 'syz.3.5818': attribute type 2 has an invalid length. [ 564.986193][T25956] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 565.192072][T25980] bond0: Caught tx_queue_len zero misconfig [ 565.340433][T25989] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 565.473932][T25992] veth11: entered allmulticast mode [ 565.502379][T25997] syzkaller0: refused to change device tx_queue_len [ 566.082639][T26038] [ 566.085003][T26038] ====================================================== [ 566.092006][T26038] WARNING: possible circular locking dependency detected [ 566.099016][T26038] syzkaller #0 Not tainted [ 566.103407][T26038] ------------------------------------------------------ [ 566.110401][T26038] syz.4.5841/26038 is trying to acquire lock: [ 566.116444][T26038] ffffffff8f68f7b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 566.125919][T26038] [ 566.125919][T26038] but task is already holding lock: [ 566.133259][T26038] ffffffff8f68f758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 566.142816][T26038] [ 566.142816][T26038] which lock already depends on the new lock. [ 566.142816][T26038] [ 566.153204][T26038] [ 566.153204][T26038] the existing dependency chain (in reverse order) is: [ 566.162215][T26038] [ 566.162215][T26038] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 566.170112][T26038] lock_acquire+0x120/0x360 [ 566.175129][T26038] _raw_spin_lock_bh+0x36/0x50 [ 566.180401][T26038] nr_del_node+0x517/0x8d0 [ 566.185329][T26038] nr_rt_ioctl+0x989/0xd50 [ 566.190251][T26038] sock_do_ioctl+0xdc/0x300 [ 566.195262][T26038] sock_ioctl+0x576/0x790 [ 566.200096][T26038] __se_sys_ioctl+0xfc/0x170 [ 566.205191][T26038] do_syscall_64+0xfa/0x3b0 [ 566.210198][T26038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.216598][T26038] [ 566.216598][T26038] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 566.224573][T26038] lock_acquire+0x120/0x360 [ 566.229929][T26038] _raw_spin_lock_bh+0x36/0x50 [ 566.235209][T26038] nr_del_node+0x152/0x8d0 [ 566.240128][T26038] nr_rt_ioctl+0x989/0xd50 [ 566.245049][T26038] sock_do_ioctl+0xdc/0x300 [ 566.250054][T26038] sock_ioctl+0x576/0x790 [ 566.254887][T26038] __se_sys_ioctl+0xfc/0x170 [ 566.259983][T26038] do_syscall_64+0xfa/0x3b0 [ 566.264989][T26038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.271384][T26038] [ 566.271384][T26038] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 566.279272][T26038] validate_chain+0xb9b/0x2140 [ 566.284543][T26038] __lock_acquire+0xab9/0xd20 [ 566.289731][T26038] lock_acquire+0x120/0x360 [ 566.294739][T26038] _raw_spin_lock_bh+0x36/0x50 [ 566.300009][T26038] nr_rt_device_down+0xa9/0x720 [ 566.305365][T26038] nr_device_event+0x137/0x150 [ 566.310636][T26038] notifier_call_chain+0x1b3/0x3e0 [ 566.316249][T26038] __dev_notify_flags+0x18d/0x2e0 [ 566.321779][T26038] netif_change_flags+0xe8/0x1a0 [ 566.327223][T26038] dev_change_flags+0x130/0x260 [ 566.332578][T26038] dev_ioctl+0x7b4/0x1150 [ 566.337412][T26038] sock_do_ioctl+0x22c/0x300 [ 566.342509][T26038] sock_ioctl+0x576/0x790 [ 566.347344][T26038] __se_sys_ioctl+0xfc/0x170 [ 566.352436][T26038] do_syscall_64+0xfa/0x3b0 [ 566.357450][T26038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.363887][T26038] [ 566.363887][T26038] other info that might help us debug this: [ 566.363887][T26038] [ 566.374106][T26038] Chain exists of: [ 566.374106][T26038] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 566.374106][T26038] [ 566.387922][T26038] Possible unsafe locking scenario: [ 566.387922][T26038] [ 566.395368][T26038] CPU0 CPU1 [ 566.400718][T26038] ---- ---- [ 566.406070][T26038] lock(nr_neigh_list_lock); [ 566.410734][T26038] lock(&nr_node->node_lock); [ 566.418002][T26038] lock(nr_neigh_list_lock); [ 566.425182][T26038] lock(nr_node_list_lock); [ 566.429840][T26038] [ 566.429840][T26038] *** DEADLOCK *** [ 566.429840][T26038] [ 566.437962][T26038] 2 locks held by syz.4.5841/26038: [ 566.443142][T26038] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 566.451921][T26038] #1: ffffffff8f68f758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 566.461936][T26038] [ 566.461936][T26038] stack backtrace: [ 566.467809][T26038] CPU: 0 UID: 0 PID: 26038 Comm: syz.4.5841 Not tainted syzkaller #0 PREEMPT(full) [ 566.467827][T26038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 566.467835][T26038] Call Trace: [ 566.467843][T26038] [ 566.467850][T26038] dump_stack_lvl+0x189/0x250 [ 566.467874][T26038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.467888][T26038] ? __pfx__printk+0x10/0x10 [ 566.467905][T26038] ? print_lock_name+0xde/0x100 [ 566.467922][T26038] print_circular_bug+0x2ee/0x310 [ 566.467938][T26038] check_noncircular+0x134/0x160 [ 566.467954][T26038] validate_chain+0xb9b/0x2140 [ 566.467969][T26038] ? rt6_disable_ip+0x6b3/0x720 [ 566.467984][T26038] ? __lock_acquire+0xab9/0xd20 [ 566.468001][T26038] __lock_acquire+0xab9/0xd20 [ 566.468020][T26038] ? nr_rt_device_down+0xa9/0x720 [ 566.468035][T26038] lock_acquire+0x120/0x360 [ 566.468051][T26038] ? nr_rt_device_down+0xa9/0x720 [ 566.468071][T26038] ? nr_rt_device_down+0xa9/0x720 [ 566.468087][T26038] _raw_spin_lock_bh+0x36/0x50 [ 566.468105][T26038] ? nr_rt_device_down+0xa9/0x720 [ 566.468121][T26038] nr_rt_device_down+0xa9/0x720 [ 566.468138][T26038] ? do_raw_spin_unlock+0x122/0x240 [ 566.468154][T26038] nr_device_event+0x137/0x150 [ 566.468170][T26038] notifier_call_chain+0x1b3/0x3e0 [ 566.468186][T26038] __dev_notify_flags+0x18d/0x2e0 [ 566.468206][T26038] ? __pfx___dev_notify_flags+0x10/0x10 [ 566.468220][T26038] ? __dev_change_flags+0x4cc/0x6d0 [ 566.468235][T26038] ? __pfx___dev_change_flags+0x10/0x10 [ 566.468249][T26038] ? full_name_hash+0x92/0xe0 [ 566.468270][T26038] netif_change_flags+0xe8/0x1a0 [ 566.468286][T26038] dev_change_flags+0x130/0x260 [ 566.468301][T26038] dev_ioctl+0x7b4/0x1150 [ 566.468315][T26038] sock_do_ioctl+0x22c/0x300 [ 566.468333][T26038] ? __pfx_sock_do_ioctl+0x10/0x10 [ 566.468350][T26038] ? __lock_acquire+0xab9/0xd20 [ 566.468371][T26038] sock_ioctl+0x576/0x790 [ 566.468388][T26038] ? __pfx_sock_ioctl+0x10/0x10 [ 566.468404][T26038] ? __fget_files+0x2a/0x420 [ 566.468414][T26038] ? __fget_files+0x3a0/0x420 [ 566.468425][T26038] ? __fget_files+0x2a/0x420 [ 566.468436][T26038] ? bpf_lsm_file_ioctl+0x9/0x20 [ 566.468451][T26038] ? __pfx_sock_ioctl+0x10/0x10 [ 566.468467][T26038] __se_sys_ioctl+0xfc/0x170 [ 566.468482][T26038] do_syscall_64+0xfa/0x3b0 [ 566.468495][T26038] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.468508][T26038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.468520][T26038] ? clear_bhb_loop+0x60/0xb0 [ 566.468533][T26038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.468546][T26038] RIP: 0033:0x7f520158eec9 [ 566.468559][T26038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.468570][T26038] RSP: 002b:00007f51ff7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.468584][T26038] RAX: ffffffffffffffda RBX: 00007f52017e5fa0 RCX: 00007f520158eec9 [ 566.468594][T26038] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 566.468602][T26038] RBP: 00007f5201611f91 R08: 0000000000000000 R09: 0000000000000000 [ 566.468611][T26038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.468619][T26038] R13: 00007f52017e6038 R14: 00007f52017e5fa0 R15: 00007ffca9e736a8 [ 566.468634][T26038] [ 566.790788][T26040] __nla_validate_parse: 6 callbacks suppressed [ 566.790802][T26040] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.5840'.