last executing test programs: 28.869228617s ago: executing program 2 (id=2154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xa}, &(0x7f0000000380)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000000000080003400500000105000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f00000000000000ec33"], 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 28.763293046s ago: executing program 2 (id=2156): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273"], 0x294}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) 28.680223523s ago: executing program 2 (id=2159): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.545165137s ago: executing program 2 (id=2161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x88, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0xff}}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, @IPSET_ATTR_FAMILY={0x4, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x88}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x3, 0x0, 0x894, 0x1ff, 0x2, 0x2}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) 28.262073645s ago: executing program 2 (id=2165): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/223, 0xdf}], 0x4}, 0x100) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.sectors\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000500)='cgroup.controllers\x00', 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0x198, 0x13, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [{0x17, 0x1, 'cgroup.controllers\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x17, 0x1, 'cgroup.controllers\x00'}, {0x16, 0x1, 'blkio.bfq.sectors\x00'}, {0x5, 0x1, ':'}, {0x7, 0x1, '&)*'}]}, {0x50, 0x0, 0x0, 0x1, [{0x6, 0x1, '*]'}, {0x4}, {0xd, 0x1, '#[#,/\x7f%,,'}, {0x7, 0x1, ',&*'}, {0x16, 0x1, 'blkio.bfq.sectors\x00'}, {0x4}, {0x5, 0x1, '\x00'}, {0x4}]}, {0xb0, 0x0, 0x0, 0x1, [{0x17, 0x1, 'cgroup.controllers\x00'}, {0x5, 0x1, '\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0xa, 0x1, '%}r)%['}, {0x16, 0x1, 'blkio.bfq.sectors\x00'}, {0x7, 0x1, '@\\}'}, {0x17, 0x1, 'cgroup.controllers\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x16, 0x1, 'blkio.bfq.sectors\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0x5, 0x1, ']'}, {0x4}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x8, 0x1, '^-%['}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000fc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x150, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_USERDATA={0xca, 0xd, 0x1, 0x0, "dd7411c4d71e73341bd6bc400db18c80e2c9b3b3adb20805289f52b15c4d679756031745bcc52e6973201953b2d352077d3738b43b5ae43b6da67b77e9842f0030557e29fcee0856642b3ef10cc73a9b959864cfe11c5384ac852f9de2de4ab394869711058d32b79fadfa09b93fad83e76982d61045eec655ba8321fb94dc6a719afbab1e8d5cfcda7d93070733663091c05a7137cbdcc806a3e78789f8fa0cd9b9c90217a508ba657c249f839b1b10eadb51352efde8cf22d71865996cdbe758a264021b74"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_USERDATA={0x2d, 0xd, 0x1, 0x0, "d8dfebb736b7af5730fb01c561a37f0847f96ca65dbc5efb5a266d8b8b2a680ec42a0e2d54c2f4baec"}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x3a, 0x7, 0x1, 0x0, "35309df30a7aadfefc8a0d10933b6050017c93e77fa03221e4b05a24a09d4ea919a7af264f1bc35ae6290bd40bce05ba1a2e2994a8bd"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x134, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0xcd, 0x6, "d3d06582ec94e3c96fb54f12321f5f07090e7856629eba79b4cd9ff46c0a9d753be8deafa1828c4d60d85f8078009ccf4013a1ee521e12af36a7857b7e08b91b97f8dd845bea504894d29db70e1ee4394f2bb3936c1cddfd770715adf24a111b94c3afd2e93eb8dc727c8995fd0aee676f40b2cdc2d3bea57af315dec1eee9a07497d0be4c09f54cc0564039a60ff248c920b69dad21198376f01099642d824ce990c0a454d4c2c2ae39fd45778faad3b1b1ad9a1b2f2a00926fc16c44db1fe78dea5aa1d1b0164146"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x13, 0x6, "47a6d6137ee8695517b9dab5a31668"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x258, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffbd66}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x120, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5b8}, 0x1, 0x0, 0x0, 0x40040}, 0x21a49aef1c3e61da) (async) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r11, &(0x7f0000001000)={0x27, 0x0, 0x1, 0x6}, 0x10) (async) recvfrom$ax25(r3, &(0x7f0000001040)=""/230, 0xe6, 0x1, &(0x7f0000001140)={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @default, @bcast, @bcast, @null]}, 0x48) (async) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_netdev_private(r12, 0x89f1, &(0x7f00000011c0)="5d49a9d29ae5b8e981ae431bc734fc546682fbeb1ddba6313414df9e6f4744fd6ad75e083180ea1adf151ea5773cdebc3b804e5f7be15b64b859112b58e0608eda3de41aa090a2660487f3d45c804b46d564ac84060dd0fe89c30c9d2d987bcd26f99986aadbf04463e4a09cb4aeac31fee78b323c66ef72dcab2e4456b764175476521440c8ddd11b63e7f027e6565ce6e5132586fea105c616be4b9e1704425f4ef554b7086a7ffeb9d9326177f75e166219be58d4d185700084acb5c98834d4d324ee14a8ec1f559a0bdb60dedc0d") getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000012c0)=""/4096, &(0x7f00000022c0)=0x1000) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x48, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x10) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0x7, &(0x7f0000002480)={0x3, 0xfffffff8, 0x2000000, 0xf}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000002680)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f0000002500)={0x108, 0x34, 0x918, 0x70bd27, 0x25dfdbfc, {0x7}, [@nested={0xf2, 0xb9, 0x0, 0x1, [@generic="15de06146ce43ec5eeeb406995c485e8361f2e76d56f7dad5e8997156539f38f4500803415993e940dfaa624df2929a4d3ebc6a10bb94980393b15e7278c5fa51a2163eb8e5bd4606eb75b179981f264795b26496d401673acff7653f2621d5b3a8cc2d3d8457eeefdf1d4a0eb7d0ea82f45fcf7067622f1c20d472012023e2118ddb3fe803840e15325119129613c23c71ce78e1dc55ddc33e0027b6d37c32c48467e2ab8cead497207afcbcc5ceb97bf98bdbc61aed2344d2bd8ee50649c6a06616d22303d655c5337f0fcc2d34da1baf1fe9a24a109bfa3b3751e7f99a68eecf18cfa6cdc13a1b4d9", @nested={0x4, 0x140}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4c001}, 0x4080) (async) socket$l2tp(0x2, 0x2, 0x73) socket(0x11, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000026c0)=0x1, 0x4) 27.724322416s ago: executing program 2 (id=2170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000e00)=""/210, 0xd2}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f0000000b40)=""/38, 0x26}, {&(0x7f0000000b80)=""/64, 0x40}, {&(0x7f0000000bc0)=""/161, 0xa1}, {&(0x7f0000000c80)=""/206, 0xce}], 0x7, &(0x7f0000000580)=""/227, 0xe3}, 0x100) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r3) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r7, &(0x7f00000000c0)={0x27, r6, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r5) (async) close(r7) (async) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r4, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}}, 0x44840) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22410081}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xffffffff}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x891}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xd4}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4c884) 27.210674456s ago: executing program 0 (id=2183): r0 = socket$inet6(0xa, 0x80000, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x48, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x22, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa403, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000005c0)='syzkaller\x00', 0x8, 0xa5, &(0x7f0000000600)=""/165, 0x40f00, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x100004, 0x1e, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000740)=[0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x5, 0x5, 0x8}, {0x0, 0x5, 0x2, 0x4}, {0x4, 0x4, 0x8, 0x2}, {0x2, 0x5, 0x9, 0x3}, {0x1, 0x3, 0x6, 0x3}, {0x3, 0x5, 0x4, 0x6}, {0x4, 0x4, 0xd, 0x7}], 0x10, 0x10001}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pK \x00'}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x18}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x4f5, 0x1f, &(0x7f00000000c0)=""/31, 0x41100, 0x21, '\x00', r2, @fallback=0x5, r3, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0x82e, 0x3}, 0x10, 0x0, r4, 0xa, &(0x7f0000000a40)=[r1, r5, r6, 0x1, r1, r7], &(0x7f0000000a80)=[{0x2, 0x4, 0xf, 0x1}, {0x4, 0x40, 0x8, 0x4}, {0x2, 0x4, 0x5, 0x7}, {0x2, 0x5, 0x9, 0xcd42cd5174a92669}, {0x5, 0x2, 0xe, 0xdbd0abaeadb64385}, {0x2, 0x4, 0x4}, {0x4, 0x3, 0x0, 0x7}, {0x1, 0x4, 0x1, 0x5}, {0x1, 0x1, 0x1, 0xa}, {0x2, 0x3, 0x6}], 0x10, 0x80000001}, 0x94) (async) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) 26.789238788s ago: executing program 0 (id=2188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988a8", 0xe}, {&(0x7f0000000380)="2acfb759abd3", 0x6}], 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x20080001) 26.627032962s ago: executing program 3 (id=2190): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x1084) sendmsg$AUDIT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)={0x10, 0x3e8, 0x0, 0x70bd2b, 0x25dfdc00}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x20000885) recvmmsg(r1, &(0x7f0000005b00)=[{{&(0x7f0000000480)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000000780)=""/218, 0xda}], 0x3, &(0x7f0000000880)=""/114, 0x72}, 0x1}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/98, 0x62}, {&(0x7f0000000a00)=""/151, 0x97}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f0000000ac0)=""/182, 0xb6}, {&(0x7f0000000b80)=""/106, 0x6a}], 0x5}, 0x459}, {{&(0x7f0000000c80)=@tipc, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d80)=""/215, 0xd7}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x2, &(0x7f0000000e80)=""/2, 0x2}, 0x4}, {{&(0x7f0000000f00)=@caif=@util, 0x80, &(0x7f0000001000)=[{&(0x7f0000000400)=""/8, 0x8}, {&(0x7f0000000fc0)=""/9, 0x9}], 0x2}, 0x101}, {{&(0x7f0000001040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/57, 0x39}], 0x1, &(0x7f0000001140)=""/21, 0x15}, 0x7}, {{&(0x7f0000001180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001200)=""/206, 0xce}, {&(0x7f0000001300)=""/206, 0xce}, {&(0x7f0000002480)=""/177, 0xb1}, {&(0x7f0000001400)=""/54, 0x36}], 0x4, &(0x7f0000002580)=""/128, 0x80}, 0x22}, {{&(0x7f0000002600)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002680)=""/210, 0xd2}, {&(0x7f0000002780)=""/197, 0xc5}, {&(0x7f0000002880)=""/163, 0xa3}, {&(0x7f0000002940)=""/97, 0x61}, {&(0x7f00000029c0)=""/131, 0x83}], 0x5, &(0x7f0000002b00)=""/190, 0xbe}, 0xef}, {{&(0x7f0000002bc0)=@l2, 0x80, &(0x7f0000003100)=[{&(0x7f0000002c40)=""/138, 0x8a}, {&(0x7f0000002d80)=""/115, 0x73}, {&(0x7f0000002e00)=""/152, 0x98}, {&(0x7f0000002ec0)=""/179, 0xb3}, {&(0x7f0000002f80)=""/29, 0x1d}, {&(0x7f0000002fc0)=""/80, 0x50}, {&(0x7f0000003040)=""/174, 0xae}], 0x7, &(0x7f0000003180)=""/86, 0x56}}, {{&(0x7f0000003200)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000005680)=[{&(0x7f0000003280)=""/81, 0x51}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/135, 0x87}, {&(0x7f00000043c0)=""/54, 0x36}, {&(0x7f0000004400)=""/108, 0x6c}, {&(0x7f0000004480)=""/247, 0xf7}, {&(0x7f0000004580)=""/114, 0x72}, {&(0x7f0000004600)=""/98, 0x62}, {&(0x7f0000004680)=""/4096, 0x1000}], 0x9, &(0x7f0000005740)=""/166, 0xa6}, 0x9}, {{&(0x7f0000005800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005880)=""/88, 0x58}, {&(0x7f0000005900)=""/62, 0x3e}, {&(0x7f0000005940)=""/125, 0x7d}, {&(0x7f00000059c0)=""/80, 0x50}], 0x4, &(0x7f0000005a80)=""/87, 0x57}, 0x3}], 0xa, 0x10020, &(0x7f0000005d80)={0x0, 0x3938700}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x7, 0x24, 0x1}, 0x48) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) sendto$inet6(r5, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) recvfrom(r5, &(0x7f0000000200)=""/62, 0x3e, 0x99bcb88de02507d2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/191, 0xbf}], 0x1}, 0xfffffffa}], 0x1, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, 0x0) 26.565347507s ago: executing program 0 (id=2191): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000bd591dd4dca30d7ca3fe080022f4ff4234af50929306ff4cb46047df1d0d7da3783e1f83cdf571974caed2ee27e815931e59ede90d4b5016293a07453ed19337277965bf1e3aa71db2f15f887abdcb07d4e580334ef8ec4803", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r2, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002c5a9ad30000000000020000e6ff0000100000000100"], 0x31) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0) 26.506323885s ago: executing program 0 (id=2192): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) clock_gettime(0x7, &(0x7f0000000340)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000378100", 0x0, 0x40fe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 26.450089213s ago: executing program 3 (id=2193): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, &(0x7f0000002280)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x4000085}, 0x24044884) (async, rerun: 32) r2 = socket(0x28, 0x5, 0x0) (rerun: 32) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) write$tun(r7, &(0x7f0000000700)={@void, @void, @ipv6=@udp={0x9, 0x6, "6a1ec2", 0x1264, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x33, 0x6, 0x1, 0x1, 0x0, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x4, 0x7, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x18, {0x0, 0x4, 0xcb, 0x3, [0x7, 0x7]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, @fragment={0x2, 0x0, 0xe, 0x1, 0x0, 0x2, 0x67}, @dstopts={0x33, 0x202, '\x00', [@generic={0x10, 0x1000, "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"}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x5}, @pad1]}, @hopopts={0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x4f}, @jumbo={0xc2, 0x4, 0xc6f4}]}, @hopopts={0x43, 0x16, '\x00', [@enc_lim={0x4, 0x1, 0x6a}, @ra, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x5d}, @hao={0xc9, 0x10, @empty}, @generic={0x7, 0x82, "56505831a85b92724db1ca001d248ad462de7d8ba6732593ecd467e9d318319027e4550b2e37a0328f91043c6a049d7ce3ccd719586bc1d806ca6a0ce3144bb7daf42a571b1039e19e7a22187fe748626c19c58012e663532af7851fa4179203e50048438eb5b55c4a041abbb4148e84e494abe0d1a01c362da4c8282d9962fbbe18"}]}, @dstopts={0x1d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0xcc8}]}, @dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x4, [0x2]}}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x1, 0x0, 0x5a, [@ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}], {0x4e20, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "07892a040f705e06b00836922d30a4b86ca059fc95fb377a3dfbd1ca6ae06623", "019017ccb47f3b2d35ab1e17f021c4d0", {"f22991944aeddd5718b7f7cb1a5c1c07", "f4071f10ba947b51b427acb47319994f"}}}}}}, 0x128c) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) 26.16498795s ago: executing program 3 (id=2195): ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x6, 0x5, 0xe, 0x7f, 0xfffffffe}) (async) shutdown(r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x200000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4885) (async) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f00000002c0)={0x6a4, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0x324, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x719}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'U\'.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&%^\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x20, 0x5, "98030d1af35bfb99883deb06e5d9aa0a9ea1b622f96ac7a5772b73f5"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/$-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\x9b*)\']]\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+.[/-)&(\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.,\'[(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')/^!*\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.{%\\#*@/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',)[^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "f860a97152265609ad374729e1d3910f966b821b2a870bc3575fae74b098bbcd33926d1a4cc5feae0b48ae81c0c26dcea45f1957704386caf2a0a4ab8ee235ed629a0efb52c383d9459d8c020862f7c226c0d32721debf80a8ba203bcc6ab86a23f24714e516c310cdda9e84fa6d45a725d4db3e0a42"}]}, @ETHTOOL_A_WOL_MODES={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "4474adb8fd88ada2a1ec81525db9e0d47b88e3635c795f6b1ed0412feeb1475d4654a79f62ebdc204099ce0e295313b3b0d6c88f464a0118df68310c12990bf575d5f9f38720a26b650de911e0dd7b16eb98fbe8f7137f6a4ab69e277cd58d147f951cce33913e336ed788103a5adb1f54288bb2ff1c08a2a6d2775afb7937708e2acf6bd4a291933578d67fc2cea75e65b68c5c9793108076685ebfcf0c389f214ae2eaa313d13fabd7033cdd179426d24b2d0317d35143a28c2ac77b95f08aa1afa1e9b0c3f8252c393756bd91a76ecf6c43a56d77270548e651957888db91a14900c5bff10792275c9b1fc389f7682ab9979dcfe5"}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ']\x0f!&:%\x82$@/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ',([*,[%]-%\xd5/\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdf2f11e0}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '^}^:&*,%\\:\\\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x61, 0x5, "b01dba8139b3691aa0956a3e74ea40bfec663c49e1999dc52b7bfd85f5d453cdb7c05c1ed273647a0688c6cd379e2e84d1b9aebf039ad3cf0ed4886787d85d9853d95bc8fa911c11523b09318aa0705d9b15d204d4b1ba7e5d1f49c580"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_MODES={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "91ace4df6faa2a1014c9b3a4ef230dcb42e26892efbda49e57fe0cf79bc6ac3197315f274091f6a8189ca2c3f43d43d7ea4b6fb68ed603481c30edc293e38e84c2a90712edd465405d958e7a031fe62e23923485bb01d60e88bd42ff17e845f18db25efbfcdf7e7f41d04d5dd23e220e1f3411e52263683f07bc31d8987148da8554789047c764d632691731c439fa255988506cc64e303330b8c11777c649c45a9cf14a27cb3ffa3542e75219cc8942ab727db4084f4555e6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x4c040}, 0x40004) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) pread64(r0, &(0x7f0000000b40)=""/167, 0xa7, 0x1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', r5, 0x4, 0x3, 0x9, 0x3, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x1, 0x80, 0x3, 0x1ff}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e00)={'syztnl2\x00', &(0x7f0000000d00)={'gre0\x00', 0x0, 0x80, 0x1, 0x1, 0x92, {{0x38, 0x4, 0x0, 0x31, 0xe0, 0x65, 0x0, 0x80, 0x2f, 0x0, @empty, @remote, {[@timestamp={0x44, 0xc, 0xd6, 0x0, 0x9, [0xf77b, 0x2]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0xb, "9b183e16f77e66f8ba"}, {0x2, 0x3, 'a'}, {0x1, 0x11, "4537a158667f72bfae85f6c848426a"}, {0x6, 0x4, "72ba"}, {0x5, 0xb, "c5cac28ee6f42fe6d5"}, {0x6, 0xe, "50c56826a5bff36746618fef"}]}, @timestamp={0x44, 0x24, 0x63, 0x0, 0x3, [0x3, 0x2, 0x8001, 0x9, 0xc, 0x16, 0xfffffffc, 0x6]}, @end, @cipso={0x86, 0x3a, 0x0, [{0x5, 0xc, "82c32c765c8258b73aeb"}, {0x0, 0x8, "02d0923fe10a"}, {0x0, 0x3, 'y'}, {0x2, 0xe, "0627745007b7edfcecd50b0d"}, {0x2, 0xf, "7b7612c868cd9513ea6d9608ec"}]}, @ssrr={0x89, 0xf, 0x8a, [@loopback, @remote, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x76, 0x3, 0x0, [{@multicast2, 0x5}]}, @generic={0x86, 0x3, "dc"}]}}}}}) (rerun: 64) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000001000)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x144, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r9, 0x890c, &(0x7f0000001040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xbb32, @bcast, @bpq0, 0x8, [@null, @null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10000081) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f0000001240), r6) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000012c0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000013c0)={'syztnl0\x00', &(0x7f0000001340)={'erspan0\x00', r7, 0x80, 0x700, 0x6, 0xfffffffa, {{0x18, 0x4, 0x0, 0xa, 0x60, 0x66, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, {[@noop, @rr={0x7, 0x7, 0x61, [@local]}, @timestamp_prespec={0x44, 0x44, 0x9, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x1}, {@loopback}, {@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x6}, {@multicast1, 0x1}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001400)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001480)={'pim6reg\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000001bc0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f00000014c0)={0x690, r12, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x5, 0xc5, 0x7}, {0xfff, 0xfd, 0xf, 0x8}, {0xfff7, 0x9d, 0xf, 0x5}, {0x10, 0x6, 0x3}, {0xc, 0x42, 0x9, 0x7fff}, {0x6, 0xfe, 0x4, 0x7}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r15}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xac}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe524}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xc1de, 0x15, 0x4, 0xfc}, {0x7, 0x1, 0x4, 0x6e40777f}, {0x7, 0x10, 0x6, 0x7}, {0x311, 0xa, 0x81, 0x2}, {0x7f, 0x40, 0x6, 0x10}]}}}]}}, {{0x8, 0x1, r18}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6a}}, {0x8, 0x6, r8}}}]}}]}, 0x690}, 0x1, 0x0, 0x0, 0x800}, 0x800) 26.066080234s ago: executing program 1 (id=2196): r0 = socket$inet(0xa, 0x801, 0x84) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000100)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r1, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001500)=""/4110, &(0x7f0000000000)=0x100e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) 25.849236876s ago: executing program 3 (id=2197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "000000000500", "000000072d85a4609e9104a000", 'x\x00\a\x00', "bc7e7f5df6aec397"}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800683a00fc010000000000000000000000000000fe8000000000000000000000000000aa002b00fc930000000000000000000000000000fc0000000000000000000000000000000004040201000040fc02000000000034e100000000000000fe88000000000000000000760000000188000000000000000401090000000000a6d08dafd5aa545d233a2f447dbf9fef6483c544f1c42f465ee51534292741eb76062e4724f088dffff7592e9c5df0c5e4061eeba03e16de62f68bedcca710b58ea1663e3318d0c602fc8d39074e9400"/237], 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) getsockname$packet(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @remote, @private}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000500)={&(0x7f0000000300), 0xee, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbff}, 0xfffffffffffffd87}, 0x1, 0x0, 0x0, 0x24000011}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009fb5b582dd0ff357300daf0003fd3ab8a225f2e5f5f5fd121"], &(0x7f00000001c0)=""/212, 0x2d, 0xd4, 0x1, 0xa12, 0x10000, @value=r3}, 0x28) 25.760459421s ago: executing program 1 (id=2198): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@setlink={0x7c, 0x13, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4400, 0x40800}, [@IFLA_TXQLEN={0x8, 0xd, 0x800}, @IFLA_IFALIASn={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x36bb}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_MAP={0x24, 0xe, {0x5, 0x100000000, 0x7fffffffffffffff, 0xfffa, 0x2, 0x8a}}]}, 0x7c}, 0x1, 0xba01}, 0x11) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000040)={0x2, 0x7, 0x3, 0x49}) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000400)=0xc) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0xfcf, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f00000002c0)=r7}, 0x20) 25.50709438s ago: executing program 1 (id=2199): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) syz_emit_ethernet(0x5a, &(0x7f0000000840)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @local, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x8, 0x2, 0x6, 0x4, 0x4}]}}}}}}}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x5}, 0x1c) 25.456956253s ago: executing program 3 (id=2200): r0 = socket(0x25, 0x5, 0x200) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) r12 = socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0xffff, 0x1bf66fb9, 0x7, 0x4f50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b9, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x7, 0x1000, 0x4, 0x10001, 0x2, 0x7, 0x0, 0x7ffd, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x11575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0xff91, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0x6, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0x8000a9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x1004, 0x4, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x7, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x8, 0x3, 0x4, 0x3, {0x4, 0x2, 0x7, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xff7, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x76, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x400000, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0xfffffff8, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0xc9f, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x4010000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x400009de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffff8, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x0, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x20036800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x6, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x6, 0x2, 0x402, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0xe, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0xfffffffd, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff17}, 0x90) (async, rerun: 64) r15 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet6(r15, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='pim6reg\x00', 0x10) 25.260373413s ago: executing program 1 (id=2201): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x84, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x8e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="7accdef6aa5cab4c0778bc3a54d11d6046c0c4d840f0eeded1339149941c8945cfdf1dd32733d3ca6aca36737902a5f1ff22f304bdc184a92da9deccd9ade10bffb202e5b0769e2978e15afed903ccbee63aa20280bacc1c28839e41e8421b72d80f5ee86cf928430bdd7ecaf44093310f248606a24e61433a1d01faf6aca66e1455f1154c", @ANYRES64, @ANYRES8=r2], 0x50}}, 0x80) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a323fd92c96fa5b8d312e37c07818f2001c000009bf75230f14000380080002400000000008400140000000001400007f110000000000000000"], 0x68}}, 0x0) (async, rerun: 64) r6 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) 25.033686872s ago: executing program 1 (id=2204): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000300)=""/116, 0x74}], 0x4, &(0x7f0000000600)=""/136, 0x88}, 0x9}, {{&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001b80)=""/70, 0x46}], 0x1, &(0x7f00000007c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000017c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/47, 0x2f}, {&(0x7f0000001880)=""/115, 0x73}, {&(0x7f0000001900)=""/160, 0xa0}], 0x3, &(0x7f0000001a00)=""/152, 0x98}, 0x450}], 0x3, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000300)=""/116, 0x74}], 0x4, &(0x7f0000000600)=""/136, 0x88}, 0x9}, {{&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001b80)=""/70, 0x46}], 0x1, &(0x7f00000007c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000017c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/47, 0x2f}, {&(0x7f0000001880)=""/115, 0x73}, {&(0x7f0000001900)=""/160, 0xa0}], 0x3, &(0x7f0000001a00)=""/152, 0x98}, 0x450}], 0x3, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000380)={0xa0000000}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="414601c0"], 0x4) (async) write$nci(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="414601c0"], 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="220200000000000000f4d54f846eef00044506", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r14}, 0x38) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r15, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r15, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r15, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r15, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 24.781303478s ago: executing program 0 (id=2206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2d, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20, 0x11, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 24.740873853s ago: executing program 0 (id=2207): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x58, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0xa, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2]}]}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f0000000340), 0x4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fbdbdf250800000008000c000100000008000800dbf3d17308000800ffffffff08000800e0000002140006000000000000000000000000000000000008000c00010000000b0001005c3a5b263a2f0000080008007f000001"], 0x64}}, 0x4000000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x400}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r10 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r10, 0xb101, 0x0) 24.638374671s ago: executing program 3 (id=2208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "008e948fe8a078aed61eafdf6c3ac48365183721a85750f1"}}]}, 0x150}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) accept$alg(r4, 0x0, 0x0) close(r3) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) 24.5644613s ago: executing program 1 (id=2209): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0xffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async) close(r2) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x50, 0x24, 0x300, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x20, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0xf, 0x18, 0xb}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) 16.253432593s ago: executing program 4 (id=2289): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1f, &(0x7f0000000240)=@raw=[@ldst={0x0, 0x1, 0x2, 0x5, 0x3, 0x18, 0x8}, @cb_func={0x18, 0xa}, @ldst={0x2, 0x1, 0x4, 0x1, 0x6, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000140)='GPL\x00', 0x20000001, 0x35, &(0x7f00000001c0)=""/53, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x4, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x4}, {0x4, 0x2, 0x1, 0x5}, {0x2, 0x3, 0x1, 0x6}, {0x0, 0x4, 0xa}, {0x4, 0x3, 0x1, 0xa}, {0x2, 0x5, 0xc, 0x4}]}, 0x94) 16.16898779s ago: executing program 4 (id=2290): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0xfe, 0x7, 0x10000, 0x14, @local, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1, 0x7, 0x1, 0x5}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="180200000c0010000000000000000000850000004100000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x12, 0xf00, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x21, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000000000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="000000000a000200aaaaaaaaaa0c00"], 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000000000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="000000000a000200aaaaaaaaaa0c00"], 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r10, 0x5, 0xfffffffd, 0x1fffe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x5a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x808}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac06002808000a00", @ANYRES32=r12, @ANYBLOB], 0x54}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac06002808000a00", @ANYRES32=r12, @ANYBLOB], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) 16.006373958s ago: executing program 4 (id=2291): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="690c3593", 0x4}], 0x1}}], 0x2, 0x4404c880) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000020000000000000900000000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 15.909421448s ago: executing program 4 (id=2292): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket(0x1e, 0x4, 0x0) connect$llc(r1, &(0x7f0000000440)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0xad8d, 0x7fffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x408}, 0x1, 0x0, 0x0, 0xc8c0}, 0x44810) listen(r2, 0x7) close(r2) 15.908969937s ago: executing program 4 (id=2293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x35, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x0, 0x28, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff2}, {0x8, 0xd}, {0xfff1, 0xf}}, [@TCA_RATE={0x0, 0x5, {0x1, 0xb4}}, @TCA_RATE={0x0, 0x5, {0xf7, 0x4}}, @TCA_RATE={0x0, 0x5, {0x80, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2006c041}, 0x20044810) (async) r6 = socket(0x84a19b3de34aa46d, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0xe6, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000020000c4000007008209", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000002e000030000000000000000000ffe000008"], 0x38}}, 0x2000000) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, r10, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r11, 0x4) (async) close(r11) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.808629865s ago: executing program 4 (id=2294): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1, 0x1, 0x10000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r7], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="610306090201079f9e9623cb523ae92ef0e57e150e35b7d020ed9abd6680b24dacdfa74fe866aab3ce986657fdf290e4d9ce665e95e1d540445d40a18c97ffa6684398c2baff8d0537fb9e88caf27978b7d2d84d5b8b1543b4369b563cc64aa9ad7fb2cae6e129fb1cd87741c8c6feee546c984719243a262a18656f4f9578abb122c340794d829a5d312ff25804d288eb0a06901517f94206702501ffca5d56d431c199fd23ff02"], 0xa8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd70000000000047000000080001003c00000008000300", @ANYRES32=r10, @ANYBLOB="1400040070696d367265673000000000000000000800050007000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12.788425175s ago: executing program 32 (id=2170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000e00)=""/210, 0xd2}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f0000000b40)=""/38, 0x26}, {&(0x7f0000000b80)=""/64, 0x40}, {&(0x7f0000000bc0)=""/161, 0xa1}, {&(0x7f0000000c80)=""/206, 0xce}], 0x7, &(0x7f0000000580)=""/227, 0xe3}, 0x100) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r3) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r7, &(0x7f00000000c0)={0x27, r6, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r5) (async) close(r7) (async) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r4, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}}, 0x44840) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22410081}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xffffffff}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x891}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xd4}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4c884) 8.60912761s ago: executing program 33 (id=2207): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x58, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0xa, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2]}]}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f0000000340), 0x4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fbdbdf250800000008000c000100000008000800dbf3d17308000800ffffffff08000800e0000002140006000000000000000000000000000000000008000c00010000000b0001005c3a5b263a2f0000080008007f000001"], 0x64}}, 0x4000000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x400}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r10 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r10, 0xb101, 0x0) 8.374757834s ago: executing program 34 (id=2209): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0xffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async) close(r2) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x50, 0x24, 0x300, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x20, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0xf, 0x18, 0xb}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) 8.032180564s ago: executing program 35 (id=2208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "008e948fe8a078aed61eafdf6c3ac48365183721a85750f1"}}]}, 0x150}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) accept$alg(r4, 0x0, 0x0) close(r3) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) 0s ago: executing program 36 (id=2294): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1, 0x1, 0x10000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r7], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="610306090201079f9e9623cb523ae92ef0e57e150e35b7d020ed9abd6680b24dacdfa74fe866aab3ce986657fdf290e4d9ce665e95e1d540445d40a18c97ffa6684398c2baff8d0537fb9e88caf27978b7d2d84d5b8b1543b4369b563cc64aa9ad7fb2cae6e129fb1cd87741c8c6feee546c984719243a262a18656f4f9578abb122c340794d829a5d312ff25804d288eb0a06901517f94206702501ffca5d56d431c199fd23ff02"], 0xa8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd70000000000047000000080001003c00000008000300", @ANYRES32=r10, @ANYBLOB="1400040070696d367265673000000000000000000800050007000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 57][ T6414] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 106.151786][ T6425] vlan2: entered promiscuous mode [ 106.168203][ T6425] bridge0: entered promiscuous mode [ 106.433566][ T5149] Bluetooth: hci4: command tx timeout [ 107.226808][ T6471] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 107.341011][ T6476] __nla_validate_parse: 6 callbacks suppressed [ 107.341032][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.155'. [ 107.353303][ T6475] netlink: 'syz.1.154': attribute type 11 has an invalid length. [ 107.400550][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.156'. [ 107.423085][ T6475] netlink: 64 bytes leftover after parsing attributes in process `syz.1.154'. [ 107.714436][ T6485] syzkaller0: entered promiscuous mode [ 107.720078][ T6485] syzkaller0: entered allmulticast mode [ 107.870919][ T6483] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 107.904726][ T6483] bond2 (unregistering): Released all slaves [ 107.994854][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 108.045440][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 108.280056][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.316100][ T6513] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 108.334934][ T6513] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 108.739823][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.748451][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.900896][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 108.923684][ T6522] bridge_slave_0: left allmulticast mode [ 108.929504][ T6522] bridge_slave_0: left promiscuous mode [ 108.936084][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.953363][ T6522] bridge_slave_1: left allmulticast mode [ 108.959352][ T6522] bridge_slave_1: left promiscuous mode [ 108.966264][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.986449][ T6522] bond0: (slave bond_slave_0): Releasing backup interface [ 109.000664][ T6522] bond0: (slave bond_slave_1): Releasing backup interface [ 109.021478][ T6522] team0: Port device team_slave_0 removed [ 109.035911][ T6522] team0: Port device team_slave_1 removed [ 109.046568][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.057841][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.070186][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.081289][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.097861][ T6522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.332331][ T6550] warning: `syz.2.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.877742][ T6573] team_slave_0: entered promiscuous mode [ 109.883790][ T6573] team_slave_1: entered promiscuous mode [ 109.932519][ T6573] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 109.950827][ T6583] netlink: 'syz.4.189': attribute type 2 has an invalid length. [ 109.973996][ T6573] team0: Device macvtap1 is already an upper device of the team interface [ 109.976866][ T6583] netlink: 244 bytes leftover after parsing attributes in process `syz.4.189'. [ 110.001127][ T6573] team_slave_0: left promiscuous mode [ 110.006742][ T6573] team_slave_1: left promiscuous mode [ 110.075522][ T6575] netlink: 'syz.3.186': attribute type 12 has an invalid length. [ 110.084232][ T6575] netlink: 'syz.3.186': attribute type 29 has an invalid length. [ 110.092295][ T6575] netlink: 148 bytes leftover after parsing attributes in process `syz.3.186'. [ 110.101693][ T6575] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 110.111226][ T6575] netlink: 'syz.3.186': attribute type 2 has an invalid length. [ 110.120044][ T6575] netlink: 3 bytes leftover after parsing attributes in process `syz.3.186'. [ 110.508805][ T6602] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 110.547349][ T6602] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.639024][ T6612] netlink: 'syz.3.198': attribute type 32 has an invalid length. [ 110.881898][ T6612] bond1: Setting coupled_control to off (0) [ 110.903944][ T6613] tipc: Enabling of bearer rejected, failed to enable media [ 110.951342][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.960272][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.681831][ T6663] Bluetooth: MGMT ver 1.23 [ 112.090537][ T6685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.422490][ T6738] __nla_validate_parse: 6 callbacks suppressed [ 113.422509][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 113.483848][ T6738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.496672][ T6745] netlink: 108 bytes leftover after parsing attributes in process `syz.0.224'. [ 113.923061][ T30] audit: type=1800 audit(1764652729.661:2): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.230" name="memory.events" dev="tmpfs" ino=256 res=0 errno=0 [ 114.471647][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 114.542571][ T6788] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 114.810678][ T6803] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.823726][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.242'. [ 115.489149][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 115.696026][ T6848] netlink: 'syz.0.254': attribute type 3 has an invalid length. [ 115.708988][ T6845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.074156][ T6858] syzkaller0: entered promiscuous mode [ 116.079893][ T6858] syzkaller0: entered allmulticast mode [ 116.581535][ T6877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'. [ 117.295075][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 117.364654][ T6902] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.273'. [ 117.495558][ T6906] netlink: 44 bytes leftover after parsing attributes in process `syz.4.276'. [ 117.542551][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 117.576661][ T6909] bond2 (unregistering): Released all slaves [ 117.679903][ T6908] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 117.682628][ T6916] netlink: 'syz.3.278': attribute type 29 has an invalid length. [ 117.708300][ T6919] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 117.717625][ T6919] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 117.767006][ T6920] netlink: 'syz.3.278': attribute type 29 has an invalid length. [ 117.973683][ T6924] bond1 (unregistering): Released all slaves [ 118.477986][ T6947] __nla_validate_parse: 4 callbacks suppressed [ 118.478006][ T6947] netlink: 68 bytes leftover after parsing attributes in process `syz.4.287'. [ 118.619723][ T6951] sctp: [Deprecated]: syz.4.289 (pid 6951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.619723][ T6951] Use struct sctp_sack_info instead [ 119.024916][ T6965] tipc: Started in network mode [ 119.041034][ T6965] tipc: Node identity 2eecc36fdd06, cluster identity 4711 [ 119.073724][ T6965] tipc: Enabled bearer , priority 0 [ 119.129996][ T6965] tipc: Disabling bearer [ 119.407352][ T6982] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 119.699911][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.2.299'. [ 119.830753][ T6984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.844306][ T6984] bond1: (slave bond2): making interface the new active one [ 119.852596][ T6984] bond1: (slave bond2): Enslaving as an active interface with an up link [ 119.906500][ T7005] Bluetooth: MGMT ver 1.23 [ 121.576486][ T7012] tipc: Started in network mode [ 121.582076][ T7012] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 121.595407][ T7012] tipc: Enabled bearer , priority 10 [ 121.784917][ T7032] x_tables: duplicate underflow at hook 1 [ 121.854247][ T7037] xt_l2tp: wrong L2TP version: 0 [ 121.857827][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 121.890543][ T7035] block nbd0: Unsupported socket: should be TCP or UNIX. [ 121.979545][ T7032] tipc: Enabling of bearer rejected, failed to enable media [ 122.341329][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 122.475737][ T7063] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 122.552788][ T7070] openvswitch: netlink: Key type 31 is not supported [ 122.562765][ T7063] bond1 (unregistering): Released all slaves [ 122.630248][ T7067] syzkaller0: entered promiscuous mode [ 122.636143][ T7067] syzkaller0: entered allmulticast mode [ 122.647038][ T7070] netlink: 'syz.2.315': attribute type 29 has an invalid length. [ 122.684412][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 122.698147][ T10] tipc: Node number set to 4269801492 [ 122.927929][ T7078] syzkaller1: entered promiscuous mode [ 122.937665][ T7078] syzkaller1: entered allmulticast mode [ 122.957710][ T7079] syzkaller0: entered promiscuous mode [ 122.963490][ T7079] syzkaller0: entered allmulticast mode [ 123.065856][ T7083] netlink: 100 bytes leftover after parsing attributes in process `syz.2.321'. [ 123.152206][ T7084] netlink: 'syz.2.321': attribute type 13 has an invalid length. [ 123.183878][ T7084] netlink: 'syz.2.321': attribute type 17 has an invalid length. [ 123.525357][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.547265][ T7084] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.554858][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 123.581577][ T7084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.698193][ T7096] syzkaller0: entered promiscuous mode [ 123.705966][ T7096] syzkaller0: entered allmulticast mode [ 123.716422][ T7089] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 124.129753][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 124.460310][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.332'. [ 124.501799][ T7126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.332'. [ 124.666153][ T7137] netlink: 'syz.3.335': attribute type 2 has an invalid length. [ 124.701173][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 124.762382][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 124.965587][ T7146] macvlan2: entered promiscuous mode [ 125.031564][ T7149] macvlan3: entered promiscuous mode [ 125.302717][ T7164] netlink: 'syz.4.343': attribute type 2 has an invalid length. [ 125.434265][ T7164] 9: entered promiscuous mode [ 125.560942][ T7178] netlink: 'syz.2.347': attribute type 19 has an invalid length. [ 125.609976][ T7183] netlink: 68 bytes leftover after parsing attributes in process `syz.1.346'. [ 125.645134][ T7182] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 125.756204][ T7188] ÿ: renamed from bond_slave_1 (while UP) [ 126.926359][ T7224] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 126.959958][ T7221] bond3: invalid ARP target 0.0.0.0 specified for addition [ 126.980819][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 126.997416][ T7221] bond3: option arp_ip_target: invalid value (0) [ 127.041815][ T7221] bond3 (unregistering): Released all slaves [ 127.626403][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 127.826169][ T7268] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 127.859516][ T7268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.878670][ T5952] IPVS: starting estimator thread 0... [ 127.986833][ T7278] IPVS: using max 26 ests per chain, 62400 per kthread [ 128.098802][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 128.411506][ T7297] trusted_key: syz.2.378 sent an empty control message without MSG_MORE. [ 128.626951][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 128.809126][ T7304] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 128.847016][ T7304] bond2 (unregistering): Released all slaves [ 129.409730][ T7340] netlink: 96 bytes leftover after parsing attributes in process `syz.0.390'. [ 129.642908][ T7346] netlink: 'syz.2.391': attribute type 5 has an invalid length. [ 129.676141][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 129.740926][ T7357] netlink: 'syz.4.394': attribute type 5 has an invalid length. [ 129.748815][ T7357] netlink: 140 bytes leftover after parsing attributes in process `syz.4.394'. [ 129.827440][ T7365] netlink: 15 bytes leftover after parsing attributes in process `syz.3.396'. [ 130.048697][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 130.269364][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'. [ 130.341780][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 130.387402][ T7388] netlink: 512 bytes leftover after parsing attributes in process `syz.3.403'. [ 130.539331][ T7406] netlink: 128 bytes leftover after parsing attributes in process `syz.4.407'. [ 130.885911][ T7413] openvswitch: netlink: Flow key attribute not present in set flow. [ 131.292410][ T10] IPVS: starting estimator thread 0... [ 131.393397][ T7446] IPVS: using max 26 ests per chain, 62400 per kthread [ 131.557791][ T7465] syzkaller1: entered promiscuous mode [ 131.563936][ T7465] syzkaller1: entered allmulticast mode [ 131.575385][ T7465] syz_tun: entered allmulticast mode [ 131.589516][ T7464] syz_tun: left allmulticast mode [ 133.362093][ T7533] bond2 (unregistering): Released all slaves [ 133.679446][ T7548] __nla_validate_parse: 6 callbacks suppressed [ 133.679467][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 133.782215][ T7552] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 133.846894][ T7548] hsr_slave_0 (unregistering): left promiscuous mode [ 133.868980][ T7558] netlink: 'syz.0.445': attribute type 3 has an invalid length. [ 133.965897][ T7560] netlink: 'syz.0.445': attribute type 3 has an invalid length. [ 134.578373][ T7598] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.608853][ T7598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.454'. [ 134.861191][ T7610] netlink: 'syz.2.458': attribute type 2 has an invalid length. [ 135.048942][ T7616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.058815][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 135.082535][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 135.453309][ T7627] syzkaller0: entered promiscuous mode [ 135.480300][ T7627] syzkaller0: entered allmulticast mode [ 135.645521][ T7634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.466'. [ 135.732461][ T7634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.466'. [ 135.959686][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 136.215249][ T7670] netlink: 'syz.4.476': attribute type 30 has an invalid length. [ 136.320682][ T7680] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20001 [ 136.356198][ T7670] bond2: option arp_missed_max: invalid value (0) [ 136.362710][ T7670] bond2: option arp_missed_max: allowed values 1 - 255 [ 136.401246][ T7670] bond2 (unregistering): Released all slaves [ 136.511241][ T7694] netlink: 'syz.2.482': attribute type 42 has an invalid length. [ 136.539546][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 136.574897][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 136.664591][ T7697] netlink: 32 bytes leftover after parsing attributes in process `syz.1.483'. [ 136.720920][ T7702] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 136.741111][ T7702] bond2 (unregistering): Released all slaves [ 136.809395][ T7709] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 136.820307][ T7709] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 136.840968][ T7709] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 136.892415][ T7705] bond2: Removing last arp target with arp_interval on [ 136.904210][ T7712] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 137.398331][ T7732] netlink: 'syz.0.496': attribute type 13 has an invalid length. [ 137.415913][ T7732] netlink: 'syz.0.496': attribute type 58 has an invalid length. [ 137.522912][ T7739] bond4: entered promiscuous mode [ 137.528608][ T7739] bond4: entered allmulticast mode [ 137.534820][ T7739] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.998775][ T7763] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 138.205712][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.216553][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.911013][ T7815] bond2: Removing last arp target with arp_interval on [ 139.016095][ T7825] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 139.063172][ T7825] xt_hashlimit: size too large, truncated to 1048576 [ 139.127762][ T7827] __nla_validate_parse: 9 callbacks suppressed [ 139.127783][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 139.334147][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.845634][ T7856] Cannot find add_set index 65532 as target [ 140.008064][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.023573][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'. [ 140.025822][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.541'. [ 140.226009][ T7869] syzkaller0: entered promiscuous mode [ 140.259346][ T7869] syzkaller0: entered allmulticast mode [ 140.273323][ T7874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'. [ 140.309419][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 140.337424][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 140.355735][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.386443][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'. [ 140.433377][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.468694][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 140.479017][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 140.620337][ T7889] tipc: Can't bind to reserved service type 0 [ 140.725549][ T7893] netlink: 300 bytes leftover after parsing attributes in process `syz.4.549'. [ 140.790505][ T7897] netlink: 'syz.3.551': attribute type 17 has an invalid length. [ 140.807607][ T7897] gretap0: entered promiscuous mode [ 140.828046][ T7897] gretap0: left promiscuous mode [ 141.141224][ T7909] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 141.171817][ T7912] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 141.186979][ T7911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.197969][ T7909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.232676][ T7912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.395259][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.708226][ T7935] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 141.765338][ T7935] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 141.882286][ T7936] raw_sendmsg: syz.3.566 forgot to set AF_INET. Fix it! [ 142.489912][ T7971] syzkaller0: entered promiscuous mode [ 142.504134][ T7971] syzkaller0: entered allmulticast mode [ 142.552115][ T7975] x_tables: unsorted underflow at hook 3 [ 142.563367][ T7975] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 143.061869][ T7996] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 143.094592][ T7996] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 143.144948][ T7996] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 143.301813][ T8006] netlink: 'syz.2.586': attribute type 2 has an invalid length. [ 144.108833][ T8052] vlan2: entered promiscuous mode [ 144.132126][ T8052] bridge0: entered promiscuous mode [ 144.513972][ T24] net_ratelimit: 587 callbacks suppressed [ 144.513993][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.571651][ T8077] __nla_validate_parse: 14 callbacks suppressed [ 144.571671][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 144.615768][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.610'. [ 144.634333][ T8075] openvswitch: netlink: Flow key attr not present in new flow. [ 144.661872][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 144.665092][ T8077] bond2: option xmit_hash_policy: invalid value (64) [ 144.680338][ T8077] bond2 (unregistering): Released all slaves [ 144.697373][ T8088] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 144.708385][ T8088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.115752][ T8109] x_tables: unsorted underflow at hook 1 [ 145.309660][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 145.321295][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 145.553557][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.647617][ T8144] sctp: [Deprecated]: syz.1.625 (pid 8144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.647617][ T8144] Use struct sctp_sack_info instead [ 145.685786][ T8145] syzkaller0: entered promiscuous mode [ 145.691482][ T8145] syzkaller0: entered allmulticast mode [ 145.753692][ T8145] tipc: Started in network mode [ 145.758819][ T8145] tipc: Node identity 4edded07985c, cluster identity 4711 [ 145.793542][ T8145] tipc: Enabled bearer , priority 0 [ 145.842027][ T8142] tipc: Resetting bearer [ 145.894603][ T8142] tipc: Disabling bearer [ 145.929742][ T8158] netlink: 'syz.1.629': attribute type 2 has an invalid length. [ 146.018342][ T8158] 9: entered promiscuous mode [ 146.113962][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.632'. [ 146.191596][ T8169] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 146.328575][ T8176] netlink: 'syz.2.635': attribute type 63 has an invalid length. [ 146.334607][ T8175] bond3: (slave gretap1): making interface the new active one [ 146.345401][ T8175] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 146.514596][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.587967][ T8190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.603304][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.837619][ T8204] bond5: (slave team0): Device is not bonding slave [ 146.846400][ T8204] bond5: option active_slave: invalid value (team0) [ 146.906950][ T8204] bond5 (unregistering): Released all slaves [ 147.209595][ T8241] netlink: 52 bytes leftover after parsing attributes in process `syz.0.650'. [ 147.227683][ T8241] netlink: 76 bytes leftover after parsing attributes in process `syz.0.650'. [ 147.252556][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.259861][ T8241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.267523][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.274964][ T8241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.291081][ T8241] netlink: 52 bytes leftover after parsing attributes in process `syz.0.650'. [ 147.310997][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.318484][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.368637][ T8247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.377249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.479172][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.655'. [ 147.840317][ T8268] gretap2: entered promiscuous mode [ 147.859533][ T8268] gretap2: entered allmulticast mode [ 148.290605][ T8285] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 148.463513][ T8291] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 148.638953][ T8291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.723089][ T8295] bond4: (slave veth5): Enslaving as an active interface with a down link [ 148.784448][ T8305] Bluetooth: MGMT ver 1.23 [ 148.990220][ T8313] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20000 [ 149.003500][ T5833] IPVS: starting estimator thread 0... [ 149.103117][ T8314] IPVS: using max 28 ests per chain, 67200 per kthread [ 149.359319][ T8325] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 149.389556][ T8325] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 149.574369][ T8332] netlink: 'syz.3.680': attribute type 11 has an invalid length. [ 149.574449][ T5924] net_ratelimit: 4 callbacks suppressed [ 149.574465][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.730197][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.859948][ T8346] __nla_validate_parse: 10 callbacks suppressed [ 149.859968][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 149.905788][ T8351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.914328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.952171][ T8351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.960734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.990602][ T8351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.999810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.010213][ T8351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.018647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.098158][ T8356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.686'. [ 150.729756][ T8378] netlink: 'syz.4.690': attribute type 42 has an invalid length. [ 150.738708][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.690'. [ 150.923206][ T8385] IPv6: Can't replace route, no match found [ 151.343238][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 151.356661][ T8412] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 151.368838][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 151.378380][ T8412] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.702'. [ 151.464869][ T8412] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 151.472064][ T8412] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 151.576127][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 151.591765][ T8423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.692090][ T8424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.707'. [ 151.842761][ T8438] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 151.843668][ T8423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.072596][ T8459] netlink: 'syz.1.715': attribute type 2 has an invalid length. [ 152.083590][ T8459] netlink: 244 bytes leftover after parsing attributes in process `syz.1.715'. [ 152.207134][ T8450] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.256749][ T8450] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 152.325524][ T8450] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 152.513592][ T8453] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.529845][ T8453] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 152.799524][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 152.855351][ T8497] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 152.962241][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.009784][ T8494] bond0: (slave rose0): Enslaving as an active interface with an up link [ 153.202371][ T8514] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 153.234980][ T8509] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 153.279244][ T8519] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 153.330058][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.419540][ T8509] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.461022][ T8519] batadv0: entered promiscuous mode [ 153.475296][ T8519] batadv0: entered allmulticast mode [ 153.488168][ T8509] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 153.527460][ T8519] bond0: (slave batadv0): Releasing backup interface [ 153.550504][ T8535] x_tables: duplicate underflow at hook 3 [ 153.582220][ T8519] bridge0: port 1(batadv0) entered blocking state [ 153.591544][ T8519] bridge0: port 1(batadv0) entered disabled state [ 153.604223][ T8519] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 153.742282][ T8509] batadv0: left allmulticast mode [ 153.747995][ T8509] batadv0: left promiscuous mode [ 153.753405][ T8509] bridge0: port 1(batadv0) entered disabled state [ 153.772486][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.804572][ T8509] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.824760][ T8509] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 153.834634][ T8519] batadv0: entered promiscuous mode [ 153.839989][ T8519] batadv0: entered allmulticast mode [ 153.847616][ T8519] bond0: (slave batadv0): Releasing backup interface [ 153.857696][ T8519] bridge0: port 1(batadv0) entered blocking state [ 153.865051][ T8519] bridge0: port 1(batadv0) entered disabled state [ 153.878280][ T8519] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 153.904605][ T8509] batadv0: left allmulticast mode [ 153.910176][ T8509] batadv0: left promiscuous mode [ 153.915776][ T8509] bridge0: port 1(batadv0) entered disabled state [ 153.940427][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.974895][ T8509] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 154.015983][ T8519] batadv0: entered promiscuous mode [ 154.022772][ T8519] batadv0: entered allmulticast mode [ 154.035191][ T8519] bond0: (slave batadv0): Releasing backup interface [ 154.046987][ T8519] bridge0: port 1(batadv0) entered blocking state [ 154.054687][ T8519] bridge0: port 1(batadv0) entered disabled state [ 154.292057][ T8567] sctp: [Deprecated]: syz.1.736 (pid 8567) Use of int in max_burst socket option deprecated. [ 154.292057][ T8567] Use struct sctp_assoc_value instead [ 154.442751][ T8572] : renamed from hsr0 (while UP) [ 154.478997][ T6710] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 154.488951][ T6710] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 154.501114][ T8577] netlink: 'syz.3.739': attribute type 21 has an invalid length. [ 154.648503][ T8577] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 154.745221][ T8577] bond6 (unregistering): Released all slaves [ 154.837206][ T5924] net_ratelimit: 2046 callbacks suppressed [ 154.837227][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.915041][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.954816][ T8606] __nla_validate_parse: 11 callbacks suppressed [ 154.954836][ T8606] netlink: 72 bytes leftover after parsing attributes in process `syz.4.744'. [ 155.240803][ T8591] syzkaller0: entered promiscuous mode [ 155.266366][ T8591] syzkaller0: entered allmulticast mode [ 155.445098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.454534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.456672][ T8626] xt_socket: unknown flags 0xe4 [ 155.955304][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.975610][ T8636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.159801][ T8644] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.183737][ T8644] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.224372][ T8644] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 156.760658][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.794122][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 156.816288][ T8663] bond0: (slave dummy0): Releasing backup interface [ 156.833459][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 156.859430][ T8663] batman_adv: batadv0: Adding interface: dummy0 [ 156.863733][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 156.903049][ T8663] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.943700][ T8663] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 156.999860][ T8676] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 157.010970][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.071047][ T8684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.130581][ T8684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.348580][ T8690] sock: sock_set_timeout: `syz.2.764' (pid 8690) tries to set negative timeout [ 157.665970][ T8716] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.771'. [ 157.875478][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.035635][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.059932][ T8742] validate_nla: 4 callbacks suppressed [ 158.059951][ T8742] netlink: 'syz.1.774': attribute type 4 has an invalid length. [ 158.780233][ T8778] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 158.814181][ T8778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.787'. [ 158.851522][ T8773] syzkaller0: entered promiscuous mode [ 158.880016][ T8773] syzkaller0: entered allmulticast mode [ 158.914121][ T8778] batadv0: entered promiscuous mode [ 158.943136][ T8778] batadv0: entered allmulticast mode [ 158.951673][ T8778] bridge0: port 3(batadv0) entered blocking state [ 158.969522][ T8778] bridge0: port 3(batadv0) entered disabled state [ 158.980675][ T8778] bridge0: port 3(batadv0) entered blocking state [ 158.987359][ T8778] bridge0: port 3(batadv0) entered forwarding state [ 158.993335][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 159.004075][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.082875][ T13] wlan1: Trigger new scan to find an IBSS to join [ 159.168902][ T8789] pimreg: entered allmulticast mode [ 159.294064][ T1096] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 159.558897][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'. [ 159.571514][ T8809] netlink: 'syz.0.794': attribute type 1 has an invalid length. [ 159.587368][ T8809] netlink: 'syz.0.794': attribute type 1 has an invalid length. [ 159.597500][ T8809] netlink: 'syz.0.794': attribute type 2 has an invalid length. [ 159.605693][ T8809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.794'. [ 159.955156][ C1] net_ratelimit: 1 callbacks suppressed [ 159.955173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.113570][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.605480][ T8806] tc_dump_action: action bad kind [ 160.628279][ T8815] syzkaller0: entered promiscuous mode [ 160.643151][ T8815] syzkaller0: entered allmulticast mode [ 160.914408][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.989477][ T8840] netlink: zone id is out of range [ 161.009721][ T8840] netlink: zone id is out of range [ 161.018772][ T8840] netlink: zone id is out of range [ 161.033171][ T8840] netlink: get zone limit has 4 unknown bytes [ 161.153414][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.161596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.289259][ T8842] netlink: 'syz.3.802': attribute type 32 has an invalid length. [ 161.341022][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 161.483377][ T8842] bond7: option coupled_control: invalid value (52) [ 161.493627][ T8842] bond7 (unregistering): Released all slaves [ 161.606986][ T8862] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 161.719708][ T8880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.115819][ T36] wlan1: Trigger new scan to find an IBSS to join [ 162.687524][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 162.699025][ T8903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.819'. [ 162.868745][ T8916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 162.926025][ T8918] netlink: 'syz.2.825': attribute type 4 has an invalid length. [ 162.955207][ T8918] netlink: 17 bytes leftover after parsing attributes in process `syz.2.825'. [ 163.017651][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.827'. [ 163.118979][ T8932] netlink: 52 bytes leftover after parsing attributes in process `syz.3.828'. [ 163.135018][ T8932] bridge0: port 3(batadv0) entered disabled state [ 163.141941][ T8932] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.149759][ T8932] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.276347][ T8938] bridge_slave_0: left allmulticast mode [ 163.282161][ T8938] bridge_slave_0: left promiscuous mode [ 163.327359][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.370642][ T8938] bridge_slave_1: left allmulticast mode [ 163.380905][ T8938] bridge_slave_1: left promiscuous mode [ 163.395833][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.430177][ T8938] bond0: (slave bond_slave_0): Releasing backup interface [ 163.452694][ T8938] bond0: (slave ÿ): Releasing backup interface [ 163.495983][ T8938] team0: Port device team_slave_0 removed [ 163.536973][ T8938] team0: Port device team_slave_1 removed [ 163.554253][ T8938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.599946][ T8938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.666533][ T36] batman_adv: batadv0: IGMP Querier appeared [ 163.672605][ T36] batman_adv: batadv0: MLD Querier appeared [ 163.678807][ T8956] tipc: Enabling of bearer rejected, failed to enable media [ 163.967533][ T8976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 164.049348][ T8984] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.840'. [ 164.068450][ T8976] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 164.396906][ T8998] delete_channel: no stack [ 164.593764][ T9003] x_tables: duplicate underflow at hook 2 [ 164.781098][ T10] IPVS: starting estimator thread 0... [ 164.806313][ T9007] netlink: 'syz.1.845': attribute type 27 has an invalid length. [ 164.815325][ T9007] netlink: 'syz.1.845': attribute type 4 has an invalid length. [ 164.825442][ T9007] netlink: 140 bytes leftover after parsing attributes in process `syz.1.845'. [ 164.884036][ T9008] IPVS: using max 28 ests per chain, 67200 per kthread [ 164.973091][ T9013] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 165.016097][ T9013] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.079856][ T1211] net_ratelimit: 15 callbacks suppressed [ 165.079877][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.139836][ T9019] netlink: 'syz.3.849': attribute type 83 has an invalid length. [ 165.153239][ T6710] wlan1: Trigger new scan to find an IBSS to join [ 165.314592][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.353854][ T9021] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 165.365325][ T9029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.373793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.387337][ T9029] xt_policy: neither incoming nor outgoing policy selected [ 165.388131][ T9021] bond4: option packets_per_slave: allowed values 0 - 65535 [ 165.434403][ T9021] bond4 (unregistering): Released all slaves [ 165.504680][ T9034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.740999][ T9048] xt_hashlimit: size too large, truncated to 1048576 [ 165.746828][ T9046] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 165.777970][ T9046] delete_channel: no stack [ 165.905248][ T9055] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 165.919299][ T9055] `: renamed from bond0 (while UP) [ 166.125447][ T6710] wlan1: Creating new IBSS network, BSSID 1e:e1:8d:06:98:5a [ 166.354473][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.747378][ T9088] __nla_validate_parse: 2 callbacks suppressed [ 166.747397][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 166.858249][ T9096] x_tables: unsorted entry at hook 1 [ 167.041467][ T9102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.303258][ T9117] IPVS: Unknown mcast interface: netpci0 [ 167.396162][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.465900][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 167.488995][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 167.497694][ T9129] netlink: 240 bytes leftover after parsing attributes in process `syz.2.878'. [ 167.507533][ T9125] netlink: 'syz.3.875': attribute type 12 has an invalid length. [ 167.552188][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.552423][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 167.597275][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 167.606445][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.615475][ T9125] netlink: 'syz.3.875': attribute type 12 has an invalid length. [ 167.633559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.643401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.656891][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.675683][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.802547][ T9127] netlink: 96 bytes leftover after parsing attributes in process `syz.4.877'. [ 167.852092][ T9146] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 167.875708][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 168.114350][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.124661][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 168.175785][ T9158] pim6reg1: entered promiscuous mode [ 168.181227][ T9158] pim6reg1: entered allmulticast mode [ 168.192483][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 168.597851][ T9175] netlink: 'syz.4.889': attribute type 27 has an invalid length. [ 168.646211][ T9175] netlink: 'syz.4.889': attribute type 4 has an invalid length. [ 168.888577][ T9193] tipc: Started in network mode [ 168.895216][ T9193] tipc: Node identity be141198214, cluster identity 4711 [ 168.912555][ T9193] tipc: Enabled bearer , priority 0 [ 168.921620][ T9195] veth0_macvtap: left promiscuous mode [ 168.929329][ T9195] macvtap0: entered allmulticast mode [ 168.939698][ T9195] macvtap0: refused to change device tx_queue_len [ 168.979896][ T9197] syzkaller0: entered promiscuous mode [ 168.996411][ T9197] syzkaller0: entered allmulticast mode [ 169.083998][ T9193] tipc: Resetting bearer [ 169.156875][ T9193] tipc: Disabling bearer [ 169.447251][ T9238] xt_ipcomp: unknown flags 1D [ 170.884941][ T9307] validate_nla: 2 callbacks suppressed [ 170.884962][ T9307] netlink: 'syz.0.928': attribute type 10 has an invalid length. [ 170.993845][ T9307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.020718][ T9318] netlink: 'syz.0.928': attribute type 10 has an invalid length. [ 171.051871][ T9307] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 171.062314][ T9318] batadv0: entered promiscuous mode [ 171.069884][ T9318] batadv0: entered allmulticast mode [ 171.127264][ T9318] bond0: (slave batadv0): Releasing backup interface [ 171.163967][ T9318] bridge0: port 3(batadv0) entered blocking state [ 171.193412][ T9318] bridge0: port 3(batadv0) entered disabled state [ 171.346218][ T37] batman_adv: batadv0: IGMP Querier appeared [ 171.352404][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 171.486849][ T9343] net_ratelimit: 2 callbacks suppressed [ 171.486878][ T9343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.574506][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.581868][ T9347] bond0: (slave wg1): The slave device specified does not support setting the MAC address [ 171.594570][ T9347] bond0: (slave wg1): Error -95 calling set_mac_address [ 171.635112][ T9347] netlink: 'syz.2.940': attribute type 12 has an invalid length. [ 171.635238][ T9352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.651646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.921226][ T9358] netlink: 'syz.3.942': attribute type 24 has an invalid length. [ 172.026314][ T9369] x_tables: duplicate underflow at hook 2 [ 172.138377][ T9375] __nla_validate_parse: 12 callbacks suppressed [ 172.138399][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'. [ 172.167605][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'. [ 172.375681][ T9387] netlink: 188 bytes leftover after parsing attributes in process `syz.0.952'. [ 172.779473][ T9405] syzkaller0: entered promiscuous mode [ 172.785761][ T9405] syzkaller0: entered allmulticast mode [ 172.912557][ T9419] netlink: 'syz.4.961': attribute type 10 has an invalid length. [ 172.938389][ T9419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.961'. [ 172.947658][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 172.957711][ T9421] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 172.966033][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 172.977417][ T9424] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 172.995138][ T9419] dummy0: entered promiscuous mode [ 173.005509][ T9419] bridge0: port 1(dummy0) entered blocking state [ 173.012201][ T9419] bridge0: port 1(dummy0) entered disabled state [ 173.023467][ T9419] dummy0: entered allmulticast mode [ 173.032271][ T9419] bridge0: port 1(dummy0) entered blocking state [ 173.038831][ T9419] bridge0: port 1(dummy0) entered forwarding state [ 173.063937][ T9425] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 173.064892][ T9424] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 173.258969][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'. [ 173.299398][ T9445] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 173.392757][ T9454] netlink: 'syz.2.969': attribute type 33 has an invalid length. [ 173.431250][ T9445] team0: Port device dummy0 added [ 173.586335][ T9460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.666772][ T9460] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 173.680516][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 173.692597][ T9460] netlink: 220 bytes leftover after parsing attributes in process `syz.1.970'. [ 173.892213][ T9474] bond5 (unregistering): Released all slaves [ 173.942765][ T9480] netlink: 52 bytes leftover after parsing attributes in process `syz.1.975'. [ 174.348961][ T9496] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 174.357025][ T9496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.613750][ T9514] veth0: entered promiscuous mode [ 174.662231][ T9513] veth0: left promiscuous mode [ 174.869665][ T9522] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 175.243841][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.255319][ T9517] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.775027][ T9569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.783851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.996670][ T9584] x_tables: duplicate entry at hook 1 [ 176.268148][ T9601] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 176.275621][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.744857][ T9624] tipc: Started in network mode [ 176.780042][ T9624] tipc: Node identity 12778afb0a93, cluster identity 4711 [ 176.816312][ T9624] tipc: Enabled bearer , priority 0 [ 176.846508][ T9628] syzkaller0: entered promiscuous mode [ 176.865795][ T9628] syzkaller0: entered allmulticast mode [ 176.898213][ T9624] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 177.226662][ T9636] tipc: Resetting bearer [ 177.233261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.263814][ T9622] tipc: Resetting bearer [ 177.292270][ T9622] tipc: Disabling bearer [ 177.314167][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.322433][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.418903][ T9661] tipc: Enabling of bearer rejected, media not registered [ 177.460590][ T9666] __nla_validate_parse: 9 callbacks suppressed [ 177.460612][ T9666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1020'. [ 177.697958][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 177.732790][ T9675] bridge_slave_0: entered promiscuous mode [ 177.858883][ T9670] syz.1.1021 (9670) used greatest stack depth: 17832 bytes left [ 177.945434][ T9686] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1028'. [ 178.256680][ T9702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1033'. [ 178.299462][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 178.358256][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.552166][ T9721] netlink: 'syz.3.1040': attribute type 1 has an invalid length. [ 178.571141][ T9721] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1040'. [ 178.639137][ T9728] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1042'. [ 178.649289][ T9728] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 178.808412][ T9736] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 178.895894][ T9736] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.965856][ T9736] macvlan3: entered promiscuous mode [ 178.986653][ T9736] macvlan3: entered allmulticast mode [ 179.099083][ T9754] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 179.128440][ T9754] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 179.394571][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.670758][ T9786] netlink: 'syz.3.1055': attribute type 27 has an invalid length. [ 179.748928][ T9790] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1057'. [ 179.822237][ T9793] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1057'. [ 179.837576][ T9797] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1056'. [ 179.853838][ T9794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.862337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.364440][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.434097][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.337548][ T9821] netlink: 'syz.3.1062': attribute type 30 has an invalid length. [ 181.398668][ T9828] netlink: 'syz.2.1064': attribute type 29 has an invalid length. [ 181.485215][ T9833] netlink: 'syz.2.1064': attribute type 29 has an invalid length. [ 181.504360][ T9828] netlink: 'syz.2.1064': attribute type 29 has an invalid length. [ 181.535341][ T9828] netlink: 'syz.2.1064': attribute type 29 has an invalid length. [ 181.546403][ T9842] netlink: 'syz.1.1069': attribute type 2 has an invalid length. [ 181.579395][ T9828] netlink: 'syz.2.1064': attribute type 29 has an invalid length. [ 181.611315][ T9839] ip6gre1: entered allmulticast mode [ 181.868908][ T9851] syzkaller0: entered promiscuous mode [ 181.878420][ T9851] syzkaller0: entered allmulticast mode [ 182.240977][ T9883] Cannot find set identified by id 0 to match [ 182.414097][ T9887] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.513866][ T5833] net_ratelimit: 2 callbacks suppressed [ 182.513885][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.712506][ T9909] __nla_validate_parse: 10 callbacks suppressed [ 182.712530][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 182.780224][ T9909] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 182.994937][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.019854][ T9926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1089'. [ 183.085545][ T9931] wg1: entered promiscuous mode [ 183.090482][ T9931] wg1: entered allmulticast mode [ 183.107333][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 183.394390][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.505604][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1099'. [ 183.553991][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.809447][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 183.986827][ T9986] IPVS: Scheduler module ip_vs_sip not found [ 184.594700][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.634778][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.931381][ T9987] validate_nla: 5 callbacks suppressed [ 185.931400][ T9987] netlink: 'syz.1.1105': attribute type 29 has an invalid length. [ 185.949155][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.958489][ T9992] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1107'. [ 185.970926][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.981239][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 185.993110][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.013918][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 186.033927][ T9992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1107'. [ 186.196241][T10002] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1111'. [ 186.211734][T10002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.219124][T10002] IPv6: NLM_F_CREATE should be set when creating new route [ 186.226464][T10002] IPv6: NLM_F_CREATE should be set when creating new route [ 186.240862][T10002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.274270][T10009] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 186.444909][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.651289][T10073] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 187.723150][ T5833] net_ratelimit: 1028 callbacks suppressed [ 187.723170][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.051550][T10103] __nla_validate_parse: 6 callbacks suppressed [ 188.051571][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1133'. [ 188.147035][T10106] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 188.189694][T10106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.519158][T10127] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 188.528811][T10127] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1142'. [ 188.637312][T10134] netlink: 'syz.0.1145': attribute type 32 has an invalid length. [ 188.758440][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.810537][T10142] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 188.899688][T10142] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.933608][T10142] xt_limit: Overflow, try lower: 604147548/4200216962 [ 188.941762][T10148] xt_bpf: check failed: parse error [ 188.955606][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 188.987466][T10146] veth3: entered promiscuous mode [ 189.015706][T10146] bond6: (slave veth3): Enslaving as an active interface with an up link [ 189.027436][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 189.070886][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1149'. [ 189.114251][T10155] netlink: 'syz.4.1149': attribute type 7 has an invalid length. [ 189.142527][T10155] netlink: 'syz.4.1149': attribute type 8 has an invalid length. [ 189.167221][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 189.474394][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.480338][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 189.494384][T10175] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 189.517136][T10175] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 189.793455][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.829374][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1162'. [ 189.840731][T10195] netlink: 'syz.0.1162': attribute type 12 has an invalid length. [ 189.850567][T10195] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1162'. [ 189.862030][T10195] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1162'. [ 189.873412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.882691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.353601][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.542043][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.571034][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.604323][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.628999][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.698818][T10239] tap0: tun_chr_ioctl cmd 1074025672 [ 190.726952][T10239] tap0: ignored: set checksum disabled [ 190.836204][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.036230][T10254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.105257][T10278] validate_nla: 4 callbacks suppressed [ 191.105277][T10278] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 191.238015][T10283] 8021q: adding VLAN 0 to HW filter on device bond8 [ 191.248487][T10283] bond7: (slave bond8): making interface the new active one [ 191.257794][T10283] bond7: (slave bond8): Enslaving as an active interface with an up link [ 191.365379][T10278] bond7: (slave gretap3): Enslaving as a backup interface with an up link [ 191.423616][T10283] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.428184][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.635019][T10298] Bluetooth: MGMT ver 1.23 [ 191.677844][T10296] syzkaller0: entered promiscuous mode [ 191.684731][T10296] syzkaller0: entered allmulticast mode [ 191.835727][T10308] netlink: 'syz.3.1193': attribute type 2 has an invalid length. [ 191.964812][T10313] bond8: Removing last arp target with arp_interval on [ 192.176209][T10318] syzkaller0: entered promiscuous mode [ 192.181756][T10318] syzkaller0: entered allmulticast mode [ 192.543700][T10342] netlink: 'syz.3.1201': attribute type 10 has an invalid length. [ 192.596737][T10341] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 192.631583][T10342] veth0_virt_wifi: entered allmulticast mode [ 192.661193][T10342] team0: Port device veth0_virt_wifi added [ 192.710960][T10345] syzkaller1: entered promiscuous mode [ 192.723874][T10345] syzkaller1: entered allmulticast mode [ 192.916187][ T5833] net_ratelimit: 5 callbacks suppressed [ 192.916208][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.012362][T10357] vlan2: entered promiscuous mode [ 193.046058][T10357] bridge0: entered promiscuous mode [ 193.355098][T10375] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.384760][T10374] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.418303][T10383] netlink: 'syz.4.1213': attribute type 10 has an invalid length. [ 193.426342][T10383] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 193.448829][T10385] __nla_validate_parse: 8 callbacks suppressed [ 193.448848][T10385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1215'. [ 193.461799][T10383] `: (slave netdevsim0): Enslaving as an active interface with an up link [ 193.485764][T10388] netlink: 'syz.4.1213': attribute type 21 has an invalid length. [ 193.523207][T10388] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1213'. [ 193.524301][T10391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1214'. [ 193.575610][T10388] netlink: 'syz.4.1213': attribute type 5 has an invalid length. [ 193.629586][T10388] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1213'. [ 193.676372][T10398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.727510][T10401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1218'. [ 193.936655][T10411] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 193.956609][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.957336][T10411] netlink: 'syz.2.1223': attribute type 3 has an invalid length. [ 194.021585][T10411] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1223'. [ 194.245274][T10430] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1227'. [ 194.598501][T10435] bond9: option tlb_dynamic_lb: invalid value (253) [ 194.608039][T10435] bond9 (unregistering): Released all slaves [ 194.918829][T10470] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 194.983984][T10470] 8021q: adding VLAN 0 to HW filter on device bond9 [ 195.000133][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.013402][T10473] : renamed from hsr0 (while UP) [ 195.089988][T10479] netlink: 'syz.2.1241': attribute type 15 has an invalid length. [ 195.102645][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1241'. [ 195.121409][T10477] bond9: (slave veth7): Enslaving as an active interface with a down link [ 195.206281][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'. [ 195.220651][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'. [ 195.563173][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.596006][ T1211] IPVS: starting estimator thread 0... [ 195.604071][T10498] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 195.654795][T10498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.683259][T10501] IPVS: using max 25 ests per chain, 60000 per kthread [ 195.718675][T10496] syzkaller0: entered promiscuous mode [ 195.733497][T10496] syzkaller0: entered allmulticast mode [ 195.892737][T10505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.964900][T10516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.975896][T10516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.992413][T10516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.429646][T10505] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.581393][T10505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.731763][T10505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.054387][ T1149] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.113400][ T5952] net_ratelimit: 8 callbacks suppressed [ 198.113421][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.150891][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.179897][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.237753][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.401683][T10574] bond0: entered allmulticast mode [ 198.426965][T10574] bond_slave_0: entered allmulticast mode [ 198.447312][T10574] bond_slave_1: entered allmulticast mode [ 198.505987][T10578] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 198.544676][T10578] __nla_validate_parse: 70 callbacks suppressed [ 198.544696][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 198.594672][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.999775][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.121669][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 199.131799][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 199.148158][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 199.158040][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.180540][T10618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 199.289050][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 199.654971][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.661369][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.199870][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.924784][T10634] syzkaller0: mtu less than device minimum [ 201.064865][T10646] netem: change failed [ 201.117208][T10648] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1284'. [ 201.235840][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.442213][T10664] netlink: 'syz.3.1289': attribute type 2 has an invalid length. [ 201.463465][T10664] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1289'. [ 201.479801][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 201.605960][T10675] Cannot find set identified by id 0 to match [ 201.611277][T10670] netlink: 'syz.0.1292': attribute type 15 has an invalid length. [ 201.620554][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1292'. [ 201.634231][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.646230][T10670] netlink: 'syz.0.1292': attribute type 2 has an invalid length. [ 201.666519][T10673] batadv_slave_0: entered promiscuous mode [ 201.678700][T10672] batadv_slave_0: left promiscuous mode [ 201.816464][T10689] netlink: 'syz.4.1300': attribute type 6 has an invalid length. [ 201.844968][T10686] bridge1: entered promiscuous mode [ 201.850305][T10686] bridge1: entered allmulticast mode [ 201.889208][T10693] netlink: 'syz.2.1301': attribute type 13 has an invalid length. [ 201.911529][T10693] gretap0: refused to change device tx_queue_len [ 201.918367][T10693] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 202.038508][T10701] netlink: 'syz.1.1303': attribute type 39 has an invalid length. [ 202.096973][T10703] netlink: 'syz.3.1304': attribute type 11 has an invalid length. [ 202.105310][T10703] netlink: 'syz.3.1304': attribute type 11 has an invalid length. [ 202.113751][T10698] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1302'. [ 203.315382][ T1211] net_ratelimit: 1 callbacks suppressed [ 203.315404][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.782079][T10785] __nla_validate_parse: 1 callbacks suppressed [ 203.782098][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 203.863273][T10785] netlink: 'syz.2.1324': attribute type 5 has an invalid length. [ 203.890922][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1324'. [ 203.939947][T10785] geneve2: entered promiscuous mode [ 203.945550][T10785] geneve2: entered allmulticast mode [ 203.985198][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 204.016266][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 204.069892][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 204.115489][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 204.220084][T10808] netlink: 'syz.1.1329': attribute type 18 has an invalid length. [ 204.354460][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.673699][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.706501][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'. [ 204.773106][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'. [ 204.801818][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'. [ 204.888850][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 204.926388][T10834] hsr_slave_0 (unregistering): left promiscuous mode [ 204.965673][T10851] openvswitch: netlink: IP tunnel dst address not specified [ 205.032692][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 205.043073][T10848] nbd: must specify at least one socket [ 205.048872][T10851] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1340'. [ 205.384070][T10875] Cannot find add_set index 0 as target [ 205.402597][T10875] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20001 [ 205.405814][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.482045][T10875] IPVS: fo: FWM 3 0x00000003 - no destination available [ 205.486031][T10877] tipc: Enabled bearer , priority 0 [ 205.875459][T10903] macvlan0: entered promiscuous mode [ 206.436521][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.445008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.593384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.617444][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 206.623028][ T1211] tipc: Node number set to 4092248943 [ 206.663635][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 206.696313][T10935] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 206.705064][T10935] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 206.715002][T10935] netlink: 'syz.1.1364': attribute type 2 has an invalid length. [ 206.724191][T10951] nbd: socks must be embedded in a SOCK_ITEM attr [ 206.931701][T10966] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 206.944239][T10963] syzkaller0: entered promiscuous mode [ 206.952279][T10963] syzkaller0: entered allmulticast mode [ 207.167142][T10982] syzkaller1: entered allmulticast mode [ 207.175508][T10982] netlink: 'syz.3.1377': attribute type 25 has an invalid length. [ 207.403249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.104147][T10996] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 208.517025][ T5952] net_ratelimit: 2 callbacks suppressed [ 208.517044][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.595218][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.726002][T11040] IPVS: set_ctl: invalid protocol: 11612 172.30.0.4:21 [ 208.741860][T11041] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 208.779987][T11040] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 209.073568][T11055] __nla_validate_parse: 5 callbacks suppressed [ 209.073588][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1399'. [ 209.109535][T11059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.118003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.234130][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.442876][T11075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 209.755708][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1411'. [ 209.827377][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 209.929359][T11106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1414'. [ 210.058690][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 210.096943][T11112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.141049][T11112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1416'. [ 210.302238][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 210.501128][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1423'. [ 210.731708][T11148] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 210.768564][T11148] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1426'. [ 210.978901][T11164] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 211.034587][T11169] set match dimension is over the limit! [ 211.097463][T11177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1430'. [ 211.143760][T11179] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 211.437398][T11194] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 211.445619][T11194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.863121][T11201] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 211.961380][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.961401][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.961445][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 212.367364][T11216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.765416][T11269] netlink: 'syz.4.1452': attribute type 2 has an invalid length. [ 213.864222][T11274] tipc: Enabled bearer , priority 0 [ 213.872704][T11274] syzkaller0: entered promiscuous mode [ 213.883714][T11274] syzkaller0: entered allmulticast mode [ 213.944918][T11274] tipc: Resetting bearer [ 213.971186][T11272] tipc: Resetting bearer [ 214.007467][T11281] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 214.017436][T11272] tipc: Disabling bearer [ 214.038146][T11281] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 214.161961][T11291] netlink: 'syz.0.1458': attribute type 2 has an invalid length. [ 214.189224][T11289] netlink: 'syz.2.1457': attribute type 10 has an invalid length. [ 214.210114][T11289] syz_tun: entered promiscuous mode [ 214.241758][T11289] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 214.531081][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.539889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.777217][T11327] xt_cgroup: xt_cgroup: no path or classid specified [ 214.809130][T11325] netlink: 'syz.3.1470': attribute type 1 has an invalid length. [ 214.834100][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.865812][T11333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.939345][T11335] openvswitch: netlink: Key type 157 is out of range max 32 [ 215.030493][T11338] veth1_to_bond: entered allmulticast mode [ 215.055043][T11338] __nla_validate_parse: 4 callbacks suppressed [ 215.055062][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 215.171367][T11342] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1476'. [ 215.410206][T11357] netlink: 'syz.3.1481': attribute type 2 has an invalid length. [ 215.719348][T11387] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1487'. [ 215.877369][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.018366][T11394] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 216.609513][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 216.782195][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1494'. [ 216.995998][T11435] netlink: 'syz.1.1496': attribute type 21 has an invalid length. [ 217.962974][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.188352][T11435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1496'. [ 218.198289][T11436] netlink: 'syz.1.1496': attribute type 29 has an invalid length. [ 218.388235][T11457] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 218.510601][T11457] bond5: entered promiscuous mode [ 218.546792][T11457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.753858][T11489] sctp: [Deprecated]: syz.1.1509 (pid 11489) Use of int in maxseg socket option. [ 218.753858][T11489] Use struct sctp_assoc_value instead [ 218.788340][T11493] netlink: 'syz.3.1510': attribute type 21 has an invalid length. [ 218.833331][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.956615][T11499] can: request_module (can-proto-0) failed. [ 218.994229][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.101099][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'. [ 219.110819][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'. [ 219.536646][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1523'. [ 219.560662][T11549] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1522'. [ 219.619322][T11549] lo: entered allmulticast mode [ 219.878311][T11566] netlink: 'syz.4.1530': attribute type 4 has an invalid length. [ 220.065099][T11574] team0: Cannot enslave team device to itself [ 220.072728][T11576] __nla_validate_parse: 1 callbacks suppressed [ 220.072748][T11576] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1534'. [ 220.136767][T11577] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1534'. [ 220.203295][T11582] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 220.272862][T11587] netlink: 'syz.3.1537': attribute type 13 has an invalid length. [ 220.367498][T11600] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1536'. [ 220.515912][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 220.908426][T11627] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1545'. [ 220.958530][T11629] macvlan1: entered allmulticast mode [ 221.138096][T11638] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1549'. [ 221.147596][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 221.240960][T11642] syzkaller0: entered promiscuous mode [ 221.249355][T11641] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1550'. [ 221.259111][T11642] syzkaller0: entered allmulticast mode [ 221.272188][T11642] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1551'. [ 221.448896][T11652] netem: change failed [ 221.690898][T11661] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1556'. [ 221.957304][T11677] bond0: entered promiscuous mode [ 221.962409][T11677] bond_slave_0: entered promiscuous mode [ 221.986809][T11677] bond_slave_1: entered promiscuous mode [ 222.011513][T11677] bond0: left promiscuous mode [ 222.017690][T11677] bond_slave_0: left promiscuous mode [ 222.023822][T11677] bond_slave_1: left promiscuous mode [ 222.070738][T11679] tipc: Enabled bearer , priority 0 [ 222.097613][T11687] dvmrp0: entered allmulticast mode [ 222.108411][T11684] netlink: 'syz.3.1563': attribute type 1 has an invalid length. [ 222.126872][T11679] syzkaller0: entered promiscuous mode [ 222.146172][T11679] syzkaller0: entered allmulticast mode [ 222.156682][T11693] dvmrp0: left allmulticast mode [ 222.210570][T11679] tipc: Resetting bearer [ 222.219306][T11678] tipc: Resetting bearer [ 222.349382][T11678] tipc: Disabling bearer [ 222.382169][T11700] x_tables: duplicate underflow at hook 1 [ 222.610830][T11718] tun0: tun_chr_ioctl cmd 1074025675 [ 222.618623][T11718] tun0: persist disabled [ 222.662678][T11722] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 222.756311][T11722] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 222.770449][T11722] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 222.778995][T11722] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 222.831842][T11722] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 222.840406][T11722] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 222.933268][T11729] dvmrp0: entered allmulticast mode [ 223.997049][T11789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.466541][T11810] validate_nla: 59 callbacks suppressed [ 224.466562][T11810] netlink: 'syz.0.1603': attribute type 6 has an invalid length. [ 224.483980][T11810] netlink: 'syz.0.1603': attribute type 5 has an invalid length. [ 224.974805][T11838] netlink: 'syz.3.1611': attribute type 6 has an invalid length. [ 225.002360][T11838] netlink: 'syz.3.1611': attribute type 5 has an invalid length. [ 225.580083][T11873] __nla_validate_parse: 23 callbacks suppressed [ 225.580106][T11873] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1622'. [ 225.600179][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1622'. [ 225.622850][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1622'. [ 225.632434][T11873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1622'. [ 225.646284][T11875] netlink: 'syz.1.1623': attribute type 4 has an invalid length. [ 225.794690][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1625'. [ 225.811218][T11886] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 226.154066][T11904] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1627'. [ 226.392523][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 226.514151][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1631'. [ 226.658493][T11920] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 226.668478][T11920] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 227.334527][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 227.350655][T11969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'. [ 227.424201][T11966] lo: Caught tx_queue_len zero misconfig [ 227.433511][T11966] netlink: 'syz.3.1645': attribute type 14 has an invalid length. [ 227.984878][T12011] netlink: 'syz.0.1659': attribute type 15 has an invalid length. [ 228.104559][T12022] netlink: 'syz.1.1663': attribute type 16 has an invalid length. [ 228.112672][T12022] netlink: 'syz.1.1663': attribute type 17 has an invalid length. [ 228.123749][T12022] lo: left allmulticast mode [ 228.145083][T12022] bond0: left allmulticast mode [ 228.150085][T12022] bond_slave_0: left allmulticast mode [ 228.156246][T12022] bond_slave_1: left allmulticast mode [ 228.168873][T12022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.416590][T12037] tipc: Enabling of bearer rejected, already enabled [ 228.586330][T12044] vxcan4: entered allmulticast mode [ 228.976112][T12071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.023648][T12074] nbd: illegal input index -8454144 [ 229.767547][T12114] ip6gre2: entered promiscuous mode [ 229.817191][T12114] ip6gre2: entered allmulticast mode [ 230.294910][T12148] validate_nla: 3 callbacks suppressed [ 230.294931][T12148] netlink: 'syz.2.1700': attribute type 3 has an invalid length. [ 230.470278][T12155] netlink: 'syz.2.1702': attribute type 1 has an invalid length. [ 230.524696][T12155] bond9: (slave ip6gretap1): making interface the new active one [ 230.537043][T12155] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 230.834745][T12175] __nla_validate_parse: 45 callbacks suppressed [ 230.834768][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 230.970633][T12181] netlink: 'syz.4.1711': attribute type 13 has an invalid length. [ 230.979656][T12181] netlink: 'syz.4.1711': attribute type 58 has an invalid length. [ 230.987797][T12181] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1711'. [ 231.092342][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 231.125523][T12191] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 231.186778][T12191] bond6: entered promiscuous mode [ 231.192872][T12191] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.201141][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1716'. [ 231.231654][T12191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1715'. [ 231.243646][T12191] bond6: entered allmulticast mode [ 231.287362][T12191] bond6: (slave bridge4): making interface the new active one [ 231.295189][T12191] bridge4: entered promiscuous mode [ 231.300627][T12191] bridge4: entered allmulticast mode [ 231.308330][T12191] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 231.382871][T12202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1719'. [ 231.733918][T12216] nbd0: detected capacity change from 0 to 127 [ 231.771244][ T5149] block nbd0: Receive control failed (result -104) [ 231.795283][T12214] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1725'. [ 231.966508][T12233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1730'. [ 232.148973][T12243] netlink: 'syz.0.1734': attribute type 8 has an invalid length. [ 232.201243][T12247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1736'. [ 232.483761][T12269] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 232.500636][T12269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.551163][T12273] netlink: 'syz.0.1743': attribute type 29 has an invalid length. [ 232.572547][T12273] netlink: 'syz.0.1743': attribute type 29 has an invalid length. [ 232.597753][T12273] netlink: 'syz.0.1743': attribute type 29 has an invalid length. [ 232.617014][T12273] netlink: 'syz.0.1743': attribute type 29 has an invalid length. [ 232.659455][T12282] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1743'. [ 232.777758][T12285] IPv6: sit1: Disabled Multicast RS [ 232.939751][T12298] tipc: Enabling of bearer rejected, failed to enable media [ 232.966394][T12300] tipc: Enabling of bearer rejected, failed to enable media [ 233.365814][T12323] tipc: Enabled bearer , priority 0 [ 233.501311][T12323] tipc: Disabling bearer [ 234.007615][T12363] team0: Device gtp1 is up. Set it down before adding it as a team port [ 234.128820][T12369] bridge_slave_1: left allmulticast mode [ 234.156816][T12369] bridge_slave_1: left promiscuous mode [ 234.182637][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.235506][T12369] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 234.609232][T12395] vlan3: entered promiscuous mode [ 234.769566][T12401] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 234.832494][T12370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.873119][T12370] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 234.899150][T12370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.912353][T12370] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 234.965452][T12370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.971427][T12370] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 235.084464][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 235.092301][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 235.102160][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 235.111109][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 235.119282][ T25] block nbd0: Dead connection, failed to find a fallback [ 235.126759][ T25] block nbd0: shutting down sockets [ 235.132382][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.147346][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 235.155494][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.165149][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 235.173180][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.182487][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 235.190479][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.199679][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 235.209019][T11892] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.219070][T11892] Buffer I/O error on dev nbd0, logical block 0, async page read [ 235.227569][T11892] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.237453][T11892] Buffer I/O error on dev nbd0, logical block 1, async page read [ 235.246110][T11892] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.257789][T11892] Buffer I/O error on dev nbd0, logical block 2, async page read [ 235.281744][T12370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.293602][T12370] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 235.293994][T11892] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.310703][T11892] Buffer I/O error on dev nbd0, logical block 3, async page read [ 235.324990][T11892] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.334440][T11892] Buffer I/O error on dev nbd0, logical block 0, async page read [ 235.342496][T11892] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.352498][T11892] Buffer I/O error on dev nbd0, logical block 1, async page read [ 235.370707][T11892] ldm_validate_partition_table(): Disk read failed. [ 235.377878][T12370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.377957][T12370] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 235.422077][T11892] Dev nbd0: unable to read RDB block 0 [ 235.436298][T11892] nbd0: unable to read partition table [ 235.459937][T11892] ldm_validate_partition_table(): Disk read failed. [ 235.540815][T11892] Dev nbd0: unable to read RDB block 0 [ 235.580670][T11892] nbd0: unable to read partition table [ 235.598013][T12435] validate_nla: 6 callbacks suppressed [ 235.598034][T12435] netlink: 'syz.0.1783': attribute type 2 has an invalid length. [ 235.651603][T12436] IPVS: sh: FWM 3 0x00000003 - no destination available [ 235.866433][T12439] __nla_validate_parse: 10 callbacks suppressed [ 235.866456][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1785'. [ 235.918742][T12441] netlink: 'syz.3.1786': attribute type 23 has an invalid length. [ 235.929935][T12439] veth0_macvtap: left promiscuous mode [ 235.977112][T12446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1788'. [ 236.143714][T12457] Cannot find add_set index 0 as target [ 236.188396][T12457] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 236.306832][T12464] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 236.348606][T12464] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 236.397742][T12464] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 236.429431][T12464] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 236.471819][T12464] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 236.490523][T12478] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1795'. [ 236.516836][T12464] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 236.529139][T12464] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 236.540027][T12464] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 237.492663][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1808'. [ 237.636636][T12548] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1811'. [ 237.767914][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 237.809293][T12548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1811'. [ 237.903600][T12561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1812'. [ 238.174511][T12561] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1812'. [ 238.229956][T12579] sctp: [Deprecated]: syz.0.1816 (pid 12579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.229956][T12579] Use struct sctp_sack_info instead [ 238.384710][T12589] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1819'. [ 238.414114][T12589] unsupported nla_type 58 [ 238.675744][T12600] tipc: Enabled bearer , priority 0 [ 238.774912][T12612] openvswitch: netlink: Missing key (keys=40, expected=100) [ 238.792569][T12600] syzkaller0: entered promiscuous mode [ 238.812632][T12600] syzkaller0: entered allmulticast mode [ 238.825603][T12600] tipc: Resetting bearer [ 238.903509][T12599] tipc: Resetting bearer [ 240.880322][T12599] tipc: Disabling bearer [ 240.923966][ T5833] tipc: Node number set to 417630971 [ 241.085352][T12670] __nla_validate_parse: 4 callbacks suppressed [ 241.085373][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1836'. [ 241.196912][T12684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1840'. [ 241.240041][T12686] validate_nla: 31 callbacks suppressed [ 241.240061][T12686] netlink: 'syz.4.1837': attribute type 7 has an invalid length. [ 241.313377][T12686] netlink: 'syz.4.1837': attribute type 8 has an invalid length. [ 241.322513][T12692] netlink: 5016 bytes leftover after parsing attributes in process `syz.0.1839'. [ 241.434198][T12699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.481904][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1844'. [ 241.745909][T12713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1845'. [ 242.042594][T12738] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 242.095082][T12738] 8021q: adding VLAN 0 to HW filter on device bond10 [ 242.248937][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 242.618666][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 242.621119][T12763] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 242.635965][T12770] netlink: 'syz.1.1858': attribute type 20 has an invalid length. [ 242.675260][T12763] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 242.705722][ T6710] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.714370][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 242.730243][ T6710] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.744218][T12770] netlink: 'syz.1.1858': attribute type 20 has an invalid length. [ 242.756129][ T6710] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.780237][ T6710] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.792420][T12775] delete_channel: no stack [ 243.131432][T12800] lo: entered promiscuous mode [ 243.168984][T12800] tunl0: entered promiscuous mode [ 243.188190][T12800] gre0: entered promiscuous mode [ 243.222359][T12800] gretap0: entered promiscuous mode [ 243.237656][T12800] erspan0: entered promiscuous mode [ 243.248172][T12800] ip_vti0: entered promiscuous mode [ 243.258877][T12800] ip6_vti0: entered promiscuous mode [ 243.269983][T12800] sit0: entered promiscuous mode [ 243.282501][T12800] ip6tnl0: entered promiscuous mode [ 243.292813][T12800] ip6gre0: entered promiscuous mode [ 243.303150][T12800] ip6gretap0: entered promiscuous mode [ 243.314320][T12800] vcan0: entered promiscuous mode [ 243.322406][T12800] bond0: entered promiscuous mode [ 243.330654][T12800] bond_slave_0: entered promiscuous mode [ 243.339445][T12800] bond_slave_1: entered promiscuous mode [ 243.348505][T12800] bridge_slave_1: entered promiscuous mode [ 243.360425][T12800] team0: entered promiscuous mode [ 243.366011][T12800] team_slave_0: entered promiscuous mode [ 243.372075][T12800] team_slave_1: entered promiscuous mode [ 243.379461][T12800] dummy0: entered promiscuous mode [ 243.385391][T12800] veth0_virt_wifi: entered promiscuous mode [ 243.404566][T12800] nlmon0: entered promiscuous mode [ 243.412440][T12800] caif0: entered promiscuous mode [ 243.426036][T12800] vxcan0: entered promiscuous mode [ 243.439878][T12800] vxcan1: entered promiscuous mode [ 243.447506][T12800] veth0: entered promiscuous mode [ 243.457761][T12800] veth1: entered promiscuous mode [ 243.468356][T12800] wg0: entered promiscuous mode [ 243.482533][T12800] wg1: left allmulticast mode [ 243.492100][T12800] wg2: entered promiscuous mode [ 243.502245][T12800] veth0_to_bridge: entered promiscuous mode [ 243.521400][T12800] veth1_to_bridge: entered promiscuous mode [ 243.536227][T12800] veth0_to_bond: entered promiscuous mode [ 243.558537][T12800] veth1_to_bond: entered promiscuous mode [ 243.571773][T12800] veth0_to_team: entered promiscuous mode [ 243.586658][T12800] veth1_to_team: entered promiscuous mode [ 243.605898][T12800] veth0_to_batadv: entered promiscuous mode [ 243.618698][T12800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.627670][T12800] batadv_slave_0: entered promiscuous mode [ 243.639558][T12800] veth1_to_batadv: entered promiscuous mode [ 243.659376][T12800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.670012][T12800] batadv_slave_1: entered promiscuous mode [ 243.682771][T12800] xfrm0: entered promiscuous mode [ 243.693604][T12800] veth0_to_hsr: entered promiscuous mode [ 243.731367][T12800] veth1_to_hsr: entered promiscuous mode [ 243.771376][T12800] hsr0: entered promiscuous mode [ 243.798212][T12800] veth1_virt_wifi: entered promiscuous mode [ 243.820519][T12800] veth0_virt_wifi: left allmulticast mode [ 243.830642][T12800] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 243.870255][T12800] vlan0: entered promiscuous mode [ 243.881404][T12800] vlan1: entered promiscuous mode [ 243.891293][T12800] macvlan0: entered promiscuous mode [ 243.909239][T12800] macvlan1: entered promiscuous mode [ 243.927322][T12800] ipvlan0: entered promiscuous mode [ 243.933481][T12800] ipvlan1: entered promiscuous mode [ 243.949087][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 243.965430][T12800] macvtap0: entered promiscuous mode [ 243.976979][T12800] macsec0: entered promiscuous mode [ 243.990005][T12800] geneve0: entered promiscuous mode [ 244.000582][T12800] geneve1: entered promiscuous mode [ 244.003350][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 244.015619][T12800] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 244.028625][T12800] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 244.041271][T12800] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 244.057368][T12800] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 244.064975][T12800] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 244.072333][T12800] bridge1: entered promiscuous mode [ 244.080101][T12800] syztnl1: entered promiscuous mode [ 244.087921][T12800] bond1: entered promiscuous mode [ 244.093549][T12800] gtp0: entered promiscuous mode [ 244.098683][T12800] veth2: entered promiscuous mode [ 244.104264][T12800] veth3: entered promiscuous mode [ 244.109489][T12800] mac80211_hwsim hwsim15 wlan2: entered promiscuous mode [ 244.117202][T12800] bond2: entered promiscuous mode [ 244.122475][T12800] macvtap0.4094: entered promiscuous mode [ 244.129751][T12800] bond3: entered promiscuous mode [ 244.135198][T12800] gretap1: entered promiscuous mode [ 244.142341][T12800] bond4: entered promiscuous mode [ 244.148516][T12800] veth4: entered promiscuous mode [ 244.154151][T12800] veth5: entered promiscuous mode [ 244.160030][T12800] bond5: entered promiscuous mode [ 244.165341][T12800] bond6: entered promiscuous mode [ 244.170958][T12800] sit1: entered promiscuous mode [ 244.199752][T12800] bridge2: entered promiscuous mode [ 244.206880][T12800] vxlan0: entered promiscuous mode [ 244.214572][T12800] ip6erspan0: entered promiscuous mode [ 244.220331][T12800] mac80211_hwsim hwsim17 wlan3: entered promiscuous mode [ 244.228264][T12800] bond7: entered promiscuous mode [ 244.235222][T12800] : entered promiscuous mode [ 244.241820][T12800] ip6tnl1: entered promiscuous mode [ 244.247326][T12800] bond8: entered promiscuous mode [ 244.252816][T12800] bond9: entered promiscuous mode [ 244.258759][T12800] veth6: entered promiscuous mode [ 244.264527][T12800] veth7: entered promiscuous mode [ 244.270794][T12800] dvmrp0: entered promiscuous mode [ 244.278228][T12800] ip6tnl2: entered promiscuous mode [ 244.283706][T12800] bridge3: entered promiscuous mode [ 244.289605][T12800] bond10: entered promiscuous mode [ 244.307837][T12804] netlink: 'syz.1.1867': attribute type 29 has an invalid length. [ 244.367740][ T1149] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.377202][ T1149] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.393745][ T1149] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.403189][ T1149] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.412133][ T1149] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.458305][ T1149] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.476914][T12830] macsec3: entered promiscuous mode [ 244.483155][T12830] macsec3: entered allmulticast mode [ 244.493344][ T1149] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.503017][ T1149] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.550527][T12841] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 245.694413][T12912] tipc: Enabling of bearer rejected, failed to enable media [ 245.831630][T12920] sch_tbf: burst 127 is lower than device dummy0 mtu (1514) ! [ 245.969371][T12912] sch_tbf: burst 127 is lower than device dummy0 mtu (1514) ! [ 246.177212][T12935] __nla_validate_parse: 2 callbacks suppressed [ 246.177234][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 246.266523][T12935] ipvlan1: left promiscuous mode [ 246.289449][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 246.348326][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 246.383404][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 246.466594][T12953] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1901'. [ 246.609064][T12962] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 246.722023][T12971] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1904'. [ 246.898248][T12987] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 246.905956][T12987] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 247.529933][T13018] --map-set only usable from mangle table [ 247.718054][T13031] netlink: 'syz.2.1921': attribute type 4 has an invalid length. [ 247.744068][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1923'. [ 247.767729][T13035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1922'. [ 248.035643][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'. [ 248.113993][T13063] bond4: entered promiscuous mode [ 248.119528][T13063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.138783][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 248.175071][T13073] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 248.201129][T13066] bond11: option xmit_hash_policy: invalid value (64) [ 248.222624][T13066] bond11 (unregistering): Released all slaves [ 248.619511][T13103] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 248.719257][T13112] delete_channel: no stack [ 248.751146][T13114] only policy match revision 0 supported [ 248.751167][T13114] unable to load match [ 249.115935][T13137] lo: entered promiscuous mode [ 249.135345][T13137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.325490][T13147] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 249.363558][T13152] Driver unsupported XDP return value 0 on prog (id 461) dev N/A, expect packet loss! [ 249.400590][T13155] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 249.430764][T13158] netlink: 'syz.4.1959': attribute type 1 has an invalid length. [ 249.472469][T13156] openvswitch: netlink: Multiple metadata blocks provided [ 249.581143][T13168] erspan0: left promiscuous mode [ 249.604625][T13168] erspan0: entered allmulticast mode [ 249.767817][T13173] block nbd0: NBD_DISCONNECT [ 249.773112][T13173] block nbd0: Send disconnect failed -32 [ 249.810745][T13173] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 249.851575][T13173] netlink: 'syz.0.1958': attribute type 2 has an invalid length. [ 249.878982][T13182] netlink: 'syz.4.1963': attribute type 16 has an invalid length. [ 249.905562][T13182] netlink: 'syz.4.1963': attribute type 17 has an invalid length. [ 249.921809][T13181] bridge0: port 1(dummy0) entered disabled state [ 249.922840][T13185] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 249.998349][T13182] 8021q: adding VLAN 0 to HW filter on device ` [ 250.009276][T13182] bridge0: port 1(dummy0) entered blocking state [ 250.016055][T13182] bridge0: port 1(dummy0) entered forwarding state [ 250.036798][T13182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.070434][T13182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.107717][T13181] bridge0: port 1(dummy0) entered disabled state [ 250.518464][T13182] bridge0: port 1(dummy0) entered blocking state [ 250.524985][T13182] bridge0: port 1(dummy0) entered forwarding state [ 250.533479][T13182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.555150][T13182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.602036][T13181] bridge0: port 1(dummy0) entered disabled state [ 250.668742][T13182] bridge0: port 1(dummy0) entered blocking state [ 250.675357][T13182] bridge0: port 1(dummy0) entered forwarding state [ 250.693677][T13182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.759952][T13181] bridge0: port 1(dummy0) entered disabled state [ 251.098343][T13240] Cannot find add_set index 0 as target [ 251.469222][T13264] __nla_validate_parse: 9 callbacks suppressed [ 251.469246][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 251.745183][T13279] sctp: [Deprecated]: syz.0.1990 (pid 13279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.745183][T13279] Use struct sctp_sack_info instead [ 252.329228][T13315] validate_nla: 9 callbacks suppressed [ 252.329247][T13315] netlink: 'syz.2.1998': attribute type 1 has an invalid length. [ 252.372110][T13315] 8021q: adding VLAN 0 to HW filter on device bond11 [ 252.462056][T13315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1998'. [ 252.726781][T13344] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2003'. [ 252.749988][T13344] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2003'. [ 252.770212][T13340] openvswitch: netlink: Key type 31 is not supported [ 253.493080][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2005'. [ 254.486083][T13346] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2003'. [ 254.495249][T13346] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2003'. [ 254.510482][T13351] bridge0: port 3(batadv0) entered disabled state [ 254.544869][T13351] bridge_slave_0: left allmulticast mode [ 254.553097][T13351] bridge_slave_0: left promiscuous mode [ 254.565853][T13351] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.619378][T13351] bridge_slave_1: left allmulticast mode [ 254.631523][T13351] bridge_slave_1: left promiscuous mode [ 254.639192][T13351] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.652665][T13351] bond0: (slave bond_slave_0): Releasing backup interface [ 254.687613][T13351] bond0: (slave bond_slave_1): Releasing backup interface [ 254.718152][T13351] team0: Port device team_slave_0 removed [ 254.747776][T13351] team0: Port device team_slave_1 removed [ 254.774065][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.781524][T13351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.799239][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.808425][T13351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.836644][T13351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.900341][T13371] : entered promiscuous mode [ 254.941995][T13383] netlink: 'syz.1.2009': attribute type 2 has an invalid length. [ 255.206737][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'. [ 255.323827][T13418] syzkaller0: entered promiscuous mode [ 255.329455][T13418] syzkaller0: entered allmulticast mode [ 255.438815][T13420] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 255.454961][T13420] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2019'. [ 255.500657][T13433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2021'. [ 255.515854][T13427] sock: sock_timestamping_bind_phc: sock not bind to device [ 256.182577][T13466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.786198][T13501] netlink: 'syz.4.2039': attribute type 4 has an invalid length. [ 257.380693][T13534] SET target dimension over the limit! [ 258.639000][T13526] tipc: Disabling bearer [ 258.874040][T13550] netlink: 'syz.4.2049': attribute type 5 has an invalid length. [ 258.928569][T13546] delete_channel: no stack [ 258.955422][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2046'. [ 258.960236][T13553] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 258.991752][T13553] netlink: 'syz.1.2050': attribute type 10 has an invalid length. [ 259.026259][T13553] bridge_slave_1: left allmulticast mode [ 259.032152][T13553] bridge_slave_1: left promiscuous mode [ 259.041240][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.064643][T13553] bridge_slave_1: entered promiscuous mode [ 259.073909][T13553] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 259.089941][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2051'. [ 259.099427][T13555] syzkaller1: entered promiscuous mode [ 259.106541][T13555] syzkaller1: entered allmulticast mode [ 259.116586][T13555] netlink: 'syz.2.2051': attribute type 2 has an invalid length. [ 259.127817][T13555] netlink: 'syz.2.2051': attribute type 1 has an invalid length. [ 259.233832][T13567] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 259.242811][T13567] IPVS: set_ctl: invalid protocol: 358 10.1.1.2:20002 [ 259.456323][T13575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2056'. [ 259.545664][T13589] sctp: [Deprecated]: syz.3.2061 (pid 13589) Use of int in maxseg socket option. [ 259.545664][T13589] Use struct sctp_assoc_value instead [ 259.672665][T13596] netlink: 'syz.4.2064': attribute type 11 has an invalid length. [ 259.685249][T13592] syzkaller0: entered promiscuous mode [ 259.690900][T13592] syzkaller0: entered allmulticast mode [ 259.893747][T13607] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2067'. [ 260.052528][T13615] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2070'. [ 260.114799][T13625] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2072'. [ 260.642184][T13649] openvswitch: netlink: IP tunnel dst address not specified [ 260.679135][T13652] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 260.721652][T13652] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 261.022736][T13672] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2084'. [ 261.064427][T13676] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 261.080470][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.090116][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.099474][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.114110][T13676] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20002 [ 261.333708][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 261.350658][T13686] ip6tnl0: Caught tx_queue_len zero misconfig [ 261.368088][T13691] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2091'. [ 261.471458][T13698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2094'. [ 261.672319][T13710] netlink: 'syz.2.2097': attribute type 11 has an invalid length. [ 261.878853][T13724] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 261.919239][T13724] 8021q: VLANs not supported on ip_vti0 [ 261.972375][T13728] ipt_REJECT: TCP_RESET invalid for non-tcp [ 262.426816][T13757] netlink: 'syz.0.2108': attribute type 14 has an invalid length. [ 262.511179][T13757] netlink: 'syz.0.2108': attribute type 14 has an invalid length. [ 262.901450][T13794] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 262.926681][T13794] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 262.962267][T13787] tipc: Enabling of bearer rejected, already enabled [ 263.045141][T13776] tipc: Resetting bearer [ 263.297449][T13814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.355136][T13817] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 263.701091][T13835] netlink: 'syz.2.2129': attribute type 1 has an invalid length. [ 264.281046][T13870] __nla_validate_parse: 13 callbacks suppressed [ 264.281068][T13870] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2136'. [ 264.479622][T13885] netlink: 'syz.1.2139': attribute type 83 has an invalid length. [ 264.889033][T13911] netlink: 'syz.4.2148': attribute type 83 has an invalid length. [ 265.484670][T13948] netlink: 'syz.2.2161': attribute type 5 has an invalid length. [ 265.620101][T13947] v: renamed from veth0_vlan [ 266.023317][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 266.447997][T14013] netlink: 'syz.0.2175': attribute type 3 has an invalid length. [ 266.794429][T14037] netlink: 'syz.4.2181': attribute type 3 has an invalid length. [ 266.952868][T14056] block nbd0: Unsupported socket: should be TCP or UNIX. [ 267.206795][ T5494] v: left promiscuous mode [ 267.262696][ T5494] v: entered promiscuous mode [ 267.294543][T14072] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 267.301753][T14072] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 268.643145][T14136] syzkaller0: entered promiscuous mode [ 268.665175][T14136] syzkaller0: entered allmulticast mode [ 270.262172][T14169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2211'. [ 270.388989][T14176] netlink: 'syz.4.2213': attribute type 1 has an invalid length. [ 270.424315][T14176] bond11: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 270.446657][T14176] veth3: entered promiscuous mode [ 270.455080][T14176] bond11: (slave veth3): Enslaving as a backup interface with a down link [ 270.858445][T14188] netlink: 'syz.4.2216': attribute type 30 has an invalid length. [ 271.935516][T14202] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 272.141092][T14211] netlink: 'syz.4.2223': attribute type 2 has an invalid length. [ 272.157452][T14211] ip6gretap3: entered allmulticast mode [ 272.367031][T14220] bridge7: entered allmulticast mode [ 272.581485][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 272.596885][T14223] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2226'. [ 272.777334][T14241] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2230'. [ 272.971536][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 273.119617][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 273.135818][T14262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2235'. [ 273.396515][T14279] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2241'. [ 273.420388][T14279] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2241'. [ 273.553218][ T30] audit: type=1800 audit(1764652889.301:3): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2243" name="memory.events" dev="tmpfs" ino=2305 res=0 errno=0 [ 273.578550][ T30] audit: type=1804 audit(1764652889.301:4): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2243" name="/newroot/448/memory.events" dev="tmpfs" ino=2305 res=1 errno=0 [ 273.790141][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2246'. [ 274.233685][T14312] bond12: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 274.244687][T14312] bond12 (unregistering): Released all slaves [ 274.830599][T14345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.720372][T14366] __nla_validate_parse: 2 callbacks suppressed [ 275.720388][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2268'. [ 275.777128][T14368] openvswitch: netlink: Missing key (keys=40, expected=100) [ 276.107437][T14380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.250060][T14384] bond12: entered allmulticast mode [ 276.256427][T14384] 8021q: adding VLAN 0 to HW filter on device bond12 [ 276.264560][T14384] bridge0: port 2(bond12) entered blocking state [ 276.271074][T14384] bridge0: port 2(bond12) entered disabled state [ 276.280134][T14384] bond12: entered promiscuous mode [ 276.286227][T14384] bridge0: port 2(bond12) entered blocking state [ 276.292686][T14384] bridge0: port 2(bond12) entered forwarding state [ 276.303678][ T6710] bridge0: port 2(bond12) entered disabled state [ 276.407580][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 276.517558][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 276.578167][T14393] syzkaller0: entered promiscuous mode [ 276.583992][T14393] syzkaller0: entered allmulticast mode [ 276.657301][T14393] netlink: 'syz.4.2278': attribute type 18 has an invalid length. [ 276.678626][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.688346][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.698466][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.707458][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.857900][T14403] syzkaller1: entered promiscuous mode [ 276.864218][T14403] syzkaller1: entered allmulticast mode [ 277.093113][T14410] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 277.121009][T14410] bond13: entered promiscuous mode [ 277.126722][T14410] 8021q: adding VLAN 0 to HW filter on device bond13 [ 277.152847][T14410] bond13: (slave bridge8): making interface the new active one [ 277.161530][T14410] bridge8: entered promiscuous mode [ 277.167936][T14410] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 277.312478][T14418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2285'. [ 277.325486][T14418] netlink: 'syz.4.2285': attribute type 8 has an invalid length. [ 277.459101][T14423] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2287'. [ 277.523974][T14426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2287'. [ 277.847689][T14433] netlink: 'syz.4.2290': attribute type 1 has an invalid length. [ 322.517744][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.524240][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.956888][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.963492][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.843180][ T31] INFO: task kworker/1:2:1211 blocked for more than 143 seconds. [ 410.850974][ T31] Not tainted syzkaller #0 [ 410.856037][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.865092][ T31] task:kworker/1:2 state:D stack:23288 pid:1211 tgid:1211 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 410.877346][ T31] Workqueue: events rfkill_sync_work [ 410.882707][ T31] Call Trace: [ 410.886234][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 410.889205][ T31] __schedule+0x1798/0x4cc0 [ 410.893907][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 410.899347][ T31] ? __pfx___schedule+0x10/0x10 [ 410.904424][ T31] ? schedule+0x91/0x360 [ 410.909002][ T31] schedule+0x165/0x360 [ 410.913302][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.918812][ T31] __mutex_lock+0x7e6/0x1350 [ 410.923604][ T31] ? __mutex_lock+0x5bb/0x1350 [ 410.933027][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 410.938487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.952950][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.958245][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 410.971601][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 410.978472][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 410.984383][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 410.989548][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 411.021038][ T31] rfkill_set_block+0x1d2/0x440 [ 411.028793][ T31] rfkill_sync_work+0x114/0x200 [ 411.034716][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.040943][ T31] process_scheduled_works+0xae1/0x17b0 [ 411.046634][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.052680][ T31] worker_thread+0x8a0/0xda0 [ 411.057459][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.064172][ T31] ? __kthread_parkme+0x7b/0x200 [ 411.069131][ T31] kthread+0x711/0x8a0 [ 411.073291][ T31] ? __pfx_worker_thread+0x10/0x10 [ 411.078432][ T31] ? __pfx_kthread+0x10/0x10 [ 411.083340][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.088596][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.093895][ T31] ? __pfx_kthread+0x10/0x10 [ 411.098516][ T31] ret_from_fork+0x4bc/0x870 [ 411.103250][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.108380][ T31] ? __switch_to_asm+0x39/0x70 [ 411.113227][ T31] ? __switch_to_asm+0x33/0x70 [ 411.117999][ T31] ? __pfx_kthread+0x10/0x10 [ 411.122612][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.127701][ T31] [ 411.130896][ T31] INFO: task kworker/1:6:5952 blocked for more than 143 seconds. [ 411.138760][ T31] Not tainted syzkaller #0 [ 411.143832][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.152509][ T31] task:kworker/1:6 state:D stack:23304 pid:5952 tgid:5952 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 411.165031][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 411.171739][ T31] Call Trace: [ 411.175147][ T31] [ 411.178096][ T31] __schedule+0x1798/0x4cc0 [ 411.182629][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 411.188156][ T31] ? __pfx___schedule+0x10/0x10 [ 411.193198][ T31] ? schedule+0x91/0x360 [ 411.197569][ T31] schedule+0x165/0x360 [ 411.201759][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.207403][ T31] __mutex_lock+0x7e6/0x1350 [ 411.212040][ T31] ? __mutex_lock+0x5bb/0x1350 [ 411.216880][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 411.223254][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.228299][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.234109][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.239864][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 411.246248][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 411.252016][ T31] process_scheduled_works+0xae1/0x17b0 [ 411.257692][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.263927][ T31] worker_thread+0x8a0/0xda0 [ 411.268566][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.275076][ T31] ? __kthread_parkme+0x7b/0x200 [ 411.280043][ T31] kthread+0x711/0x8a0 [ 411.284281][ T31] ? __pfx_worker_thread+0x10/0x10 [ 411.289412][ T31] ? __pfx_kthread+0x10/0x10 [ 411.294075][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.299291][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.304703][ T31] ? __pfx_kthread+0x10/0x10 [ 411.309350][ T31] ret_from_fork+0x4bc/0x870 [ 411.314009][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 411.319138][ T31] ? __switch_to_asm+0x39/0x70 [ 411.324077][ T31] ? __switch_to_asm+0x33/0x70 [ 411.328930][ T31] ? __pfx_kthread+0x10/0x10 [ 411.333628][ T31] ret_from_fork_asm+0x1a/0x30 [ 411.338456][ T31] [ 411.341542][ T31] INFO: task syz.2.2170:13993 blocked for more than 143 seconds. [ 411.349458][ T31] Not tainted syzkaller #0 [ 411.354753][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.363590][ T31] task:syz.2.2170 state:D stack:26184 pid:13993 tgid:13984 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 411.375622][ T31] Call Trace: [ 411.378933][ T31] [ 411.381875][ T31] __schedule+0x1798/0x4cc0 [ 411.386756][ T31] ? validate_chain+0x897/0x2140 [ 411.391743][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.396738][ T31] ? __pfx___schedule+0x10/0x10 [ 411.401654][ T31] ? schedule+0x91/0x360 [ 411.406037][ T31] schedule+0x165/0x360 [ 411.410216][ T31] schedule_timeout+0x9a/0x270 [ 411.415122][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 411.420518][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.425866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.431276][ T31] ? wait_for_completion+0x267/0x5d0 [ 411.436635][ T31] wait_for_completion+0x2bf/0x5d0 [ 411.441837][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 411.447664][ T31] ? __flush_work+0xd2/0xbc0 [ 411.452281][ T31] ? __flush_work+0xd2/0xbc0 [ 411.456956][ T31] __flush_work+0x9b9/0xbc0 [ 411.461508][ T31] ? __flush_work+0xd2/0xbc0 [ 411.466336][ T31] ? __pfx___flush_work+0x10/0x10 [ 411.471380][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 411.476993][ T31] ? __pfx___cancel_work+0x10/0x10 [ 411.482164][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 411.487973][ T31] __cancel_work_sync+0xbe/0x110 [ 411.493142][ T31] rfkill_unregister+0x92/0x220 [ 411.498056][ T31] nfc_unregister_device+0x96/0x2a0 [ 411.503508][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 411.509285][ T31] virtual_ncidev_close+0x56/0x90 [ 411.514425][ T31] __fput+0x44c/0xa70 [ 411.518464][ T31] fput_close_sync+0x119/0x200 [ 411.523506][ T31] ? dnotify_flush+0x1db/0x5e0 [ 411.528292][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 411.533649][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 411.538971][ T31] __x64_sys_close+0x7f/0x110 [ 411.543816][ T31] do_syscall_64+0xfa/0xfa0 [ 411.548383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.554526][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.560654][ T31] ? clear_bhb_loop+0x60/0xb0 [ 411.565504][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.571450][ T31] RIP: 0033:0x7f076b78f749 [ 411.576022][ T31] RSP: 002b:00007f076c5a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 411.584643][ T31] RAX: ffffffffffffffda RBX: 00007f076b9e6090 RCX: 00007f076b78f749 [ 411.592693][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 411.600790][ T31] RBP: 00007f076b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.609099][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.617144][ T31] R13: 00007f076b9e6128 R14: 00007f076b9e6090 R15: 00007ffc3da02d08 [ 411.625274][ T31] [ 411.628352][ T31] [ 411.628352][ T31] Showing all locks held in the system: [ 411.637566][ T31] 2 locks held by ksoftirqd/0/15: [ 411.642639][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 411.653179][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 411.662142][ T31] 1 lock held by khungtaskd/31: [ 411.667137][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 411.677067][ T31] 4 locks held by kworker/1:2/1211: [ 411.682284][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.693535][ T31] #1: ffffc900039efba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.706014][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 411.721773][ T31] #3: ffff888025796100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 411.731884][ T31] 2 locks held by getty/5588: [ 411.736771][ T31] #0: ffff88802f7460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 411.746742][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 411.757099][ T31] 1 lock held by syz-executor/5827: [ 411.762332][ T31] #0: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 411.772738][ T31] 1 lock held by syz-executor/5828: [ 411.778153][ T31] #0: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 411.788538][ T31] 1 lock held by syz-executor/5835: [ 411.793908][ T31] #0: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 411.804543][ T31] 3 locks held by kworker/1:6/5952: [ 411.809772][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.820921][ T31] #1: ffffc9000ace7ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.834755][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 411.846202][ T31] 1 lock held by syz.2.2170/13993: [ 411.851313][ T31] #0: ffff888025796100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 411.861408][ T31] 3 locks held by syz.4.2294/14450: [ 411.866777][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 411.875433][ T31] #1: ffff88803e724100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 411.885156][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 411.895312][ T31] 1 lock held by syz-executor/14457: [ 411.900627][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 411.916434][ T31] 1 lock held by syz-executor/14460: [ 411.921757][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 411.930491][ T31] 1 lock held by syz-executor/14462: [ 411.935959][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 411.944638][ T31] 1 lock held by syz-executor/14463: [ 411.949967][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 411.958500][ T31] 1 lock held by syz-executor/14465: [ 411.963948][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 411.972474][ T31] 1 lock held by syz-executor/14467: [ 411.977923][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 411.987004][ T31] 1 lock held by syz-executor/14471: [ 411.992317][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 412.000842][ T31] 1 lock held by syz-executor/14472: [ 412.006188][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 412.014695][ T31] 1 lock held by syz-executor/14473: [ 412.019984][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 412.028546][ T31] 1 lock held by syz-executor/14475: [ 412.033992][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 412.042511][ T31] 1 lock held by syz-executor/14477: [ 412.047889][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 412.056458][ T31] 1 lock held by syz-executor/14481: [ 412.061778][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 412.070300][ T31] 1 lock held by syz-executor/14482: [ 412.075643][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 412.084147][ T31] 1 lock held by syz-executor/14483: [ 412.089432][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 412.097948][ T31] [ 412.100292][ T31] ============================================= [ 412.100292][ T31] [ 412.108767][ T31] NMI backtrace for cpu 1 [ 412.108789][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 412.108806][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.108815][ T31] Call Trace: [ 412.108822][ T31] [ 412.108829][ T31] dump_stack_lvl+0x189/0x250 [ 412.108857][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.108878][ T31] ? __pfx__printk+0x10/0x10 [ 412.108904][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 412.108925][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 412.108945][ T31] ? __pfx__printk+0x10/0x10 [ 412.108964][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.108991][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 412.109011][ T31] watchdog+0xf60/0xfa0 [ 412.109031][ T31] ? watchdog+0x1e2/0xfa0 [ 412.109050][ T31] kthread+0x711/0x8a0 [ 412.109074][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.109089][ T31] ? __pfx_kthread+0x10/0x10 [ 412.109110][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.109131][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.109152][ T31] ? __pfx_kthread+0x10/0x10 [ 412.109173][ T31] ret_from_fork+0x4bc/0x870 [ 412.109191][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 412.109212][ T31] ? __switch_to_asm+0x39/0x70 [ 412.109224][ T31] ? __switch_to_asm+0x33/0x70 [ 412.109235][ T31] ? __pfx_kthread+0x10/0x10 [ 412.109256][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.109283][ T31] [ 412.109288][ T31] Sending NMI from CPU 1 to CPUs 0: [ 412.255160][ C0] NMI backtrace for cpu 0 [ 412.255193][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 412.255214][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.255227][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 412.255256][ C0] RIP: 0010:__lock_acquire+0x893/0xd20 [ 412.255276][ C0] Code: 83 3d d4 c6 df 0d 00 0f 85 36 02 00 00 48 83 7c 24 28 00 0f 84 bc 01 00 00 41 8b 46 f8 25 ff 1f 00 00 48 0f a3 05 dd d5 d8 11 <0f> 83 5a 01 00 00 48 69 c0 c8 00 00 00 48 8d 80 30 33 17 93 e9 87 [ 412.255292][ C0] RSP: 0018:ffffc90000127268 EFLAGS: 00000003 [ 412.255307][ C0] RAX: 0000000000000808 RBX: 0000000000000004 RCX: 0000000098344ba7 [ 412.255319][ C0] RDX: 000000004f878faa RSI: 00000000e682a5bf RDI: ffff88801cae0000 [ 412.255331][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81738c45 [ 412.255342][ C0] R10: ffffc900001274c8 R11: fffff52000024ea5 R12: 00000000c5182a25 [ 412.255355][ C0] R13: ffff88801cae0b30 R14: ffff88801cae0bd0 R15: e05b9dab98344ba7 [ 412.255369][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 412.255384][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.255395][ C0] CR2: 00007f711e2149b7 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 412.255411][ C0] Call Trace: [ 412.255418][ C0] [ 412.255429][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.255450][ C0] lock_acquire+0x120/0x360 [ 412.255467][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.255489][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.255511][ C0] ? __unwind_start+0xf8/0x760 [ 412.255532][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.255551][ C0] unwind_next_frame+0xc2/0x2390 [ 412.255571][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.255591][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.255613][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.255633][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 412.255658][ C0] __unwind_start+0x5b9/0x760 [ 412.255681][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.255706][ C0] arch_stack_walk+0xe4/0x150 [ 412.255730][ C0] ? __unwind_start+0xf8/0x760 [ 412.255753][ C0] stack_trace_save+0x9c/0xe0 [ 412.255776][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 412.255800][ C0] ? chacha_block_generic+0x53/0xc80 [ 412.255828][ C0] kasan_save_track+0x3e/0x80 [ 412.255881][ C0] __kasan_save_free_info+0x46/0x50 [ 412.255902][ C0] __kasan_slab_free+0x5c/0x80 [ 412.255929][ C0] ? skb_release_data+0x62d/0x7c0 [ 412.255948][ C0] kfree+0x19a/0x6d0 [ 412.255974][ C0] skb_release_data+0x62d/0x7c0 [ 412.255997][ C0] consume_skb+0x9e/0xf0 [ 412.256021][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 412.256052][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 412.256072][ C0] process_scheduled_works+0xae1/0x17b0 [ 412.256105][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.256132][ C0] worker_thread+0x8a0/0xda0 [ 412.256164][ C0] kthread+0x711/0x8a0 [ 412.256188][ C0] ? __pfx_worker_thread+0x10/0x10 [ 412.256207][ C0] ? __pfx_kthread+0x10/0x10 [ 412.256231][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.256255][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.256280][ C0] ? __pfx_kthread+0x10/0x10 [ 412.256303][ C0] ret_from_fork+0x4bc/0x870 [ 412.256321][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.256342][ C0] ? __switch_to_asm+0x39/0x70 [ 412.256356][ C0] ? __switch_to_asm+0x33/0x70 [ 412.256369][ C0] ? __pfx_kthread+0x10/0x10 [ 412.256392][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.256416][ C0]