last executing test programs: 2m47.714776845s ago: executing program 0 (id=1589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2m47.610218818s ago: executing program 0 (id=1590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000006c0)=0x6, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') socket$netlink(0x10, 0x3, 0xb) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffd87, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000bbeaeac01e3334893abdcb00162f00", @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x20048054) r5 = socket$netlink(0x10, 0x3, 0x0) bind(r5, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000100003050400"/20, @ANYRES32=0x0, @ANYBLOB="95e36cff85bd6bdae6d4000022a7326eb2e82e08"], 0x28}}, 0x4) socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48243, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0xfce) 2m47.378220705s ago: executing program 0 (id=1594): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000100000000004a7c00ffe930ac0000000000b5f000"/32], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) (async) r1 = socket(0x1e, 0x4, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$can_raw(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/70, 0x46}], 0x2}, 0x2) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000006c0)={0x0, @loopback, @multicast1}, &(0x7f00000000c0)=0xc) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x40, 0x6, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8, 0x7, 0x8, 0x2}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x1, 0x1000, 0x1, @loopback, @local, 0x7850, 0x40, 0x7fffffff, 0xfc22}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000380)=0xc) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2, 0x75, 0x6, 0xa, 0x21, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x1, 0x7800, 0x2, 0x10000}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf250d0000004c00018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB='\b\x00g\x00', @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="400001800800030002000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="0800030002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) (async, rerun: 64) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async, rerun: 64) r16 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r17 = socket$unix(0x1, 0x5, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x490, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r18, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x464, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x929, 0x1007, 0xffffffb2, 0x6, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x5, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x6, 0xfffffff9, 0xd, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xf6, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x4, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x40003, 0x8, 0x8, 0x5, 0x2, 0x1, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xb, 0x5, 0x8000, 0x8b, 0x6, 0x6, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x6, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x4000002, 0x4, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0x7, 0xb, 0x6, 0x4, 0x7ffffffd, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x3, 0x4a4, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xff, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0xe2, 0xee3, 0x202005, 0x4, 0x8, 0x8, 0x1000, 0x7, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x6, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x2, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x1ff, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x2, 0x100, 0x7, 0x3, 0xfffffff9, 0x4, 0x20001, 0x1003, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x5, 0x92, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r11}, 0xc) 2m47.196809689s ago: executing program 0 (id=1596): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b33, &(0x7f0000000040)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf250d000000060008000000000006000a0003000000050017000300000005000700140000000500180040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b0600000000000000003000000008000200", @ANYRES32=r7, @ANYBLOB="05003500050000000500330003000000"], 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020028bd7000fddbdf25210000000c00060001000000010000000c002d80050004000000000008000300", @ANYRES32=r7, @ANYBLOB="0800030018c0ea67337f984a9197ceae2c23b20afefc81b044bbad9b83476994d3e203f8b4e31528c8ea6c7cb0dde7a99f15cdeaa8e2715a2ff5935bc48895f2e65546dabb5bff31b0108afbc668c9346b1ae3d9481a51847fcfbb435627a37810b8c4312d7a476233f7fe6926c4607cf088e199cc901a52b2bbc251efb843ef86c472bed969bab31d78aec46f1180bf9b44b2956d4fc3e6acb8c65e38d62030c00900000000000000000000000000277951b09b3076f84c877fa98c35f579016b3c4bcf161181cbb64f2152bdbe4a50e74847a8bfd0d09ecdb36bdc13b9a122c044db2ec328e3c9c6f751cad8", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x82) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x29, 0x4, 0x5, {0x7, @usr_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x80000001, 0x4}, {0x0, @remote, 0x4, 0x2, [0x4, 0x9]}, @udp_ip4_spec={@broadcast, @local, 0x4e23, 0x4e20, 0x8}, {0x0, @random="f49f795667e2", 0xb, 0x2, [0x4, 0x4]}, 0x7, 0x6}}}) (async) socket$kcm(0xa, 0x3, 0x87) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r11, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m47.017293267s ago: executing program 0 (id=1600): select(0x20000048, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfe93, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESDEC=0x0], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="f7000000", @ANYRES16=r3, @ANYBLOB="1c032bbd7000fddbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099006ecd0000340000000a001800030303030303000008000500010000000a00180003030303030300000a0018000303030303030000080005000300000005005300010000002c001780040001000400010004000100040005000400030004000500040004000400060004000200040005000a00e8000802110000000000040017801c00e70014eeec7f368c1ac46519e1842b895a029eecd7bd524ba6c50a00e80008021100000000001c00e70077e39bc8c995ffd68bf65f446af1623a3b81e8505ab4c5c30800178004000500"], 0xec}, 0x1, 0x0, 0x0, 0x4c091}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$kcm(0x23, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x22, 0x0, &(0x7f00000002c0)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0xfc1, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01005bf2ffffffffffff1208080000000000", @ANYRES32=r9, @ANYBLOB="04006e800c0050800400060004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x48000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000ffef02ebdc56c51708aae51fb08faf7f1989e0c480a08acea14cb37bb34c1bde1ca75a60a664ab879323027a630ae7090f0e8203b10537cc8cd0381b6c5a6d975996e257ca6edb49ae47f7c3bd460d55bf0a00000000000000ed77337b3a5836df36717fd62c4266ff7d713519e51cd0be3b623591d1e7521f365190ac81e7831da343", @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf25380000000c009900be05000078000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20004081) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) 2m46.538922936s ago: executing program 0 (id=1607): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002600010028bd7000fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x60048840}, 0x20000000) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) (async) close(r0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008007c6ff959340017375b6ab41173566a4c4603004e00640000da2f9078ac141f543431eec4adb0bc000421880b0000000305000000042086dd080088be0000007a89009304010000e9fffffffd080022eb00000001210169050200000000000006100072020801005800000000"], 0x0) 2m41.526472985s ago: executing program 4 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) close(r0) (async, rerun: 32) close(0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x150, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0xe7, 0xc, "e5a0a42ea85d8b1ecef52db61f41d17a5c455563d24786400d84ef47c562b27a2c760e74d80fd7d571feaa01c26f8017d53e9a4b611efbc0a08302e260b719a37fc165b97b5da257bb42ea948655004ab37031bbd9a0005bda03ba2e16006c5e87d2611fd24d7b4671d38094b959c1d15b6540e811d57fee255ece5eeea17f679465df3ed16810e123e031ba8b257ed22a4d06afecfb82024b8cf7744d5b2aa093fd2e0b3b9fe648f442f5761f6d3e35870f5a6461ac13cc112e28386ceb5f8381797ce4eeb81e7973a2e5a462389a8483a83970dd43ee92bb49092f96d52eba058592"}]}, 0x150}, 0x1, 0x0, 0x0, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200000000310000000008000a40fffffffc08000340000000140c0009800800014000000081140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m41.420638075s ago: executing program 4 (id=1695): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)=0xf) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x80, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7bd}, @initial, @broadcast, @from_mac=@device_b, {0x3, 0x6}, "", @void, @value=@ver_80211n={0x0, 0x91b, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x51, "1fa5956ce52c36e2b29a953c3fc9e593fb2a047d8f25b0724519f522797b4fb07427f794ba0d1df5db0554f1c80ebbf9c07047bb20be26cb7fdf68491a1cde69be4e7d53839d73d235b06230b46fb49570"}]}}, @NL80211_ATTR_FRAME={0x127, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @initial, {0x4, 0x8f0}, @value=@ver_80211n={0x0, 0x5f9, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2, @random=0x8, 0x8000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xaf}, @val={0x4, 0x6, {0x1, 0xfe, 0x4, 0xb}}, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x0, 0x0, {0x100, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x0, 0xf9}}, @val={0x72, 0x6}, @void, [{0xdd, 0xc2, "b5d35f3d2e1d53a2cb4530b598c1427ae02186265d8aaa7574d0947d801173d36cd2dd2ebeb84ca2c1fb965a6b8e9eee589813ed98330d66b2a61ceec7cfb1b6b963020545b449a5acad67bd73b762bf4d194d03315d276e6a37c9c802232c0f68b430274cb2d82e6a40d3e78c11a6efc9ba03fc124f7b44f36c3efd95b645097101caacc7791979bc7bb17295e04381985aa7830ae2cd7124934a7de7b65b22652de10cc492402906c1cb7f5f739d3d39950fa73c1de2aa3695e3f0035776c8b7f0"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x24045080}, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff257e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x92db}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'bond_slave_1\x00', &(0x7f0000000600)=@ethtool_pauseparam={0x13, 0x3, 0x8000, 0x9}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000006c0)=""/161) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', r2}, 0x18) r4 = accept4$nfc_llcp(r2, &(0x7f0000000800), &(0x7f0000000880)=0x60, 0x80000) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f00000008c0)={0x3}) bind$inet6(r2, &(0x7f0000000900)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) r5 = socket(0x10, 0x1, 0x200) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BTRFS_IOC_ENCODED_WRITE(r5, 0x40809440, &(0x7f0000000c80)={&(0x7f0000000c40)=[{&(0x7f0000000a80)="6e9432802eaa18b20ac27595812a76dd6f2e25cf3b4eb1f264cb31e8db06aecf478869fc220c0f07b12ae79d32f6e3336574bc8da32a7603a562e25d5c4b6c7a3d6fa8ae4ddc7f2fc8a4884a29c835a255c46e469dbd5555289c7049d63d7a43d587006feaa445a64c01536e7fc2025c1b8ec566fbd723df5716cb7cc798daace6179f", 0x83}, {&(0x7f0000000b40)="3a5359bf2f434549f71210531c315f4bf200a5382426aab813042fc47d471fc02ff580c3c207d6fdcef2a10d02dc5a745f7991a6f1", 0x35}, {&(0x7f0000000b80)="74e16d2e6ac494c61867bc1bca19f3e11ec83a046d37e179c74add90a570d1a65d04e2d97417cfc7e973641bcac76e8fe4f27f20ee3f8b285a6fa67f4de5ef503baa78cd62e64fd431b035f6f660e1f8df9cce44fb0d8ebbbd609739505a2dcf6b8b3845dd97cd345f853b77dbffdbc7754cfd16a8fe28ebd6ad19b0ffbd0c14f33c8c8d978f0f83968561dfbcbedb15f60ea61ce2", 0x95}], 0x3, 0xee, 0x0, 0x9f65, 0x8, 0xcfbc, 0x4, 0x3}) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), 0x4) r6 = accept4$inet(r2, 0x0, &(0x7f0000000d40), 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000d80)=@int=0x80, 0x4) syz_emit_ethernet(0xbb, &(0x7f0000000dc0)={@remote, @remote, @val={@void, {0x8100, 0x3}}, {@mpls_uc={0x8847, {[{0xffffa, 0x0, 0x1}, {0x8001}], @generic="ff571ffae81c5bf8501dff09e5db83416315c2e7428e3404a3377e0886522aebad3bc885f10e4e302860212a3147a91ad6636f2de34bccb3aa2ad6b4f8462b063037b3e10b67fcd3859720a7fa492ec6ccee20bac5d742be871f971fadd61fe1ea6155fc54e369e245d60c6c79c3426fadbef478f8eed9014e145f023386b27ed1aa9864a3d89c10c8c58c7bc4d81e56337cf25e836a4eda0dc2d3a8e952b7102a"}}}}, &(0x7f0000000e80)={0x0, 0x1, [0x948, 0x945, 0x308, 0xfb4]}) r7 = openat$cgroup(r2, &(0x7f0000000ec0)='syz0\x00', 0x200002, 0x0) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f00)={r2, r7, 0x2, 0x0, @void}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000f40)) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000f80)=0x200000) r9 = openat$cgroup_ro(r8, &(0x7f0000000fc0)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x8c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "29d680c595f829e79477b04666"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "23b4"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3e8d42021da37b5cccba5cec4d"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001280)={0x0, @loopback, @loopback}, &(0x7f00000012c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0xa, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}]}, &(0x7f0000001200)='syzkaller\x00', 0x800, 0x20, &(0x7f0000001240)=""/32, 0x41100, 0xa, '\x00', r10, 0x25, r9, 0x8, &(0x7f0000001300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001340)={0x3, 0x9, 0x8, 0x625}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001380)=[r2], &(0x7f00000013c0)=[{0x3, 0x5, 0x5}, {0x1, 0x4, 0xe, 0x1}, {0x4, 0x3, 0x4, 0x9}, {0x1, 0x3, 0x10, 0x7}, {0x4, 0x4, 0xe, 0x3}], 0x10, 0x7f}, 0x94) 2m41.271586205s ago: executing program 4 (id=1698): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000840), 0x2, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) accept4(r4, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x80, 0x0) connect$netlink(r2, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x8020020}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0xc048080}, 0x0) 2m41.161511842s ago: executing program 4 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00ffffffffffff18ca000000003571000000000015", @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040002800800040060000000"], 0x3c}}, 0x0) 2m40.936808084s ago: executing program 4 (id=1704): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x11c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cd0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async, rerun: 32) close(r0) (async, rerun: 32) syz_emit_ethernet(0x20e, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x33, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x1, 0x52, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1ce"}]}]}}}}}}}, 0x0) (rerun: 32) 2m40.775314251s ago: executing program 4 (id=1706): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r4, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}]}, 0x24}}, 0x20004800) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x25}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "4efd7398659585"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d0d1ab433ef6541ef1567ad5dd"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040005) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x118, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0124000000187322c1240000000a000000080000000200000fffffffff0e000000000000000300000007fb000003000000000000000000000000004fe4530f9e0f957e262861564e77b3781c2811334770ddac52f811871dc59b682f0a38564a2a5bbd02129893ed741ddc9211fff3990f83dde971867aed218b8e7af3c2b43f9cbf981fd2d51fbf1a61f678d1131dbc58cb48b586feca24f5b1df48e0afdf98"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0124000000187322c1240000000a000000080000000200000fffffffff0e000000000000000300000007fb000003000000000000000000000000004fe4530f9e0f957e262861564e77b3781c2811334770ddac52f811871dc59b682f0a38564a2a5bbd02129893ed741ddc9211fff3990f83dde971867aed218b8e7af3c2b43f9cbf981fd2d51fbf1a61f678d1131dbc58cb48b586feca24f5b1df48e0afdf98"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m31.495392337s ago: executing program 32 (id=1607): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002600010028bd7000fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x60048840}, 0x20000000) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) (async) close(r0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008007c6ff959340017375b6ab41173566a4c4603004e00640000da2f9078ac141f543431eec4adb0bc000421880b0000000305000000042086dd080088be0000007a89009304010000e9fffffffd080022eb00000001210169050200000000000006100072020801005800000000"], 0x0) 2m25.694961631s ago: executing program 33 (id=1706): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r4, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}]}, 0x24}}, 0x20004800) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x25}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "4efd7398659585"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d0d1ab433ef6541ef1567ad5dd"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040005) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x118, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0124000000187322c1240000000a000000080000000200000fffffffff0e000000000000000300000007fb000003000000000000000000000000004fe4530f9e0f957e262861564e77b3781c2811334770ddac52f811871dc59b682f0a38564a2a5bbd02129893ed741ddc9211fff3990f83dde971867aed218b8e7af3c2b43f9cbf981fd2d51fbf1a61f678d1131dbc58cb48b586feca24f5b1df48e0afdf98"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0124000000187322c1240000000a000000080000000200000fffffffff0e000000000000000300000007fb000003000000000000000000000000004fe4530f9e0f957e262861564e77b3781c2811334770ddac52f811871dc59b682f0a38564a2a5bbd02129893ed741ddc9211fff3990f83dde971867aed218b8e7af3c2b43f9cbf981fd2d51fbf1a61f678d1131dbc58cb48b586feca24f5b1df48e0afdf98"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.076036024s ago: executing program 3 (id=3534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) 1.717790054s ago: executing program 3 (id=3539): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) 1.503758468s ago: executing program 3 (id=3543): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000380)=""/137, &(0x7f0000000200)=0xfffffffffffffeea) 1.432427131s ago: executing program 1 (id=3545): socket$kcm(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x10a, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xd4, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [@hopopts={0x2f, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x48, {0x1, 0x10, 0x2, 0xff, [0x4, 0x3, 0x6, 0x4bc8, 0x7, 0x7fffffff, 0x80000000, 0xc]}}, @generic={0x10, 0x31, "0557e35fe3b61d6fda77e7e2ed7e5a98f3ec5f9b78e692cb379098977e714339ebd5e8e443cfcbcd77525b1ef014227a58"}]}, @fragment={0x32, 0x0, 0x8, 0x1, 0x0, 0x16, 0x67}], "fb36eeca6ead50b375a22a58"}}}}}}}, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x2010, 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x60bd2c, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.432153089s ago: executing program 2 (id=3546): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xf9b, 0x4) listen(r2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010102, 0x4e20, 0x0, 'dh\x00', 0x20, 0xff, 0x35}, 0x2c) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x8, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f00000003c0)=0x9, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x32, @local, 0x4e23, 0x1, 'lblcr\x00', 0x10, 0x6, 0x4f}, {@rand_addr=0x64010100, 0x4e21, 0x1, 0x1, 0x10, 0x8}}, 0x44) 1.36856483s ago: executing program 6 (id=3547): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x19, 0x30, 0xeaa3ef926154e70d, 0x0, 0x5dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x1e}, {0xc, 0x7, {0x1}}, {0x2}}}]}]}, 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) connect(r0, &(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4}}, 0x80) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r2, &(0x7f0000000180)="d003019facfddd0238346dc1799d958624d633f55d1a573eb1fe41613b97ad136c3ef43f171aa5879e4dbcdf8ff68d185a34c349b3468169a6ab5572cd242f80532feff6cf9f26d06eade940dc915f84544b722d5bb9cf6f28b2be9d4e3d32838d5fd1a251dbcda95507c0400b73018ac990518a7f5d3ffb8a417a", 0x7b, 0x4000000, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x1, 0x3, {0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}, 0x80) 1.308469177s ago: executing program 3 (id=3548): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140a, 0x200, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x140b, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000811}, 0x88016) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x7, 0x1, 0x4, 0x3, 0x4, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @alu={0x4, 0x1, 0x6, 0x7, 0x8, 0x30, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x1f, &(0x7f0000000440)=""/31, 0x41000, 0x21, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0x2, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000800)=[{0x5, 0x3, 0xe, 0x1}, {0x4, 0x2, 0x9}, {0x4, 0x1, 0x0, 0x2}, {0x2, 0x5, 0xf}, {0x4, 0x4, 0xf, 0x8}, {0x0, 0x4, 0xf, 0xb}], 0x10, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x10, 0x1402, 0x10, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40045) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000a40)={{r4}, "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"}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000001a40)={0x190, 0x4, 0x1, 0xffffffff, 0x81, 0x5}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001b40)={&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, &(0x7f0000001a80)=""/80, 0x50, 0x0, &(0x7f0000001b00)=""/45, 0x2d}, &(0x7f0000001b80)=0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001c40)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x4, 0x5}, {0xe, 0x5}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040004) sendmsg$rds(0xffffffffffffffff, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001d80)=""/88, 0x58}, {&(0x7f0000001e00)=""/134, 0x86}, {&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000001f00)=""/141, 0x8d}, {&(0x7f0000001fc0)=""/124, 0x7c}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/3, 0x3}], 0x7, &(0x7f0000003200)=[@fadd={0x58, 0x114, 0x6, {{0x7ff, 0xb}, &(0x7f0000003100)=0x8, &(0x7f0000003140)=0x4, 0x2, 0x6, 0x8, 0x7fffffffffffffff, 0x5, 0x382}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}, @rdma_dest={0x18, 0x114, 0x2, {0xb, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003180)=""/44, 0x2c}, &(0x7f00000031c0), 0x8}}], 0xb8, 0x10}, 0x43) r8 = socket(0x2, 0x800, 0x8) close(r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000003340), r8) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000003440)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x48, r10, 0x400, 0x200, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x804) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000003480)={0x0, 'veth1_to_bond\x00', {0x3}, 0x1}) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000034c0)) r11 = socket$alg(0x26, 0x5, 0x0) r12 = gettid() bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003700)={{r2, 0xffffffffffffffff}, &(0x7f0000003680), &(0x7f00000036c0)='%-5lx \x00'}, 0x20) r14 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003740)=0x0) sendmmsg$unix(r8, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003500)="0b81b87268184b49df2e3fdd0c67f811872828ca8b161ae1b16150871951f1abddb16fdcb379169b5cc516041484b2c99d097cc8345cd3015949b11063a6f6124a455bd80fd69c07cf7690383418101137768f49979b5ed5f0235ef0d12f83bc3693516a7a2c6333b7515358af6dac97d7a43ce9dd82a347b0327a5d1379fc860e96758a70dc0b75fa05459f4fbb9bcc2e37b5b1fa98c55edc1f14393fe2513042eb5d", 0xa3}, {&(0x7f00000035c0)="faae6bab6d0597154b52b46b36da7f01601f7dcf30cbac72bb1920878b5d74ae53db971c9bf2256962044866bd4c35fa3d9043735cf37cdac3e0c177726c9513d7a4b31629213f32ed6f69ba4920e22214e8296919d2a774f7c44e06e32267b50c3bf28b91db02278b88fcaee63f", 0x6e}], 0x2, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, r9, r8, r0, r13, r2, r11, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r11, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0, 0x4085}}, {{&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003bc0)="bff645534b850d638fc30cf4a23cbea998fe52d16f7953c09d5a52dadd76df3e6582fb057bb5b9080e297b546966c0c5c551f8c35f6b0ebc9ab88b42a1cf1b3bc23fc424aff5ccefde242afb7c6f4729f68d2cdd7f00f7a11c28c6b43ac17a5f96b7dd73ff8943de4f3043a99d9dbcc2720784f64e4ead189a72d8bf06601feca5fa08b21cb04fef610a00d411b35300438319d4e6edf5e73fc285e52a2dab266d5e0213", 0xa4}, {&(0x7f0000003c80)="9b576c2d13665727ab2661771ace0e598bb1be2608bc6fe707e9a7229085ea10f3d38e0dee48df0dd26f1d6ec4f130a2976fc0c5d046cdf0a2256676abe9a24375ce8bba9afe6c0286b03e634cd3b0b63c8e15cfbe267b636b5355aa2172ac371ebbdef9dd2a66b44b8a92bdf53fc7e803c4c39583c05a256fef5bbc8482d8c0c56e1be537b57c67ca09b0ce4e8e6cab34844bb0a6c7205f1164b27e8b21cdfc6e969b7cb2b5a15228a393e70282df0a32e858cae1", 0xb5}, {&(0x7f0000003d40)="bb0bebf230363a58b2a43c6a706542724b60046d3450e883331ac2487928770543a3c76d41995f7b600dc7c85425d6ec8531c849de013d5ea86deacc57fbb41e84b871af3e356b6e2b888a994217220616cde520fb14f711f3622646eb0fb057c29a09d82113d080aa243ed717bfefcac12d79b0eab60c31484d33a8fcf3413e6e838ff71fc74ddf891b2d5e6a7fbe540fa1b5", 0x93}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="88c2f3ed3208b66c8f60d4763a0cac7ea59e06ca3282b132f532717b6e84c50828620e2de2bcca24f4b2e8e8ebefe414eb278c9aee7a0ac993ddf2370ef39185f3a2966795544c83d5fba9", 0x4b}], 0x5, &(0x7f0000004f00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x40040e0}}, {{&(0x7f0000004f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005080)=[{&(0x7f0000004fc0)="ac6b91676a164f80b7f38bae1d3187954637e334c3576fb7d506c0f81ed7f4a2f018f3bb46e4eb1d43751cb294807248698819fa84c5c3f138f7250b5744177dcde4b7bf4650885b692eda56378f7b9a2b01fc11bab460a04e34983b53b6b38b3fa61e6c289540b79ef64bc40b6fb4e3bcdd215bbd873ae6cd2de4d1ed88b7bbfa25f9d4bfc1beb6a0565ecf51f68e6763a11798c0bbaff61321", 0x9a}], 0x1}}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f00000050c0)="321ff8da8ef57065548ad6a6ab26da7673b053bc977bb2b245142ca94c959bf9c62dd3cd1208518d0a652d7eb6a9f76fa4389cdd97990dc5085ec80480c4859cee9e055ef6097fdefd11ff2867c12fea", 0x50}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000005180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000063c0)=[{&(0x7f0000005200)}, {&(0x7f0000005240)="4115fbb9f121dac29dc5eb", 0xb}, {&(0x7f0000005280)="c513639b637c7b4ce7929f807052045b28a38be761829aebe2ab2b9ffd5278bf463b2892680296d737cb0bbb91bcd2c23e29f527610c08c838008bf949da47149857e7743cd013628c1a23e0d3257d2d67e8ad12cf651c2bb6aea707243697fdc526faff373a56ee6edd7302ef151932ef925f3ea8725120dd711889f3838c45ac5713507e28b0aa6b9ec9a42a7ebb47cdc6cff6512e6777253e6527ae461d5645dc8f96822550c4e041a53205ee8cae232db398", 0xb4}, {&(0x7f0000005340)="f7a927a8e99ef207bb3a75f6541193a2d1840a93b3a6a62a7700fd1651598973671b0484f352e2cc0428d23ee95cb11b100a2fb5732c9fac54ca130200283bf5c8eac8f5b8ff322d929b87d0c0c6edd2d21ab590bd0d972d37f2b7985f00c9ac0cdb3aeeb48ab0c4ae2fd4666a845602ae165ec08eb69ca0afde866e4f571da46c1b1fe8c6c5b0f7545fab8f90d3cc9d70334f500bb13d65f532c9de7dba73b34725e489dbb6d9e6754c3fdc5002e758d8719a9ac44a9a524a9145984268bf53507333a0653ae63b258a33aadd0b8c2a11662efa74f2215de37d3cd3ae7b8025c16520ff6af25e16f79a837a5a35f74cd39fbb7e1cc6a492e262b59073526046ab81687c8c0033d25e9bace56f9318ac49b66ae55e89f550d70d30045db8b2aa3b913fba89c7c889690b3d06f9300ebbc49a3afc5f8148533259b3a8e595828c9284ba82710ba8525e99de3fac4dbdd6ef8e189cc3cb0883ba9d00b44f776fe5427652526d54a7a5f33f507f9cdfc44e48fb79404caa932fa3ab41d48fd14585ed9aee0526ff4a6958e62b1261d7a8359f9b5e3c437b8834fc60a0c18b49c4ee7833d0143b9568f12b08966542f936bf9bd9c464fa2dbb340e19d7263dd29cd33b849d399816c3599886bad80145ff978b1c7eee31210da8794e7f5b0bea14546212f128434e3936f63a64b00f7e8ee2b2dc8900d38f708c7edf489549c05222028247c2a2535ea257085cb4c7ada94fb489f56a6ba21965c1f1fbea8de1e5388abacff4d9e1153bfd2e21808286695d16da5be4e507820f5730da3357279885e002ff62aaa69f9e980ee94a2b0ae5466cd429ed875f9856768c4d77325ec1b4801637013bb5d3c4bd309355c5e21941694d0a06f9137f1ea5f155a1d925532c6a4c7f6c922f77985875ea2b3040ed56901c506232c6ab9f336be82b3a9dcc70206891173b75a81bcf83316187781b96082dc38d21d3c2a0e4e2a0f5650ca6429bd6c779eeaaf26964e37f41aa94d54bea99452bef34b772371ff40a2f1fe96bb2aa0445b4e219620825de0f2fd8878487b162fdd981b42e68c018e26b8232d608976564b7ac76e5d8bdbc999731182b949d1d0b0c3ca6a8339da19f1d8701fac2e7295ba451dd3eeff59bd9f61a0cf79eb8b443e7fa3ff8b83901cffc03ac2bc236d9c5d7431e7aaadaaa35684f746c259c801b294f3881004d9e5c9d8b5191c8d550b6edba32f6f22272bc0b4a0b0b6bebfc958b3006aad1ee34f10e788d54d2a90793cdc19de829e3f74ed2e7e117c6a548deeeda82a9f20b1ecfc0b3cc80da4b9ec16dda180a3912ab9478f774bbff380554e344f963b8d03881d9f75e5e0d5b7f31e2c878b6df34623dd52a5aee3e1516142482d99515a5b70e13f01ac2e6d89f6b2a3a9d0f58623156e1d854890711e647c03d1616c2a9e66a59f3c600b758c69e924273e037fe255bdca242cdb0cdfb609273e185feb0e3fa6b340554af31d6b522cf953f2fee75a2e41c1f8c1741d65b7db2fa578d6f51a6c30a6f6f0990e0f892213136331dea114d8be65e074b36ad5547cf9c5af36ff4f5bb7277ee6c5e226f87f1908a5d02660946db061abe3fbb580620f4e7ee0d009ef18295c63adfd577a06b03d9f36eb77777d5a32e2d8dec9b50d1f41904164f766a6cc11ac508f3858d781bb7db5549daa6fa39540438262105308e97868addf33aacf4d2363a4109b608b6934c26fd63f238c7ab1861784561e71ea735d63b622956c53bbd82a8449b1a310affd0e84f0147abdf363bd132d6d9d17b418e6cf4ae4975f2982822bd6958e69af30b6ee3758acf2d7be6e77155e257c3d7f48b6782e4dda37746ea0a85dd46687ef18e8e4180f0eef45dc6ead942cd5e24f8a5c2ce88d1371b868b3d9614037c6b7f807f4b8ff7206c8dba79474f99f74cff55938061eff56db0ee5acb2ca85a168c07260ee606140b776b5f1530252d2bfc1fee0a419ded4419e40d36450fea82c7031aaae8214e7a7ec6d0b799243cdac36bbb24a297d908f26430b9ca7bcec3397f9eebd6915d9ae03142bd0f79685638f2d52b37c30ea5bb25e154fc23b109439528fe4617dfceccc5710f60daa4c83d3475f1470a70b3ab2f3ae24a10019f84a82243411c6a849c7083c6450d3d29cf909c1c8122f67ef8a8ab4be112e327d50664696948aef8ec0b67b6cc11b7d274e46541d3982aadacc8b0e90bc28c2514cab5c27123f2b98c6b6de41af2eb208d057fa90466c88d60880087e99b2f907ada7d16588fe21d6347c854add6ac62d5d874464b474fe70a1ffced2787981ca7dbf7d54d11bdf1cd43613b502b583d10f83c2b629538ebc19a3bf5545f13a2cee13b0d9758dfc4a09696088dd27e3b298b0e8919f2b12e7310e701eecd4126eb11f6a183a9e310b547ab0056246e3eb72f3a1063c5fdbcbd50b8334d99d66bbd4139b03252814e61132c0148e311be09e187aa940c52bfa34366dd1239ce137fb5ac4a947638fda0477f0bd7631417eefb138e055be1727721fefce2fde89372aa379655d6272ea419aedcda78996d04c941105e3b7fe839f6c2706d605dddcfd8d79e087fb08c25f22a9807b3f8626077f40c87ace07462d006881625f2bc09dc06c654e39d035e925eda5864dcbdfc6f88c78c4a270b4021b0213b47cab8d0b84dff1578c336cf7b74df44eb5e8da80f5ddcb3f18903dcd8c83e81b8aa4acb9f39bc1c508a95b1ab747dc2b3830c4890b0c3dece74654fdd2daa0b093efdbca8d69e813a5f3ee8ed58379ae519407c7f915891791793fe0f12d8a8b03afb46de3d211778d175271c65e9587ac5d38aac4c7a4e1f969b326f4971103366d9c2248c70cbe287d08673fb00024f14917f3bd94fe26e7f2b62d0014986a6264e968ce7ea2063f6c2a3b9de0d754b53208548d66e59647be254856daaff8b82dc032cc887283d0a4badab05224a11289a1245c91fa978325cbb5fd474a809527c0b82bb3529f2317de5e5974c95534ec24da5f988e94b6195ac0add3fec3c8bb2c460d8f1103a431417a7d77d32f2193e9c36fa2198402570fe7f6580a2d01073575dd1cfffa5ab166e49bde3316dd9374f4b493d23e4deea1eb2325d19f243fee6c5a70852c1ebd7ac1832da81b86c14d631ee21e6d1216a5de5da80be3302c11c7355df6a4e6ae4d7604b630400ee4bf3820aa0b6506492106212ba486c1d94b5c6b9e3d32ee43632c977d7448f6f8f64d1aea5637c11fae16e74e9cd437500a275dc5cf8c67e35730ed0576df5e4de7dd19d4ab01e20b3125ced2ca74cb61162bff908c0dbb2dcf68086b68d114a8bbe8ad75c947bfdad8f1489185c1925a84fbe905e95e176d2a33a6aabd7bd2140781f11c1910a65a89ee3e17a497de6c16c843b4f5e107905af5ae7b7b886a9907b0671362d8f237c0ad91744dd90d0e91774d402a049cd4b6228176d339a3270eb4b6a597ce01a0ee775d1d3082329e21456129d21c0e83d7c7c8c8bc2f5b03f6d6e8d34527acd2cf85d3a6d214b703dcd2430049aa907f0e5d2c51e6b1dc0aad0795008d0f45147bc9f9fcd1caf4abaea2d3e26f141e6163d84e0d56dcc786525658a98b2479334145f7383e0828d2b373a6f2fe0c2bbfae83aa50fcfe683f17f34ce6dd50f5a7d4586e67808a8f12bbdbbf2b4c3819447d0784545a66d1f40bdae3a48285776e54c40f297e9f3ea0cb04afaa23e1b4b83218b148b6770aaa4e4290d73cc150dd9a3a484f152fe0cb7cc5f09322587cd09627df157c59d9e6c0a42f295b3daf3cd8b1c04e7433a62acbd438e9a7438dbd12710fc6256062ae22ee1937d7bd3a588ab379dc07685173ef3a781934bad5efff37fc1672757e576880ddefbe8825695485abc79c74da875a046609d6f958ee4d3d0da6d603b890d73c745c845c01a06704a5267ef7b911708a14850ae7c0ac0907982d03af5e69905346b620ad02b04c870e1f9c7b1ca5f2bcd6ddc5a9e1f404d473af53c4d97635c265c5500022c18dfc2ba6442d1a79f65d51338bb40f431de90e9eb79f6f3e4adc75ca9052814a4aae2338eb2c401d40777920d760c8ea9aec317362758824edd5ef05d1f4f162df19574e1cedd714d1ac08606394b4a80e774fcf1e737dd89886aaab951453ae0654faa99a37bae002c044ab37066b7ea4e12d292f88dc6203694a0221571e56ae5b129587b7caf7aa1be3f295ff1a649c316e2757e97c58f5d0569129eb056fce3d5f90be40e1952fbc45c3d0c628805ef2f1274ff71de237b127d8e2d921299beeb15b7fd3024a18148cae611120c7c2f88b7860222ec7d6372fac431c88af236624d8bf464d8fbf017d28c23f30da88055fca3ef78f138cdb901c05727ca189d87b45b40ad8a64878d2bf6ff07f212eba5e12582027b7719b5dde32c0d88b1d17d5d059ac3b1de12eced4deaeb3e51298ab7a15a2a2a2639910f44550a41a3082147f8b9b483ba894d8ed020da49fe6897a543c752cef181e82e5c1694c98f06ceed049ad8629a457b1e6d3be58c0a58ab955106c3bc6caf664c720be74b032a40aabb85e399766b3137de3d61f506f6f93c91c9262193a3af310c3e6ccb49ee470735738a4f92ee67388e996bb9b87ad52cbea8837a2394ed59101700301422f41656ae621d9b670aacf1c608633aa9bb4d6bbe2813528215c645b9b79ab7b3cc492e0b1960e024e40646728fc87d71f8ca74e3dadb6109cf12ba0f798855033ccfc4f197ed927f2e567056e60c9ee878f51597cabbfd2ccd5670b7190e635d3d0dd0a1131a831962068b5f37ce192b534d98fb815db6127d4ef81d15ef07c20a847e52258a56f3a76e69e2744b8eea431684455018e0e1e5a28ed34df329c022fce7156ff234c69421ea9d0bc5a720efba66fb8ebc0f61a12423954f8a36ec8b3947150897c3e34274c37f9a90f9c74276d114083177d45b8f562e548fe79c6bda0a6e3b733c542ab66b5889edb2bdea39ee6c5114d8fc982189d3d44b1f08246ed0395783a727dfa1ca76ceea7e26f4860fe374835430072cc163ab7349ebd214c9e86da3b410c13e25375f015ecd9641c8c5d1a8bde58df7a4f7c88cab536a03ae82fc2cd625660c1f1d977f788416b1cf35cfbb69a4fcbc8403687fca89fd2ff245bb6b3c45f6b36883c3963deb14c30ff28d917ef614273754e929057b78df42fdd37c4dcee40a71eb2bbe705cbfae73f7435e580ff567c591ac8ce9169f9f5732cfb59f6d0ddca296c55fdecfa2477eea90e70be9a3784df825bc97247ef55429ac6ccffc4fef0e0fd4a1b3c1a42c9472402fd154f286c9cec03d991a0f3a308598c3bac4622caf317852f77e41aea25d3d2cf5248386ccff2118f381abefd3c6ceec5a531b065c6e60dfa4ca9d767593f6c3330e7451adb2c1d115bed0b00cf27deaee8567e66a2259b269432763ddef0901476342ce7d9202a9efa5d5cbb553156497241d1b900fb18006817f29ac32fd20c1c47f76241f4daca16c9b6c5f31526b237350ee828d67a22885d769ee1b580ded510c3b6d1f1e7b49093543cf28526db562fc5a99c61c679bfe45edc21cd835851ce09f19eb7480c1ad2c83a00be4d5dd866565bdab9d4b75610bb43621edcde16dc47e93bca429bc1cdc72e9920514006ef02fd885c73ee8eb7216f0d686637f4d4b470d24fedb64be45237fb9fc962379c25c693d194e27dc319380809d78a5a067f1fffd24a213197a29c4124f71f28a466e23d7c5c839e33b11eb6183de4efc773f9cabf8", 0x1000}, {&(0x7f0000006340)="04e48b7d2bb9a6758237d14743ba995734a1c51423f4bf4a14be15beb1404fd51e32d2196345557119ad26067fb566da", 0x30}, {&(0x7f0000006380)="0667ed603045a6ef655bd0892bef506303b6a547a06649edf30acbd296f3aa4fd4b5a79b2b9f12512e00b08dfb99a0525bbe0d1eaf9031", 0x37}], 0x6, &(0x7f0000006500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r1, r11]}}], 0x70, 0x20004001}}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f0000006580)="da9deb864e704dac58705d9857cbacfd0d99fc4c069184dcd5a89265275dd8deb92276c4ef8d11a9be9184c08f0f45596ad9f7e6ad471f723611c9b18b06f2c2417c36a2155044ff9b26a165e359c6e9b3bcf2", 0x53}, {&(0x7f0000006600)="c51f8aa347ff9ccdbfa42c03110a35aae16af3b45f77905b5d0571617d0dc4757510211eabff501e056935715feab002e359493a2fad276edf0972d9624e200a5d0c5aa043be2d0cdbebc0cac8c577cfc853eeabdc7f1a52fe7a7b1f138d4c20d39beb4a14b014b8e4d9e5066f30ed9f2a4acb004e8dd1ecf9d8f1120471a8a7b9a51b64a70dc5fe98f5da0b7d9e338b613f64707bb1aab21c17aaaa3110c62cee191f4d274a8c1968f9c94bc5db19", 0xaf}, {&(0x7f00000066c0)="4760cec866c1fb4da025e4f9ab4d4bb16a9e93dc525361cf76d0f665891fe0acb9073b12e5c4d67e7e211476c2143024c239bb48d2de8038e3b0471bbe721058567223b4130fe440beb9bbd24e0ee7102fa00b2de20e126d5f35f4c35b3f695e77bf440c14c0c27fee41c127c8e7ea313f11e73191f3a1b3768a0fa3", 0x7c}, {&(0x7f0000006740)="dcea00e3e306b80c65997b184e4f0bd36c85398a93b1dd1327aad9234f412ad630a34d4b9392e2b3771660", 0x2b}, {&(0x7f0000006780)="7880554f884c2edbd85f1d290c50865a6d9c1c7b35481d50e6c8381c3fa6c0924068e550cdf5bf4c1a9a53c41b12c1231395bf7c7a60607d8d4c12cf1df5e6c35ef435b2f66f76a337dc2fefcbd63368180e04ea00398dc1af9c720d6072489dc8fc40de1115e28db9962cb2f7e217328ebc84d5d758ae9f6aa707e75658e47b54224574359001621c02bc31fb2b9c3c1e17a1da2332cf9ccc3adbcee545ae6453cffd102e025e4ce162bfddaa3f0a439bba40808c3962f98f0b20065b81fa55df1b3f060a246c6aec9e7ba26506b1b4da90a9c3c3d27640d64c0c8c6e71bcea33b661eeb4b26ee9f97a4de2cf1d2d9f940b6e92", 0xf4}, {&(0x7f0000006880)="ec77c7c7e39cec1ffe064960d3ea4ce7605186e07a286a12c4d6e2740aae00dc8a38ded07ea61914fcd07dbe3b2735983c564ffea97b2a56c37599b120807b1c2e2c230d2d276932cc801fef60c0388d6c59780ddd97e36cb68cb2e2e18f7589c8a1b1584e035922533bb3f94eff", 0x6e}, {&(0x7f0000006900)="a68981787c9060e8c712c7412d9fe7ce8691873eb6698bbfec33d7e87ce51eac385f821265f58c70dc9387b6f0e63bb47f33ad67630bf1c82b3737ef016ebee805c5042694", 0x45}, {&(0x7f0000006980)}, {&(0x7f00000069c0)="5edef76820472f02e5c2a3ea578f4d25df14698bb55b", 0x16}], 0x9, 0x0, 0x0, 0x44080}}], 0x6, 0x8000) 1.252739747s ago: executing program 1 (id=3549): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="a1b72cbd7000fcdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x881c}, 0x4048000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{@none}]}) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) ioctl$FIOCLEX(r5, 0x5451) connect$inet6(r4, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x2}, 0x94) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) 1.25204073s ago: executing program 5 (id=3550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000200)={0xfff7, 0x2}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x85c, 0x400}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.248895008s ago: executing program 2 (id=3551): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@empty}, 0xd956e98d0df4f8e9) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2400c000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000f5ffffff9400000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x4000015) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0xc001}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$kcm(0xa, 0x2, 0x0) r11 = socket(0x2c, 0x80805, 0x0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x1, {0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x25}}}}, 0x3a) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6c, @rand_addr=0x64010105, 0x4e22, 0x0, 'lblc\x00', 0x1, 0x80005, 0x5f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) write$tun(r9, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x11ce) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r8], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 1.125090162s ago: executing program 1 (id=3552): unshare(0x28000600) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x11, 0x148, 0x98, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff4f}}}, {{@ip={@multicast1, @private=0xa010101, 0xffffffff, 0xffffff00, 'geneve0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x7f, 0x80000000, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000009c0)={&(0x7f0000000000)=0x7, 0x7fdfffff, &(0x7f00000005c0), &(0x7f0000000980)}) splice(r3, 0x0, r0, &(0x7f0000000080), 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8c040000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYBLOB="c986"], 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 997.027003ms ago: executing program 5 (id=3553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfd3fb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x800) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x80000, 0x6) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f0000000c00)={{r10, &(0x7f00000003c0)='clsact\x00', 0x30080, &(0x7f0000000400)={@align=0x8, {0x3e4, 0x2, 0x7ff, 0x9}}, 0x100, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x7}, 0x5, &(0x7f0000000b40)=[{0x2, 0x8, &(0x7f0000000540)='/},}]\'\x00', &(0x7f0000000580)="09daf44cc4924822d6a025e66d0d2ab52588077c365f6540336243230ec2919d2c6174af8767cf79f3f1828ec25df4379897b4fc636826a205512cc04d425bf9fffa661f48aa2c6f41606cbb1d7a273f90a9b5ffcce9b55c106df7edab627028", 0x60, 0x8}, {0x1, 0xfffffff8, &(0x7f0000000600)='\x00', &(0x7f0000000640)="3fd0406ad131efb1871a87d09d588b28a40ba49455335062619e2c6d501703da4a6643e5725ce2df90f60a1d8810ff7b2c4cfa5cea8477532485f90c711f5290c18af7870ca5d151cfd994173854aa809df500f1ad3bda5b9536ae59b40237be258ececbfd5a459c89db1e03b1da734d8f9b9ff3f34cd6dbece6c25ea59cdf06c9a1c9cee490ee03c347717a1ecee77e29dc4b9253ca4111e4954c4975edd764e829d7331ccbaa45b32c98b4a346dad58750b1cae0a2f9a46f9e5ee7919502e38e801252bdc99106e2d99cbab1ba610d", 0xd0}, {0x2, 0x35d, &(0x7f0000000740)='-,\x00', &(0x7f0000000780)="4c659327456b1ff1e9376f380d51f0b9890a556b64791e5fc236d2da19", 0x1d, 0x20}, {0x2, 0x10, &(0x7f00000007c0)='clsact\x00', &(0x7f0000000940)="77a91dd356d0eae388b3684ee61a0e0a0077d9d1e0426f780b3d5eae5a096945d8fdc5a373cd67eb2792d87db47c3e9b2a700475279730a1cd8698f0c772593cc27d0706616235cf5bc074f73a5623754e173c82e5d61418f4f2657a1ee05bb2b6ff52c9746a6fee9d462fa507900d7ce02e2d559e3b6e48bdc04d79b5af0d1cf7bd66eb5b487dacdaeaac772ae056a8ba236b08f880969750283899a8a146bd803190387a4f0b1cf27ae12cb46e28c4dbcfbcd1cab67a1686d95db7deeb2af992094306dd883f95e3", 0xc9, 0x8}, {0x2, 0x2, &(0x7f0000000a40)='clsact\x00', &(0x7f0000000a80)="485ce707e0bcb76d6a72ce52fc136e8e2b7fb0ff82e38c3dfac60b658bb7ecf796be5dd5bb0cf0b739c789569dd398e4c4d646d3c6717b29b7b4348d0b3749bba6d68c460c77c7c3b6a19ae4eca5ede062184df5e70fcc1a228c90ae68cdf959ae3dfb6c06af7012df69a58dcf86e65e9bbf5e7d3b95d131f7cd79eff39c28f36e91c618", 0x84, 0x30}]}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r7, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000002c00070100000000ffdbdf943909560c7c25037c00000800018040000000100000000c0001801ca81cbaaa8c12eb"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x9, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 996.432456ms ago: executing program 6 (id=3554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x44}, @IPSET_ATTR_IP2_TO={0x0, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x40094}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 879.57234ms ago: executing program 3 (id=3555): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 822.216243ms ago: executing program 6 (id=3556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffdcc, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r3, 0x11, 0x0, 0xfeffffff}, 0x14}}, 0x0) 764.722815ms ago: executing program 2 (id=3557): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe1}, {0x10, 0x9}, {0x4, 0x6}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe1}, {0x10, 0x9}, {0x4, 0x6}}}, 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x5, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000a88dacba4730e8977e288700004fdaaa3675bb3983f892b38cd104a0a1e10facd526a293a66574f532427a6896f2fca13e32a7834cc3666fd1427a9f2f3aadd1e9aaadb1ef4a70f4173546", @ANYRES16=r2, @ANYBLOB="01002cbd7000feffefff8900000008000300", @ANYRES32=r3, @ANYBLOB="14001d80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 727.685169ms ago: executing program 1 (id=3558): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005780)=@newtfilter={0xa40, 0x2c, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0x1, 0xffe0}, {0xfff1, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x503}, @filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x3d}, @TCA_FLOW_POLICE={0x840, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x401, 0x8, 0x1ff, 0x9, 0xee, 0x100, 0x5, 0x5, 0x8, 0x5, 0xffff, 0x6, 0x400, 0x0, 0x1000, 0xfffffffb, 0x8, 0x647, 0x3, 0x80000001, 0x3fc5, 0x5, 0x9, 0x800, 0xe28, 0x0, 0x4, 0x8, 0xffffff48, 0xc8c5, 0x0, 0x7, 0x8001, 0x0, 0x6, 0x7, 0x1, 0x3, 0x2, 0x2, 0x42d, 0x8, 0xca9, 0x1a3, 0x0, 0x5, 0x1, 0x3, 0x9, 0x6, 0xa9, 0xde000000, 0x1000, 0x4, 0x31c, 0x0, 0xfb6e, 0x5, 0x6b, 0xe, 0x3, 0x7ff, 0xa, 0x1, 0xfc000000, 0x40, 0x3, 0x2, 0xb9, 0x9e6, 0x8, 0x4, 0x1, 0x2, 0x1, 0xffffffa2, 0x8, 0x6, 0xffffffff, 0x1, 0xfffffff1, 0xffff, 0x8, 0xf5e, 0x6e, 0x6, 0x0, 0xffffff01, 0x4, 0x1, 0xffff, 0x80000000, 0x4c, 0x9, 0xcf, 0x6b41, 0xe, 0x0, 0x2571, 0x8, 0xe52, 0x1000, 0x40, 0x91f, 0xe, 0x4, 0xfffffffa, 0x0, 0x101, 0xfffffffb, 0x8, 0x9, 0x0, 0xf8, 0x8, 0x54e, 0x2, 0x80000000, 0x4938, 0x7fff, 0x9, 0x1cdb, 0x8, 0x5, 0x8, 0x800000, 0x101, 0x2, 0x40, 0x85a, 0x1, 0x3, 0x4, 0x401, 0x1, 0x5, 0x6, 0xffffffff, 0x8001, 0x1, 0xfffffffd, 0x4, 0x7, 0x8, 0x2f, 0xa39, 0x6, 0xf0, 0x80, 0x4, 0x8000, 0x7c07, 0x0, 0x2, 0x5, 0x8, 0x80000000, 0x7, 0x8, 0x7, 0x6, 0x7fff, 0x7, 0xf6, 0x7, 0xff, 0x96, 0x5, 0x88, 0x8, 0x9, 0x49, 0x2, 0x0, 0x4, 0x8, 0x10, 0x3, 0xffff, 0x7fff, 0x80, 0x6, 0x7, 0xb4d5, 0x3, 0x5815, 0x3, 0xe, 0x5dab, 0xc, 0x8, 0xc, 0x5, 0x28, 0xffffffff, 0x6, 0x6, 0x6, 0x100, 0x9, 0x3, 0xe, 0x6, 0x5, 0x35bd, 0xc254, 0x2, 0x0, 0x1, 0x2, 0x8, 0x7, 0x6, 0x1, 0x3, 0x3, 0x8, 0x0, 0x1, 0x2a62, 0xffffff81, 0xfffffff8, 0x1, 0xb3d, 0x81, 0x18000000, 0xe, 0xb, 0x6, 0x8, 0x6, 0x6, 0x8, 0x40, 0x8, 0x2, 0x8, 0xf, 0xfff, 0x8, 0x0, 0x4, 0x65, 0x1000, 0x3, 0x5, 0x6, 0xfffffffd, 0x5, 0x4, 0x870, 0xd, 0x0, 0x4, 0x3ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x800, 0x3, 0x8001, 0x6, 0x7, 0xffffff00, 0x9, 0x1000, 0x8, 0xb, 0x80000000, 0x40, 0x3, 0x39, 0x5c1, 0x7, 0x100, 0x0, 0x9, 0x8000, 0x6c, 0x6, 0x9, 0x1ff8000, 0xfffffff9, 0x0, 0x7fffffff, 0x1e4, 0x6, 0x5, 0xd8e, 0x7, 0xc21a, 0x5d4a, 0x6, 0x8000, 0x9, 0x10001, 0x35, 0xff, 0xff, 0x4, 0x8, 0x80000000, 0x4, 0xfffffffe, 0x1ff, 0x6, 0x1, 0x1, 0x40, 0xfffff000, 0x6, 0xffffffff, 0xe, 0x6, 0x4e, 0x6, 0x9, 0x9, 0x8, 0x0, 0x1, 0x0, 0x4, 0x6, 0xea, 0x80, 0xffffff77, 0xff, 0x7f, 0xbe, 0x9, 0xb, 0x80, 0xffc2, 0x80, 0xe3, 0x6, 0x81, 0x8, 0xd, 0xffffff2c, 0xc, 0x80000000, 0x9, 0x1, 0x15d1, 0x7fff, 0x8000, 0x10001, 0x7ff, 0x1, 0x8, 0x4807, 0x4, 0xfffffffd, 0x0, 0x7, 0x800, 0x3, 0x1, 0x0, 0xfffffff7, 0x6, 0x4, 0x9, 0x1, 0x1, 0xffff, 0xffffffff, 0xb7b0, 0x380000, 0x10001, 0x702, 0x1ff, 0x4, 0x0, 0x6, 0x5b, 0x7, 0xd9e, 0x9, 0x5, 0x5, 0x0, 0xfff, 0xffffffff, 0x4, 0x1, 0xa, 0x11, 0x40, 0x10000, 0xffff4010, 0xe9800000, 0x2, 0x1, 0x410e, 0x77f, 0xfffffbbf, 0x88, 0xd, 0xd1, 0xff, 0x7f, 0x3, 0x8, 0x7f, 0x4, 0x2, 0x6, 0x5, 0x8, 0x4, 0xcd9a, 0x800, 0x1d, 0xc, 0xa9, 0x2, 0xd9a, 0x4, 0x4, 0x4, 0x9, 0x0, 0xdfcd, 0x101, 0x0, 0x0, 0x5, 0x8001, 0x80, 0xfffffff7, 0xc, 0x3, 0x9, 0x8f2, 0x0, 0x10, 0x6, 0x5, 0xa8, 0x9, 0x2, 0x65d, 0xfff, 0x58d, 0x0, 0x5, 0x1, 0x7b0f0eac, 0x100, 0xffffffff, 0x4, 0x2e7, 0x5, 0x1, 0xe2, 0x4, 0x7f, 0x2, 0x7, 0x1, 0x400, 0x9d, 0x1000002, 0x4, 0x8001, 0x9, 0x82, 0xe, 0x9, 0x1ff, 0x8, 0x6, 0x4, 0x4, 0x7, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2ffe, 0xff, 0x9, 0x4, 0x5f, 0x5, 0x800, 0x7f, 0x9, 0x6, 0x7, 0x8000, 0x0, 0xfffffff7, 0x3, 0x8, 0x2, 0x3, 0x40, 0x0, 0x81, 0x7fffffff, 0x800, 0x3e7, 0x1, 0xe, 0x2, 0x8, 0x1, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x78f}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_cgroup={{0xb}, {0x1a0, 0x2, [@TCA_CGROUP_ACT={0x19c, 0x1, [@m_pedit={0x198, 0xd, 0x0, 0x0, {{0xa}, {0x4}, {0x169, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4002) 630.406566ms ago: executing program 6 (id=3559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r8, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x66}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x22000001}, 0x4800) 602.547794ms ago: executing program 2 (id=3560): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) r3 = socket(0x10, 0x803, 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}, [@TCA_RATE={0x6, 0x5, {0xb0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r6, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x26, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4de}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c0002800500010005"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 493.177092ms ago: executing program 1 (id=3561): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 488.050319ms ago: executing program 3 (id=3562): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000071118400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x509d884560ba1ba6, 0xe}, {0x0, 0xffff}, {0x8, 0x10}}}, 0x24}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x40, 0x9, 0x4, @empty, @remote, 0xdbd3172dfe8936f3, 0x8, 0xfffffff7, 0xffff8000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x188, 0x64, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0x9, 0x5}, {0x9, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6}]}}, @filter_kind_options=@f_basic={{0xa}, {0x128, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xc}}, @TCA_BASIC_EMATCHES={0x11c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x9, 0x9, 0x5, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x55}, {{0x3}, {0x2, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{0xfff8, 0x2, 0xf}, {0xc, 0x1, 0x1, "f7"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x68, 0x1, 0x40}, {0x8, 0x9292, 0x6, 0x3, 0xd}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9}, {0x4, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x3}, {0x7fff, 0x6, 0x3, "3c028fd11f8a"}}}, @TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_VAR='=', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="8b", @TCF_META_TYPE_VAR="006f118e71519b00", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPT={0x64, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_DATA={0x3e, 0x5, "bfab6dd4852ec701cbb3b8433c0edd2caee1c437c81f905a149d0efebbd760690d48c956b60830c75761f598fd2f5c5ee1d44eef70a7bee0e22d"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x188}}, 0x20004055) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f00000001c0)=""/36, &(0x7f0000000280)=0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 440.57956ms ago: executing program 5 (id=3563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESOCT=r2], 0x32600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x110, 0x101, 0x6, "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"}, {0xf0, 0x111, 0x6, "f690d4ce42c868e0c86224587b57898ec46939ab2a675912bbfb2b4322907b462bbc7da36f4601ddcab013c3ea93e15cd5fd489af1b8b8358ddc55af6e0e4d5c0e3479a547ef70590ba48cf84dce7a389824cc58e8ffd918872a857491efcded5e897f48e81ff7b08842170f756ef2301973e30f5d0550ec2d46d0b6c9cd3f3f3c6d19039dad432bf0f71307a888d8fe7b4f8da612d3ed02f08651b5be597316e843c99bcd174bde8ad415c237e8fb351e1d6559c024cf38cd73d30d00d794c0fee18951b8a53527a247527f01c598a37093baa648390b204bd4a401"}], 0x200}, 0x404f444) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 433.874517ms ago: executing program 2 (id=3564): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x1000000, 0x482, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x10, &(0x7f0000000040), 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00000000309562ed0e274c9c0c6cab3c6bdad64ab973aee87e2257e459a750225304ca72b8f5fe62432d4a9842f28ec54653c91ea743c5dbe589fcf5fcbf3fc53ab73f608ecb89607e57216d8671838089a6017b00a2c29e06a236c045bcf8d12338f33d7bcb5890218bd164a3b5590c7650f5bff0595cc5e0a046d38c9cf9aab13b888258a1fde9836b0f00008b49c06f3f1ba398d42907d1d167d56041d534f777da38afe0215338e6df43da9b4f", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x1a0}, 0x1, 0x0, 0x0, 0x4814}, 0x15) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="39042cbd7000fedbdf255d00000008000300", @ANYRES32=r8, @ANYBLOB="24c34cfb5d02df2fd62d91e752a322d3181abf8604b0a56d4562f1e734888237fc8d69b1df67c4c8cb194c3b5228cd9bd09b02600ea87018882eb458707cd3ed2e8716ac848a37fae1f1859597125dc73280dd46f7efa1d30e5e5c1308848cada06d676b5f60b91ff4923f5aee9b717094cfa9b15502d44f1ad32e287afe32ddd20c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r14, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) 365.402779ms ago: executing program 1 (id=3565): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0xd}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x13}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x3, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x9, 0x0, &(0x7f0000001580)) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1, 0x6}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x100}}, @enum64={0x9, 0x5, 0x0, 0x13, 0x0, 0x9, [{0x10, 0xbb, 0x6}, {0x6, 0x0, 0x3}, {0xf, 0xfffffffe, 0x1}, {0xc, 0xfaaf, 0x40}, {0xe, 0x9, 0xd2}]}, @func={0xd, 0x0, 0x0, 0xc, 0x2}, @enum={0xb, 0x2, 0x0, 0x6, 0x4, [{0x0, 0xae}, {0x0, 0x7}]}]}, {0x0, [0x2e]}}, &(0x7f0000000300)=""/174, 0xa3, 0xae, 0x1, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0xfffffff9, '\x00', r4, r7, 0x0, 0x2, 0x3}, 0x50) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 365.237908ms ago: executing program 6 (id=3566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000006100001c0012800b000100d2726964676500000c0002800800140000000000d1454c83841902e5045da06dc097dd30030ac35db54bb26e8cbeb54bdb"], 0x3c}}, 0x0) 279.976242ms ago: executing program 5 (id=3567): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_STAB={0x104, 0x2, "c000b0dad1a492788eec90262fca18f2963659b0f03593e83ace7e896100a30807ffe766d870d786b091d0b935e985293fedb401a42e25f86337fb8d7185a5449e9564b25f50e1cdbe45ffd427fa51b671fb308ecb5b769b3d8f6d12f42767af1c296cdab1b49338c43cad924950f997689144c7a05297f6314615e0bc22813ace07a03048e2849cc0cb82f2ab30cecf3e672011250e6782f13b51fb0f581b4e64db97777e722a87094ff7b4b6e0a29095a745cf9efd8995b7df11e4c48a88be458a374c588292786b36e723bf2c5d0b2fa704fe6afac4e159d22b002ad8c8d702b3f698f1b1f2802933a55edcb7b27ee26817b864d70a549deab8638480f762"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x1, 0x5, 0x4, 0x2, 0x16, 0x4}}]}}]}, 0x150}}, 0x0) 129.670338ms ago: executing program 2 (id=3568): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000000)=@default_ibss_ssid, 0x6, 0x1) 83.118632ms ago: executing program 6 (id=3569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00002ef000/0x3000)=nil, 0x3000, 0x1000008, 0x40010, r0, 0xd98a7000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000900)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x5, 0x3, 0x0], 0x0, 0x0, 0x3}}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x2, 0x80000000, {{0x19, 0x4, 0x1, 0x10, 0x64, 0x68, 0x0, 0x85, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0x20, 0x0, 0x9, [0x800, 0x3, 0x3, 0x2b76, 0x10]}, @cipso={0x86, 0x35, 0x3, [{0x7, 0xe, "ded90b8c699a34048cd1361f"}, {0x5, 0x3, "d3"}, {0x2, 0xb, "3e5105c965b61013c0"}, {0x6, 0xd, "3100d2283056792d29436a"}, {0x2, 0x6, "ea5c3793"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl2\x00', r2, 0x4, 0x7b, 0x4, 0x5, 0x8, @private1, @private2, 0x8, 0x20, 0x4, 0x1}}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket(0x400000000010, 0x3, 0x2) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x93, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x2bc, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x2bc}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@gettaction={0x38, 0x32, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000500)={@initdev, @remote}, &(0x7f0000000540)=0xc) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r9}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="080100000002010449a5f56f4f3c652607000002221815862c0001801400030000800000000000000000ffffac141419140004ba000000000000000000000000000000000f00ec55a76a7462696f732d6e73000000000a80a30002800c0002800600034000010054dcdb7b0c300cd17ddc358f7657f3bf008bfe4000000001af343f1b7c3f7a83a1e531005f6d50026786f9c68db8eae7cd5ef941b04507bdf531584870ec21105f32e70e5f78d0f3b911ce5a39069009f40b79447b245a85118f6a1b081fedb97af75b"], 0x108}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@dev, @empty}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x1, 0x6, {{0xf, 0x4, 0x3, 0x6, 0x3c, 0x66, 0x0, 0xc1, 0x2f, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0x27, 0x4f, [@rand_addr=0x64010102, @private=0xa010102, @empty, @remote, @local, @empty, @empty, @loopback, @loopback]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000006c0)={@dev, @initdev}, &(0x7f0000000700)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)) 82.71664ms ago: executing program 5 (id=3570): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006ac0)=[{{&(0x7f00000034c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x0, 0x29, 0x37, {0x88, 0x0, '\x00', [@hao={0xc9, 0x0, @rand_addr=' \x01\x00'}]}}}, @dstopts={{0x3d, 0x29, 0x37, {0x950e04620a2148d0}}}], 0x80}}], 0x1, 0x20000020) listen(r0, 0xc) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x30, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, {0x5, 0x4, 0x1, 0x6, 0xa338, 0x64, 0xa604, 0x2, 0x33, 0xf97, @loopback, @empty}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0xa90, 0xa90, 0x8c8, 0x9f8, 0xa90, 0xb28, 0xb28, 0xb28, 0xb28, 0xb28, 0x6, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x9, [0x4e23, 0x4e21, 0x4e23, 0x4e1d, 0x4e24, 0x4e20, 0x4e24, 0x4e21, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) socket$inet6(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x3fd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0xfffe, 0x3bf8580d, 0x0, 0xb3550aa4ba8783a4, 0x5}, 0x9c) (async) accept(r0, 0x0, 0x0) 0s ago: executing program 5 (id=3571): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711003000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x0, 0x0]}, {}, {}, {0xa888, 0x88be, 0x81000000}}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r5 = socket(0x10, 0x5, 0x8) r6 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004090) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x1, r8, 0x7, r5}, 0x10) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000640)={'veth1_vlan\x00', 0x8000}) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) r10 = socket(0x29, 0x4, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b0073"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r11, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x13}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xa}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48044}, 0x4000000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa101000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 9.356445][T12802] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.399546][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.406754][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.452979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.460167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.491136][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1933'. [ 239.513675][T12952] netlink: 'syz.3.1933': attribute type 30 has an invalid length. [ 239.565983][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1933'. [ 239.576801][T12953] netlink: 'syz.3.1933': attribute type 30 has an invalid length. [ 239.613737][T12955] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1934'. [ 239.802436][T12967] netlink: 'syz.2.1938': attribute type 5 has an invalid length. [ 239.893404][T12971] openvswitch: netlink: IP tunnel dst address not specified [ 239.952390][T12975] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1941'. [ 240.175007][T12990] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1944'. [ 240.583516][T13005] tipc: Enabled bearer , priority 0 [ 240.601018][T13005] syzkaller0: entered promiscuous mode [ 240.614126][T13005] syzkaller0: entered allmulticast mode [ 240.648766][T13005] tipc: Resetting bearer [ 240.755289][T13004] tipc: Resetting bearer [ 240.808444][T13004] tipc: Disabling bearer [ 240.887690][T13015] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 240.922250][T13015] bond1 (unregistering): Released all slaves [ 241.012675][T12802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.100119][T13023] bridge0: port 3(ipvlan2) entered blocking state [ 241.155011][T13023] bridge0: port 3(ipvlan2) entered disabled state [ 241.188396][T13023] ipvlan2: entered allmulticast mode [ 241.212533][T13023] bridge0: entered allmulticast mode [ 241.214342][ T5637] Bluetooth: hci6: command tx timeout [ 241.240084][T13023] ipvlan2: left allmulticast mode [ 241.251363][T13023] bridge0: left allmulticast mode [ 241.471198][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 241.508245][T13045] netlink: 'syz.1.1959': attribute type 12 has an invalid length. [ 241.837722][T12802] veth0_vlan: entered promiscuous mode [ 241.849920][T13058] syzkaller0: entered promiscuous mode [ 241.856411][T13058] syzkaller0: entered allmulticast mode [ 241.889029][T12802] veth1_vlan: entered promiscuous mode [ 241.918853][T12802] veth0_macvtap: entered promiscuous mode [ 241.929811][T12802] veth1_macvtap: entered promiscuous mode [ 241.947388][T12802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.963309][T12802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.979779][ T140] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.989556][ T140] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.000432][ T140] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.013211][ T140] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.327895][T13047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.450941][T13076] tipc: Trying to set illegal importance in message [ 242.457793][T13078] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.477257][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.502973][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.590739][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.615919][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.637567][T13084] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1969'. [ 242.698328][T13087] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 242.715032][T13087] bond7 (unregistering): Released all slaves [ 243.277655][T13114] bond7 (unregistering): Released all slaves [ 243.284070][ T5637] Bluetooth: hci6: command tx timeout [ 243.329399][T13122] netlink: 'syz.6.1978': attribute type 4 has an invalid length. [ 243.507587][T13137] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 243.517314][T13137] netlink: 'syz.6.1981': attribute type 5 has an invalid length. [ 243.601847][T13134] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 243.610636][T13134] team0: Port device batadv1 added [ 243.640427][T13124] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 243.649115][T13124] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 243.915013][T13152] __nla_validate_parse: 4 callbacks suppressed [ 243.915030][T13152] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1986'. [ 243.945439][T13156] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.1987'. [ 243.962412][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1988'. [ 243.995431][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1988'. [ 244.044778][T13158] netlink: 'syz.6.1988': attribute type 30 has an invalid length. [ 244.078720][T13151] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.089598][T13159] netlink: 'syz.6.1988': attribute type 30 has an invalid length. [ 244.173582][ T1178] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.197214][ T1178] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.279048][ T1178] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.312435][ T1178] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.318122][T13177] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 244.371380][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 244.416554][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 244.645930][T13199] netlink: 'syz.1.1998': attribute type 2 has an invalid length. [ 244.833185][T13218] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 244.889674][T13207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.947968][T13218] bond9: entered promiscuous mode [ 244.953739][T13218] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.963682][T13227] syzkaller0: entered promiscuous mode [ 244.970773][T13227] syzkaller0: entered allmulticast mode [ 244.976656][T13230] netlink: 'syz.3.2007': attribute type 11 has an invalid length. [ 244.991407][T13230] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2007'. [ 244.999936][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2003'. [ 245.016083][T13214] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.046517][T13229] bond9: (slave bridge2): making interface the new active one [ 245.062969][T13229] bridge2: entered promiscuous mode [ 245.097682][T13229] bridge2: left promiscuous mode [ 245.149346][T13228] veth0_to_bond: entered allmulticast mode [ 245.174649][ T12] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 245.199267][ T12] bond3: now running without any active interface! [ 245.304523][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2009'. [ 245.466656][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2013'. [ 245.488538][T13250] lo: left allmulticast mode [ 245.502608][T13250] tunl0: left allmulticast mode [ 245.511847][T13250] gre0: left allmulticast mode [ 245.518134][T13250] 0XD: left allmulticast mode [ 245.526497][T13250] : left allmulticast mode [ 245.531168][T13250] ip_vti0: left allmulticast mode [ 245.536913][T13250] ip6_vti0: left allmulticast mode [ 245.542182][T13250] sit0: left allmulticast mode [ 245.555009][T13250] ip6tnl0: left allmulticast mode [ 245.569405][T13250] ip6gre0: left allmulticast mode [ 245.584327][T13250] syz_tun: left allmulticast mode [ 245.625089][T13250] bridge4: port 1(veth0_to_bond) entered blocking state [ 245.632182][T13250] bridge4: port 1(veth0_to_bond) entered forwarding state [ 245.687746][T13250] vlan0: left promiscuous mode [ 245.710592][T13250] macvlan0: left promiscuous mode [ 245.753491][T13250] bridge1: left allmulticast mode [ 245.796974][T13250] vlan2: left promiscuous mode [ 245.807081][T13250] hsr0: left promiscuous mode [ 245.812209][T13250] vlan2: left allmulticast mode [ 245.818217][T13250] hsr0: left allmulticast mode [ 245.823065][T13250] hsr_slave_0: left allmulticast mode [ 245.829320][T13250] hsr_slave_1: left allmulticast mode [ 245.835876][T13250] macvtap1: left promiscuous mode [ 245.841216][T13250] macvtap1: left allmulticast mode [ 245.848768][T13250] veth1_vlan: left allmulticast mode [ 246.031252][T13277] netlink: 'syz.1.2020': attribute type 1 has an invalid length. [ 246.064227][T13278] netlink: 'syz.1.2020': attribute type 1 has an invalid length. [ 246.248088][T13280] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 246.260264][T13280] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 246.280637][T13280] bond10: (slave ip6gre1): making interface the new active one [ 246.289982][T13280] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 246.315468][T13294] bond0: Error: CAN devices cannot be enslaved [ 246.336711][T13300] netlink: 'syz.5.2021': attribute type 3 has an invalid length. [ 246.412314][T13300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.441394][T13300] batadv_slave_1: entered promiscuous mode [ 246.631701][T13318] netlink: 'syz.1.2027': attribute type 1 has an invalid length. [ 246.687675][T13318] bond11: entered promiscuous mode [ 246.696569][T13318] 8021q: adding VLAN 0 to HW filter on device bond11 [ 246.732211][T13323] batadv0: entered promiscuous mode [ 246.743076][T13323] ip6gretap0: entered promiscuous mode [ 246.751467][T13323] hsr1: entered promiscuous mode [ 246.916213][T13338] tipc: Started in network mode [ 246.925672][T13338] tipc: Node identity ac14140f, cluster identity 4711 [ 246.936202][T13338] tipc: New replicast peer: 255.255.255.255 [ 246.943533][T13338] tipc: Enabled bearer , priority 10 [ 246.960476][T13338] netlink: 'syz.5.2032': attribute type 1 has an invalid length. [ 247.136299][T13360] netlink: 'syz.1.2037': attribute type 1 has an invalid length. [ 247.291872][T13360] bond12: entered promiscuous mode [ 247.320164][T13360] 8021q: adding VLAN 0 to HW filter on device bond12 [ 247.350779][T13377] netlink: 'syz.2.2040': attribute type 4 has an invalid length. [ 247.479718][T13378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.938100][T13402] bond0: (slave bond_slave_1): Releasing backup interface [ 248.054441][ T5747] tipc: Node number set to 2886997007 [ 248.480752][T13433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.490773][T13441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.950521][T13464] __nla_validate_parse: 13 callbacks suppressed [ 248.950540][T13464] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2064'. [ 250.101971][T13518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.132625][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2082'. [ 250.206673][T13527] xt_cgroup: xt_cgroup: no path or classid specified [ 250.338383][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2081'. [ 250.456017][T13517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.508892][T13546] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 250.781770][T13556] IPVS: persistence engine module ip_vs_pe_ not found [ 250.860119][T13564] bond7: Unable to set down delay as MII monitoring is disabled [ 250.869030][T13564] bond7 (unregistering): Released all slaves [ 251.234857][T13588] sctp: [Deprecated]: syz.3.2097 (pid 13588) Use of int in max_burst socket option. [ 251.234857][T13588] Use struct sctp_assoc_value instead [ 251.268523][T13588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2097'. [ 251.280086][T13593] netlink: 'syz.1.2100': attribute type 75 has an invalid length. [ 251.300855][T13591] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2099'. [ 252.066847][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2104'. [ 252.089239][T13605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2105'. [ 252.163556][T13603] netlink: 'syz.2.2104': attribute type 1 has an invalid length. [ 252.183360][T13603] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2104'. [ 252.223406][T13603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2104'. [ 252.265050][T13603] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2104'. [ 252.429034][T13623] netlink: 'syz.6.2110': attribute type 1 has an invalid length. [ 252.437767][T13625] netlink: 'syz.2.2111': attribute type 1 has an invalid length. [ 252.515011][T13623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.917047][T13640] "syz.2.2115" (13640) uses obsolete ecb(arc4) skcipher [ 253.070041][T13652] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.076575][T13652] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.545713][T13676] xt_cgroup: path and classid specified [ 253.585097][T13684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.603532][T13684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.799465][T13696] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 253.817372][T13696] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 253.826215][T13696] gretap0: entered promiscuous mode [ 253.831433][T13696] gretap0: entered allmulticast mode [ 255.527108][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.896822][T13645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.125513][T13721] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 256.140442][T13724] __nla_validate_parse: 8 callbacks suppressed [ 256.140458][T13724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2135'. [ 256.342897][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 256.349547][T13739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.408563][T13733] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 256.473471][T13733] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 256.484277][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2141'. [ 256.497499][T13745] netlink: 'syz.1.2137': attribute type 13 has an invalid length. [ 256.503475][T13733] gretap1: entered promiscuous mode [ 256.507489][T13742] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2141'. [ 256.511833][T13733] gretap1: entered allmulticast mode [ 256.529935][T13745] veth1_macvtap: left promiscuous mode [ 256.536179][T13745] macsec0: entered allmulticast mode [ 256.696943][T13758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2144'. [ 257.048218][T13780] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2152'. [ 257.099159][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2152'. [ 257.108503][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2152'. [ 257.119116][T13784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2152'. [ 257.231992][T13790] syzkaller0: entered promiscuous mode [ 257.237743][T13790] syzkaller0: entered allmulticast mode [ 257.348008][T13779] nbd0: detected capacity change from 0 to 63 [ 257.388301][ T5637] block nbd0: Receive control failed (result -32) [ 257.389521][ T4948] block nbd0: Receive control failed (result -32) [ 257.430354][ T5651] block nbd0: Dead connection, failed to find a fallback [ 257.456868][ T5651] block nbd0: shutting down sockets [ 257.475061][ T5651] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.488365][ T5651] Buffer I/O error on dev nbd0, logical block 0, async page read [ 257.504290][ T5651] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.528100][ T5651] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.547270][ T5651] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.566962][ T5651] Buffer I/O error on dev nbd0, logical block 2, async page read [ 257.588176][ T5651] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.610381][ T5651] Buffer I/O error on dev nbd0, logical block 3, async page read [ 257.628663][ T5651] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.652005][ T5651] Buffer I/O error on dev nbd0, logical block 0, async page read [ 257.671621][ T5651] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.699756][ T5651] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.730345][ T5651] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.755852][ T5651] Buffer I/O error on dev nbd0, logical block 2, async page read [ 257.779902][ T5651] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.811175][ T5651] Buffer I/O error on dev nbd0, logical block 3, async page read [ 257.845847][ T5651] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.855152][ T5651] Buffer I/O error on dev nbd0, logical block 0, async page read [ 257.874722][ T5651] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.904165][ T5651] Buffer I/O error on dev nbd0, logical block 1, async page read [ 257.944183][ T5651] ldm_validate_partition_table(): Disk read failed. [ 257.966376][ T5651] Dev nbd0: unable to read RDB block 0 [ 257.983868][ T5651] nbd0: unable to read partition table [ 258.032913][ T5651] ldm_validate_partition_table(): Disk read failed. [ 258.068163][ T5651] Dev nbd0: unable to read RDB block 0 [ 258.076038][ T5651] nbd0: unable to read partition table [ 259.466151][T13815] syzkaller1: entered promiscuous mode [ 259.471630][T13815] syzkaller1: entered allmulticast mode [ 259.478429][T13816] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2158'. [ 260.224582][T13852] netlink: 'syz.5.2163': attribute type 2 has an invalid length. [ 260.259703][T13852] x_tables: duplicate entry at hook 1 [ 260.306371][T13856] xt_hashlimit: size too large, truncated to 1048576 [ 260.532010][T13858] nbd1: detected capacity change from 0 to 127 [ 260.567167][ T4948] block nbd1: Receive control failed (result -32) [ 260.594978][ T5651] block nbd1: Dead connection, failed to find a fallback [ 260.657806][ T5651] block nbd1: shutting down sockets [ 260.681831][ T5651] ldm_validate_partition_table(): Disk read failed. [ 260.690450][ T5651] Dev nbd1: unable to read RDB block 0 [ 260.699108][ T5651] nbd1: unable to read partition table [ 260.757916][ T5651] ldm_validate_partition_table(): Disk read failed. [ 260.785210][ T5651] Dev nbd1: unable to read RDB block 0 [ 260.799433][T13885] netlink: 'syz.1.2171': attribute type 3 has an invalid length. [ 260.828052][ T5651] nbd1: unable to read partition table [ 261.192921][T13908] __nla_validate_parse: 6 callbacks suppressed [ 261.192939][T13908] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2175'. [ 261.512474][T13904] RDS: rds_bind could not find a transport for fe88::6, load rds_tcp or rds_rdma? [ 261.956588][T13934] netlink: 'syz.5.2178': attribute type 1 has an invalid length. [ 263.171252][T13908] bridge0: port 3(team0) entered blocking state [ 263.177693][T13908] bridge0: port 3(team0) entered forwarding state [ 263.185136][T13908] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.192242][T13908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.199704][T13908] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.206839][T13908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.222974][T13908] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2175'. [ 263.239661][T13932] netlink: 'syz.5.2178': attribute type 2 has an invalid length. [ 263.293321][T13935] team0: Port device team_slave_0 removed [ 263.337498][T13908] bridge0: port 3(team0) entered disabled state [ 263.344034][T13908] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.351289][T13908] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.824919][T13976] netlink: 'syz.6.2187': attribute type 1 has an invalid length. [ 263.853450][T13976] netlink: 'syz.6.2187': attribute type 7 has an invalid length. [ 263.863050][T13981] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 263.896401][T13976] netlink: 'syz.6.2187': attribute type 8 has an invalid length. [ 263.928616][T13976] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2187'. [ 263.938252][T13976] NCSI netlink: No device for ifindex 65584 [ 263.972421][T13989] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2188'. [ 264.092692][T13996] openvswitch: netlink: Message has 8 unknown bytes. [ 264.138245][T13996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.364935][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2197'. [ 264.547638][T14015] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2198'. [ 264.597347][T14015] netlink: 51 bytes leftover after parsing attributes in process `syz.6.2198'. [ 264.818178][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2204'. [ 264.846051][T14038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.953564][T14038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.051428][T14053] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 265.082530][T14044] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 265.225095][T14061] netlink: 'syz.2.2208': attribute type 49 has an invalid length. [ 265.757787][T14087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2214'. [ 265.789142][T14092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2213'. [ 266.260040][T14108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.291103][T14116] x_tables: duplicate underflow at hook 1 [ 266.517142][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2223'. [ 266.534268][T14093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.899464][T14149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2228'. [ 266.916814][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.924941][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.931390][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.937874][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.944336][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.950786][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.955030][T14152] x_tables: duplicate underflow at hook 2 [ 266.958481][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.969396][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.975853][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.982274][T14148] tc action pedit 'at' offset -4096 out of bounds [ 266.988757][T14148] TC_ACT_REPEAT abuse ? [ 267.012057][T14150] TC_ACT_REPEAT abuse ? [ 267.128921][T14161] netlink: 'syz.6.2234': attribute type 1 has an invalid length. [ 267.154547][T14161] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2234'. [ 267.261581][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 267.358803][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2237'. [ 267.382879][T14174] xt_ecn: cannot match TCP bits for non-tcp packets [ 267.386824][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2239'. [ 267.600940][T14192] netlink: 'syz.6.2241': attribute type 23 has an invalid length. [ 267.702643][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2244'. [ 267.989340][T14217] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2248'. [ 268.220511][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 268.445559][T14254] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2254'. [ 271.011659][T14220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.038870][T14252] netlink: 'syz.2.2254': attribute type 2 has an invalid length. [ 271.064244][T14252] netlink: 'syz.2.2254': attribute type 2 has an invalid length. [ 271.268162][T14268] netlink: 'syz.5.2259': attribute type 1 has an invalid length. [ 271.316697][T14262] Cannot find del_set index 2 as target [ 271.345039][T14262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.422183][T14268] bond1: entered promiscuous mode [ 271.433742][T14268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.472288][T14277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.479758][T14277] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 271.490735][T14277] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 271.503774][T14277] bond1: (slave ip6gre1): making interface the new active one [ 271.511519][T14277] ip6gre1: entered promiscuous mode [ 271.520092][T14277] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 271.812502][T14300] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2266'. [ 271.822362][T14292] C: renamed from lo [ 271.846966][T14292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.902044][T14305] netlink: 'syz.3.2267': attribute type 21 has an invalid length. [ 271.919200][T14306] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2267'. [ 271.923549][T14300] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2266'. [ 271.931245][T14306] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2267'. [ 271.941302][T14305] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2267'. [ 271.952071][T14306] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2267'. [ 272.068039][T14305] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2267'. [ 272.611211][T14355] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2277'. [ 272.648046][T14355] policy can only be matched on NF_INET_PRE_ROUTING [ 272.648067][T14355] unable to load match [ 272.850294][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2285'. [ 272.858987][T14366] pim6reg: entered allmulticast mode [ 272.860839][T14368] sctp: [Deprecated]: syz.2.2283 (pid 14368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.860839][T14368] Use struct sctp_sack_info instead [ 272.892437][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2285'. [ 272.902312][T14366] openvswitch: netlink: IPv6 tunnel dst address is zero [ 272.964280][ T4948] Bluetooth: hci3: command 0x0405 tx timeout [ 273.594176][T14413] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 273.977134][T14428] netlink: 'syz.6.2303': attribute type 11 has an invalid length. [ 274.308733][T14432] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 274.328659][T14432] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 274.644353][T14467] syzkaller1: entered promiscuous mode [ 274.651584][T14467] syzkaller1: entered allmulticast mode [ 274.712067][T14464] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 274.751082][T14464] netlink: 'syz.5.2313': attribute type 30 has an invalid length. [ 275.032031][T14494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.437317][T14517] set match dimension is over the limit! [ 275.483790][T14524] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 275.597011][T14524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.819512][T14544] tipc: Enabling of bearer rejected, failed to enable media [ 276.185304][T14554] netlink: 'syz.2.2344': attribute type 32 has an invalid length. [ 276.254674][T14554] bond7: option coupled_control: invalid value (109) [ 276.302600][T14554] bond7 (unregistering): Released all slaves [ 276.509959][T14565] netlink: 'syz.3.2347': attribute type 16 has an invalid length. [ 277.547241][T14629] : entered promiscuous mode [ 277.564286][T14633] __nla_validate_parse: 25 callbacks suppressed [ 277.564305][T14633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2363'. [ 277.709168][T14641] syzkaller1: entered promiscuous mode [ 277.736145][T14641] syzkaller1: entered allmulticast mode [ 278.108247][T14668] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2371'. [ 278.148427][T14672] veth1_to_bond: entered allmulticast mode [ 278.181194][T14675] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 278.202837][T14675] netlink: 'syz.1.2373': attribute type 2 has an invalid length. [ 278.217985][T14675] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 278.257868][T14675] netlink: 'syz.1.2373': attribute type 2 has an invalid length. [ 278.366792][T14683] netlink: 'syz.1.2376': attribute type 29 has an invalid length. [ 278.375574][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 278.423005][T14671] veth1_to_bond: left allmulticast mode [ 278.665694][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 279.161080][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'. [ 279.389901][T14747] netlink: 'syz.6.2394': attribute type 1 has an invalid length. [ 279.927884][T14776] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2403'. [ 280.149940][T14788] netlink: 'syz.3.2409': attribute type 12 has an invalid length. [ 280.168367][T14791] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2408'. [ 280.189871][T14786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.277363][T14796] veth0_virt_wifi: entered promiscuous mode [ 280.286313][T14800] netlink: 'syz.1.2410': attribute type 1 has an invalid length. [ 280.307523][T14800] erspan0: entered promiscuous mode [ 280.319375][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 280.338928][T14799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2412'. [ 280.490776][T14812] netlink: 'syz.3.2415': attribute type 1 has an invalid length. [ 280.503241][T14812] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2415'. [ 280.883492][T14834] h: entered promiscuous mode [ 281.103115][T14854] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 281.137631][T14856] xt_socket: unknown flags 0x8 [ 281.210913][T14857] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.541628][T14876] x_tables: duplicate underflow at hook 1 [ 282.640090][T14939] netlink: 'syz.2.2449': attribute type 6 has an invalid length. [ 282.955163][T14947] pim6reg527: entered allmulticast mode [ 283.545548][T14987] netlink: 'syz.1.2456': attribute type 1 has an invalid length. [ 283.647861][T14995] __nla_validate_parse: 5 callbacks suppressed [ 283.647879][T14995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2457'. [ 283.690827][T14987] 8021q: adding VLAN 0 to HW filter on device bond13 [ 283.706133][T14994] netlink: 'syz.6.2458': attribute type 3 has an invalid length. [ 283.795142][T14992] bond13: (slave geneve3): making interface the new active one [ 283.821319][T14992] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 284.279342][T15026] xt_limit: Overflow, try lower: 604147548/4200216962 [ 284.484965][T15043] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 284.558290][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 284.596004][T15043] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 284.611969][T15052] netlink: 'syz.6.2475': attribute type 2 has an invalid length. [ 284.648770][T15052] netlink: 'syz.6.2475': attribute type 2 has an invalid length. [ 284.666527][T15043] macvlan3: entered promiscuous mode [ 284.672318][T15043] macvlan3: entered allmulticast mode [ 284.679207][T15043] bond8: entered promiscuous mode [ 284.684575][T15043] bridge3: entered promiscuous mode [ 284.690828][T15043] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 284.700489][T15043] bond8: left promiscuous mode [ 284.705829][T15043] bridge3: left promiscuous mode [ 284.933471][T15066] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2480'. [ 284.937832][T15068] netlink: 'syz.2.2481': attribute type 4 has an invalid length. [ 284.967215][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2480'. [ 285.006452][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2480'. [ 285.134705][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2487'. [ 285.145654][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2487'. [ 285.489893][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2495'. [ 285.499003][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2495'. [ 285.551815][T15107] syzkaller0: entered promiscuous mode [ 285.563159][T15107] syzkaller0: entered allmulticast mode [ 285.576968][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2495'. [ 285.793584][T15124] veth0: entered promiscuous mode [ 285.814775][T15122] syzkaller0: entered promiscuous mode [ 285.820341][T15122] syzkaller0: entered allmulticast mode [ 286.092637][T15123] veth0: left promiscuous mode [ 286.118345][T15137] netlink: 'syz.3.2504': attribute type 39 has an invalid length. [ 287.014638][T15189] netlink: 'syz.2.2523': attribute type 21 has an invalid length. [ 287.025965][T15189] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 287.312233][T15204] veth0: entered promiscuous mode [ 287.349922][T15204] veth0: left promiscuous mode [ 287.393363][T15204] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 287.406182][T15204] syzkaller1: linktype set to 823 [ 287.612292][T15227] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 287.912426][T15235] bond7: Invalid ad_actor_system MAC address. [ 287.943611][T15235] bond7: option ad_actor_system: invalid value (1) [ 287.968154][T15235] bond7 (unregistering): Released all slaves [ 287.980589][ T29] IPVS: starting estimator thread 0... [ 288.028250][T15251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.073957][T15253] IPVS: using max 33 ests per chain, 79200 per kthread [ 288.197205][T15260] 8021q: VLANs not supported on ip6_vti0 [ 288.495039][T14965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.517889][T14965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.541988][T15284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.549136][T15285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.833195][T15310] __nla_validate_parse: 15 callbacks suppressed [ 288.833213][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2558'. [ 288.866483][T15310] netlink: 'syz.3.2558': attribute type 7 has an invalid length. [ 288.880968][T15310] netlink: 'syz.3.2558': attribute type 8 has an invalid length. [ 288.888871][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2558'. [ 288.942314][T15310] batadv0: entered promiscuous mode [ 288.960375][T15310] batadv0: left promiscuous mode [ 288.988436][T15303] syzkaller1: entered promiscuous mode [ 288.994343][T15303] syzkaller1: entered allmulticast mode [ 289.031284][T15320] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 289.037312][T15320] syzkaller1: group set to 0 [ 289.549686][T15299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.694982][T15350] netlink: 'syz.2.2568': attribute type 30 has an invalid length. [ 289.772220][T15361] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2572'. [ 289.848721][T15367] netlink: 512 bytes leftover after parsing attributes in process `syz.6.2573'. [ 290.188604][T15393] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2579'. [ 290.401946][T15405] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2581'. [ 290.810170][T15430] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 290.821931][T15410] nbd2: detected capacity change from 0 to 63 [ 290.832031][T15422] netlink: 'syz.1.2587': attribute type 3 has an invalid length. [ 290.844753][ T4948] block nbd2: Receive control failed (result -32) [ 290.855298][ T5651] block nbd2: Send control failed (result -32) [ 290.859328][ T5637] block nbd2: Receive control failed (result -32) [ 290.868211][T15422] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2587'. [ 290.895081][ T5651] block nbd2: Request send failed, requeueing [ 290.924452][ T1703] block nbd2: Dead connection, failed to find a fallback [ 290.936601][ T1703] block nbd2: shutting down sockets [ 290.942797][ T1703] blk_print_req_error: 286 callbacks suppressed [ 290.942811][ T1703] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.960923][T15432] tipc: Enabling of bearer rejected, media not registered [ 290.961858][ T1703] buffer_io_error: 286 callbacks suppressed [ 290.961872][ T1703] Buffer I/O error on dev nbd2, logical block 0, async page read [ 290.987226][ T5651] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.996427][ T5651] Buffer I/O error on dev nbd2, logical block 1, async page read [ 291.004677][ T5651] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.013743][ T5651] Buffer I/O error on dev nbd2, logical block 2, async page read [ 291.022560][ T5651] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.031719][ T5651] Buffer I/O error on dev nbd2, logical block 3, async page read [ 291.039981][ T5651] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.049724][ T5651] Buffer I/O error on dev nbd2, logical block 0, async page read [ 291.057814][ T5651] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.083920][ T5651] Buffer I/O error on dev nbd2, logical block 1, async page read [ 291.093314][ T5651] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.116161][ T5651] Buffer I/O error on dev nbd2, logical block 2, async page read [ 291.127655][ T5651] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.136896][ T5651] Buffer I/O error on dev nbd2, logical block 3, async page read [ 291.157795][ T5651] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.178724][ T5651] Buffer I/O error on dev nbd2, logical block 0, async page read [ 291.180036][T15445] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 291.198637][ T5651] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.221938][ T5651] Buffer I/O error on dev nbd2, logical block 1, async page read [ 291.263262][ T5651] ldm_validate_partition_table(): Disk read failed. [ 291.275702][ T5651] Dev nbd2: unable to read RDB block 0 [ 291.294716][ T5651] nbd2: unable to read partition table [ 291.319041][ T5651] ldm_validate_partition_table(): Disk read failed. [ 291.328319][ T5651] Dev nbd2: unable to read RDB block 0 [ 291.337288][ T5651] nbd2: unable to read partition table [ 291.428162][T15457] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2597'. [ 291.448572][T15453] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 291.455486][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 291.548560][T15450] bond8: (slave bridge7): Enslaving as a backup interface with an up link [ 291.620856][T15445] macvlan2: entered promiscuous mode [ 291.676027][T15445] macvlan2: entered allmulticast mode [ 291.855198][T15481] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2601'. [ 291.958137][T15480] veth1_macvtap: entered promiscuous mode [ 291.967477][T15480] veth1_macvtap: entered allmulticast mode [ 291.978739][T15480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.996691][T15480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.036496][T15480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.050555][T15480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.060587][T15480] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.072883][T15480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.083125][T15480] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.121739][T15480] 8021q: adding VLAN 0 to HW filter on device bond10 [ 292.149259][T15481] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.156664][T15481] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.277657][T15490] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 292.685548][T15524] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 292.735109][T15524] netlink: 'syz.3.2610': attribute type 4 has an invalid length. [ 293.076189][ T1130] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.428294][T15560] ve: renamed from veth0_vlan (while UP) [ 293.705935][T15573] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 293.890270][T15576] bond3: Invalid ad_actor_system MAC address. [ 293.963028][T15576] bond3: option ad_actor_system: invalid value (1) [ 293.980821][T15576] bond3 (unregistering): Released all slaves [ 294.234355][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.392799][T15599] pim6reg: entered allmulticast mode [ 294.817413][T15621] __nla_validate_parse: 8 callbacks suppressed [ 294.817429][T15621] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2640'. [ 294.823389][T15620] bridge2: entered promiscuous mode [ 294.870175][T15620] bridge2: entered allmulticast mode [ 295.116338][T15639] netlink: 'syz.5.2644': attribute type 21 has an invalid length. [ 295.210648][T15636] bond14 (unregistering): Released all slaves [ 295.296567][T15639] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 295.326456][T15639] bond2 (unregistering): Released all slaves [ 295.357910][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.462128][T15648] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 295.645547][T15658] netlink: 'syz.6.2650': attribute type 22 has an invalid length. [ 295.680990][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2650'. [ 295.766509][T15668] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2651'. [ 295.795099][T15658] netlink: 'syz.6.2650': attribute type 22 has an invalid length. [ 295.796987][T15666] netlink: 572 bytes leftover after parsing attributes in process `syz.1.2649'. [ 295.820703][T15668] batman_adv: batadv0: Removing interface: ve [ 295.832458][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2650'. [ 296.106499][T15677] xt_socket: unknown flags 0x50 [ 296.159283][T15682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.456415][T15704] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2659'. [ 296.471851][T15701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2661'. [ 296.489282][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.512458][T15701] netlink: 'syz.6.2661': attribute type 3 has an invalid length. [ 296.689008][T15716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2663'. [ 297.056466][T15740] netlink: 'syz.1.2672': attribute type 58 has an invalid length. [ 297.066517][T15733] syzkaller0: entered allmulticast mode [ 297.072267][T15739] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2671'. [ 297.086210][T15740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2672'. [ 297.379907][T15764] raw_sendmsg: syz.6.2676 forgot to set AF_INET. Fix it! [ 297.398004][T15752] bond10 (unregistering): Released all slaves [ 297.522361][T15776] netlink: 'syz.3.2678': attribute type 25 has an invalid length. [ 297.606892][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.008856][T15808] syzkaller0: entered promiscuous mode [ 298.017106][T15808] syzkaller0: entered allmulticast mode [ 298.748209][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.874120][T14959] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 300.664876][T15793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.813508][T15820] __nla_validate_parse: 8 callbacks suppressed [ 300.813529][T15820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2692'. [ 300.984056][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 301.360659][T15863] SET target dimension over the limit! [ 301.384269][T15864] sock: sock_timestamping_bind_phc: sock not bind to device [ 301.385247][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2702'. [ 301.519858][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2704'. [ 301.813765][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 302.105739][T14959] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 302.183425][T15901] netlink: 'syz.2.2712': attribute type 61 has an invalid length. [ 302.195361][T15905] netlink: 'syz.6.2713': attribute type 2 has an invalid length. [ 302.496994][T15927] netlink: 'syz.1.2718': attribute type 3 has an invalid length. [ 302.523898][T15927] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2718'. [ 302.667912][T15940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2720'. [ 302.730931][T15948] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2720'. [ 302.930814][T15961] netlink: 'syz.6.2727': attribute type 1 has an invalid length. [ 302.967104][T15961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.069229][T15961] bond3: (slave geneve2): making interface the new active one [ 303.098508][T15961] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 303.214478][T15980] sctp: [Deprecated]: syz.2.2728 (pid 15980) Use of int in max_burst socket option. [ 303.214478][T15980] Use struct sctp_assoc_value instead [ 303.236462][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.275676][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2728'. [ 303.660920][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2740'. [ 303.660919][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2740'. [ 303.935950][T16022] team0: Cannot enslave team device to itself [ 304.119878][ T4948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.131289][ T4948] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.141193][ T4948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.152049][ T4948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.160150][ T4948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.376970][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 304.782757][T14965] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.794603][T14965] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.806777][T14965] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 304.817890][T14965] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 304.863743][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.871932][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.879613][T16026] bridge_slave_0: entered allmulticast mode [ 304.888329][T16026] bridge_slave_0: entered promiscuous mode [ 304.896481][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.903655][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.911042][T16026] bridge_slave_1: entered allmulticast mode [ 304.918588][T16026] bridge_slave_1: entered promiscuous mode [ 304.962619][T14965] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.973272][T14965] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.984325][T14965] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 304.996041][T14965] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 305.016073][T16026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.027601][T16026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.060702][T16026] team0: Port device team_slave_0 added [ 305.069219][T16026] team0: Port device team_slave_1 added [ 305.088410][T14965] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.099439][T14965] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.110920][T14965] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 305.121320][T14965] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 305.152506][T16026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.159682][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.185986][T16026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.198770][T16026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.206476][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.232702][T16026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.267697][T14965] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.277355][T14965] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.287174][T14965] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 305.298308][T14965] netdevsim netdevsim2  (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 305.334805][T16026] hsr_slave_0: entered promiscuous mode [ 305.341066][T16026] hsr_slave_1: entered promiscuous mode [ 305.347806][T16026] debugfs: 'hsr0' already exists in 'hsr' [ 305.353550][T16026] Cannot create hsr debugfs directory [ 305.508736][T14965] bridge_slave_1: left allmulticast mode [ 305.514733][T14965] bridge_slave_1: left promiscuous mode [ 305.523265][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.533311][T14965] bridge_slave_0: left allmulticast mode [ 305.534622][ T1178] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.539080][T14965] bridge_slave_0: left promiscuous mode [ 305.539800][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.571927][T14965] veth0_to_bond: left allmulticast mode [ 305.577777][T14965] veth0_to_bond: left promiscuous mode [ 305.583944][T14965] bridge4: port 1(veth0_to_bond) entered disabled state [ 305.813571][T14965] bond5 (unregistering): (slave geneve4): Releasing active interface [ 305.829657][T14965] bond2 (unregistering): (slave geneve2): Releasing active interface [ 306.040490][T14965] bond3 (unregistering): (slave bridge5): Releasing active interface [ 306.158696][T14965] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 306.220306][T14965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.231286][T14965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.245157][T14965] bond0 (unregistering): Released all slaves [ 306.254202][ T5637] Bluetooth: hci7: command tx timeout [ 306.258223][T14965] bond1 (unregistering): Released all slaves [ 306.273745][T14965] bond2 (unregistering): Released all slaves [ 306.291243][T14965] bond3 (unregistering): Released all slaves [ 306.307191][T14965] bond4 (unregistering): Released all slaves [ 306.321752][T14965] bond6 (unregistering): Released all slaves [ 306.335326][T14965] bond5 (unregistering): Released all slaves [ 306.355549][T14965] bond7 (unregistering): Released all slaves [ 306.372200][T14965] bond8 (unregistering): Released all slaves [ 306.385801][T14965] bond9 (unregistering): Released all slaves [ 306.521573][T15999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.532833][T14965] tipc: Left network mode [ 306.654269][T10536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.003285][T16060] netlink: 'syz.5.2749': attribute type 5 has an invalid length. [ 307.034218][T16060] __nla_validate_parse: 1 callbacks suppressed [ 307.034235][T16060] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2749'. [ 307.099594][T16057] veth0: entered promiscuous mode [ 307.115743][T16065] batadv_slave_1: entered promiscuous mode [ 307.126708][T16043] batadv_slave_1: left promiscuous mode [ 307.143679][T16043] veth0: left promiscuous mode [ 307.483708][T16079] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 307.514696][T16079] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 307.642823][T16091] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2756'. [ 307.674985][T16079] tipc: Started in network mode [ 307.691097][T16079] tipc: Node identity 76657468115f, cluster identity 4711 [ 307.700009][T16079] tipc: Enabled bearer , priority 0 [ 307.730885][T16098] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2756'. [ 307.835465][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.987706][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2760'. [ 308.047551][T16102] netlink: 'syz.3.2759': attribute type 1 has an invalid length. [ 308.208860][T16119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2759'. [ 308.325628][ T5637] Bluetooth: hci7: command tx timeout [ 308.557471][T16026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.633266][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.671244][T16026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.710426][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.729115][T16026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 308.786249][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.832141][T16026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 308.860700][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.876906][ T29] tipc: Node number set to 1731884136 [ 308.977691][T10536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.383236][ T30] audit: type=1804 audit(1781398814.492:4): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2774" name="/newroot/158/cgroup.controllers" dev="tmpfs" ino=821 res=1 errno=0 [ 309.470983][ T30] audit: type=1800 audit(1781398814.492:5): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2774" name="cgroup.controllers" dev="tmpfs" ino=821 res=0 errno=0 [ 309.578968][T14965] hsr_slave_0: left promiscuous mode [ 309.608994][T14965] hsr_slave_1: left promiscuous mode [ 309.678728][T16194] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2778'. [ 309.692395][T16190] netlink: 'syz.6.2777': attribute type 1 has an invalid length. [ 309.699340][T14965] veth1_macvtap: left promiscuous mode [ 309.722567][T14965] veth0_macvtap: left promiscuous mode [ 309.735683][T14965] veth1_vlan: left promiscuous mode [ 309.756684][T14965] veth0_vlan: left promiscuous mode [ 309.791047][T16200] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2779'. [ 310.111201][ T1060] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 310.400583][T16222] netlink: 'syz.5.2782': attribute type 1 has an invalid length. [ 310.405088][ T5637] Bluetooth: hci7: command tx timeout [ 310.474288][T10536] smc: removing ib device syz0 [ 310.521325][T14965] team0 (unregistering): Port device team_slave_1 removed [ 310.538786][T14965] team0 (unregistering): Port device team_slave_0 removed [ 310.637155][T14965] team0 (unregistering): Port device dummy0 removed [ 310.675541][T16184] tc_dump_action: action bad kind [ 310.684797][ T24] syz0: Port: 1 Link DOWN [ 310.775901][T10536] smbdirect: ib_dev[syz0] removed [ 310.802730][T16190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 310.855666][T16231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'. [ 310.892061][T16197] bond4: (slave geneve3): making interface the new active one [ 310.902428][T16197] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 311.095349][T16222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.129290][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 311.130951][T16238] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 311.247159][T16242] netlink: 'syz.6.2786': attribute type 61 has an invalid length. [ 311.274735][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.281601][T16242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2786'. [ 311.556803][T16238] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.573729][T16026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.739121][T16026] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.761880][T16268] xt_ecn: cannot match TCP bits for non-tcp packets [ 311.825708][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.832892][T10537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.922935][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.930111][T10537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.079456][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2797'. [ 312.098328][T16289] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2797'. [ 312.113385][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2797'. [ 312.209308][T16286] gre2: entered promiscuous mode [ 312.216962][T16286] gre2: entered allmulticast mode [ 312.415092][T14959] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.484442][ T5637] Bluetooth: hci7: command tx timeout [ 312.566478][T16295] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 312.709801][T16314] openvswitch: netlink: IPv4 tun info is not correct [ 312.729637][T16304] bond10: option fail_over_mac: invalid value (16) [ 312.738424][T16304] bond10 (unregistering): Released all slaves [ 312.775119][T16315] netlink: 'syz.6.2802': attribute type 7 has an invalid length. [ 313.186538][T16325] bond0: (slave bond_slave_1): Releasing backup interface [ 313.266681][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2808'. [ 313.526764][ T763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 313.638663][T16346] netlink: 'syz.1.2813': attribute type 1 has an invalid length. [ 313.870923][T16346] bond14: entered promiscuous mode [ 313.880820][T16346] 8021q: adding VLAN 0 to HW filter on device bond14 [ 313.956934][T16353] 8021q: adding VLAN 0 to HW filter on device bond14 [ 313.967702][T16353] bond14: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 313.985317][T16353] bond14: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 314.018442][T16353] bond14: (slave ip6gre2): making interface the new active one [ 314.038783][T16353] ip6gre2: entered promiscuous mode [ 314.052711][T16353] bond14: (slave ip6gre2): Enslaving as an active interface with an up link [ 314.311239][T14965] IPVS: stop unused estimator thread 0... [ 314.471284][T16376] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 314.504817][T16377] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20068 [ 314.564565][T16026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.648071][T16384] netlink: 'syz.6.2820': attribute type 8 has an invalid length. [ 314.714946][T10536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.837227][T16392] netlink: 'syz.1.2822': attribute type 3 has an invalid length. [ 314.889570][T16026] veth0_vlan: entered promiscuous mode [ 314.896460][T16390] netlink: 'syz.1.2822': attribute type 3 has an invalid length. [ 314.936170][T16026] veth1_vlan: entered promiscuous mode [ 315.141550][T16026] veth0_macvtap: entered promiscuous mode [ 315.202974][T16026] veth1_macvtap: entered promiscuous mode [ 315.321719][T16026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.370678][T16026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.398657][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2828'. [ 315.419292][T14964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.452492][T14964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.497133][T16412] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 315.533002][T14964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.602570][T14964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.832944][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.848150][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.852700][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.877303][T16432] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2833'. [ 315.888245][T16432] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2833'. [ 315.972596][T16436] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2833'. [ 315.972617][T10537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.001698][T16438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2835'. [ 316.010408][T10537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.052594][T16438] bond3: entered promiscuous mode [ 316.060648][T16438] bond3: entered allmulticast mode [ 316.435506][T16448] syzkaller1: entered promiscuous mode [ 316.462856][T16448] syzkaller1: entered allmulticast mode [ 316.671600][T16463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2843'. [ 316.761537][T16466] Cannot find del_set index 2 as target [ 316.907215][T16479] netlink: 'syz.2.2846': attribute type 21 has an invalid length. [ 316.948801][T16479] netlink: 'syz.2.2846': attribute type 1 has an invalid length. [ 317.020483][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.139805][T16487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.329802][T16502] __nla_validate_parse: 1 callbacks suppressed [ 317.329821][T16502] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.2852'. [ 317.354277][ T4948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.363762][ T4948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.377213][ T4948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.389640][ T4948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.400262][ T4948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.427506][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2854'. [ 317.619751][T16510] netlink: 'syz.2.2857': attribute type 10 has an invalid length. [ 317.678165][T16515] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2858'. [ 317.756904][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2856'. [ 318.188701][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 318.334639][T16553] netlink: 'syz.2.2868': attribute type 10 has an invalid length. [ 318.346091][T16555] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2869'. [ 318.356677][T16553] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2868'. [ 318.366002][T16555] netlink: Conntrack attr has 4 unknown bytes [ 318.372878][T16551] netlink: 'syz.6.2867': attribute type 23 has an invalid length. [ 318.643536][T16564] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2871'. [ 318.997236][T16501] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.005229][T16501] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.012535][T16501] bridge_slave_0: entered allmulticast mode [ 319.021482][T16501] bridge_slave_0: entered promiscuous mode [ 319.030877][T16501] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.038994][T16501] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.085913][T16501] bridge_slave_1: entered allmulticast mode [ 319.099161][T16501] bridge_slave_1: entered promiscuous mode [ 319.191011][T16501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.215189][T16501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.351797][T16501] team0: Port device team_slave_0 added [ 319.377059][ T1178] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 319.413498][T16501] team0: Port device team_slave_1 added [ 319.525516][ T5637] Bluetooth: hci4: command tx timeout [ 319.556385][T16501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.571735][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.583967][T16603] netlink: 'syz.5.2881': attribute type 1 has an invalid length. [ 319.598645][T16501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.626864][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 319.637745][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2881'. [ 319.655702][T16501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.671575][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.721014][T16501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.852706][T16501] hsr_slave_0: entered promiscuous mode [ 319.876370][T16501] hsr_slave_1: entered promiscuous mode [ 319.882474][T16501] debugfs: 'hsr0' already exists in 'hsr' [ 319.888287][T16501] Cannot create hsr debugfs directory [ 319.965207][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'. [ 319.994805][T16618] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 320.053064][T16618] team1: entered promiscuous mode [ 320.058302][T16618] team1: entered allmulticast mode [ 320.080162][T16622] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 320.234355][T16501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.248068][T16501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.267763][T16501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 320.394222][T16501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.406145][T16501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.417311][T16501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 320.447698][T16632] SET target dimension over the limit! [ 320.524011][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.613698][T16501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.629262][T16501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.640325][T16501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 320.788537][T16501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.822938][T16501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.836068][T16501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 321.025539][T16650] syzkaller0: entered promiscuous mode [ 321.031126][T16650] syzkaller0: entered allmulticast mode [ 321.133646][T16501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.143502][T16501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.153523][T16501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.176646][T16501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.193431][T16501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.214358][T16501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.225704][T16501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.239995][T16501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.470488][T16501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.497743][T16501] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.512798][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.519973][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.544393][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.551547][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.578790][T16678] netlink: 'syz.2.2903': attribute type 1 has an invalid length. [ 321.604405][ T5637] Bluetooth: hci4: command tx timeout [ 321.677239][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.888226][T16692] netlink: 'syz.6.2906': attribute type 11 has an invalid length. [ 322.373559][T16714] __nla_validate_parse: 8 callbacks suppressed [ 322.373578][T16714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2912'. [ 322.452585][T16715] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2911'. [ 322.479292][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2911'. [ 322.513171][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2911'. [ 322.648879][T16501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.826341][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.892933][T16501] veth0_vlan: entered promiscuous mode [ 322.983504][T16501] veth1_vlan: entered promiscuous mode [ 323.109731][T16501] veth0_macvtap: entered promiscuous mode [ 323.149344][T16501] veth1_macvtap: entered promiscuous mode [ 323.202132][T16501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.227672][T16501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.249596][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.272102][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.283267][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.310978][ T1178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.439488][T16756] netlink: 'syz.6.2922': attribute type 1 has an invalid length. [ 323.449156][T10536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.460959][T10536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.490562][T16756] ip6gretap1: entered promiscuous mode [ 323.498099][T16756] ip6gretap1: entered allmulticast mode [ 323.508270][T16756] bond5: (slave ip6gretap1): making interface the new active one [ 323.517048][T16756] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 323.527605][T16756] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 323.535814][T16756] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 323.567301][T10537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.582390][T10537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.685482][ T4948] Bluetooth: hci4: command tx timeout [ 323.770130][T16768] netlink: 'syz.1.2848': attribute type 39 has an invalid length. [ 323.804740][T16768] hsr_slave_0: left promiscuous mode [ 323.828228][T16768] hsr_slave_1: left promiscuous mode [ 323.955654][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 324.104626][T16784] syzkaller1: entered promiscuous mode [ 324.123017][T16784] syzkaller1: entered allmulticast mode [ 324.167000][T16784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2926'. [ 324.202016][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2926'. [ 324.226387][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.245835][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.257538][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.260585][T16784] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2926'. [ 324.275762][T16788] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2927'. [ 324.291159][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.301065][T16788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2927'. [ 324.314228][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.355420][T16788] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2927'. [ 325.056948][T16827] sctp: [Deprecated]: syz.5.2937 (pid 16827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.056948][T16827] Use struct sctp_sack_info instead [ 325.095781][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.104952][T16827] sctp: [Deprecated]: syz.5.2937 (pid 16827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.104952][T16827] Use struct sctp_sack_info instead [ 325.471373][T16841] ve: renamed from dummy0 (while UP) [ 325.732366][T16858] syzkaller0: entered promiscuous mode [ 325.743372][T16858] syzkaller0: entered allmulticast mode [ 325.764649][ T4948] Bluetooth: hci4: command 0x0419 tx timeout [ 325.912270][T16861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.920963][T16867] x_tables: unsorted entry at hook 2 [ 325.982208][T16785] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.990034][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.998004][T16785] bridge_slave_0: entered allmulticast mode [ 326.006104][T16785] bridge_slave_0: entered promiscuous mode [ 326.015026][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.022298][T16785] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.029681][T16785] bridge_slave_1: entered allmulticast mode [ 326.039990][T16785] bridge_slave_1: entered promiscuous mode [ 326.109388][T16785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.121751][T16785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.211248][T16785] team0: Port device team_slave_0 added [ 326.222881][T16785] team0: Port device team_slave_1 added [ 326.237241][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 326.316080][T16785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.323219][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.372080][T16785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.393628][T16785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.401192][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.431856][T16785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.443126][ T5637] Bluetooth: hci1: command tx timeout [ 326.463549][T16886] sctp: [Deprecated]: syz.6.2954 (pid 16886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.463549][T16886] Use struct sctp_sack_info instead [ 326.587069][T16892] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 326.608168][T16892] netlink: 'syz.1.2958': attribute type 2 has an invalid length. [ 326.658936][T16785] hsr_slave_0: entered promiscuous mode [ 326.679686][T16785] hsr_slave_1: entered promiscuous mode [ 326.686683][T16785] debugfs: 'hsr0' already exists in 'hsr' [ 326.692782][T16785] Cannot create hsr debugfs directory [ 326.914785][T16916] netlink: 'syz.6.2960': attribute type 61 has an invalid length. [ 327.011029][T16920] netlink: 'syz.6.2960': attribute type 61 has an invalid length. [ 327.240454][T16929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.255640][T16929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.285257][T16929] bond0 (unregistering): Released all slaves [ 327.380010][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.411621][T16785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.448152][T16785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.613320][T16785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.627464][T16785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.844613][ T5637] Bluetooth: hci4: command 0x0419 tx timeout [ 328.484723][ T5637] Bluetooth: hci1: command tx timeout [ 328.514008][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 329.624222][ T763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 329.689897][T16899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.715358][T16785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.766437][T16785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.795848][T16785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.867428][T16785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.917486][T16957] ip6gre1: entered allmulticast mode [ 329.952643][T16785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.999737][T16785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.026623][T16968] tc_dump_action: action bad kind [ 330.039051][T16972] __nla_validate_parse: 6 callbacks suppressed [ 330.039069][T16972] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2975'. [ 330.057078][T16785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.086195][T16785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.118981][T16974] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2974'. [ 330.306382][T16785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.359376][T16785] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.380644][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.387901][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.420734][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.427998][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.564428][ T5637] Bluetooth: hci1: command tx timeout [ 330.745545][ T763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.871459][T16785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.918595][T16785] veth0_vlan: entered promiscuous mode [ 330.936387][T16785] veth1_vlan: entered promiscuous mode [ 330.987167][T16785] veth0_macvtap: entered promiscuous mode [ 331.001662][T16785] veth1_macvtap: entered promiscuous mode [ 331.019345][T16785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.033364][T16785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.051370][T14965] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.061132][T14965] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.071063][T14965] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.083516][T14965] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.876009][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.644488][ T5637] Bluetooth: hci1: command tx timeout [ 332.994216][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 333.144386][T16985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.391570][T10537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.416724][T10537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.551938][ T763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.589116][ T763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.785503][T17054] FAULT_INJECTION: forcing a failure. [ 333.785503][T17054] name failslab, interval 1, probability 0, space 0, times 1 [ 333.801417][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 333.806731][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 333.823554][T17054] CPU: 0 UID: 0 PID: 17054 Comm: syz.6.2990 Not tainted syzkaller #0 PREEMPT(full) [ 333.823579][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.823596][T17054] Call Trace: [ 333.823603][T17054] [ 333.823612][T17054] dump_stack_lvl+0xe8/0x150 [ 333.823639][T17054] should_fail_ex+0x40c/0x560 [ 333.823663][T17054] should_failslab+0xa8/0x100 [ 333.823690][T17054] ? skb_clone+0x212/0x3a0 [ 333.823708][T17054] kmem_cache_alloc_noprof+0x87/0x650 [ 333.823737][T17054] skb_clone+0x212/0x3a0 [ 333.823756][T17054] __netlink_deliver_tap+0x413/0x860 [ 333.823792][T17054] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.823817][T17054] netlink_deliver_tap+0x19c/0x1b0 [ 333.823841][T17054] netlink_unicast+0x77f/0x940 [ 333.823871][T17054] netlink_sendmsg+0x813/0xb40 [ 333.823903][T17054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.823930][T17054] ? aa_sock_msg_perm+0xf1/0x1b0 [ 333.823955][T17054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.823974][T17054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.823996][T17054] ____sys_sendmsg+0x9b9/0xa20 [ 333.824019][T17054] ? __might_fault+0xaf/0x130 [ 333.824047][T17054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.824080][T17054] ? import_iovec+0x73/0xa0 [ 333.824104][T17054] ___sys_sendmsg+0x2a5/0x360 [ 333.824129][T17054] ? __lock_acquire+0x683/0x2cd0 [ 333.824152][T17054] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.824220][T17054] ? __fget_files+0x2a/0x420 [ 333.824238][T17054] ? __fget_files+0x3a2/0x420 [ 333.824269][T17054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 333.824298][T17054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.824329][T17054] ? __pfx_ksys_write+0x10/0x10 [ 333.824361][T17054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.824378][T17054] do_syscall_64+0x174/0x580 [ 333.824393][T17054] ? trace_irq_disable+0x3b/0x140 [ 333.824416][T17054] ? clear_bhb_loop+0x40/0x90 [ 333.824436][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.824452][T17054] RIP: 0033:0x7fb803f9ce59 [ 333.824467][T17054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.824482][T17054] RSP: 002b:00007fb804e10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.824509][T17054] RAX: ffffffffffffffda RBX: 00007fb804216090 RCX: 00007fb803f9ce59 [ 333.824521][T17054] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 333.824531][T17054] RBP: 00007fb804e10090 R08: 0000000000000000 R09: 0000000000000000 [ 333.824542][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.824552][T17054] R13: 00007fb804216128 R14: 00007fb804216090 R15: 00007ffe2e02d7e8 [ 333.824582][T17054] [ 334.103287][T17055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2925'. [ 334.112949][T17055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2925'. [ 334.127268][T17047] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 334.146885][T17047] CPU: 1 UID: 0 PID: 17047 Comm: syz.5.2987 Not tainted syzkaller #0 PREEMPT(full) [ 334.146908][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.146918][T17047] Call Trace: [ 334.146924][T17047] [ 334.146932][T17047] dump_stack_lvl+0xe8/0x150 [ 334.146957][T17047] sysfs_warn_dup+0x8e/0xa0 [ 334.146979][T17047] sysfs_do_create_link_sd+0xc0/0x110 [ 334.147004][T17047] device_add_class_symlinks+0x1cf/0x240 [ 334.147033][T17047] device_add+0x467/0xb90 [ 334.147060][T17047] wiphy_register+0x1dca/0x2de0 [ 334.147095][T17047] ? __pfx_wiphy_register+0x10/0x10 [ 334.147112][T17047] ? __pfx_netdev_run_todo+0x10/0x10 [ 334.147129][T17047] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 334.147168][T17047] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 334.147201][T17047] ieee80211_register_hw+0x3d58/0x4a40 [ 334.147237][T17047] ? ieee80211_register_hw+0x1921/0x4a40 [ 334.147284][T17047] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 334.147308][T17047] ? __asan_memset+0x22/0x50 [ 334.147331][T17047] ? __hrtimer_setup+0x1b7/0x260 [ 334.147352][T17047] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 334.147373][T17047] mac80211_hwsim_new_radio+0x2ff9/0x5390 [ 334.147427][T17047] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 334.147453][T17047] ? __asan_memcpy+0x40/0x70 [ 334.147475][T17047] ? kstrndup+0xbd/0x160 [ 334.147495][T17047] hwsim_new_radio_nl+0xf63/0x1c00 [ 334.147540][T17047] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 334.147571][T17047] ? rcu_is_watching+0x15/0xb0 [ 334.147593][T17047] ? trace_kmalloc+0x2a/0xf0 [ 334.147622][T17047] ? __nla_parse+0x40/0x60 [ 334.147646][T17047] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 334.147666][T17047] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 334.147694][T17047] genl_family_rcv_msg_doit+0x233/0x340 [ 334.147720][T17047] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 334.147754][T17047] ? bpf_lsm_capable+0x9/0x20 [ 334.147769][T17047] ? security_capable+0x7e/0x2c0 [ 334.147800][T17047] genl_rcv_msg+0x614/0x7a0 [ 334.147827][T17047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.147845][T17047] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 334.147869][T17047] ? __pfx_ref_tracker_free+0x10/0x10 [ 334.147901][T17047] netlink_rcv_skb+0x226/0x4a0 [ 334.147927][T17047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.147949][T17047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.147991][T17047] ? down_read+0x270/0x2e0 [ 334.148010][T17047] ? genl_rcv+0xd/0x40 [ 334.148030][T17047] genl_rcv+0x28/0x40 [ 334.148048][T17047] netlink_unicast+0x7bb/0x940 [ 334.148084][T17047] netlink_sendmsg+0x813/0xb40 [ 334.148119][T17047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.148156][T17047] ? aa_sock_msg_perm+0xf1/0x1b0 [ 334.148183][T17047] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.148205][T17047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.148232][T17047] ____sys_sendmsg+0x9b9/0xa20 [ 334.148257][T17047] ? __might_fault+0xaf/0x130 [ 334.148286][T17047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.148321][T17047] ? import_iovec+0x73/0xa0 [ 334.148347][T17047] ___sys_sendmsg+0x2a5/0x360 [ 334.148372][T17047] ? __lock_acquire+0x683/0x2cd0 [ 334.148395][T17047] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.148427][T17047] ? futex_wait+0x2a2/0x390 [ 334.148478][T17047] ? __fget_files+0x2a/0x420 [ 334.148497][T17047] ? __fget_files+0x3a2/0x420 [ 334.148527][T17047] __x64_sys_sendmsg+0x1bd/0x2a0 [ 334.148554][T17047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.148587][T17047] ? rcu_is_watching+0x15/0xb0 [ 334.148617][T17047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.148635][T17047] do_syscall_64+0x174/0x580 [ 334.148651][T17047] ? trace_irq_disable+0x3b/0x140 [ 334.148675][T17047] ? clear_bhb_loop+0x40/0x90 [ 334.148695][T17047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.148711][T17047] RIP: 0033:0x7f8115d9ce59 [ 334.148728][T17047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.148743][T17047] RSP: 002b:00007f8116d14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.148762][T17047] RAX: ffffffffffffffda RBX: 00007f8116016090 RCX: 00007f8115d9ce59 [ 334.148775][T17047] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 334.148786][T17047] RBP: 00007f8115e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 334.148797][T17047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.148808][T17047] R13: 00007f8116016128 R14: 00007f8116016090 R15: 00007ffdcb604518 [ 334.148839][T17047] [ 334.599989][T17063] netlink: 'syz.3.2925': attribute type 21 has an invalid length. [ 334.612001][T17063] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2925'. [ 334.621419][T17063] netlink: 'syz.3.2925': attribute type 5 has an invalid length. [ 334.640127][T17063] netlink: 'syz.3.2925': attribute type 6 has an invalid length. [ 334.691755][T17063] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2925'. [ 334.705851][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.772153][T17074] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2993'. [ 334.907652][T17083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.916635][T17083] IPv6: NLM_F_CREATE should be set when creating new route [ 334.923936][T17083] IPv6: NLM_F_CREATE should be set when creating new route [ 334.931163][T17083] IPv6: NLM_F_CREATE should be set when creating new route [ 334.940394][T17083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.004665][T17089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.058220][T17080] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 335.071550][T17080] bond1 (unregistering): Released all slaves [ 335.231332][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 335.329269][T17108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3004'. [ 335.438692][T17113] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 335.532211][T17117] syzkaller0: entered promiscuous mode [ 335.546452][T17117] syzkaller0: entered allmulticast mode [ 335.558759][T17115] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.577022][T17115] bridge_slave_0 (unregistering): left allmulticast mode [ 335.584357][T17115] bridge_slave_0 (unregistering): left promiscuous mode [ 335.591463][T17115] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.769557][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3009'. [ 335.832160][T17127] nft_compat: unsupported protocol 0 [ 335.848059][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 336.076968][T17140] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3015'. [ 336.098740][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 336.111349][T17140] Cannot find add_set index 0 as target [ 336.567564][T17168] sch_fq: defrate 0 ignored. [ 336.638083][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3027'. [ 336.746378][T17179] netlink: 'syz.6.3027': attribute type 2 has an invalid length. [ 336.782650][T17183] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3030'. [ 336.818561][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3030'. [ 336.839616][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3029'. [ 336.863558][T17184] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 336.881696][T17184] netlink: 'syz.2.3030': attribute type 11 has an invalid length. [ 336.897781][T17184] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3030'. [ 336.981183][T10536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.201175][T17202] veth0: entered promiscuous mode [ 337.310822][T17201] veth0: left promiscuous mode [ 337.367545][T17215] sctp: [Deprecated]: syz.2.3038 (pid 17215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.367545][T17215] Use struct sctp_sack_info instead [ 338.176942][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.481891][T17265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.812532][T17283] IPv6: addrconf: prefix option has invalid lifetime [ 339.226295][T17309] openvswitch: netlink: Unknown key attributes 2 [ 339.287348][ T1178] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 339.814062][T17341] netlink: 'syz.6.3083': attribute type 1 has an invalid length. [ 339.836625][T17341] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 340.250886][T17357] tipc: Resetting bearer [ 340.407603][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 340.654299][T17395] netlink: 'syz.6.3096': attribute type 1 has an invalid length. [ 340.735494][T17400] __nla_validate_parse: 16 callbacks suppressed [ 340.735513][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3098'. [ 340.752289][T17400] netlink: 'syz.5.3098': attribute type 1 has an invalid length. [ 340.756362][T17394] tipc: Started in network mode [ 340.760524][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3098'. [ 340.775558][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3098'. [ 340.784714][T17400] netlink: 'syz.5.3098': attribute type 1 has an invalid length. [ 340.788900][T17394] tipc: Node identity 7e6698d5c8c3, cluster identity 4711 [ 340.793231][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3098'. [ 340.812390][T17394] tipc: Enabled bearer , priority 0 [ 340.892896][T17392] tipc: Disabling bearer [ 341.130885][T17411] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 341.151898][T17412] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 341.493212][T17415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3102'. [ 341.518014][T17433] netlink: 'syz.2.3107': attribute type 21 has an invalid length. [ 341.556784][T17433] netlink: 'syz.2.3107': attribute type 6 has an invalid length. [ 341.580150][T17433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3107'. [ 341.590539][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 341.836929][T17447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3109'. [ 341.996283][T17455] netlink: 'syz.3.3113': attribute type 2 has an invalid length. [ 342.220084][T17465] nbd: must specify an index to disconnect [ 342.312030][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3116'. [ 342.327393][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3116'. [ 342.377020][T17474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3118'. [ 342.715298][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 343.287518][T17530] netem: invalid attributes len -5 [ 343.292788][T17530] netem: change failed [ 343.508144][T17541] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.576957][T17544] netlink: 'syz.2.3141': attribute type 3 has an invalid length. [ 343.708606][T17558] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 343.737013][T17547] bond1: option xmit_hash_policy: invalid value (64) [ 343.770679][T17547] bond1 (unregistering): Released all slaves [ 343.849357][T17558] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 343.850156][T17564] netlink: 'syz.5.3144': attribute type 11 has an invalid length. [ 343.850806][T17567] netlink: 'syz.6.3140': attribute type 12 has an invalid length. [ 343.878436][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 343.890138][T17564] netlink: 'syz.5.3144': attribute type 11 has an invalid length. [ 344.030172][T17577] tipc: Failed to remove unknown binding: 66,0,0/0:2274322896/2274322897 [ 344.054817][T17577] tipc: Failed to remove unknown binding: 66,0,0/0:2274322896/2274322897 [ 344.653652][T17614] xt_TCPMSS: Only works on TCP SYN packets [ 344.862636][T17625] syzkaller1: entered promiscuous mode [ 344.881022][T17625] syzkaller1: entered allmulticast mode [ 345.004227][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.296994][T17653] sctp: [Deprecated]: syz.2.3172 (pid 17653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.296994][T17653] Use struct sctp_sack_info instead [ 345.523268][T17663] validate_nla: 2 callbacks suppressed [ 345.523286][T17663] netlink: 'syz.6.3176': attribute type 1 has an invalid length. [ 345.577439][T17663] bond8: entered promiscuous mode [ 345.582806][T17663] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.608987][T17663] bond8: (slave bridge5): making interface the new active one [ 345.616811][T17663] bridge5: entered promiscuous mode [ 345.624094][T17663] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 345.953242][T17678] x_tables: duplicate underflow at hook 1 [ 346.144638][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.244088][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.077704][T17639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.321697][T17691] __nla_validate_parse: 21 callbacks suppressed [ 348.321714][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3182'. [ 348.396137][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.425667][T17696] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3184'. [ 348.481417][T17696] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3184'. [ 348.567367][T17701] pim6reg1: entered promiscuous mode [ 348.585221][T17701] pim6reg1: entered allmulticast mode [ 348.775911][T17719] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3190'. [ 348.778393][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.795811][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.804224][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.812547][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.820880][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.829216][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.837535][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.845851][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.854172][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.862497][T17709] tc action pedit unable to extract header offset for header type (0x4) [ 348.870833][T17709] 0: reclassify loop, rule prio 0, protocol 800 [ 349.069027][T17729] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.250434][T17737] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3194'. [ 349.491243][T17751] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 349.511774][T17751] bond2: option packets_per_slave: allowed values 0 - 65535 [ 349.532142][T17751] bond2 (unregistering): Released all slaves [ 349.540846][T10536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.593189][T17757] tap0: tun_chr_ioctl cmd 1074025672 [ 349.599993][T17757] tap0: ignored: set checksum disabled [ 349.761806][T17767] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3201'. [ 349.861445][T17772] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3203'. [ 350.048380][T17781] netlink: 'syz.6.3205': attribute type 1 has an invalid length. [ 350.163193][T17781] 8021q: adding VLAN 0 to HW filter on device bond9 [ 350.291302][T17787] bond9: (slave veth0_to_bond): making interface the new active one [ 350.354738][T17787] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 350.411907][T17792] bond9: entered promiscuous mode [ 350.428265][T17792] veth0_to_bond: entered promiscuous mode [ 350.451274][T17792] bond9: entered allmulticast mode [ 350.458086][T17801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3209'. [ 350.459640][T17792] veth0_to_bond: entered allmulticast mode [ 350.674335][T10536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.741359][T17810] Cannot find set identified by id 0 to match [ 350.881286][T17819] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.046865][T17829] atomic_op ffff88802234b998 conn xmit_atomic 0000000000000000 [ 351.167906][T17827] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.240954][T17830] netlink: 'syz.2.3217': attribute type 2 has an invalid length. [ 351.393470][T17827] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.509101][T17827] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.622129][T17827] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.806706][ T763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.932705][T17859] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3222'. [ 352.042248][T10536] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.117611][T14965] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.231826][ T1178] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.291613][T14965] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.387593][T17883] netlink: 'syz.2.3228': attribute type 3 has an invalid length. [ 352.437222][T17873] bond2: Removing last ns target with arp_interval on [ 352.455892][T17892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3231'. [ 352.730296][T17907] netlink: 'syz.3.3234': attribute type 1 has an invalid length. [ 352.918546][T17907] bond3: entered promiscuous mode [ 352.945651][T17907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.964841][T14965] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.097018][T17913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.119799][T17913] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 353.144559][T17913] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 353.179412][T17913] bond3: (slave ip6gre1): making interface the new active one [ 353.206298][T17913] ip6gre1: entered promiscuous mode [ 353.233279][T17913] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 353.271764][T17916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.416541][T17948] xt_hashlimit: size too large, truncated to 1048576 [ 353.515816][T17955] tipc: Started in network mode [ 353.542387][T17955] tipc: Node identity ac14142f, cluster identity 4711 [ 353.570092][T17955] tipc: New replicast peer: 0.0.0.0 [ 353.578405][T17955] tipc: Enabled bearer , priority 10 [ 353.610695][T17960] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3242'. [ 353.811187][T17970] tipc: Enabling of bearer rejected, already enabled [ 353.833200][T17971] tipc: Enabling of bearer rejected, already enabled [ 353.988168][T17975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3245'. [ 354.124288][T14964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 354.269558][T17995] netlink: 592 bytes leftover after parsing attributes in process `syz.2.3251'. [ 354.292738][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 354.366345][T17993] macvlan2: entered allmulticast mode [ 354.371896][T17993] dummy0: entered allmulticast mode [ 354.394328][T17993] dummy0: entered promiscuous mode [ 354.476550][T18007] sctp: [Deprecated]: syz.1.3253 (pid 18007) Use of int in maxseg socket option. [ 354.476550][T18007] Use struct sctp_assoc_value instead [ 354.522940][T18018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.617474][ T5632] tipc: Node number set to 2886997039 [ 354.658936][T18022] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3258'. [ 354.681350][T18020] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3256'. [ 354.824478][T18031] x_tables: duplicate underflow at hook 2 [ 354.880345][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3261'. [ 354.888970][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 354.921786][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3262'. [ 355.036792][T18035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.246458][ T763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 355.457024][T18053] H: renamed from dummy0 (while UP) [ 355.660919][T18069] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3272'. [ 355.867340][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'. [ 356.404267][T14966] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 356.603720][T18108] xt_hashlimit: size too large, truncated to 1048576 [ 356.671997][T18108] xt_hashlimit: size too large, truncated to 1048576 [ 356.990440][T18122] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 357.078417][T18124] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 357.211700][T18128] xt_l2tp: v2 tid > 0xffff: 1114244 [ 357.545530][T10536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 358.140350][T18154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.319421][T18163] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 358.379723][T18165] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.387334][T18165] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.614466][T18175] syzkaller0: entered promiscuous mode [ 358.630760][T18175] syzkaller0: entered allmulticast mode [ 358.647582][T18181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.654914][T18181] IPv6: NLM_F_CREATE should be set when creating new route [ 358.662174][T18181] IPv6: NLM_F_CREATE should be set when creating new route [ 358.686438][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 358.931897][T18192] __nla_validate_parse: 12 callbacks suppressed [ 358.931916][T18192] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3309'. [ 359.689949][T18227] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3316'. [ 359.824068][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.008757][ T4948] Bluetooth: hci6: command 0x0406 tx timeout [ 360.213440][T18246] macvlan2: entered promiscuous mode [ 360.237128][T18246] macvlan2: entered allmulticast mode [ 360.274601][T18254] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 360.323260][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 360.374518][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 360.392295][T18258] xt_hashlimit: overflow, rate too high: 0 [ 360.405217][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 360.509471][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 360.554250][T18269] netlink: 'syz.2.3330': attribute type 3 has an invalid length. [ 360.564173][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 360.576370][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 360.585778][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 360.595631][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 360.607437][T18254] bond5: entered promiscuous mode [ 360.619559][T18254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 360.627600][T18254] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 360.758733][T18254] bond6: entered promiscuous mode [ 360.797012][T18254] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.823750][T18254] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 360.910525][T18254] bond7: entered promiscuous mode [ 360.935454][T18254] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.945469][T18254] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 360.998035][T14961] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.165865][T18254] bond8: entered promiscuous mode [ 361.202427][T18254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 361.315034][T18291] netlink: 'syz.1.3335': attribute type 5 has an invalid length. [ 361.469864][T18291] syzkaller0: entered promiscuous mode [ 361.515677][T18291] syzkaller0: entered allmulticast mode [ 361.821039][T18314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.912096][T18316] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 362.114400][T14966] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 362.266216][T18331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.300886][T18333] netlink: 'syz.3.3348': attribute type 1 has an invalid length. [ 362.687218][T18350] sctp: [Deprecated]: syz.5.3354 (pid 18350) Use of int in max_burst socket option deprecated. [ 362.687218][T18350] Use struct sctp_assoc_value instead [ 362.778164][T18353] netlink: 'syz.3.3355': attribute type 1 has an invalid length. [ 362.813105][T18353] netlink: 'syz.3.3355': attribute type 3 has an invalid length. [ 362.840258][T18353] NCSI netlink: No device for ifindex 813332851 [ 362.851917][T18361] openvswitch: netlink: Missing valid actions attribute. [ 362.875638][T18361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.982767][T18362] netlink: 'syz.1.3357': attribute type 1 has an invalid length. [ 363.236166][T14961] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 363.492607][T18388] syzkaller1: entered promiscuous mode [ 363.523069][T18388] syzkaller1: entered allmulticast mode [ 364.007894][T18410] __nla_validate_parse: 40 callbacks suppressed [ 364.007912][T18410] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3369'. [ 364.211674][T18413] bond11: option arp_missed_max: invalid value (0) [ 364.249373][T18413] bond11: option arp_missed_max: allowed values 1 - 255 [ 364.299472][T18413] bond11 (unregistering): Released all slaves [ 364.374193][T14966] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 364.404866][T18431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3371'. [ 364.507406][T18431] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 364.552469][T18431] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 364.588749][T18431] gretap1: entered promiscuous mode [ 364.611995][T18431] gretap1: entered allmulticast mode [ 364.771454][T18446] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 365.080292][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 365.306670][T18468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.312473][T18472] validate_nla: 2 callbacks suppressed [ 365.312489][T18472] netlink: 'syz.5.3380': attribute type 1 has an invalid length. [ 365.360024][T18466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.516290][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.647696][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 365.870162][T18481] bond1: option xmit_hash_policy: invalid value (64) [ 365.916122][T18481] bond1 (unregistering): Released all slaves [ 366.282478][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 366.536165][T18522] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 366.634006][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.704394][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'. [ 366.771472][T18527] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3389'. [ 367.157226][T18546] syzkaller0: entered promiscuous mode [ 367.163559][T18558] netlink: 'syz.6.3394': attribute type 1 has an invalid length. [ 367.183285][T18546] syzkaller0: entered allmulticast mode [ 367.252222][T18558] 8021q: adding VLAN 0 to HW filter on device bond11 [ 367.774371][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 368.890757][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 369.656557][T18527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.667583][T18555] netlink: 'syz.3.3395': attribute type 23 has an invalid length. [ 369.994688][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 370.995489][T18635] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3409'. [ 371.052586][T18635] ip6gre1: entered promiscuous mode [ 371.116433][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 371.215572][T18645] veth7: entered promiscuous mode [ 371.227495][T18645] veth7: entered allmulticast mode [ 371.562300][T18670] netlink: 'syz.6.3420': attribute type 1 has an invalid length. [ 372.013665][T18698] macsec0: entered promiscuous mode [ 372.037126][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3429'. [ 372.052603][T18698] veth1_macvtap: left promiscuous mode [ 372.109902][T18698] macsec0 (unregistering): left promiscuous mode [ 372.246949][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 372.393582][T18717] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3434'. [ 372.470989][T18724] netlink: 'syz.3.3437': attribute type 1 has an invalid length. [ 372.618910][T18736] netlink: 'syz.3.3437': attribute type 1 has an invalid length. [ 372.713395][T18743] xt_socket: unknown flags 0x50 [ 372.861525][T18733] bond10: (slave veth3): Enslaving as an active interface with a down link [ 372.983227][T18739] : renamed from virt_wifi0 [ 373.000130][T18724] 8021q: adding VLAN 0 to HW filter on device bond10 [ 373.036985][T18759] netlink: 408 bytes leftover after parsing attributes in process `syz.6.3446'. [ 373.057974][T18757] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 373.073037][T18757] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 373.090878][T18757] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 373.108868][T18757] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 373.165553][T18757] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 373.301169][T18768] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3449'. [ 373.316138][T18771] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3448'. [ 373.365567][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 373.396434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.408630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.450566][T18770] tipc: Enabling of bearer rejected, failed to enable media [ 373.807614][T18793] netlink: 'syz.1.3456': attribute type 24 has an invalid length. [ 373.845113][T10536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.856783][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.867423][T18796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3457'. [ 373.870429][ T6237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.922235][T18791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3457'. [ 373.937618][T14961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.948690][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.966175][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.248133][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.385817][T18827] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3464'. [ 374.418551][T18827] veth0_to_bond: default FDB implementation only supports local addresses [ 374.459178][T18827] netlink: 'syz.1.3464': attribute type 39 has an invalid length. [ 374.487274][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 374.512037][T18831] bond12 (unregistering): Released all slaves [ 374.632721][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3469'. [ 374.846033][T18848] IPVS: length: 1152 != 8 [ 374.871712][T18850] netlink: 'syz.5.3472': attribute type 39 has an invalid length. [ 374.877395][T18851] netlink: zone id is out of range [ 375.540308][T18894] netlink: 'syz.3.3487': attribute type 1 has an invalid length. [ 375.572169][T18899] sctp: [Deprecated]: syz.1.3488 (pid 18899) Use of int in max_burst socket option. [ 375.572169][T18899] Use struct sctp_assoc_value instead [ 375.604276][T14961] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 375.751294][T18887] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.763190][T18887] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.807288][T18907] netlink: 'syz.1.3490': attribute type 3 has an invalid length. [ 376.046244][T18887] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.057687][T18887] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.092158][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.102564][T18917] tipc: Enabling of bearer rejected, failed to enable media [ 376.103980][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.306526][T18887] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.353180][T18887] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.529674][T18887] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.545723][T18887] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.745180][T14966] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 376.765811][T18954] __nla_validate_parse: 4 callbacks suppressed [ 376.765830][T18954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3505'. [ 376.807496][T18954] tipc: Trying to set illegal importance in message [ 376.907948][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.927528][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 376.937459][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.066966][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.092649][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.150966][T18977] tipc: Enabled bearer , priority 10 [ 377.157529][T14966] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.174097][T14966] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.306230][T14966] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.325967][T14966] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.585319][T19005] netlink: 'syz.2.3521': attribute type 9 has an invalid length. [ 377.660036][T19010] sctp: [Deprecated]: syz.6.3524 (pid 19010) Use of int in max_burst socket option. [ 377.660036][T19010] Use struct sctp_assoc_value instead [ 377.717077][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3522'. [ 377.905614][T10537] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 377.933195][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 378.022623][T19027] vcan0: entered allmulticast mode [ 378.091809][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3529'. [ 378.108575][T19031] netlink: 'syz.5.3530': attribute type 1 has an invalid length. [ 378.127492][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3529'. [ 378.375651][ T24] tipc: Node number set to 3064305877 [ 378.390133][T19047] kthread_run failed with err -4 [ 378.414062][ T1318] net_ratelimit: 22 callbacks suppressed [ 378.414081][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.414201][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.476799][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3534'. [ 379.024839][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 379.080181][T19088] netlink: 'syz.6.3547': attribute type 12 has an invalid length. [ 379.122815][T19088] netlink: 'syz.6.3547': attribute type 29 has an invalid length. [ 379.139916][T19088] netlink: 'syz.6.3547': attribute type 1 has an invalid length. [ 379.169748][T19088] netlink: 'syz.6.3547': attribute type 2 has an invalid length. [ 379.296865][T19105] xt_NFQUEUE: number of total queues is 0 [ 379.381360][T19110] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3554'. [ 379.448609][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.521662][T19112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3553'. [ 379.533544][T19115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'. [ 379.607135][T19115] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 379.657998][T19115] team1: entered promiscuous mode [ 379.671290][T19115] team1: entered allmulticast mode [ 379.687953][T14966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.712654][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.732442][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.983333][T19139] netlink: 'syz.2.3564': attribute type 21 has an invalid length. [ 379.996609][T19144] xt_socket: unknown flags 0x8 [ 380.114682][T19135] syzkaller0: entered promiscuous mode [ 380.124089][T19135] syzkaller0: entered allmulticast mode [ 380.144458][ T140] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 380.486873][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.971588][ T31] INFO: task syz.4.1706:12092 blocked for more than 143 seconds. [ 380.979640][ T31] Not tainted syzkaller #0 [ 380.985531][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.994477][ T31] task:syz.4.1706 state:D stack:27056 pid:12092 tgid:12087 ppid:5641 task_flags:0x400140 flags:0x00080002 [ 381.006700][ T31] Call Trace: [ 381.009997][ T31] [ 381.012919][ T31] __schedule+0x1840/0x57a0 [ 381.017526][ T31] ? __lock_acquire+0x683/0x2cd0 [ 381.022496][ T31] ? __pfx___schedule+0x10/0x10 [ 381.027968][ T31] ? schedule+0x90/0x360 [ 381.032238][ T31] schedule+0x164/0x360 [ 381.036482][ T31] schedule_preempt_disabled+0x13/0x30 [ 381.041972][ T31] __mutex_lock+0x7c5/0x1590 [ 381.046826][ T31] ? __mutex_lock+0x5c5/0x1590 [ 381.051623][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 381.057458][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 381.062494][ T31] ? __nlmsg_put+0xef/0x1b0 [ 381.067117][ T31] ? genlmsg_put+0x137/0x2e0 [ 381.071879][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 381.077759][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 381.084028][ T31] ? __nla_parse+0x40/0x60 [ 381.088486][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 381.095111][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 381.101476][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 381.107409][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 381.113536][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 381.118750][ T31] genl_rcv_msg+0x614/0x7a0 [ 381.123264][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.128472][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 381.134719][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 381.140101][ T31] netlink_rcv_skb+0x226/0x4a0 [ 381.144992][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.150038][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.155422][ T31] ? down_read+0x270/0x2e0 [ 381.159842][ T31] ? genl_rcv+0xd/0x40 [ 381.164042][ T31] genl_rcv+0x28/0x40 [ 381.168045][ T31] netlink_unicast+0x7bb/0x940 [ 381.172959][ T31] netlink_sendmsg+0x813/0xb40 [ 381.177783][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.183076][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.188147][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.193459][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.198843][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 381.203654][ T31] ? __might_fault+0xaf/0x130 [ 381.208496][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.213873][ T31] ? import_iovec+0x73/0xa0 [ 381.218394][ T31] ___sys_sendmsg+0x2a5/0x360 [ 381.223087][ T31] ? __lock_acquire+0x683/0x2cd0 [ 381.228488][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.233726][ T31] ? futex_wake+0x4d7/0x5b0 [ 381.238311][ T31] ? __fget_files+0x2a/0x420 [ 381.242890][ T31] ? __fget_files+0x3a2/0x420 [ 381.247765][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.252733][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.258256][ T31] ? rcu_is_watching+0x15/0xb0 [ 381.263031][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.269209][ T31] do_syscall_64+0x174/0x580 [ 381.273861][ T31] ? trace_irq_disable+0x3b/0x140 [ 381.279016][ T31] ? clear_bhb_loop+0x40/0x90 [ 381.283690][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.290107][ T31] RIP: 0033:0x7f1aba99ce59 [ 381.294104][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 381.294590][ T31] RSP: 002b:00007f1abb808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.310791][ T31] RAX: ffffffffffffffda RBX: 00007f1abac15fa0 RCX: 00007f1aba99ce59 [ 381.318828][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 381.326914][ T31] RBP: 00007f1abaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 381.334951][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.342932][ T31] R13: 00007f1abac16038 R14: 00007f1abac15fa0 R15: 00007fff17fd1258 [ 381.351234][ T31] [ 381.354598][ T31] INFO: task syz.4.1706:12093 blocked for more than 143 seconds. [ 381.372529][ T31] Not tainted syzkaller #0 [ 381.377758][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.386509][ T31] task:syz.4.1706 state:D stack:27200 pid:12093 tgid:12087 ppid:5641 task_flags:0x400040 flags:0x00080002 [ 381.398474][ T31] Call Trace: [ 381.401751][ T31] [ 381.404795][ T31] __schedule+0x1840/0x57a0 [ 381.409330][ T31] ? __lock_acquire+0x683/0x2cd0 [ 381.414399][ T31] ? __alloc_skb+0x2bd/0x7a0 [ 381.419019][ T31] ? __pfx___schedule+0x10/0x10 [ 381.424001][ T31] ? schedule+0x90/0x360 [ 381.428272][ T31] schedule+0x164/0x360 [ 381.432419][ T31] schedule_preempt_disabled+0x13/0x30 [ 381.437940][ T31] __mutex_lock+0x7c5/0x1590 [ 381.442535][ T31] ? __mutex_lock+0x5c5/0x1590 [ 381.447980][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 381.453734][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 381.458820][ T31] ? __nlmsg_put+0xef/0x1b0 [ 381.463318][ T31] ? genlmsg_put+0x137/0x2e0 [ 381.468132][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 381.473714][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 381.480366][ T31] ? __nla_parse+0x40/0x60 [ 381.485011][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 381.491491][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 381.497889][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 381.503585][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 381.509802][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 381.515060][ T31] genl_rcv_msg+0x614/0x7a0 [ 381.519575][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.525324][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.533577][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 381.539721][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 381.545239][ T31] netlink_rcv_skb+0x226/0x4a0 [ 381.550030][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.555109][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.560438][ T31] ? down_read+0x270/0x2e0 [ 381.564992][ T31] ? genl_rcv+0xd/0x40 [ 381.569083][ T31] genl_rcv+0x28/0x40 [ 381.573051][ T31] netlink_unicast+0x7bb/0x940 [ 381.578003][ T31] netlink_sendmsg+0x813/0xb40 [ 381.582908][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.588319][ T31] ? page_table_check_set+0x126/0x510 [ 381.593717][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.598707][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.604790][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.610098][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 381.614914][ T31] ? __might_fault+0xaf/0x130 [ 381.619618][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.625051][ T31] ? import_iovec+0x73/0xa0 [ 381.629582][ T31] ___sys_sendmsg+0x2a5/0x360 [ 381.634386][ T31] ? __lock_acquire+0x683/0x2cd0 [ 381.639347][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.644708][ T31] ? __fget_files+0x2a/0x420 [ 381.649320][ T31] ? __fget_files+0x3a2/0x420 [ 381.654071][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.659023][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.664619][ T31] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 381.670277][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 381.675617][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.681688][ T31] do_syscall_64+0x174/0x580 [ 381.686780][ T31] ? trace_irq_disable+0x3b/0x140 [ 381.691834][ T31] ? clear_bhb_loop+0x40/0x90 [ 381.696557][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.702455][ T31] RIP: 0033:0x7f1aba99ce59 [ 381.706982][ T31] RSP: 002b:00007f1abb7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.715435][ T31] RAX: ffffffffffffffda RBX: 00007f1abac16090 RCX: 00007f1aba99ce59 [ 381.723393][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 381.731478][ T31] RBP: 00007f1abaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 381.739507][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.748255][ T31] R13: 00007f1abac16128 R14: 00007f1abac16090 R15: 00007fff17fd1258 [ 381.756466][ T31] [ 381.759807][ T31] [ 381.759807][ T31] Showing all locks held in the system: [ 381.777479][ T31] 3 locks held by kworker/u8:0/12: [ 381.782620][ T31] #0: ffff888032440140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.795181][ T31] #1: ffffc90000117c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.808951][ T31] #2: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 381.818620][ T31] 1 lock held by khungtaskd/31: [ 381.823497][ T31] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 381.833456][ T31] 2 locks held by getty/5388: [ 381.838222][ T31] #0: ffff888036c3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 381.848265][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 381.859071][ T31] 3 locks held by kworker/1:7/5803: [ 381.864346][ T31] #0: ffff88813fe3f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.875475][ T31] #1: ffffc900052afc40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.886268][ T31] #2: ffffffff8e962aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 381.897377][ T31] 2 locks held by syz.0.1607/11727: [ 381.902594][ T31] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 381.911077][ T31] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 381.921383][ T31] 2 locks held by syz.4.1706/12092: [ 381.926715][ T31] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 381.935054][ T31] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 381.945146][ T31] 2 locks held by syz.4.1706/12093: [ 381.950335][ T31] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 381.958637][ T31] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 381.968760][ T31] 3 locks held by kworker/u8:20/14966: [ 381.974346][ T31] #0: ffff88813fe7c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.986065][ T31] #1: ffffc9000d4bfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 381.997304][ T31] #2: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 382.009274][ T31] 2 locks held by syz.3.3562/19134: [ 382.014735][ T31] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 382.023737][ T31] #1: ffffffff8e962aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 382.034783][ T31] 1 lock held by syz.1.3565/19140: [ 382.039888][ T31] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 382.048880][ T31] 1 lock held by syz.2.3568/19157: [ 382.054074][ T31] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 382.063471][ T31] 2 locks held by syz.2.3568/19163: [ 382.068698][ T31] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 382.077005][ T31] #1: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 382.086364][ T31] 1 lock held by syz.6.3569/19159: [ 382.091489][ T31] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: raw_bind+0x94/0x730 [ 382.100311][ T31] 2 locks held by syz.6.3569/19164: [ 382.105560][ T31] #0: ffff88804ffc56e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 382.115928][ T31] #1: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 382.124929][ T31] 1 lock held by syz.5.3571/19168: [ 382.130046][ T31] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x13a/0x1290 [ 382.138852][ T31] 1 lock held by syz.5.3571/19169: [ 382.144025][ T31] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 382.153357][ T31] 1 lock held by syz.5.3571/19170: [ 382.158603][ T31] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 382.168016][ T31] [ 382.179753][ T31] ============================================= [ 382.179753][ T31] [ 382.188331][ T31] NMI backtrace for cpu 1 [ 382.188348][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 382.188377][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.188387][ T31] Call Trace: [ 382.188394][ T31] [ 382.188400][ T31] dump_stack_lvl+0xe8/0x150 [ 382.188425][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 382.188447][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.188477][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 382.188500][ T31] sys_info+0x135/0x170 [ 382.188518][ T31] watchdog+0xfd7/0x1030 [ 382.188557][ T31] ? watchdog+0x1c7/0x1030 [ 382.188586][ T31] kthread+0x389/0x470 [ 382.188608][ T31] ? __pfx_watchdog+0x10/0x10 [ 382.188629][ T31] ? __pfx_kthread+0x10/0x10 [ 382.188653][ T31] ret_from_fork+0x514/0xb70 [ 382.188674][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 382.188694][ T31] ? __switch_to+0xc89/0x1420 [ 382.188721][ T31] ? __pfx_kthread+0x10/0x10 [ 382.188745][ T31] ret_from_fork_asm+0x1a/0x30 [ 382.188780][ T31] [ 382.188790][ T31] Sending NMI from CPU 1 to CPUs 0: [ 382.298492][ C0] NMI backtrace for cpu 0 [ 382.298509][ C0] CPU: 0 UID: 0 PID: 140 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 382.298526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.298535][ C0] Workqueue: 0x0 (bond1) [ 382.298558][ C0] RIP: 0010:kthread_data+0x6f/0xc0 [ 382.298578][ C0] Code: 00 20 00 74 4e e8 11 7c 35 00 48 81 c3 10 07 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 a4 b9 a0 00 48 8b 1b <48> 83 c3 20 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 [ 382.298591][ C0] RSP: 0018:ffffc90002f0fc98 EFLAGS: 00000246 [ 382.298603][ C0] RAX: 1ffff11003f670e2 RBX: ffff88801e712800 RCX: ffff88801fb38000 [ 382.298615][ C0] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 382.298624][ C0] RBP: 0000000000200000 R08: ffffffff902f89f7 R09: 1ffffffff205f13e [ 382.298635][ C0] R10: dffffc0000000000 R11: fffffbfff205f13f R12: dffffc0000000000 [ 382.298646][ C0] R13: ffff88801ae9b060 R14: ffff88801fb3802c R15: dffffc0000000000 [ 382.298658][ C0] FS: 0000000000000000(0000) GS:ffff8881252b9000(0000) knlGS:0000000000000000 [ 382.298670][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.298681][ C0] CR2: 000000110c2aa510 CR3: 0000000036010000 CR4: 00000000003526f0 [ 382.298695][ C0] Call Trace: [ 382.298700][ C0] [ 382.298708][ C0] wq_worker_running+0x28/0x210 [ 382.298726][ C0] worker_thread+0xc12/0xfb0 [ 382.298754][ C0] kthread+0x389/0x470 [ 382.298772][ C0] ? __pfx_worker_thread+0x10/0x10 [ 382.298786][ C0] ? __pfx_kthread+0x10/0x10 [ 382.298804][ C0] ret_from_fork+0x514/0xb70 [ 382.298821][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 382.298835][ C0] ? __switch_to+0xc89/0x1420 [ 382.298856][ C0] ? __pfx_kthread+0x10/0x10 [ 382.298874][ C0] ret_from_fork_asm+0x1a/0x30 [ 382.298899][ C0] [ 382.424343][T10536] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 382.426145][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 382.426167][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 382.426188][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.426199][ T31] Call Trace: [ 382.426206][ T31] [ 382.426215][ T31] vpanic+0x56c/0xa60 [ 382.426240][ T31] ? __pfx___schedule+0x10/0x10 [ 382.426266][ T31] ? __pfx_vpanic+0x10/0x10 [ 382.426286][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 382.426315][ T31] panic+0xc5/0xd0 [ 382.426333][ T31] ? __pfx_panic+0x10/0x10 [ 382.426350][ T31] ? preempt_schedule_common+0x82/0xd0 [ 382.426376][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 382.426402][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 382.426426][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 382.426451][ T31] watchdog+0x1030/0x1030 [ 382.426482][ T31] ? watchdog+0x1c7/0x1030 [ 382.426512][ T31] kthread+0x389/0x470 [ 382.426541][ T31] ? __pfx_watchdog+0x10/0x10 [ 382.426563][ T31] ? __pfx_kthread+0x10/0x10 [ 382.426586][ T31] ret_from_fork+0x514/0xb70 [ 382.426608][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 382.426626][ T31] ? __switch_to+0xc89/0x1420 [ 382.426653][ T31] ? __pfx_kthread+0x10/0x10 [ 382.426676][ T31] ret_from_fork_asm+0x1a/0x30 [ 382.426711][ T31] [ 382.429005][ T31] Kernel Offset: disabled