last executing test programs: 2m34.365188687s ago: executing program 2 (id=6925): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180)=0xfffffffa, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_open_procfs$namespace(0x0, 0x0) write$cgroup_pid(r3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000), 0x4) 2m34.136543327s ago: executing program 2 (id=6928): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}, @nested={0x4, 0x37}]}, 0x28}], 0x1, 0x0, 0x0, 0x80}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5a8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) recvmmsg(r7, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) close(0x3) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 2m33.120489926s ago: executing program 2 (id=6948): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x7, 0x0, @void}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x4, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x840) 2m31.521987864s ago: executing program 2 (id=6965): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000"], 0x1e8}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$kcm(0x23, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x62}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x123) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, 0x4e20, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x4000000000}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 2m29.425777585s ago: executing program 2 (id=6984): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xfffffffc}, {&(0x7f0000000180)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e", 0x17}], 0x5}}], 0x1, 0x4004000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x461f, @private=0xa010100}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x40}], 0x1, 0x102, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 2m29.084829736s ago: executing program 2 (id=6989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (async) syz_emit_ethernet(0x16, &(0x7f00000003c0)={@random="96ce655f2954", @remote, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @generic="a03aec16"}}}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfd3ff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x20008090) (async) r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300)) getsockname$unix(r6, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) (async) sendto$inet(r5, 0x0, 0x0, 0x20000090, 0x0, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @broadcast}, 0x8) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x1, 0xfffbff7f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xcda51fc5d4bbd343) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) 2m26.800146653s ago: executing program 4 (id=7018): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xf2a50000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xf2a50000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0xf3, 0x1bc, 0x3, 0x3, 0xa, 0x5, 0x40}, 0xc) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r3, &(0x7f0000000200)=""/96, 0x60) (async) read$alg(r3, &(0x7f0000000200)=""/96, 0x60) socket$inet(0x2, 0x1, 0x0) (async) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffff42, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet(0x2, 0x1, 0x0) (async) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r8, &(0x7f0000000700)="f574", 0x2) splice(r8, &(0x7f0000000040)=0xb, r4, 0x0, 0x5, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f00000002c0)=[{r0, 0x1088}, {r8}], 0x1, &(0x7f0000000000)={0x77359400}, 0x0, 0x18) (async) ppoll(&(0x7f00000002c0)=[{r0, 0x1088}, {r8}], 0x1, &(0x7f0000000000)={0x77359400}, 0x0, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r9, 0x6, 0x14, 0x0, &(0x7f0000000400)) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x144, r12, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xfffffffffffffec6, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80002}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10800}, 0x4000050) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0) 2m26.53273386s ago: executing program 4 (id=7021): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000048027b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="010000001184f9bb1c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r6], 0x44}}, 0x0) 2m26.321734675s ago: executing program 4 (id=7026): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x6, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x8}, 0x94) 2m26.207429608s ago: executing program 4 (id=7028): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) recvmmsg$unix(r0, &(0x7f0000001600)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/208, 0xd0}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/199, 0xc7}], 0x4}}], 0x1, 0x40, &(0x7f0000001640)) (async) socket$kcm(0x2, 0x200000000000001, 0x106) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) 2m26.169552373s ago: executing program 4 (id=7029): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x7fff, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x4) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 2m26.0772934s ago: executing program 4 (id=7030): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000026000103000010000000000001"], 0x14}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 2m13.954188865s ago: executing program 32 (id=6989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (async) syz_emit_ethernet(0x16, &(0x7f00000003c0)={@random="96ce655f2954", @remote, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @generic="a03aec16"}}}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfd3ff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x20008090) (async) r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300)) getsockname$unix(r6, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) (async) sendto$inet(r5, 0x0, 0x0, 0x20000090, 0x0, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @broadcast}, 0x8) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x1, 0xfffbff7f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xcda51fc5d4bbd343) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) 2m11.000115082s ago: executing program 33 (id=7030): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000026000103000010000000000001"], 0x14}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 1m38.847513401s ago: executing program 6 (id=7411): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) unshare(0x2c020500) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x7) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000501"], 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x5, 0x6, 0x0, 0xe4}]}, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m35.541876046s ago: executing program 6 (id=7421): r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x2, [{}, {}]}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000d, 0x13, r0, 0xcb296000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f00000002c0)) r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x8040480) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, 0x0}, 0x20) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x12}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) 1m35.376652422s ago: executing program 6 (id=7425): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="47f4fd025768", @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @local, @empty, @multicast1}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000882}, 0x80) (rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r4, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="19022bbd7000fedbdf0921000000050020000000000009001f00000cc119ea"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0xfff}, {{&(0x7f0000000e80)=@l2tp, 0x80, 0x0}}], 0x2, 0x42, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r9, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYBLOB="00b9d8cf3ca63109e22c8609ee061722f51c0ed4309c4830fd3e6cff421551", @ANYRES32=r0, @ANYRES8=r7, @ANYRES16=r7, @ANYRESOCT=r2], 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r11, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r9}, 0x20) sendmmsg$inet6(r9, &(0x7f0000002440), 0x400, 0x0) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r6, 0x3ed7d725f3970f98, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x400d0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@gettaction={0x12c, 0x32, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8000}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x44}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x4d, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x32a7}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (rerun: 32) 1m35.099047065s ago: executing program 6 (id=7431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) unshare(0x2c020500) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x7) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000501"], 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x5, 0x6, 0x0, 0xe4}]}, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m31.806387875s ago: executing program 6 (id=7450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0xfd, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000000000210000000000010000000000000200010001"], 0x70}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000140)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000000000000025", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) connect(r0, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x2e}, 0x80) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 1m30.704916419s ago: executing program 6 (id=7456): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000540)={0x4, {{0xa, 0x4e20, 0x38, @mcast1, 0xfffff511}}, {{0xa, 0x4e21, 0xcd7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2e}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000026000103000010000000000001"], 0x14}}, 0x0) 1m15.347796688s ago: executing program 34 (id=7456): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000540)={0x4, {{0xa, 0x4e20, 0x38, @mcast1, 0xfffff511}}, {{0xa, 0x4e21, 0xcd7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2e}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000026000103000010000000000001"], 0x14}}, 0x0) 4.223128469s ago: executing program 7 (id=8160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x68ab, 0x4) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r8, 0xf518, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x2c638}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008086}, 0x0) 2.696445886s ago: executing program 7 (id=8177): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x2, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e25, @broadcast}, 0xffffffffffffff90) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x7c) 2.471863733s ago: executing program 1 (id=8179): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r7, 0x20456, 0x7ff12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) (async) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5], 0x34}}, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x21c000, 0x800}, 0x20) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) (async) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) (async) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfed6, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}}]}, 0x48}}, 0x4) 2.444868079s ago: executing program 3 (id=8180): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000383d7e41b2578047edff18a3fbdbdf6500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b20, &(0x7f0000000040)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @remote}}, 0x27c0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x4}, 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) close(r6) r8 = socket(0x28, 0x5, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x1) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r10}, 0x20) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close(0x4) 2.26067722s ago: executing program 1 (id=8183): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r5, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40006) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000200)) syz_emit_ethernet(0x96, &(0x7f0000000000)={@multicast, @random="0e10840dc342", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x60, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf0, 0x6, 0x1, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}]}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000300fed3000000000000000000000000003414000200fe"], 0x64}}, 0x4008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af391b8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008004) 1.903888802s ago: executing program 1 (id=8188): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f00000000c0)={0xffffff4f, 0x16, 0xfcce, @local, 'veth1_macvtap\x00'}) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f00000000c0)={0xffffff4f, 0x16, 0xfcce, @local, 'veth1_macvtap\x00'}) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400df0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001040006"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001130500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fe8000000000000000000000000000311400040020010000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001130500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fe8000000000000000000000000000311400040020010000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x80000002, 0x10, 0x1, 0xfffffffc}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0xf2a50000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0xf2a50000) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x587}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}}, 0x4000000) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x587}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}}, 0x4000000) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000a40)={0x2, {{0xa, 0x4e23, 0xfffffffa, @empty}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}}, {{0xa, 0x4e21, 0xfffffea4, @mcast2, 0xfffffffc}}]}, 0x190) 1.835053117s ago: executing program 7 (id=8189): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "7d14a0b0fe0e4906"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f00000000c0), 0x12) close(r6) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={r5, 0x5}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="fd008800"}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00000014000061117c0000000000180000000000000000000000080000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000200)={{r7, &(0x7f0000000080)='\x00', 0x501200, &(0x7f00000000c0)={@_ha_fsid={[0x40532470, 0x77fe]}, {0x3, 0x2, 0x101, 0x3}}, 0x200, &(0x7f0000000100), &(0x7f0000000140)=0x80000000}, {[0x7, 0x9, 0x5, 0xbf]}, 0x3, 0x32, &(0x7f00000001c0)=""/50}) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000280)=""/48, &(0x7f00000002c0)=0x30) 1.734668921s ago: executing program 1 (id=8191): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090302000000fcdbdf251d0805000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) 1.640986957s ago: executing program 5 (id=8193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b01000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='Za\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a00020000000000000000000800090002200000"], 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x17, 0x0, &(0x7f0000000080)="3275973bb0023f54907f75fa982a8f32b9d6e9e3526b91", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.480487319s ago: executing program 5 (id=8194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="beaa000000000000791075000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000004c0)) getsockname(r2, &(0x7f0000000140)=@tipc=@name, &(0x7f0000000200)=0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260480ac}, 0x20004000) 1.478691488s ago: executing program 1 (id=8195): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) accept4$unix(r0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x600, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1.444500788s ago: executing program 3 (id=8196): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) sendmsg$inet_sctp(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRESOCT], 0x20, 0x4002804}, 0x0) r4 = socket(0x22, 0x5, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002e00090027bd7000000000000400001000bead149b47a9b717ee5c93b16211a91b17b5"], 0x14}, 0x1, 0x0, 0x0, 0x42805}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r5) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000200)={0x1, 0x1, 0x5, 0x98, 0x10000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0xc020680) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x4c, 0x0, 0x0) 1.34880117s ago: executing program 5 (id=8197): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52163448412ba88b3b3470", 0x14}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d", 0x6b}, {&(0x7f0000000800)="38c4340e8710b8eaedd392cbf07690d4a3f2b8eadcac25284b2afc2a941cbe880cf2d0823ecd83a7b84b4154e5a802b7de51c5b236647c77656a585c60798db780d8e1bf9d21f0f1f2719ed31a3c18c47b3c5abb4dea4c758c7eb47b7e982793ca63b0b9d4b4611fbcc0ffad443b9ef7358117a5", 0x74}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000740)=""/125, 0x7d}], 0x3}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4404}, 0x4000940) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x5) 1.329354337s ago: executing program 0 (id=8198): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) listen(0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0xfff1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8140920b488e573f}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.21247137s ago: executing program 7 (id=8199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44041}, 0x4000001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @rand_addr=0x64010100}}]}, 0x30}}, 0x0) 1.204724878s ago: executing program 0 (id=8200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000001b00000000240012800b00010062616476a0f190577f83339001004241544d414e5f562d9048c6a5730f05cf01dcce68934858b00fa19c4b4614d97ef79abf38ca88e9dbd605767ddfae45c6b816130a668f6405b1842b7cff4c93c8532aa0acaa59b2ae39fe0c6e03c9cbf30d8f24cf719ddfffefd62f4773e962dd191d0f0649f81cf1b70b2954e25fcdbf52d912955a6bea84ea1f0c6f247a62766508cb7cbc11309ed85f0fdf6609063b88b9ca7660a11aff3cfbf6b78442f150ec8bff2663d63d338015ed0c7fc591d47da596"], 0xfd12}}, 0x0) tee(r1, r0, 0x9, 0x1) 1.089146159s ago: executing program 5 (id=8201): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2], 0x164}, 0x1, 0x0, 0x0, 0x44809}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={r4, 0xfc49, 0x20}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r10, 0x8, 0x8000, 0x9, 0x295, {{0xa, 0x4, 0x3, 0x28, 0x28, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x1, [{@empty, 0x7}, {@private=0xa010100, 0x3}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000004) r11 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) write(r6, &(0x7f0000000000)="23000300010007", 0x7) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0400000000000000000b0000000008000000000000000001006d617371000000000c00028008000240000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f5"], 0x74}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="6a5b677e00ebffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.040594738s ago: executing program 7 (id=8202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)}], 0x1}, 0xc854) setsockopt$sock_int(r6, 0x1, 0x12, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffffff000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private1, 0x18d}}}}]}]}, 0x5c}}, 0x810) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004) 992.060823ms ago: executing program 3 (id=8203): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvtap0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)='7\x00\x00\b', 0x4}], 0x10000000000000d7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="6400e0fff0ffffff1801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000083c30018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185200"/80], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x73, &(0x7f0000000680)=""/115, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x6, 0x100, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f00000007c0)=[{0x3, 0x2, 0x0, 0x8}, {0x3, 0x3, 0x7, 0x9}], 0x10, 0x5}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x24060400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x6}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000208000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003800018008000100636d70002c00028018000380090001009c979b32261fbabdae20b34f870e0000080001400000000208000240000000000900010073797a30"], 0x10c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xfb, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x8) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd701004000000050000000600010005000000080009000200000008000b000000000481bd0c00a80a0000140008006d616373656330000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r12) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="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"], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x844) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 905.060563ms ago: executing program 5 (id=8204): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61f0, 0x0) sendto$unix(r0, &(0x7f0000000240), 0x0, 0x4000000, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xfff, 0x0, &(0x7f0000000280)=""/218, &(0x7f0000000380)=0xda) unshare(0x2c020400) socket$packet(0x11, 0x2, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000140)=@buf={0x0, &(0x7f00000000c0)}) 856.582419ms ago: executing program 0 (id=8205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0x70) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8fbc0e6f77c18ed3, 0x11, r3, 0x1000) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x14}, 0x18) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 744.37539ms ago: executing program 0 (id=8206): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf25070000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) (async, rerun: 64) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18, 0x20040040}}], 0x1, 0x4040) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) (async, rerun: 64) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) (rerun: 64) 699.193756ms ago: executing program 3 (id=8207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000140200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22c20}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7fffffff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1f}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}]}}}]}, 0x50}}, 0x0) 556.541895ms ago: executing program 0 (id=8208): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x5, 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000540)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=0x0, @ANYBLOB="08000b0101000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000130001002cbd70000000000007000000", @ANYRES32=r3, @ANYBLOB="008400000000040014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x24004810) 500.287314ms ago: executing program 1 (id=8209): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f0000000180)=0x1, 0x4) r10 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10) recvmmsg(r10, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec072, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) 214.4813ms ago: executing program 3 (id=8210): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x19, 0x4, 0x4, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc, 0x1010}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x89, 0x0, 0x1, 0x4}}}], 0x18}, 0x1400c0c0) r5 = socket(0x3, 0xa, 0x200) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xc029ac559d8ee93d, 0x7}, {0x6, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xef}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe67}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0) 175.6932ms ago: executing program 0 (id=8211): r0 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0xf) sendmsg$inet(r0, 0x0, 0x0) sendmsg$rds(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYRES64=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x5c, 0x160, 0xf0, 0x3e0, 0x200, 0x228, 0x25a, 0x200, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xffffffff], 'ip6tnl0\x00', 'dvmrp1\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff], [0x0, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r9, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x40000d4) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r10, 0x29, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 24.727135ms ago: executing program 7 (id=8212): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001"], 0xa0}, 0x4004881) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={r2, 0xee00, r3}, 0xc) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000390400000000fcffffff00000000", @ANYRES32=r4, @ANYBLOB="01980000020800001800128008000100677206000c0002800800a77352780d0700ac141429"], 0x38}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000300)={r5, &(0x7f00000000c0)='/,\x00', 0x12102, &(0x7f0000000100)={@_ha_fsid={[0x9, 0x6]}, {0x5, 0xfe00, 0x4, 0x1}}, 0x4, &(0x7f0000000140), &(0x7f0000000240)=0x5}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000003c0)=r4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x439, 0x12, 0xfffffffe, {0x0, 0x0, 0x0, r4, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gre={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 18.572058ms ago: executing program 3 (id=8213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}], 0x1, 0x40000050) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0xc8c4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000140000000000000200000008000300", @ANYRES64=r1, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES16=r8, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x8cc5}, 0xc00c000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x10, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x5c}, {0x9, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x4000000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x800) 0s ago: executing program 5 (id=8214): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$can_bcm(r3, &(0x7f00000005c0)={0x1d, r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$AUDIT_SET(r8, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={0x0}, 0x1, 0x0, 0x0, 0x10004001}, 0x40001) kernel console output (not intermixed with test programs): abling it in 0 ms [ 891.970738][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 892.006713][ T1089] bond3: (slave veth3): Enslaving as an active interface with a down link [ 892.030997][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 892.060901][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 892.078791][ T6831] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 892.203450][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 892.233377][ T6831] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 892.363911][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 892.373752][ T1101] IPVS: set_ctl: invalid protocol: 54 172.20.20.187:20001 [ 892.378825][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 892.523510][ T1107] netlink: 'syz.0.6792': attribute type 4 has an invalid length. [ 892.571349][ T1106] netlink: 'syz.0.6792': attribute type 4 has an invalid length. [ 892.735629][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.743378][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.061830][ T1116] netlink: 'syz.2.6794': attribute type 1 has an invalid length. [ 893.134937][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.152710][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.245841][ T1108] veth0_macvtap: left allmulticast mode [ 893.356248][ T1135] netlink: 'syz.4.6798': attribute type 4 has an invalid length. [ 893.370759][ T392] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.379944][ T392] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.394361][ T392] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.404362][ T392] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.413890][ T1136] netlink: 'syz.4.6798': attribute type 4 has an invalid length. [ 893.606111][ T1141] hsr_slave_0: left promiscuous mode [ 893.630955][ T1141] hsr_slave_1: left promiscuous mode [ 894.035007][ T1165] __nla_validate_parse: 5 callbacks suppressed [ 894.035029][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6802'. [ 894.319048][ T395] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.453672][ T395] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.499678][ T392] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.554819][ T392] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.589703][ T1185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6808'. [ 894.664362][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6810'. [ 894.691538][ T1187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6810'. [ 894.766545][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6812'. [ 894.834574][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6812'. [ 895.224835][ T1219] tipc: Enabled bearer , priority 0 [ 895.256847][ T1219] syzkaller0: entered promiscuous mode [ 895.295802][ T1219] syzkaller0: entered allmulticast mode [ 895.339165][ T1219] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6818'. [ 895.378914][ T1219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6818'. [ 895.424651][ T1219] tipc: Resetting bearer [ 895.456437][ T1218] tipc: Resetting bearer [ 895.532507][ T1218] tipc: Disabling bearer [ 895.739065][ T1234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6820'. [ 895.756865][ T1245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 895.927286][ T1255] nbd: nbd64 already in use [ 895.954875][ T1251] nbd: nbd1 already in use [ 895.974543][ T1251] nbd: couldn't find device at index 0 [ 896.113721][ T1145] udevd[1145]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 896.246970][ T1267] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 896.814571][ T1296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 896.825805][ T1305] netlink: 'syz.3.6840': attribute type 3 has an invalid length. [ 896.874999][ T1309] netlink: 'syz.1.6841': attribute type 3 has an invalid length. [ 896.966514][ T8470] net_ratelimit: 148 callbacks suppressed [ 896.966535][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.010605][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.041132][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.061004][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.091537][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.110635][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.131258][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.172032][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.212665][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.261335][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.585040][ T1343] netlink: 'syz.0.6848': attribute type 1 has an invalid length. [ 897.703137][ T1345] IPVS: Error connecting to the multicast addr [ 897.752781][ T1353] macvlan2: entered promiscuous mode [ 897.788515][ T1353] macvlan2: entered allmulticast mode [ 897.835125][ T1353] bond2: entered promiscuous mode [ 897.852950][ T1353] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 897.891626][ T1353] bond2: left promiscuous mode [ 898.805685][ T1403] sock: sock_timestamping_bind_phc: sock not bind to device [ 899.086531][ T1423] netlink: 'syz.2.6872': attribute type 58 has an invalid length. [ 899.099823][ T1429] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 899.120242][ T1426] __nla_validate_parse: 16 callbacks suppressed [ 899.120265][ T1426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6873'. [ 899.128694][ T1423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6872'. [ 899.141214][ T1429] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6871'. [ 899.536083][ T1426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6873'. [ 899.628499][ T1445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6877'. [ 899.774864][ T1445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 899.936911][ T1453] bond3: (slave veth3): Enslaving as an active interface with an up link [ 900.008151][ T1445] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6877'. [ 900.038344][ T1466] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 900.108366][ T1470] xt_TCPMSS: Only works on TCP SYN packets [ 900.159482][ T5738] IPVS: starting estimator thread 0... [ 900.256879][ T1462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6877'. [ 900.270410][ T1472] IPVS: using max 32 ests per chain, 76800 per kthread [ 900.411876][ T1462] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 900.599161][ T1484] xt_bpf: check failed: parse error [ 900.645790][ T1495] syzkaller1: entered promiscuous mode [ 900.671039][ T1495] syzkaller1: entered allmulticast mode [ 900.807304][ T1506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6890'. [ 900.813242][ T1507] x_tables: duplicate underflow at hook 2 [ 900.934687][ T1507] netlink: 368 bytes leftover after parsing attributes in process `syz.2.6889'. [ 900.946094][ T1507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6889'. [ 901.009628][ T1512] erspan1: entered promiscuous mode [ 901.022523][ T1512] erspan1: entered allmulticast mode [ 901.069093][ T1517] netlink: 'syz.2.6893': attribute type 10 has an invalid length. [ 901.126243][ T1517] team0: Port device veth1_to_hsr added [ 901.181676][ T1515] syzkaller0: entered promiscuous mode [ 901.189124][ T1515] syzkaller0: entered allmulticast mode [ 901.307527][ T1527] xt_addrtype: ipv6 does not support BROADCAST matching [ 901.528435][ T1514] syzkaller0: delete flow: hash 1730846131 index 1 [ 901.985697][ T37] net_ratelimit: 144 callbacks suppressed [ 901.985720][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.058775][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.110139][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.138745][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.167182][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.195163][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.223131][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.253781][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.281547][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.301515][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 906.245756][ T1534] tipc: Enabled bearer , priority 0 [ 906.336919][ T1540] syzkaller0: entered promiscuous mode [ 906.343744][ T1540] syzkaller0: entered allmulticast mode [ 906.350013][ T1540] tipc: Resetting bearer [ 906.431471][ T1557] __nla_validate_parse: 4 callbacks suppressed [ 906.431491][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6903'. [ 906.477806][ T8470] tipc: Resetting bearer [ 906.489765][ T1523] tipc: Resetting bearer [ 906.529926][ T1568] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6904'. [ 906.990603][ T8470] net_ratelimit: 216 callbacks suppressed [ 906.990625][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.022801][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.051383][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.078700][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.105663][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.134522][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.171454][ T397] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.211674][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.231597][ T397] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.260216][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 911.332391][ T1523] tipc: Disabling bearer [ 912.015944][ T1612] pim6reg: entered allmulticast mode [ 912.028860][ T1616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6917'. [ 912.059665][ T1618] syzkaller0: entered promiscuous mode [ 912.066323][ T1618] syzkaller0: entered allmulticast mode [ 912.076350][ T393] net_ratelimit: 184 callbacks suppressed [ 912.076367][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.126162][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.151218][ T397] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.191324][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.205801][ T1626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6920'. [ 912.210640][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.237109][ T393] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 912.360575][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.380497][ T397] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.398411][ T397] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 912.543105][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.769956][ T1660] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 912.781229][ T1660] bond4 (unregistering): Released all slaves [ 912.809362][ T1666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6928'. [ 912.923127][ T1672] tipc: Started in network mode [ 912.929421][ T1672] tipc: Node identity ac1414aa, cluster identity 4711 [ 912.944559][ T1672] tipc: Enabled bearer , priority 26 [ 913.369575][ T1696] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6939'. [ 913.390906][ T1696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6939'. [ 913.400150][ T1696] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6939'. [ 913.587977][ T1709] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6943'. [ 913.914680][ T1723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6948'. [ 913.924730][ T1723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6948'. [ 913.935016][ T1723] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 914.224775][ T8528] tipc: Node number set to 2886997162 [ 914.737327][ T1761] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6955'. [ 914.912391][ T1768] netlink: 'syz.1.6958': attribute type 10 has an invalid length. [ 914.921649][ T1770] netlink: 'syz.1.6958': attribute type 10 has an invalid length. [ 914.949987][ T1770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 914.967257][ T1770] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 915.114272][ T1779] netlink: 'syz.4.6960': attribute type 9 has an invalid length. [ 915.461814][ T1787] bond5 (unregistering): Released all slaves [ 915.859339][ T1810] netlink: 'syz.3.6967': attribute type 11 has an invalid length. [ 916.676994][ T1841] bond8 (unregistering): Released all slaves [ 916.831672][ T1847] hmó3)ó: entered promiscuous mode [ 916.950199][ T1860] tipc: Started in network mode [ 917.020656][ T1860] tipc: Node identity 868906c2fd1b, cluster identity 4711 [ 917.051416][ T1860] tipc: Enabled bearer , priority 0 [ 917.077762][ T1862] syzkaller0: entered promiscuous mode [ 917.095300][ T395] net_ratelimit: 145 callbacks suppressed [ 917.095322][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.096797][ T1862] syzkaller0: entered allmulticast mode [ 917.132234][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.174844][ T13] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.214559][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.244832][ T1860] tipc: Resetting bearer [ 917.262253][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.278688][ T1876] __nla_validate_parse: 5 callbacks suppressed [ 917.278711][ T1876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6979'. [ 917.322369][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.363867][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.375546][ T1859] tipc: Resetting bearer [ 917.393037][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.432146][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.471101][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.492832][ T1859] tipc: Disabling bearer [ 917.533213][ T1885] netlink: 'syz.0.6985': attribute type 6 has an invalid length. [ 917.564365][ T1885] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6985'. [ 917.613326][ T1885] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.6985'. [ 917.728060][ T1896] netlink: 'syz.4.6987': attribute type 13 has an invalid length. [ 917.742593][ T1896] netlink: 'syz.4.6987': attribute type 17 has an invalid length. [ 917.816124][ T1900] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6988'. [ 918.048066][ T1896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.063034][ T1914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6990'. [ 918.086803][ T1896] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.107244][ T1896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.423408][ T1907] udevd[1907]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 918.498272][ T1922] tipc: Enabled bearer , priority 0 [ 918.508274][ T1922] syzkaller0: entered promiscuous mode [ 918.539894][ T1922] syzkaller0: entered allmulticast mode [ 918.579673][ T1922] tipc: Resetting bearer [ 918.597026][ T1922] netlink: 'syz.3.6991': attribute type 28 has an invalid length. [ 918.605334][ T1922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6991'. [ 918.622727][ T30] audit: type=1804 audit(1780693135.409:17): pid=1926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6993" name="/newroot/199/cgroup.controllers" dev="tmpfs" ino=1037 res=1 errno=0 [ 918.649078][ T30] audit: type=1800 audit(1780693135.409:18): pid=1926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6993" name="cgroup.controllers" dev="tmpfs" ino=1037 res=0 errno=0 [ 918.671876][ T1921] tipc: Resetting bearer [ 918.725892][ T1921] tipc: Disabling bearer [ 919.244271][ T1955] netlink: 'syz.4.7001': attribute type 2 has an invalid length. [ 919.262937][ T1955] netlink: 'syz.4.7001': attribute type 2 has an invalid length. [ 919.676870][ T1989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7010'. [ 919.774742][ T1999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7014'. [ 919.918327][ T2006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7016'. [ 920.186289][ T2024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7019'. [ 920.455469][ T2035] tipc: Enabled bearer , priority 0 [ 920.465695][ T2035] syzkaller0: entered promiscuous mode [ 920.474533][ T2035] syzkaller0: entered allmulticast mode [ 920.487720][ T2034] tipc: Enabling of bearer rejected, failed to enable media [ 920.509014][ T2035] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 920.562643][ T2035] tipc: Resetting bearer [ 920.581909][ T2041] pim6reg: entered allmulticast mode [ 920.592719][ T2033] tipc: Resetting bearer [ 920.640196][ T2033] tipc: Disabling bearer [ 920.655299][ T2036] pim6reg: left allmulticast mode [ 920.816181][ T2058] sctp: [Deprecated]: syz.3.7027 (pid 2058) Use of int in maxseg socket option. [ 920.816181][ T2058] Use struct sctp_assoc_value instead [ 920.858466][ T2058] netlink: 'syz.3.7027': attribute type 6 has an invalid length. [ 920.868186][ T2058] netlink: 'syz.3.7027': attribute type 23 has an invalid length. [ 920.879875][ T2058] IPv6: NLM_F_CREATE should be specified when creating new route [ 921.536152][ T2095] netlink: 'syz.0.7042': attribute type 1 has an invalid length. [ 921.557399][ T2098] netlink: 'syz.0.7042': attribute type 1 has an invalid length. [ 921.581345][ T2095] netlink: 'syz.0.7042': attribute type 4 has an invalid length. [ 921.594707][ T2098] netlink: 'syz.0.7042': attribute type 4 has an invalid length. [ 921.645148][ T2103] tipc: Enabled bearer , priority 0 [ 921.653465][ T2103] syzkaller0: entered promiscuous mode [ 921.659060][ T2103] syzkaller0: entered allmulticast mode [ 921.685843][ T2103] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 921.745746][ T2103] tipc: Resetting bearer [ 921.755602][ T2102] tipc: Resetting bearer [ 921.799307][ T2102] tipc: Disabling bearer [ 922.182282][ T37] net_ratelimit: 119 callbacks suppressed [ 922.182306][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.207923][ T37] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 922.302760][ T2124] __nla_validate_parse: 8 callbacks suppressed [ 922.302782][ T2124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7047'. [ 922.330477][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.350492][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.371031][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.403106][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.431825][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.450486][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.480788][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.500900][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.987021][ T2137] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7054'. [ 923.017717][ T2137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7054'. [ 923.038515][ T2137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7054'. [ 923.400091][ T2161] 8021q: VLANs not supported on lo [ 923.429848][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7063'. [ 923.440101][ T2162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7063'. [ 923.452475][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7063'. [ 923.463168][ T2162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7063'. [ 923.545339][ T2171] netlink: 'syz.3.7066': attribute type 2 has an invalid length. [ 923.967114][ T2186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7071'. [ 924.018380][ T2188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7072'. [ 924.144021][ T2190] syzkaller0: entered promiscuous mode [ 924.149620][ T2190] syzkaller0: entered allmulticast mode [ 924.358649][ T2198] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 924.407778][ T2198] vlan2 (unregistering): left allmulticast mode [ 924.415520][ T2198] dummy0 (unregistering): left allmulticast mode [ 924.422959][ T2198] vlan2 (unregistering): left promiscuous mode [ 924.429449][ T2198] dummy0 (unregistering): left promiscuous mode [ 924.437908][ T2198] bridge0: port 4(vlan2) entered disabled state [ 924.503814][ T2205] bond0: (slave bond_slave_0): Releasing backup interface [ 924.533339][ T2205] bond0: (slave bond_slave_1): Releasing backup interface [ 924.543385][ T2205] team0: Port device team_slave_0 removed [ 924.552634][ T2205] team0: Port device team_slave_1 removed [ 924.563652][ T2205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.625013][ T2210] netlink: 'syz.0.7079': attribute type 1 has an invalid length. [ 924.677761][ T2210] 8021q: adding VLAN 0 to HW filter on device bond4 [ 925.106989][ T2234] syz_tun: entered allmulticast mode [ 925.219678][ T2233] syz_tun: left allmulticast mode [ 925.295541][ T2243] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 925.376672][ T2247] sctp: [Deprecated]: syz.1.7090 (pid 2247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 925.376672][ T2247] Use struct sctp_sack_info instead [ 925.717958][ T2267] bond1: (slave macvlan0): Releasing active interface [ 927.211348][ T8470] net_ratelimit: 109 callbacks suppressed [ 927.211371][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.231163][ T8470] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 927.340985][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.375656][ T6831] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 927.512752][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.530152][ T393] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 927.641119][ T400] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.662747][ T400] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.676764][ T400] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 927.790978][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.914609][ T2314] netlink: 'syz.0.7110': attribute type 1 has an invalid length. [ 927.929273][ T2314] __nla_validate_parse: 5 callbacks suppressed [ 927.929292][ T2314] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7110'. [ 927.964314][ T2314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7110'. [ 927.982688][ T2320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7112'. [ 928.022821][ T2322] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7112'. [ 928.233167][ T2327] syzkaller1: entered promiscuous mode [ 928.240968][ T2327] syzkaller1: entered allmulticast mode [ 928.738653][ T2350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7121'. [ 928.796766][ T2354] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7118'. [ 928.851457][ T2356] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 929.593634][ T2379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7128'. [ 930.149434][ T2414] policy can only be matched on NF_INET_PRE_ROUTING [ 930.149458][ T2414] unable to load match [ 930.373637][ T2428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7140'. [ 930.383531][ T2428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7140'. [ 930.947876][ T2455] syzkaller1: entered promiscuous mode [ 930.960804][ T2455] syzkaller1: entered allmulticast mode [ 931.184034][ T2466] netlink: 'syz.0.7148': attribute type 3 has an invalid length. [ 931.213685][ T2474] netlink: 'syz.1.7149': attribute type 12 has an invalid length. [ 931.517956][ T2496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7153'. [ 931.589050][ T2498] vlan2: entered allmulticast mode [ 931.602666][ T2498] bond0: entered allmulticast mode [ 931.632352][ T2506] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 931.655922][ T2506] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 931.674103][ T2506] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 931.708898][ T2506] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 931.971854][ T2529] bridge0: entered allmulticast mode [ 932.311266][ T8470] net_ratelimit: 94 callbacks suppressed [ 932.311288][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.349045][ T8470] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 932.439073][ T2560] xt_CT: No such helper "syz0" [ 932.452021][ T2567] batadv0: entered promiscuous mode [ 932.471299][ T2567] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 932.487275][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.535090][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.581107][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.610729][ T2570] bond8 (unregistering): Released all slaves [ 932.617825][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.658355][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.667743][ T393] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 932.856505][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 933.049364][T20243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.076504][T20243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.095415][T20243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.117286][T20243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.127152][T20243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.229483][T31140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.239440][T31140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.248449][T31140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.269659][T31140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.288073][T31140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.746210][ T2626] __nla_validate_parse: 5 callbacks suppressed [ 933.746230][ T2626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7175'. [ 934.299894][ T2624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 934.306846][ T2624] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 934.524163][ T2664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7181'. [ 934.771418][ T2672] netlink: 'syz.0.7183': attribute type 1 has an invalid length. [ 934.791317][ T2672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7183'. [ 934.891127][ T2679] netlink: 'syz.0.7183': attribute type 10 has an invalid length. [ 934.912179][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.922483][ T2590] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.940811][ T2590] bridge_slave_0: entered allmulticast mode [ 934.949176][ T2590] bridge_slave_0: entered promiscuous mode [ 934.958354][ T2679] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 934.966759][ T2679] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 934.974930][ T2679] bridge0: port 3(netdevsim1) entered disabled state [ 935.000102][ T2679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 935.012841][ T2679] team0: Port device netdevsim1 added [ 935.018757][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.026453][ T2590] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.034956][ T2590] bridge_slave_1: entered allmulticast mode [ 935.049362][ T2590] bridge_slave_1: entered promiscuous mode [ 935.110445][ T2590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.124817][ T2590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.209552][ T2590] team0: Port device team_slave_0 added [ 935.227743][ T2590] team0: Port device team_slave_1 added [ 935.292804][ T2590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.303670][ T2590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.333926][ T2590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.347961][ T2590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.356686][ T2590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.388395][ T2590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.543818][ T2590] hsr_slave_0: entered promiscuous mode [ 935.554761][ T2590] hsr_slave_1: entered promiscuous mode [ 935.562975][ T2590] debugfs: 'hsr0' already exists in 'hsr' [ 935.569030][ T2590] Cannot create hsr debugfs directory [ 936.291250][T31140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 936.315938][T31140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 936.328885][T31140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 936.337328][T31140] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 936.345693][T31140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 936.510012][T20243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 936.527659][T20243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 936.541364][T20243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 936.553448][T20243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 936.567593][T20243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 936.928065][ T2745] netlink: 'syz.1.7195': attribute type 1 has an invalid length. [ 936.988436][ T2745] bond5: entered promiscuous mode [ 936.995214][ T2745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 937.011406][ T2738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7194'. [ 937.046394][ T2737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7194'. [ 937.077707][ T2738] veth1_to_team: entered promiscuous mode [ 937.092428][ T2738] veth1_to_team: left promiscuous mode [ 937.119563][ T2737] veth1_to_team: entered promiscuous mode [ 937.173183][ T2737] veth1_to_team: left promiscuous mode [ 937.202656][ T2590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 937.232256][ T2590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 937.254387][ T2590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 937.305284][ T2590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.330981][ T37] net_ratelimit: 152 callbacks suppressed [ 937.331003][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.367091][ T2590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 937.384274][ T400] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.387052][ T2590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.420998][ T400] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.444137][ T2765] bond6 (unregistering): Released all slaves [ 937.469850][ T400] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.513895][ T2590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 937.523682][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.553878][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.562100][ T2590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 937.593651][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.631022][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.681027][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.714418][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.823983][ T2794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7204'. [ 938.007987][ T2590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.099367][ T2803] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 938.135662][ T2590] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.175026][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.182274][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.245677][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.252989][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.335993][ T2821] netlink: 'syz.1.7210': attribute type 1 has an invalid length. [ 938.441663][ T2821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 938.464729][ T2829] tipc: Trying to set illegal importance in message [ 938.516578][ T2822] macvlan0: entered promiscuous mode [ 938.531175][ T2822] macvlan0: entered allmulticast mode [ 938.684144][ T2841] dvmrp1: entered allmulticast mode [ 938.705911][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.717452][T20243] Bluetooth: hci6: command tx timeout [ 938.734758][ T2715] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.743607][ T2715] bridge_slave_0: entered allmulticast mode [ 938.753118][ T2715] bridge_slave_0: entered promiscuous mode [ 938.765769][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.775291][ T2715] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.792081][ T2715] bridge_slave_1: entered allmulticast mode [ 938.807300][ T2715] bridge_slave_1: entered promiscuous mode [ 938.894015][ T2590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 938.919312][ T2715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.944671][ T2715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.999929][ T2715] team0: Port device team_slave_0 added [ 939.024202][ T2715] team0: Port device team_slave_1 added [ 939.125224][ T2715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.135520][ T2715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.163278][ T2715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.211045][ T2715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.233064][ T2715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.292823][ T2715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.393021][ T2715] hsr_slave_0: entered promiscuous mode [ 939.401759][ T2715] hsr_slave_1: entered promiscuous mode [ 939.408788][ T2715] debugfs: 'hsr0' already exists in 'hsr' [ 939.434125][ T2715] Cannot create hsr debugfs directory [ 939.705143][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7222'. [ 939.717338][ T2899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7222'. [ 939.766112][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7222'. [ 939.779324][ T2899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7222'. [ 939.803869][ T400] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.814289][ T400] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.864317][ T400] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.888765][ T400] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.125906][ T2590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.401960][ T2590] veth0_vlan: entered promiscuous mode [ 940.415121][ T2590] veth1_vlan: entered promiscuous mode [ 940.449973][ T2590] veth0_macvtap: entered promiscuous mode [ 940.461102][ T2590] veth1_macvtap: entered promiscuous mode [ 940.481843][ T2590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.497397][ T2590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.514659][ T6831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.525155][ T6831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.536776][ T6831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.546597][ T6831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.790663][T20243] Bluetooth: hci6: command tx timeout [ 942.246109][ T2878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 942.302238][ T2715] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 942.351249][ T37] net_ratelimit: 135 callbacks suppressed [ 942.351270][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.378292][ T2715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.395307][ T2715] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 942.432129][ T400] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.446942][ T2715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 942.461111][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.516979][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.517003][ T2715] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 942.542721][ T2928] netlink: 'syz.1.7226': attribute type 10 has an invalid length. [ 942.551340][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.563262][ T2928] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7226'. [ 942.580824][ T397] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.596897][ T2715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 942.610961][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.639046][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.653058][ T2715] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 942.687042][ T2715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 942.694888][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.724764][ T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.744847][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.746104][ T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.846644][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.868606][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.881524][T20243] Bluetooth: hci6: command tx timeout [ 943.015387][ T2951] bond8 (unregistering): Released all slaves [ 943.034628][ T2958] netlink: 272 bytes leftover after parsing attributes in process `syz.1.7233'. [ 943.395161][ T2715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.504792][ T2980] netlink: 'syz.5.7240': attribute type 6 has an invalid length. [ 943.679998][ T2715] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.787739][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.795017][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.856389][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.863651][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.936724][ T3003] gre1: entered promiscuous mode [ 944.077932][ T3006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7247'. [ 944.233274][ T3014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7248'. [ 944.318893][ T3023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7250'. [ 944.482415][ T3030] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 944.514505][ T3030] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7252'. [ 944.798773][ T3046] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 944.902451][ T3054] __nla_validate_parse: 1 callbacks suppressed [ 944.902480][ T3054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7257'. [ 944.935412][ T3046] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 944.944364][ T3046] IPVS: set_ctl: invalid protocol: 20 16.0.1.0:0 [ 944.951602][T20243] Bluetooth: hci6: command tx timeout [ 945.015740][ T3047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7257'. [ 945.203925][ T3068] netlink: 'syz.1.7261': attribute type 1 has an invalid length. [ 945.217581][ T3069] netlink: 'syz.1.7261': attribute type 1 has an invalid length. [ 945.249259][ T3054] bond1 (unregistering): Released all slaves [ 945.333774][ T2715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.399242][ T3074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7263'. [ 945.561866][ T3081] netlink: 'syz.5.7264': attribute type 4 has an invalid length. [ 945.599360][ T3081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7264'. [ 946.534751][ T2715] veth0_vlan: entered promiscuous mode [ 946.602899][ T2715] veth1_vlan: entered promiscuous mode [ 946.655927][ T3131] netlink: 'syz.5.7277': attribute type 15 has an invalid length. [ 946.686951][ T3131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7277'. [ 946.726571][ T2715] veth0_macvtap: entered promiscuous mode [ 946.747944][ T2715] veth1_macvtap: entered promiscuous mode [ 946.793255][ T3136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7279'. [ 946.816484][ T3139] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_batadv, syncid = 1, id = 0 [ 946.853081][ T2715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.886172][ T2715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.929200][ T397] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.971406][ T397] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.026061][ T397] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.047016][ T397] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.140108][ T3152] tipc: Started in network mode [ 947.157799][ T3152] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 947.177438][ T3152] tipc: Enabled bearer , priority 0 [ 947.194777][ T3151] netlink: 320 bytes leftover after parsing attributes in process `syz.3.7286'. [ 947.231539][ T3151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7286'. [ 947.252735][ T3151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7286'. [ 947.271906][ T3151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7286'. [ 947.422015][ T8470] net_ratelimit: 151 callbacks suppressed [ 947.422034][ T8470] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.522183][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.561049][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.601246][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.630937][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.689426][ T397] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.734577][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.773050][ T6831] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.785683][ T3171] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 947.802327][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.825743][ T401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.834514][ T401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.844230][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.875089][ T3176] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 947.893429][ T3176] bond7 (unregistering): Released all slaves [ 948.025732][ T397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.039252][ T397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.349579][ T3207] syzkaller0: entered promiscuous mode [ 948.361337][ T3207] syzkaller0: entered allmulticast mode [ 948.383927][ T5760] tipc: Node number set to 11578026 [ 948.765901][ T3229] tipc: New replicast peer: 255.255.255.255 [ 948.783663][ T3229] tipc: Enabled bearer , priority 26 [ 949.554107][ T3278] netlink: 'syz.1.7311': attribute type 1 has an invalid length. [ 949.789610][ T3282] IPv6: NLM_F_CREATE should be specified when creating new route [ 949.831867][ T3296] netlink: 'syz.0.7314': attribute type 30 has an invalid length. [ 949.862938][ T3297] netlink: 'syz.0.7314': attribute type 30 has an invalid length. [ 949.919949][ T3299] __nla_validate_parse: 9 callbacks suppressed [ 949.919969][ T3299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7315'. [ 949.952988][ T3297] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 950.003076][ T3308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7316'. [ 950.037553][ T3281] syzkaller0: entered promiscuous mode [ 950.059657][ T3281] syzkaller0: entered allmulticast mode [ 950.503671][ T3330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7320'. [ 950.530826][ T3331] netlink: 'syz.3.7321': attribute type 4 has an invalid length. [ 950.603033][ T3332] netlink: 'syz.3.7321': attribute type 4 has an invalid length. [ 952.441772][ T401] net_ratelimit: 177 callbacks suppressed [ 952.441793][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.477801][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.504586][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.531161][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.557870][ T397] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.586455][ T397] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.613587][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.648545][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.671076][ T6849] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.703073][ T6849] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.806290][ T3310] syzkaller1: entered promiscuous mode [ 955.812613][ T3310] syzkaller1: entered allmulticast mode [ 955.821577][ T3324] veth0: entered promiscuous mode [ 955.827091][ T3328] veth0: left promiscuous mode [ 956.014901][ T3335] vlan0: entered promiscuous mode [ 956.078879][ T3345] netlink: 'syz.3.7325': attribute type 1 has an invalid length. [ 956.149300][ T3345] 8021q: adding VLAN 0 to HW filter on device bond8 [ 956.186537][ T3345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7325'. [ 956.203070][ T3355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7327'. [ 956.245725][ T3355] bridge_slave_1 (unregistering): left allmulticast mode [ 956.259902][ T3355] bridge_slave_1 (unregistering): left promiscuous mode [ 956.269189][ T3355] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.316745][ T3362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7327'. [ 956.338645][ T3362] netlink: 'syz.1.7327': attribute type 1 has an invalid length. [ 956.424869][ T3362] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 957.551745][ T6841] net_ratelimit: 178 callbacks suppressed [ 957.551769][ T6841] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.594293][ T6841] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 957.710990][ T6841] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.727581][ T6841] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 957.860697][ T403] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.875741][ T403] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 957.991814][ T6841] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 958.001493][ T6841] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 958.121113][ T403] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 958.129113][ T403] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 958.705146][ T3460] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7349'. [ 958.727292][ T3460] syzkaller1: entered promiscuous mode [ 958.736550][ T3460] syzkaller1: entered allmulticast mode [ 959.144123][ T3473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7351'. [ 959.339572][ T3366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 959.392066][ T3471] debugfs: '1ùà^!‚Y‡°”õËí [ 959.392066][ T3471] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 959.817511][ T30] audit: type=1800 audit(1780693176.599:19): pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7357" name="cgroup.controllers" dev="tmpfs" ino=1391 res=0 errno=0 [ 959.866644][ T3499] netlink: 'syz.6.7359': attribute type 1 has an invalid length. [ 959.878485][ T30] audit: type=1804 audit(1780693176.599:20): pid=3492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7358" name="/newroot/288/memory.events" dev="tmpfs" ino=1488 res=1 errno=0 [ 959.928870][ T30] audit: type=1800 audit(1780693176.599:21): pid=3492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7358" name="memory.events" dev="tmpfs" ino=1488 res=0 errno=0 [ 959.967923][ T3499] veth1: entered allmulticast mode [ 960.003512][ T3506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7361'. [ 960.034260][ T3504] team0: Port device team_slave_0 removed [ 960.236676][ T3517] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7363'. [ 960.250831][ T3517] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7363'. [ 960.260249][ T3517] netlink: 'syz.6.7363': attribute type 4 has an invalid length. [ 960.545673][ T3541] xt_TPROXY: Can be used only with -p tcp or -p udp [ 960.977776][ T3560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7372'. [ 961.147122][ T3566] netlink: 'syz.3.7373': attribute type 1 has an invalid length. [ 961.178330][ T3566] 8021q: adding VLAN 0 to HW filter on device bond9 [ 962.263896][ T3587] bond10: option packets_per_slave: invalid value (1048582) [ 962.272170][ T3587] bond10: option packets_per_slave: allowed values 0 - 65535 [ 962.281633][ T3587] bond10 (unregistering): Released all slaves [ 962.387549][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7380'. [ 962.398035][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7380'. [ 962.650546][ T37] net_ratelimit: 93 callbacks suppressed [ 962.650569][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.664877][ T37] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 962.780451][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.788623][ T401] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 962.910975][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.919103][ T37] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 963.030587][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 963.038800][ T401] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 963.160926][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 963.169040][ T392] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 963.260808][ T3520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 963.635118][ T3609] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 963.758199][ T3628] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7389'. [ 963.908720][ T3640] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7394'. [ 964.001516][T31140] Bluetooth: hci6: command 0x0405 tx timeout [ 964.051731][ T3645] bridge4: entered promiscuous mode [ 964.057188][ T3645] bridge4: entered allmulticast mode [ 964.068004][ T3645] netlink: 'syz.0.7396': attribute type 4 has an invalid length. [ 964.089718][ T3645] netlink: 'syz.0.7396': attribute type 4 has an invalid length. [ 964.177594][ T5760] IPVS: starting estimator thread 0... [ 964.185438][ T3651] bridge_slave_0 (unregistering): left allmulticast mode [ 964.194034][ T3651] bridge_slave_0 (unregistering): left promiscuous mode [ 964.201386][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.290890][ T3652] IPVS: using max 35 ests per chain, 84000 per kthread [ 964.302498][ T3651] syzkaller1: entered promiscuous mode [ 964.308319][ T3651] syzkaller1: entered allmulticast mode [ 966.846152][ T3635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 966.857252][ T3653] netlink: 'syz.0.7398': attribute type 1 has an invalid length. [ 966.866091][ T3653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7398'. [ 967.177886][ T3683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7405'. [ 967.701176][ T387] net_ratelimit: 103 callbacks suppressed [ 967.701201][ T387] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 967.728134][ T387] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 967.841682][ T3698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7408'. [ 967.850969][ T387] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 967.865790][ T387] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 967.971403][ T3705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7410'. [ 967.980971][ T387] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 967.993804][ T387] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 968.024122][ T3705] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7410'. [ 968.075886][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.130970][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 968.148129][ T393] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 968.301310][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 968.339207][ T3732] netlink: 'syz.1.7415': attribute type 10 has an invalid length. [ 968.354664][ T3732] team0: left allmulticast mode [ 968.360058][ T3732] team_slave_0: left allmulticast mode [ 968.367223][ T3732] team_slave_1: left allmulticast mode [ 968.373742][ T3732] team0: left promiscuous mode [ 968.381925][ T3732] team_slave_0: left promiscuous mode [ 968.387644][ T3732] team_slave_1: left promiscuous mode [ 968.398275][ T3732] bridge0: port 3(team0) entered disabled state [ 968.421471][ T3732] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.434138][ T3732] bond0: (slave team0): Enslaving as an active interface with an up link [ 971.114457][ T3710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 971.162323][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7418'. [ 972.240742][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7437'. [ 972.274384][ T3812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7438'. [ 972.447919][ T3821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 972.579767][ T3830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7442'. [ 972.761455][ T393] net_ratelimit: 83 callbacks suppressed [ 972.761478][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 972.775447][ T393] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 972.890565][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 972.898502][ T392] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 973.020941][ T387] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 973.028949][ T387] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 973.153973][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 973.161985][ T37] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 973.192880][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.271313][ T387] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 974.801583][ T3781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 975.355375][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7453'. [ 976.424220][ T3911] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7454'. [ 976.472905][ T3907] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7457'. [ 976.614523][ T3914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7459'. [ 976.780820][ T3923] netlink: 'syz.5.7461': attribute type 1 has an invalid length. [ 977.811312][ T37] net_ratelimit: 116 callbacks suppressed [ 977.811337][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 977.825270][ T37] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 977.940901][ T393] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 977.948788][ T393] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 978.071260][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 978.079092][ T392] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 978.191150][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 978.199002][ T395] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 978.312268][ T392] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 978.317282][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.634423][ T3916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.827382][ T3951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7468'. [ 980.103469][ T3975] netlink: 'syz.3.7472': attribute type 5 has an invalid length. [ 980.168611][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7474'. [ 980.213148][ T3982] netlink: 'syz.1.7475': attribute type 10 has an invalid length. [ 980.225108][ T3982] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7475'. [ 980.259154][ T3987] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7476'. [ 980.395390][ T3993] Bluetooth: MGMT ver 1.23 [ 980.497410][ T4001] netlink: 'syz.0.7479': attribute type 4 has an invalid length. [ 980.559880][ T4004] netlink: 'syz.5.7480': attribute type 21 has an invalid length. [ 980.587605][ T4004] netlink: 'syz.5.7480': attribute type 21 has an invalid length. [ 980.717493][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7480'. [ 980.742411][ T4004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7480'. [ 981.466563][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7480'. [ 981.480060][ T4004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7480'. [ 981.492617][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7486'. [ 981.503454][ T4037] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7486'. [ 981.522544][ T401] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.564154][ T401] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.590992][ T401] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.618754][ T401] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.673523][ T4044] netlink: 'syz.3.7487': attribute type 1 has an invalid length. [ 981.695572][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7487'. [ 981.705440][ T4044] netlink: 'syz.3.7487': attribute type 1 has an invalid length. [ 982.043906][ T4074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7497'. [ 982.074500][ T4075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7497'. [ 982.841235][ T6841] net_ratelimit: 115 callbacks suppressed [ 982.841260][ T6841] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 982.855249][ T6841] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 982.971125][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 982.980171][ T395] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 983.105213][ T401] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.116389][ T401] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 983.230757][ T395] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.238572][ T395] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 983.351561][ T37] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.359576][ T37] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 984.722484][ T4051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 984.733204][ T4065] netlink: 'syz.3.7493': attribute type 1 has an invalid length. [ 985.254371][ T4144] sctp: [Deprecated]: syz.3.7513 (pid 4144) Use of int in max_burst socket option. [ 985.254371][ T4144] Use struct sctp_assoc_value instead [ 985.294729][ T4144] netlink: 'syz.3.7513': attribute type 1 has an invalid length. [ 985.339516][ T4144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7513'. [ 985.522431][ T4163] netlink: 'syz.0.7516': attribute type 13 has an invalid length. [ 985.659126][ T4166] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 986.101984][ T4188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7523'. [ 986.207750][ T4200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7526'. [ 986.220131][ T4200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7526'. [ 986.493399][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7529'. [ 986.560027][ T4216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7531'. [ 986.678511][ T4221] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7531'. [ 986.689007][ T4221] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7531'. [ 987.922296][ T387] net_ratelimit: 89 callbacks suppressed [ 987.922317][ T387] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 987.950680][ T6841] dvmrp0: left allmulticast mode [ 988.119317][ T6841] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 988.604580][ T6841] bond15 (unregistering): (slave gretap1): Releasing active interface [ 988.657483][ T6841] bond1 (unregistering): (slave geneve2): Releasing active interface [ 988.690506][ T6841] bond14 (unregistering): (slave bridge0): Releasing active interface [ 988.754532][ T6841] bond19 (unregistering): (slave bridge7): Releasing backup interface [ 988.767956][ T6841] bond1 (unregistering): Released all slaves [ 988.782994][ T6841] bond2 (unregistering): (slave veth3): Releasing backup interface [ 988.793703][ T6841] bond2 (unregistering): Released all slaves [ 988.816226][ T6841] bond0 (unregistering): Released all slaves [ 988.835390][ T6841] bond3 (unregistering): (slave veth9): Releasing backup interface [ 988.845410][ T6841] bond3 (unregistering): Released all slaves [ 988.858910][ T6841] bond4 (unregistering): Released all slaves [ 988.882682][ T6841] bond5 (unregistering): Released all slaves [ 988.896727][ T6841] bond6 (unregistering): Released all slaves [ 988.916644][ T6841] bond7 (unregistering): Released all slaves [ 988.932388][ T6841] bond8 (unregistering): (slave veth13): Releasing active interface [ 988.943528][ T6841] bond8 (unregistering): Released all slaves [ 988.959240][ T6841] bond9 (unregistering): Released all slaves [ 988.982033][ T6841] bond10 (unregistering): Released all slaves [ 988.997737][ T6841] bond11 (unregistering): Released all slaves [ 989.017335][ T6841] bond12 (unregistering): Released all slaves [ 989.035249][ T6841] bond13 (unregistering): Released all slaves [ 989.055031][ T6841] bond14 (unregistering): Released all slaves [ 989.079701][ T6841] bond15 (unregistering): Released all slaves [ 989.096493][ T6841] team0: Port device macvlan2 removed [ 989.106625][ T6841] bond16 (unregistering): Released all slaves [ 989.128213][ T6841] bond17 (unregistering): Released all slaves [ 989.142848][ T6841] bond18 (unregistering): Released all slaves [ 989.157297][ T6841] bond19 (unregistering): Released all slaves [ 989.192387][ T395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.508093][ T4211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 989.588373][ T6841] : left promiscuous mode [ 989.853846][ T6841] tipc: Left network mode [ 989.948639][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7537'. [ 989.993365][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7537'. [ 991.498448][ T4292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7547'. [ 991.694262][ T4298] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7549'. [ 991.918302][T20243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 991.929455][T20243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 991.942766][T20243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 991.965488][T20243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 991.974614][T20243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 991.982374][ T6841] hsr_slave_0: left promiscuous mode [ 992.048525][ T6841] hsr_slave_1: left promiscuous mode [ 992.078562][ T6841] veth1_macvtap: left promiscuous mode [ 992.089905][ T6841] veth0_macvtap: left promiscuous mode [ 992.096501][ T6841] veth1_vlan: left promiscuous mode [ 992.102848][ T6841] veth0_vlan: left promiscuous mode [ 992.202211][ T4316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input15 [ 993.676907][ T4349] netlink: 'syz.5.7556': attribute type 1 has an invalid length. [ 993.899702][ T4360] netlink: 'syz.1.7557': attribute type 5 has an invalid length. [ 993.963113][ T4349] bond1: (slave geneve2): making interface the new active one [ 994.009685][ T4349] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 994.072606][T20243] Bluetooth: hci7: command tx timeout [ 994.193001][ T392] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 994.213323][ T392] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 994.319089][ T392] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 994.418044][ T393] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 994.441864][ T4386] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 994.479155][ T4373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7560'. [ 994.488872][ T4373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7560'. [ 994.499273][ T4373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7560'. [ 994.509964][ T4373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7560'. [ 994.622252][ T4388] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.633466][ T4388] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.643446][ T4388] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 994.645566][ T4391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7564'. [ 994.665631][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7564'. [ 994.746884][ T4391] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 994.751720][ T4393] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 994.765167][ T6841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.861998][ T387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.886951][ T387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.916557][ T4392] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.954728][ T387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.080006][ T4405] tipc: New replicast peer: 255.255.255.255 [ 995.111781][ T4405] tipc: Enabled bearer , priority 26 [ 995.140976][ T4419] mac80211_hwsim hwsim94 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 995.172928][ T4422] geneve2: entered promiscuous mode [ 995.249119][ T6841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 33365 - 0 [ 995.289831][ T6841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 33365 - 0 [ 995.315470][ T397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.327449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.564135][ T4392] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.582677][ T4392] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.606536][ T4392] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 995.659903][ T6841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 33365 - 0 [ 995.685110][ T6841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 33365 - 0 [ 996.015742][ T4392] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.062305][ T4392] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.092653][ T4392] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 996.150592][T20243] Bluetooth: hci7: command tx timeout [ 996.414193][ T4392] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.424842][ T4392] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.435538][ T4392] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 996.546581][ T4462] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 996.546687][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.558044][ T4462] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 996.603491][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.624949][ T4301] bridge_slave_0: entered allmulticast mode [ 996.661131][ T4301] bridge_slave_0: entered promiscuous mode [ 996.697914][ T4476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.706338][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.722520][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7578'. [ 996.764952][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.773416][ T4301] bridge_slave_1: entered allmulticast mode [ 996.792939][ T4301] bridge_slave_1: entered promiscuous mode [ 996.934634][ T4490] xt_bpf: check failed: parse error [ 997.005694][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.034824][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.286975][ T37] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.315175][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 997.339401][ T37] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 997.408306][ T4301] team0: Port device team_slave_0 added [ 997.457182][ T4462] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 997.473687][ T4462] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 997.585309][ T4301] team0: Port device team_slave_1 added [ 997.769327][ T37] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.796016][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 997.831286][ T37] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 997.863442][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.886195][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.971262][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.013616][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.041019][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.100947][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.210024][ T397] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.229352][ T397] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 998.262537][ T4521] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7582'. [ 998.264752][ T397] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 998.514550][ T393] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.525271][ T393] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 998.534365][ T393] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 998.690707][ T4534] netlink: 'syz.5.7584': attribute type 11 has an invalid length. [ 998.834700][ T4301] hsr_slave_0: entered promiscuous mode [ 998.852837][ T4301] hsr_slave_1: entered promiscuous mode [ 998.868965][ T4301] debugfs: 'hsr0' already exists in 'hsr' [ 998.897158][ T4301] Cannot create hsr debugfs directory [ 999.117915][ T4553] xt_hashlimit: size too large, truncated to 1048576 [ 999.141901][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7586'. [ 999.419812][ T4559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7588'. [ 999.454118][ T4559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7588'. [ 999.504003][ T4559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7588'. [ 999.555527][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7588'. [ 999.635846][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7588'. [ 999.641546][ T4559] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7588'. [ 999.673303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.685106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.759965][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7588'. [ 1000.712446][ T387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.984279][ T4596] geneve3: entered promiscuous mode [ 1000.992879][ T4602] netlink: 'syz.5.7597': attribute type 11 has an invalid length. [ 1001.044614][ T392] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1001.078075][ T6841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.285815][ T392] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1001.316738][ T392] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1001.336293][ T392] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1001.451889][ T4301] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1001.467421][ T4623] netlink: 'syz.1.7602': attribute type 10 has an invalid length. [ 1001.486199][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1001.530099][ T4623] team0: Port device veth1_to_hsr added [ 1001.554554][ T4301] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1001.606618][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1001.626689][ T4301] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1001.653269][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1001.665477][ T4301] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1001.699720][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1001.745547][ T4626] syzkaller1: entered promiscuous mode [ 1001.754333][ T4641] __nla_validate_parse: 3 callbacks suppressed [ 1001.754357][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7604'. [ 1001.754768][ T4626] syzkaller1: entered allmulticast mode [ 1001.761826][ T4641] netlink: 'syz.1.7604': attribute type 29 has an invalid length. [ 1001.784030][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7604'. [ 1001.941934][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.949083][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7605'. [ 1001.971828][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.990233][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.997507][ T397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.043133][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.050499][ T6841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.235508][ T4660] netlink: 'syz.1.7611': attribute type 1 has an invalid length. [ 1002.322311][ T4661] netlink: 'syz.3.7610': attribute type 4 has an invalid length. [ 1002.565711][ T4672] syzkaller1: entered promiscuous mode [ 1002.592031][ T4672] syzkaller1: entered allmulticast mode [ 1003.024914][ T4709] netlink: 'syz.5.7621': attribute type 1 has an invalid length. [ 1003.179828][ T4709] bond2: entered promiscuous mode [ 1003.187000][ T4709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1003.208397][ T4712] netlink: 'syz.0.7624': attribute type 10 has an invalid length. [ 1003.234400][ T4712] netlink: 'syz.0.7624': attribute type 10 has an invalid length. [ 1003.245191][ T4712] team0: Port device netdevsim1 removed [ 1003.253090][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.268852][ T4712] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1003.282290][ T4712] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1003.345363][ T4700] bond2: (slave veth3): making interface the new active one [ 1003.370729][ T4700] veth3: entered promiscuous mode [ 1003.380102][ T4700] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1003.497546][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.505689][ T4733] netlink: 211816 bytes leftover after parsing attributes in process `syz.0.7626'. [ 1003.550650][ T4733] netlink: Unknown conntrack attr (type=2304, max=9) [ 1003.567290][ T4736] lo: entered allmulticast mode [ 1003.583517][ T4736] lo: left allmulticast mode [ 1003.593217][ T4736] pim6reg: left allmulticast mode [ 1003.882623][ T4760] netlink: 'syz.0.7633': attribute type 1 has an invalid length. [ 1003.917180][ T4746] syzkaller1: entered promiscuous mode [ 1003.937734][ T4746] syzkaller1: entered allmulticast mode [ 1004.096615][ T4769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.108976][ T4767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.151504][ T4301] veth0_vlan: entered promiscuous mode [ 1004.180047][ T4301] veth1_vlan: entered promiscuous mode [ 1004.248658][ T4301] veth0_macvtap: entered promiscuous mode [ 1004.362934][ T4301] veth1_macvtap: entered promiscuous mode [ 1004.415364][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.461889][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.526980][ T4787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7640'. [ 1004.549988][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.578574][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.622623][ T4796] netlink: 'syz.1.7642': attribute type 1 has an invalid length. [ 1004.651408][ T4796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.758045][ T4804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7642'. [ 1004.767941][ T4804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7642'. [ 1004.845657][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.886685][ T4805] pim6reg0: tun_chr_ioctl cmd 35111 [ 1004.937812][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.967529][ T4803] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7646'. [ 1005.041162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.129224][ T4808] syzkaller1: entered promiscuous mode [ 1005.150073][ T4808] syzkaller1: entered allmulticast mode [ 1005.400906][ T401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.412146][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7649'. [ 1005.438494][ T401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.516346][ T393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.531427][ T393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.746489][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.819050][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.862398][ T4837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.035161][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.119025][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.353007][ T4866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1006.360324][ T4866] IPv6: NLM_F_CREATE should be set when creating new route [ 1006.366972][ T4870] netlink: 'syz.5.7661': attribute type 32 has an invalid length. [ 1006.367578][ T4866] IPv6: NLM_F_CREATE should be set when creating new route [ 1006.402260][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7661'. [ 1006.473647][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.543313][ T4870] bond3: option coupled_control: invalid value (12) [ 1006.570021][ T4870] bond3 (unregistering): Released all slaves [ 1006.665517][ T4864] syzkaller1: entered promiscuous mode [ 1006.682135][ T4864] syzkaller1: entered allmulticast mode [ 1007.027862][ T4896] __nla_validate_parse: 1 callbacks suppressed [ 1007.027884][ T4896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7664'. [ 1007.145363][ T4903] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7666'. [ 1007.232086][ T4905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7667'. [ 1007.311638][ T4908] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7669'. [ 1007.340136][ T4909] netlink: 'syz.7.7668': attribute type 1 has an invalid length. [ 1007.475003][ T4909] team0: Port device veth3 added [ 1007.516815][ T4909] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7668'. [ 1007.605634][ T4918] team0: Port device veth5 added [ 1007.644754][ T4909] team0: Port device bridge1 added [ 1007.696577][ T4926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1007.786433][ T4930] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7675'. [ 1007.823625][ T4930] syzkaller1: entered promiscuous mode [ 1007.840822][ T4930] syzkaller1: entered allmulticast mode [ 1007.914820][ T4936] netlink: 'syz.7.7676': attribute type 1 has an invalid length. [ 1008.255043][ T4971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.265139][ T4971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.282994][ T4971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.326349][ T4971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1008.341260][ T4971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1008.357914][ T4971] veth1_vlan: left promiscuous mode [ 1008.365906][ T4971] veth0_vlan: left promiscuous mode [ 1008.373167][ T4971] veth0_vlan: entered promiscuous mode [ 1008.386056][ T4971] veth1_vlan: entered promiscuous mode [ 1008.409976][ T4983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1008.424747][ T4983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1008.444627][ T4971] veth1_macvtap: left promiscuous mode [ 1008.462342][ T4971] veth0_macvtap: left promiscuous mode [ 1008.501967][ T4971] veth0_macvtap: entered promiscuous mode [ 1008.509804][ T4971] veth1_macvtap: entered promiscuous mode [ 1008.528500][ T4971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1008.542217][ T4971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.552217][ T4971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.562942][ T4971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.577956][ T4971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1008.597457][ T4971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1008.609551][ T4971] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1008.643745][ T4976] mac80211_hwsim hwsim82 wlan0: entered promiscuous mode [ 1008.665507][ T4976] mac80211_hwsim hwsim82 wlan0: entered allmulticast mode [ 1008.751919][ T6841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.782066][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7686'. [ 1008.791984][ T6841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.803353][ T6841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.833508][ T6841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.912095][ T4996] lo: Caught tx_queue_len zero misconfig [ 1008.948550][ T4996] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.7688'. [ 1010.819282][ T4936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1011.466832][ T5039] syzkaller0: entered promiscuous mode [ 1011.498369][ T5039] syzkaller0: entered allmulticast mode [ 1011.594355][ T6841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.023567][ T5056] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1012.127121][ T5059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7706'. [ 1012.169043][ T5062] sctp: [Deprecated]: syz.3.7707 (pid 5062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1012.169043][ T5062] Use struct sctp_sack_info instead [ 1012.177869][ T5060] netlink: 'syz.5.7702': attribute type 11 has an invalid length. [ 1012.210145][ T5060] netlink: 'syz.5.7702': attribute type 11 has an invalid length. [ 1012.234101][ T5060] netlink: 204 bytes leftover after parsing attributes in process `syz.5.7702'. [ 1012.303947][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7708'. [ 1012.383383][ T5072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1012.579572][ T5079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1012.643620][ T5072] bridge3: port 1(veth5) entered blocking state [ 1012.661196][ T5072] bridge3: port 1(veth5) entered disabled state [ 1012.679854][ T5072] veth5: entered allmulticast mode [ 1012.704417][ T5072] veth5: entered promiscuous mode [ 1012.813185][ T5085] bridge3: port 2(veth7) entered blocking state [ 1012.832008][ T5085] bridge3: port 2(veth7) entered disabled state [ 1012.848757][ T5085] veth7: entered allmulticast mode [ 1012.859853][ T5085] veth7: entered promiscuous mode [ 1012.897833][ T5090] ip6gretap0: entered promiscuous mode [ 1012.926447][ T5092] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1013.019205][ T5104] nbd: socks must be embedded in a SOCK_ITEM attr [ 1017.364016][ T401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.447889][ T5115] syzkaller0: entered promiscuous mode [ 1018.460971][ T5115] syzkaller0: entered allmulticast mode [ 1018.717660][ T5139] mac80211_hwsim hwsim117 syzkaller0: entered promiscuous mode [ 1018.736469][ T5139] mac80211_hwsim hwsim117 syzkaller0: entered allmulticast mode [ 1018.749302][ T5140] syzkaller0: entered promiscuous mode [ 1018.773254][ T5140] syzkaller0: entered allmulticast mode [ 1018.839811][ T5152] netlink: 67 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1018.895019][ T5152] bridge0: entered promiscuous mode [ 1018.901985][ T5152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.915674][ T5152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.967775][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1019.041186][ T5152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.059744][ T5152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.075778][ T5152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1019.086956][ T5152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1019.107107][ T5152] veth1_macvtap: left promiscuous mode [ 1019.114008][ T5152] veth0_macvtap: left promiscuous mode [ 1019.121768][ T5152] veth0_macvtap: entered promiscuous mode [ 1019.128778][ T5152] veth1_macvtap: entered promiscuous mode [ 1019.138893][ T5152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1019.147725][ T5152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1019.159406][ T5152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1019.173510][ T5152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1019.183819][ T5152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1019.196593][ T5152] batadv0: entered promiscuous mode [ 1019.203475][ T5152] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1019.215206][ T5152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1019.228839][ T5152] ip6gretap0: entered promiscuous mode [ 1019.263054][ T5152] bond6: entered allmulticast mode [ 1019.268236][ T5152] bond6: entered promiscuous mode [ 1019.281325][ T5152] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1019.293324][ T5152] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1019.325951][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.333205][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.376513][ T5165] netlink: 'syz.1.7727': attribute type 8 has an invalid length. [ 1019.385557][ T5165] sch_fq: defrate 0 ignored. [ 1019.394586][ T393] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.404620][ T393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.414751][ T393] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.425983][ T393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.448627][ T5166] veth0: entered promiscuous mode [ 1019.507684][ T393] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.518075][ T393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.530036][ T5151] veth0: left promiscuous mode [ 1019.552569][ T393] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.574407][ T393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.611666][ T392] ip6_tunnel:  xmit: Local address not yet configured! [ 1019.678643][ T5177] netlink: 'syz.5.7731': attribute type 2 has an invalid length. [ 1019.798288][ T5181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7733'. [ 1019.898319][ T5199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1019.988986][ T5199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1022.471576][ T392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.795838][ T5186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1023.158593][ T5238] netlink: 'syz.3.7749': attribute type 1 has an invalid length. [ 1023.184387][ T5234] pim6reg: entered allmulticast mode [ 1023.200558][ T5228] macvlan2: entered promiscuous mode [ 1023.208844][ T5228] gretap0: entered promiscuous mode [ 1023.228023][ T5228] gretap0: left promiscuous mode [ 1023.249133][ T5243] netlink: 'syz.5.7750': attribute type 1 has an invalid length. [ 1023.292934][ T5238] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1023.356841][ T5252] netlink: 'syz.3.7752': attribute type 1 has an invalid length. [ 1023.428583][ T5243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1023.462358][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7752'. [ 1023.527131][ T5244] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1023.565578][ T5249] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1023.647254][ T5252] bond10: entered promiscuous mode [ 1023.656817][ T5252] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1023.678238][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.708767][ T5263] bridge_slave_0: left allmulticast mode [ 1023.734468][ T5263] bridge_slave_0: left promiscuous mode [ 1023.758230][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.810996][ T5280] netlink: 'syz.5.7758': attribute type 1 has an invalid length. [ 1023.830524][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1024.018131][ T5286] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7762'. [ 1024.442551][ T5325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7770'. [ 1024.823595][ T5337] dvmrp0: entered allmulticast mode [ 1025.069305][ T5371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7784'. [ 1025.076702][ T5361] tipc: Enabling of bearer rejected, failed to enable media [ 1025.105715][ T5361] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7782'. [ 1025.129417][ T5365] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7782'. [ 1025.424895][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7789'. [ 1025.480070][ T5390] batadv0: left promiscuous mode [ 1025.501632][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7789'. [ 1025.517950][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7789'. [ 1025.529703][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7789'. [ 1025.539711][ T5393] netlink: 'syz.3.7789': attribute type 18 has an invalid length. [ 1025.567026][ T5390] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1025.777732][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7791'. [ 1026.170020][ T5423] netlink: 'syz.5.7797': attribute type 7 has an invalid length. [ 1026.226585][ T5423] netlink: 'syz.5.7797': attribute type 8 has an invalid length. [ 1026.634813][ T5453] xfrm1: entered allmulticast mode [ 1027.308067][ T5478] x_tables: duplicate underflow at hook 1 [ 1027.442831][ T5481] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1027.510803][ T397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.186761][ T5493] syzkaller0: entered promiscuous mode [ 1028.200775][ T5493] syzkaller0: entered allmulticast mode [ 1028.434397][ T5508] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1028.434397][ T5508] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1029.652785][ T5524] __nla_validate_parse: 13 callbacks suppressed [ 1029.652805][ T5524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7822'. [ 1032.071399][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1032.737851][ T397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.962041][ T5513] netlink: 'syz.3.7820': attribute type 5 has an invalid length. [ 1033.970742][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7820'. [ 1034.146681][ T5529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7823'. [ 1034.177917][ T5529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7823'. [ 1034.208841][ T5532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7823'. [ 1034.303287][ T5529] netlink: 'syz.1.7823': attribute type 1 has an invalid length. [ 1034.332653][ T5547] tipc: Enabled bearer , priority 0 [ 1034.464281][ T5550] tipc: Disabling bearer [ 1034.634992][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.643275][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.739546][ T5570] netlink: 'syz.7.7833': attribute type 11 has an invalid length. [ 1034.749768][ T5570] netlink: 'syz.7.7833': attribute type 4 has an invalid length. [ 1034.758439][ T5570] netlink: 199768 bytes leftover after parsing attributes in process `syz.7.7833'. [ 1034.800001][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7833'. [ 1034.877397][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.895461][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.688842][ T6841] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.712987][ T6841] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1035.730151][ T5572] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1035.741392][ T6841] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1035.765026][ T6841] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.773890][ T5572] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1035.791368][ T6841] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1035.800013][ T5572] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1035.811878][ T6841] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1035.829699][ T5577] netlink: 204 bytes leftover after parsing attributes in process `syz.5.7837'. [ 1035.834708][ T6841] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.858335][ T5577] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7837'. [ 1035.880969][ T6841] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1035.899763][ T6841] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1035.910208][ T6841] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.946198][ T6841] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1035.965587][ T6841] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1036.044895][ T5585] netlink: 'syz.5.7839': attribute type 16 has an invalid length. [ 1036.233495][ T5592] netlink: 'syz.5.7841': attribute type 21 has an invalid length. [ 1036.253669][ T5592] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7841'. [ 1036.277453][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7841'. [ 1036.323951][ T5592] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1036.830087][ T5609] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7845'. [ 1036.858516][ T5615] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1036.926946][ T5613] syzkaller1: entered promiscuous mode [ 1036.957993][ T5613] syzkaller1: entered allmulticast mode [ 1037.212356][ T5633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7849'. [ 1037.423593][ T5637] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7851'. [ 1037.494358][ T5637] syzkaller1: entered promiscuous mode [ 1037.506452][ T5637] syzkaller1: entered allmulticast mode [ 1037.525521][ T5649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7853'. [ 1037.833347][ T400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.374331][ T5751] netlink: 'syz.0.7869': attribute type 5 has an invalid length. [ 1039.559198][ T5753] syzkaller1: entered promiscuous mode [ 1039.565544][ T5753] syzkaller1: entered allmulticast mode [ 1040.406104][ T5824] __nla_validate_parse: 4 callbacks suppressed [ 1040.406125][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7889'. [ 1040.475409][ T5826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7892'. [ 1040.513191][ T5823] syzkaller1: entered promiscuous mode [ 1040.522725][ T5823] syzkaller1: entered allmulticast mode [ 1040.831195][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7895'. [ 1040.862725][ T5834] netlink: 'syz.1.7895': attribute type 1 has an invalid length. [ 1041.443654][ T5856] netlink: 'syz.3.7902': attribute type 9 has an invalid length. [ 1041.472620][ T5856] netlink: 'syz.3.7902': attribute type 6 has an invalid length. [ 1041.643956][ T5860] pim6reg1: entered promiscuous mode [ 1041.649321][ T5860] pim6reg1: entered allmulticast mode [ 1041.796594][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7906'. [ 1042.039966][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7908'. [ 1042.168886][ T5886] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7910'. [ 1042.312043][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7911'. [ 1042.338337][ T5892] macvtap1: entered promiscuous mode [ 1042.344932][ T5892] syz_tun: entered promiscuous mode [ 1042.351131][ T5892] macvtap1: entered allmulticast mode [ 1042.356659][ T5892] syz_tun: entered allmulticast mode [ 1042.367012][ T5897] sock: sock_set_timeout: `syz.7.7914' (pid 5897) tries to set negative timeout [ 1042.467535][ T5901] syz_tun: left allmulticast mode [ 1042.486305][ T5901] syz_tun: left promiscuous mode [ 1042.511012][ T5901] macvtap1: left promiscuous mode [ 1042.523881][ T5901] macvtap1: left allmulticast mode [ 1042.862079][ T5930] netlink: 'syz.0.7922': attribute type 1 has an invalid length. [ 1042.878289][ T5930] netlink: 'syz.0.7922': attribute type 1 has an invalid length. [ 1042.903992][ T5931] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1042.958965][ T5931] syzkaller1: entered promiscuous mode [ 1042.964643][ T5931] syzkaller1: entered allmulticast mode [ 1043.465426][ T5940] geneve3: entered promiscuous mode [ 1043.587325][ T400] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.607025][ T400] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.636136][ T400] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.665496][ T400] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.675879][ T5951] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7927'. [ 1043.759472][ T5955] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7927'. [ 1044.046290][ T5968] siw: device registration error -23 [ 1044.597886][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 1044.609199][ T5997] syzkaller1: entered promiscuous mode [ 1044.624999][ T5997] syzkaller1: entered allmulticast mode [ 1044.714879][ T6002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1044.738998][ T6002] veth0_to_bond: default FDB implementation only supports local addresses [ 1044.874766][ T6014] veth0: entered promiscuous mode [ 1044.882241][ T6013] veth0: left promiscuous mode [ 1045.029146][ T6025] netlink: 'syz.0.7946': attribute type 1 has an invalid length. [ 1045.072732][ T6025] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1045.107032][ T6028] bond6: entered allmulticast mode [ 1045.139148][ T6025] bond6: (slave ip6gretap2): making interface the new active one [ 1045.148355][ T6025] ip6gretap2: entered allmulticast mode [ 1045.155905][ T6025] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1045.245827][ T6031] ipt_rpfilter: unknown options [ 1045.403577][ T6044] syzkaller1: entered promiscuous mode [ 1045.409682][ T6044] syzkaller1: entered allmulticast mode [ 1045.467186][ T6048] __nla_validate_parse: 8 callbacks suppressed [ 1045.467206][ T6048] netlink: 209808 bytes leftover after parsing attributes in process `syz.5.7953'. [ 1045.516242][ T6046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1045.668835][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7956'. [ 1045.683008][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7956'. [ 1046.014254][ T6079] sctp: [Deprecated]: syz.5.7962 (pid 6079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1046.014254][ T6079] Use struct sctp_sack_info instead [ 1046.195923][ T6091] syz_tun: entered allmulticast mode [ 1046.203888][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7965'. [ 1046.273823][ T6091] syz_tun (unregistering): left allmulticast mode [ 1046.369146][ T6094] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7966'. [ 1046.414514][ T6094] syzkaller1: entered promiscuous mode [ 1046.430114][ T6094] syzkaller1: entered allmulticast mode [ 1046.521535][ T6100] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7968'. [ 1046.694940][ T6103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1046.785741][ T6110] xt_recent: Unsupported userspace flags (000000b1) [ 1046.889099][ T6100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 33365 - 0 [ 1046.906880][ T6100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1047.105102][ T6100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 33365 - 0 [ 1047.117463][ T6100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1047.283479][ T6100] bond0: (slave netdevsim1): Releasing backup interface [ 1047.302741][ T6100] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 1047.316741][ T6100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 33365 - 0 [ 1047.331799][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7974'. [ 1047.332722][ T6100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1047.524821][ T6132] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1047.575068][ T6100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 33365 - 0 [ 1047.596436][ T6100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1047.760176][ T6113] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1047.987287][ T393] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.014968][ T393] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 33365 - 0 [ 1048.089070][ T393] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.116830][ T393] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 33365 - 0 [ 1048.117902][ T6155] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7980'. [ 1048.174470][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.186074][ T37] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 33365 - 0 [ 1048.240108][ T6150] syzkaller1: entered promiscuous mode [ 1048.249354][ T6150] syzkaller1: entered allmulticast mode [ 1048.347226][ T401] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.360005][ T401] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 33365 - 0 [ 1048.371282][ T6161] dvmrp0: left allmulticast mode [ 1048.514284][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7986'. [ 1048.542467][ T6166] netlink: 'syz.0.7986': attribute type 1 has an invalid length. [ 1048.682871][ T6166] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1048.710834][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1048.755611][ T6175] bond7: (slave geneve4): making interface the new active one [ 1048.776847][ T6175] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 1048.851684][ T6178] netlink: 'syz.0.7986': attribute type 15 has an invalid length. [ 1048.876964][ T6186] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 1048.961757][ T6180] bridge_slave_0: entered promiscuous mode [ 1048.996259][ T6180] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1049.495584][ T6211] netlink: 'syz.1.7996': attribute type 1 has an invalid length. [ 1049.505539][ T6209] vlan3: entered promiscuous mode [ 1049.520738][ T6209] bridge0: entered promiscuous mode [ 1049.541368][ T6207] syzkaller1: entered promiscuous mode [ 1049.552211][ T6207] syzkaller1: entered allmulticast mode [ 1049.620622][ T6211] bond8: entered promiscuous mode [ 1049.644172][ T6211] bond8: entered allmulticast mode [ 1049.651616][ T6211] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1049.679651][ T6212] erspan2: entered allmulticast mode [ 1049.699086][ T6212] bond8: (slave erspan2): making interface the new active one [ 1049.707724][ T6212] erspan2: entered promiscuous mode [ 1049.719421][ T6212] bond8: (slave erspan2): Enslaving as an active interface with an up link [ 1049.728847][ T6214] netlink: 'syz.0.7994': attribute type 4 has an invalid length. [ 1049.866350][ T6225] gre2: entered allmulticast mode [ 1050.096264][ T6230] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1050.113942][ T6230] bond9 (unregistering): Released all slaves [ 1050.253852][ T6225] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1050.266418][ T6225] bond9 (unregistering): Released all slaves [ 1050.642871][ T6276] tipc: Enabling of bearer rejected, failed to enable media [ 1050.710116][ T6278] __nla_validate_parse: 5 callbacks suppressed [ 1050.710137][ T6278] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8012'. [ 1050.756193][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8015'. [ 1050.807002][ T6278] syzkaller1: entered promiscuous mode [ 1050.834606][ T6278] syzkaller1: entered allmulticast mode [ 1050.841403][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8016'. [ 1050.899102][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8017'. [ 1050.981997][ T6296] nbd: couldn't find a device at index 0 [ 1050.987601][ T6293] vlan3: entered allmulticast mode [ 1051.001168][ T6293] macvtap0: entered allmulticast mode [ 1051.014277][ T6293] veth0_macvtap: entered allmulticast mode [ 1051.347043][ T6316] sctp: [Deprecated]: syz.7.8023 (pid 6316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1051.347043][ T6316] Use struct sctp_sack_info instead [ 1051.493752][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8025'. [ 1051.516586][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8025'. [ 1051.829454][ T6339] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1051.883218][ T6339] syzkaller1: entered promiscuous mode [ 1051.897335][ T6339] syzkaller1: entered allmulticast mode [ 1052.142647][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8034'. [ 1052.153874][ T6356] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1052.492724][ T6376] nftables ruleset with unbound chain [ 1052.590733][ T6379] batadv0: entered promiscuous mode [ 1052.619703][ T6379] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1052.648369][ T6381] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8043'. [ 1052.667155][ T6343] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1052.907062][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8056'. [ 1052.943960][ T6396] xt_bpf: check failed: parse error [ 1053.244635][ T6415] netlink: 'syz.3.8053': attribute type 1 has an invalid length. [ 1053.327380][ T6416] gretap2: entered allmulticast mode [ 1053.364118][ T6428] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535) [ 1053.387848][ T6415] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1053.804506][ T6463] netlink: 'syz.3.8064': attribute type 4 has an invalid length. [ 1053.850026][ T6458] syzkaller0: entered promiscuous mode [ 1053.858913][ T6468] netlink: 'syz.3.8064': attribute type 4 has an invalid length. [ 1053.858949][ T6458] syzkaller0: entered allmulticast mode [ 1054.127791][ T6477] tipc: Started in network mode [ 1054.134035][ T6477] tipc: Node identity fef2d20000000000000000000000001, cluster identity 4711 [ 1054.147161][ T6477] tipc: Enabling of bearer rejected, failed to enable media [ 1054.178957][ T6480] openvswitch: netlink: Missing valid actions attribute. [ 1054.218283][ T6480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.327381][ T6487] netlink: 'syz.7.8070': attribute type 1 has an invalid length. [ 1054.442365][ T6497] bridge0: entered allmulticast mode [ 1054.676158][ T6503] netlink: 'syz.0.8076': attribute type 11 has an invalid length. [ 1055.578735][ T6541] macvtap1: entered promiscuous mode [ 1055.587798][ T6541] macvtap1: entered allmulticast mode [ 1055.600171][ T6541] syz_tun: entered allmulticast mode [ 1055.614165][ T6546] syz_tun: left allmulticast mode [ 1055.623707][ T6546] macvtap1: left promiscuous mode [ 1055.633841][ T6546] macvtap1: left allmulticast mode [ 1055.656310][ T6547] tipc: Enabled bearer , priority 26 [ 1055.782690][ T6553] __nla_validate_parse: 9 callbacks suppressed [ 1055.782707][ T6553] netlink: 496 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1055.798523][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8088'. [ 1055.808577][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1055.851649][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1056.351901][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8093'. [ 1056.394779][ T6569] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8092'. [ 1056.463679][ T6574] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1056.627914][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8093'. [ 1056.729909][ T6583] bond11: (slave veth11): Enslaving as an active interface with an up link [ 1056.770972][T11859] tipc: Node number set to 4277326352 [ 1056.822012][ T6597] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8096'. [ 1056.930554][ T6600] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8097'. [ 1056.953923][ T6600] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8097'. [ 1057.032743][ T403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.057123][ T6604] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1057.195809][ T6613] netlink: 'syz.5.8101': attribute type 1 has an invalid length. [ 1057.215608][ T6613] netlink: 'syz.5.8101': attribute type 1 has an invalid length. [ 1057.265675][ T6608] netlink: 'syz.3.8100': attribute type 1 has an invalid length. [ 1057.296943][ T6608] netlink: 'syz.3.8100': attribute type 2 has an invalid length. [ 1057.528525][ T6622] netlink: 'syz.5.8103': attribute type 3 has an invalid length. [ 1058.709949][ T6684] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1058.818889][ T6681] sctp: [Deprecated]: syz.5.8119 (pid 6681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1058.818889][ T6681] Use struct sctp_sack_info instead [ 1059.054056][ T6698] syzkaller1: entered promiscuous mode [ 1059.068084][ T6698] syzkaller1: entered allmulticast mode [ 1060.332731][ T6762] netlink: 'syz.7.8140': attribute type 62 has an invalid length. [ 1060.677687][ T6761] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1060.897297][ T6775] netlink: 'syz.5.8144': attribute type 4 has an invalid length. [ 1061.131163][ T6787] __nla_validate_parse: 15 callbacks suppressed [ 1061.131184][ T6787] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8145'. [ 1061.392795][ T6770] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1061.866733][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8152'. [ 1061.937099][ T6810] bridge3: entered promiscuous mode [ 1061.949075][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8153'. [ 1061.987698][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8153'. [ 1062.095640][ T6817] batman_adv: batadv0: Adding interface: dummy0 [ 1062.104601][ T6817] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.131654][ T6817] batman_adv: batadv0: Interface activated: dummy0 [ 1062.149993][ T6817] batadv0: mtu less than device minimum [ 1062.159340][ T6817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.171370][ T6817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.183127][ T6817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.194852][ T6817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.206693][ T6817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.218595][ T6817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.230442][ T6817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.241647][ T6817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1062.294013][ T6819] syzkaller1: entered promiscuous mode [ 1062.299580][ T6819] syzkaller1: entered allmulticast mode [ 1062.523118][ T6828] netlink: 'syz.7.8158': attribute type 2 has an invalid length. [ 1062.735928][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8159'. [ 1062.929328][ T6845] xt_CT: No such helper "syz0" [ 1063.042699][ T6852] bond12: Unable to set up delay as MII monitoring is disabled [ 1063.068044][ T6852] bond12 (unregistering): Released all slaves [ 1063.817979][ T6887] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1063.842070][ T6887] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1064.068099][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8175'. [ 1064.068109][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8175'. [ 1064.197036][ T6855] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.199040][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8174'. [ 1064.227590][ T6855] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.259407][ T6855] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.291274][ T6855] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.299965][ T6910] netlink: 'syz.0.8178': attribute type 1 has an invalid length. [ 1064.456603][ T6916] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1064.695202][ T6934] ip6tnl3: entered allmulticast mode [ 1064.815377][ T6938] tipc: Enabling of bearer rejected, media not registered [ 1064.925765][ T6943] bridge0: port 3(batadv1) entered blocking state [ 1064.942722][ T6943] bridge0: port 3(batadv1) entered disabled state [ 1064.961805][ T6943] batadv1: entered allmulticast mode [ 1064.979540][ T6943] batadv1: entered promiscuous mode [ 1065.403205][ T6964] syzkaller0: refused to change device tx_queue_len [ 1065.421538][ T387] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1065.432715][ T387] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1065.528655][ T6979] netlink: 'syz.1.8195': attribute type 83 has an invalid length. [ 1065.645015][ T387] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1065.659385][ T387] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1065.685626][ T6417] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1065.887190][ T6992] siw: device registration error -23 [ 1066.391711][ T5738] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1066.452494][ T7015] __nla_validate_parse: 8 callbacks suppressed [ 1066.452517][ T7015] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8207'. [ 1066.471030][ T6417] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1066.488507][ T7015] net_ratelimit: 12 callbacks suppressed [ 1066.488530][ T7015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1066.586441][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8209'. [ 1066.944738][ T7046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8213'. [ 1067.012204][ T7049] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8214'. [ 1067.062443][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8214'. [ 1067.092503][ T7049] hsr_slave_0: left promiscuous mode [ 1067.151020][ T7049] hsr_slave_1: left promiscuous mode [ 1067.185722][ T7058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1067.216673][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1067.570248][ T7081] sock: sock_set_timeout: `syz.1.8222' (pid 7081) tries to set negative timeout [ 1067.831620][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.070630][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1073.032503][ T387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.872121][ T31] INFO: task syz.4.7030:2052 blocked for more than 143 seconds. [ 1076.880019][ T31] Not tainted syzkaller #0 [ 1076.885710][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1076.894942][ T31] task:syz.4.7030 state:D stack:26248 pid:2052 tgid:2050 ppid:29785 task_flags:0x400040 flags:0x00080002 [ 1076.907424][ T31] Call Trace: [ 1076.911400][ T31] [ 1076.914374][ T31] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1076.918879][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1076.924719][ T31] ? __pfx___schedule+0x10/0x10 [ 1076.930129][ T31] ? schedule+0x90/0x360 [ 1076.935418][ T31] schedule+0x164/0x360 [ 1076.939633][ T31] schedule_preempt_disabled+0x13/0x30 [ 1076.945717][ T31] __mutex_lock+0x7f7/0x1550 [ 1076.951001][ T31] ? __mutex_lock+0x608/0x1550 [ 1076.955903][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1076.963105][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1076.968218][ T31] ? stack_trace_save+0xa9/0x100 [ 1076.988367][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1077.039253][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1077.071929][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1077.092467][ T31] ? kasan_save_track+0x4f/0x80 [ 1077.097435][ T31] ? kasan_save_track+0x3e/0x80 [ 1077.102876][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1077.107713][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 1077.113231][ T31] ? netlink_dump+0x1d8/0xe10 [ 1077.117980][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 1077.125999][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 1077.134201][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 1077.151265][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 1077.156314][ T31] ? genl_rcv+0x28/0x40 [ 1077.171896][ T31] ? netlink_unicast+0x75c/0x8e0 [ 1077.177113][ T31] ? netlink_sendmsg+0x813/0xb40 [ 1077.190919][ T31] ? ____sys_sendmsg+0x972/0x9f0 [ 1077.197045][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 1077.210876][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1077.220614][ T31] ? do_syscall_64+0x174/0x580 [ 1077.239941][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.261852][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1077.268534][ T31] ? rcu_is_watching+0x15/0xb0 [ 1077.273866][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1077.283240][ T31] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1077.302311][ T31] genl_dumpit+0x10b/0x1b0 [ 1077.308362][ T31] netlink_dump+0x702/0xe10 [ 1077.320517][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 1077.330370][ T31] ? genl_start+0x499/0x6c0 [ 1077.341998][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 1077.353311][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1077.370659][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1077.378513][ T31] ? genl_get_cmd+0x522/0x960 [ 1077.391933][ T31] ? __pfx_genl_start+0x10/0x10 [ 1077.402055][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 1077.413054][ T31] ? __pfx_genl_done+0x10/0x10 [ 1077.423546][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 1077.436150][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1077.454000][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1077.480452][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1077.497058][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1077.512850][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1077.531136][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1077.536573][ T31] ? down_read+0x270/0x2e0 [ 1077.550925][ T31] ? genl_rcv+0xd/0x40 [ 1077.555093][ T31] genl_rcv+0x28/0x40 [ 1077.561336][ T31] netlink_unicast+0x75c/0x8e0 [ 1077.566180][ T31] netlink_sendmsg+0x813/0xb40 [ 1077.571765][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.577100][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1077.582182][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1077.587514][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1077.592748][ T31] ? __might_fault+0xaf/0x130 [ 1077.597493][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1077.603083][ T31] ? import_iovec+0x73/0xa0 [ 1077.607646][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1077.612636][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1077.617600][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.622946][ T31] ? futex_wait+0x2a2/0x390 [ 1077.627508][ T31] ? __fget_files+0x2a/0x420 [ 1077.632502][ T31] ? __fget_files+0x3a0/0x420 [ 1077.637224][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1077.642494][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1077.648046][ T31] ? rcu_is_watching+0x15/0xb0 [ 1077.653097][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.659210][ T31] do_syscall_64+0x174/0x580 [ 1077.663884][ T31] ? trace_irq_disable+0x3b/0x140 [ 1077.668931][ T31] ? clear_bhb_loop+0x40/0x90 [ 1077.675324][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.682023][ T31] RIP: 0033:0x7f2f0d59ce59 [ 1077.686482][ T31] RSP: 002b:00007f2f0b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.695617][ T31] RAX: ffffffffffffffda RBX: 00007f2f0d815fa0 RCX: 00007f2f0d59ce59 [ 1077.704169][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1077.713732][ T31] RBP: 00007f2f0d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1077.722174][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.730162][ T31] R13: 00007f2f0d816038 R14: 00007f2f0d815fa0 R15: 00007ffcb4bb8fc8 [ 1077.738789][ T31] [ 1077.742324][ T6839] batman_adv: batadv1: IGMP Querier appeared [ 1077.742432][ T31] [ 1077.742432][ T31] Showing all locks held in the system: [ 1077.748344][ T6839] batman_adv: batadv1: MLD Querier appeared [ 1077.756549][ T31] 1 lock held by khungtaskd/31: [ 1077.756638][ T31] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1077.756811][ T31] 2 locks held by getty/5386: [ 1077.783651][ T31] #0: ffff88803666a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1077.793953][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1077.811186][ T31] 1 lock held by syz-executor/30627: [ 1077.816536][ T31] #0: ffff888053b84ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1077.827205][ T31] 2 locks held by syz.2.6989/1904: [ 1077.833501][ T31] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1077.842525][ T31] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1077.853520][ T31] 3 locks held by syz.4.7030/2052: [ 1077.858664][ T31] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1077.867425][ T31] #1: ffff88807693b6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1077.878428][ T31] #2: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1077.889451][ T31] 1 lock held by syz-executor/2590: [ 1077.895397][ T31] #0: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1077.906723][ T31] 3 locks held by syz.6.7456/3906: [ 1077.912182][ T31] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1077.920822][ T31] #1: ffff8880a1e516e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1077.931852][ T31] #2: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1077.943095][ T31] 2 locks held by dhcpcd/7091: [ 1077.947879][ T31] #0: ffff8880a4efe260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1077.957800][ T31] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1077.969077][ T31] [ 1077.990777][ T31] ============================================= [ 1077.990777][ T31] [ 1078.019170][ T31] NMI backtrace for cpu 0 [ 1078.019191][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1078.019210][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.019220][ T31] Call Trace: [ 1078.019228][ T31] [ 1078.019235][ T31] dump_stack_lvl+0xe8/0x150 [ 1078.019258][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1078.019284][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1078.019306][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1078.019331][ T31] sys_info+0x135/0x170 [ 1078.019434][ T31] watchdog+0xfd3/0x1030 [ 1078.019468][ T31] ? watchdog+0x1c9/0x1030 [ 1078.019499][ T31] kthread+0x389/0x470 [ 1078.019536][ T31] ? __pfx_watchdog+0x10/0x10 [ 1078.019558][ T31] ? __pfx_kthread+0x10/0x10 [ 1078.019582][ T31] ret_from_fork+0x514/0xb70 [ 1078.019617][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.019637][ T31] ? __switch_to+0xc79/0x1410 [ 1078.019665][ T31] ? __pfx_kthread+0x10/0x10 [ 1078.019688][ T31] ret_from_fork_asm+0x1a/0x30 [ 1078.019730][ T31] [ 1078.019737][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1078.138404][ C1] NMI backtrace for cpu 1 [ 1078.138424][ C1] CPU: 1 UID: 0 PID: 30205 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1078.138443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.138454][ C1] RIP: 0010:preempt_count_add+0x42/0x190 [ 1078.138480][ C1] Code: 44 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ea 00 00 00 83 3d 1e ec b0 18 00 75 07 65 8b 05 65 88 a5 11 65 01 3d 5e 88 a5 11 <48> c7 c0 e0 b3 44 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e5 00 [ 1078.138494][ C1] RSP: 0018:ffffc9000436fad0 EFLAGS: 00000282 [ 1078.138508][ C1] RAX: 0000000080000001 RBX: 0000000000000001 RCX: ffffffff9a44b303 [ 1078.138520][ C1] RDX: 0000000000000017 RSI: ffffffff8c28b9c0 RDI: 0000000000000001 [ 1078.138531][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 0000000000000000 [ 1078.138541][ C1] R10: ffffed102bc0b000 R11: fffffbfff20613bf R12: ffffea0005781600 [ 1078.138553][ C1] R13: ffff88823fff8100 R14: ffff8880b8741280 R15: dffffc0000000000 [ 1078.138565][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 1078.138578][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1078.138589][ C1] CR2: 00007faea6b98949 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1078.138603][ C1] Call Trace: [ 1078.138611][ C1] [ 1078.138619][ C1] _raw_spin_trylock+0x19/0x80 [ 1078.138643][ C1] __free_frozen_pages+0x72c/0xd30 [ 1078.138667][ C1] ? ___free_pages+0x9a/0x1b0 [ 1078.138684][ C1] vfree+0x1d1/0x2f0 [ 1078.138704][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1078.138725][ C1] kcov_close+0x28/0x50 [ 1078.138744][ C1] __fput+0x44f/0xa60 [ 1078.138768][ C1] task_work_run+0x1d9/0x270 [ 1078.138790][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1078.138810][ C1] ? do_exit+0x70a/0x22c0 [ 1078.138835][ C1] ? kmem_cache_free+0x182/0x650 [ 1078.138856][ C1] ? put_net+0x191/0x260 [ 1078.138873][ C1] do_exit+0x70f/0x22c0 [ 1078.138896][ C1] ? __pfx_do_exit+0x10/0x10 [ 1078.138913][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1078.138940][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1078.138956][ C1] do_group_exit+0x21b/0x2d0 [ 1078.138976][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.138993][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1078.139012][ C1] x64_sys_call+0x221a/0x2240 [ 1078.139030][ C1] do_syscall_64+0x174/0x580 [ 1078.139046][ C1] ? trace_irq_disable+0x3b/0x140 [ 1078.139067][ C1] ? clear_bhb_loop+0x40/0x90 [ 1078.139084][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.139099][ C1] RIP: 0033:0x7f3e6339ce59 [ 1078.139113][ C1] Code: Unable to access opcode bytes at 0x7f3e6339ce2f. [ 1078.139197][ C1] RSP: 002b:00007ffe1b48b6f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1078.139213][ C1] RAX: ffffffffffffffda RBX: 00007f3e63433cb7 RCX: 00007f3e6339ce59 [ 1078.139224][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1078.139234][ C1] RBP: 00007f3e63433cc9 R08: 0000000000000000 R09: 00000000000927c0 [ 1078.139245][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1078.139254][ C1] R13: 00000000000927c0 R14: 0000000000104a7e R15: 00007ffe1b48b8a0 [ 1078.139276][ C1] [ 1078.493744][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1078.500669][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1078.509796][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.519866][ T31] Call Trace: [ 1078.523159][ T31] [ 1078.526094][ T31] vpanic+0x56c/0xa60 [ 1078.530088][ T31] ? __pfx___schedule+0x10/0x10 [ 1078.534950][ T31] ? __pfx_vpanic+0x10/0x10 [ 1078.539467][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1078.545644][ T31] panic+0xc5/0xd0 [ 1078.549378][ T31] ? __pfx_panic+0x10/0x10 [ 1078.553805][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1078.559195][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1078.565369][ T31] watchdog+0x102c/0x1030 [ 1078.569719][ T31] ? watchdog+0x1c9/0x1030 [ 1078.574155][ T31] kthread+0x389/0x470 [ 1078.578233][ T31] ? __pfx_watchdog+0x10/0x10 [ 1078.582923][ T31] ? __pfx_kthread+0x10/0x10 [ 1078.587528][ T31] ret_from_fork+0x514/0xb70 [ 1078.592118][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.597243][ T31] ? __switch_to+0xc79/0x1410 [ 1078.601928][ T31] ? __pfx_kthread+0x10/0x10 [ 1078.606514][ T31] ret_from_fork_asm+0x1a/0x30 [ 1078.611287][ T31] [ 1078.614686][ T31] Kernel Offset: disabled [ 1078.619003][ T31] Rebooting in 86400 seconds..