last executing test programs: 10.832334104s ago: executing program 0 (id=12171): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000000c0)="440b020fd48d0fe98aeed45787485b898af4be3b3af23670ca1d1f5c9d4e78c285", 0x21, 0x4000810, &(0x7f0000000100)={0xa, 0x4e20, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c) (rerun: 64) sendto$inet6(r0, &(0x7f0000000140)="157448c94da0485df20724ba35af020ea4fc6c5760f994bace73eb5d94671587c1acebc82f77a00d96320da82f2cb1b7c4", 0x31, 0x20000004, &(0x7f0000000180)={0xa, 0x4e24, 0x6, @mcast2, 0x1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) (rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"df4a495f8fbe676c29a4b4b9023b21c7", 0x0, 0x0, {0xffffffffffffff01, 0x7fff}, {0xa, 0x2}, 0x0, [0x0, 0xd3c, 0xea, 0x1ff, 0x1, 0x2, 0x8000000000000001, 0x7ff, 0xb20, 0x80000000, 0x2, 0x1, 0x8, 0x8000000000000000, 0x7, 0xfffffffffffffffb]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000300)={{r1}, r2, 0x2, @unused=[0x9, 0x3, 0x7, 0x2], @name="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"}) (async) bind$inet6(r1, &(0x7f0000001300)={0xa, 0x4e21, 0x7, @local, 0xffffffff}, 0x1c) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001440)={@private1, 0x0}, &(0x7f0000001480)=0x14) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={0xffffffffffffffff, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f00000015c0)=[0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000001640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001880), &(0x7f00000018c0)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000019c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)='%+9llu \x00'}, 0x20) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0xa4cf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x10, 0x9, &(0x7f0000001340)=@raw=[@func, @jmp={0x5, 0x0, 0x0, 0x9, 0xb, 0xfffffffffffffff8, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit], &(0x7f00000013c0)='GPL\x00', 0xfffffffd, 0x3e, &(0x7f0000001400)=""/62, 0x41000, 0xc48a3af790620a10, '\x00', r3, @fallback, r4, 0x8, &(0x7f0000001500)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0x4, 0x7edb, 0xe}, 0x10, r5, 0xffffffffffffffff, 0x7, &(0x7f0000001b40)=[r6, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r9], &(0x7f0000001b80)=[{0x2, 0x1, 0x8, 0xd}, {0x0, 0x3, 0x1, 0x4}, {0x1, 0x5, 0x10, 0xa}, {0x1, 0x5, 0x0, 0xa}, {0x4, 0x2, 0x4, 0x9}, {0x5, 0x4, 0xe, 0x6}, {0x0, 0x6, 0x1, 0xa}]}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r11 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000001d00)=0x2, 0x4) (async, rerun: 32) ioctl$SIOCPNENABLEPIPE(r10, 0x89ed, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001d40)={0x0, 0xe, 0xf1, "437d7ec6b1d981247d2be9258636e700dc2a6d5a301c0d06bb74c9bfdcb5f5fb35f5e38ee991a3f22290bb197af7475e65420d6414441e8ba8a1d67b99b11498d1d95b7412436eb8b7b4ee8767f654b8dff1025843d013b24577bfddaa16f1fcba58b25679a38e7bbb53366460417a32df00755e7485e3698be06fd6e3f99ac60f9eafb4a8518f3841b1666cbe354fdb24da029d3bd0e6ae8d3f4d992ff2b8bdaf9cfca7e8cc482754d6df36f00a1802c76f7d9297957f2ff2c87c25d7be911467b992a1ebb6c1f6c26a61bfdc2158cb7dd2d92ea195be6986dc17dd59e64a78ba6dd9e64a1ef4642d80888baf9c9e7206"}, 0xf9) (async, rerun: 32) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000001e40)={0xffffffffffffffff}) ioctl$NILFS_IOCTL_GET_BDESCS(r12, 0xc0186e87, &(0x7f0000001fc0)={&(0x7f0000001ec0)=[{0x0, 0x0, 0x680, 0x3, 0x3}, {0xd70, 0x8000000000000001, 0x8, 0xb9, 0x1}, {0xfffffffffffff7c1, 0xff, 0x2, 0x5, 0x5}, {0x76f78d3c, 0x0, 0x8, 0x2, 0x80}, {0x1, 0x5, 0x4, 0xf2, 0x569cf444}, {0x0, 0x8, 0x3, 0x3, 0x10000}], 0x6, 0x28, 0x6, 0x178}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r12, 0x84, 0x70, &(0x7f0000002000)={0x0, @in6={{0xa, 0x4e20, 0x7f, @mcast1, 0x7}}, [0x9, 0x81, 0x5, 0x2871, 0x0, 0x5, 0x8, 0x2, 0x0, 0x7, 0x6, 0x0, 0x4991, 0x6, 0x4]}, &(0x7f0000002100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002140)={r13, 0x6, 0x401}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000002380)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f0000002200)={0x138, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a4ca04e0fbebc6486e21a19525fedd41537e52c1f4ac6468"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "75ba16be0d8070947ca3e9f1acd0d09edb2d600b7ec487ce"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8a030df5328b61736a0564f4bece19dcc358b480bafa0d00"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001000) 10.725172579s ago: executing program 0 (id=12172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20000044) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x28000804) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40081}, 0x801) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000440)=0x10000) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x140a, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x48014) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '['}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '&[]-'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '[-'}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wlan1\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, ':,'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4000) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000900), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x324, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x282a88c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26555d6d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d6d749f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30ac4f7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb8343b8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d11a8cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x289aca0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x295c618e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56e95566}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d2e57d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77faa39e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7760fea4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74837fd7}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d72d85a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x575a5912}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d3bbfdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c59}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78fb1943}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe37}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f83ed07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8d5}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2062232f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c23e748}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x423}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4349eca0}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c60b755}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cde0066}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3080a99f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a07089}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bb85c69}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x635483e4}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b2020c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5df15418}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2709ba2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ed72694}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4334ebbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x324}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x45c, r9, 0x4, 0x70bd2c, 0x9, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffff9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a778c23}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4218628b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb8a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a3d2f5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x197e7d76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3638e96a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x583a434}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x710b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d951a6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x253}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaef}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38acad64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bc04a69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53d76ec1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c573625}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9860}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13b00ae0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17be5d2a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c124761}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2708b773}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cb563e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da91e0b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf543}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc075}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4058cb61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d981cc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33b61831}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a8cd80e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e4d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x366200f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe306}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf819}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf714}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b8376d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x530733d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb26}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2491439b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5690}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4832}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65abcf29}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcd50234}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ae43719}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5985fea3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fa31a32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x481f1317}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ecb8c52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14f5442f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x786e29b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c133e36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7873e1f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67786bea}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f5d5936}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x144, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1da4b3ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3331d85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x474a7723}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdfa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19489c11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ed68400}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b58b532}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x81}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x876}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa71d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59d28b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe5055ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5145fd31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d68}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0d5}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x644b285c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1732118a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c28a38b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cadbc48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f53}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2507b1fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3beee842}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb5a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ef81596}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x406ac9e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ff76990}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1326a98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x263cc39}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45141d90}]}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x5001}, 0x4004) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xd0, 0x0, 0x400, 0x70bd2c, 0x5f22, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x325c}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001440), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x7c, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r5) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x84, r13, 0xa00, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, [{0x1}, {0x1, 0x1}, {0xb, 0x1}, {0x63, 0x1}, {0x24, 0x1}, {0x44, 0x1}, {0x60}, {}, {0x48, 0x1}, {0x1a}, {0x24}, {0x30, 0x1}, {0xb, 0x1}, {0x42}, {0x3b}, {0x6, 0x1}, {0xb, 0x1}, {0x1b}, {0x3}, {0x18, 0x1}, {0x3}, {0x60}, {0x18}, {0x2}, {0x30}, {0x12, 0x1}, {0x36}, {0x16}, {0x36, 0x1}, {0x1, 0x1}, {0x3}, {0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x84}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff19}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x4}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xb}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x8c}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x7}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}]}, 0x84}}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x38, r14, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x54}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x880) sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x40004) 10.500099884s ago: executing program 0 (id=12173): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x8, 0x3, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000000e00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0x9, 0x6, "24350e", 0xd4b, 0x2f, 0xff, @remote, @empty, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0xe1, 0x1, 0x1, 0x2, 0x0, 0xc}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x4, 0x2, 0x0, 0x0, 0x6, 0xb1}, 0x2, {0x0, 0xfc7d, 0x3, 0x1e, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "b46a31b6a7244f2a2a4ba3a0faaa23aef09849106419231835338bbc516a117229a5d4cd6065793a0660da0066f6c057372e086522b2be42f81e0cee261199f269c1f4f61829285f3559b6133b117c43f893d2053df5048ae59907a1f39f6ddd9179c8"}}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) ioctl$IMGETCOUNT(r0, 0x400261f2, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) 8.609837794s ago: executing program 0 (id=12179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x17, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="03150000040000000a00010000000000000000003b2557ea07a2a65be16a205d67850002f9952808d46e175b2a100c0f6a7118615576b3555e9bb34f0b0d47f45896629d4e422d3149ce9deba73ab79f24d168c33c8bd3f2c000"/105], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40810) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r4) 8.358981288s ago: executing program 0 (id=12185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r3, 0x0, 0x2b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20004045}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) (async) write$6lowpan_enable(r3, 0x0, 0x2b) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) (async) close(r5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20004045}, 0xc000) (async) 7.769061294s ago: executing program 0 (id=12192): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000007, 0x20010, 0xffffffffffffffff, 0xb06cb000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000007, 0x20010, 0xffffffffffffffff, 0xb06cb000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) 3.652945087s ago: executing program 3 (id=12245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) 3.215563175s ago: executing program 1 (id=12249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x21, 0x1ff, 0xffff38ce, 0x5, 0x6, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb6, 0x3, 0xa, [0x9, 0x1]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x70}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) 3.145129639s ago: executing program 3 (id=12250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.966753487s ago: executing program 1 (id=12253): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x28, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)=0x2) 2.842491766s ago: executing program 1 (id=12255): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x148, 0x6, 0x9, 0x3, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x6}, [@generic="37e99fbad1883680ead86949daabbf7a2510e5ed3e8b8939fe642612e6dd9fdc6964230c8fbd3cffd0dc85e205d5e77a3a9bc6594a5b6abba715dddf7b41c8648931e7769995b22fe0f688b27a2a95d342d3", @generic="7c93054cf52f0fc606e96e8bddde6d8eadee61c5772b8f2997c01062613d90f5b523e5727bb89236b37d447ce2f0e40ebf723c837be8d6d00814fdee79db558dfc6ba528d58e4b779f74897f0c9ca44c0e3a21741b6b7e226570e2df2c0423e9957895b74eefab4aabf333f3115430562049e9e45196c8040c036fdb9511dee3ae487caf47a6a27bd55db74d116745792af23abbae020f3555ef0cec1125d894e157b62c9e9700535ac2d16751ef9fa9f138307b6ae8c87c5c879a3cc65e1da2c6f1f7e87495e2f38da5630fb7f399441609c1295b5e9354dbeaaf6730b8d4f6ab"]}, 0x148}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000000) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x380000, @mcast1, 0x100}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x5, 0xfffffffb, 0x6, 0x6, 0x2, 0x9, 0x6, 0xb04a, 0x1, 0x7, 0x9, 0xca2, 0x3, 0x9, 0x9, 0x3, 0xaeb2, 0x6, 0x7f, 0x2, 0x8, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x0, 0x9, 0x8, 0x46, 0x1000, 0xd47, 0xc98, 0x4, 0x4, 0x8, 0x0, 0x2, 0x80000000, 0x80000000, 0x10, 0x0, 0x1, 0x80000000, 0x0, 0x6, 0x9, 0x3, 0x8, 0x4, 0x23a2, 0x80, 0x1, 0x4, 0xffffff80, 0x5, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x372e, 0x9, 0x1, 0x0, 0x2, 0x1, 0x5a, 0x5, 0x80040001, 0x4, 0xb6, 0x7, 0x99fc, 0x8, 0x5, 0x3, 0xffffffff, 0x4, 0x3ff, 0x400, 0x0, 0xea12, 0x4, 0x720, 0x2, 0x118, 0x6, 0x101, 0x3, 0x1, 0x6444, 0x28, 0x10001, 0x1, 0x87, 0x23, 0x1, 0x200, 0x8, 0x2, 0x7, 0x10000, 0x2, 0x8, 0x200, 0x100, 0x9, 0x1, 0x1, 0x9, 0x8, 0x3, 0x100, 0x1, 0x7, 0x8, 0x34, 0x9, 0x7, 0x30529d92, 0xea0, 0xfd, 0x0, 0x400, 0x2, 0x8d1, 0x3, 0x7fffffff, 0xdaba, 0x9, 0x5, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x2, 0x5, 0x5, 0x80000001, 0x3, 0x8, 0xe0eb, 0x461, 0x9, 0x2, 0xffff73b1, 0x23f7, 0x40, 0x7, 0x9, 0x7b3, 0x5, 0x1ff, 0x7, 0x80, 0x8, 0x4, 0x400, 0xdb61, 0x6, 0x4, 0x7, 0xd4, 0xffff6a88, 0xe901, 0x5, 0xe, 0x1, 0x5, 0x9, 0x1372, 0x800, 0x72, 0x8, 0xe, 0x7f5, 0x2b, 0x25, 0x6, 0x6, 0x1006, 0x100, 0x71, 0xe, 0xfffffffd, 0x60, 0xc, 0x5, 0x2b, 0x6, 0x2, 0x3, 0x7, 0x3, 0x9, 0x3, 0x4, 0xfffffc00, 0xfffffeac, 0x6, 0x3ff, 0x101, 0x5, 0x7f, 0x3, 0x1, 0x1, 0x400, 0x7, 0x0, 0xdd6, 0x4, 0x3, 0x35, 0x9, 0x7, 0x3, 0x1b9, 0x2, 0xc572, 0x33, 0x7, 0xb6, 0xf1, 0x188b, 0x4, 0x5, 0x5, 0x3, 0x80, 0x3, 0x2, 0x0, 0x3, 0x6, 0x7fff, 0x7b, 0x5, 0x9, 0x3, 0x942, 0x4, 0x3, 0x8388, 0x7, 0xa8, 0xfff, 0x6, 0x1000, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x2, 0x5, 0xff, 0x73, {0xf, 0x1, 0x436, 0x8, 0xff81, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x3, 0xc11}, 0x5, 0x8, 0x7d80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcb6d, 0xca, 0x351, 0x122e4b0e, 0xfffffff1, 0xb, 0xffffc33a, 0x4, 0x79, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29b01c17, 0x4, 0xfff, 0x4, 0x6895c422, 0x2e7, 0x3, 0x5697, 0x0, 0xffffff13, 0x400, 0x1f, 0x9, 0x7, 0x7d, 0x7, 0x6, 0x1, 0x8, 0x2975, 0xc5, 0xf, 0x1, 0xb09d, 0x1ff, 0x101, 0x7, 0x18fc3c8b, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x3, 0x6, 0x449, 0x2, 0xf, 0x0, 0x3, 0x5, 0x4, 0xff, 0x80, 0x8906, 0xd, 0x8000, 0x7, 0x5, 0xffffffff, 0x9, 0x5, 0x8, 0x9, 0xffffffff, 0x7, 0x7fffffff, 0xcf28, 0x9, 0xd, 0x5, 0x7ffffffe, 0x28, 0x3ff, 0x40, 0xff, 0x8, 0x6, 0x5, 0x28786a93, 0x9, 0xfffffffb, 0x5, 0x7fff, 0x5, 0x4cf, 0x81, 0x2, 0x9, 0x9, 0x6, 0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x4, 0x5, 0xfffffff9, 0x0, 0x400, 0x1dd0, 0x200, 0x2, 0x2, 0x7, 0xff, 0x8, 0x0, 0xffffff80, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0xd, 0x8, 0x6, 0x10001, 0x3, 0x529a, 0x40, 0x8001, 0x8, 0x5, 0xe, 0x5, 0x2, 0x0, 0x1740000, 0xe153, 0x234e, 0x2, 0x401, 0x96, 0x5, 0x2, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x80000001, 0x9, 0x9, 0x8, 0x5, 0x653, 0xe3, 0x0, 0x1753, 0x6a7, 0x9, 0x3, 0xbc, 0x8000, 0x2, 0x7, 0x7, 0x0, 0x3, 0x6be7, 0x2418fe41, 0x0, 0x39, 0xb, 0x0, 0x4, 0x10000, 0x293, 0x10001, 0x3, 0x5, 0x3, 0x5, 0x9, 0x1, 0x400008, 0x6, 0xd, 0x8, 0x4, 0x69a, 0x1, 0x0, 0xfffffff8, 0xb, 0x5b453d30, 0x6, 0x0, 0x3, 0xbfa, 0x7ff, 0x7, 0x80000000, 0x0, 0x9, 0x3, 0x32, 0x0, 0x0, 0x3, 0x0, 0xffffff1b, 0x7, 0x2, 0xff, 0x5, 0xc558, 0x10000, 0x81, 0x2, 0x3, 0x2, 0x6, 0x5, 0x9, 0x2, 0x8597, 0xa, 0x9, 0x9, 0xc834, 0xf15, 0x0, 0x3, 0xffffffff, 0x8001]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x1ff, 0xffff, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x67, 0x0, 0xf8, 0x29, 0x0, @remote, @local, {[@ssrr={0x89, 0x23, 0xab, [@loopback, @multicast1, @local, @remote, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0xa6, 0x1, 0x0, [{@rand_addr=0x64010100, 0x96f}, {@broadcast, 0x3ff}, {@rand_addr=0x64010101, 0xa5}, {@multicast2, 0x4}, {@private=0xa010100, 0x401}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010100, 0xc41}]}, @lsrr={0x83, 0x17, 0x9d, [@private=0xa010100, @remote, @multicast1, @broadcast, @private=0xa010102]}]}}}}}) bind$packet(r3, &(0x7f0000000400)={0x11, 0x16, r6, 0x1, 0x8c, 0x6, @random="49cc68b47e97"}, 0x14) 2.693009604s ago: executing program 3 (id=12256): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000000c0)='{\x00', 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x40850, &(0x7f0000000340)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @loopback, 0x9}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1380000000000000300012800b00010067656e657665000020000280060005004e22000005000800010000000400060005000d0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.298257707s ago: executing program 1 (id=12258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8e0b5399", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800a000fe08000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.252960394s ago: executing program 3 (id=12259): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000180)=0xfb) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4ae544b78e593644, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=@newlink={0x12c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x1, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xa980, 0x30834}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x7ff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4b008}, @IFLA_PORT_SELF={0x84, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "348fe4cd803663c5cbe70ca795fd640a"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/ppp\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "96c077cba53559abc41ab87f9236ce76"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "013f3207e27e53f8f3fb6da6b85fec2a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7b0f636d915ecac9a5ed1a8dc9135792"}, @IFLA_PORT_VF={0x8, 0x1, 0x80}, @IFLA_PORT_PROFILE={0x6}]}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2}]}, 0x12c}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r7) r8 = socket(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="398deac6b464b90e7fdb9bc6412d744f0ca4587cadf1b689c501956379b406d8f7456a7d734164e7c1aa61bed8c7f8b0b2b5f69628fbaaef5538c47d05371bdeaa432b57f6fe6a850389b44a876924c0c1d5a1c9ab5809aac31be8b7104a31c08d9f1eef1e1be1677a4f94781178fcf9f6527e02fada43665302c45d06eb8943fc1b9f75f79c5948bcd95281f2113a49f92f0b1e8c8950eb113f0a0d7151a1e3c61283706ddbe310669ac9ec15fdf9ff8d5c58c4e3405c6daaf75eed86d595a94b96382daad4717e0ce673c604790bb93073e6dc0f8e1d5d94d8c8c9bbb8fa434addc44a4fb366d87338e769d2a9f5ac36c3a1d8b58dab62f4b8e2ca5a6948013d0fa000c647ec46e463b7eb4f82fc29d635253fb58d0f3e7f19a48a3e367c86c4c911e555b0610179dd548b53d127e9a85815b575eeb3e23899073cba7800bf39c5aeb6d41e23a3d9e24b280594d7da61e603f86677c9f41d9bc6f34f16e124ae6435ad4b8ee0cfc57828c63039d09432f561c336921798ba5a82a6759d07720aae673c86cbc7a2cee5e0d0140ce0dc56d28ec5ca7c8d0f1102605bb5080a4499c29c2aaaa690a7141a1abaea78207111d2a01dda92fca4813099d4eb9dfffe04aa54ccf6a13b6a5bb7d7c68f1c9bb2589602b5604cc5048b7da31439e9f5ac1e490cc1ba9a1bab00416598025e4226477728517d064950693cd43a1ea5e12cf110f1809caf7142225878ef38b975c45d6d4534c75b53e7eac27fe3b82db54bc94477919589d58614796e0ef395bce8d000fffc3f5a8fb116086038039c190a4d0adf4d0869b34ffd1947cebdffb85df14691ab4348ba3602bdb23ef13d6610684cadb85d208549cfb9620720c365eec906e1e39f0118a6d05bdba17a3612c7da9d72d5049a7ad8421b185a6d6e4eba2800448f3831ba1cdb9262e60830ea8a1f812985c334029198c64de7c5dac8cc193b8b4783b35054c3fdd22a051c39ae102fc1be39bbf976f416a8aa4de797f55183ac4fa73a078e6c1f14deb2195f97cef80bf951ba9482dddefe95267333eedb2967994b0a852deb0b4ed6e9a4410938cbe8952c6117afea3228ea3818a56f8849d4d5c1f91d1c398146ffc5cd62c15b959bef0939d95fcd5d88835dc3e6e5beb021861fb3e7695edc4229c6eed907c5944a4eafa63202eafd7233e2f8484fceeee294dab3cca707dfe4a2380601f56d914758f2308e9f99baa802c0ed673d468d8c62456d5f05637343a03e9d4a29b8daeb37930003918425e62f73a21fba20f052e8c3b87db3724958d3d36e2d8880d6b718ad5bd494ff26ba687adf0a4c71237a90fc8c28202c5eb99cfea7ff76304fe8d7d6638216ccebc30264d5b06ba372f2f8515054b4d176bc1e48545aa1a3b8bf331b6edcd5734df029ea92f5b6695cbdd676dec9a6853e39b49d30b8cdb17754123fdcb19a4805c5394f0a1553dbd8e8c228290598e0840713883717a919dd16cb76fc6378d31148d51b6080bb575d4bfc3bcf3d65dd7172c16d5270042fcb71db213b5ee8aac47545870914217eede6c755f8f69c3fbf3890d9c4253960bf6f7f444bf6ef007fcf1c5caeca5e63b2c60eb346177961189d612f75393081bd1f22ec1bf3747ed1813736fb851a2ab7d72b9122b21a9ae45eeacb8cac6dc4ff3d5b5276077acdba1815d28bcb1fce1181fa616892d751b164aca5e1f072991fdbd7b182d5f7d98e66da606396c87d123288d8ee0a5372a88d3e39779d8b081547f793", 0x4e5}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r9, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/4117, 0x1015}], 0x1}, 0xfffffff9}], 0x1, 0x0, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r15, 0x301, 0x70bd28, 0x0, {0x34}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x5, 0xd, 0x8001, 0x9, 0x400, 0x6, 0x5, {0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x1, 0x5, 0x7, 0x44d, 0x2}}, &(0x7f0000000840)=0xb0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="75005696", @ANYRES16=r13, @ANYBLOB="08002abd7000fddbdf25030000004400068014000400fe8000000000000000000000000000440800060015000000060001000200000014000400fc0200000000000000000000000000000500020020000000"], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x1, 0x206, [0x0, 0x0, 0x0, 0x0, 0x2000000004c0, 0x2000000004f0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0300000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000fcffffff000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000004000000809e000000000000"]}, 0x27e) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 2.138954665s ago: executing program 1 (id=12260): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001000ff05000000000000000009003c8004c937b184"], 0x1c}], 0x1}, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) (async) socket(0x27, 0x5, 0x7) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async, rerun: 32) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) (async) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) (async, rerun: 64) r1 = socket(0x11, 0x3, 0x1) (rerun: 64) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) (async) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r8, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async, rerun: 32) unshare(0x20400) (async, rerun: 32) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r9, 0x29, 0xc9, 0x12, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}}) (async, rerun: 32) r10 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000440)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f0000000540)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3, 0x0, 0xfffffffffffffe26, 0x44890}], 0x1, 0x40810) write(r11, &(0x7f0000000600)="8fd03ca429c0c7ec3ba323a1a27abec0dc37728fee3bedf01b9e94c2da82a78f7d1bdc62fb423f4f5342228042fed6ecce430bcc9f998fef93d37c83e4f09d3e955859b9d944e4a7be82c66c33f5564e0222e047d616de2c491f52aa23365a18aadef80212cee4e0be9d4035825f665f0ce81cb29c3288c83203e2607c338c46170212913b30a7eafaf805f2b370acdc05edc050b7b89b3275c86f9580e546f1c71d91a58340d412f0362fa0e2608828aa46c9a8a550827226208cd5bea397c2fb7ba41240e440", 0xc7) (async) recvmsg(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 2.08879149s ago: executing program 4 (id=12261): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.859739185s ago: executing program 2 (id=12262): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x4}, 0x38) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.823321384s ago: executing program 4 (id=12263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x401}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x1, 0x3, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r7, @ANYBLOB="460006000000000024dba55e2e2311affb16cedd9300128009000100626f6e64000000001400028005000100"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r7, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, 0x0, 0x8000) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000280)=@can={0x1d, r11}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000300)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240f6f79ec9095e2206e7eaa8a8b03fb89682954d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c57424e1e39005e2c44947013", 0x6d}, {&(0x7f0000000240)="df3b46a13300"/18, 0x12}, {&(0x7f0000001480)="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", 0xe45}], 0x5}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000006c00080026bd7000fcdbdf2500000000", @ANYRES32=r11, @ANYBLOB="000000004889000020001e0009d12829d1bf6b7de1558efe00000088f5890feb9e735faf000000000007000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303800c0001"], 0x2720}, 0x1, 0x0, 0x0, 0xc054}, 0xc010) write(r10, &(0x7f0000000440)="ac598ea750cfed797fa131916834b96b3428", 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000400ae0000009500000000003e010020da1541d78750ba6c1e78c8689fefab3dd9324610ea2933"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) 1.691570705s ago: executing program 2 (id=12264): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) (async) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000680)={0x18, r3, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r7, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$ax25_int(r7, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x4, 0x12) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (rerun: 32) close(r10) (async) ioctl$SIOCSIFHWADDR(r10, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x4, 0x4, 0xc3, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x84}, 0x40000004) (async) recvmsg$unix(r11, 0xfffffffffffffffe, 0x40000000) 1.633127482s ago: executing program 1 (id=12265): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000240)=0x1000000, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r6, 0x0, r4}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) sendto$unix(r1, &(0x7f00000004c0)="ebb567fa9b", 0x5, 0x4c010, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.355865752s ago: executing program 2 (id=12266): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4092, 0xffc}], 0x1}, 0xb}], 0x1, 0x10043, 0x0) 1.214233331s ago: executing program 4 (id=12267): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) bind$xdp(r0, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x12, r0}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000140)="aa9fbf47576300ec03d8ee85b9eab85ee016b106c7e6bcb9e9fc2f32d4bfc72a72391a78cec73e904135149863be510a037610ffad0dd108507a175d86ec857947ebfd8b0b452e7a6b45b47a843ecc30f38ff4ed110b8e818cbf0e282eaf1734f722dc171a61bbe6f803194c990a60f6e97ed57309e4707438ee72dc021d5bfc9bf28c51a5268f3b04235bcd550d62f4dbbb896b9fad22f39161b59b01135b361d47ccc9305e4d7f0e34f6c662569f6f87d8995056689198652463", &(0x7f0000000240)=""/50}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) socket$nl_generic(0x10, 0x3, 0x10) 1.08799079s ago: executing program 3 (id=12268): r0 = socket$inet(0x10, 0x3, 0x7fff) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmsg(r2, &(0x7f0000000900)={&(0x7f0000000680)=@isdn, 0x80, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000180), 0x100000000000003c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000005c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r5, &(0x7f0000000340)='ip6tnl\x00', 0x18f002, &(0x7f0000000380)={@_ha_fsid={[0x542, 0x100]}, {0xb130, 0x20, 0x7, 0x6}}, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0xfffffffb}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74c}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x36f, 0x96, &(0x7f0000000180)=""/150, 0x41000, 0x33, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x6, 0x1, 0x8b8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r6], 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000044000600280012800b000100697036746e6c000018000280140002002f39c352f525aaf7000000000000003c08000a00", @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x0) 995.950114ms ago: executing program 2 (id=12269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='pim6reg0\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x202, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4005) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000200)={0x40, 0x7, 0x7, 0x3, 0x16, 0x3, 0xa2}, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'ipvlan0\x00', {0x4}, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc2433011ad43cd5e}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x130, r8, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x53d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xcbc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc94e}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2a}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004004) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x184, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc0, 0x3, "d59b2403b5acc4500b9c35b094f8bc39855d2e8ac2bf637a1bf26a0727cc8a5b9c0eabf709817f519b2f090459ad79413921c1dd9681dea9a3461325e0b6e4084db14fe186b58d0f97f7c2141bd5b9bb63bb085f408d4750ed6d32bd2ac444c6d484dad7743131e01c8222533158d0023f003ef474374d84dcd526dbec5689e7e61818422e9c529d75ce4b4b4e6026b7c65f3edb4bcbae6829736d3cc5f4004551da8b2fdca9b2b400e3e07acb224240dc878dad603d0903fc632ca9"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "625a9fb503cc30b8c17e5ed5fcd7fa06e65e078640e7be47"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "6252f69a94ffdf0e0701eb48f5a12731e1d39f874ff707752fc3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x597}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x43b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8800}, 0x0) close(r1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001f40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f00)={&(0x7f0000000900)={0x15e0, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff1b06}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x61}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9592f29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa3, 0x3, "a3941587fbfaddadb6098a69dac6acb93c897e22f912df2eee1f4cf883204c8f14d5de7c92dbcc1275790dbd034cea61a307d8cde14b6234c49d96276e7d4ed64d0ed12df8538ce35f8fd64d8675e14a8a691a0abebbdb42bc87f493f40c58b788940e25fbe620762b59acb91e1e18f965cd09525a511e8e8cc9b85e0607f1a3b3f96014a5813e052cd4300161201a9c119ee0fdbaecd3d78b6eff5fcb246e"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "803f883b82f27fe5a7e239bda1a26ec1d9b1ad7d050b62c13d81"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "ece34d70913acf0f52ee4321a5e968e34609edbbad7c51064ad73169deb8a8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x16, 0x3, "a508229aa35fe4e5fdc47f7741082eaabb69"}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @remote, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x55054988, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x22b}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @private2, 0xd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x60, 0x3, "e1d0e77342b5771c27d721fe72f4e721e44ac1d3a8e73020323624b5b8c29894a28793017de9ca4ce82797d8c41ddfd1e1463695121fd4aa0f59927f6e57141eb9306a90b34aabe4f1beb7eff67ec9ed50048ca6624990d5fa78d320"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "01f66cbdc30736118a9d303bb45b9414cb14b187cc9c3d7f96bb14a4ee05b73214"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8020000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x69}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d52}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NODE={0x1090, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "d405fb82df86b757433a79b4325aba3e80748b0719ef9848"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "233385d2d47272d01ebfa84c584902620eed9f17e5797e48"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x15e0}, 0x1, 0x0, 0x0, 0x4000}, 0x4900) listen(r0, 0x11) r10 = socket(0x28, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r10, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x2c, r9, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r12, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x50, r8, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3b2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x24000090) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, r9, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x819}, 0x40000) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000003800)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000037c0)={&(0x7f0000002340)={0x145c, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "e5c0f2250019b6cf214606ceee3a4d541c501e2c462715a34cfaaef4a67962b2afcf5a71a7361887450422935b3d583f2e002d3e2eb050f8c3255391cf21f5dad2eb6b1418d4df1c1a90c1745b7ed9a0d076a9c6e2ab05a4e5d7d609d02075257ace1f44c31374c6003a4891f3c6b62b9f75c0066c1b16128c783c753bfebb78ece0fc9b745b888d1d7853632af104f40443ac83e9bf1a64cfe4953f334a71b01c15e68a591c274cfafcdb139a35c9ecaa3614563b4b52c4b617a91f51e1f8edf150a6964dd7cc339dfd3a2fd013ea814c53db9e8f8b30579646b04f5c351838946527d9928f1765bcd2e6100b74"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0xca, 0x3, "981377ee9cd9a027ed3befa2477c5957e4d42c2ae6ce50c970183d7c4a53e068a9edb134126a47a32eda6ca23bfbbe026bb86383723039202d193bda6c28dab12ac3ebc2f7ad33fcb5e1b0c131beb35e0b0e1b95a572f33584dda9b5c35cfcb0c5256bf70e3d81d5b14a4f6f337803f12473629642d3fada2ca199c39186cea51edfc6a48ba4d3566c60942b5a379901d4fdb063d3065a688e5f53904c9fc8c6d61f5e6b302b63aa188dbee6f2bd8262a5562ebbbf755595b6f608027b7f14ac6fdd93366ef7"}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "c3d739b56404c09c414f5fded3c2e58cb7747b89c2e3e6ce323b4440ff9dd225aba975229ae57d5231a4b5fe261262fe2b1573ba56d94360fc9daf46ee1fc104796ebf32d88b50ab"}]}, @TIPC_NLA_NODE={0x1180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x82, 0x3, "de0c3085de846b00a4a231a376f7c0883adacab6a99d121c1fca87ce3d5a96930d77861522dcd107c9e898f2ea6a00150732985de5491cdf1c66a57ab689a2de1c53380b6275f110a01b427b4f98b0c86256d3ee69f84141e3bdd184a8a310ac0fd729ccacfaeb869dc64db9ceaae8c34613f427df8bb197d407aa9a7867"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "7e0048f3d37d9ef67dd883e19a7fe1497f223cf0ae7b595567c4afc475148a4407f3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "c65e0167937b3f152d71d68fdf2d35650400cd309be2b4"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "730ebf973afaafe7bfbe1acb98325d84f89c54ff8e7f74f1cf293c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf7c}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff56c}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x27c4c000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x41d}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x145c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000038c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000003840), &(0x7f0000003880)='%-010d \x00'}, 0x20) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004ac0)={&(0x7f0000003a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@float={0x4, 0x0, 0x0, 0x10, 0x8}, @restrict={0xf}]}, {0x0, [0x5f, 0x0, 0x61, 0x0, 0x5f]}}, &(0x7f0000003ac0)=""/4096, 0x37, 0x1000, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000004f40)={0xf, 0xe, &(0x7f0000003900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r13}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x2, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x7, 0x6, 0x6, 0xfffffffffffffff8, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000003980)='syzkaller\x00', 0xfff, 0xbb, &(0x7f00000039c0)=""/187, 0x41100, 0x0, '\x00', r7, @cgroup_device=0x6, r14, 0x8, &(0x7f0000004b00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000004b40)={0x5, 0x3, 0x0, 0x61c}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000004e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000004e80)=[{0x5, 0x4, 0xc, 0x9}, {0x1, 0x2, 0xe, 0x2}, {0x4, 0x1, 0xf, 0x6}, {0x1, 0x4, 0x3, 0x7}, {0x3, 0x4, 0x7, 0x8}, {0x5, 0x1, 0x7, 0xb}, {0x3, 0x2, 0xd}, {0x5, 0x4, 0x6}, {0x5, 0x3, 0x8, 0x7}, {0x2, 0x2, 0x6, 0x3}], 0x10, 0x2}, 0x94) 884.247826ms ago: executing program 4 (id=12270): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)="d3da7701c09f121309174e", 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) 628.067948ms ago: executing program 4 (id=12271): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xd, 0xc40, 0x7fffffff, 0x0, 0x10, 0x9, 0x16, 0x6, 0xca11, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r8) sendmsg$NFC_CMD_ENABLE_SE(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0xd2, 0xffff, 0x50c, 0x2, 0x7}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r12, 0x5}, 0x8) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (rerun: 64) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r13, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 64) writev(r13, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (rerun: 64) 626.692541ms ago: executing program 2 (id=12272): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r14 = socket(0x1, 0x803, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="40400201090902154563548f2f15342325ff27b77ff77ed547b4727ddfab3658d8aa2eba05c7fe30f7c979ea22fa4110321fd9eeba9d7e755333970ab2d3a59e65e7156a3c5bc53a39ef9a57fe131107e3389599830ea3f091d91285b6c5edc22f1a"], 0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 234.112412ms ago: executing program 4 (id=12273): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='veth1_vlan\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r1, @in={{0x2, 0x4e20, @local}}, 0xff, 0x6}, 0x90) 73.610212ms ago: executing program 2 (id=12274): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0), 0x0, 0x100, 0x0) connect$inet(r1, 0x0, 0x0) r4 = accept$inet(r1, 0x0, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x22}}}}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000005556d8a4d9d72e7e61e507f8"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x7}, 0xff, 0x0, 0x9, 0x7ff, 0xc, 'syz1\x00', "5bbdaa12a2b3461ac358d7fe2f6e64caf37d5b75538f4e8c4afb21da4b43b201", "823432bc7273b24972ddaf9f9a6426c4a60868bee537a6670ca783cc0dc963fa", [{0x7, 0x8, {0x2, 0xffff8001}}, {0x6, 0x401, {0x2, 0x33}}, {0x7, 0xe, {0x1, 0x3ff}}, {0xc, 0x2, {0x3, 0x9}}, {0x1, 0x2, {0x3, 0x8001}}, {0x4, 0x2cc, {0x3, 0x7}}, {0x7, 0x1, {0x2, 0x3ff}}, {0x7, 0x200, {0x2, 0x1000}}, {0x6, 0xfff5, {0x1, 0x9}}, {0x9, 0xb8, {0x1, 0x9}}, {0x5, 0x9, {0x2, 0xffffa419}}, {0xe, 0xc, {0x2, 0x6b5}}, {0x0, 0x8159, {0x1, 0x7ff}}, {0x101e, 0x9d4e, {0x1}}, {0x2, 0x9, {0x3, 0x5}}, {0x508, 0x6, {0x0, 0xfffffffe}}, {0x2, 0x9, {0x2}}, {0x9, 0x2, {0x3, 0x9}}, {0x75, 0xfffc, {0x0, 0x7}}, {0x8, 0xff10, {0x1, 0x4}}, {0x3ff, 0xd074, {0x1, 0x2}}, {0x4, 0x7, {0x1, 0x6}}, {0x0, 0x8000, {0x2, 0xffff}}, {0x6, 0xcb37, {0x3, 0x5}}, {0x8, 0x4, {0x3, 0x2}}, {0x3, 0x5, {0x0, 0x8}}, {0x4, 0x2, {0x2}}, {0xd2, 0x9}, {0x0, 0x91, {0x0, 0x401}}, {0x401, 0xb2f, {0x2, 0x10000}}, {0x1000, 0x2, {0x2, 0x400}}, {0x3, 0x9, {0x0, 0x8}}, {0x1, 0x7, {0x2, 0x9}}, {0x8, 0x6, {0x2, 0xf}}, {0x37c0, 0x9, {0x0, 0xa}}, {0x4, 0x7}, {0x5, 0xad9, {0x3, 0x7fffffff}}, {0xf0, 0xe5d, {0x1, 0x6}}, {0x2, 0x8001, {0x3}}, {0x0, 0xd, {0x1, 0xfffffffc}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000000c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 0s ago: executing program 3 (id=12275): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=""/189, 0xbd}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000096a6f6ba000040009c58fcfe080000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r5, 0x1}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f00000001c0)="6222a194283ba64e1ca3db990ef75c2243db822de49c023d7d733ed647081493239d0ef570b9606f30857f002d7fb9b13283785811a61d7ed6ac7d703bf29a04bc033e9ef90114d58a6400fdf42f878b17a465927a439f4c807655ad8c547f4961926953c36188a85ce39eb8b345865344497bfb05260da935b784fcb7c41d177908724d3f23c0a0e59508f01d4df57fdd197b67b395e8d08878fd11e2efd8b139de9fbb36b341bde90c44623c24e17ee856a5e43be9b9c4369b141908666685762d64436aa18951f32368ecb1f2af1029dc26ea83864a30559f0b582380b49197a5c79c6973", &(0x7f0000000040)=""/78}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b}, 0x94) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000006c0)=0x1) kernel console output (not intermixed with test programs): GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.383515][ T8579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.397650][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.416651][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.472821][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10219'. [ 1022.553222][T10902] syzkaller0: entered promiscuous mode [ 1022.560493][T10902] syzkaller0: entered allmulticast mode [ 1023.043796][T10938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.053996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.094872][T10938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.261061][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10231'. [ 1023.390372][T10938] syzkaller1: entered promiscuous mode [ 1023.408413][T10938] syzkaller1: entered allmulticast mode [ 1023.463835][T10961] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1023.676772][T10970] nbd4: detected capacity change from 0 to 127 [ 1023.805315][ T51] block nbd4: Receive control failed (result -104) [ 1024.025249][T10989] netlink: 'syz.2.10241': attribute type 11 has an invalid length. [ 1024.218125][T10996] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10244'. [ 1024.387225][T11008] netlink: 'syz.3.10248': attribute type 1 has an invalid length. [ 1024.436322][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10248'. [ 1024.658619][T11020] syzkaller1: entered promiscuous mode [ 1024.686428][T11020] syzkaller1: entered allmulticast mode [ 1025.072829][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10255'. [ 1025.133441][T11037] netlink: 'syz.4.10255': attribute type 1 has an invalid length. [ 1025.290733][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1025.497442][T11069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10262'. [ 1025.563478][T11075] netlink: 'syz.0.10265': attribute type 2 has an invalid length. [ 1025.583167][T11073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1026.408845][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 1026.489618][ T5897] net_ratelimit: 1032 callbacks suppressed [ 1026.489641][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.503690][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.093434][T11141] macsec1: entered promiscuous mode [ 1027.108002][T11147] nbd: nbd4 already in use [ 1027.118253][T11147] block nbd4: NBD_DISCONNECT [ 1027.129037][T11147] block nbd4: Send disconnect failed -32 [ 1027.142179][T11147] block nbd4: shutting down sockets [ 1027.193985][ C1] blk_print_req_error: 159 callbacks suppressed [ 1027.194018][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.209946][ C1] buffer_io_error: 159 callbacks suppressed [ 1027.209971][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1027.255420][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.265064][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1027.274018][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.283655][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1027.293186][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.302742][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1027.322301][T10816] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.343484][T10816] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1027.363537][T10816] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.398593][T10816] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1027.414181][T10816] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.462407][T10816] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1027.477503][T11153] xt_ecn: cannot match TCP bits for non-tcp packets [ 1027.488823][T10816] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.512953][T10816] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1027.521965][T10816] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.542222][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.554596][T10816] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1027.588220][T10816] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1027.601063][T10816] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1027.610834][T10816] ldm_validate_partition_table(): Disk read failed. [ 1027.622198][T10816] Dev nbd4: unable to read RDB block 0 [ 1027.631331][T10816] nbd4: unable to read partition table [ 1027.660433][T10816] ldm_validate_partition_table(): Disk read failed. [ 1027.668375][T10816] Dev nbd4: unable to read RDB block 0 [ 1027.687092][T10816] nbd4: unable to read partition table [ 1027.711170][T11156] __nla_validate_parse: 8 callbacks suppressed [ 1027.711190][T11156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10283'. [ 1027.748647][T11161] wireguard0: entered promiscuous mode [ 1027.754257][T11161] wireguard0: entered allmulticast mode [ 1027.795004][T11161] team0: Device wireguard0 is of different type [ 1027.914754][T11162] wireguard0: entered promiscuous mode [ 1027.921190][T11162] wireguard0: entered allmulticast mode [ 1027.938767][T11162] team0: Device wireguard0 is of different type [ 1027.958083][T11172] sctp: [Deprecated]: syz.4.10287 (pid 11172) Use of int in max_burst socket option. [ 1027.958083][T11172] Use struct sctp_assoc_value instead [ 1028.017604][T11176] 8021q: VLANs not supported on lo [ 1028.068376][T11174] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1028.090841][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.110730][T28272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.120893][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.138652][T11177] tipc: Enabled bearer , priority 0 [ 1028.149670][T11174] syzkaller0: entered promiscuous mode [ 1028.155201][T11174] syzkaller0: entered allmulticast mode [ 1028.287726][T11174] tipc: Resetting bearer [ 1028.321435][T11173] tipc: Resetting bearer [ 1028.353705][T11186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10288'. [ 1028.394271][T11173] tipc: Disabling bearer [ 1028.562572][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10294'. [ 1028.572969][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.596537][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10294'. [ 1028.711805][T11206] syzkaller0: create flow: hash 101046191 index 1 [ 1028.725113][ T8579] syzkaller0: tun_net_xmit 76 [ 1028.735096][ T8579] syzkaller0: tun_net_xmit 48 [ 1028.746426][T28272] syzkaller0: tun_net_xmit 76 [ 1028.823672][T11214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1028.840747][T11196] syzkaller0: delete flow: hash 101046191 index 1 [ 1029.526809][T28272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.616804][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.884363][T11232] nbd: must specify a size in bytes for the device [ 1031.090592][T11260] netlink: 'syz.1.10306': attribute type 1 has an invalid length. [ 1031.151144][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10306'. [ 1031.166299][T11260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1031.187174][T11262] bond2: (slave geneve2): making interface the new active one [ 1031.198177][T11262] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1031.251792][T11269] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10307'. [ 1031.299304][T11272] syzkaller1: entered promiscuous mode [ 1031.320360][T11272] syzkaller1: entered allmulticast mode [ 1031.491851][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10311'. [ 1031.524512][T11283] tipc: Invalid UDP bearer configuration [ 1031.524571][T11283] tipc: Enabling of bearer rejected, failed to enable media [ 1031.574888][T11286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10311'. [ 1031.689432][ T7498] net_ratelimit: 2 callbacks suppressed [ 1031.689453][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.890895][T11298] sit2: entered promiscuous mode [ 1031.904276][T11298] sit2: entered allmulticast mode [ 1031.954951][T11301] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 1032.068415][T11315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10320'. [ 1032.226997][T11322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.235510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.252414][T11322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.262234][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.313671][T11321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.323978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.567353][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.586985][T11345] netlink: 304 bytes leftover after parsing attributes in process `syz.2.10328'. [ 1032.726552][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.739910][T11352] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1032.766738][T11352] syzkaller1: Refused to change device type [ 1032.829232][T11352] syzkaller0: entered promiscuous mode [ 1032.871864][T11352] syzkaller0: entered allmulticast mode [ 1032.943410][T11363] xt_hashlimit: overflow, rate too high: 0 [ 1033.189247][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10335'. [ 1033.578731][T11398] netlink: 'syz.2.10343': attribute type 1 has an invalid length. [ 1033.631045][T11398] tipc: Enabling of bearer rejected, failed to enable media [ 1033.767041][ T7498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.844039][T11407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10346'. [ 1033.881446][T11409] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1033.900893][T11409] bond5: (slave lo): Enslaving as an active interface with an up link [ 1033.982433][T11415] netlink: 'syz.0.10349': attribute type 1 has an invalid length. [ 1034.030312][T11414] syzkaller0: entered promiscuous mode [ 1034.037015][T11414] syzkaller0: entered allmulticast mode [ 1034.116993][T11421] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10350'. [ 1034.211647][T11426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10353'. [ 1034.587439][T11445] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1034.593535][T11445] syzkaller1: linktype set to 823 [ 1034.618842][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10357'. [ 1034.753444][T11454] netlink: 'syz.4.10360': attribute type 1 has an invalid length. [ 1034.763654][T11454] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10360'. [ 1034.883709][T11456] delete_channel: no stack [ 1035.026670][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1035.226900][T11464] macvtap1: entered allmulticast mode [ 1035.238158][T11464] veth0_macvtap: entered allmulticast mode [ 1035.607886][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10368'. [ 1035.929439][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 1036.364493][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10380'. [ 1036.426909][T11516] bridge2: entered promiscuous mode [ 1036.448482][T11516] bridge2: entered allmulticast mode [ 1036.473944][T11516] team0: Port device bridge2 added [ 1036.524075][T11523] bridge0: port 2(team0) entered blocking state [ 1036.548785][T11523] bridge0: port 2(team0) entered disabled state [ 1036.551647][T11521] netlink: 'syz.3.10381': attribute type 39 has an invalid length. [ 1036.578490][T11523] team0: entered allmulticast mode [ 1036.583759][T11523] team_slave_0: entered allmulticast mode [ 1036.594154][T11523] team_slave_1: entered allmulticast mode [ 1036.604273][T11523] team0: entered promiscuous mode [ 1036.617892][T11523] team_slave_0: entered promiscuous mode [ 1036.627211][T11523] team_slave_1: entered promiscuous mode [ 1036.633836][T11523] bridge0: port 2(team0) entered blocking state [ 1036.640293][T11523] bridge0: port 2(team0) entered forwarding state [ 1037.102848][T11544] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10386'. [ 1037.482177][T11561] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 1037.637676][T11566] netlink: 'syz.4.10396': attribute type 10 has an invalid length. [ 1037.671473][T11563] syzkaller0: entered promiscuous mode [ 1037.703678][T28272] net_ratelimit: 11 callbacks suppressed [ 1037.703701][T28272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.730902][T11563] syzkaller0: entered allmulticast mode [ 1038.161194][T11587] netlink: 'syz.3.10402': attribute type 1 has an invalid length. [ 1038.337093][T11593] bond6: (slave gretap1): making interface the new active one [ 1038.346583][T11593] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1038.373054][T11587] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1038.432677][T11595] vlan3: entered promiscuous mode [ 1038.440009][T11595] vlan3: entered allmulticast mode [ 1038.445408][T11595] hsr_slave_1: entered allmulticast mode [ 1038.585008][T11600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.645014][T11600] __nla_validate_parse: 5 callbacks suppressed [ 1038.645037][T11600] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.10406'. [ 1038.726025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.919809][T11615] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1038.929405][T11615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.999805][T11618] tipc: Started in network mode [ 1039.005014][T11618] tipc: Node identity 4e74bc1a2ec1, cluster identity 4711 [ 1039.013738][T11618] tipc: Enabled bearer , priority 0 [ 1039.023520][T11618] syzkaller0: entered promiscuous mode [ 1039.029606][T11618] syzkaller0: entered allmulticast mode [ 1039.030177][T11620] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10414'. [ 1039.045357][T11620] 0: renamed from hsr_slave_1 (while UP) [ 1039.057939][T11620] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1039.100907][T11618] tipc: Resetting bearer [ 1039.110530][T11618] netlink: 'syz.4.10413': attribute type 1 has an invalid length. [ 1039.147753][T11618] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1039.159160][T11618] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10413'. [ 1039.184241][T11617] tipc: Resetting bearer [ 1039.227125][T11617] tipc: Disabling bearer [ 1039.529948][T11638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10417'. [ 1039.571711][T11643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10417'. [ 1039.608121][T11644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10418'. [ 1039.658817][T11645] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10418'. [ 1039.696398][T11645] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10418'. [ 1039.854749][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10418'. [ 1039.901083][T11645] nbd: must specify at least one socket [ 1040.161104][T11670] openvswitch: netlink: IP tunnel dst address not specified [ 1040.221035][T11674] syzkaller0: entered promiscuous mode [ 1040.236235][T11674] syzkaller0: entered allmulticast mode [ 1040.292201][T11671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.299581][T11671] bridge0: port 2(bridge_slave_1) entered listening state [ 1040.307089][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.314282][T11671] bridge0: port 1(bridge_slave_0) entered listening state [ 1040.487034][T23542] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1040.493254][T32000] Bluetooth: hci0: command 0x0c1a tx timeout [ 1041.048590][T32000] Bluetooth: hci5: command 0x0406 tx timeout [ 1041.244498][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10439'. [ 1041.742147][T11758] pim6reg1: entered promiscuous mode [ 1041.758582][T11758] pim6reg1: entered allmulticast mode [ 1041.845814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.950779][T11767] syzkaller0: entered promiscuous mode [ 1041.957059][T11767] syzkaller0: entered allmulticast mode [ 1042.889363][T11826] veth1_to_bond: entered allmulticast mode [ 1042.910612][T11826] netlink: 'syz.4.10463': attribute type 15 has an invalid length. [ 1042.940157][T11824] veth1_to_bond: left allmulticast mode [ 1043.268471][T11849] netlink: 'syz.2.10469': attribute type 2 has an invalid length. [ 1043.281383][T11849] netlink: 'syz.2.10469': attribute type 1 has an invalid length. [ 1043.492780][T11855] nbd: illegal input index -8454144 [ 1043.550045][T11855] bond5: entered promiscuous mode [ 1043.557295][T11855] bond5: entered allmulticast mode [ 1043.562983][T11855] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1044.071884][T11883] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1044.084468][T11884] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1044.101879][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.113190][T28272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.808236][T11907] xt_socket: unknown flags 0xe4 [ 1044.965832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.074748][T11923] __nla_validate_parse: 9 callbacks suppressed [ 1045.074770][T11923] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10481'. [ 1045.343943][T11935] IPVS: length: 231 != 8 [ 1047.219274][T11975] block nbd1: NBD_DISCONNECT [ 1047.227001][T11975] block nbd1: Send disconnect failed -32 [ 1047.438093][T11982] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10493'. [ 1047.573837][T11993] tunl0: entered promiscuous mode [ 1047.609681][T11993] netlink: 'syz.3.10496': attribute type 3 has an invalid length. [ 1047.670558][T11993] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10496'. [ 1047.721084][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10498'. [ 1048.094611][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.103567][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.111898][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.123486][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.131824][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.140159][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.153576][T12026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.309750][T12035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10503'. [ 1048.407710][T12037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10505'. [ 1048.493372][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10505'. [ 1048.518169][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10505'. [ 1048.542099][T12044] syzkaller0: entered promiscuous mode [ 1048.558487][T12044] syzkaller0: entered allmulticast mode [ 1049.287691][T12083] tipc: Enabled bearer , priority 0 [ 1049.477363][T12083] syzkaller0: entered promiscuous mode [ 1049.494754][T12083] syzkaller0: entered allmulticast mode [ 1049.519437][T12083] tipc: Resetting bearer [ 1049.583099][T12095] netlink: 'syz.4.10518': attribute type 2 has an invalid length. [ 1049.594550][T12099] dvmrp0: entered allmulticast mode [ 1049.602764][T12099] netlink: 'syz.3.10520': attribute type 9 has an invalid length. [ 1049.618964][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10518'. [ 1049.631185][T12083] tipc: Resetting bearer [ 1051.463715][T12083] tipc: Disabling bearer [ 1051.632813][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10527'. [ 1052.553249][T12097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1052.569352][T12124] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1052.623160][T12130] netlink: 'syz.3.10526': attribute type 11 has an invalid length. [ 1052.659212][T12130] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1052.954952][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10532'. [ 1053.114468][T12168] net_ratelimit: 45 callbacks suppressed [ 1053.114492][T12168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1053.132787][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10533'. [ 1053.181075][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10535'. [ 1053.266703][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10535'. [ 1053.575095][T12197] ip6t_srh: unknown srh match flags 4000 [ 1053.726793][T12201] netlink: 'syz.3.10546': attribute type 1 has an invalid length. [ 1053.734962][T12201] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.10546'. [ 1053.764596][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10545'. [ 1053.914934][T12209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10549'. [ 1054.125139][T12218] netlink: 'syz.2.10552': attribute type 1 has an invalid length. [ 1054.166936][T12222] : renamed from bond0 (while UP) [ 1054.336439][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1054.489006][T12230] netlink: 'syz.4.10557': attribute type 2 has an invalid length. [ 1055.062526][T12281] netlink: 'syz.4.10574': attribute type 4 has an invalid length. [ 1055.358845][T12300] bridge0: port 4(syz_tun) entered blocking state [ 1055.369135][T12300] bridge0: port 4(syz_tun) entered disabled state [ 1055.377992][T12300] syz_tun: entered allmulticast mode [ 1055.389047][T12300] syz_tun: entered promiscuous mode [ 1055.542969][T12309] pimreg3: entered allmulticast mode [ 1055.569783][T12311] syzkaller1: left promiscuous mode [ 1055.586227][T12311] syzkaller1: left allmulticast mode [ 1055.607618][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1055.615997][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1056.412850][T32000] Bluetooth: hci2: command 0x0406 tx timeout [ 1056.437564][T12359] netlink: 'syz.0.10597': attribute type 3 has an invalid length. [ 1056.473415][T12359] netlink: 'syz.0.10597': attribute type 1 has an invalid length. [ 1056.590680][T12354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.768786][T12354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.835075][T12376] veth5: entered promiscuous mode [ 1056.841606][T12376] veth5: entered allmulticast mode [ 1056.959891][T12354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.008964][T12384] bridge0: entered allmulticast mode [ 1057.098104][T12354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.121160][T12391] __nla_validate_parse: 13 callbacks suppressed [ 1057.121182][T12391] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10608'. [ 1057.198764][T12393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10609'. [ 1057.295346][T12394] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10608'. [ 1057.346894][T12394] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10608'. [ 1057.364913][T12394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10608'. [ 1057.386756][T12398] netlink: 'syz.2.10610': attribute type 1 has an invalid length. [ 1057.410593][T12396] s5: renamed from vlan1 (while UP) [ 1057.518508][ T6580] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.561120][ T8579] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.622746][ T8579] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.646790][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10615'. [ 1057.662508][ T8579] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.690700][T12411] netlink: 'syz.0.10613': attribute type 21 has an invalid length. [ 1057.737049][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10613'. [ 1058.267287][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10626'. [ 1058.277474][T12449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10626'. [ 1058.589995][T12463] IPv6: addrconf: prefix option has invalid lifetime [ 1058.596828][T12463] IPv6: addrconf: prefix option has invalid lifetime [ 1058.669836][T12466] netlink: 124 bytes leftover after parsing attributes in process `syz.2.10630'. [ 1058.874132][T12476] netlink: 'syz.0.10631': attribute type 1 has an invalid length. [ 1058.891910][T12476] netlink: 'syz.0.10631': attribute type 1 has an invalid length. [ 1059.343685][T12492] syzkaller0: entered promiscuous mode [ 1059.351281][T12492] syzkaller0: entered allmulticast mode [ 1059.765644][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1059.773764][ C0] lec:lec_tx_timeout: lec0 [ 1061.563093][T12522] netlink: 'syz.2.10646': attribute type 7 has an invalid length. [ 1061.593518][T12522] netlink: 'syz.2.10646': attribute type 8 has an invalid length. [ 1061.684672][T12530] xt_TCPMSS: Only works on TCP SYN packets [ 1061.741920][ T51] Bluetooth: hci1: link tx timeout [ 1061.750997][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1062.067168][T12551] nbd: illegal input index 2958377 [ 1062.294706][T12564] vcan0: entered promiscuous mode [ 1062.313404][T12560] netlink: 'syz.2.10654': attribute type 11 has an invalid length. [ 1062.324371][T12564] vcan0: entered allmulticast mode [ 1062.331356][T12560] __nla_validate_parse: 10 callbacks suppressed [ 1062.331377][T12560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10654'. [ 1062.378943][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10655'. [ 1062.412598][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10655'. [ 1062.442479][T12571] netlink: 'syz.1.10655': attribute type 14 has an invalid length. [ 1062.468976][T12571] netlink: 'syz.1.10655': attribute type 13 has an invalid length. [ 1062.879926][T12602] veth0_to_bridge: entered promiscuous mode [ 1062.904069][T12601] veth0_to_bridge: left promiscuous mode [ 1062.964816][T12605] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10664'. [ 1063.180093][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10666'. [ 1063.359508][T12626] netlink: 'syz.2.10669': attribute type 64 has an invalid length. [ 1063.369971][T12626] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10669'. [ 1063.432875][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10667'. [ 1063.548508][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10670'. [ 1063.581387][T12620] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1063.689171][T12613] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1063.707876][T12613] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1063.720450][T12613] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 1063.768849][T32000] Bluetooth: hci1: command 0x0405 tx timeout [ 1063.987656][T12645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.148510][T12651] netlink: 'syz.2.10677': attribute type 15 has an invalid length. [ 1064.177708][T12651] netlink: 'syz.2.10677': attribute type 1 has an invalid length. [ 1064.268325][T12663] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10681'. [ 1064.447546][T12672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1064.584096][T12683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1064.682928][T12685] wg1 speed is unknown, defaulting to 1000 [ 1064.889941][T12690] openvswitch: netlink: IP tunnel dst address not specified [ 1065.801630][T12696] veth0: entered promiscuous mode [ 1065.817546][T12700] veth0: left promiscuous mode [ 1065.898054][T12706] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1066.760498][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10707'. [ 1066.797798][T12760] xt_hashlimit: size too large, truncated to 1048576 [ 1067.283231][T12776] netlink: 'syz.0.10712': attribute type 1 has an invalid length. [ 1067.294615][T12776] netlink: 'syz.0.10712': attribute type 2 has an invalid length. [ 1067.542493][T12792] x_tables: unsorted underflow at hook 4 [ 1067.833480][T12804] netlink: 'syz.0.10723': attribute type 1 has an invalid length. [ 1067.891792][T12804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1067.903855][T12806] __nla_validate_parse: 4 callbacks suppressed [ 1067.903878][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10724'. [ 1067.949194][T12810] bond4: entered allmulticast mode [ 1067.973177][T12804] bond4: (slave ip6gretap1): making interface the new active one [ 1067.992711][T12804] ip6gretap1: entered allmulticast mode [ 1068.014802][T12804] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1068.064310][T12810] veth3: entered promiscuous mode [ 1068.079607][T12810] veth3: entered allmulticast mode [ 1068.097915][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.108486][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.299636][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10729'. [ 1068.333525][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10729'. [ 1068.687901][T12854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10737'. [ 1068.792342][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10739'. [ 1068.882560][T12862] netlink: 'syz.4.10740': attribute type 5 has an invalid length. [ 1069.042848][T12880] netlink: 'syz.2.10742': attribute type 10 has an invalid length. [ 1069.094731][T12877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.113981][T12877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.171777][T12880] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1069.268440][T12877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.295098][T12877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.338974][T12892] netlink: 'syz.3.10747': attribute type 1 has an invalid length. [ 1069.445337][T12877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.476346][T12877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.514979][T12894] syzkaller0: entered promiscuous mode [ 1069.521913][T12894] syzkaller0: entered allmulticast mode [ 1069.589917][T12877] bond0: (slave netdevsim0): Releasing backup interface [ 1069.613700][T12877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.629768][T12877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.169927][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1070.178476][T23542] Bluetooth: hci0: command 0x0c1a tx timeout [ 1070.486674][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.525208][T12920] sctp: [Deprecated]: syz.1.10752 (pid 12920) Use of int in maxseg socket option. [ 1070.525208][T12920] Use struct sctp_assoc_value instead [ 1070.744838][ T6576] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.787251][ T6576] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.831366][ T6583] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.866838][T12934] sctp: [Deprecated]: syz.3.10758 (pid 12934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1070.866838][T12934] Use struct sctp_sack_info instead [ 1070.880470][ T6583] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.943826][ T8579] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.964167][ T8579] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.975759][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.983066][ C1] bridge0: topology change detected, propagating [ 1070.989964][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.997240][ C1] bridge0: topology change detected, propagating [ 1071.050501][ T6580] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1071.066843][ T6580] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.146981][T12943] netlink: 'syz.0.10761': attribute type 1 has an invalid length. [ 1071.179197][T12944] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1071.184829][T12940] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10759'. [ 1071.241057][T12943] bond5: entered promiscuous mode [ 1071.267598][T12943] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1071.275197][T12954] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10762'. [ 1071.329228][T12943] bond5: (slave bridge3): making interface the new active one [ 1071.346657][T12943] bridge3: entered promiscuous mode [ 1071.371502][T12943] bridge3: left promiscuous mode [ 1071.395081][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10765'. [ 1071.415352][T12962] netlink: 'syz.4.10765': attribute type 4 has an invalid length. [ 1071.529578][T12954] bridge0: port 3(gretap0) entered blocking state [ 1071.556248][T12954] bridge0: port 3(gretap0) entered disabled state [ 1071.563650][T12954] gretap0: entered allmulticast mode [ 1071.598639][T12954] gretap0: entered promiscuous mode [ 1071.604755][T12954] bridge0: port 3(gretap0) entered blocking state [ 1071.611366][T12954] bridge0: port 3(gretap0) entered forwarding state [ 1071.663738][T12972] netlink: 'syz.3.10767': attribute type 1 has an invalid length. [ 1071.682741][T12972] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.10767'. [ 1071.708856][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10769'. [ 1071.866594][T12985] tipc: Enabling of bearer rejected, failed to enable media [ 1072.108614][T12996] dvmrp0: left allmulticast mode [ 1072.113733][T12996] dvmrp6: left allmulticast mode [ 1072.234427][T13003] syzkaller0: entered promiscuous mode [ 1072.246382][T13003] syzkaller0: entered allmulticast mode [ 1072.256956][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1072.669356][T13026] nbd: illegal input index -8454144 [ 1072.935014][T13049] __nla_validate_parse: 9 callbacks suppressed [ 1072.935036][T13049] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10786'. [ 1072.967722][T13051] netlink: 'syz.0.10786': attribute type 10 has an invalid length. [ 1072.986494][T13049] netlink: 21 bytes leftover after parsing attributes in process `syz.0.10786'. [ 1073.004576][T13049] netlink: 21 bytes leftover after parsing attributes in process `syz.0.10786'. [ 1073.393882][T13079] veth0: entered promiscuous mode [ 1073.479294][T13078] veth0: left promiscuous mode [ 1073.620794][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10796'. [ 1073.631952][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10796'. [ 1073.729420][ T6833] lec:lec_start_xmit: lec0:No lecd attached [ 1073.818592][T13108] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1073.888660][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10800'. [ 1073.903677][T13110] syzkaller0: entered promiscuous mode [ 1073.911022][T13110] syzkaller0: entered allmulticast mode [ 1074.254655][T13127] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1074.301759][T13129] IPVS: set_ctl: invalid protocol: 12 172.30.1.4:20004 [ 1074.484804][T13133] tipc: Enabled bearer , priority 0 [ 1074.592352][T13133] syzkaller0: entered promiscuous mode [ 1074.599240][T13133] syzkaller0: entered allmulticast mode [ 1074.609234][T13133] tipc: Resetting bearer [ 1074.627327][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10809'. [ 1074.694552][T13131] tipc: Resetting bearer [ 1074.907664][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10813'. [ 1074.924390][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10813'. [ 1074.935272][T13158] netlink: 'syz.3.10813': attribute type 30 has an invalid length. [ 1076.653664][T13131] tipc: Disabling bearer [ 1076.675395][T13165] netlink: 'syz.1.10811': attribute type 1 has an invalid length. [ 1076.695163][ T5958] tipc: Node number set to 2120137253 [ 1076.731460][ T6580] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1076.764628][ T6580] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1076.802659][ T6580] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1076.830179][ T6580] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1076.886435][T13179] netlink: 'syz.4.10818': attribute type 19 has an invalid length. [ 1076.980306][T13185] openvswitch: netlink: IP tunnel dst address not specified [ 1077.091452][T13188] netlink: 'syz.2.10821': attribute type 4 has an invalid length. [ 1077.113632][T13188] netlink: 'syz.2.10821': attribute type 4 has an invalid length. [ 1077.706647][T13218] syzkaller0: entered allmulticast mode [ 1077.914055][T13225] syzkaller1: entered promiscuous mode [ 1077.928477][T13225] syzkaller1: entered allmulticast mode [ 1078.071985][T13249] __nla_validate_parse: 3 callbacks suppressed [ 1078.072005][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10837'. [ 1078.106845][T13244] netlink: 'syz.4.10836': attribute type 5 has an invalid length. [ 1078.487532][T13266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.550319][T13261] team0 (unregistering): left allmulticast mode [ 1078.571072][T13261] team_slave_0: left allmulticast mode [ 1078.629643][T13261] team_slave_1: left allmulticast mode [ 1078.651289][T13261] batadv1: left allmulticast mode [ 1078.659546][T13261] team0 (unregistering): left promiscuous mode [ 1078.677086][T13261] team_slave_0: left promiscuous mode [ 1078.685085][T13261] team_slave_1: left promiscuous mode [ 1078.701198][T13261] batadv1: left promiscuous mode [ 1078.716666][T13261] bridge0: port 3(team0) entered disabled state [ 1078.805537][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 1078.813657][ C0] lec:lec_tx_timeout: lec0 [ 1078.890929][T13261] team0 (unregistering): Port device team_slave_0 removed [ 1078.909930][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10842'. [ 1079.038643][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10843'. [ 1079.281992][ T51] block nbd1: Receive control failed (result -1) [ 1079.301365][T13261] team0 (unregistering): Port device team_slave_1 removed [ 1079.504767][T13261] team0 (unregistering): Port device bridge1 removed [ 1079.534032][T13261] team0 (unregistering): Port device batadv1 removed [ 1079.819600][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10845'. [ 1080.090942][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10845'. [ 1080.143841][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10847'. [ 1080.483703][T13311] hsr_slave_0 (unregistering): left promiscuous mode [ 1080.740002][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10850'. [ 1080.766509][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10850'. [ 1080.805016][T13338] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10853'. [ 1080.866717][T13338] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10853'. [ 1080.931587][T13345] netlink: 'syz.0.10854': attribute type 1 has an invalid length. [ 1081.011742][T13345] bond6: entered promiscuous mode [ 1081.018556][T13345] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1081.078884][T13352] bond6: (slave bridge3): making interface the new active one [ 1081.107552][T13352] bridge3: entered promiscuous mode [ 1081.124008][T13352] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1081.469831][T13374] block nbd4: not configured, cannot reconfigure [ 1081.567306][T13383] xt_socket: unknown flags 0x50 [ 1081.682364][T13391] x_tables: duplicate underflow at hook 2 [ 1081.948088][T13409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1081.984315][T13411] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 1082.149166][T13419] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20003 [ 1082.173819][T13420] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20003 [ 1082.514336][T13444] xt_CONNSECMARK: invalid mode: 0 [ 1083.550455][T13463] __nla_validate_parse: 8 callbacks suppressed [ 1083.550488][T13463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10891'. [ 1083.632547][T13497] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10902'. [ 1083.749872][T13506] netlink: 'syz.4.10904': attribute type 1 has an invalid length. [ 1083.799527][T13506] netlink: 'syz.4.10904': attribute type 3 has an invalid length. [ 1083.832715][T13506] netlink: 172 bytes leftover after parsing attributes in process `syz.4.10904'. [ 1083.863758][T13509] netlink: 'syz.4.10904': attribute type 20 has an invalid length. [ 1083.916195][T13506] NCSI netlink: No device for ifindex 813332851 [ 1083.927705][T13509] IPv6: NLM_F_CREATE should be specified when creating new route [ 1084.024556][T13517] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.10908'. [ 1084.074308][T13517] netlink: Unknown conntrack attr (type=2304, max=9) [ 1084.189860][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10910'. [ 1084.555249][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10912'. [ 1085.076563][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10918'. [ 1085.350729][T13562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10920'. [ 1085.367767][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10920'. [ 1085.542972][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10926'. [ 1085.562811][T13582] bridge: RTM_NEWNEIGH with invalid ether address [ 1085.578154][T13582] bridge: RTM_NEWNEIGH with invalid ether address [ 1085.674942][T13586] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1085.687077][T23542] Bluetooth: hci1: command 0x0405 tx timeout [ 1085.709580][T13588] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1086.282529][T13576] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1086.291626][T13576] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1086.518463][T13621] ip6tnl3: entered allmulticast mode [ 1086.896437][T13630] tipc: Invalid UDP bearer configuration [ 1086.896494][T13630] tipc: Enabling of bearer rejected, failed to enable media [ 1087.199174][T13658] geneve2: entered promiscuous mode [ 1087.204445][T13658] geneve2: entered allmulticast mode [ 1087.217302][ T6591] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1087.227889][ T6591] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1087.246772][ T6591] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1087.277166][ T6576] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1087.827147][T13699] netlink: 'syz.4.10961': attribute type 1 has an invalid length. [ 1088.563659][T13741] netlink: 'syz.0.10973': attribute type 1 has an invalid length. [ 1088.576932][T13741] __nla_validate_parse: 14 callbacks suppressed [ 1088.576954][T13741] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10973'. [ 1088.594371][T13741] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10973'. [ 1088.604749][T13741] netlink: 658 bytes leftover after parsing attributes in process `syz.0.10973'. [ 1088.779734][T13762] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1088.940109][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10980'. [ 1089.071321][T13781] tc_dump_action: action bad kind [ 1089.177391][T13785] netlink: 'syz.3.10987': attribute type 4 has an invalid length. [ 1089.342990][T13799] netlink: 'syz.3.10991': attribute type 11 has an invalid length. [ 1089.428608][T13804] netlink: 312 bytes leftover after parsing attributes in process `syz.4.10993'. [ 1089.453476][T13810] netlink: 312 bytes leftover after parsing attributes in process `syz.4.10993'. [ 1089.784100][T13828] netlink: 'syz.4.10999': attribute type 11 has an invalid length. [ 1090.067888][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11004'. [ 1090.080202][T13854] netlink: 'syz.2.11005': attribute type 10 has an invalid length. [ 1090.091454][T13854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11005'. [ 1090.211927][T13859] dvmrp0: entered allmulticast mode [ 1092.680570][T13829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1092.692511][T13837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1092.894028][T13877] macvtap0: entered promiscuous mode [ 1092.973610][T13877] macvtap0: left promiscuous mode [ 1093.538944][T13910] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11020'. [ 1093.914108][T13923] tipc: Enabled bearer , priority 0 [ 1093.937762][T13923] syzkaller0: entered promiscuous mode [ 1093.956763][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11026'. [ 1093.979620][T13923] syzkaller0: entered allmulticast mode [ 1094.051756][T13923] tipc: Resetting bearer [ 1094.250085][T13945] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20004 [ 1094.303630][T13923] bridge0: port 2(team0) entered disabled state [ 1094.310372][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.404412][ T30] audit: type=1800 audit(1773407617.587:17): pid=13949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11030" name="memory.events" dev="tmpfs" ino=1823 res=0 errno=0 [ 1094.711011][T13923] veth0_macvtap: left allmulticast mode [ 1094.732755][T13923] tipc: Resetting bearer [ 1094.742501][T13953] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.11033'. [ 1094.765224][ T6576] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.776877][ T6576] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.789213][ T6576] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1094.807017][ T6576] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.827119][ T6576] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.848038][ T6576] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1094.902763][T13921] tipc: Disabling bearer [ 1094.951299][ T6576] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.012908][ T6576] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.032064][ T6576] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1095.059720][ T6576] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.089651][ T6576] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.120394][ T6576] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1095.182312][T13978] netlink: 'syz.4.11041': attribute type 3 has an invalid length. [ 1095.221102][T13978] netlink: 'syz.4.11041': attribute type 1 has an invalid length. [ 1095.240662][T13978] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11041'. [ 1095.256508][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11043'. [ 1095.269167][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11043'. [ 1095.279164][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11045'. [ 1095.289326][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1095.311456][T13986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11042'. [ 1095.394952][T13986] openvswitch: netlink: IP tunnel dst address not specified [ 1095.477082][T13998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.532851][T14000] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11048'. [ 1095.547567][T13994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11048'. [ 1095.558808][T13994] netlink: 'syz.4.11048': attribute type 12 has an invalid length. [ 1095.567452][T13994] netlink: 'syz.4.11048': attribute type 29 has an invalid length. [ 1095.577771][T13994] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11048'. [ 1095.590485][T14001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.601290][T13994] netlink: 'syz.4.11048': attribute type 2 has an invalid length. [ 1095.610757][T13994] netlink: 'syz.4.11048': attribute type 3 has an invalid length. [ 1095.681641][T14004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.784921][T14009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.831674][T14013] netlink: 'syz.3.11054': attribute type 21 has an invalid length. [ 1095.851242][T14013] netlink: 'syz.3.11054': attribute type 21 has an invalid length. [ 1096.190932][T14036] netlink: 'syz.2.11061': attribute type 21 has an invalid length. [ 1096.527344][T14055] syzkaller0: entered promiscuous mode [ 1096.532993][T14055] syzkaller0: entered allmulticast mode [ 1096.932108][T14070] delete_channel: no stack [ 1097.158171][T14081] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1097.473645][T14107] delete_channel: no stack [ 1097.647904][T14126] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1097.648730][T14127] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1097.866767][T14132] netlink: 'syz.0.11094': attribute type 18 has an invalid length. [ 1098.209530][ T8579] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1098.233573][ T8579] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1098.243455][ T8579] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1098.261993][ T8579] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1098.623240][T14177] bridge0: port 3(gretap0) entered disabled state [ 1098.777497][T14191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1098.790095][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.848635][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.952568][T14181] bridge0: port 3(gretap0) entered blocking state [ 1098.959262][T14181] bridge0: port 3(gretap0) entered forwarding state [ 1098.971795][T14181] erspan0: left promiscuous mode [ 1099.021373][T14181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1099.202985][T14206] __nla_validate_parse: 14 callbacks suppressed [ 1099.203009][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11108'. [ 1099.671132][T14221] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1099.698196][T14221] bond8 (unregistering): Released all slaves [ 1099.719181][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11113'. [ 1099.783881][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11113'. [ 1099.900773][T14227] syzkaller0: entered promiscuous mode [ 1099.907965][T14227] syzkaller0: entered allmulticast mode [ 1100.111369][T14235] 9: entered promiscuous mode [ 1100.271750][T14242] validate_nla: 5 callbacks suppressed [ 1100.271769][T14242] netlink: 'syz.4.11119': attribute type 3 has an invalid length. [ 1100.313465][T14242] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11119'. [ 1102.591949][T14282] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11128'. [ 1102.621488][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11129'. [ 1102.655113][T14283] netlink: 13 bytes leftover after parsing attributes in process `syz.3.11129'. [ 1102.732656][T14283] veth1: entered promiscuous mode [ 1102.953125][T14303] tipc: Enabled bearer , priority 0 [ 1103.032070][T14303] syzkaller0: entered promiscuous mode [ 1103.039605][T14303] syzkaller0: entered allmulticast mode [ 1103.048543][T14303] tipc: Resetting bearer [ 1103.086390][T14300] tipc: Resetting bearer [ 1103.149616][T14316] netlink: 'syz.4.11138': attribute type 39 has an invalid length. [ 1103.208104][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11141'. [ 1105.311542][T14300] tipc: Disabling bearer [ 1105.476717][T14354] Bluetooth: MGMT ver 1.23 [ 1105.548265][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11152'. [ 1105.592430][T14358] netlink: 'syz.3.11153': attribute type 1 has an invalid length. [ 1105.808037][T14374] netlink: 'syz.3.11159': attribute type 9 has an invalid length. [ 1105.850137][T14374] netlink: 'syz.3.11159': attribute type 11 has an invalid length. [ 1105.877509][T14374] netlink: 'syz.3.11159': attribute type 12 has an invalid length. [ 1105.888527][T14374] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.11159'. [ 1106.020032][T14383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11161'. [ 1106.200291][T14396] netlink: 'syz.1.11165': attribute type 1 has an invalid length. [ 1106.210137][T14396] netlink: 'syz.1.11165': attribute type 2 has an invalid length. [ 1106.220981][T14396] netlink: 'syz.1.11165': attribute type 1 has an invalid length. [ 1106.252219][T14396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11165'. [ 1106.257216][T14394] syzkaller0: entered promiscuous mode [ 1106.286859][T14394] syzkaller0: entered allmulticast mode [ 1106.303420][T14403] netlink: 'syz.2.11169': attribute type 1 has an invalid length. [ 1106.360927][T14403] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1106.388055][T14400] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11165'. [ 1106.420185][T14400] openvswitch: netlink: Flow key attr not present in new flow. [ 1106.467423][T14407] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1106.830907][T14403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.840138][T14403] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1106.988593][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11176'. [ 1107.069891][T14442] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11176'. [ 1107.168905][T14451] SET target dimension over the limit! [ 1107.191237][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11179'. [ 1107.216361][T14444] netlink: 'syz.2.11179': attribute type 6 has an invalid length. [ 1107.237242][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11179'. [ 1107.300736][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11179'. [ 1107.331431][T14444] netlink: 'syz.2.11179': attribute type 6 has an invalid length. [ 1107.370739][T14460] openvswitch: netlink: Flow key attr not present in new flow. [ 1107.704656][T14473] 8021q: VLANs not supported on ipvlan1 [ 1107.914625][T14479] syzkaller0: entered promiscuous mode [ 1107.935173][T14479] syzkaller0: entered allmulticast mode [ 1107.964228][T14487] xt_hashlimit: max too large, truncated to 1048576 [ 1108.410857][T14507] xt_hashlimit: size too large, truncated to 1048576 [ 1109.501167][T14568] gretap2: entered promiscuous mode [ 1109.508176][T14568] gretap2: entered allmulticast mode [ 1109.639149][T14571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1109.706389][T14576] x_tables: duplicate underflow at hook 1 [ 1110.147200][T14589] vxcan2: entered allmulticast mode [ 1110.280918][T14597] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1110.606698][T14610] sctp: [Deprecated]: syz.0.11227 (pid 14610) Use of int in max_burst socket option. [ 1110.606698][T14610] Use struct sctp_assoc_value instead [ 1110.662817][T14610] IPVS: set_ctl: invalid protocol: 7 100.1.1.0:20001 [ 1110.874720][T14624] __nla_validate_parse: 18 callbacks suppressed [ 1110.874743][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11231'. [ 1111.057087][T14632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1111.157962][T14633] xt_cgroup: path and classid specified [ 1111.347642][T14646] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1111.361109][T14646] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1111.370922][T14646] gretap1: entered promiscuous mode [ 1111.376891][T14646] gretap1: entered allmulticast mode [ 1111.476955][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11240'. [ 1111.665039][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11240'. [ 1111.856257][ T8579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.882833][ T8579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.918087][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.607636][T14696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11251'. [ 1112.786599][T14681] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1112.803243][T14707] tipc: Failed to obtain node identity [ 1112.858134][T14707] tipc: Enabling of bearer rejected, failed to enable media [ 1112.896561][T14711] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1113.742917][T14758] veth0: entered promiscuous mode [ 1113.754449][T14758] veth0: left promiscuous mode [ 1113.800722][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11270'. [ 1113.810331][T14760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11270'. [ 1113.831376][T14761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11270'. [ 1113.845391][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11270'. [ 1114.041218][T14773] tipc: New replicast peer: 255.255.255.255 [ 1114.079058][T14773] tipc: Enabled bearer , priority 10 [ 1114.088919][T14775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11274'. [ 1114.111863][T14775] validate_nla: 4 callbacks suppressed [ 1114.111885][T14775] netlink: 'syz.3.11274': attribute type 7 has an invalid length. [ 1114.126110][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11275'. [ 1114.140184][T14777] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1114.679600][T14809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1115.002810][T14820] netlink: 'syz.2.11292': attribute type 83 has an invalid length. [ 1115.127817][T14830] ip6gre2: entered promiscuous mode [ 1115.790802][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1116.148759][T14888] netlink: 'syz.2.11306': attribute type 11 has an invalid length. [ 1116.157194][T14888] __nla_validate_parse: 31 callbacks suppressed [ 1116.157214][T14888] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11306'. [ 1116.268137][T14896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11309'. [ 1116.522870][ T6580] dvmrp0 (unregistering): left allmulticast mode [ 1116.673731][ T6580] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 1116.687713][ T6580] bridge3 (unregistering): left promiscuous mode [ 1116.761194][ T6580] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 1116.770295][ T6580] bridge5 (unregistering): left promiscuous mode [ 1116.913753][ T6580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.924500][ T6580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.937316][ T6580] bond0 (unregistering): Released all slaves [ 1116.949909][ T6580] bond1 (unregistering): Released all slaves [ 1116.974539][ T6580] bond2 (unregistering): (slave batadv1): Releasing active interface [ 1116.984525][ T6580] batadv1: left promiscuous mode [ 1116.991331][ T6580] batadv1: left allmulticast mode [ 1116.999131][ T6580] bond2 (unregistering): Released all slaves [ 1117.022469][ T6580] bond3 (unregistering): Released all slaves [ 1117.037550][ T6580] bond4 (unregistering): Released all slaves [ 1117.059444][ T6580] bond5 (unregistering): (slave veth7): Releasing active interface [ 1117.070585][ T6580] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1117.085048][ T6580] bond5 (unregistering): Released all slaves [ 1117.102909][ T6580] bond6 (unregistering): Released all slaves [ 1117.119167][ T6580] bond7 (unregistering): Released all slaves [ 1117.139618][ T6580] bond8 (unregistering): Released all slaves [ 1117.154579][ T6580] bond9 (unregistering): Released all slaves [ 1117.175013][ T6580] bond10 (unregistering): Released all slaves [ 1117.471388][ T6580] tipc: Left network mode [ 1117.746450][ T6580] IPVS: stopping backup sync thread 741 ... [ 1118.172402][T14955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11322'. [ 1118.248040][T14955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11322'. [ 1118.540476][T14975] IPv6: NLM_F_CREATE should be specified when creating new route [ 1118.987752][T14999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1119.132293][T14999] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1119.626393][ T6580] hsr_slave_0: left promiscuous mode [ 1119.667299][ T6580] hsr_slave_1: left promiscuous mode [ 1119.690170][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.724761][ T6580] veth1_macvtap: left promiscuous mode [ 1119.744291][ T6580] veth0_macvtap: left promiscuous mode [ 1119.785609][ T6580] veth1_vlan: left promiscuous mode [ 1119.793083][T15039] sock: sock_timestamping_bind_phc: sock not bind to device [ 1119.807573][ T6580] veth0_vlan: left promiscuous mode [ 1119.894766][T15045] netlink: zone id is out of range [ 1119.904594][T15045] netlink: del zone limit has 4 unknown bytes [ 1119.913558][T15047] netlink: 'syz.4.11341': attribute type 2 has an invalid length. [ 1120.000475][ T6580] team0 (unregistering): Port device batadv2 removed [ 1120.354986][ T6580] team0 (unregistering): Port device team_slave_1 removed [ 1120.379924][ T6580] team0 (unregistering): Port device team_slave_0 removed [ 1120.714492][T15064] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11347'. [ 1120.732403][T15066] netlink: 'syz.3.11346': attribute type 12 has an invalid length. [ 1120.742086][T15066] netlink: 'syz.3.11346': attribute type 29 has an invalid length. [ 1120.757656][T15066] netlink: 'syz.3.11346': attribute type 2 has an invalid length. [ 1120.776205][T15066] netlink: 136 bytes leftover after parsing attributes in process `syz.3.11346'. [ 1120.805709][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1120.813828][ C0] lec:lec_tx_timeout: lec0 [ 1120.827521][T15072] syzkaller0: entered promiscuous mode [ 1120.842541][T15072] syzkaller0: entered allmulticast mode [ 1120.857536][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11346'. [ 1121.490828][T15100] syzkaller0: entered promiscuous mode [ 1121.517230][T15100] syzkaller0: entered allmulticast mode [ 1121.718365][T15119] netlink: 'syz.0.11362': attribute type 1 has an invalid length. [ 1123.324717][T15119] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1123.452776][T15132] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11363'. [ 1123.500954][T15134] netem: change failed [ 1123.789165][T15150] sctp: [Deprecated]: syz.3.11372 (pid 15150) Use of int in max_burst socket option. [ 1123.789165][T15150] Use struct sctp_assoc_value instead [ 1124.076431][T15171] netlink: 'syz.2.11376': attribute type 1 has an invalid length. [ 1124.141565][T15171] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1124.217297][T15171] bond8: (slave geneve2): making interface the new active one [ 1124.229864][T15171] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 1124.900720][T15202] netlink: 'syz.2.11382': attribute type 11 has an invalid length. [ 1124.910241][T15202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11382'. [ 1125.443607][T15215] : entered promiscuous mode [ 1125.592504][T15226] openvswitch: netlink: IP tunnel dst address not specified [ 1125.632543][T15226] gretap0: left allmulticast mode [ 1125.638502][T15226] gretap0: left promiscuous mode [ 1125.643728][T15226] bridge0: port 3(gretap0) entered disabled state [ 1125.688031][T15228] xt_hashlimit: size too large, truncated to 1048576 [ 1125.696781][T15226] bond0: (slave bridge0): Releasing backup interface [ 1125.749858][T15226] bridge_slave_0: left allmulticast mode [ 1125.764514][T15226] bridge_slave_0: left promiscuous mode [ 1125.797222][T15226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.821552][T15226] bridge_slave_1: left allmulticast mode [ 1125.829900][T15226] bridge_slave_1: left promiscuous mode [ 1125.862845][T15226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.899626][T15234] delete_channel: no stack [ 1125.904808][T15226] bond0: (slave bond_slave_0): Releasing backup interface [ 1125.918135][T15234] openvswitch: netlink: Flow key attr not present in new flow. [ 1125.951303][T15226] bond0: (slave bond_slave_1): Releasing backup interface [ 1125.993751][T15226] team0: Port device team_slave_0 removed [ 1126.103354][T15226] team0: Port device team_slave_1 removed [ 1126.113366][T15226] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1127.263079][ T6583] gretap0: left allmulticast mode [ 1127.268893][ T6583] gretap0: left promiscuous mode [ 1127.288050][ T6583] bridge0: port 3(gretap0) entered disabled state [ 1127.318242][ T6583] bridge_slave_1: left allmulticast mode [ 1127.324054][ T6583] bridge_slave_1: left promiscuous mode [ 1127.333019][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.353009][ T6583] bridge_slave_0: left allmulticast mode [ 1127.364310][ T6583] bridge_slave_0: left promiscuous mode [ 1127.398181][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.457858][T15284] netlink: 'syz.4.11408': attribute type 39 has an invalid length. [ 1127.759629][ T6583] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 1127.768758][ T6583] ip6gretap2 (unregistering): left allmulticast mode [ 1127.911613][ T6583] bond6 (unregistering): (slave gretap2): Releasing backup interface [ 1127.974942][ T6583] bond14 (unregistering): (slave geneve3): Releasing active interface [ 1128.001767][ T6583] bond10 (unregistering): (slave geneve2): Releasing active interface [ 1128.510483][ T6583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.524244][ T6583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.537249][ T6583] bond0 (unregistering): Released all slaves [ 1128.549490][ T6583] bond1 (unregistering): Released all slaves [ 1128.565159][ T6583] bond2 (unregistering): Released all slaves [ 1128.584550][ T6583] bond3 (unregistering): Released all slaves [ 1128.601389][ T6583] bond4 (unregistering): Released all slaves [ 1128.617226][ T6583] bond5 (unregistering): Released all slaves [ 1128.637443][ T6583] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1128.655342][ T6583] bond6 (unregistering): Released all slaves [ 1128.671750][ T6583] bond7 (unregistering): Released all slaves [ 1128.688992][ T6583] bond8 (unregistering): (slave veth11): Releasing active interface [ 1128.699352][ T6583] bond8 (unregistering): Released all slaves [ 1128.724171][ T6583] bond9 (unregistering): Released all slaves [ 1128.741144][ T6583] bond10 (unregistering): Released all slaves [ 1128.760070][ T6583] bond11 (unregistering): (slave vcan0): Releasing backup interface [ 1128.770735][ T6583] bond11 (unregistering): Released all slaves [ 1128.792672][ T6583] bond12 (unregistering): Released all slaves [ 1128.816674][ T6583] bond13 (unregistering): Released all slaves [ 1128.831800][ T6583] bond14 (unregistering): Released all slaves [ 1129.067473][T15316] netlink: 'syz.2.11415': attribute type 14 has an invalid length. [ 1129.239155][ T6583] tipc: Disabling bearer [ 1129.246125][ T6583] tipc: Left network mode [ 1129.441638][ T6583] IPVS: stopping master sync thread 4062 ... [ 1129.449878][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11420'. [ 1129.617647][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11425'. [ 1129.650880][ T6345] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1129.821010][T15360] syzkaller0: entered promiscuous mode [ 1129.836341][T15360] syzkaller0: entered allmulticast mode [ 1129.860511][T15365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1130.243206][T15340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1130.693422][ T6583] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1130.713331][ T6583] batman_adv: batadv0: Removing interface: ipvlan2 [ 1130.758715][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11434'. [ 1130.803812][ T6583] veth1_macvtap: left promiscuous mode [ 1130.827861][ T6583] veth1_vlan: left promiscuous mode [ 1130.833305][ T6583] veth0_vlan: left promiscuous mode [ 1131.021189][ T6583] team0 (unregistering): Port device batadv0 removed [ 1131.041872][ T6583] pim6reg (unregistering): left allmulticast mode [ 1131.275533][ T6583] team0 (unregistering): Port device team_slave_1 removed [ 1131.297631][ T6583] team0 (unregistering): Port device team_slave_0 removed [ 1131.681113][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11441'. [ 1132.157633][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11446'. [ 1132.169672][T15436] netlink: 'syz.2.11445': attribute type 32 has an invalid length. [ 1132.220892][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11445'. [ 1132.333881][T15436] bond9: Setting coupled_control to off (0) [ 1132.478016][ T6583] IPVS: stop unused estimator thread 0... [ 1132.602744][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11450'. [ 1132.647346][T15455] netlink: 'syz.1.11449': attribute type 3 has an invalid length. [ 1132.658381][T15457] netlink: 'syz.0.11451': attribute type 2 has an invalid length. [ 1132.686208][T15457] netlink: 119 bytes leftover after parsing attributes in process `syz.0.11451'. [ 1132.744591][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11449'. [ 1132.804606][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11449'. [ 1132.911752][T15450] erspan0: left promiscuous mode [ 1133.150492][T15450] bridge0: left allmulticast mode [ 1133.370940][T15450] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1133.611034][T15480] netlink: 'syz.3.11454': attribute type 5 has an invalid length. [ 1133.858108][T15497] netlink: 'syz.1.11461': attribute type 21 has an invalid length. [ 1134.308760][T15510] netlink: 'syz.2.11462': attribute type 13 has an invalid length. [ 1134.943365][T15527] netlink: 'syz.1.11465': attribute type 29 has an invalid length. [ 1134.962447][T15527] __nla_validate_parse: 3 callbacks suppressed [ 1134.962463][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11465'. [ 1134.982162][T15528] netlink: 'syz.1.11465': attribute type 29 has an invalid length. [ 1135.086988][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11465'. [ 1135.115123][T15527] netlink: 165256 bytes leftover after parsing attributes in process `syz.1.11465'. [ 1135.279547][T15546] netlink: 'syz.1.11471': attribute type 2 has an invalid length. [ 1135.305079][T15546] 9: entered promiscuous mode [ 1135.453005][T15553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11473'. [ 1135.528346][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11473'. [ 1135.559478][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11475'. [ 1135.613244][T15565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11476'. [ 1135.623130][T15565] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11476'. [ 1135.640357][T15565] netlink: 'syz.1.11476': attribute type 5 has an invalid length. [ 1135.653957][T15565] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11476'. [ 1135.665052][T15564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11476'. [ 1135.736284][T15564] netlink: 'syz.1.11476': attribute type 5 has an invalid length. [ 1136.069945][T15585] Unknown metaid 0 dlen 4 [ 1136.393062][T15599] 8021q: VLANs not supported on gre0 [ 1136.648288][T15619] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1136.951420][T15639] netlink: 'syz.4.11497': attribute type 11 has an invalid length. [ 1136.963762][T15629] bond7 (unregistering): Released all slaves [ 1136.973762][ T6833] lec:lec_start_xmit: lec0:No lecd attached [ 1137.045060][T15636] bond8: entered promiscuous mode [ 1137.053989][T15636] bond8: entered allmulticast mode [ 1137.062535][T15636] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1137.083433][T15642] macvlan3: entered promiscuous mode [ 1137.089827][T15642] macvlan3: entered allmulticast mode [ 1137.098943][T15642] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1137.138638][T15641] veth0: Caught tx_queue_len zero misconfig [ 1137.396331][T15661] Cannot find set identified by id 65534 to match [ 1137.684673][T15677] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1137.711998][T15683] x_tables: duplicate underflow at hook 1 [ 1137.730536][T15677] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1137.791909][T15686] bond10: entered promiscuous mode [ 1137.811370][T15686] bond10: entered allmulticast mode [ 1137.988604][T15696] : entered promiscuous mode [ 1138.418983][T15731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1138.601104][T15743] "syz.2.11526" (15743) uses obsolete ecb(arc4) skcipher [ 1138.799630][T15731] hsr_slave_0 (unregistering): left promiscuous mode [ 1139.041859][T15758] syzkaller1: entered promiscuous mode [ 1139.051565][T15758] syzkaller1: entered allmulticast mode [ 1139.163714][T15763] net veth1_virt_wifi : renamed from virt_wifi0 [ 1139.204723][T15767] lo: Caught tx_queue_len zero misconfig [ 1139.252648][T15770] validate_nla: 3 callbacks suppressed [ 1139.252670][T15770] netlink: 'syz.1.11537': attribute type 1 has an invalid length. [ 1139.269608][T15770] netlink: 'syz.1.11537': attribute type 2 has an invalid length. [ 1139.303264][T15770] netlink: 'syz.1.11537': attribute type 2 has an invalid length. [ 1139.316739][T15771] syzkaller0: entered promiscuous mode [ 1139.326267][T15771] syzkaller0: entered allmulticast mode [ 1139.344305][T15774] netlink: 'syz.1.11537': attribute type 2 has an invalid length. [ 1139.345997][T15770] netlink: 'syz.1.11537': attribute type 2 has an invalid length. [ 1139.458019][T15783] xt_hashlimit: size too large, truncated to 1048576 [ 1139.630494][T15795] netlink: 'syz.4.11544': attribute type 3 has an invalid length. [ 1139.675624][T15795] netlink: 'syz.4.11544': attribute type 2 has an invalid length. [ 1140.131828][T15836] Unknown options in mask b7f2 [ 1140.193796][T15838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1140.279533][T15842] xt_hashlimit: size too large, truncated to 1048576 [ 1140.893633][T15876] __nla_validate_parse: 31 callbacks suppressed [ 1140.893655][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11561'. [ 1141.201686][T15884] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11565'. [ 1141.371936][ T51] block nbd4: Receive control failed (result -32) [ 1141.591239][T15913] netlink: 'syz.3.11570': attribute type 1 has an invalid length. [ 1141.628373][T15909] mac80211_hwsim hwsim99 wlan0: entered promiscuous mode [ 1141.667475][T15913] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1141.761368][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11572'. [ 1141.804691][T15925] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1141.890265][T15918] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1142.287623][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11580'. [ 1142.380876][T15969] dvmrp0: entered allmulticast mode [ 1142.651021][T15981] netlink: 'syz.1.11588': attribute type 10 has an invalid length. [ 1142.667732][T15981] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1142.696832][T15981] : (slave netdevsim0): Enslaving as an active interface with an up link [ 1142.718830][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11587'. [ 1142.745313][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11587'. [ 1142.805690][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1142.813816][ C0] lec:lec_tx_timeout: lec0 [ 1143.112356][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11594'. [ 1143.178353][T16004] bond0: option ad_select: unable to set because the bond device is up [ 1143.370921][T16011] netlink: 'syz.3.11598': attribute type 1 has an invalid length. [ 1143.452683][T16010] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.11597'. [ 1143.604718][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11602'. [ 1143.631238][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11601'. [ 1143.819075][T16036] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1143.854246][T16036] ipt_ECN: cannot use operation on non-tcp rule [ 1143.891178][T16036] 8021q: VLANs not supported on tunl0 [ 1146.601346][T16021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1146.782815][T16089] pim6reg: entered allmulticast mode [ 1146.812010][T16089] pim6reg: left allmulticast mode [ 1146.931150][T16089] sctp: [Deprecated]: syz.3.11621 (pid 16089) Use of int in maxseg socket option. [ 1146.931150][T16089] Use struct sctp_assoc_value instead [ 1147.311694][T16125] sctp: [Deprecated]: syz.3.11630 (pid 16125) Use of int in max_burst socket option. [ 1147.311694][T16125] Use struct sctp_assoc_value instead [ 1147.371805][T16134] validate_nla: 1 callbacks suppressed [ 1147.371825][T16134] netlink: 'syz.2.11634': attribute type 1 has an invalid length. [ 1147.393611][T16136] __nla_validate_parse: 3 callbacks suppressed [ 1147.393630][T16136] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11630'. [ 1147.429273][T16136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11630'. [ 1147.492744][T16134] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1147.509482][T16142] vlan1: entered promiscuous mode [ 1147.514545][T16142] bond11: entered promiscuous mode [ 1147.520131][T16142] vlan1: entered allmulticast mode [ 1147.525301][T16142] bond11: entered allmulticast mode [ 1147.565259][T16147] bond11: (slave bridge5): making interface the new active one [ 1147.582324][T16147] bridge5: entered promiscuous mode [ 1147.593278][T16147] bridge5: entered allmulticast mode [ 1147.632080][T16147] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 1148.142028][T16182] xt_addrtype: ipv6 does not support BROADCAST matching [ 1148.364826][T16187] bond5: entered promiscuous mode [ 1148.599370][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11653'. [ 1148.624778][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11653'. [ 1148.640872][T16202] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11653'. [ 1148.669742][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11653'. [ 1148.699155][T16202] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11653'. [ 1149.316452][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11661'. [ 1149.424525][T16241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1149.509864][T16248] "syz.0.11662" (16248) uses obsolete ecb(arc4) skcipher [ 1149.584663][T16251] netlink: zone id is out of range [ 1149.633297][T16251] netlink: zone id is out of range [ 1149.663437][T16251] netlink: zone id is out of range [ 1149.682537][T16251] netlink: zone id is out of range [ 1149.706153][T16251] netlink: zone id is out of range [ 1149.716691][T16251] netlink: zone id is out of range [ 1149.721865][T16251] netlink: zone id is out of range [ 1149.749375][T16251] netlink: set zone limit has 4 unknown bytes [ 1149.822935][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11667'. [ 1149.838520][T16259] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11666'. [ 1150.910916][T16319] netlink: 'syz.4.11683': attribute type 3 has an invalid length. [ 1151.012021][T16330] openvswitch: netlink: Flow key attr not present in new flow. [ 1152.415307][T16395] __nla_validate_parse: 7 callbacks suppressed [ 1152.415327][T16395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11699'. [ 1152.820595][T16408] netlink: 'syz.4.11703': attribute type 4 has an invalid length. [ 1153.449816][T16432] netlink: 'syz.0.11709': attribute type 1 has an invalid length. [ 1153.478863][T16432] netlink: 428 bytes leftover after parsing attributes in process `syz.0.11709'. [ 1153.489152][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11709'. [ 1154.160708][T16460] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11720'. [ 1154.230634][ T6583] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfe [ 1154.243754][ T6583] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfe [ 1154.297471][T16462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1154.485584][T16491] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11727'. [ 1154.564105][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11729'. [ 1154.671995][T16504] xt_ecn: cannot match TCP bits for non-tcp packets [ 1154.688910][T16510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11732'. [ 1154.800985][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11733'. [ 1154.914471][T16522] IPVS: set_ctl: invalid protocol: 29797 111.111.108.0:0 [ 1154.934283][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11734'. [ 1154.970551][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11734'. [ 1155.011553][T16524] netlink: 'syz.3.11734': attribute type 14 has an invalid length. [ 1155.073103][T16529] netlink: 'syz.3.11734': attribute type 14 has an invalid length. [ 1155.116228][T16524] netlink: 'syz.3.11734': attribute type 13 has an invalid length. [ 1155.124463][T16529] netlink: 'syz.3.11734': attribute type 13 has an invalid length. [ 1155.220180][T16536] veth3: entered promiscuous mode [ 1155.226577][T16536] veth3: entered allmulticast mode [ 1155.334431][T16544] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1155.398371][T16556] netlink: 'syz.4.11740': attribute type 11 has an invalid length. [ 1155.418662][T16544] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1155.632909][T16545] syzkaller0: entered promiscuous mode [ 1155.852253][ T5959] IPVS: starting estimator thread 0... [ 1155.955273][T16581] IPVS: using max 32 ests per chain, 76800 per kthread [ 1157.902867][T16621] netlink: 'syz.3.11752': attribute type 1 has an invalid length. [ 1157.935361][T16621] __nla_validate_parse: 6 callbacks suppressed [ 1157.935381][T16621] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11752'. [ 1158.156604][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11759'. [ 1158.198356][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11758'. [ 1158.303861][T16645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1158.311198][T16645] IPv6: NLM_F_CREATE should be set when creating new route [ 1158.390423][T16653] netlink: 'syz.3.11765': attribute type 2 has an invalid length. [ 1158.401189][T16653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11765'. [ 1158.989204][T16693] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11777'. [ 1159.009461][T16693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11777'. [ 1159.041954][T16693] netlink: 'syz.1.11777': attribute type 6 has an invalid length. [ 1159.079367][T16693] netlink: 'syz.1.11777': attribute type 5 has an invalid length. [ 1159.100311][T16693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11777'. [ 1159.127182][T16702] netlink: 'syz.3.11779': attribute type 4 has an invalid length. [ 1159.324053][T16713] openvswitch: netlink: Flow key attr not present in new flow. [ 1159.361623][T16713] bridge0: entered allmulticast mode [ 1159.535852][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11783'. [ 1159.545040][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11783'. [ 1159.591453][T16730] netlink: 'syz.1.11788': attribute type 12 has an invalid length. [ 1159.608010][T16723] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1159.647851][T16723] bond7 (unregistering): Released all slaves [ 1159.746353][T16730] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1159.957674][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11794'. [ 1160.544075][T16798] netlink: 'syz.4.11804': attribute type 4 has an invalid length. [ 1160.644627][T16801] syzkaller0: entered promiscuous mode [ 1160.652850][T16808] netlink: 'syz.2.11807': attribute type 1 has an invalid length. [ 1160.666919][T16801] syzkaller0: entered allmulticast mode [ 1160.864859][T16817] netlink: 'syz.1.11810': attribute type 3 has an invalid length. [ 1160.967748][T16824] netlink: 'syz.3.11814': attribute type 1 has an invalid length. [ 1160.975893][T16824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.018247][T16818] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 1161.497345][T16847] vlan1: entered promiscuous mode [ 1161.502514][T16847] bridge0: entered promiscuous mode [ 1161.640348][T16850] bond7: Invalid ad_actor_system MAC address. [ 1161.666915][T16850] bond7: option ad_actor_system: invalid value (1) [ 1161.720636][T16850] bond7 (unregistering): Released all slaves [ 1162.195314][T23542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1162.208200][T23542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1162.220275][T23542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1162.234202][T23542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1162.250008][T23542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1162.460639][T16882] IPv6: NLM_F_CREATE should be specified when creating new route [ 1162.937508][T16908] __nla_validate_parse: 17 callbacks suppressed [ 1162.937532][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11836'. [ 1163.031043][T16908] validate_nla: 2 callbacks suppressed [ 1163.031064][T16908] netlink: 'syz.2.11836': attribute type 7 has an invalid length. [ 1163.469887][T16933] netlink: 'syz.3.11843': attribute type 5 has an invalid length. [ 1163.485106][T16869] chnl_net:caif_netlink_parms(): no params data found [ 1163.519525][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11843'. [ 1163.537043][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11844'. [ 1163.579019][T16943] netlink: 'syz.0.11846': attribute type 29 has an invalid length. [ 1163.588385][T16943] netlink: 'syz.0.11846': attribute type 29 has an invalid length. [ 1163.597190][T16943] netlink: 500 bytes leftover after parsing attributes in process `syz.0.11846'. [ 1163.698903][T16947] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11847'. [ 1163.781819][T16949] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1163.882277][T16956] netlink: 'syz.0.11850': attribute type 1 has an invalid length. [ 1164.095319][T16956] netlink: 'syz.0.11850': attribute type 1 has an invalid length. [ 1164.119285][T16869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.127393][T16869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.134835][T16869] bridge_slave_0: entered allmulticast mode [ 1164.147918][T16869] bridge_slave_0: entered promiscuous mode [ 1164.158949][T16869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.174972][T16869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.196729][T16869] bridge_slave_1: entered allmulticast mode [ 1164.204967][T16869] bridge_slave_1: entered promiscuous mode [ 1164.242363][T16957] bond7: (slave geneve2): making interface the new active one [ 1164.251113][T16957] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1164.277841][T16956] netlink: 'syz.0.11850': attribute type 1 has an invalid length. [ 1164.320136][ T6583] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1164.328197][ T51] Bluetooth: hci3: command tx timeout [ 1164.348938][ T6583] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1164.392668][T16956] netlink: 'syz.0.11850': attribute type 1 has an invalid length. [ 1164.420162][ T6583] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1164.467109][ T6583] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1164.480904][T16869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.492494][T16956] netlink: 'syz.0.11850': attribute type 1 has an invalid length. [ 1164.508388][T16956] netlink: 'syz.0.11850': attribute type 1 has an invalid length. [ 1164.587955][T16869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.761332][T16869] team0: Port device team_slave_0 added [ 1164.783723][T16869] team0: Port device team_slave_1 added [ 1164.791248][T16999] delete_channel: no stack [ 1164.808396][T16998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1164.901127][T16869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.946697][T16869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.016462][T16869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.045312][T16869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.055327][T16869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.083620][T16869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.248301][T17019] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11864'. [ 1165.260370][T17020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1165.297889][T17017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1165.343467][T16869] hsr_slave_0: entered promiscuous mode [ 1165.403095][T16869] hsr_slave_1: entered promiscuous mode [ 1165.418980][T16869] debugfs: 'hsr0' already exists in 'hsr' [ 1165.424776][T16869] Cannot create hsr debugfs directory [ 1165.473222][T17034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1166.124968][T17059] x_tables: duplicate underflow at hook 2 [ 1166.304741][T17071] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1166.408291][T16869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1166.414793][ T51] Bluetooth: hci3: command tx timeout [ 1166.463547][T16869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1166.500428][T17081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1166.650753][T16869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1166.699675][T17092] team_slave_1: Caught tx_queue_len zero misconfig [ 1166.728240][T16869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1166.737561][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11885'. [ 1166.777501][T17087] openvswitch: netlink: Invalid VLAN frame [ 1166.919907][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11888'. [ 1167.032933][T16869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.108585][T16869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.128873][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.136128][ T6345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.168940][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.176276][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.570695][T17137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11895'. [ 1167.702524][T16869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.767155][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11897'. [ 1167.844895][T17148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1168.011150][T17152] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11899'. [ 1168.052523][T17152] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11899'. [ 1168.183583][T17169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11903'. [ 1168.489497][ T51] Bluetooth: hci3: command tx timeout [ 1168.640296][T17194] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11909'. [ 1168.672758][T16869] veth0_vlan: entered promiscuous mode [ 1168.687843][T17196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11910'. [ 1168.692808][T16869] veth1_vlan: entered promiscuous mode [ 1168.742719][T17197] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11909'. [ 1168.809568][T16869] veth0_macvtap: entered promiscuous mode [ 1168.844443][T17205] tipc: Enabling of bearer rejected, failed to enable media [ 1168.869704][T16869] veth1_macvtap: entered promiscuous mode [ 1168.930540][T16869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.938318][T17209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11913'. [ 1168.952712][T16869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.961385][T17209] netlink: 112 bytes leftover after parsing attributes in process `syz.3.11913'. [ 1169.026750][T17211] validate_nla: 60 callbacks suppressed [ 1169.026772][T17211] netlink: 'syz.0.11914': attribute type 10 has an invalid length. [ 1169.041943][ T6345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.067111][ T6345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.105558][ T6345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.124246][ T6345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.150968][T17213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11915'. [ 1169.161083][T17211] veth0_macvtap: left promiscuous mode [ 1169.254941][T17217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11916'. [ 1169.394957][ T8571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.440163][ T8571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.506122][ T6583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.514009][ T6583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.693375][T17235] netlink: 'syz.4.11823': attribute type 83 has an invalid length. [ 1169.730092][T17238] netlink: 'syz.4.11823': attribute type 83 has an invalid length. [ 1170.153786][T17273] xt_l2tp: invalid flags combination: 0 [ 1170.439621][T17293] ip6tnl0: Caught tx_queue_len zero misconfig [ 1170.568977][ T51] Bluetooth: hci3: command tx timeout [ 1170.892857][T17315] netlink: 'syz.2.11947': attribute type 1 has an invalid length. [ 1170.958879][T17315] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1171.007171][T17324] bond12: (slave veth9): Enslaving as an active interface with a down link [ 1171.329632][T17345] nbd: must specify an index to disconnect [ 1171.348478][T17347] netlink: 'syz.4.11956': attribute type 1 has an invalid length. [ 1171.653325][T17368] netlink: 'syz.2.11962': attribute type 1 has an invalid length. [ 1171.847326][T17380] netlink: 'syz.1.11966': attribute type 3 has an invalid length. [ 1172.153213][T17396] netlink: 'syz.0.11972': attribute type 1 has an invalid length. [ 1172.269300][T17396] bond9: entered promiscuous mode [ 1172.286340][T17396] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1172.293826][T17401] bridge_slave_0: entered allmulticast mode [ 1172.544415][T17427] openvswitch: netlink: EtherType 0 is less than min 600 [ 1172.692436][T17435] syzkaller0: entered promiscuous mode [ 1172.726370][T17435] syzkaller0: entered allmulticast mode [ 1173.166037][T17461] __nla_validate_parse: 20 callbacks suppressed [ 1173.166059][T17461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11993'. [ 1173.187317][T17461] netlink: 21 bytes leftover after parsing attributes in process `syz.3.11993'. [ 1173.222578][T17461] netlink: 21 bytes leftover after parsing attributes in process `syz.3.11993'. [ 1173.489891][T23542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1173.501766][T23542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1173.510658][T23542] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1173.518832][T23542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1173.526902][T23542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1173.970807][T17497] tipc: Started in network mode [ 1173.981811][T17497] tipc: Node identity 1ab1a99f408f, cluster identity 4711 [ 1173.992387][T17497] tipc: Enabled bearer , priority 0 [ 1174.006748][T17493] syzkaller0: entered promiscuous mode [ 1174.013299][T17493] syzkaller0: entered allmulticast mode [ 1174.030403][T17493] tipc: Resetting bearer [ 1174.084489][T17492] tipc: Resetting bearer [ 1174.105098][T17492] tipc: Disabling bearer [ 1174.141016][T17499] ip_vti0: left promiscuous mode [ 1174.148111][T17499] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1174.194254][T17500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1174.230000][ T6582] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.254304][ T6582] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.293125][T17503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.311019][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12006'. [ 1174.332719][ T6582] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.343685][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12006'. [ 1174.353370][ T6582] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.430867][ T6582] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.483194][ T6582] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.534655][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12008'. [ 1174.573761][T17514] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1174.584457][T17514] team0: Port device batadv2 added [ 1174.617834][ T6582] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.679233][ T6582] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.789061][T17525] tunl0: entered promiscuous mode [ 1174.794694][T17525] netlink: 'syz.1.12011': attribute type 3 has an invalid length. [ 1174.804542][T17525] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12011'. [ 1174.876642][T17532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12014'. [ 1175.176833][T17477] chnl_net:caif_netlink_parms(): no params data found [ 1175.298579][T17544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12018'. [ 1175.315338][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12019'. [ 1175.606331][ T51] Bluetooth: hci4: command tx timeout [ 1175.624818][ T6582] dvmrp0 (unregistering): left allmulticast mode [ 1175.646835][ T6582] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1175.870706][ T6582] bond11 (unregistering): (slave bridge5): Releasing active interface [ 1175.880451][ T6582] bridge5 (unregistering): left promiscuous mode [ 1175.887908][ T6582] bridge5 (unregistering): left allmulticast mode [ 1175.911695][ T6582] bond0 (unregistering): Released all slaves [ 1175.923889][ T6582] bond1 (unregistering): Released all slaves [ 1175.942777][ T6582] bond2 (unregistering): Released all slaves [ 1175.971848][ T6582] bond3 (unregistering): Released all slaves [ 1175.987890][ T6582] bond4 (unregistering): Released all slaves [ 1176.003610][ T6582] bond5 (unregistering): Released all slaves [ 1176.028066][ T6582] bond6 (unregistering): (slave veth5): Releasing active interface [ 1176.038267][ T6582] bond6 (unregistering): Released all slaves [ 1176.054162][ T6582] bond7 (unregistering): Released all slaves [ 1176.071508][ T6582] bond8 (unregistering): Released all slaves [ 1176.087383][ T6582] bond9 (unregistering): Released all slaves [ 1176.105297][ T6582] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1176.131090][ T6582] bond10 (unregistering): Released all slaves [ 1176.150829][ T6582] bond11 (unregistering): Released all slaves [ 1176.172429][ T6582] bond12 (unregistering): (slave veth9): Releasing active interface [ 1176.182583][ T6582] bond12 (unregistering): Released all slaves [ 1176.241677][T17561] bridge5: entered promiscuous mode [ 1176.248543][T17561] bridge5: entered allmulticast mode [ 1176.411852][ T6582] tipc: Disabling bearer [ 1176.439833][ T6582] tipc: Left network mode [ 1176.598540][T17573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1176.717481][T17586] netlink: 'syz.4.12026': attribute type 16 has an invalid length. [ 1177.144549][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.166889][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.174352][T17477] bridge_slave_0: entered allmulticast mode [ 1177.187402][T17477] bridge_slave_0: entered promiscuous mode [ 1177.213903][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1177.248726][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.275745][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.315858][T17477] bridge_slave_1: entered allmulticast mode [ 1177.334114][T17477] bridge_slave_1: entered promiscuous mode [ 1177.459981][T17627] openvswitch: netlink: IP tunnel dst address not specified [ 1177.571825][T17477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.621838][T17477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.694969][ T51] Bluetooth: hci4: command tx timeout [ 1177.782847][T17477] team0: Port device team_slave_0 added [ 1177.879683][T17477] team0: Port device team_slave_1 added [ 1178.103471][T17648] syzkaller1: entered promiscuous mode [ 1178.113096][T17648] syzkaller1: entered allmulticast mode [ 1178.155949][ T6582] hsr_slave_1: left promiscuous mode [ 1178.178475][ T6582] veth1_macvtap: left promiscuous mode [ 1178.187926][ T6582] veth0_macvtap: left promiscuous mode [ 1178.193530][ T6582] veth1_vlan: left promiscuous mode [ 1178.576008][ T6582] pimreg (unregistering): left allmulticast mode [ 1178.662631][T17680] __nla_validate_parse: 7 callbacks suppressed [ 1178.662652][T17680] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12044'. [ 1179.038962][T17477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.056028][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.084829][T17477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.107708][T17642] team_slave_0: entered promiscuous mode [ 1179.113428][T17642] team_slave_0: entered allmulticast mode [ 1179.223401][T17672] syzkaller0: entered promiscuous mode [ 1179.250071][T17672] syzkaller0: entered allmulticast mode [ 1179.258697][T17689] netlink: 'syz.3.12046': attribute type 4 has an invalid length. [ 1179.270687][T17689] netlink: 17 bytes leftover after parsing attributes in process `syz.3.12046'. [ 1179.409057][T17693] xt_ecn: cannot match TCP bits for non-tcp packets [ 1179.447225][T17477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.470020][T17695] netlink: 'syz.4.12049': attribute type 2 has an invalid length. [ 1179.478087][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.511437][T17477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.773372][ T51] Bluetooth: hci4: command tx timeout [ 1181.348317][T17695] 9: entered promiscuous mode [ 1181.373028][T17698] bond9: invalid ARP target 0.0.0.0 specified for addition [ 1181.383737][T17698] bond9: option arp_ip_target: invalid value (0) [ 1181.393101][T17698] bond9 (unregistering): Released all slaves [ 1181.598999][T17724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12058'. [ 1181.644503][T17477] hsr_slave_0: entered promiscuous mode [ 1181.658527][T17477] hsr_slave_1: entered promiscuous mode [ 1181.694397][T17477] debugfs: 'hsr0' already exists in 'hsr' [ 1181.701236][T17477] Cannot create hsr debugfs directory [ 1181.750950][T17731] netlink: 'syz.0.12060': attribute type 1 has an invalid length. [ 1181.770310][T17731] netlink: 'syz.0.12060': attribute type 2 has an invalid length. [ 1181.821954][T17731] netlink: 'syz.0.12060': attribute type 1 has an invalid length. [ 1181.856912][ T51] Bluetooth: hci4: command tx timeout [ 1181.864159][T17731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1182.041757][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12064'. [ 1182.073704][ T6582] IPVS: stop unused estimator thread 0... [ 1182.113196][T17758] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.12065'. [ 1182.242845][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12064'. [ 1182.325346][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12064'. [ 1182.353863][T17764] bond0: entered promiscuous mode [ 1182.394552][T17764] bond_slave_0: entered promiscuous mode [ 1182.401103][T17764] bond_slave_1: entered promiscuous mode [ 1182.471386][T17764] bond0: left promiscuous mode [ 1182.496958][T17764] bond_slave_0: left promiscuous mode [ 1182.502790][T17764] bond_slave_1: left promiscuous mode [ 1182.534914][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12071'. [ 1182.569116][T17773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12071'. [ 1182.578386][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880773f1800: rx timeout, send abort [ 1182.760235][T17773] IPv6: sit3: Disabled Multicast RS [ 1182.768470][T17773] sit3: entered allmulticast mode [ 1182.805732][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 1182.813826][ C0] lec:lec_tx_timeout: lec0 [ 1183.322134][T17814] IPv6: addrconf: prefix option has invalid lifetime [ 1183.329014][T17814] IPv6: addrconf: prefix option has invalid lifetime [ 1183.512955][T17822] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1183.948049][T17477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1183.989641][T17477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1184.020730][T17856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1184.060301][T17477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1184.111203][T17477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1184.271147][T17877] __nla_validate_parse: 3 callbacks suppressed [ 1184.271172][T17877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12093'. [ 1184.377971][T17879] syzkaller0: entered promiscuous mode [ 1184.386231][T17879] syzkaller0: entered allmulticast mode [ 1184.416872][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12092'. [ 1184.458211][T17884] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12095'. [ 1184.519688][T17884] team_slave_0: left promiscuous mode [ 1184.596818][T17884] team_slave_0: entered promiscuous mode [ 1184.612603][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12098'. [ 1184.785312][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.830301][T17477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.856672][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.863872][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.917837][T17902] macvtap1: entered allmulticast mode [ 1184.923384][T17902] veth0_macvtap: entered allmulticast mode [ 1184.968947][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.976212][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.256002][T17926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12106'. [ 1185.606267][T17948] netlink: 'syz.4.12112': attribute type 11 has an invalid length. [ 1185.622651][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12111'. [ 1185.636605][T17951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12111'. [ 1185.688546][T17948] ip6gre1: entered promiscuous mode [ 1185.941677][T17961] bond7: option resend_igmp: invalid value (10213) [ 1185.958776][T17961] bond7: option resend_igmp: allowed values 0 - 255 [ 1185.967755][T17961] bond7 (unregistering): Released all slaves [ 1186.010508][T17970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12115'. [ 1186.124178][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.187068][T17974] netlink: 'syz.4.12118': attribute type 11 has an invalid length. [ 1186.222933][T17974] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.12118'. [ 1186.270343][T17980] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1186.307984][T17477] veth0_vlan: entered promiscuous mode [ 1186.360135][T17477] veth1_vlan: entered promiscuous mode [ 1186.450072][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12122'. [ 1186.509675][T17477] veth0_macvtap: entered promiscuous mode [ 1186.539959][T17477] veth1_macvtap: entered promiscuous mode [ 1186.613992][T17477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.657502][T18005] netlink: 'syz.3.12126': attribute type 64 has an invalid length. [ 1186.691068][T17477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.743671][ T6582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.767202][ T6582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.828009][ T6582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.882499][ T6582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.017442][T18021] netlink: 'syz.1.12131': attribute type 14 has an invalid length. [ 1187.047801][T18021] netlink: 'syz.1.12131': attribute type 13 has an invalid length. [ 1187.279437][ T6576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.308175][ T6576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.450274][ T6345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.478955][ T6345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.564940][T18045] sctp: [Deprecated]: syz.3.12139 (pid 18045) Use of int in max_burst socket option. [ 1187.564940][T18045] Use struct sctp_assoc_value instead [ 1188.239083][T18082] syzkaller0: entered promiscuous mode [ 1188.246488][T18082] syzkaller0: entered allmulticast mode [ 1189.419336][T18153] netlink: 'syz.1.12165': attribute type 12 has an invalid length. [ 1189.455582][T18153] netlink: 'syz.1.12165': attribute type 29 has an invalid length. [ 1189.463753][T18153] __nla_validate_parse: 6 callbacks suppressed [ 1189.463773][T18153] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12165'. [ 1189.508079][T18153] netlink: 'syz.1.12165': attribute type 2 has an invalid length. [ 1189.542267][T18153] netlink: 23 bytes leftover after parsing attributes in process `syz.1.12165'. [ 1189.813181][T18161] syzkaller0: entered promiscuous mode [ 1189.826845][T18161] syzkaller0: entered allmulticast mode [ 1190.284283][T18157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12166'. [ 1190.719623][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12174'. [ 1190.736790][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12174'. [ 1192.133525][T18203] vcan0: entered promiscuous mode [ 1192.141386][T18203] vcan0: entered allmulticast mode [ 1192.559208][T18226] netlink: 'syz.1.12182': attribute type 21 has an invalid length. [ 1192.585856][T18226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12182'. [ 1192.834271][T18247] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12185'. [ 1192.864383][T18241] xt_hashlimit: size too large, truncated to 1048576 [ 1192.883136][T18247] openvswitch: netlink: Flow key attr not present in new flow. [ 1193.801818][T23542] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1193.812853][T23542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1193.830697][T23542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1193.838986][T23542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1193.860047][T32000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1194.045692][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12201'. [ 1194.217805][T18298] bridge_slave_1: left allmulticast mode [ 1194.224867][T18298] bridge_slave_1: left promiscuous mode [ 1194.231262][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.248839][T18298] bridge_slave_0: left allmulticast mode [ 1194.275781][T18298] bridge_slave_0: left promiscuous mode [ 1194.286018][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.366897][T18308] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 1194.596257][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12205'. [ 1194.751089][T18327] IPv6: NLM_F_CREATE should be specified when creating new route [ 1194.759244][T18325] IPv6: NLM_F_CREATE should be specified when creating new route [ 1194.788067][T18325] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12208'. [ 1195.199548][T18344] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12214'. [ 1195.212377][T18344] syzkaller0: entered promiscuous mode [ 1195.218076][T18344] syzkaller0: entered allmulticast mode [ 1195.705160][T18292] chnl_net:caif_netlink_parms(): no params data found [ 1195.729628][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12219'. [ 1195.835788][T18372] netlink: 'syz.2.12220': attribute type 21 has an invalid length. [ 1195.847951][T18372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12220'. [ 1195.916489][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12221'. [ 1195.933158][T32000] Bluetooth: hci5: command tx timeout [ 1196.041870][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.050199][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.058492][T18292] bridge_slave_0: entered allmulticast mode [ 1196.067359][T18292] bridge_slave_0: entered promiscuous mode [ 1196.079423][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.093886][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.102726][T18292] bridge_slave_1: entered allmulticast mode [ 1196.112112][T18292] bridge_slave_1: entered promiscuous mode [ 1196.160893][T18391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1196.175011][T18292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.196628][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12225'. [ 1196.208608][T18292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.292017][T18292] team0: Port device team_slave_0 added [ 1196.300849][T18398] netlink: 'syz.3.12227': attribute type 1 has an invalid length. [ 1196.304987][T18292] team0: Port device team_slave_1 added [ 1196.392007][T18292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.401312][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.446830][T18292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.462728][T18292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.470889][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.503135][T18292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.711353][T18292] hsr_slave_0: entered promiscuous mode [ 1196.728753][T18292] hsr_slave_1: entered promiscuous mode [ 1196.749476][T18292] debugfs: 'hsr0' already exists in 'hsr' [ 1196.755278][T18292] Cannot create hsr debugfs directory [ 1196.873645][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12235'. [ 1196.911049][T18425] netlink: 'syz.1.12235': attribute type 83 has an invalid length. [ 1196.943992][T18431] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.12238'. [ 1197.331548][T18292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.370824][T18292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.382313][T18292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1197.628020][T18460] udevd[18460]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1197.670175][T18460] udevd[18460]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1197.778193][T18473] netlink: 'syz.4.12247': attribute type 2 has an invalid length. [ 1197.801833][T18292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.816729][T18292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.828638][T18292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1197.870457][T18481] team1: entered promiscuous mode [ 1197.877007][T18481] team1: entered allmulticast mode [ 1197.887542][T18469] ip6gre2: entered promiscuous mode [ 1197.892869][T18469] ip6gre2: entered allmulticast mode [ 1197.954003][T18480] team2: entered promiscuous mode [ 1197.961216][T18480] team2: entered allmulticast mode [ 1198.013855][T32000] Bluetooth: hci5: command tx timeout [ 1198.081677][T18292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.093163][T18292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.104627][T18292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1198.234813][T18292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.268456][T18292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.429782][T18292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1198.984636][T18526] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1199.038896][T18292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1199.102597][T18292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1199.131471][T18292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1199.154345][T18292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1199.236970][T18541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1199.810028][T18292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.856702][T18570] xt_TCPMSS: Only works on TCP SYN packets [ 1199.914314][T18292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.957242][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.964434][ T8563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.994726][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.001988][ T8563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.044199][ T6833] lec:lec_start_xmit: lec0:No lecd attached [ 1200.091606][T32000] Bluetooth: hci5: command tx timeout [ 1200.255027][T18292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1200.400662][T18584] netlink: 'syz.2.12272': attribute type 1 has an invalid length. [ 1200.474497][T18584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1200.563673][T18591] veth3: entered promiscuous mode [ 1200.573365][T18591] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1200.623158][T18584] vlan2: entered allmulticast mode [ 1200.630087][T18584] bond1: entered allmulticast mode [ 1200.638375][T18584] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1200.783448][T18292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.922306][T18292] veth0_vlan: entered promiscuous mode [ 1200.938468][T18600] [ 1200.940885][T18600] ====================================================== [ 1200.947930][T18600] WARNING: possible circular locking dependency detected [ 1200.954989][T18600] syzkaller #0 Not tainted [ 1200.959430][T18600] ------------------------------------------------------ [ 1200.966488][T18600] syz.2.12274/18600 is trying to acquire lock: [ 1200.972667][T18600] ffffffff8fd49778 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 1200.982391][T18600] [ 1200.982391][T18600] but task is already holding lock: [ 1200.989788][T18600] ffffffff8fd49718 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1200.999829][T18600] [ 1200.999829][T18600] which lock already depends on the new lock. [ 1200.999829][T18600] [ 1201.010266][T18600] [ 1201.010266][T18600] the existing dependency chain (in reverse order) is: [ 1201.019324][T18600] [ 1201.019324][T18600] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 1201.027291][T18600] _raw_spin_lock_bh+0x36/0x50 [ 1201.032708][T18600] nr_rt_ioctl+0x40c/0xf90 [ 1201.037683][T18600] sock_do_ioctl+0x101/0x320 [ 1201.042876][T18600] sock_ioctl+0x5c6/0x7f0 [ 1201.047770][T18600] __se_sys_ioctl+0xfc/0x170 [ 1201.052927][T18600] do_syscall_64+0x14d/0xf80 [ 1201.058065][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.064538][T18600] [ 1201.064538][T18600] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 1201.072565][T18600] _raw_spin_lock_bh+0x36/0x50 [ 1201.077895][T18600] nr_rt_ioctl+0x215/0xf90 [ 1201.082858][T18600] sock_do_ioctl+0x101/0x320 [ 1201.087991][T18600] sock_ioctl+0x5c6/0x7f0 [ 1201.092861][T18600] __se_sys_ioctl+0xfc/0x170 [ 1201.098027][T18600] do_syscall_64+0x14d/0xf80 [ 1201.103161][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.109612][T18600] [ 1201.109612][T18600] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 1201.117462][T18600] __lock_acquire+0x15a5/0x2cf0 [ 1201.122866][T18600] lock_acquire+0xf0/0x2e0 [ 1201.127850][T18600] _raw_spin_lock_bh+0x36/0x50 [ 1201.133162][T18600] nr_rt_device_down+0xbe/0x860 [ 1201.138551][T18600] nr_device_event+0x137/0x150 [ 1201.143863][T18600] notifier_call_chain+0x1be/0x400 [ 1201.149527][T18600] __dev_notify_flags+0x16d/0x310 [ 1201.155205][T18600] netif_change_flags+0xe8/0x1a0 [ 1201.160699][T18600] dev_change_flags+0x130/0x260 [ 1201.166176][T18600] dev_ioctl+0x7b4/0x1150 [ 1201.171091][T18600] sock_do_ioctl+0x23e/0x320 [ 1201.176230][T18600] sock_ioctl+0x5c6/0x7f0 [ 1201.181123][T18600] __se_sys_ioctl+0xfc/0x170 [ 1201.186279][T18600] do_syscall_64+0x14d/0xf80 [ 1201.191415][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.197853][T18600] [ 1201.197853][T18600] other info that might help us debug this: [ 1201.197853][T18600] [ 1201.208114][T18600] Chain exists of: [ 1201.208114][T18600] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 1201.208114][T18600] [ 1201.221964][T18600] Possible unsafe locking scenario: [ 1201.221964][T18600] [ 1201.229443][T18600] CPU0 CPU1 [ 1201.234830][T18600] ---- ---- [ 1201.240232][T18600] lock(nr_neigh_list_lock); [ 1201.244945][T18600] lock(&nr_node->node_lock); [ 1201.252250][T18600] lock(nr_neigh_list_lock); [ 1201.259476][T18600] lock(nr_node_list_lock); [ 1201.264099][T18600] [ 1201.264099][T18600] *** DEADLOCK *** [ 1201.264099][T18600] [ 1201.272280][T18600] 2 locks held by syz.2.12274/18600: [ 1201.277579][T18600] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1201.286416][T18600] #1: ffffffff8fd49718 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1201.296458][T18600] [ 1201.296458][T18600] stack backtrace: [ 1201.302363][T18600] CPU: 1 UID: 0 PID: 18600 Comm: syz.2.12274 Not tainted syzkaller #0 PREEMPT(full) [ 1201.302385][T18600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1201.302397][T18600] Call Trace: [ 1201.302405][T18600] [ 1201.302415][T18600] dump_stack_lvl+0xe8/0x150 [ 1201.302442][T18600] print_circular_bug+0x2e1/0x300 [ 1201.302472][T18600] check_noncircular+0x12e/0x150 [ 1201.302501][T18600] __lock_acquire+0x15a5/0x2cf0 [ 1201.302529][T18600] ? __lock_acquire+0x6b5/0x2cf0 [ 1201.302576][T18600] lock_acquire+0xf0/0x2e0 [ 1201.302598][T18600] ? nr_rt_device_down+0xbe/0x860 [ 1201.302618][T18600] ? nr_rt_device_down+0xbe/0x860 [ 1201.302634][T18600] _raw_spin_lock_bh+0x36/0x50 [ 1201.302664][T18600] ? nr_rt_device_down+0xbe/0x860 [ 1201.302681][T18600] nr_rt_device_down+0xbe/0x860 [ 1201.302696][T18600] ? nr_device_event+0x12f/0x150 [ 1201.302727][T18600] nr_device_event+0x137/0x150 [ 1201.302754][T18600] notifier_call_chain+0x1be/0x400 [ 1201.302786][T18600] __dev_notify_flags+0x16d/0x310 [ 1201.302816][T18600] ? __pfx___dev_notify_flags+0x10/0x10 [ 1201.302849][T18600] ? __dev_change_flags+0x4c6/0x690 [ 1201.302879][T18600] ? __pfx___dev_change_flags+0x10/0x10 [ 1201.302908][T18600] ? full_name_hash+0x92/0xe0 [ 1201.302937][T18600] netif_change_flags+0xe8/0x1a0 [ 1201.302967][T18600] dev_change_flags+0x130/0x260 [ 1201.302997][T18600] dev_ioctl+0x7b4/0x1150 [ 1201.303023][T18600] sock_do_ioctl+0x23e/0x320 [ 1201.303046][T18600] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1201.303066][T18600] ? do_futex+0x333/0x420 [ 1201.303096][T18600] sock_ioctl+0x5c6/0x7f0 [ 1201.303117][T18600] ? __pfx_sock_ioctl+0x10/0x10 [ 1201.303138][T18600] ? __fget_files+0x2a/0x420 [ 1201.303164][T18600] ? __fget_files+0x3a0/0x420 [ 1201.303189][T18600] ? __fget_files+0x2a/0x420 [ 1201.303218][T18600] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1201.303241][T18600] ? __pfx_sock_ioctl+0x10/0x10 [ 1201.303261][T18600] __se_sys_ioctl+0xfc/0x170 [ 1201.303282][T18600] do_syscall_64+0x14d/0xf80 [ 1201.303299][T18600] ? trace_irq_disable+0x3b/0x150 [ 1201.303325][T18600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.303343][T18600] ? clear_bhb_loop+0x40/0x90 [ 1201.303365][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.303383][T18600] RIP: 0033:0x7f6c9159c799 [ 1201.303401][T18600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.303419][T18600] RSP: 002b:00007f6c924cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.303438][T18600] RAX: ffffffffffffffda RBX: 00007f6c91815fa0 RCX: 00007f6c9159c799 [ 1201.303452][T18600] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 1201.303464][T18600] RBP: 00007f6c91632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1201.303476][T18600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.303488][T18600] R13: 00007f6c91816038 R14: 00007f6c91815fa0 R15: 00007ffc4721a7e8 [ 1201.303511][T18600] [ 1201.617128][T18603] __nla_validate_parse: 11 callbacks suppressed [ 1201.617149][T18603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12274'. [ 1201.665334][T18292] veth1_vlan: entered promiscuous mode [ 1201.689591][T18292] veth0_macvtap: entered promiscuous mode [ 1201.700554][T18292] veth1_macvtap: entered promiscuous mode [ 1201.720318][T18292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.732301][T18292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.768445][ T8563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.779551][ T8563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.791997][ T8563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.801385][ T8563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.822672][T18292] ieee80211 phy127: Selected rate control algorithm 'minstrel_ht' [ 1201.858324][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.868340][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.868509][T18292] ieee80211 phy128: Selected rate control algorithm 'minstrel_ht' [ 1201.907486][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.915719][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.166078][T32000] Bluetooth: hci5: command tx timeout [ 1205.765536][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 1205.773616][ C0] lec:lec_tx_timeout: lec0