last executing test programs: 15.847578187s ago: executing program 3 (id=3673): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f0000000000)='&/\x00', 0x80, &(0x7f0000000040)={@align=0x50, {0x7, 0xfff, 0x2fe6, 0x100}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x1}, 0x3, &(0x7f0000000380)=[{0x2, 0x1, &(0x7f0000000100)='!}\x00', &(0x7f0000000140)="5e7598dfdb3ef97f0e6de87aa413e342749ae5387fd881e3504a7411824c607779d2cdd85f8632b183c9bc3a1559fbf9c196644d03562e9711d9be3b3c6a6db5ff7d04a6bf", 0x45, 0x2}, {0x3, 0x0, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="ca4215ede43e4c901e4a7724a14f8df1321bbd2df1da4e9dade806624923d43f61327899fe70a4329072434c94d50a26e285ebf1caa2fba3adbedfe25cef916441d5ecdd815c3d430981817f337a5c65f3245b8082ce8e90361aa7eaf975381433718c0faaed9de29e279569217f1b898851f261a30aef2b8aadc9ed202b2ed1cb6a303a8600b982b3a858353e2c662bb894015e0582631e30343ed02bb800", 0x9f}, {0x3, 0x5, &(0x7f00000002c0)='$[\x00', &(0x7f0000000300)="5328341af23516b0655998c87621dd82304f02fcf771cde285111a308a4cd70c869f51b3ffa44cb244c4e390241d50ca6f259384cf993ca10c730908f5298dd9cea356305fbed3dd401e647c8b05f23ab348449fcfdb920b38ba092fe73667355391811c49d52b", 0x67, 0x10}]}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000480)) (async) r2 = socket(0x1, 0x5, 0x8000) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000004c0)={'veth0_to_bridge', 0x32, 0x36}, 0x12) (async) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000500)) (async) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x3f7, 0x20, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040015}, 0x40000) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000640)={0x8, {0x22, 0x7, 0xe3af, 0x2, 0x5}}) (async) bind$inet(r0, &(0x7f0000000680)={0x2, 0x4e23, @loopback}, 0x10) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000006c0)={0xfffffffb}, 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000009c0)={{'\x00', 0x1}, {0x6a68}, 0x2, 0x0, 0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)="864304e5060f4148369de9a5edab2cfb235037e068a52b5466a821751a1f42e84a0b25d52aa5e37e55ae944db436a33e77d5289d81010ca20e9cd2a5bad02d0607fd5ebc5b272f935632f355", 0x4c, 0x0, &(0x7f0000000800)={0x2, 0x14c, {0x0, 0xc, 0xa2, "fdc4dfc45df4ff76c4e6e8c301bcd3dbe63da1acbbebee9021c20d045927c74ba1755068c66986d66068a8ae00d4909d030315b0823ecb9d029e20a3bb28b34852367ab016ea2be5d557f3c972566e0a7b47a3e7d37241ec3f950b77994ba5bebe9278d900cd1450f4c1ba99ecbdacfb16429670cab6104fcf4375ef1f8e17f772593d9feff28421c7228325e3e82f29d35441ba3d4f7b27e65ff55d914de1159ab4", 0x9d, "d288ecd7fbf4f36dc214312306b827722673c9bccfd9c295650e3943a931b853052bc6c207f5b81a528fa81fd11c0ab19e5d6f9d4a03f4ede63e7b6ae3a907e502e3d13a9940efe9ec8316a5032f8d39c7ab3e84090cf023bf88244733e74b62d3bc65bc527faf93e71821310cedaed8b77fec15ef472c811c9babbccfff190cfc88ad25e05e7018e20bee2ef43ef8ac64cfcd2ab8a930631b404673a0"}, 0x46, "dff24378190e40b5ec8bb03d71c6cd719a6f2b7b9a359ae70b6abcca685f932d84b0810e1808794c369a372f3a2bc96950fb9657911b206651e6803f2e92944a78d6739353ee"}, 0x19e}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000a80)={0x2, 0x10, '\x00', 0x0, &(0x7f0000000a40)=[0x0, 0x0]}) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x260000c}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x9, 0x6, 0x601, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x82b}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async) connect$vsock_stream(r0, &(0x7f0000000d00)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000d80)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x317, &(0x7f0000000d40)='bridge_slave_0\x00', 0x9, 0x1, 0xa}) (async) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000e40)={@remote, 0x0}, &(0x7f0000000e80)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff2}, {0x1, 0xe}, {0xf, 0x8}}, [{0x8, 0xb, 0x400}, {0x8, 0xb, 0x8}, {0x8}]}, 0x3c}}, 0x10000) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r6, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9c}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20000041) (async) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000010c0)="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", 0xfb}, {&(0x7f00000011c0)="396291024570b9859553bd5c47fddfcd46500332efb06de6761e29b8de95fdda2377cd586f0f2fbc8b40fad11047a8ab75a4702d429d652a16d823a88d747f87f40d8a066a35a34072754b24a657af0a046b8e82435a29abc2bab556831c35047a7fbdf1bbe233554fbc10caec02f22c98c3100248d27fd6bde2a78df297b5a56e89491f8632cbdc0430b7233487f8cf612866e089c7e7e511fd4c9115bfb98ac53c5538b0ce3bf2ae5ce12a8dd2", 0xae}, {&(0x7f0000001280)="d38a4899352ef2793e655a84eff92fd063e171426c615b8a6a7ca0c07253bd718b3d3ae183d3b2ab436d2238e9a7ee9ff7b957e834488174f8476ba6dc43d99b8416b237ea1dcf377ad2a2ce4355680b7c2f65771c937c9d6d88db1e4d78655ad0222061175ad3b02ae9583ed04ab20e9e112b754fd95165bf6da43c6f1daa7a9efb4053d7c0eec9c8b1189604d4f4dad555bdbdbaad0e52add8aa54b3d5aaaedeb5f7f0280a1cc8a9847ae0c62d5706250703b9844078470cf70ad340e2c30a94571b7a762e8bdf81ba289782faf13f6583ddb8f7b7263fe5026312b6bd5c09fdd63c911e5f737186c579e030f778261e", 0xf1}, {&(0x7f0000001380)="34b091c286f83e2020891eb4969b7f42009c7cf8c3bb6669dd3922bd7998408a58c685341289f6d018b5b6c5", 0x2c}, {&(0x7f00000013c0)="dd03c671e5459385494729e5a8adf14573d9d77862fd54481dd58fd456b0ba54fa6c3fe71d7d066e06ce1d17094dff0e127daa68b59bc30abe5fd043332b837c0dc043939fa079fd15df12cbe7b16a6fb90e2c6f81733025ffca574331062e235652611a3822685e81f10f306de542413434b3554638b03f32350e", 0x7b}, {&(0x7f0000001440)="ee3a95fc27085135457aa4e5610e0d40e0fa67aaada06f8506cc78bf9374a80957f7b4266bb79770c4d59fd01b053bd8ecc62aa932b9cbd953cb70402d6f96b092c67b1e22cefe628d90d7913db26a94034172355fd2e8bcab6bd08f3afce3b5a0350455df734b77dc7c5b5525039e718757617556ec39088ea8695b09d2e6ce7be113092f8467dc9f7c8d85bd233f0ecb68aea9e0cba29c69", 0x99}, {&(0x7f0000001500)="178b0d0e8e7b0c5bbee975ae8e6a07d65f5510abe96a23365eed44fea79341ed180eea93959844416f23a71af648f9b78ea0a7159cc5e86f1bcefe1c40396f699d83", 0x42}, {&(0x7f0000001580)="4bf28dc0d8b2ee95690fa7b8f73beb5e16579ed4d512808d0e3ac5caabb48397792b5104ebcf19da7e83879d1ae020fe66562879c576da1163c81d4bbcde2f604212c27e5eca59de449cc272a212ba35cd478d78d07605150145bc7b95a436183f9deb98fb827df2eacf45350845ec6d5080282d757bd70de243ad3ceb901f8bf4697c52277b6d368b31fee74121ebb85aba44ce277f4381b0bc3d192f97f68d02cd8f00356ef431252a634d493769ab34d8cb306f696a3fb1324ae2c721164b5d870e1c5252671549f705ba3da9ffb8baafbcec806f6eedae8a91f514ebac2a2b6bc0b356b0006510717a", 0xeb}], 0x8, &(0x7f0000001700)=[{0x20, 0x113, 0x0, "c660af6d534c8a907ac9afe0001391a1"}, {0xe8, 0x84, 0xa82d, "0737b23f9f7b0ea8f54059839686f15219ee94dd58dcd3f8b392aaf7d5bab986932499de53cbd145639c0c269abc1865efd72743dae8336e499e1a503f31ffd1fb7fdd0ef406a4a841dd8b20a8a7b1f3de6397f254ece97ae7784d745141df3432bc251fdda826a13427034da8317eabc051b1c7a5bc492b711af39e171cc1ac8239ae4ac5728f4a79e26d8125fb669844192181d743540884bcb7abff49cc0fc2bfa16658d3e4faca302753fb992fd1f7fb17436ffd4c5b2457bd92e6e0050efdd3e6d932019ef24a35bc108f3038f84cea4804af"}, {0x50, 0x10e, 0x80000000, "a9ce6c7b4df6a40363e729208f2e81d4ad9e4c1ed3ad6217f33f23aa7b839d7d59aecc98245c54bfc476bae3b27bd264713f899ff48cb9915f638fe183cbf0"}], 0x158, 0x240000c0}, 0x38) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000018c0)={0x0, @dev, @local}, &(0x7f0000001900)=0xc) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000001940)={@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) nanosleep(&(0x7f0000001980), &(0x7f00000019c0)) 15.689581216s ago: executing program 3 (id=3676): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{{0x3, 0x1, 0x1, 0x1}, {0x4}}, {{0x1}, {0x0, 0x1}}, {{0x1, 0x1}, {0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x1, 0x1}}], 0x28) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280), 0x4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/488], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 14.557145207s ago: executing program 3 (id=3687): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r3, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) (async) recvmmsg(r3, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000280)=0x7fffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) sendto$inet(r0, &(0x7f0000000200)="92a6c896b10b3df23f99ce5ad3f12c7edd45e60264ac29793d536c220661f2b82a483bd5dcb9094f766bb6adccbd9a73807e63de07fc6f3202079566935eec3c86056c4ea6c018d6f4a1562afc6da17b8530c1980e0689a372cd286f65afe45a12f3caaee1da136535faa48e", 0x6c, 0x40000, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000200)="92a6c896b10b3df23f99ce5ad3f12c7edd45e60264ac29793d536c220661f2b82a483bd5dcb9094f766bb6adccbd9a73807e63de07fc6f3202079566935eec3c86056c4ea6c018d6f4a1562afc6da17b8530c1980e0689a372cd286f65afe45a12f3caaee1da136535faa48e", 0x6c, 0x40000, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r7, r7, 0x0, 0x4) (async) sendfile(r7, r7, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0xa089, 0x4, 0x1ff, 0xf70d}, 0x10) 13.545082713s ago: executing program 3 (id=3706): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'pimreg1\x00'}) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}}], 0x2, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004895}, 0x20004000) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @local, 0x0}, &(0x7f0000000140)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x8000, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x0, 0x2, 0xff, {{0xf, 0x4, 0x2, 0x39, 0x3c, 0x64, 0x0, 0xff, 0x29, 0x0, @empty, @loopback, {[@generic={0x83, 0xc, "5ef02a706e7cc90dd60e"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x92, [@empty, @remote, @broadcast, @multicast2, @remote]}, @noop]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000006c0)=0x10, 0x80800) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=r11, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x10, 0x700, 0x1, 0x9, {{0x9, 0x4, 0x3, 0x1a, 0x24, 0x67, 0x0, 0x80, 0x2f, 0x0, @broadcast, @broadcast, {[@generic={0x86, 0xf, "3309dea76f7c46ec193787000b"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x8000, 0x3c0, 0x1, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0xf4, [@dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102, @local]}, @timestamp_prespec={0x44, 0x34, 0xdc, 0x3, 0xa, [{@private=0xa010100, 0x4c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0xffff7f16}, {@broadcast, 0x3}, {@loopback, 0x5}, {@local, 0x7}]}, @ra={0x94, 0x4}]}}}}}) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x400000000000001, 0x80, 0x0, 0x1bb, 0x400}}]}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x1, 0x0, 0x5, @loopback, @loopback, 0x10, 0x20, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x2, 0x10000, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x700, 0x5, 0x8001}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000900)={0x218, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x218}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 12.753869438s ago: executing program 3 (id=3715): r0 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x75, 0x7fffffffffffffff, 0x4, 0x7, 0x4}, &(0x7f0000000100)={0x101, 0x1a92000000000000, 0x5, 0x3ff, 0x5, 0x7, 0x4, 0x4}, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x8, 0x6, 0x298, 0x1, 0xeac}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0x7]}, 0x8}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r4, 0x1, 0x6, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.510463642s ago: executing program 3 (id=3722): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xfffffffd, 0xffffffffffffffff, 0x5b0f9f04, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0x4}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='THAWED\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000001a00)='FROZEN\x00', 0x7) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES16=r2, @ANYRESHEX=r3, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32=r7, @ANYRESOCT=r3], 0x254}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$alg(r5, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0) read$alg(r8, &(0x7f0000000a00)=""/4096, 0x1000) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x20040040) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 2.678943966s ago: executing program 2 (id=3830): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000002c0)=0x1, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r4, @ANYBLOB="18001d08000400000000000000003f00"], 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9001000010000100feff000000dcdf25fe880000000000000000000000000001e0000002000000000000000000000000e2e5000000000000000020803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r11, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000b4", @ANYRES16=r8, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002600d51600000800270003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x884) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcdbdf2542f2f4000800030024f39a57c2eddd1c08e50c55e028b325bb69f0aa1005ce934a473e6425a4351ea938eb49a945726906c55d201a25170396a97a77c924cc94d74aa6a59efacf80d9f32b83970e23d760c28b21ab7f6456e8382a33d3c87c7c53e6f6dabb96314af4df7895510cf034cef8e19b024e31adf4cf", @ANYRES32, @ANYBLOB="0a000600ffffffffffff00000a000600d7f760212b0600000a00060050505050505000000a00060050505050505000000a00060008021100000000000a00060050505050505000000a00060050505050505000000a000600ffffffffffff00000a000600eae2d901c59000000a000600ffffffffffff0000"], 0x94}}, 0x40) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r9) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r12, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xe, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000180)=0x6, 0x4) 2.332011494s ago: executing program 2 (id=3834): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4040095}, 0x0) 2.210159886s ago: executing program 2 (id=3836): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x0, 0x4, 0x3, {{0x44, 0x4, 0x1, 0x3, 0x110, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x27, 0x2c, [@loopback, @remote, @empty, @remote, @local, @multicast2, @local, @broadcast, @local]}, @rr={0x7, 0x13, 0x2b, [@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, @ssrr={0x89, 0x27, 0x2d, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @rand_addr=0x64010102, @multicast2, @multicast2, @rand_addr=0x6, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x34, 0x3, 0x0, [{@rand_addr=0x64010100, 0x800}, {@multicast1, 0x5a4}, {@remote, 0x5}, {@private=0xa010100, 0x5113}, {@broadcast, 0x9}, {@multicast1, 0x8}, {@rand_addr=0x64010100, 0xc5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @timestamp_addr={0x44, 0x54, 0xf4, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x6}, {@remote, 0x800}, {@loopback, 0xfea}, {@private=0xa010102, 0x26d}, {@empty, 0x4}, {@multicast2, 0x8}, {@broadcast, 0x5}, {@remote, 0x544b}, {@multicast2, 0xfffffffd}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff, 0x5}, {0xffe0, 0x3}, {0xa, 0xfff2}}, ["", "", "", "", "", ""]}, 0x24}}, 0x0) 2.173164353s ago: executing program 2 (id=3839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4e4566f5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x7, 0x6, "bb126e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x1658, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1644, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_KEY={0x198, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "70b76b63556fda3a62b649884003f1e41d3618f58b1ceed6351a9e40cc8afd224ac0849632657ae0171c43"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "7d3f419f59f723bd48b6892d6d39a21021cd11e44c99a07e3b3bd0bb847c21180c1988bd7bf099146a2dfb9b60ca34c3e1974ced0870fa04c2fab8c86ac4d5bf8c4b271af06f770c0295992a929f4cc165cb071dc13d03eface32008734d2c50a00d194a7a8cb3b032c3edba36ae08aeba1df1e750cfa70cffcea8a2925957fac6651de4c1224a084a62d70dabe9b4ffe12362ad90b0df1af0568e1ec8a8e73f4b1299002bdbf8410e84a41f4bca71f4ddb5a0afe5d320e38058fa5ccdd3529172579f4420423ee7d673f60db941afa0a044778f4d8b7c0ae6fba7a98f9eb1384d9a2ff4359bd4ed25a9ad3a274d40dfbbedacbccd"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x100}, @NFTA_DYNSET_SET_ID={0x8}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x7, 0x1, 'hl\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'sctp\x00'}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "e8ff65075f737566f45b9a129c695e9d7c9616f0ba16e54686e61d74fe785318f820ef81f83cafa0b5ce975d53a1f50e9b83d1530abc9343b67d2b77a9d54af8035ea7b7ee2aaa8f309b3563635e999a6c0ab3b35db1fa442464e9374df48ffc7d1107bb92"}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xe5, 0x6, 0x1, 0x0, "bae3bb6e7aa7a60f42a8d6c82ca18f5d39434442ddf7caaa9981e3dabeea4b3323eefef36c2fd068d136f3ba5daa732da0d59236c29bfe217a49ef2d2044f38e54e1bc4c164188f7ddf2b9001513053e59fa6ac95a2c3ed1b931599fe890798eeb0d22f350b010d92532ded9c97f71da3523de2ddc5db81302fbe7fe61bb408828378185cdaa4d7a6586da32c7c73248d305b3b6bdd24c2189f33029c97c7d5c8f55bcfec08808ef0d18e91971563d8c2df022ace8c48ab42d57feeea11c3e9fd7ca7b4ef24cd556c293f8540bb896423748155981020a192ae9c2b63dc9cf1898"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "1d0dce4601"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x1d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7f, 0x1, "e3fd028a1d1762b18d07106652dfb86174102e571af54f1423e07ca24c101374975c64ec9fb7b884ccc33d89f433bfb922eb0c87d6e39e4dd819f5973e2a61ecf75db9d82539cf43a99f1d1865aec93909e0aea9e79bacd092a3af7f5cf33a0e116a91eb0d9f48be16af014ac2bc44ce96c3c8954b48a4bbbfc377"}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8}]}}}, @NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "800fd3e3060fee0d8217616d8a4e5d7baee85f5c8879594b8aaba0e3afb8c1702ad438e2360353813a3ccd9f03bcf5eaee363f031033a54e8d4c2150d836dacb4b22117432226983555bc3d5fd341d4d3ddc4a0b4ba409f9c8389001a56c0af5bb51a5b89515396628e21ff7c3b606e9399d"}, @NFTA_DATA_VALUE={0x84, 0x1, "59090a0899a2968c1712645bcc7b14e62b8902b981ea00ca728663fa325edb72c26f5a391e1d3972c8d9cc97128986f797224540024469adf5785a554ff7dd55a65ad0500fb92c7e52544889b5b838c9a1f16eec95f6df32cd8a2ff866b31adaaf7a2121dcd8287d81686c436e9bd629d95024e82703736aed553709fb5b9afe"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x1048, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x1030, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x1c8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xf8, 0x6, "2aa0345261c8d5c59dd123cac0f4839a04d37173554e63f02ffc0a044011d35f1023293b65d4a950e6f7513490f4a569ee39ae79635f89a6bf433f3f767aa2926a521a9bdd0d26d53f8df3e8566f67d38b5524f0614cbf508eab2cea05f6fca360e89ec7f4d5cac7e7b8b67fa58b4621696b92bcda0d8c185e5f04bc050b5c46e91718464ba58c9f6097cca6ee171957a8735bf8170bfc109b2e455d1af3e311d4a59bf2c267e2c1a355e817c17b4c648282209c8439bef1a3fd83d4836d4cae54c2d296b9c2100fca741297c3e93929e88dc08fe162c277dbfd8f7c16dab1f443196dd5a886e16bed99b0846bc074b476a4313a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9b, 0x6, "53692b0579a4b89a59ae3580a2d994824fb523b4dfd30d6133fd8c8b841a8de8a6238c968309bab13d87ed4aca8b3f3e90b0eab34ad77eb2b5349ee7ae7e8f5b52bf2beb23a2df20a08f9d65c2d879b40b3a0a9e6e6eab3e62735e2a4dee70e8f6e4df6a0b1d5f6a445198a4445d0bfb9c99b56c46dda7e7f43d2b89b170a65ec69cc1db534141bcf2b74154f685895b62d1b9c3030fb3"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x19c0}}, 0x8055) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.10392875s ago: executing program 2 (id=3840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) 1.976746181s ago: executing program 2 (id=3843): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0), 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_genetlink_get_family_id$nl80211(0x0, r1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) close(0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.3990256s ago: executing program 0 (id=3852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0x1, &(0x7f0000000000)="0dfc0e6e94317242d55f29f6ac72295efc7247a00cbdca95be183a715627711c471556766ca112f77317a1bf9e54ac8d286f876c6ecf33b1a8c292f6ede12ca2b06c57e6b2eb43e3141e99b0e2", &(0x7f00000000c0)=""/180}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) 1.281156433s ago: executing program 0 (id=3854): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) close(r2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x8, 0x2, 0xfff, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xdc, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@llc={0x4, {@llc={0x6, 0x8e, ':', "3d6a92e4a8df774a2405b59ca66b5b46b3e1521e80459233b1f1f525b9b7d6bab55de7b08dff0f00220821539d9135b577d7e0bee80966472c3b44846fda7b83fd2b3995d7f7b999402c42a41e6853c0d3b4dacbf7c688c2a1aea9c0bd026f0b6a95e4062b93b6af9e0849ea32033e0c39d3b2a851f1cfe0066d7fa5ad8c0f608c3585cb0c7f0509b132cc9c0c7c0df08542be395405b75865978222c0a5a638274b5b5f0ad052e0a485f97f14bc8352f0d460bf9695d0f9756e168c74442d4e72145a34f34010"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r5 = epoll_create1(0x80000) r6 = socket(0xa, 0x3, 0x2) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) shutdown(r6, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000140)={0x60000008}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000180)={@empty, @dev={0xac, 0x14, 0x14, 0x31}, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000010000006d05000001"], 0x50) 1.127648107s ago: executing program 1 (id=3857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (async) syz_emit_ethernet(0x3b, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{}], @llc={@snap={0x1, 0x1, "f31d", "a466b0", 0x8906, "e4ff6dc0859512949c71e8dfe3449ea0972943cc57d41107dd4300ec"}}}}}}, &(0x7f0000000680)={0x0, 0x2, [0xb7d, 0x5fe, 0xaa4, 0x673]}) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x38, r8, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x8003, @bearer=@l2={'eth', 0x3a, 'batadv_slave_0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r8, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x80000000, @media='eth\x00'}}}, ["", "", ""]}, 0x68}}, 0x2004c001) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600780ea8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40052) (async) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r11, 0x106, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0xffff, 0x1]}}]}]}]}, 0x38}}, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r12}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000}, 0x94) 1.008042451s ago: executing program 0 (id=3858): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) 1.007439465s ago: executing program 1 (id=3859): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full', 0x20, 0x0, 0x20, 0x1}, 0x2f) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000004e80)={&(0x7f00000002c0)=@generic={0x11, "3429208cdc64cd8021464375b2c9f23fdc619f880bdd6c49b0b5b2b6f0b427ff0e6529509690fb36bf6612e6a9f3280a5ad677553c01a8ac34f50b5333b663d4bed0b32499a37b8c33e43bd21b7cd714d943ef893726b08a4a91424f93f3fcc9e2bcb6e0b8ef7753d5b38b9562a595527ebb083ea686505107fb4cecb794"}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000380)="d96383eb46ac952a6c2be19512139a2f0484c8369eaded1cb604cac62841bedecea805b66231a6747ab6a6701cd01b393867465674758e8e1c92cb5160174087f943dae9eccdd7252a76f1505d54db0283a1528a33fd56828a39d67cc82d6465c8b1b9eb2944cb02e78f779f224a99b11e59da1b09395f47f5260a119a3ef49f8a6dd3036d194f3561242fa8c9f412cf24815d9cc5ede05c2c10bbdbd5335856038ddcc5bda59014eeb86adaa5a51474f8b86e1d9e8cdfaabe8d13603946ad5e1f9c218a042cf5a376d45db313", 0xcd}, {&(0x7f0000000480)="e4eedbdff6a7a9ce007b08fc7fd324ae0b816a606c6bea516a17e9c095cd3bbc3ac700597558b7e603e2c8f0e8221c4ae7816e2f2e6b9633dd021ab62cb94bdbe18feab218741d63bef6767546e53a6381c227d230afde1cafec774b0aef1b7f7743fd21e4c35dd026493d732567db5f5acd43bda2768e59a80f89a82c183d35779e528d844c", 0x86}, {&(0x7f0000000540)="198be6c5d9cd56cde97c696dab88fc24d7d1256d388763fd69426be7e1960cecc617bb6d2cff2cb84f197b8f2bbcd685637dca085f27665937b3697e6cfb145bdce1bb39a39b587a6991014c08790c5453de0f99ca99a93b5da1946b545796b6ea122cb724644401ed7f4ffc9e035e538419c984a8b439d1c14df6951af6608f260365e83d82f56249bc5c003dea1f80c96e48d8e073acbae9edb310211ea0421e3fe8cefbf78b53cbc23719db6a9d8ff70ad24abe9a7286e9291b642377e9679465ef75fd6c6f75840a76e6fdb0f07f3acd8a4e8ad5c39aa773b11cc2f12dafa3e8412dc6a6fb3767ba50f7974ef332cc", 0xf1}, {&(0x7f0000000680)="e06f1906e11d94c59dc27a113d9dba76b7e61798fb89993a1a761707d2af9dfa5f09d2db961f1a175ac73e01ef9ef9662c17560b0320a49c8e5510c39236348c89653893fea68ef01ebad86850b4dee249e621a93421a0375691258b4c2d3e1015a51ff9cdf4c5fea38b03452acfa73dfe30615bf548cbd837563f262e8a357751d5839ddc0889885ce5f9855d95b30779473ea7a5c4bb0fe54f5785bfcfcc5afa0ca777bfe68149e19a172f3ca5437b3137763a96aeaa59a0360d59adf9e58ee36fef44c2e961c3f985292ba2574419f71dba0ea8742e4759c7edbec5487951df83515e5164011d8fcbb06b87374d5e7239", 0xf2}, {&(0x7f0000000780)="08e01d06", 0x4}, {&(0x7f00000007c0)="99637e0f6983e1c338c02fa9ae7d52d5fabcc7b20e2b579b75104c005bd1a07c2cf3ca73c192c8a683ada20d587d340e7d48f58334c28a95026850c9f576772b783aa8e882", 0x45}, {&(0x7f0000000840)="09240568fa5e7c5900065b9b67e8c005d7bc48047e7862e8f2f9e1f6207f5ebffcc1a5ece332833f1733f218de6b73097537617087a0afdb174f3ddfc5612dcb9e612fac6e4343053deaf862767d8ed3b75798b544326a5c03279e132fe0a0755a0f43270afaab34667a096ff653871109c13389c2edef6a0e4c3e0e14db73d3dc2a1affb037edf86cd9b109f22870dcc311e5ffc657d9ad446c", 0x9a}, {&(0x7f0000000900)="31ef7c5c9e0a483dba5614c12a31b6d4d4e59a1aad653f07af4c79d9cf102dd11ff3ca32b718023ca7577b8482327906f4d6ac856fd90b134c0d49e0cd07864c81b240c590746f77443835e11b69c7e031084db0f9939fbd48fc6fdb08968059f85d3209b48512bb23261a14ba686f8e7ee3f554591b9db7ed9149388ff83c0b81efa1236c81e6c7f8899f86ad7098dd3718594995fbbf62fa3956eeb42e5121b0470929904ebb37c5a19e7910b669f61b6d30ec43fdbe027e07d53b727681c7ae118d794548b66f1d9abb11e1", 0xcd}, {&(0x7f0000000a00)="5089d497fa4699b93085f761a58b1e14164c5405cebfd615c6331939b5893c3e7636681ba7035156f05d1b82a25103df75c54ce54d9941e5bfdd3642f87356330bd8954017aeef98953f15e48d852bc27c4ca5819cf646d91ede881e1d4b426548598a78dd11b938490104756a1016e8f5389895e732d3913c77b0a124e7ffa3078f5ab5f3d7ce366503fd7e5b6d484a319059b1b217236b6eb384a7286609ba3a3d613ae9d28c271868bf7d92c9d1f270411bb68402ca1b09c28c0500410767621d64b26f6cdcb76875b5935121322ba5dd9b07eba3533d9708b69ee3386314ac454a727a5a4431aef01ad921f9391585b67655f1abf81d7f", 0xf9}, {&(0x7f0000000b00)="970dde6988b3e849c14ac62fd1068cb5f2d82a67570f86953de72acb3d709c2b53bd698a881fc28c663e4676c4a14a6976954f9e6c42d4c94b54719599f59b067a04c7806d497ca47d02de73501ce15ee10ba236d48133a4833eb9ea43c9a690eefd7b7f498d5567b426b934c989ecd55d2b601dd81b36b493dcc2f125416ede2673033e59d2fca97ae7f82b6aeabc1c7d11b4309383ebf8bf3c15888c7ac428af11421d30ccab0716f11ed3b8e78d54b7563729ae05701953eb0e337e94ed41b00bcfc6c81cc78b8f9016162853a35a0d868e881aa3e3f427dfe4", 0xdb}], 0xa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="a8000000000000000f010000050000009b8b619b3a06e4be3564925b71de4efef78d166758c905d4419088b7f87a0ad0708f62e5aec81196d3d31860582ad654cba811bfb8718d39258bb5617fb0591b91fd492404935e5159a5df1ad1914953db22750c17631a5a20e08b6b0c9c2f17c70a56f09c6e310d7dfbcc7692fac2c2ec3471fc0d0b2dc268c904f2c0a8182eeb1df8ea6f3b2a4c1b0c1192cb9e9323268a765f6c696698bac54d336fcd78e0793b7f000000005000000000000000190100000400000037ddb7e432b24e41c3102f29527903a6b74943bcccb808a02db490d444c00928c403a7afd4aac8a25e52aedbd4be69d64d47fe5dcb3db14106aaa0f9bb7f8238d8000000000000001401000000800000f4c5ff60b2afbd6321538ed9f5c8410c2a95177458d7ccf5164a24ee1cb23e466332f48da441abbef7cf4fbeae0d253f1ecc99d31938d183b42fd01746979d1383f8f914308fd33baa6ca83bce12d8da3b7b7dbddc46c1a85f7a356e04de5a57b65b3f1ab744bfe53ae02dbb32428abdba8b5f1c03c3ae1f5424fd323c3c5459f5102183f121c3bf27d6c9a349c91b5b65542a7a44840cb36343039ac0209a93305c02463e561515e9355a0c677e0985979ab28e2bfa626d000021b24c3a37ae38d61a280a830000900000000000000088000000da5b00004a354c222f1cd4e9fe0ebf320a19413ccc4842609918736e324c4f295a1e4cbf3d016eb79294c79e1663d50017939bb8ed102becfe4a99a36130cb55044d98fb0a2c96b68e8b3e4af672d9f53dbd19036d1713e17ea3c4e917cbc4806394ff9f94bb32ca92afb7dd1365645d68ccd10aed6c23dfb732c3bd58f7a36dd94b14c07800000000000000ff0000000700000062551e60b10425a6c950188c3f02f75bbbea4eceaf53d0208174e7127a68a61c182c69ae1afb50c486aced02067ecddc11ee8b2c5362b026a5d69edb3a1d9c33bbbe7e01cf0f2c1e721cb490d3e6ab50f4b00d5b61d0535f3aeec8b85dc024e89f692bfbe206000058000000000000000c01000000040000724940d28e881a153adaf8c53ae16e3cbb8443376abd1e3d2802ac67d8c425cac25a6ab8653a4a08539ebb4d5961778a4175fd3fd86bd4d396a40000000010100000000000000e01000001040000f450454de9636e962b6bfe86461eb646e6de0714c6e88b4645233bc5a6983fcd6b4ce79319fe0843f0bd87b35f1fddeb054f5818794837ecb5cc15aabd9732d8abc66f5d23413de0acb513d7e7c3fc7ac977387df93bf1ee3e343e7e485b8eaf78f20f5b11c7f0d033951f9fa7c4e8b2ff82e6eb7e05f457c4349aa49150d50a03bbbb269e5a924d116ded12f8d8af397b5b4791b88b99a78ab96e2e3e62ab34cbc5a021b58d4067a9fbfae77dde73ff852fbf902670fc784a9f7861c70fd43ac7646a0492b55ee3b984a313219f3599b7ff0850eacd0121d7e92246fa0921281000b080cd4e70a514ba1dc4d3f1fb6db4e8d945d28caa58acc4c478233516f294df57c7ce6e2a4738d49bc98904de91883e85916f188043802a7abdb95137f783b22649756000ffb577708aee01b68b8ca94d554aab93cfe207215db476b379a4f26083047892d19016fce000c1e4cbd4b6f30613b1cc7b2aa228edcd2580167e378e4b5e77deb6d7550002feacf08d4f0dae4226a477a7ae47fb83fc0f91babdedef0acb3637b7141d2b3d116a9ceacba37cdb11f02d5299a74885795b2dcd9a2d5f6c3881dbb133c9bb668afa4df9027a1870423702277a2463a003960addada02a1055ad1dea7b511d463ed8fd5f661ac71b2a378bfdbef4a24047dc5eb39a870f346f5ceab6b1abd0ce97efb92e8472d103df073c395d727b42ad735b266996eff61d4da50d94ba31de3c3c79883bd5b1e54fe8846421309ad5aaf7419915cc76f04f8d55a8452c925282de1bf952ed6b8b84c069549d70c5caecaa27736a6f0ed9ff81a50a59237c1e9d8ce1884c3a9755e1a4c61e2e44a856ffcec9d91b1a03dc698248f8e729296e0b836b66f4854b5533e9be23da131aa79b3e795bda36a0c7402ee7686535d85aa3dafa960a160568520323ed832ac7e8d4444348b13b009f1c4ed0da08ad7e304875d6f744d2aa58a829701ae5724704c119aac5ec12d52a38320836bd99c30a65ec490a5f948ca9154904e11e15f5af9713e3011b22416575bd859d6aab079a18f616da0ee218c7c00804746f20d90e30432384f4259386911f6fe6345859f9202172e156282715671ac5f0ad0d1bf9ee107740eda6d9449baecc3ee9c543bb75e091f9991e1c60be50af2d9268738c5ba3072bfa026e38daf4657e0ebb3598bce718dc5b44b4e065aada52cf1e9ca054b37f7667a40265c40bebfef3c90e315bdd5f5218a1ac72f5e9c5c82361e7e2c0427aee191acfc0b534e9739a4b9e09a851c90605278beb72d4feca6f8693afd156539e896b9a0ae1e4d4b304800bc8aab90f18fea4421451e9cafb7d309b4b55c98b542ed31d09d086df486fe67546b0b1a7f9d29a54fcceafd9b67db81dc019f7a706f74e9e58e04d0019fe4a53071933fdafa498fe5255a30f1f45b33180f546c4b0076d4f51499cb9383e2b8663087d3c26ff0c96d5be9447e90a97f85d902bfe208181387cc384044041cb535ad2eb70de5bb5c1037c27ab8a328b058b98d4942b80a8538bbda80761d862360a7c15d28c9ecb064d40172dc3f08afde20b170e82724a3bd12e0bb86e0c01fcd8ddcd3cba4b198a514d49700d2e8d9fb8299c77751e8e91fb004b920bf4b5b369c1db3ccddc84a653811e8887e45f168ab4cfc5347513018b6d18df58eeeca5313cb2dea0d820c07baea70302f8acd60a9674932a320181ab9699e1b124a69fa6cec1307fda7a2851f38fa9ba5b8a8d1185290d812f7362952ab6173fec7813c09a148eb11cfcb7f05b033a8443c633284b5d7baeeba4381aa1267e18cdc3e37af6cb3e0882b2c6f77ab9b69fab862f487db2422938d537ce08c6ca0483cea25e4ad9355eb40e2a4ec5c8652356377aeb6eb5ec8c009c1a36c002c416363a261d81aeaea30e996f1493c21d7682b270664da09ac6b13152986db0fe611b4a841e047ef964aa9a60a2ecf3fb667b28faeae9540e2a60245d25ff1a8759d272491598ba9510943bee4f4cb079247368420f0cc80736cf4abd8147e69c974219f8d271cdab21792af46736476bae768a8cf9e4bb284644da85858799a6f7cc06de32e8f6c6abccdf7477955c6204130c885fe949af4a9aa93bde85dc034405f99335624e3012a9bb5ed569298187c57f28e417edb2171cb60699d530b63e044e8edde25b7679532db889046b22fb48680f394482206cdc9fbc977d5a0126852199221fd5a46b73a910ce09edcde0f924ab15c48cd1057ee27c48bda18fbc56f1e02dad52660b9bc6e1646ea93e941f6c659124feef70dad02209c968ba1b64455eb6115deab8b04dfa5ca2091679e48ac699d34707102cb49909f913a81449029e7ae5e3162426f0343c31cf83ccd65a3269df2228da4caba4bae5d7fee2e92de616b9e7c7abf853115187aa72be25de55a501d698fe9874a98d2140fc04ea7f4f1e6cb4fc2272eeb577af72636ac72175745fcf2cd3cff8a7d5856cbe07ce606ce5395dda75c2276857bac775493a25168ccf40fcbcfd0e63e7a41b8348042883a525aa46cbed48816f736bb06497f68d8b37dd32b441d933aeebdb5925517586a97bd5d94f23e51d47a1e70fdefb7502fae705f1af2627155db11232520a06a5db892622fcbc962168c1d1612ad0e4a3fd296543c10ed54a252aa1d18af29a1b50355d19909758e9efcdade3a1e7a24ee169d754657267eca6e2d251932c27b4fe6f0a150fd6f7b91dd79c72f2ee7f6153881031dcec8c148a73acbaf182c3e73306fa59e9dc11c1dbf40bf57f9198d0f4af28fb5a6d15ca9304f810c05ebfa506d7546e06ae97d6c4d7a55e0082e3e4f9b8cc57e8166d5431a0aa5d4dbfd54bd698bdf42ced56527948ce8257c26470002127ad27253b4cdbbffcd68212425ce6d78dc143a299a5a6019cedf515b049fdd019127d1258f7f7fa0065951fc03dd266bc63ba4ee7d000b5c90d411c18205288f04c6eac85ea30532a46f828aabf9ca422e3778c296b1a56444795a13a194f96e8fb8b253d1de6e8e9b5791783fbbfb430fe19f2c5144e73b97fb3e568146e7eeee61dfcb9543158dde72733080e2a81256fd1c0738e72c7b0b24bb8d83d788b401094f2533f77be6658c8e3cfac0ea6ee1bcca2cef18233b240da5de8540c32f56b33bafe1b8a43af2759c5f04fe1529ae1aca868716d9d1b71f44b2458784ddf649bbb48a0cfd87fbaa703215ec9ddcff17ed94aa98601237633a7f13f2bf8c19841d79211375146b16b84a97b2ae8e8d3a57a378dd38632bafb6067e85ebd708b5ab84c27c6e6fda0d87464ceb5b1cc3c846bc8d0a66a5e6b2cb795349da1939032b3f5bd566c74d1dca188fe59b062650f9614dca4f7c874811e3f378edda0dee085ef110f35da8d4cbd25e03ef9ddb3e9d4a6ac9152984d4d70a50f329de7e53ff22574ff2accded1286b119044573e09031901f51968bce29c3603f62f72d595f8d5d03f85f903bc525db3c69fad3ccc2a13bc0048209029ad87ccd673e9b02aa2ecf31c23053c327479388a694b86028ca3eee93827610ffb14d1b9b9a6ff5314950e543feeae9e1bff23c78263ef3b927466776b4b72a8266475e6da0fabdd0bedd41d32bb15f9f78f25452551ab7453986e054346c64204559e2a52e44341ba44cb92cb96f219ba066ec0b22b763af28e10fe6c44fe23bb585e878209b452f1c0fa7150c7ab2a02026ccd5b96bf7e89056f0525eecc934112891f815d898a4ae3f09ca1ce4a87c47b250f1c9ee4817a2a9612ac23cfa2fc0722b0580c5ac642cb9ea792b72e6d0dad7875ef00a13427c32529c9370efae949bd998090c6ea8fed4a54206061e48d5cd3a71813ea61bf64ef2784cc8ea4f76bad4a000039610a47faa4e9fe9aa8aca84681067102a3efb73b66d5a2b9229a89e7b7794f6983bce0d547c61f4e94170a3e52de2878bfc7a307d504f23a66765877af0892f7e18fd1ec24dec4135578d3721bd5f6db4eabfc6f08d0729673e14b9b573b908566736e23b1b56ba08b325436f0c53491ebaa2cb168ad3d8b3d3e137ebba017c63182921de97e27ec02441a223b5673878e9c9b46fb94c7fb531c412e658ff3d897109a3dc04cd65a513dbc3c7107550204c1d8b676ce5cc9abeeadd9e27fa7f99dcda2f17c104cfc4406cbbcd47d9490c68f13710905fde3e503414b1a088032552ae419929d9a14af83e8a26efce5a05cff6b92421d94e27f23c4ebb048f7f46f51d073250111194bc9d7aaa627628436df434ddfbe0d08b6d94c3d374b0a4ebbdbe468ecb1f5c864b66533b373e28dab1a2c0eb7596c9dbdd6eeb08201ebcb1b006ec5b4be719497e28cce08ae8cc42a1f175d445f22f44bd234446fedc0dd44a9e60586207e3a9e18930e0da50aec1ad604a3c193120a62575bd9167a9ba0030def97c487a580b880f1565cdba73c62db001f8f5259a6e80ac934f0cf1267b900fc4a0251927b71b978b7aac0f2e2418654b73a682b307ea0810712185fa6dbe78f564a96bd498c6a820dc07584b15d6d8c0ef5e1eb2bdea05ec00f70b89d64523fdd31e782868984c2d1b027e5e8700ea6b1c8febb5a99ea3f81692e55c10c0724cb8570ea3fef073310681ba6fb49d3074f2d786f9ae7e32049d1b31652ec8802b38229c7d8a75e6b036ba458b8c631cbe40a20d9b8ee8d809d41ae5d2b4b459abdd4a2e85ae712f74e11678e479ec31981af157dd584bf67595daca5f87174cdb297a66969efefbb33df18996923c5b058082910357605ed36c72f4094d4d14f530d4450f3dfaa1e7a27ab92a6de56ec170f844e48888e85e391c35100b412e3931771e12a920de98d474647e6dad5d6f32650fd8eeb798aeb4d1da13e7d98c2e43ca1dc9a533055eca79e4bb3dccbacc3e73641e9fbf417c098feb49830190da3d527647d89c71e85ac11b4d2bfa0a9b364c0831dcc84198acd04432716d59d99895f0e56985a3615dcba6b12fe7e0f79ce8a32c3f665d68fd9130a53d42c53af48ca46118c63f36c4515bae10fc005974348b8da4ab06369e751a89903e13a4b175f4abed2812b1bb2f13245ceb941805d31a154ec292f8b30908b53334e0b10761f674e49a9c17973a8767da2189c3037a4af20433b2df37ee9665544082e9c0afdf274ecdb39a1aaa9bdebae00df07ad79e10dcace5aa17c1376aea74d1ba0d58119e62b155d8d921e877b1fcb6f28f339662dfcc752587a08238c8fc0da5d13a58a9ba77e889790580abb14823c83784fab3ef1af096b67433e4ec1cb62714b8cb7f96aec4b739b403b167430389df62ecd4c8852fb0f55bf786ed3bcebab04f63bf5d7453bc34abfe785ae6a8cd801b58f8df61a61492e3b6047f98dd4590f8bd3be2d797397045ec567c1603b499034f524b1eb2402dcfda71f344e9d377ec5cf415f0c821491cd3918a8a992024ad3bae4a91102944907b23e4df285c7f04871915c1f3997a6d78bd5263a9d3989e5b94f3169f2922c89fb6305a5cb1e59fe7c577eaf3f9998d6a22d8710ed38bde3b6e1016c797a5007d5093149bdb4a996d4c920c11c6b080a5b1571c0cfcbb653579da6936eba3a3816f9f0ed7e06cf5da3551cb8fa3170147247524018e28623db01a195b54fc7d0ecde8c64d649c8c8428be90f2a3117fae91da4ade372f59ad53f88f0d0dd36ed40f02857c4500fd859605a71e043559da55243aaaf12fb0185266f613088e1ecfe651e704fc979dd4fe3bd4b0609e779ef3d12a550bb905175ceb345390b95b8f6f580ce041070f4b27fecd070d11491d072c0dd020801000000000000060000000002000050ee46431b615929533edf26de4fb519b0bd5c6b5351220b68f732ae13abb02a60017ae9e603cff646b324d638a8e76b0b230a3c0f6711d9c708e21826ea4070a50ec15c049807a288622c872b6b824da3c272c91ae64beac0f34f4c4dfc945d8e637dd045ea1da1a047670ce263b1b5b9128c1eb5ab7f7ee6914aab791bd76ab64f80dc22e07998c7ddda375ff984bc9bdf6c6b83c3aad60c5943b0a6458ea8906ac04db9f30e800154e67d62fbbe6960bc9880b78a75055627acca5b4c782a35131e07c3b8869d2ca5f7f9c1e0eca713e75af4c819251c4093c7b76d4c25c8b00975179b48474adfbbffb9d54cd1cf6a26b96c000000007000000000000000e200000005000000a3bb7b1f44d0f1e6206da028551ab0fc133e91b67bde24e139e16ac9b3727118ebc13cc37a1af9f4a831d827b3365b069f5ac141bbd5365338d48af6aaf42459194fa0c3a6d852ec4b9a65c1d1331ec19a954739b96357dc47e000"], 0x14b8}, 0x8040) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) close(0x3) r5 = socket(0x10, 0xc0808, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x24040051) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) close(r11) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r12, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) 995.203591ms ago: executing program 0 (id=3860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x20) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmmsg$inet6(r1, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xab}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="5d39e3563f2356bb7cc1ee133bf22bfd8d756c0708d8", 0x16}], 0x2, &(0x7f0000001300)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x33, 0x10, 0x2, 0x4, 0x0, [@private1, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x0, 0x7, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x6, [0x0, 0x4]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x81, 0x2fb, [0x2, 0x5, 0x8000000000000000]}}]}}}], 0xf0}}], 0x1, 0x4000) 946.744988ms ago: executing program 1 (id=3861): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private1, 0x0}, &(0x7f00000000c0)=0x14) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto(r1, 0x0, 0x20, 0x68ec, &(0x7f00000004c0)=@phonet={0x23, 0x6, 0x12, 0xd}, 0x80) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x50000, &(0x7f0000000200)={@align=0xb, {0x80, 0x4f, 0x10000, 0xd7}}, 0x2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x24, r3}, 0x94) 869.031878ms ago: executing program 0 (id=3862): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x11c, 0x14, 0x400, 0x70bd25, 0x25dfdbff, {0x15, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "0bef68974d396573eeb0ba94117319609cfe8561feae4b2820ff1536ca52e0725dbf0b41073759412549ec26f4df9044613060b6d5aaafb41d40ebdb709473f1ae8a8a7da3ee5de076b992ce59ec87ef944dcef1a27cd3c8310c25e0b5ab6a1b12ee64199797fc95b5d54a269bd3f1c73e37052b23bb195ee2aa8a2087da787d94fd95eeff16d98ebb0cb9be130450bfc3ff3f852798137c0877d54f9f13abaa8c9956676eddd39bfbd25e2928edb8485320dbe211aec94dcf06fa6da60929708ed3cc019569d3c9a92ccea2e697cd"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "dcb97552b1e88c1dc9d342829a3eb39804655c2c"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "2a847ef183415102a5ec27ea96dede9707c4800d1426"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getpeername(r2, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1e4, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf8f0}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb52}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x23}]}}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x203}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x844}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x14}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4c0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xaa8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6ed3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xc}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x9) accept(r7, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_FW_DOWNLOAD(r10, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="190c2cbd7000ffdbdf2534d874fe"], 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x76, r4}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRESOCT=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_generic(0x10, 0x3, 0x10) 867.075382ms ago: executing program 1 (id=3863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) sendto$inet6(r0, &(0x7f0000000840)="a6e0775c40424ae2fa17e3edddc8537453", 0x11, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) shutdown(r0, 0x1) 787.543377ms ago: executing program 1 (id=3864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/54}], 0x10000000000000c1) r2 = socket$kcm(0x2, 0x7, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = accept4(r2, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0xbd, 0x1, 0x5}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000400)=0x84) 557.837244ms ago: executing program 1 (id=3865): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xfff3, 0xfff2}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x15, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT], &(0x7f0000000d40)='syzkaller\x00', 0xcd8f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x800) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 332.761496ms ago: executing program 4 (id=3866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x94) (async) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x60000100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r0, 0x2) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) (async) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x3) (async) r3 = accept(0xffffffffffffffff, &(0x7f0000000500)=@alg, &(0x7f0000000580)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b40)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24048891}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x16c, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x62}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x22, 0xc5, "5e47492be21a5005d313024fb4a17b41a8f9c0bf4e4636920e2d4cebb5af"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe}, @NL80211_ATTR_VENDOR_DATA={0xfc, 0xc5, "d20ac22997b0499115f49c6e32b24e4765952441c29be6b343c21bc500e2193c4fe390864eaf2d922b3925f8a5473cd112e2f3bcae23b42ab706b2d52de727d84184dfa5bf3db0088439c9289a32d424890716db41271b6b5734acb374955128dd4a64ccd3b9febf422349d66491f7dff50e95d07e77fc1e33913113022e35a0819100508b72a494951ae961e77562c46bfd768f2899398cd520e018bed5d793f18db5cc863562a9d12a6d160f1ca032dc2364a842c8eb98dcc93c7491f8fdc02b8207a5d9b015bd7f8ad2ec2ff4d2e6693a647dd9cdf38d9ac418740690003642d1b92cc8b33973baf52a6cd343337d8643d28ef12a7c80"}]}, 0x16c}, 0x1, 0x0, 0x0, 0xdc04}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 332.262847ms ago: executing program 4 (id=3867): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x3f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x3f) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) (async) 265.067499ms ago: executing program 4 (id=3868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000180)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000001c0)=0x28) 158.05499ms ago: executing program 4 (id=3869): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) 81.856828ms ago: executing program 4 (id=3870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004700)=ANY=[@ANYBLOB="a04400005200010000000000000000001c0000008b4409"], 0x44a0}}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000240)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r10, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1000, 0x3, 0x10001}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x3c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d8}, 0x20004804) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) 21.17829ms ago: executing program 0 (id=3871): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r1, 0x3fcb7000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000780), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x22c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a3eb0b1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f258a20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74db8b7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7926f9d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19d77612}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1a0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cfc4784}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c8bfc19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x480d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c89}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da32c4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b33fcd0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe0eb7e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x262a5ba2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x277b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2be40a89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47b3f3f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b573039}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x190040c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7087c38}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d387883}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x171e28d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2955ce7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27705f6a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53cecb40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c7c43ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d7c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe18f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x86e969b}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8390}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa40a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd52}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x687f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x709d34bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7741ae54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29aa}]}]}]}, 0x22c}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000480), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r9 = accept$netrom(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @bcast}, [@rose, @remote, @remote, @rose, @remote, @default, @null, @rose]}, &(0x7f00000004c0)=0x48) setsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, &(0x7f0000000500)=0xc, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x17, 0x3, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 4 (id=3872): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000001500)='syzkaller\x00', 0x220602, &(0x7f0000001540)={@align=0x800, {0x0, 0x2, 0x122, 0x1}}, 0x0, &(0x7f0000001580), &(0x7f00000015c0)=0xca}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000003f00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x10}, 0xffffffffffffff7a}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001480)={r1, 0x0, 0xc6, 0x0, &(0x7f00000012c0)="631826a8991c1d0b2b7d043647977ea5b9a1f6632a1847614f0ef7ed3d18d4e08d999df1bab21c0a69632e9e5e5604a7437468faca23a0051a40972d65467bdf80e66afc4ff94e7c911fe0f99423efd993b2727d62a2a350f35516440f1e7bbd8058b7072da3f6b3b95ab138f1d5de94ab3a95b7f03cc2d8d014183a54f06bae99e0e291f27981fef9b81f9d60cfc959f1f0bcb9865c73323c53f8faa3cd0db107ca1204f47ce9ba0491bf6cfd3cb0630f5d7b4d0159fc6972d851ea75b946461e47a8b95792", 0x0, 0x7fffffff, 0x0, 0xa2, 0x0, &(0x7f00000013c0)="013779381820dfe4c248bdfed5a2eba23d1f7db682aeee444edf5f694861cc5cf09ccf5a2e564e3bd9162b3ac7e8b99aa75063c23ef8be410fc8f930689dafc09e8527bf45e86842b84aab97770da9bd636330fbd060ad2ad9dca582bca947d1fb39d54e2abf1ca3408fff0ac70ef48c52471babbf520c4a6eadd53c4dc2e67413d28e2ae758914876f584cadbda2955a1b8a3c6daecde6894d630933198127adc6e", 0x0, 0x2, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r4, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4dabb91b40b8910ee5d25a094d44f96c757285cde32150f1"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x41000}, 0x48000) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000002e00)=[{{&(0x7f0000000640)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=[@hoplimit={{0x14, 0x29, 0x34, 0x1ff}}], 0x18}}], 0x1, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000045835bd33bf0a396f0", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x3c}}, 0x0) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 0s ago: executing program 0 (id=3875): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="07092600adc0e33f8b00000003000100"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = getpid() ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r12 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r12, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) sendfile(r12, r13, 0x0, 0xffffffff000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r14, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r15, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000200)='$\x83,:\x00', 0x840, &(0x7f0000000240)={@_ha_fsid={[0x1000, 0x4]}, {0x8, 0x4, 0x8, 0x81}}, 0xffffffac, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x4}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000200)='$\x83,:\x00', 0x840, &(0x7f0000000240)={@_ha_fsid={[0x1000, 0x4]}, {0x8, 0x4, 0x8, 0x81}}, 0xffffffac, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x4}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042dbd7000fedbdf253100000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000005e00000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="01000100", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=r16, @ANYBLOB="0800db00", @ANYRES32=r17, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): id length. [ 269.476074][T14505] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2282'. [ 269.486387][T14500] netlink: 'syz.0.2279': attribute type 29 has an invalid length. [ 269.625452][T14509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2285'. [ 269.746716][T14519] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 269.906808][T14524] bond9: (slave gretap2): making interface the new active one [ 269.916103][T14524] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 269.954307][T14527] vlan4: entered allmulticast mode [ 269.974454][T14527] bond0: entered allmulticast mode [ 270.020530][T14530] netlink: 'syz.4.2289': attribute type 10 has an invalid length. [ 270.045619][T14527] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2287'. [ 270.081688][T14513] wlan1 speed is unknown, defaulting to 1000 [ 270.119581][T14536] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2291'. [ 270.168312][T14541] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2291'. [ 270.228188][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2291'. [ 270.271247][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'. [ 270.294432][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 270.302538][ C0] lec:lec_tx_timeout: lec0 [ 270.307615][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 270.325793][T14545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2292'. [ 270.733736][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 271.710067][T14618] x_tables: duplicate underflow at hook 2 [ 271.992771][T14628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.133080][T14638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.464221][T14653] xt_hashlimit: size too large, truncated to 1048576 [ 272.574974][T14660] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 272.719114][T14660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.825499][T14668] vlan1: entered promiscuous mode [ 272.830648][T14668] bond4: entered promiscuous mode [ 272.864705][T14668] vlan1: entered allmulticast mode [ 272.896167][T14668] bond4: entered allmulticast mode [ 272.969362][T14660] bond4: (slave bridge6): making interface the new active one [ 272.999902][T14660] bridge6: entered promiscuous mode [ 273.007835][T14660] bridge6: entered allmulticast mode [ 273.020691][T14660] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 273.034236][T14680] netlink: 'syz.1.2333': attribute type 21 has an invalid length. [ 273.064189][T14680] netlink: 'syz.1.2333': attribute type 1 has an invalid length. [ 273.088457][T14686] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 273.833097][T14730] netlink: 'syz.4.2347': attribute type 8 has an invalid length. [ 273.841204][T14730] sch_fq: defrate 0 ignored. [ 274.046595][T14746] __nla_validate_parse: 46 callbacks suppressed [ 274.046616][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'. [ 274.063433][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2354'. [ 274.085360][T14746] netlink: 'syz.2.2354': attribute type 3 has an invalid length. [ 274.093227][T14746] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2354'. [ 274.136111][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'. [ 274.168541][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2354'. [ 274.320140][ T5830] udevd[5830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 274.339021][ T5830] udevd[5830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 274.398061][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 274.409862][T14762] netlink: 'syz.1.2357': attribute type 1 has an invalid length. [ 274.558344][T14774] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2359'. [ 274.585483][T14774] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2359'. [ 274.596160][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 274.621564][T14774] netlink: 'syz.1.2359': attribute type 5 has an invalid length. [ 274.644606][T14774] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2359'. [ 275.309484][T14794] tipc: New replicast peer: 172.20.20.19 [ 275.619591][T14794] xt_CT: No such helper "syz1" [ 276.094406][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 276.102530][ C0] lec:lec_tx_timeout: lec0 [ 276.107754][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 277.582719][T14844] syzkaller1: entered promiscuous mode [ 277.588699][T14844] syzkaller1: entered allmulticast mode [ 277.896307][T14880] wg1: entered promiscuous mode [ 277.901263][T14880] wg1: entered allmulticast mode [ 278.161672][T14895] sctp: [Deprecated]: syz.4.2394 (pid 14895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.161672][T14895] Use struct sctp_sack_info instead [ 278.523785][T14929] tipc: Enabling of bearer rejected, media not registered [ 278.610153][T14940] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 278.920721][T14960] IPv6: Can't replace route, no match found [ 278.925779][T14958] ipt_rpfilter: unknown options [ 278.987004][T14966] 8021q: VLANs not supported on gre0 [ 279.098799][T14971] bond12: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 279.117177][T14971] bond12 (unregistering): Released all slaves [ 279.260479][T14982] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 279.298777][T14982] netlink: 'syz.2.2420': attribute type 2 has an invalid length. [ 279.314174][T14982] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 279.502357][T14994] netlink: 'syz.3.2425': attribute type 9 has an invalid length. [ 279.534955][T14994] __nla_validate_parse: 12 callbacks suppressed [ 279.534976][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'. [ 279.556766][T14994] netlink: 'syz.3.2425': attribute type 9 has an invalid length. [ 279.574006][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'. [ 279.614505][T14994] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 279.818830][T15011] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 279.849488][T15011] netlink: 'syz.1.2432': attribute type 5 has an invalid length. [ 279.892630][T15011] block nbd0: not configured, cannot reconfigure [ 279.936713][T15013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.024669][T15024] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2436'. [ 280.079716][T15024] netlink: 'syz.4.2436': attribute type 1 has an invalid length. [ 281.134459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 281.142592][ C0] lec:lec_tx_timeout: lec0 [ 281.148321][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 281.375391][T15048] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 281.385454][T15047] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 281.454011][T15052] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2443'. [ 281.484562][T15052] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2443'. [ 281.507896][T15077] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2446'. [ 281.517471][T15056] ±ÿ: renamed from team_slave_1 (while UP) [ 281.567418][T15058] geneve3: entered promiscuous mode [ 281.573901][ T49] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.583555][ T49] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 281.593817][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.625351][T15077] team0: Port device dummy0 removed [ 281.670343][ T49] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.702335][ T49] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 281.716057][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.726327][T15081] netlink: 'syz.0.2447': attribute type 14 has an invalid length. [ 281.734257][T15055] wlan1 speed is unknown, defaulting to 1000 [ 281.740596][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 281.740938][T15081] netlink: 'syz.0.2447': attribute type 14 has an invalid length. [ 281.752366][ T49] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.768668][ T49] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 281.778408][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.796195][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 281.863020][ T49] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.878284][ T49] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 281.888021][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.921675][ T49] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 38459 - 0 [ 281.934857][ T49] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 38459 - 0 [ 281.953457][ T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 38459 - 0 [ 281.968556][ T49] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 38459 - 0 [ 282.011584][T15095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2451'. [ 282.478573][T15120] netlink: 'syz.3.2458': attribute type 1 has an invalid length. [ 282.635928][T15128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.826364][T15144] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2467'. [ 282.883693][T15148] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 282.902335][T15148] bond7 (unregistering): Released all slaves [ 282.936233][T15150] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 283.879983][T15220] ip6t_srh: unknown srh match flags 4000 [ 284.508082][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 284.538125][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 284.571451][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 284.591722][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 284.639977][T15247] syzkaller0: left promiscuous mode [ 284.665428][T15247] syzkaller0: left allmulticast mode [ 285.084017][T15273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.425776][T15290] __nla_validate_parse: 4 callbacks suppressed [ 285.425799][T15290] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2515'. [ 285.580908][T15298] netlink: 'syz.2.2519': attribute type 10 has an invalid length. [ 285.595168][T15298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2519'. [ 285.625740][T15298] dummy0: entered promiscuous mode [ 285.636588][T15298] bridge0: port 3(dummy0) entered blocking state [ 285.654860][T15300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2519'. [ 285.659933][T15298] bridge0: port 3(dummy0) entered disabled state [ 285.680191][T15298] dummy0: entered allmulticast mode [ 285.684486][T15300] netlink: 'syz.2.2519': attribute type 7 has an invalid length. [ 285.702785][T15300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2519'. [ 285.724235][T15300] erspan0: entered promiscuous mode [ 285.740620][T15300] gretap0: entered promiscuous mode [ 285.750578][T15300] debugfs: 'hsr1' already exists in 'hsr' [ 285.767665][T15300] Cannot create hsr debugfs directory [ 285.778185][T15300] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 285.796945][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 285.806456][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 285.831117][T15300] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 286.154441][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 286.162591][ C0] lec:lec_tx_timeout: lec0 [ 286.167643][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 286.708914][T15347] sctp: [Deprecated]: syz.2.2530 (pid 15347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.708914][T15347] Use struct sctp_sack_info instead [ 286.798106][T15347] netlink: 'syz.2.2530': attribute type 1 has an invalid length. [ 286.824835][T15347] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2530'. [ 286.834100][T15347] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2530'. [ 286.874484][T15347] netlink: 'syz.2.2530': attribute type 1 has an invalid length. [ 286.883307][T15347] netlink: 618 bytes leftover after parsing attributes in process `syz.2.2530'. [ 287.254984][T15360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2535'. [ 287.318078][T15358] syzkaller0: entered promiscuous mode [ 287.323685][T15358] syzkaller0: entered allmulticast mode [ 287.718412][T15376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.002340][T15375] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 289.031591][T15372] wlan1 speed is unknown, defaulting to 1000 [ 289.624921][T15426] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 289.659366][T15426] syzkaller0: entered promiscuous mode [ 289.665462][T15426] syzkaller0: entered allmulticast mode [ 289.718177][T15426] x_tables: ip_tables: l2tp match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD/OUTPUT [ 289.848349][T15437] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 290.292131][T15459] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 290.470169][T15470] __nla_validate_parse: 9 callbacks suppressed [ 290.470189][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 290.606823][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 290.642450][T15486] netlink: 'syz.4.2564': attribute type 5 has an invalid length. [ 290.681014][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2564'. [ 290.955088][T15505] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2575'. [ 290.967020][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'. [ 290.982509][T15512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2576'. [ 291.174473][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 291.182622][ C0] lec:lec_tx_timeout: lec0 [ 291.187400][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 291.323669][T15532] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 291.342803][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'. [ 291.357283][T15536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2584'. [ 291.364134][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'. [ 291.375320][T15536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2584'. [ 291.533075][T15548] netlink: 'syz.1.2586': attribute type 26 has an invalid length. [ 291.541771][T15545] macvlan0: left promiscuous mode [ 291.630270][T15545] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 291.802927][T15545] veth1: entered allmulticast mode [ 291.817792][T15545] bond5: (slave veth1): Enslaving as an active interface with an up link [ 291.982331][T15571] batadv1: entered allmulticast mode [ 292.198853][T15584] bond0: option ad_select: unable to set because the bond device is up [ 292.231590][T15584] 8021q: VLANs not supported on ipvlan1 [ 292.962207][T15634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.013587][T15634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.981623][T15679] openvswitch: netlink: Message has 1 unknown bytes. [ 293.995409][T15679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.054229][T15677] bond7: entered promiscuous mode [ 294.060614][T15677] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.083094][T15686] bridge5: entered promiscuous mode [ 294.092146][T15686] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 294.371239][T15703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.383213][T15698] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 294.393210][T15698] netlink: 'syz.2.2636': attribute type 1 has an invalid length. [ 294.572955][T15713] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 294.683778][T15718] wlan1 speed is unknown, defaulting to 1000 [ 294.754217][T15724] netlink: 'syz.0.2645': attribute type 1 has an invalid length. [ 294.763027][T15724] netlink: 'syz.0.2645': attribute type 1 has an invalid length. [ 294.769630][T15726] netlink: 'syz.0.2645': attribute type 1 has an invalid length. [ 294.833945][T15728] netlink: 'syz.1.2646': attribute type 21 has an invalid length. [ 294.887521][T15728] netlink: 'syz.1.2646': attribute type 1 has an invalid length. [ 295.217399][T12769] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.236479][T12769] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.288952][T12769] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.327526][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.779489][T15777] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 295.788205][T15777] bond10: option packets_per_slave: allowed values 0 - 65535 [ 295.803898][T15777] bond10 (unregistering): Released all slaves [ 295.830680][T15781] __nla_validate_parse: 24 callbacks suppressed [ 295.830702][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 295.873157][T15781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2664'. [ 295.922442][T15788] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 295.987164][T15796] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2666'. [ 296.025161][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'. [ 296.194412][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 296.202520][ C0] lec:lec_tx_timeout: lec0 [ 296.207227][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 296.385070][T15823] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2675'. [ 296.409594][T15826] validate_nla: 1 callbacks suppressed [ 296.409613][T15826] netlink: 'syz.3.2674': attribute type 2 has an invalid length. [ 296.451363][T15826] netlink: 'syz.3.2674': attribute type 2 has an invalid length. [ 296.533360][T15835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2679'. [ 296.701683][T15849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.732558][T15849] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2685'. [ 296.748504][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'. [ 296.781190][T15852] bridge_slave_0 (unregistering): left promiscuous mode [ 296.795535][T15852] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.982630][T15866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2690'. [ 297.027114][T15870] : renamed from hsr0 (while UP) [ 297.108302][T15874] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.117309][T15874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2694'. [ 297.127461][T15875] netlink: 'syz.4.2693': attribute type 16 has an invalid length. [ 297.136132][T15875] netlink: 'syz.4.2693': attribute type 17 has an invalid length. [ 297.144294][T15875] lo: left allmulticast mode [ 297.157381][T15875] tunl0: left allmulticast mode [ 297.167470][T15875] gre0: left allmulticast mode [ 297.173864][T15875] gretap0: left allmulticast mode [ 297.200661][T15875] ip_vti0: left allmulticast mode [ 297.216636][T15875] ip6_vti0: left allmulticast mode [ 297.223309][T15875] sit0: left allmulticast mode [ 297.236176][T15875] ip6tnl0: left allmulticast mode [ 297.243978][T15875] ip6gre0: left allmulticast mode [ 297.280102][T15875] team0: left allmulticast mode [ 297.287049][T15875] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.296114][T15875] H: left allmulticast mode [ 297.302877][T15875] nlmon0: left allmulticast mode [ 297.309726][T15875] vxcan0: left allmulticast mode [ 297.316361][T15875] vxcan1: left allmulticast mode [ 297.322463][T15875] veth0: left allmulticast mode [ 297.330368][T15875] veth1: left allmulticast mode [ 297.337051][T15875] wg1: left allmulticast mode [ 297.343670][T15875] wg2: left allmulticast mode [ 297.352353][T15875] veth0_to_bridge: left allmulticast mode [ 297.359608][T15875] ¾x9ÿ: left promiscuous mode [ 297.365312][T15875] veth1_to_bridge: left allmulticast mode [ 297.372145][T15875] bridge_slave_1: left allmulticast mode [ 297.381531][T15875] bond_slave_0: left allmulticast mode [ 297.387952][T15875] veth1_to_bond: left allmulticast mode [ 297.395817][T15875] bond_slave_1: left allmulticast mode [ 297.402122][T15875] veth0_to_team: left allmulticast mode [ 297.409540][T15875] team_slave_0: left allmulticast mode [ 297.416839][T15875] veth1_to_team: left allmulticast mode [ 297.424744][T15875] veth1_to_batadv: left allmulticast mode [ 297.435851][T15875] batadv_slave_1: left allmulticast mode [ 297.442567][T15875] xfrm0: left allmulticast mode [ 297.449475][T15875] veth0_to_hsr: left allmulticast mode [ 297.457739][T15875] veth1_to_hsr: left allmulticast mode [ 297.465380][T15875] : Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.476313][T15875] : Slave B (c0·) is not up; please bring it up to get a fully working HSR network [ 297.486045][T15875] : left promiscuous mode [ 297.490991][T15875] : left allmulticast mode [ 297.496007][T15875] hsr_slave_0: left allmulticast mode [ 297.501499][T15875] 0·: left allmulticast mode [ 297.508338][T15875] veth1_virt_wifi: left allmulticast mode [ 297.515680][T15875] veth0_virt_wifi: left allmulticast mode [ 297.522351][T15875] virt_wifi0: left allmulticast mode [ 297.527762][T15875] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 297.572850][T15883] netlink: 'syz.0.2696': attribute type 1 has an invalid length. [ 297.713846][T15898] netlink: 'syz.2.2700': attribute type 23 has an invalid length. [ 297.926644][T15913] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 298.282763][T15924] wlan1 speed is unknown, defaulting to 1000 [ 298.785712][T15933] syzkaller0: entered promiscuous mode [ 298.816121][T15933] syzkaller0: entered allmulticast mode [ 298.903151][T15942] syzkaller0: entered promiscuous mode [ 298.908964][T15942] syzkaller0: entered allmulticast mode [ 300.938984][T15975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.148458][T15993] __nla_validate_parse: 8 callbacks suppressed [ 301.148478][T15993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2726'. [ 301.215284][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 301.223567][ C0] lec:lec_tx_timeout: lec0 [ 301.228286][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.258955][T15995] wlan1 speed is unknown, defaulting to 1000 [ 301.406355][T16012] netlink: 'syz.3.2729': attribute type 9 has an invalid length. [ 301.414468][T16012] netlink: 'syz.3.2729': attribute type 6 has an invalid length. [ 301.500294][T16014] netlink: 'syz.2.2730': attribute type 9 has an invalid length. [ 301.514488][T16014] netlink: 'syz.2.2730': attribute type 11 has an invalid length. [ 301.522718][T16014] netlink: 'syz.2.2730': attribute type 12 has an invalid length. [ 301.531523][T16014] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2730'. [ 301.541797][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'. [ 301.718129][T16012] : entered promiscuous mode [ 302.240760][T16049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2738'. [ 302.256235][T16048] netlink: 'syz.1.2737': attribute type 9 has an invalid length. [ 302.278460][T16040] bond10: (slave ip_vti0): Device is not bonding slave [ 302.292353][T16040] bond10: option active_slave: invalid value (ip_vti0) [ 302.302106][T16040] bond10 (unregistering): Released all slaves [ 302.390938][T16043] macvlan0: entered promiscuous mode [ 302.408128][T15069] IPVS: starting estimator thread 0... [ 302.496371][T16063] IPVS: using max 27 ests per chain, 64800 per kthread [ 302.558698][T16059] wlan1 speed is unknown, defaulting to 1000 [ 302.914296][T16087] wlan1 speed is unknown, defaulting to 1000 [ 303.098592][T16109] x_tables: duplicate underflow at hook 1 [ 303.401735][T16118] xt_ecn: cannot match TCP bits for non-tcp packets [ 303.609511][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 303.747160][T16138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2764'. [ 304.040775][T16159] netlink: 'syz.2.2771': attribute type 11 has an invalid length. [ 304.069442][T16159] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.2771'. [ 304.109709][T16160] bond6: entered allmulticast mode [ 304.192805][T16172] netlink: 'syz.2.2773': attribute type 1 has an invalid length. [ 304.210684][T16172] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2773'. [ 304.220588][T16172] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2773'. [ 304.229821][T16172] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2773'. [ 304.232300][T16168] bridge9: entered promiscuous mode [ 304.245100][T16168] bridge9: entered allmulticast mode [ 304.245912][T16174] netlink: 'syz.3.2774': attribute type 1 has an invalid length. [ 304.259169][T16168] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 304.259687][T16172] netlink: 'syz.2.2773': attribute type 1 has an invalid length. [ 304.282496][T16172] netlink: 'syz.2.2773': attribute type 1 has an invalid length. [ 304.292005][T16172] netlink: 'syz.2.2773': attribute type 1 has an invalid length. [ 304.400424][T16178] bond12: (slave gretap3): making interface the new active one [ 304.409337][T16178] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 304.652479][T16203] sctp: [Deprecated]: syz.0.2784 (pid 16203) Use of int in max_burst socket option. [ 304.652479][T16203] Use struct sctp_assoc_value instead [ 304.672670][T16200] syzkaller0: entered promiscuous mode [ 304.680610][T16200] syzkaller0: entered allmulticast mode [ 304.772851][T16203] sctp: [Deprecated]: syz.0.2784 (pid 16203) Use of int in max_burst socket option. [ 304.772851][T16203] Use struct sctp_assoc_value instead [ 305.049588][T16225] netdevsim netdevsim3: Direct firmware load for 0 failed with error -2 [ 305.074575][T16225] netdevsim netdevsim3: Falling back to sysfs fallback for: 0 [ 305.759814][T16256] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 306.234405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 306.242681][ C0] lec:lec_tx_timeout: lec0 [ 306.246762][T16287] macvtap0: entered promiscuous mode [ 306.247452][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 306.253477][T16287] macvtap0: entered allmulticast mode [ 306.277416][T16293] "syz.3.2805" (16293) uses obsolete ecb(arc4) skcipher [ 306.373851][T16287] macvtap1: entered promiscuous mode [ 306.379869][T16287] macvtap1: entered allmulticast mode [ 306.440438][T16297] geneve4: entered promiscuous mode [ 306.446513][T16297] geneve4: entered allmulticast mode [ 306.471291][ T35] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 306.486351][ T35] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 306.506225][ T35] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 306.524736][T16308] __nla_validate_parse: 108 callbacks suppressed [ 306.524757][T16308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2810'. [ 306.540848][T16308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2810'. [ 306.550645][T16308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2810'. [ 306.576291][ T35] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 306.606372][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2812'. [ 306.636596][T16315] validate_nla: 30 callbacks suppressed [ 306.636617][T16315] netlink: 'syz.1.2813': attribute type 1 has an invalid length. [ 306.644558][T16312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2812'. [ 306.692789][T16315] bond10: entered promiscuous mode [ 306.698671][T16315] 8021q: adding VLAN 0 to HW filter on device bond10 [ 306.710803][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 306.900775][T16334] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2818'. [ 306.912942][T16334] netlink: 'syz.0.2818': attribute type 1 has an invalid length. [ 306.962529][T16338] netlink: 'syz.4.2821': attribute type 23 has an invalid length. [ 307.010634][T16337] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2820'. [ 307.021560][T16337] xt_policy: neither incoming nor outgoing policy selected [ 307.096312][T16346] netlink: 'syz.1.2824': attribute type 1 has an invalid length. [ 307.542364][T16384] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 307.554988][T16384] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2834'. [ 307.586111][T16384] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 307.629283][T16384] netlink: 'syz.0.2834': attribute type 8 has an invalid length. [ 307.667662][T16384] netlink: 582 bytes leftover after parsing attributes in process `syz.0.2834'. [ 308.150968][T16413] bond8: option resend_igmp: invalid value (32767) [ 308.158989][T16413] bond8: option resend_igmp: allowed values 0 - 255 [ 308.171332][T16413] bond8 (unregistering): Released all slaves [ 308.314315][T16427] IPVS: sh: FWM 3 0x00000003 - no destination available [ 308.321560][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 308.360860][T16427] IPVS: sh: FWM 3 0x00000003 - no destination available [ 308.361523][T16429] wlan1 speed is unknown, defaulting to 1000 [ 308.400221][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 308.857314][T16464] netlink: 'syz.0.2855': attribute type 2 has an invalid length. [ 308.929064][T16464] 9: entered promiscuous mode [ 308.975744][T16467] x_tables: unsorted underflow at hook 2 [ 309.902955][T16528] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 309.953391][T16533] IPv6: sit2: Disabled Multicast RS [ 309.969295][T16533] sit2: entered allmulticast mode [ 310.046404][T16540] netlink: 'syz.2.2875': attribute type 51 has an invalid length. [ 310.086631][T16536] wlan1 speed is unknown, defaulting to 1000 [ 310.337572][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.348424][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.357116][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.401032][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.414884][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.459594][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.488537][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.497922][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.506305][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.514235][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.721478][T16548] bond8 (unregistering): Released all slaves [ 310.757632][T16560] bond8: entered promiscuous mode [ 310.762742][T16560] bond8: entered allmulticast mode [ 310.768948][T16560] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.899666][T16545] wlan1 speed is unknown, defaulting to 1000 [ 311.191411][T16545] chnl_net:caif_netlink_parms(): no params data found [ 311.264442][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 311.272652][ C0] lec:lec_tx_timeout: lec0 [ 311.278028][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 311.560502][T16606] __nla_validate_parse: 16 callbacks suppressed [ 311.560523][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'. [ 311.589671][T16545] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.597742][T16545] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.605370][T16545] bridge_slave_0: entered allmulticast mode [ 311.618095][T16545] bridge_slave_0: entered promiscuous mode [ 311.633402][T16545] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.652989][T16545] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.660745][T16545] bridge_slave_1: entered allmulticast mode [ 311.676868][T16545] bridge_slave_1: entered promiscuous mode [ 311.739021][T16545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.753483][T16545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.840201][T16545] team0: Port device team_slave_0 added [ 311.851557][T16545] team0: Port device team_slave_1 added [ 311.897292][T16545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.904542][T16545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.948527][T16545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.005384][T16545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.012618][T16545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.083221][T16545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.103566][T16631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2895'. [ 312.121631][T16631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2895'. [ 312.134648][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'. [ 312.342939][T16545] hsr_slave_0: entered promiscuous mode [ 312.379385][T16545] hsr_slave_1: entered promiscuous mode [ 312.397983][T16545] debugfs: 'hsr0' already exists in 'hsr' [ 312.411441][T16545] Cannot create hsr debugfs directory [ 312.575412][ T5840] Bluetooth: hci5: command tx timeout [ 312.769443][T16657] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2901'. [ 312.788358][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2906'. [ 312.807439][T16667] openvswitch: netlink: Flow key attr not present in new flow. [ 312.816948][T16670] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 313.005842][T16676] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 313.156604][T16682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2911'. [ 313.421464][T16696] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2915'. [ 313.841914][T16715] openvswitch: netlink: IP tunnel dst address not specified [ 313.932352][T16545] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.001978][T16545] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.055740][T16545] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.113231][T16545] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.192128][T16723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2922'. [ 314.237538][T16739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2925'. [ 314.304246][T16739] ip6gre2: entered allmulticast mode [ 314.558306][T16751] netlink: 'syz.4.2927': attribute type 1 has an invalid length. [ 314.561914][T16545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.640395][T16751] bond8: entered promiscuous mode [ 314.646752][T16751] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.665644][ T5840] Bluetooth: hci5: command tx timeout [ 314.665813][T16757] ipvlan4: entered allmulticast mode [ 314.676810][T16757] bond8: entered allmulticast mode [ 314.702590][T16545] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.741468][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.748791][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.776231][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.783597][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.315633][T16785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.363421][T16545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.560492][T16545] veth0_vlan: entered promiscuous mode [ 315.635455][T16545] veth1_vlan: entered promiscuous mode [ 315.671648][T16545] veth0_macvtap: entered promiscuous mode [ 315.687248][T16813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.702941][T16813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.711394][T16813] batman_adv: batadv0: Removing interface: ipvlan2 [ 315.759287][T16545] veth1_macvtap: entered promiscuous mode [ 315.791835][T16545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.821211][T16545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.854079][T12769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.883329][T12769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.907341][T12769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.936936][T12769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.284423][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 316.292542][ C0] lec:lec_tx_timeout: lec0 [ 316.297528][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 316.350446][ T5488] veth0_macvtap: left promiscuous mode [ 316.736203][ T5840] Bluetooth: hci5: command tx timeout [ 318.525767][T16793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.612459][T12769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.631184][T16863] __nla_validate_parse: 5 callbacks suppressed [ 318.631204][T16863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2955'. [ 318.641200][T12769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.774552][T12781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.782532][T12781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.819541][ T5840] Bluetooth: hci5: command tx timeout [ 319.074223][T16883] netlink: 'syz.0.2960': attribute type 1 has an invalid length. [ 319.109575][T16883] netlink: 'syz.0.2960': attribute type 5 has an invalid length. [ 319.259327][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2963'. [ 319.541555][T16910] netlink: 'syz.3.2965': attribute type 14 has an invalid length. [ 319.656285][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.669621][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.681343][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.691763][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.700944][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.705728][T16912] tipc: Enabled bearer , priority 0 [ 319.834301][T16918] sctp: [Deprecated]: syz.0.2966 (pid 16918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.834301][T16918] Use struct sctp_sack_info instead [ 319.900830][T16912] syzkaller0: entered promiscuous mode [ 319.906829][T16912] syzkaller0: entered allmulticast mode [ 319.946658][T16912] tipc: Resetting bearer [ 320.017189][T16923] syzkaller0: entered promiscuous mode [ 320.059549][T16923] syzkaller0: entered allmulticast mode [ 320.092458][T16909] tipc: Resetting bearer [ 321.304444][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 321.312576][ C0] lec:lec_tx_timeout: lec0 [ 321.317441][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.654570][T16909] tipc: Disabling bearer [ 321.760077][ T7936] tipc: Node number set to 16777216 [ 321.774718][ T5840] Bluetooth: hci0: command tx timeout [ 321.798313][T16932] sysfs: cannot create duplicate filename '/class/ieee80211/KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' [ 321.810931][T16932] CPU: 1 UID: 0 PID: 16932 Comm: syz.3.2968 Not tainted syzkaller #0 PREEMPT(full) [ 321.810958][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.810971][T16932] Call Trace: [ 321.810980][T16932] [ 321.810989][T16932] dump_stack_lvl+0xe8/0x150 [ 321.811027][T16932] sysfs_warn_dup+0x8e/0xa0 [ 321.811059][T16932] sysfs_do_create_link_sd+0xc0/0x110 [ 321.811093][T16932] device_add_class_symlinks+0x1cf/0x240 [ 321.811136][T16932] device_add+0x475/0xb70 [ 321.811169][T16932] wiphy_register+0x1d73/0x2d50 [ 321.811215][T16932] ? __pfx_wiphy_register+0x10/0x10 [ 321.811237][T16932] ? __pfx_netdev_run_todo+0x10/0x10 [ 321.811266][T16932] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 321.811305][T16932] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 321.811340][T16932] ieee80211_register_hw+0x3562/0x4200 [ 321.811385][T16932] ? ieee80211_register_hw+0x14d1/0x4200 [ 321.811426][T16932] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 321.811476][T16932] ? __hrtimer_setup+0x181/0x200 [ 321.811504][T16932] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 321.811540][T16932] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 321.811602][T16932] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 321.811625][T16932] ? kstrndup+0xbf/0x160 [ 321.811661][T16932] hwsim_new_radio_nl+0xf35/0x1bd0 [ 321.811713][T16932] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 321.811754][T16932] ? rcu_is_watching+0x15/0xb0 [ 321.811781][T16932] ? trace_kmalloc+0x2a/0x110 [ 321.811806][T16932] ? __nla_parse+0x40/0x60 [ 321.811829][T16932] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 321.811859][T16932] genl_family_rcv_msg_doit+0x22a/0x330 [ 321.811887][T16932] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 321.811922][T16932] ? bpf_lsm_capable+0x9/0x20 [ 321.811943][T16932] ? security_capable+0x7e/0x2c0 [ 321.811974][T16932] genl_rcv_msg+0x61c/0x7a0 [ 321.812002][T16932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.812024][T16932] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 321.812048][T16932] ? __lock_acquire+0x6b5/0x2cf0 [ 321.812081][T16932] netlink_rcv_skb+0x232/0x4b0 [ 321.812099][T16932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.812129][T16932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.812164][T16932] ? down_read+0x272/0x2e0 [ 321.812185][T16932] ? genl_rcv+0xd/0x40 [ 321.812207][T16932] genl_rcv+0x28/0x40 [ 321.812226][T16932] netlink_unicast+0x80f/0x9b0 [ 321.812259][T16932] ? __pfx_netlink_unicast+0x10/0x10 [ 321.812281][T16932] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 321.812302][T16932] ? netlink_sendmsg+0x650/0xb40 [ 321.812318][T16932] ? skb_put+0x11b/0x210 [ 321.812342][T16932] netlink_sendmsg+0x813/0xb40 [ 321.812370][T16932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.812391][T16932] ? aa_sock_msg_perm+0xf1/0x1b0 [ 321.812418][T16932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.812440][T16932] ____sys_sendmsg+0x972/0x9f0 [ 321.812460][T16932] ? futex_unqueue+0x211/0x240 [ 321.812487][T16932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.812517][T16932] ? import_iovec+0x73/0xa0 [ 321.812541][T16932] ___sys_sendmsg+0x2a5/0x360 [ 321.812567][T16932] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.812595][T16932] ? futex_wait+0x29a/0x380 [ 321.812645][T16932] ? __fget_files+0x2a/0x420 [ 321.812659][T16932] ? __fget_files+0x3a0/0x420 [ 321.812684][T16932] __x64_sys_sendmsg+0x1bd/0x2a0 [ 321.812708][T16932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.812739][T16932] ? rcu_is_watching+0x15/0xb0 [ 321.812774][T16932] do_syscall_64+0x14d/0xf80 [ 321.812794][T16932] ? trace_irq_disable+0x3b/0x150 [ 321.812809][T16932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.812826][T16932] ? clear_bhb_loop+0x40/0x90 [ 321.812846][T16932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.812863][T16932] RIP: 0033:0x7f188ab9c819 [ 321.812880][T16932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.812894][T16932] RSP: 002b:00007f1888dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.812913][T16932] RAX: ffffffffffffffda RBX: 00007f188ae16090 RCX: 00007f188ab9c819 [ 321.812925][T16932] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000006 [ 321.812935][T16932] RBP: 00007f188ac32c91 R08: 0000000000000000 R09: 0000000000000000 [ 321.812945][T16932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.812955][T16932] R13: 00007f188ae16128 R14: 00007f188ae16090 R15: 00007ffccd7845a8 [ 321.812984][T16932] [ 321.815715][T16916] wlan1 speed is unknown, defaulting to 1000 [ 322.396006][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 322.688415][T16976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2979'. [ 322.981888][T17003] SET target dimension over the limit! [ 322.988671][T17003] netlink: 'syz.0.2985': attribute type 1 has an invalid length. [ 323.102307][T17003] 8021q: adding VLAN 0 to HW filter on device bond8 [ 323.191043][T17006] bond8: (slave veth7): Enslaving as an active interface with a down link [ 323.326247][T17007] team0: Port device dummy0 removed [ 323.338462][T17018] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2985'. [ 323.396106][T17007] bond8: (slave dummy0): making interface the new active one [ 323.413215][T17026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2989'. [ 323.415822][T17007] dummy0: entered promiscuous mode [ 323.431966][T17007] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 323.480342][T17015] tipc: Started in network mode [ 323.503074][T17015] tipc: Node identity 2eac912d1c06, cluster identity 4711 [ 323.513329][T17015] tipc: Enabled bearer , priority 0 [ 323.530999][T17006] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2985'. [ 323.557648][T17018] bond8: (slave dummy0): Releasing active interface [ 323.565849][T17018] dummy0 (unregistering): left promiscuous mode [ 323.580445][T16916] chnl_net:caif_netlink_parms(): no params data found [ 323.592609][T17020] syzkaller0: entered promiscuous mode [ 323.600371][T17020] syzkaller0: entered allmulticast mode [ 323.638619][T17015] tipc: Resetting bearer [ 323.661643][T17008] tipc: Resetting bearer [ 323.733252][T17008] tipc: Disabling bearer [ 323.862881][ T5840] Bluetooth: hci0: command tx timeout [ 324.017828][T16916] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.045397][T16916] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.053444][T16916] bridge_slave_0: entered allmulticast mode [ 324.083034][T16916] bridge_slave_0: entered promiscuous mode [ 324.092833][T16916] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.100940][T16916] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.109080][T16916] bridge_slave_1: entered allmulticast mode [ 324.119139][T16916] bridge_slave_1: entered promiscuous mode [ 324.296761][T16916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.355248][T16916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.469414][T16916] team0: Port device team_slave_0 added [ 324.501940][T16916] team0: Port device team_slave_1 added [ 324.728527][T16916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.762499][T16916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.808906][T16916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.821235][T17103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3011'. [ 324.837580][T17103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3011'. [ 324.837824][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 324.866262][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3014'. [ 324.879829][T16916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.887062][T16916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.944964][T16916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.196322][T16916] hsr_slave_0: entered promiscuous mode [ 325.203408][T16916] hsr_slave_1: entered promiscuous mode [ 325.248919][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 325.258396][T17133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3016'. [ 325.275551][T16916] debugfs: 'hsr0' already exists in 'hsr' [ 325.297605][T16916] Cannot create hsr debugfs directory [ 325.308334][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 325.309934][T17135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3018'. [ 325.334960][T17133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3016'. [ 325.347457][T17135] netlink: 'syz.1.3018': attribute type 5 has an invalid length. [ 325.372131][T17135] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3018'. [ 325.745456][T16916] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.770049][T16916] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 38459 - 0 [ 325.783218][T16916] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 325.816832][T17153] veth7: entered allmulticast mode [ 325.859892][T16916] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.871354][T16916] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 38459 - 0 [ 325.885012][T16916] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 325.899213][T17164] sctp: [Deprecated]: syz.0.3028 (pid 17164) Use of int in max_burst socket option. [ 325.899213][T17164] Use struct sctp_assoc_value instead [ 325.914986][T17161] syzkaller1: entered promiscuous mode [ 325.920519][T17161] syzkaller1: entered allmulticast mode [ 325.930561][T17162] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 325.940600][ T5840] Bluetooth: hci0: command tx timeout [ 325.962866][T16916] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.985461][T16916] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 38459 - 0 [ 325.998825][T16916] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 326.099672][T16916] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.134663][T16916] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 38459 - 0 [ 326.161952][T16916] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 326.440909][T17183] vlan2: entered promiscuous mode [ 326.449604][T17183] gretap0: entered promiscuous mode [ 326.572645][T17187] bond10: option lp_interval: invalid value (0) [ 326.586658][T17194] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 326.600730][T17187] bond10: option lp_interval: allowed values 1 - 2147483647 [ 326.611397][T17187] bond10 (unregistering): Released all slaves [ 326.667653][T17202] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 326.703072][T16916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.745606][T16916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.779092][T16916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.808698][T16916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.064254][T16916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.156568][T16916] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.172235][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.179587][T12781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.223533][T12769] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.230828][T12769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.280241][T17233] netlink: 'syz.0.3048': attribute type 1 has an invalid length. [ 327.616140][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6300 ms [ 327.624260][ C0] lec:lec_tx_timeout: lec0 [ 327.630357][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 327.730762][T17255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.785733][T16916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.858129][T17262] vlan2: entered allmulticast mode [ 327.863417][T17262] bridge0: entered allmulticast mode [ 327.869571][T17262] bridge0: port 3(vlan2) entered blocking state [ 327.877297][T17262] bridge0: port 3(vlan2) entered disabled state [ 327.891716][T16916] veth0_vlan: entered promiscuous mode [ 327.904152][T16916] veth1_vlan: entered promiscuous mode [ 327.944122][T16916] veth0_macvtap: entered promiscuous mode [ 327.958329][T16916] veth1_macvtap: entered promiscuous mode [ 327.982785][T16916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.001892][T16916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.022515][T12781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.024772][ T5840] Bluetooth: hci0: command tx timeout [ 328.035493][T12781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.055489][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.075677][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.142152][T17266] Bluetooth: hci1: too big key_count value 32778 [ 328.167873][T12781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.179698][T12781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.253594][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.270567][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.076505][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.092302][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.120544][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.140889][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.156072][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.311669][T17305] wlan1 speed is unknown, defaulting to 1000 [ 329.730993][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.745709][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 329.885312][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.899482][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 329.941892][T17347] __nla_validate_parse: 12 callbacks suppressed [ 329.941914][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 329.947596][T17332] netlink: 'syz.2.3077': attribute type 1 has an invalid length. [ 329.949267][T17347] netlink: 'syz.0.3080': attribute type 30 has an invalid length. [ 329.981446][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3080'. [ 330.002315][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.015237][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 330.048938][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 330.062424][T17305] chnl_net:caif_netlink_parms(): no params data found [ 330.089782][T17347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3080'. [ 330.112252][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.138706][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 330.260749][T17356] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3082'. [ 330.293878][T17356] netlink: 'syz.2.3082': attribute type 11 has an invalid length. [ 330.472816][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 330.496418][T17364] openvswitch: netlink: Flow actions attr not present in new flow. [ 330.558964][T17305] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.566661][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.574123][T17305] bridge_slave_0: entered allmulticast mode [ 330.585746][T17305] bridge_slave_0: entered promiscuous mode [ 330.597313][T17305] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.604824][T17305] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.612418][T17305] bridge_slave_1: entered allmulticast mode [ 330.621972][T17305] bridge_slave_1: entered promiscuous mode [ 330.633509][ T13] bridge_slave_1: left allmulticast mode [ 330.640988][ T13] bridge_slave_1: left promiscuous mode [ 330.648511][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.673636][ T13] bridge_slave_0: left allmulticast mode [ 330.689020][ T13] bridge_slave_0: left promiscuous mode [ 330.704047][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.742832][T17376] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3089'. [ 330.762741][T17376] openvswitch: netlink: Flow actions attr not present in new flow. [ 331.216291][ T5840] Bluetooth: hci2: command tx timeout [ 331.291734][ T13] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 331.331685][ T13] bond12 (unregistering): (slave gretap3): Releasing active interface [ 331.757924][ T13] bond9 (unregistering): (slave bridge8): Releasing active interface [ 331.928888][ T13] bond1 (unregistering): Released all slaves [ 331.942429][ T13] bond2 (unregistering): Released all slaves [ 331.958391][ T13] bond3 (unregistering): Released all slaves [ 331.972994][ T13] bond4 (unregistering): (slave bond5): Releasing backup interface [ 331.982364][ T13] bond4 (unregistering): Released all slaves [ 331.996490][ T13] bond5 (unregistering): Released all slaves [ 332.019188][ T13] bond6 (unregistering): Released all slaves [ 332.035852][ T13] bond7 (unregistering): Released all slaves [ 332.051181][ T13] bond8 (unregistering): (slave vcan1): Releasing backup interface [ 332.060447][ T13] bond8 (unregistering): Released all slaves [ 332.073961][ T13] bond9 (unregistering): Released all slaves [ 332.090709][ T13] bond0 (unregistering): Released all slaves [ 332.111865][ T13] bond10 (unregistering): (slave veth9): Releasing active interface [ 332.123462][ T13] bond10 (unregistering): Released all slaves [ 332.138792][ T13] bond11 (unregistering): Released all slaves [ 332.152632][ T13] bond12 (unregistering): Released all slaves [ 332.183306][T17393] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 332.306723][T17305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.378498][T17305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.411639][ T13] : left promiscuous mode [ 332.455468][T17422] x_tables: duplicate underflow at hook 1 [ 332.470297][T17423] x_tables: duplicate underflow at hook 1 [ 332.599785][T17417] : entered promiscuous mode [ 332.608325][T17429] netlink: 'syz.1.3099': attribute type 10 has an invalid length. [ 332.632555][T17429] team0: Device vxcan1 is of different type [ 332.671584][ T13] tipc: Left network mode [ 332.690920][T17305] team0: Port device team_slave_0 added [ 332.807200][T17305] team0: Port device team_slave_1 added [ 333.011765][T17441] bond2: entered promiscuous mode [ 333.070862][T17441] bond2: entered allmulticast mode [ 333.076900][T17452] netlink: 'syz.2.3103': attribute type 8 has an invalid length. [ 333.105260][T17441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.313803][ T5829] Bluetooth: hci2: command tx timeout [ 333.374372][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 333.382483][ C0] lec:lec_tx_timeout: lec0 [ 333.388192][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 333.487484][T17305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.524634][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.575418][T17474] netlink: 'syz.2.3107': attribute type 16 has an invalid length. [ 333.587128][T17305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.625070][T17474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3107'. [ 333.627813][T17305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.663777][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.729480][T17305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.789497][T17476] netlink: 'syz.2.3107': attribute type 14 has an invalid length. [ 333.800264][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'. [ 333.862987][T17476] netlink: 'syz.2.3107': attribute type 14 has an invalid length. [ 333.900625][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'. [ 333.948163][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.960667][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.073217][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.113975][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.158404][T17305] hsr_slave_0: entered promiscuous mode [ 334.170335][T17305] hsr_slave_1: entered promiscuous mode [ 334.186079][T17305] debugfs: 'hsr0' already exists in 'hsr' [ 334.196892][T17305] Cannot create hsr debugfs directory [ 334.350696][T17502] syzkaller0: entered promiscuous mode [ 334.356478][T17502] syzkaller0: entered allmulticast mode [ 334.430348][T17503] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 334.450883][T17502] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 334.795640][T17534] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 335.061060][T17552] netlink: 'syz.4.3126': attribute type 21 has an invalid length. [ 335.147163][T17552] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 335.162076][T17552] bond10 (unregistering): Released all slaves [ 335.380719][ T5829] Bluetooth: hci2: command 0x040f tx timeout [ 335.392790][ T13] hsr_slave_0: left promiscuous mode [ 335.402357][ T13] hsr_slave_1: left promiscuous mode [ 335.423442][T17568] xt_hashlimit: size too large, truncated to 1048576 [ 336.391946][T17606] __nla_validate_parse: 1 callbacks suppressed [ 336.391966][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3132'. [ 336.607401][T17616] tipc: Enabling of bearer rejected, failed to enable media [ 336.771281][T17622] netlink: 'syz.4.3137': attribute type 1 has an invalid length. [ 336.872210][T17634] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3139'. [ 336.908513][ T13] IPVS: stop unused estimator thread 0... [ 337.033148][T17639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3140'. [ 337.060711][T17634] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 337.349660][T17305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.371190][T17305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.399449][T17305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.424974][T17305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.456034][ T5840] Bluetooth: hci2: command 0x040f tx timeout [ 337.732748][T17305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.799997][T17305] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.830840][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.838081][T12781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.911021][T12769] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.918542][T12769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.962164][T17679] openvswitch: netlink: IPv4 tunnel dst address is zero [ 338.106902][T17305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.325468][T17694] xt_hashlimit: invalid interval [ 338.425768][T17702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3155'. [ 338.524954][T17704] veth1_macvtap: entered allmulticast mode [ 338.658432][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3154'. [ 338.721612][T17305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.899394][T17305] veth0_vlan: entered promiscuous mode [ 338.957830][T17305] veth1_vlan: entered promiscuous mode [ 339.057615][T17305] veth0_macvtap: entered promiscuous mode [ 339.082712][T17305] veth1_macvtap: entered promiscuous mode [ 339.131151][T17305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.134394][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 339.146516][ C0] lec:lec_tx_timeout: lec0 [ 339.152486][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 339.186907][T17305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.210982][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.226130][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.236639][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.261816][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.419731][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.445992][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.481512][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.493591][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.535012][ T5840] Bluetooth: hci2: command 0x040f tx timeout [ 344.164454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 344.172563][ C0] lec:lec_tx_timeout: lec0 [ 344.177816][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.184451][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 349.192514][ C0] lec:lec_tx_timeout: lec0 [ 349.197180][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.204447][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 354.212588][ C0] lec:lec_tx_timeout: lec0 [ 354.217304][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 359.224500][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 359.232558][ C0] lec:lec_tx_timeout: lec0 [ 359.237428][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 364.244459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 364.252532][ C0] lec:lec_tx_timeout: lec0 [ 364.257261][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 369.264425][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 369.272680][ C0] lec:lec_tx_timeout: lec0 [ 369.277315][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 374.284457][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 374.292565][ C0] lec:lec_tx_timeout: lec0 [ 374.297299][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 378.820971][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.304505][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 379.312550][ C0] lec:lec_tx_timeout: lec0 [ 379.317446][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 385.214417][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5900 ms [ 385.222586][ C0] lec:lec_tx_timeout: lec0 [ 385.227782][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 390.234426][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 390.242519][ C0] lec:lec_tx_timeout: lec0 [ 390.247197][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.087290][T17769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3163'. [ 392.343535][T17784] Bluetooth: MGMT ver 1.23 [ 392.360559][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.382713][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.395114][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.405194][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.413122][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.543068][T17795] IPv6: addrconf: prefix option has invalid lifetime [ 392.549908][T17795] IPv6: addrconf: prefix option has invalid lifetime [ 392.621462][T17783] wlan1 speed is unknown, defaulting to 1000 [ 392.832235][T17806] nbd: must specify at least one socket [ 392.870001][T17808] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3174'. [ 393.413822][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.425385][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.491277][T17833] batadv1: entered allmulticast mode [ 393.497131][T17844] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 393.549958][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.569776][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.608661][T17844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.632665][T17847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.641018][T17847] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 393.653229][T17847] bond3: (slave vcan1): Error -95 calling set_mac_address [ 393.705073][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.725703][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.760719][T17852] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 393.873441][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.904614][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.965692][T17783] chnl_net:caif_netlink_parms(): no params data found [ 393.996343][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'. [ 394.039061][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3188'. [ 394.101344][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 394.119224][T17865] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 394.133493][T17875] : entered promiscuous mode [ 394.495915][ T5840] Bluetooth: hci3: command tx timeout [ 394.516889][T17783] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.547786][T17783] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.574179][T17783] bridge_slave_0: entered allmulticast mode [ 394.604584][T17894] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3195'. [ 394.624507][T17894] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3195'. [ 394.624732][T17783] bridge_slave_0: entered promiscuous mode [ 394.653921][T17894] netlink: 'syz.1.3195': attribute type 5 has an invalid length. [ 394.681283][T17783] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.705581][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.721773][T17783] bridge_slave_1: entered allmulticast mode [ 394.728293][T17894] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3195'. [ 394.748442][T17783] bridge_slave_1: entered promiscuous mode [ 394.896581][T17783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.961890][T17783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.996101][ T49] ªªªªªª: left allmulticast mode [ 395.012456][ T49] ªªªªªª: left promiscuous mode [ 395.027206][ T49] bridge0: port 1(ªªªªªª) entered disabled state [ 395.254382][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 395.262468][ C0] lec:lec_tx_timeout: lec0 [ 395.267776][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.611113][T17937] can: request_module (can-proto-4) failed. [ 395.772062][ T49] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 395.781462][ T49] bridge2 (unregistering): left promiscuous mode [ 395.948401][ T49] bond4 (unregistering): (slave bridge6): Releasing active interface [ 395.956765][ T49] bridge6 (unregistering): left promiscuous mode [ 395.963237][ T49] bridge6 (unregistering): left allmulticast mode [ 396.108980][ T49] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 396.290694][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.301315][ T49] bond_slave_0: left allmulticast mode [ 396.311583][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.326103][ T49] bond_slave_1: left allmulticast mode [ 396.338105][ T49] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 396.348121][ T49] bridge_slave_1: left allmulticast mode [ 396.356387][ T49] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 396.368266][ T49] bond0 (unregistering): Released all slaves [ 396.379521][ T49] bond1 (unregistering): Released all slaves [ 396.393651][ T49] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 396.404806][ T49] bond2 (unregistering): (slave veth3): Releasing active interface [ 396.414253][ T49] bond2 (unregistering): Released all slaves [ 396.434168][ T49] bond3 (unregistering): Released all slaves [ 396.448247][ T49] bond4 (unregistering): Released all slaves [ 396.465197][ T49] bond5 (unregistering): (slave veth1): Releasing backup interface [ 396.477653][ T49] bond5 (unregistering): Released all slaves [ 396.491249][ T49] bond6 (unregistering): Released all slaves [ 396.508668][ T49] bond7 (unregistering): Released all slaves [ 396.526338][ T49] bond8 (unregistering): (slave veth7): Releasing active interface [ 396.543367][ T49] bond8 (unregistering): Released all slaves [ 396.574599][ T5840] Bluetooth: hci3: command tx timeout [ 396.723709][ T49] 9: left promiscuous mode [ 396.829507][T17783] team0: Port device team_slave_0 added [ 396.867872][T17783] team0: Port device team_slave_1 added [ 396.915303][ T49] tipc: Left network mode [ 397.013826][T17783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.022058][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.105516][T17783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.120529][T17783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.145836][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.253698][T17972] netlink: 'syz.4.3209': attribute type 16 has an invalid length. [ 397.262455][T17972] netlink: 'syz.4.3209': attribute type 17 has an invalid length. [ 397.300502][T17783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.464047][T17972] veth0_vlan: left promiscuous mode [ 397.481613][T17972] veth0_vlan: entered promiscuous mode [ 397.509333][T17972] vlan0: left allmulticast mode [ 397.519582][T17972] macvlan0: left allmulticast mode [ 397.551487][T17972] macvlan1: left allmulticast mode [ 397.564986][T17986] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 397.573927][T17986] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3210'. [ 397.604105][T17986] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3210'. [ 397.627611][T17972] ipvlan0: left allmulticast mode [ 397.653363][T17972] ipvlan1: left allmulticast mode [ 397.658652][T17986] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 397.679413][T17972] veth1_macvtap: left promiscuous mode [ 397.694080][T17972] veth1_macvtap: left allmulticast mode [ 397.700929][T17986] netlink: 'syz.2.3210': attribute type 8 has an invalid length. [ 397.721241][T17972] veth0_macvtap: left promiscuous mode [ 397.727194][T17986] netlink: 582 bytes leftover after parsing attributes in process `syz.2.3210'. [ 397.728164][T17972] veth0_macvtap: left allmulticast mode [ 397.756162][T17972] veth1_macvtap: entered promiscuous mode [ 397.762158][T17972] veth1_macvtap: entered allmulticast mode [ 397.769028][T17972] macsec0: left allmulticast mode [ 397.775485][T17972] veth1_macvtap: left allmulticast mode [ 397.783646][T17972] geneve0: left allmulticast mode [ 397.794091][T17972] geneve1: left allmulticast mode [ 397.804537][T17972] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 397.813326][T17972] vlan2: left allmulticast mode [ 397.819136][T17972] team_slave_1: left allmulticast mode [ 397.832649][T17972] bridge1: left allmulticast mode [ 397.859980][T17972] ipvlan2: left allmulticast mode [ 397.875292][T17972] syz_tun: left allmulticast mode [ 397.895667][T17972] netdevsim netdevsim4 eth0: left allmulticast mode [ 397.921093][T17972] netdevsim netdevsim4 eth1: left allmulticast mode [ 397.940720][T17972] netdevsim netdevsim4 eth2: left allmulticast mode [ 397.971212][T17972] netdevsim netdevsim4 eth3: left allmulticast mode [ 398.003130][T17972] vxcan2: left allmulticast mode [ 398.031180][T17972] vxcan3: left allmulticast mode [ 398.052014][T17972] bond1: left allmulticast mode [ 398.061395][T17972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.070807][T17972] bridge2: left allmulticast mode [ 398.079010][T17972] : entered promiscuous mode [ 398.083932][T17972] : entered allmulticast mode [ 398.092308][T17972] hsr_slave_0: entered allmulticast mode [ 398.098634][T17972] 0·: entered allmulticast mode [ 398.103773][T17972] macvlan2: left allmulticast mode [ 398.109944][T17972] : left allmulticast mode [ 398.115006][T17972] hsr_slave_0: left allmulticast mode [ 398.120574][T17972] 0·: left allmulticast mode [ 398.129863][T17972] bond2: left allmulticast mode [ 398.140321][T17972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.165995][T17972] bond0: left allmulticast mode [ 398.171507][T17972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.182042][T17972] vlan3: left allmulticast mode [ 398.189200][T17972] erspan0: left allmulticast mode [ 398.196137][T17972] ipvlan3: left allmulticast mode [ 398.201358][T17972] ip6gretap0: left allmulticast mode [ 398.211165][T17972] @: left allmulticast mode [ 398.216960][T17972] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 398.320527][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.334584][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.343017][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.485400][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.654621][ T5840] Bluetooth: hci3: command tx timeout [ 398.670025][T18018] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3219'. [ 398.831405][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 398.833498][T17783] hsr_slave_0: entered promiscuous mode [ 398.849569][T17783] hsr_slave_1: entered promiscuous mode [ 398.857532][T17783] debugfs: 'hsr0' already exists in 'hsr' [ 398.863691][T17783] Cannot create hsr debugfs directory [ 400.062775][T18064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3227'. [ 400.138814][T18064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3227'. [ 400.177097][T18064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3227'. [ 400.274397][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 400.282523][ C0] lec:lec_tx_timeout: lec0 [ 400.287535][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 400.308624][T18065] netlink: 'syz.2.3227': attribute type 20 has an invalid length. [ 400.333268][T18065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 400.449714][T18064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3227'. [ 400.468916][T18065] netlink: 'syz.2.3227': attribute type 20 has an invalid length. [ 400.734933][ T5840] Bluetooth: hci3: command tx timeout [ 400.777761][T18085] netlink: 'syz.1.3232': attribute type 7 has an invalid length. [ 400.818410][T18090] netlink: 'syz.1.3232': attribute type 10 has an invalid length. [ 400.845869][T18090] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 401.100018][T18103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.259799][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.281750][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.305363][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.322251][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.341830][ T49] veth1_vlan: left allmulticast mode [ 401.348594][ T49] : left allmulticast mode [ 401.353419][ T49] veth1_macvtap: left promiscuous mode [ 401.359758][ T49] veth1_vlan: left promiscuous mode [ 401.366061][ T49] veth0_vlan: left promiscuous mode [ 401.921592][ T49] team0 (unregistering): Port device team_slave_1 removed [ 401.946709][ T49] team0 (unregistering): Port device team_slave_0 removed [ 402.246494][T18114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.278916][T18114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.323448][T18120] sit0: entered promiscuous mode [ 402.368496][T17783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.441241][T17783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.519438][T17783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.590601][T17783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.771472][T18168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.956002][T18174] netlink: 'syz.2.3246': attribute type 8 has an invalid length. [ 403.070305][ T49] IPVS: stop unused estimator thread 0... [ 403.089812][T18181] __nla_validate_parse: 4 callbacks suppressed [ 403.089832][T18181] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3248'. [ 403.250838][T17783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.373875][T17783] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.403836][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.411087][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.424153][T18192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3250'. [ 403.450123][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.457465][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.595193][T18204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3254'. [ 403.680127][T18204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3254'. [ 403.703119][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3257'. [ 403.730072][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3257'. [ 403.811339][T18214] Cannot find set identified by id 65535 to match [ 403.955489][T18219] sctp: [Deprecated]: syz.4.3258 (pid 18219) Use of int in maxseg socket option. [ 403.955489][T18219] Use struct sctp_assoc_value instead [ 403.990098][T18219] sctp: [Deprecated]: syz.4.3258 (pid 18219) Use of int in max_burst socket option deprecated. [ 403.990098][T18219] Use struct sctp_assoc_value instead [ 404.166791][T17783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.298392][T18237] tipc: Started in network mode [ 404.303358][T18237] tipc: Node identity ac14140f, cluster identity 4711 [ 404.312978][T18237] tipc: New replicast peer: 255.255.255.255 [ 404.350335][T18237] tipc: Enabled bearer , priority 10 [ 404.398924][T18237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3263'. [ 404.542941][T17783] veth0_vlan: entered promiscuous mode [ 404.572845][T17783] veth1_vlan: entered promiscuous mode [ 404.670547][T18255] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 404.698339][T17783] veth0_macvtap: entered promiscuous mode [ 404.732522][T17783] veth1_macvtap: entered promiscuous mode [ 404.798521][T17783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.837251][T17783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.872202][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.891345][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.911612][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.931917][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.294579][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 405.302678][ C0] lec:lec_tx_timeout: lec0 [ 405.307665][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.358338][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 405.367855][T18276] netlink: 'syz.3.3271': attribute type 1 has an invalid length. [ 405.376370][T18275] netlink: 'syz.3.3271': attribute type 1 has an invalid length. [ 405.397347][T18272] netlink: 'syz.2.3270': attribute type 1 has an invalid length. [ 405.423380][T18276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.435927][T18275] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 405.492929][T18272] bond1: entered promiscuous mode [ 405.516012][T18272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.607278][ T5828] tipc: Node number set to 2886997007 [ 405.699265][T18282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.717383][T18282] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 405.760568][T18282] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 405.778541][T18282] bond1: (slave vti0): making interface the new active one [ 405.787676][T18282] vti0: entered promiscuous mode [ 405.795041][T18282] bond1: (slave vti0): Enslaving as an active interface with an up link [ 405.992317][T18300] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3276'. [ 406.030121][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.055011][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.111702][T18306] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3278'. [ 406.151918][T12766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.176276][T12766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.518258][T18331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.622017][T18331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.034258][T18341] syzkaller0: entered promiscuous mode [ 407.041725][T18341] syzkaller0: entered allmulticast mode [ 407.126009][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.136096][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.147779][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.160784][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.175884][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.827826][T18376] netlink: 'syz.1.3292': attribute type 142 has an invalid length. [ 407.909542][T18387] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 408.014646][T12769] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.043574][T12769] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.209159][T18392] bond2: (slave bridge4): making interface the new active one [ 408.218041][T18392] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 408.335605][T12769] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.359183][T12769] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.570575][T12769] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.599909][T12769] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.730693][T12769] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.774642][T12769] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.227371][T18344] chnl_net:caif_netlink_parms(): no params data found [ 409.257402][T18452] __nla_validate_parse: 7 callbacks suppressed [ 409.257425][T18452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3310'. [ 409.294983][ T5829] Bluetooth: hci4: command tx timeout [ 410.153809][T12769] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 410.374762][T18495] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3319'. [ 410.479830][T12769] bond1 (unregistering): Released all slaves [ 410.495063][T12769] bond2 (unregistering): Released all slaves [ 410.510999][T12769] bond0 (unregistering): Released all slaves [ 410.531318][T12769] bond3 (unregistering): (slave veth3): Releasing active interface [ 410.547191][T12769] bond3 (unregistering): (slave veth5): Releasing active interface [ 410.557427][T12769] bond3 (unregistering): Released all slaves [ 410.572264][T12769] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 410.582991][T12769] bond4 (unregistering): (slave bond5): Releasing active interface [ 410.592081][T12769] bond4 (unregistering): Released all slaves [ 410.609022][T12769] bond5 (unregistering): Released all slaves [ 410.626001][T12769] bond6 (unregistering): Released all slaves [ 410.640217][T12769] bond7 (unregistering): Released all slaves [ 410.671217][T12769] bond8 (unregistering): Released all slaves [ 410.687252][T12769] bond9 (unregistering): Released all slaves [ 410.730440][T18504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'. [ 410.759984][T18502] syzkaller0: entered promiscuous mode [ 410.766035][T18502] syzkaller0: entered allmulticast mode [ 411.018828][T18518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.029592][T12769] : left promiscuous mode [ 411.082752][T18517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3321'. [ 411.134336][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 411.142487][ C0] lec:lec_tx_timeout: lec0 [ 411.147424][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 411.207324][T18344] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.222975][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.250521][T18344] bridge_slave_0: entered allmulticast mode [ 411.275777][T18344] bridge_slave_0: entered promiscuous mode [ 411.323465][T12769] : left promiscuous mode [ 411.374757][ T5829] Bluetooth: hci4: command tx timeout [ 411.451389][T18344] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.483810][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.515745][T18344] bridge_slave_1: entered allmulticast mode [ 411.523881][T18344] bridge_slave_1: entered promiscuous mode [ 411.564214][T12769] tipc: Left network mode [ 411.897729][T18344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.945571][T18556] netlink: 'syz.3.3329': attribute type 1 has an invalid length. [ 411.953476][T18556] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3329'. [ 412.078032][T18344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.275265][T18565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3332'. [ 412.334609][T18569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3334'. [ 412.359512][T18344] team0: Port device team_slave_0 added [ 412.420522][T18344] team0: Port device team_slave_1 added [ 412.528169][T18577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 412.535677][T18577] IPv6: NLM_F_CREATE should be set when creating new route [ 412.588172][T18344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.616129][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.618004][T18580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3335'. [ 412.651862][T18344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.699667][T18344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.724046][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.780850][T18588] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3338'. [ 412.828902][T18344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.884230][T18593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'. [ 412.962417][T18593] openvswitch: netlink: Flow key attr not present in new flow. [ 413.097125][T18609] IPv6: addrconf: prefix option has invalid lifetime [ 413.103914][T18609] IPv6: addrconf: prefix option has invalid lifetime [ 413.246098][T18344] hsr_slave_0: entered promiscuous mode [ 413.262491][T18344] hsr_slave_1: entered promiscuous mode [ 413.275478][T18344] debugfs: 'hsr0' already exists in 'hsr' [ 413.281340][T18344] Cannot create hsr debugfs directory [ 413.454858][ T5829] Bluetooth: hci4: command tx timeout [ 413.601773][T18632] netlink: 'syz.3.3347': attribute type 1 has an invalid length. [ 413.651151][T18633] ip6t_srh: unknown srh match flags 4000 [ 413.745828][T12769] veth1_vlan: left allmulticast mode [ 413.764774][T12769] veth1_macvtap: left promiscuous mode [ 413.770594][T12769] veth1_vlan: left promiscuous mode [ 413.793958][T12769] veth0_vlan: left promiscuous mode [ 414.116059][T12769] vlan1 (unregistering): left allmulticast mode [ 414.122913][T12769] veth0_vlan (unregistering): left allmulticast mode [ 414.417907][T18632] bond3: entered promiscuous mode [ 414.423450][T18632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 414.437790][T18641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 414.450398][T18641] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 414.461037][T18641] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 414.477498][T18641] bond3: (slave vcan1): making interface the new active one [ 414.485020][T18641] vcan1: entered promiscuous mode [ 414.492994][T18641] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 414.800014][T18672] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 414.859652][T18672] bond4: (slave lo): Enslaving as an active interface with an up link [ 414.879432][T18672] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 414.934024][T12769] IPVS: stop unused estimator thread 0... [ 414.940376][T18682] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 414.958800][T18670] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 414.981865][T18682] __nla_validate_parse: 4 callbacks suppressed [ 414.981886][T18682] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3355'. [ 415.320502][T18698] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 415.406293][T18701] pimreg: entered allmulticast mode [ 415.436613][T18700] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 415.526309][T18706] syzkaller0: entered promiscuous mode [ 415.534759][ T5829] Bluetooth: hci4: command tx timeout [ 415.538291][T18706] syzkaller0: entered allmulticast mode [ 416.026995][T18726] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 416.072691][T18746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3369'. [ 416.117096][T18747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3369'. [ 416.154421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 416.162647][ C0] lec:lec_tx_timeout: lec0 [ 416.271962][T18344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.327884][T18344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.363029][T18344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.387076][T18344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.503848][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3377'. [ 416.557182][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 416.578554][T18765] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3377'. [ 416.733312][T18776] netlink: 'syz.0.3377': attribute type 2 has an invalid length. [ 417.024252][T18795] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3382'. [ 417.218576][T18809] netlink: 'syz.2.3384': attribute type 142 has an invalid length. [ 417.245728][T18812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3386'. [ 417.299736][T18816] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 417.693516][T18344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.793486][T18836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.825537][T18344] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.836604][T18839] netlink: 'syz.3.3392': attribute type 11 has an invalid length. [ 417.867993][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 417.953892][T12769] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.961329][T12769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.965000][T18839] netlink: 'syz.3.3392': attribute type 11 has an invalid length. [ 417.992773][T12781] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.010244][T12781] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.025880][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 418.042746][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.070947][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.078237][T12781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.095179][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.398328][T18861] bond1: entered promiscuous mode [ 418.403769][T18861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.443522][T18861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.451173][T18861] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 418.463383][T18861] bond1: (slave sit1): Error -95 calling set_mac_address [ 418.917518][T18344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.120511][T18900] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.129879][T18900] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.549901][T18930] netlink: 'syz.2.3417': attribute type 9 has an invalid length. [ 419.561486][T18930] netlink: 'syz.2.3417': attribute type 11 has an invalid length. [ 419.587325][T18930] netlink: 'syz.2.3417': attribute type 12 has an invalid length. [ 419.649750][T18344] veth0_vlan: entered promiscuous mode [ 419.687514][T18344] veth1_vlan: entered promiscuous mode [ 419.813268][T18938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.819516][T18344] veth0_macvtap: entered promiscuous mode [ 419.886817][T18344] veth1_macvtap: entered promiscuous mode [ 419.940400][T18344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.985140][T18344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.025867][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.062803][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.102664][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.163672][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.322328][T12766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.339816][T12766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.436795][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.449762][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.888153][T18995] __nla_validate_parse: 6 callbacks suppressed [ 420.888174][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 421.043871][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d679400: rx timeout, send abort [ 421.150210][T19010] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3441'. [ 421.544022][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d679800: rx timeout, send abort [ 421.552557][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d679400: abort rx timeout. Force session deactivation [ 421.565900][T19024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3446'. [ 421.597361][T19022] IPVS: persistence engine module ip_vs_pe_À not found [ 422.088928][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d679800: abort rx timeout. Force session deactivation [ 422.463913][T19059] : renamed from hsr0 (while UP) [ 422.720012][T19076] veth0: entered promiscuous mode [ 422.736814][T19075] veth0: left promiscuous mode [ 422.783153][T19079] netlink: 'syz.0.3461': attribute type 1 has an invalid length. [ 422.791541][T19079] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3461'. [ 422.815802][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 422.838264][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3462'. [ 423.193257][T19103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.198308][T19101] xt_hashlimit: size too large, truncated to 1048576 [ 423.211203][T19103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.253248][T19108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.581523][T19122] netlink: 'syz.2.3472': attribute type 10 has an invalid length. [ 424.184607][T19158] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3484'. [ 424.347822][T19162] bond3: option miimon: invalid value (18446744073709551585) [ 424.355404][T19162] bond3: option miimon: allowed values 0 - 2147483647 [ 424.372330][T19162] bond3 (unregistering): Released all slaves [ 424.822253][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'. [ 425.123191][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3499'. [ 425.178463][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3499'. [ 425.422356][T19219] netlink: 'syz.3.3504': attribute type 21 has an invalid length. [ 425.433262][T19219] IPv6: NLM_F_CREATE should be specified when creating new route [ 425.449441][T19219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.456808][T19219] IPv6: NLM_F_CREATE should be set when creating new route [ 425.464170][T19219] IPv6: NLM_F_CREATE should be set when creating new route [ 425.471481][T19219] IPv6: NLM_F_CREATE should be set when creating new route [ 425.512392][T19219] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 425.603708][T19226] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 425.644690][T19226] netlink: 'syz.0.3507': attribute type 2 has an invalid length. [ 425.670192][T19228] netlink: 'syz.4.3508': attribute type 1 has an invalid length. [ 425.701807][T19231] netlink: 'syz.1.3511': attribute type 5 has an invalid length. [ 425.746002][T19232] syzkaller1: entered promiscuous mode [ 425.764564][T19232] syzkaller1: entered allmulticast mode [ 425.782265][T19237] bridge_slave_0: left allmulticast mode [ 425.812753][T19237] bridge_slave_0: left promiscuous mode [ 425.830782][T19237] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.851121][T19237] bridge_slave_1: left allmulticast mode [ 425.857475][T19237] bridge_slave_1: left promiscuous mode [ 425.863450][T19237] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.880853][T19237] bond0: (slave bond_slave_0): Releasing backup interface [ 425.903389][T19237] bond0: (slave bond_slave_1): Releasing backup interface [ 425.940492][T19237] team0: Port device team_slave_0 removed [ 425.965440][T19237] team0: Port device team_slave_1 removed [ 425.976810][T19237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.984546][T19237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.993902][T19237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.005481][T19237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.018443][T19237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 426.062941][T19238] team0: Mode changed to "random" [ 426.078819][T19252] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.086568][T19252] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.338185][T19268] netlink: 'syz.3.3522': attribute type 1 has an invalid length. [ 426.476009][T19273] bond6: (slave ip6gretap1): making interface the new active one [ 426.487861][T19273] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 426.496516][T19281] __nla_validate_parse: 4 callbacks suppressed [ 426.496536][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3525'. [ 426.497690][T19273] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 426.520759][T19273] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 426.533374][T19279] syzkaller0: entered promiscuous mode [ 426.546890][T19279] syzkaller0: entered allmulticast mode [ 426.573482][T19284] bond1: entered allmulticast mode [ 426.606227][T19284] vti0: entered allmulticast mode [ 426.711866][T19277] dvmrp8: entered allmulticast mode [ 426.819247][T19276] bond1: left allmulticast mode [ 426.827535][T19276] vti0: left allmulticast mode [ 427.237275][T19322] netlink: 'syz.1.3535': attribute type 2 has an invalid length. [ 427.444043][T19339] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3542'. [ 427.564022][T19344] netlink: 'syz.3.3544': attribute type 1 has an invalid length. [ 427.583750][T19347] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3545'. [ 427.596705][T19344] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 427.605273][T19347] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 427.786828][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'. [ 427.809578][T19355] syzkaller0: entered promiscuous mode [ 427.821138][T19355] syzkaller0: entered allmulticast mode [ 428.030543][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'. [ 428.090635][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3555'. [ 428.437781][T19394] x_tables: duplicate underflow at hook 1 [ 428.627072][T19411] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3566'. [ 428.743232][T19412] xt_connbytes: Forcing CT accounting to be enabled [ 428.814514][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 428.822805][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 428.833664][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3569'. [ 428.871817][T19422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3569'. [ 428.871867][T19412] xt_CT: No such helper "netbios-ns" [ 428.890941][T19427] openvswitch: netlink: IP tunnel TTL not specified. [ 429.054948][T19419] validate_nla: 1 callbacks suppressed [ 429.054968][T19419] netlink: 'syz.4.3569': attribute type 29 has an invalid length. [ 429.479369][T19456] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3580'. [ 429.627128][T19468] netlink: 'syz.3.3582': attribute type 8 has an invalid length. [ 429.875870][T19481] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 430.192136][T19500] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 430.426424][T19514] netlink: 'syz.1.3599': attribute type 1 has an invalid length. [ 430.445504][T19514] netlink: 'syz.1.3599': attribute type 4 has an invalid length. [ 430.518522][T19520] block nbd0: not configured, cannot reconfigure [ 430.993871][T19542] netdevsim netdevsim2: Direct firmware load for 0 failed with error -2 [ 431.014106][T19542] netdevsim netdevsim2: Falling back to sysfs fallback for: 0 [ 431.068436][T19547] sit1: entered promiscuous mode [ 431.073465][T19547] sit1: entered allmulticast mode [ 431.209460][T19555] netlink: 'syz.1.3613': attribute type 32 has an invalid length. [ 431.913434][T19588] netlink: 'syz.3.3619': attribute type 1 has an invalid length. [ 431.940156][T19588] __nla_validate_parse: 8 callbacks suppressed [ 431.940176][T19588] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3619'. [ 431.980617][T19588] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3619'. [ 432.039920][T19588] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3619'. [ 432.371816][T19616] sctp: [Deprecated]: syz.1.3630 (pid 19616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.371816][T19616] Use struct sctp_sack_info instead [ 432.619448][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3632'. [ 432.636049][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3631'. [ 432.770903][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 432.857256][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 433.034068][T19657] syzkaller0: entered promiscuous mode [ 433.047054][T19657] syzkaller0: entered allmulticast mode [ 433.360053][T19678] netlink: 'syz.4.3646': attribute type 7 has an invalid length. [ 433.463021][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3647'. [ 433.486485][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3647'. [ 433.662608][T19687] syzkaller0: entered promiscuous mode [ 433.672027][T19687] syzkaller0: entered allmulticast mode [ 434.260962][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3660'. [ 434.370704][T19717] syzkaller0: entered promiscuous mode [ 434.377569][T19717] syzkaller0: entered allmulticast mode [ 434.387113][T19717] netlink: 'syz.1.3661': attribute type 5 has an invalid length. [ 434.404249][T19717] geneve2: entered promiscuous mode [ 434.410021][T19717] geneve2: entered allmulticast mode [ 434.427025][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 434.444494][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 434.474898][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 434.492853][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 434.971506][T19756] netlink: 'syz.2.3672': attribute type 7 has an invalid length. [ 435.463803][T19794] netlink: 'syz.1.3680': attribute type 16 has an invalid length. [ 435.488364][T19794] netlink: 'syz.1.3680': attribute type 17 has an invalid length. [ 435.561441][T19794] sit0: left promiscuous mode [ 435.723400][T19794] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.730829][T19794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.738528][T19794] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.745780][T19794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.823885][T19794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.054993][T19807] xt_cgroup: xt_cgroup: no path or classid specified [ 436.072257][T19807] xt_cgroup: xt_cgroup: no path or classid specified [ 436.117946][T19812] netlink: 'syz.2.3685': attribute type 21 has an invalid length. [ 436.163440][T19813] veth1_to_hsr: mtu less than device minimum [ 436.170141][T19812] veth1_to_hsr: mtu less than device minimum [ 436.264857][T19817] nft_compat: unsupported protocol 0 [ 436.448030][T19834] xt_hashlimit: size too large, truncated to 1048576 [ 436.655412][T19844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.731283][T19849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.793008][T19853] IPVS: length: 204 != 24 [ 437.027424][T19871] __nla_validate_parse: 10 callbacks suppressed [ 437.027447][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3702'. [ 437.108548][ T5840] block nbd0: Receive control failed (result -32) [ 437.137647][T19874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.177810][T19874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3703'. [ 437.209745][T19876] 8021q: VLANs not supported on caif0 [ 437.223859][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 437.259963][T19876] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 437.299746][T19876] syzkaller1: linktype set to 823 [ 437.370336][T19884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3707'. [ 437.467354][T19896] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3708'. [ 438.009400][T19922] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3712'. [ 438.047978][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 438.082886][T19926] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 438.518992][T10269] lec:lec_start_xmit: lec0:No lecd attached [ 440.258229][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 441.303936][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3720'. [ 441.463610][T19980] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3722'. [ 441.715060][T20004] sctp: [Deprecated]: syz.4.3728 (pid 20004) Use of int in max_burst socket option. [ 441.715060][T20004] Use struct sctp_assoc_value instead [ 441.768770][T20004] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3728'. [ 441.789102][T20007] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3728'. [ 442.063190][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3736'. [ 442.076120][T20022] netlink: 'syz.4.3736': attribute type 6 has an invalid length. [ 442.083891][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'. [ 442.107055][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3736'. [ 442.118701][T20022] netlink: 'syz.4.3736': attribute type 6 has an invalid length. [ 442.134098][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'. [ 442.149378][T12781] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.177343][T12781] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.222494][T12781] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.261779][T12781] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.334663][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.607247][T20052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3742'. [ 442.972152][T20081] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3751'. [ 443.053105][T20083] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 443.078179][T20083] bond3 (unregistering): Released all slaves [ 443.093608][T20084] can: request_module (can-proto-0) failed. [ 443.163180][T20081] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 443.193847][T20081] bond3 (unregistering): Released all slaves [ 443.239106][T20097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3755'. [ 443.272613][T20093] bridge0: port 3(ipvlan2) entered blocking state [ 443.275807][T20097] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 443.281490][T20093] bridge0: port 3(ipvlan2) entered disabled state [ 443.332243][T20093] ipvlan2: entered allmulticast mode [ 443.343624][T20093] ipvlan2: left allmulticast mode [ 443.377436][T20103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 443.458314][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'. [ 443.469036][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'. [ 443.938577][T20141] sctp: [Deprecated]: syz.4.3767 (pid 20141) Use of int in max_burst socket option. [ 443.938577][T20141] Use struct sctp_assoc_value instead [ 444.094761][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 444.102854][ C0] lec:lec_tx_timeout: lec0 [ 444.107810][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 444.280254][T20159] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 444.296801][ T10] IPVS: starting estimator thread 0... [ 444.402219][T20164] syzkaller1: entered promiscuous mode [ 444.408114][T20160] IPVS: using max 26 ests per chain, 62400 per kthread [ 444.416710][T20164] syzkaller1: entered allmulticast mode [ 444.482090][T20166] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 444.572936][T20171] IPVS: Error connecting to the multicast addr [ 444.868614][T20145] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 445.269374][T20203] sctp: [Deprecated]: syz.2.3787 (pid 20203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.269374][T20203] Use struct sctp_sack_info instead [ 445.482409][ T5828] IPVS: starting estimator thread 0... [ 445.539765][T20220] sctp: [Deprecated]: syz.1.3792 (pid 20220) Use of int in max_burst socket option deprecated. [ 445.539765][T20220] Use struct sctp_assoc_value instead [ 445.606890][T20218] IPVS: using max 28 ests per chain, 67200 per kthread [ 445.881812][T20241] netlink: 'syz.0.3800': attribute type 51 has an invalid length. [ 445.931456][T20247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.987003][T20247] netlink: 'syz.4.3801': attribute type 22 has an invalid length. [ 446.061954][T20254] veth1_to_team: entered promiscuous mode [ 446.099907][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 446.105798][T20247] netlink: 'syz.4.3801': attribute type 22 has an invalid length. [ 446.205784][T20262] netlink: 'syz.0.3805': attribute type 2 has an invalid length. [ 446.259143][T20266] veth1_macvtap: left promiscuous mode [ 446.470391][T20272] geneve3: entered promiscuous mode [ 446.495696][T20272] geneve3: entered allmulticast mode [ 446.665997][T20275] netlink: Conntrack attr has 3 unknown bytes [ 446.690689][T20275] netlink: Conntrack attr has 3 unknown bytes [ 447.031917][T20296] netlink: Conntrack attr has 3 unknown bytes [ 447.071837][T20296] gtp1: entered promiscuous mode [ 447.082051][T20296] gtp1: entered allmulticast mode [ 447.357692][T20310] netlink: 'syz.4.3819': attribute type 1 has an invalid length. [ 447.443301][T20312] __nla_validate_parse: 40 callbacks suppressed [ 447.443322][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3820'. [ 447.508379][T20317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.545085][T20317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3822'. [ 447.570007][T20317] netlink: 'syz.0.3822': attribute type 1 has an invalid length. [ 447.618822][T20317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.651162][T20317] bond3: (slave geneve2): making interface the new active one [ 447.661120][T20317] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 447.757529][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3826'. [ 448.056554][T20343] h: entered promiscuous mode [ 448.539524][T20363] sctp: [Deprecated]: syz.0.3833 (pid 20363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.539524][T20363] Use struct sctp_sack_info instead [ 448.818842][T20380] netlink: 'syz.1.3837': attribute type 1 has an invalid length. [ 448.993566][T20398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3844'. [ 449.134494][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 449.142837][ C0] lec:lec_tx_timeout: lec0 [ 449.278932][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 449.500527][T20428] bond1: entered allmulticast mode [ 449.552244][T20430] veth0: entered promiscuous mode [ 449.602867][T20429] veth0: left promiscuous mode [ 449.623803][T20432] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3856'. [ 449.687172][T20427] bond1: left allmulticast mode [ 449.913890][T20452] sctp: [Deprecated]: syz.0.3862 (pid 20452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.913890][T20452] Use struct sctp_sack_info instead [ 449.940240][T20452] netlink: 'syz.0.3862': attribute type 1 has an invalid length. [ 450.007558][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3862'. [ 450.022845][T20456] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 450.305880][T20465] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3865'. [ 450.553140][T20477] syzkaller0: entered allmulticast mode [ 450.848019][T20489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3872'. [ 450.966296][T20496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3875'. [ 450.975335][T20391] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 450.975388][T20391] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 450.975551][ C1] ------------[ cut here ]------------ [ 450.975657][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci5 [ 450.975685][ C1] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd53/0x1020, CPU#1: syz.0.3875/20496 [ 450.975720][ C1] Modules linked in: [ 450.975763][ C1] CPU: 1 UID: 0 PID: 20496 Comm: syz.0.3875 Not tainted syzkaller #0 PREEMPT(full) [ 450.975788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 450.975801][ C1] RIP: 0010:__queue_work+0xd7e/0x1020 [ 450.975829][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 a3 9e a2 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 450.975848][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00010086 [ 450.975868][ C1] RAX: 1ffff11008431951 RBX: 0000000000000008 RCX: ffff8880569a3d00 [ 450.975884][ C1] RDX: ffff8880582f2978 RSI: ffffffff8aa04d30 RDI: ffffffff9014c500 [ 450.975900][ C1] RBP: 0000000000000100 R08: ffffffff9011ceb7 R09: 1ffffffff20239d6 [ 450.975915][ C1] R10: dffffc0000000000 R11: ffffffff818d69d0 R12: dffffc0000000000 [ 450.975930][ C1] R13: ffff88804218ca88 R14: ffffffff9014c500 R15: ffff8880582f2978 [ 450.975946][ C1] FS: 00007ff61f6dc6c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 450.975965][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.975980][ C1] CR2: 00007ff61f699ff8 CR3: 00000000564d8000 CR4: 00000000003526f0 [ 450.976002][ C1] Call Trace: [ 450.976010][ C1] [ 450.976033][ C1] call_timer_fn+0x192/0x640 [ 450.976063][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 450.976090][ C1] ? call_timer_fn+0xd4/0x640 [ 450.976116][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 450.976153][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 450.976177][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 450.976209][ C1] __run_timer_base+0x67e/0x8b0 [ 450.976234][ C1] ? ktime_get+0x45/0x200 [ 450.976269][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 450.976301][ C1] ? sched_clock_cpu+0x74/0x440 [ 450.976335][ C1] run_timer_softirq+0xb7/0x170 [ 450.976360][ C1] handle_softirqs+0x22a/0x870 [ 450.976391][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 450.976425][ C1] __irq_exit_rcu+0x5f/0x150 [ 450.976449][ C1] irq_exit_rcu+0x9/0x30 [ 450.976485][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 450.976512][ C1] [ 450.976521][ C1] [ 450.976531][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.976554][ C1] RIP: 0010:console_flush_all+0x801/0xb20 [ 450.976578][ C1] Code: ff ff e8 22 02 21 00 90 0f 0b 90 e9 85 fc ff ff e8 14 02 21 00 e8 cf bf 0a 0a 48 85 db 74 c0 e8 05 02 21 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 06 [ 450.976595][ C1] RSP: 0018:ffffc900040a6d60 EFLAGS: 00000293 [ 450.976614][ C1] RAX: ffffffff81a4b2cb RBX: ffffc900040a6ec0 RCX: ffff8880569a3d00 [ 450.976630][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.976643][ C1] RBP: ffffc900040a6e70 R08: ffffffff9011ceb7 R09: 1ffffffff20239d6 [ 450.976659][ C1] R10: dffffc0000000000 R11: fffffbfff20239d7 R12: dffffc0000000000 [ 450.976675][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f00ca20 [ 450.976698][ C1] ? console_flush_all+0x7fb/0xb20 [ 450.976732][ C1] ? console_flush_all+0x123/0xb20 [ 450.976761][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 450.976788][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 450.976818][ C1] console_unlock+0xd1/0x1c0 [ 450.976852][ C1] ? __pfx_console_unlock+0x10/0x10 [ 450.976883][ C1] ? _printk+0xdd/0x130 [ 450.976911][ C1] vprintk_emit+0x485/0x560 [ 450.976940][ C1] ? arch_stack_walk+0xfb/0x150 [ 450.976974][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 450.977016][ C1] _printk+0xdd/0x130 [ 450.977043][ C1] ? __pfx__printk+0x10/0x10 [ 450.977067][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 450.977093][ C1] ? ___ratelimit+0x58c/0x8d0 [ 450.977124][ C1] __nla_validate_parse+0x25d4/0x2dc0 [ 450.977148][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.977190][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 450.977231][ C1] ? rcu_is_watching+0x15/0xb0 [ 450.977261][ C1] ? trace_kmalloc+0x2a/0x110 [ 450.977292][ C1] __nla_parse+0x40/0x60 [ 450.977320][ C1] genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 450.977357][ C1] genl_family_rcv_msg_doit+0xd9/0x330 [ 450.977392][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 450.977428][ C1] ? apparmor_capable+0x126/0x170 [ 450.977456][ C1] ? bpf_lsm_capable+0x9/0x20 [ 450.977491][ C1] ? security_capable+0x7e/0x2c0 [ 450.977528][ C1] genl_rcv_msg+0x61c/0x7a0 [ 450.977563][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.977588][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 450.977615][ C1] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 450.977641][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 450.977669][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 450.977709][ C1] netlink_rcv_skb+0x232/0x4b0 [ 450.977731][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.977760][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.977802][ C1] ? down_read+0x272/0x2e0 [ 450.977828][ C1] ? genl_rcv+0xd/0x40 [ 450.977856][ C1] genl_rcv+0x28/0x40 [ 450.977880][ C1] netlink_unicast+0x80f/0x9b0 [ 450.977919][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 450.977951][ C1] ? netlink_sendmsg+0x650/0xb40 [ 450.977971][ C1] ? skb_put+0x11b/0x210 [ 450.978000][ C1] netlink_sendmsg+0x813/0xb40 [ 450.978033][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.978060][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.978092][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.978120][ C1] ____sys_sendmsg+0x972/0x9f0 [ 450.978157][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.978193][ C1] ? import_iovec+0x73/0xa0 [ 450.978224][ C1] ___sys_sendmsg+0x2a5/0x360 [ 450.978257][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.978291][ C1] ? futex_wake+0x4ac/0x580 [ 450.978348][ C1] ? __fget_files+0x2a/0x420 [ 450.978368][ C1] ? __fget_files+0x3a0/0x420 [ 450.978401][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 450.978431][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.978475][ C1] ? rcu_is_watching+0x15/0xb0 [ 450.978517][ C1] do_syscall_64+0x14d/0xf80 [ 450.978543][ C1] ? trace_irq_disable+0x3b/0x150 [ 450.978562][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.978583][ C1] ? clear_bhb_loop+0x40/0x90 [ 450.978610][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.978631][ C1] RIP: 0033:0x7ff61e79c819 [ 450.978652][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.978670][ C1] RSP: 002b:00007ff61f6dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.978693][ C1] RAX: ffffffffffffffda RBX: 00007ff61ea15fa0 RCX: 00007ff61e79c819 [ 450.978709][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 450.978722][ C1] RBP: 00007ff61e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 450.978736][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.978749][ C1] R13: 00007ff61ea16038 R14: 00007ff61ea15fa0 R15: 00007ffe32fb90d8 [ 450.978784][ C1] [ 450.978796][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 450.978811][ C1] CPU: 1 UID: 0 PID: 20496 Comm: syz.0.3875 Not tainted syzkaller #0 PREEMPT(full) [ 450.978834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 450.978847][ C1] Call Trace: [ 450.978856][ C1] [ 450.978865][ C1] vpanic+0x56c/0xa60 [ 450.978893][ C1] ? __pfx__printk+0x10/0x10 [ 450.978915][ C1] ? __pfx_vpanic+0x10/0x10 [ 450.978940][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 450.978962][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 450.978994][ C1] panic+0xc5/0xd0 [ 450.979022][ C1] ? __pfx_panic+0x10/0x10 [ 450.979067][ C1] __warn+0x315/0x4f0 [ 450.979093][ C1] ? __queue_work+0xd53/0x1020 [ 450.979122][ C1] ? __queue_work+0xd53/0x1020 [ 450.979152][ C1] __report_bug+0x29a/0x540 [ 450.979184][ C1] ? __queue_work+0xd53/0x1020 [ 450.979213][ C1] ? __pfx___report_bug+0x10/0x10 [ 450.979238][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 450.979270][ C1] ? look_up_lock_class+0x57/0x110 [ 450.979295][ C1] ? register_lock_class+0x31/0x2e0 [ 450.979328][ C1] report_bug_entry+0x19a/0x290 [ 450.979354][ C1] ? __queue_work+0xd7e/0x1020 [ 450.979379][ C1] ? __queue_work+0xd83/0x1020 [ 450.979406][ C1] handle_bug+0xce/0x200 [ 450.979436][ C1] exc_invalid_op+0x1a/0x50 [ 450.979465][ C1] asm_exc_invalid_op+0x1a/0x20 [ 450.979493][ C1] RIP: 0010:__queue_work+0xd7e/0x1020 [ 450.979522][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 a3 9e a2 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 450.979539][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00010086 [ 450.979558][ C1] RAX: 1ffff11008431951 RBX: 0000000000000008 RCX: ffff8880569a3d00 [ 450.979574][ C1] RDX: ffff8880582f2978 RSI: ffffffff8aa04d30 RDI: ffffffff9014c500 [ 450.979589][ C1] RBP: 0000000000000100 R08: ffffffff9011ceb7 R09: 1ffffffff20239d6 [ 450.979603][ C1] R10: dffffc0000000000 R11: ffffffff818d69d0 R12: dffffc0000000000 [ 450.979619][ C1] R13: ffff88804218ca88 R14: ffffffff9014c500 R15: ffff8880582f2978 [ 450.979640][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 450.979672][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 450.979713][ C1] call_timer_fn+0x192/0x640 [ 450.979736][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 450.979763][ C1] ? call_timer_fn+0xd4/0x640 [ 450.979789][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 450.979824][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 450.979846][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 450.979878][ C1] __run_timer_base+0x67e/0x8b0 [ 450.979903][ C1] ? ktime_get+0x45/0x200 [ 450.979936][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 450.979969][ C1] ? sched_clock_cpu+0x74/0x440 [ 450.980004][ C1] run_timer_softirq+0xb7/0x170 [ 450.980031][ C1] handle_softirqs+0x22a/0x870 [ 450.980061][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 450.980097][ C1] __irq_exit_rcu+0x5f/0x150 [ 450.980123][ C1] irq_exit_rcu+0x9/0x30 [ 450.980149][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 450.980175][ C1] [ 450.980183][ C1] [ 450.980193][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.980215][ C1] RIP: 0010:console_flush_all+0x801/0xb20 [ 450.980239][ C1] Code: ff ff e8 22 02 21 00 90 0f 0b 90 e9 85 fc ff ff e8 14 02 21 00 e8 cf bf 0a 0a 48 85 db 74 c0 e8 05 02 21 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 06 [ 450.980256][ C1] RSP: 0018:ffffc900040a6d60 EFLAGS: 00000293 [ 450.980274][ C1] RAX: ffffffff81a4b2cb RBX: ffffc900040a6ec0 RCX: ffff8880569a3d00 [ 450.980290][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.980304][ C1] RBP: ffffc900040a6e70 R08: ffffffff9011ceb7 R09: 1ffffffff20239d6 [ 450.980319][ C1] R10: dffffc0000000000 R11: fffffbfff20239d7 R12: dffffc0000000000 [ 450.980335][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f00ca20 [ 450.980358][ C1] ? console_flush_all+0x7fb/0xb20 [ 450.980392][ C1] ? console_flush_all+0x123/0xb20 [ 450.980420][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 450.980446][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 450.980477][ C1] console_unlock+0xd1/0x1c0 [ 450.980506][ C1] ? __pfx_console_unlock+0x10/0x10 [ 450.980537][ C1] ? _printk+0xdd/0x130 [ 450.980565][ C1] vprintk_emit+0x485/0x560 [ 450.980594][ C1] ? arch_stack_walk+0xfb/0x150 [ 450.980626][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 450.980667][ C1] _printk+0xdd/0x130 [ 450.980694][ C1] ? __pfx__printk+0x10/0x10 [ 450.980714][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 450.980737][ C1] ? ___ratelimit+0x58c/0x8d0 [ 450.980768][ C1] __nla_validate_parse+0x25d4/0x2dc0 [ 450.980791][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.980833][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 450.980874][ C1] ? rcu_is_watching+0x15/0xb0 [ 450.980902][ C1] ? trace_kmalloc+0x2a/0x110 [ 450.980933][ C1] __nla_parse+0x40/0x60 [ 450.980960][ C1] genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 450.980997][ C1] genl_family_rcv_msg_doit+0xd9/0x330 [ 450.981032][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 450.981068][ C1] ? apparmor_capable+0x126/0x170 [ 450.981095][ C1] ? bpf_lsm_capable+0x9/0x20 [ 450.981123][ C1] ? security_capable+0x7e/0x2c0 [ 450.981159][ C1] genl_rcv_msg+0x61c/0x7a0 [ 450.981193][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.981218][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 450.981244][ C1] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 450.981271][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 450.981299][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 450.981337][ C1] netlink_rcv_skb+0x232/0x4b0 [ 450.981361][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.981390][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.981431][ C1] ? down_read+0x272/0x2e0 [ 450.981458][ C1] ? genl_rcv+0xd/0x40 [ 450.981494][ C1] genl_rcv+0x28/0x40 [ 450.981519][ C1] netlink_unicast+0x80f/0x9b0 [ 450.981558][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 450.981590][ C1] ? netlink_sendmsg+0x650/0xb40 [ 450.981611][ C1] ? skb_put+0x11b/0x210 [ 450.981639][ C1] netlink_sendmsg+0x813/0xb40 [ 450.981672][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.981699][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.981729][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.981758][ C1] ____sys_sendmsg+0x972/0x9f0 [ 450.981793][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.981829][ C1] ? import_iovec+0x73/0xa0 [ 450.981855][ C1] ___sys_sendmsg+0x2a5/0x360 [ 450.981883][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.981917][ C1] ? futex_wake+0x4ac/0x580 [ 450.981973][ C1] ? __fget_files+0x2a/0x420 [ 450.981993][ C1] ? __fget_files+0x3a0/0x420 [ 450.982024][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 450.982054][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.982091][ C1] ? rcu_is_watching+0x15/0xb0 [ 450.982133][ C1] do_syscall_64+0x14d/0xf80 [ 450.982157][ C1] ? trace_irq_disable+0x3b/0x150 [ 450.982176][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.982197][ C1] ? clear_bhb_loop+0x40/0x90 [ 450.982224][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.982245][ C1] RIP: 0033:0x7ff61e79c819 [ 450.982265][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.982283][ C1] RSP: 002b:00007ff61f6dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.982305][ C1] RAX: ffffffffffffffda RBX: 00007ff61ea15fa0 RCX: 00007ff61e79c819 [ 450.982321][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 450.982335][ C1] RBP: 00007ff61e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 450.982349][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.982363][ C1] R13: 00007ff61ea16038 R14: 00007ff61ea15fa0 R15: 00007ffe32fb90d8 [ 450.982398][ C1] [ 450.982558][ C1] Kernel Offset: disabled