last executing test programs: 2.540260588s ago: executing program 1 (id=1156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400c5}, 0x40) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) (async) bind$ax25(r1, &(0x7f00000002c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x6d}}}}, [""]}, 0x28}}, 0x4000000) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000480)={0x4, 0x0, "4b2f98", 0x0, 0x8}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x5) (async) bind$rds(r1, &(0x7f00000005c0)={0x2, 0x4e20, @multicast1}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), r1) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x0, 0x10001, 0x6, 0x1]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x1000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x6d}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44041}, 0x840) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f00000008c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x80, 0x8, 0x1, 0x7, {{0xd, 0x4, 0x1, 0x4, 0x34, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x18, 0x94, 0x0, 0x8, [0x3a, 0x27c, 0x10001, 0xe, 0x5]}, @ssrr={0x89, 0x7, 0x94, [@local]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x2f, 0x95, 0x30, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x7800, 0x1ff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x1, 0xe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3c80, 0x80, 0x6, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001080)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000bc0)={0x44c, r7, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x7, 0x4, 0x7, 0x1}, {0x6, 0xd4, 0x5, 0x3}, {0x7, 0x1, 0x9, 0x2}, {0x401, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x0, 0x7fff}, {0x2, 0x1, 0x5, 0xfff}, {0x8, 0x10, 0x5, 0x1000}, {0x0, 0x2, 0xd2, 0x8000}, {0x400, 0x3, 0x1, 0x5}, {0xfff8, 0x7, 0x0, 0x1930b9f0}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x40, 0x8, 0x5}, {0x3, 0x2, 0x1, 0x10}, {0x86a, 0xfe, 0x0, 0x40}, {0xbe0f, 0x2, 0x4, 0x2}, {0x4140, 0x6, 0x8, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r10}, {0x288, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xa, 0xe, 0x3, 0x7fffffff}, {0x2, 0xff, 0x68}, {0x3, 0xf, 0x4, 0xfff}, {0x8, 0xe1, 0x6, 0x8000}, {0xfff7, 0xe, 0x7f, 0xc}, {0x2, 0x8, 0xf9, 0xfffff801}, {0x7fff, 0xe1, 0x7, 0x4}, {0x7ff, 0xb, 0x2, 0x5}, {0x222, 0x5, 0x5, 0x80}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x5, 0x80, 0x4}, {0x0, 0x9, 0xb, 0x2}, {0x2, 0x8, 0x2, 0xff}, {0xa0, 0x8, 0x4, 0x1}, {0x6, 0x5, 0x96, 0x4}]}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) r13 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$inet(r13, &(0x7f0000001540)={&(0x7f00000010c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001100)="efbce640e53e4bac4e779b184338bd47fe389f45c15c296eb39ae774d1cf05e227a53a7545903f14e7a8881bdb49135bfb50ac4492cdfbbedabd4020b41b9549d4", 0x41}, {&(0x7f0000001180)="74ae8ba299f7361af35710119a8000caa6341e7c61737446353572680282eb278199b4b6db20dbbe5fc30a482e3cf2aef7ce1e4745fc8a323ef20bd5f02ddafd59e6d77996b9dfa688f88c43db25611a426fa57a67ce0fc3e6e51069c2d2ff7ebaa52ef890fe4cfc33f244c1cc29d8979f30a1fc8e0d6cba1960704da4149f85fea601d83afd81406afabcc0452e970225db744b22f684e6e5361642fa8d06ddd93ac61e60bcae6db7c11a4f3c6a3f78bed790518c4a322d91e2", 0xba}, {&(0x7f0000001240)="b52c417f194209d745cb4fbba0dc67474bf2d43fdf1e92eeeaeab95e505f8ce75b08d5655a134474b6a1c3a639f7b2b3a88b23b80bfc572fe2c39c35d723ddf2df853d23fc147a68ada805edd91622eace47946c6bb39336cafc06597320c5e576e97f0277372c6ad37d6c163464b313bb3cd3edaff2e452b70261c9c6018e49f2c81d35acfc970dbf04e70febe28b610a8b1da3a4bb3d405a8cb38512f4c31c4ceabd09e92c56a2561a52fb77819c312a2b4c75", 0xb4}, {&(0x7f0000001300)="e81aa2de95334502291ee11087b237a403695b1dbd3c43a1f3925564012f3b9e339c4613e2157d285a17c781c8cb2461aa7585dc318bd453f552dc4c7ec55c0d3874b5c4d52eed667973c316d040f34117851ff73cc18ebb7e68ad8245cde3237573aec67c0ecff0bc3ff2", 0x6b}, {&(0x7f0000001380)="b71ed597f57e83569c75ac2c3e69d28580cfec7a1cc3557c6019196c37aa0c6aa311264ebe90877ce82446bdb120e654283c389e0475dd1f1b06dfd00f2dd3b817010bd2e33f3f17bb1efe84bbabdb2be6ebc652474e3c1c178b584d3081632cc3da8cdbd2ddaadc22fcdef5375aea306bd6554ee0b903a435b62567c400cb2e46543476747f0b96238e431d1791f127668eca179c4f886edf841f1d52ace52ab88d8cc4d802a29f7c733e1ccdd9dea6f97ca08d9b990fc91233cecd90af4ad8a8d2581243cf0b6f59594dbb3109f06e458b2fb9386cc242f59625f5d096f2acbeec0b8571e8b619efba8f520a6346713c814e8440", 0xf5}], 0x5, &(0x7f0000001500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x40041, 0x0) write$tun(r14, &(0x7f00000015c0)={@void, @void, @arp=@generic={0x13, 0x9000, 0x6, 0xe, 0x4, @local, "edbf15ba876251d1a54e0cf14b06", @broadcast, "9ea4a279"}}, 0x26) (async) sendto$ax25(r1, &(0x7f0000001600)="e88c6083f3bc507807b5ceb914dc63335b57feabd383fd54ce931ac71f856cfc316b7fc17d1f307dcef32b5b09042d9c19092954d0614784b284ed21f23f5bf03f5cd80e0b448e26a1c8a42ec56607390385db3d073ca575aa85f155733e5aea33530515e92ce4c6c9e1003275a63778", 0x70, 0x40000000, &(0x7f0000001680)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.481062385s ago: executing program 4 (id=1157): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 2.292854319s ago: executing program 2 (id=1159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x24048891}, 0x20048056) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x5, 0x0, &(0x7f00000002c0)) 2.289182469s ago: executing program 4 (id=1160): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5}}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1000, 0x800, 0x80000000, 0x3}, 0x20) 2.267711598s ago: executing program 1 (id=1161): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x7}}}}, 0x36) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000080)={'pim6reg1\x00', @multicast}) 1.948759236s ago: executing program 2 (id=1163): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="d94171d0840f503fc30eec0845d599c6b9e7abe6ec616df76f94ef96328eb0e9a309d153356343b84870a9f861c10bb944a6cfeae30661629773a9e70c6c1a46bc0c557b6c482dace416f67aff4634ccf227759306a0d79834f05cc96383a3a733043a948e9bbbfab1b9df0ffd", 0x6d}, {&(0x7f0000000240)="c03ef073ef1f9530bb5b5cee38114e67048e1847ac693cbc319e00ad9893a37e216f80ebaf63630a27543c151c8cd492b7a4e6ae4738d7d07f17b5d4f3a1c5107e9c97f6233b4acc4ecac0cbba50d6f41efebb97b28d08b4c1dabb1c1816c8ebebaaec1d5d0b5e0759c511d0cf797e73892e154c6cb2a7489facc5b08a5f04cd2077041c96e08cea27dac938056108d7a9549ed097edf06b91662cea5d64e1735d02f502bde68ac71663594de1a093b616958fce9397737465e5d216008546f5986cae6d264853f41b9c8638e705c653b850b173369aef359ffe38b1f35b75576b4767c1c22f", 0xe6}], 0x3, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x760a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x84}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x25}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xa8}}], 0x1, 0x6045) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r0) (async) ppoll(&(0x7f0000000080)=[{r0, 0x421}, {r0, 0x80}, {r0, 0x8201}, {r0, 0x200}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={[0x8]}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x688141, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000540)) r4 = socket$inet6(0xa, 0x2, 0x3) sendmsg(r4, &(0x7f0000000640)={&(0x7f0000000400)=@caif=@dgm={0x25, 0x6}, 0x80, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x11000000}, 0x20004013) 1.948140693s ago: executing program 4 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) (rerun: 32) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r4}, 0x18) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r10) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x939e02dc105d5baa, 0xc}, {0xe}, {0x8}}}, 0x24}}, 0x40004) (async) recvmmsg(r13, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000000740)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x1, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20044004) (async, rerun: 64) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r6], 0x4e) 1.896734971s ago: executing program 1 (id=1166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004800500030002000000050003000000000005000300000000000500030001e0ff000500030002"], 0x50}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x2) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket(0x18, 0x0, 0xc18895e) socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000328bd70000edbdf25030000000c0009000203aaaaaaaaaaaa06000800ffff000006000800ffff000006000800a3aa00000c0009000201aaaaaaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.524542611s ago: executing program 2 (id=1169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) syz_emit_ethernet(0x2226, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv4={0x800, @gre={{0x35, 0x4, 0x1, 0x3a, 0x2218, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x13, 0x22, [@private=0xa010100, @multicast1, @rand_addr=0x64010101, @multicast1]}, @lsrr={0x83, 0x7, 0x4, [@multicast2]}, @cipso={0x86, 0x3c, 0x2, [{0x2, 0xb, "b539185599fca9c601"}, {0x0, 0x11, "7fd097b58ca6fda8819e035dcb48ac"}, {0x5, 0x5, "aebbe5"}, {0x2, 0x8, "7c544e69e5c6"}, {0x1, 0x7, "beff9df0fd"}, {0x3, 0x6, "45c59607"}]}, @ssrr={0x89, 0x7, 0x1c, [@private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0xc5, 0x3, 0x7, [{@empty, 0x8000}, {@private=0xa010100, 0x90000}]}, @lsrr={0x83, 0xf, 0xa8, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x83, 0x3, 0x9, [{@multicast1, 0xb992}, {@local, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x83, 0x0, 0x3, [0x200, 0x7fff, 0x401, 0xffffffe9, 0x0, 0x80000001, 0x1, 0x2a, 0x1]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf6, 0x2, [0xc, 0x3], "2265c7114ee0d3c8de0c281e6758422dae6188dbcac7d786fb7c8415d0a053699e3548dca177ca1666c388c10c5c95acd3bf2962938f0257f50efec37be85bf7a92e5c5bbf9a3e10fc17fee5160edc041448ac4c25506a4e5f3c5f03c1798a9d07f261820649a0642b707b468630780879fa5c586ad2892b47e3e0a56e538a0724d799a9d3908691c213bd3fd5d9044aba4dbe4f4722b9220ab17ceb2c521e1d2e2285dea11e94b74d2ca576a29a669df04904045af1ca7d722d47d0b96ce7965cdb512f0044abbfe73991c13521f2357517aa9bec51934e18e29ae46225abb7470329b798912ad45463430bb99df198305498508984"}, {0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0xa9, 0x7], "af0e41bc5e007f64f6931a7a2008f07dc195ae016dbcd32894524f4b2a94fc92fab8f2ac36d559034138426ec75fab2daab5f34cb27f5a080aeb501375a10e893ecdd906ecb93111ce48a09cb52f7be3772dcc0d41b99ae88a9c500314f8ecea34e9927894e88fbac5c4bb8f831fe0a37a7fbeddcfbd258175393a62c69620833221056514646968ebce8d05ac51a8fb9fdd7b4ee9cfe6d6b17843d01a3c1d1b05750c2dcd226ae17691b860e53f0fb08d11c15cc4da2d2a359c9f9afe4fee897a658102ef5c1634b839068dfc9c3d51d80b9157a753a9dce94010b7d5fd6494a245d488c63fb0a99b85a381f736e6218aaaad1b96aa30446842c48ff4230dc159d9563fc7835de7baf5eda9bea49e9e7865598308c843005e6fa80ea9f93cc32d2a9d7bf9388d8f3e640300ce7545f84df1db5874482439d709164f96e6c7036fd76354d58d4a22df91e7cd978a72aedda76b0f4ec85aa8dbe4ae6325763bd87923018c37a34c2aeae1925f02d774d4452b93c1d4efa729f9d6c0d28e6936ef807f9306891ce376ecc39977c2ca58990ecf28f8c6976bb20850f9fd81f2d8d874a85775aa4139b860ddc026b0c0ab70a60d9ae4c776f6fb670853cb1d2515e9b5d8cb0f1a14214fe357a65116e97c41a89794a488cdfd34c970863232733ed8b776fcda5cacad9aa766b23dfea5b7d07b38a1b0d9f640f5545b6ddd13b96c0813bf1fc5c5319681d8b65aa62ad986326d10215a697e1cef128e4951ecca5e3b901195ae1c5852c833133f1769756f386e9d1bb05d78c4a7228210c9b495865bc3f962804dc3061c577ddc3cd34cbd87e529e27bec45b30de04cd961495f6d21bd1e64ca10ce2c513bf65ece6c15f4fd6d27246e480acce17d3a2dbcf3fe6a6f8d38d8ca972df3e8613b4487323997e0a474cc4685e425ed623dd70e18d0549667e8d515b2f7a839fba9edae2cfcd64f0640b5992f4529c355b1e0d41f9cabe05a39852ecc5631bcbf2397d7ebfec9906974b59bcd409697891eba6de7376dae62aefca909f135e90356753284da6fddb633c4e5aa42835f13ea37cd7a1cc1bc4688656ed244d7b7860dbb531d2369f919d41be49ff35bcb1e785159f619630098ee1310b67fb3d428181b46ed2a1b374722693d01c5353b0843ca1414cd09117d4325e1f00d22602dc60407009ab610057114f82a7d076e5e1c0dd160e00e16603c69a9ff492c6d02cdf59806e8fde58617a26c9253ce8bc1e30408c8a8d822280ba21ea7d59a0a45803afc3139f6b76068914d12bb67caf2788bdb6dfa3c06b808c8a1d3cf07057f4a0a6e998a7f313ed3f724dd0da0831da90d122568d4507307cdec3d7b6f14a5e710e2ac9371f10beefa591d737f2a937ff5264022ed490ffd7a3fb8b0b7825b23957c383fd17b7e8ba7c34074a43e3afc54f7255cb3e3850da96f27e4fbe33cd411e78e258d67cae16c2ce5c9403ebfdad9d979330c1fd1e4e436f8c1423f23c4c96843735a0c982d939cddb4b47c45ae4b4eb92b02d3ae43fdc5e9af60dca2bb81c9bacc9e854a1ef3fed8300377bc9aa417c06ca2cacf2536da29c1ffdf25b9c237aae6137b278196d2281b383ffc4c1fe16264248df71cc6bfc5e41c029e00fb6d7d37e147bf43bb00976c7dbc8d564aef91b894b9b0c2e8de1019d8bf48ceb55e282a8122309a83b5e687dde75159ab54ce06ac3d50a39d07f30a5fdb797c7879271a664278987615f7095dec4ed2a404e01602fe2ae4b89187105ce166d707285fd70292bedb430023dd9e19c03231ae4d8cd6396453a059bbe9ad9fe827ab81f4fcacb9243ba7d8b451a850941da930843905e7a04f1038831686ff6157b1c5d742c376938780b1778e58cc5ddd32b19fb021bdba94d69c8d139eb7d3bbe1cf292908b8067229a7076d0e74c7d989fbe57c88e50db08dc642afe8898478edc13a2a65bc9eeb09d5cd848d1d587613b9510ee6ac6a3b914d52dbf0605717930c0c7e9c6bb06059c884fb2025456915103b87495e8be425ac0ebaccaa83915e4a8a48c9992bc5ba135c178836db569f153f3641e15e9a4482fe13f4e0b546f1b13dcbec3255f30f2f5bc29620bf7e844022003c8e4e1bb61deb9114a36c89ced63dd7cd6367bb31cb4deedb4f59f1b274229bdeba9a877d16d02ae21d63cba1cb39cdbd140c5b787e675b6dcb49f539d1eac94c1fc1f128e45424654e38a5ff55c3f52a11d69ba92dac0241197f577df1e7c58cd2740ec638612e11b4eff35a6af1712ca048625817103252d8b428b2072cdc0c8ec6b0e2518c02504b48d8c1172072e353c679dd739082eea8635e5166f4474a37a18221029610c3b0e221de562cab1a7ed9fdd76e020658350fa2654d370e514aafad264377e5d8c3e0c632d0dcda0c937d7ee3fddd1131894428a91eb62c1299bf61a0e4d45bf7adf09d8e4afb52b26962f56c6c9d3752f12cd42854156159e34e1bb2d51477c43521baeb02780348fcd20a1b4e8a684ea2fab778608fd2917e254f9941e425ad241d0e50da9fa3bd0e551e3c639dae1234760e1f6fd1e50a0eb7a9636b89c637e748c16e61eb500cc5b837061feeb210b421ddaae06bc6f454f68e2c303e09e4a7f0877fdcc8ea584aaeb70fe9150047d2e621a1a7f6c7aa90f3e8bb1301bed23aff60a9a704d89630c96d8897a23553e568f1084550265a84a2d6b2608916825000152329a9b8beddbe21349891efdd218e14d27e074e68d413af996582a1be2cf0f1728e7640c758bdd9552db086599f9d6ac2184c65bf19440a4526adc59bb60132e9e3491ce9b184c9366d6861794f230357df58e2fe1ca5f443bf488d98aa08bfe135d2b2cd0944a7e337d0359c099f36cb2789c261d3e1f7b629085612d234580102a9586cbc44e063f6596c5c887abd238f11e1841ca99aa13a76928ec77b68bf5d3bbd186001c7d9bf2d1fe6f665cc02916228df5ae06e55f1b102567d3ef0b3e7b838295b0f27597a1f1a583d99a3fba278a7a5f3d12bcee014f81dab9d88ecdb75b4dbb6ec6b67236e6e8a1b2f3931947051f85821f252ddbb08838c8a6847cc3a7b38301f4c045f63cb2f02a77e060bef358a32ec855a96c7a3a3cc14e87fc4ef33eeb1376bc7aa97d4797354a2f99e6b82cf8d089f2ae13000d1a2775e81e38a30b88693217dd5a99b6eff145398de2b93548a34a6cbcd7e2c125c71025a838b7361d81a7c6346c6a1c3a84d6e0d194324fc7cb76aeb5b1ca8f87dd0d107a7019555de52c4f5933a3ae057fadd76b82fbcf12b1ee4c43752511a4c2608081fe2c34ae71215073f72c983bb9ca3bcd5be94a1667bb39cee36f15507b150cf7b94aa25b165fbbcdf5900a55034b65142ba49b74faba9693e9fcd3f764ce97d9b4536b5fb110d8f6c8e262c94b9bcf7bec080c3926050d7f0e9a555d2dd9e9a1de47c16b08f2811408fcbbca5693448b2932fcf2ebf4c7d436947722089275acff5478039e9fb6f6f960e758aeeb590768b99c4e29af37ec869690f79d3fe49fd7701b399fb9136cd1784e53a9480a3d209e5b55b5d468207eb2ceb6e14387d4196e97113ac683f5dbd5b4da171448061d2f4487487b4e2e5e784cdb399bffc83590b7cb9560c989be1764896e792ea540cc1af9ae998eaa359d5f0e18ae4c1c0d5196d76f455522d99cba13e507ee86002e1e0f0db56d44fcd0a738c7b7ed88f878b9ee50e5feb6d23d3fbf43e7d78583df67e06a91c25c5366cd2d9a836b9fa9a2606fb2f0ea0c3abfb56b93370788e7cca535f95b34806fe1ceea7fd791a327bd8e0c45a390f0410cf9cba9fdf2ffc46c4d7f61fe519c343e549fb951c1c01ebbc8adf5618c69c5dc1850bc385c9d3769a3a5164b8db8368b4b91212db90052b6750b04e0116ed36f3853eb20592ba4e6f59d48b4d6ff2d59b1070a2db4dde4d4116d4a762a5e5d21b2e93ec1a436c77211b5d9806fe060160286189f0086f94c0a57fe04f5e7aba60f82156925d68052998855980eec99cb318bff469757584c54742bb676d943ec8d5053523c3ed5329a4a11dbf22d05aac271340aa0173d463b9fa6d3e9c9af190b2c0fa88971cb384085550faba08161c51cbc6462479ee93d5d1cb9faf5fff17c4cdb61fefe9b68c5124dff446f215c5487cc23c905b52c7b165749cf2bacf82d78b4bba4fd8c71d3f5b78f72746f665d74e0b6e5ac4a76b753df2dcc573c3e8357db2e65fd64ba30b3589c05766699d37d2f540210f092c954c5ff32469aa954873cf09995185eefab00025f2ff928bc562dd4c2376376420e9fd9d8dfebd92407aa5eb8ee00d1d70d52125a60e2d453bb8bb47e938b4f75b05590776941576ea16171a67940958a23f725e17c8e4c9d9cb1fa090d56ab8c29417904e054e82eeac40983b7f5a3920a5883d6e59c02a36e93eb2645ad6c53c510a5c1ddf2ba74d9957c00bd4671cd741ae4f23831fbe434c80f70bf128303d5e62e8959c7e5eb2385eb09a313a9d2dbe69b6420935eff84eb178dfc403240345793221e0beb70399faab9d923c32b78dbb49ecbfc5420e52092449d66466024eba63644b19f15916cb83c698ba26721f5917a1fce096c2deb46be1fafd519e3b4429840262c0576b426dcf9dd95c8b2bffa8f92386993d46ece93c142a66b254e9102a02cf2f4664420d49693a0f5b3fcf1660d1e4068dd696c1ec799d98fcc6eee8c104d0b251fe3e851b60d3ee49c0bd358bde48cf89fdf1a72092fb5909f041884b4ebb69088cd1b15ade44c48d4ee1868223a05ef290878d7689c1700ec8082d234174efbe2304811edc7bf222d55708631e405409d7896030a0940c9bb7910dc9dee418df9adfde5f111ac0b697df50b2324f961ea7a2d4251ff782dfe826d74a81d10af52e71746533eea7c520059c027c8ce6ca4444fc1e71f5f62d24cb58e4dd50780309daa141fc5a6dbc5348756b7b676bbd205ceffdb52b90f73dbe0977a013a56379fea35597864e767e2f8b1b99c7ab3c19a7d3c922658bc200c7f263c9a55d2588003bc2043269c12a4b11562068a67d51d39dd1f0d5b04c4e1c958a24b91a843fbcf698371ca9ce8587454f2ba10785463f5f94248c693ba9b4e19f3573914258068af9a680f5090a163387deda81cce5d8f428924365ae8aeb6f8540b6e1d8977c166e84a6314630eeae3c5086b0a8796beebad2d4d7f87cddce9d78952b6a20f2f0f43af9374c0d16a8d5aea7bee3ff3a6fb3c9c9dd55ce272d5500b43d435e3fdd5380591828672695310aac08f433e0d6ce3cf82af8d07c227c2e23da7f22054fd1868dcd37dc74efdc049c94c48300e592692d98cc1e3cde11e9d91aa41cd0f6213852584f61f40113ad900cf415f1de6758bb8993f0b0516bd951cb4437c4446505541d197e49b4b2280cb4af2ead4912276a34b87c8eb05c7012c1bc48d59a358c1748d0a665be916bba7cf838ab9df09589bbe412ae0b48b1ebf873c7b40ffd6e8117943b51ad0525cfb1d82f42439f230c3249f31a4036570d21e60ff2215d63a19fa57da14c40694744b76f5968900b1ca2f83419afb20c03d8aee6ff864e8dc11e97b5b268ade6471e285cc81282ef9402288e9562f79118af4ab5b1944df78e572b3654aa51f65fa6cecbecb66615f167e0309549d6a6fa6b2cf8b5ffb34a2e1b0050d9e041bc822db2088236f065922884c8ea3ecec01c7c2ea36160f6ad2ae330ab6eee106180f8c146f0f61518ba324075393e83e5b8863a65895711550081aa99"}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x7, 0x1, 0x0, 0x0, 0x5, 0x2}, 0x1, {0xbc9a}}}, {0x8, 0x22eb, 0x3, {{0x0, 0x2, 0x0, 0x3, 0x1, 0x1, 0x2, 0xaf}, 0x2, {0xc, 0x1, 0x2, 0x7, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000022c0)={0xffffffffffffffff, 0x1, 0x4, 0x7, @vifc_lcl_ifindex, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000003ac0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xfffffffd, 'ip6_vti0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000002280)={0x21, @dev={0xac, 0x14, 0x14, 0x34}, 0x4e23, 0x2, 'fo\x00', 0x2f, 0x6, 0x4}, 0x2c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000002340), &(0x7f0000002380)=0x4) r8 = socket$rds(0x15, 0x5, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r9, 0x58, &(0x7f00000014c0)}, 0x10) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000002300)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)}, 0x0) 1.400297075s ago: executing program 4 (id=1171): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x200, 0x98, 0x298, 0x298, 0x200, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x11, 0x11]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="248f6b6c", @ANYRES16=r5, @ANYBLOB="01052cbd7000fedbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028cd7000fddbdf251c000000080003000300000008000400001000000800010080"], 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe0, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_SE_APDU={0x89, 0x19, "42a3c12ff414b3a535996de0c021bb2b6ce7f315ee8154958d4b900551e49d6dfb4fb35eb26bee319eb9e22634265c37ef2e3c8a1f5226865d491f1e38b3404d6f5a19cc13e33e05db970c5ace415cb60a9f285807d47d43b877731057416a2de754578fdfef54bebea3d9fc5e5c0a5066d66183e587adc7a087b814bc19c91a11b28dd0ab"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x815}, 0x20000897) 1.380358177s ago: executing program 1 (id=1172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010471"], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) close(r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003bfb61195abe322bac9a098908608b91b56f2038a95f156f562b8a93d6b797bf83e9604b061716f1f5bbdcb1a167f8ef1f4863b051019d644e3c6f68d59118a5830771dc7ec081c16e2d4ea78367e3f6e8ebc120f5acdde25980abbb3b9a41488da7adf07bff7f", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) 837.111295ms ago: executing program 2 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0xc0) (async, rerun: 64) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004800) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 815.839569ms ago: executing program 1 (id=1176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000100), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 814.050398ms ago: executing program 4 (id=1177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "842cc900544f9c0b", "0fcb4ed7883fb97cac31fb68ad2f8d3f8a68b450b102de6fb65f4e7b7bb152cd", "13b37e67", "cf834c8592712042"}, 0x38) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080)=0xff, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="f1e3128ee918c3f3cf042671b57533022c9317b15991d9b4c041a01666bbfc94712be60324961b92c43bc2b4bc722f00a6fbb5b2ef3ca24d8a2e321d7f8c2422ec8ac2315bbb3cf42810", 0x4a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c010000100013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @dev={0xac, 0x14, 0x14, 0x10}, r8}, 0xc) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x2, 0x0, @mcast1, 0x9}, 0x1c) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb810000f086dd6008010800142f00fc010000000000000000000000000001fc010000000000000000000000000000c6008902", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 806.08133ms ago: executing program 3 (id=1179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0xa000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000020801"], 0x20}}, 0x20000000) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xa1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) 803.682276ms ago: executing program 1 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d5, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0xb, 0x0, &(0x7f0000000080)=0x1a) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x3, @loopback, 0x401}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000180)="00f9855e9a0ce8bced362770db65ffd97b8bc174411a65cf2ddda8fa", 0x1c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}}], 0x2, 0x20000000) shutdown(r6, 0x1) bind$inet6(r6, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) close(0x4) 786.847129ms ago: executing program 0 (id=1181): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65edff0b000100000000000000000000000000000000000000000005"], &(0x7f0000000100)=0x2d) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x7cc4}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x2b0, 0xc, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x29c, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfb, 0x1, "408a051fac5e0b6dd6c3c6d4d958abcc9cbedd16c4e374ef267ee0a771283c602f8232d6b101d1ed9891d3f83d61c3a68842055839d69854667a954e07ee121dfc2f5fb14ebb9c6ca8b3772dd0550d7eb74b7409a8e52ebddb70f78630e611a48b2a9f6e5c6cc290a84b4f0a81c612a40769febc0677254ab3c13ecac9bc60c8e67200acf9f0e8b79fdb53f7d39aef1b853a5bd0a4d21d4ba1d75a66cd323cad884022de27dd6edb5f1f844c6fb3ab70baea5a22509a2f1cbcbd1c2a128bdb18c6f2041f378de683974f978f09358335f65f127d302ea60ebd62ae9a224497204315719ca8e59e2e9d0603c62ce57c2a50d1d6f495716c"}, @NFTA_DATA_VALUE={0x4f, 0x1, "fd10f540ad11180c2e27aa9e1b26ca64cd6dbb7f273b942b9c8a6b782a352823024ac447a42848ba6284fc07abf87af3f5b2eadbece89ee8a622f3d6066408a273d6a9cc95da403b7a8b17"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x85604c2b8c41067e}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd0, 0x6, 0x1, 0x0, "d2600b8513b044489e4ecefe8d07deb4bb1677fa04e0f84f2f78de81f309bceca1da5ee6fb713311fdd01f996d92a66b2b717f8633ed40dbceb35858bed43aee7d7e069cb7c8f40afbc7a8e27f3a3c2fc7f9b7432d805fcbe1a76dd3b964f357284a175d30fd6d953648564a28a01c4bf5603582374f86bb2f3b66b62670731784c447f65256f7e9fe2794bd3411dedb960f2b5f0471a203f3113861babe29937aa5f62e573c96ce7d79407c97dfdab251d86bd9df64cf565d405b10bb50f66b409cd1f292edb293a03219fc"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x9a333355b0871d01, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0x50, 0x14, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x3f0}, 0x1, 0x0, 0x0, 0x20040080}, 0x1000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000a9000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65edff0b000100000000000000000000000000000000000000000005"], &(0x7f0000000100)=0x2d) (async) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x7cc4}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x2b0, 0xc, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x29c, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfb, 0x1, "408a051fac5e0b6dd6c3c6d4d958abcc9cbedd16c4e374ef267ee0a771283c602f8232d6b101d1ed9891d3f83d61c3a68842055839d69854667a954e07ee121dfc2f5fb14ebb9c6ca8b3772dd0550d7eb74b7409a8e52ebddb70f78630e611a48b2a9f6e5c6cc290a84b4f0a81c612a40769febc0677254ab3c13ecac9bc60c8e67200acf9f0e8b79fdb53f7d39aef1b853a5bd0a4d21d4ba1d75a66cd323cad884022de27dd6edb5f1f844c6fb3ab70baea5a22509a2f1cbcbd1c2a128bdb18c6f2041f378de683974f978f09358335f65f127d302ea60ebd62ae9a224497204315719ca8e59e2e9d0603c62ce57c2a50d1d6f495716c"}, @NFTA_DATA_VALUE={0x4f, 0x1, "fd10f540ad11180c2e27aa9e1b26ca64cd6dbb7f273b942b9c8a6b782a352823024ac447a42848ba6284fc07abf87af3f5b2eadbece89ee8a622f3d6066408a273d6a9cc95da403b7a8b17"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x85604c2b8c41067e}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd0, 0x6, 0x1, 0x0, "d2600b8513b044489e4ecefe8d07deb4bb1677fa04e0f84f2f78de81f309bceca1da5ee6fb713311fdd01f996d92a66b2b717f8633ed40dbceb35858bed43aee7d7e069cb7c8f40afbc7a8e27f3a3c2fc7f9b7432d805fcbe1a76dd3b964f357284a175d30fd6d953648564a28a01c4bf5603582374f86bb2f3b66b62670731784c447f65256f7e9fe2794bd3411dedb960f2b5f0471a203f3113861babe29937aa5f62e573c96ce7d79407c97dfdab251d86bd9df64cf565d405b10bb50f66b409cd1f292edb293a03219fc"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x9a333355b0871d01, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0x50, 0x14, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x3f0}, 0x1, 0x0, 0x0, 0x20040080}, 0x1000) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000a9000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x0) (async) 771.883999ms ago: executing program 0 (id=1182): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000180)=0xc) (async) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000180)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getrule={0x1c, 0x22, 0x8, 0x70bd2c, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x5, 0x84, 0x0, 0x0, 0x0, 0xc}, ["", "", "", "", ""]}, 0x3e}}, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) (async) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x40) (async) write$cgroup_pid(r6, &(0x7f00000000c0), 0x40) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) pread64(r7, &(0x7f0000001840)=""/4096, 0x1003, 0x1) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x16, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) pwrite64(r1, &(0x7f0000000600)="2596cee5d14fedadfefc6ab986cc285f9b54953c3a02b6a70eed02d972200fd4d8b72a3ccc570de5b30c4a300f1c0272ec62d8b0aef3fc13b5d031a947e5ed850a81a68780b39bffdf62ff1ca737379cc8002ab3e255e98a76b3f0252908c52a79b23b8968b63f1a", 0x68, 0x8000000000000001) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800e3ff8b73a26d2dbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="010000000004000008001c00", @ANYRES32, @ANYBLOB], 0x28}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioctl$BTRFS_IOC_RM_DEV_V2(r13, 0x5000943a, &(0x7f0000002840)={{r10}, 0x0, 0x10, @unused=[0x7, 0x9, 0x0, 0x8], @subvolid=0x7}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r13, 0x5000943a, &(0x7f0000002840)={{r10}, 0x0, 0x10, @unused=[0x7, 0x9, 0x0, 0x8], @subvolid=0x7}) 628.811465ms ago: executing program 3 (id=1183): r0 = socket(0x10, 0x3, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) (async) ioctl$TUNSETQUEUE(r1, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x20901, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB="66e01b001569749351b20000000000080000"], 0x40}}, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)) 611.967723ms ago: executing program 2 (id=1184): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x88, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x68, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x4}]}]}, 0x88}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x730, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff"}]}, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in=@private=0xa010101, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {@in=@broadcast, 0x0, 0xff}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "408b1465cc98145235faa3108e14d7b2fee081eb57514a4196af7d15b24d9eb526931a287b2e7c3c563ca407db93c418bddf98a2dbff0f1ac7fa6d079ef090fb51"}}]}, 0x17c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x1, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8851) 577.761863ms ago: executing program 0 (id=1185): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x88}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="3a2f3ae6", 0x4}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xb7935a7eb449fee3, 0x0, 0xff7ffffd, {0x7, r13}, [@MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x0, 0x1, 0x1, {@in6_addr=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x94, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008040}, 0x80) 440.507141ms ago: executing program 3 (id=1186): syz_emit_ethernet(0x66, &(0x7f0000000380)={@remote, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0xd47, "0808f7"}, 0x6) gettid() 382.012363ms ago: executing program 3 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r5) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000880)={r6, 0x8000000000000000, 0x0, 0x1}) (async) r9 = getpid() (async) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async, rerun: 64) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$FICLONE(r14, 0x40049409, r12) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYRES64=0x0, @ANYBLOB="9a81f717bc0bb1f9953bdeeb25e39889776dd9374074833648cde5ec9e95c676f00031d99cef9d5ca9fc604d9ad8d73e1b2f275d96d49af43daf056b6d940b043ba0eab94691b2627ca3533ec2b8c98920e869c95aa32229a797d65da1d155e8dc3a20c3253fd8762cbce1f3262248a9687053cf119dc7d0c356b7773360e692795b2b60ac598f4e842d3efc912ab7d2a4d5ba2d05f96f304ab18118a266e4df69", @ANYBLOB="08ed62697cf566e6a18e7de648f10107ff5100", @ANYRES32=r9, @ANYBLOB="0800db00", @ANYRES32=r10, @ANYRES16=r2, @ANYRES32=r14, @ANYBLOB="4c0099fcba603159115384626a805931b3b0ff30e6829e5371e59ecb9a3729ff1000", @ANYRESOCT=r9, @ANYRES16=r2, @ANYRES32, @ANYRES8=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4048082}, 0x0) (async) r15 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r15, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 313.235179ms ago: executing program 0 (id=1188): socketpair(0x11, 0xa, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="2b665bbba33bb8cdb6c9078e5ee5c7b03a8ea33c6b12da2b17e6ed8efc9a729a20b4a23d1033647637938eacddfe1dbe6d8df73903238229121df1c6865e91f68ae6275036a9efc216ad4620f398e00ad373bf9ba3017134eb3cea4556c3ad08a6e0f13544d78f1f2d3b0519748f3579dbc36b10df0372b20ee6176507f7812a381bae7f083f796cc9bf8a93c71475906152c905fc5a15f400c24830f4dcf603f6c96c46f099dcbac3002f4555f510e3bca4ed8e68b1145bdd1528d0db9f2a4443f4e761fb5bf971ae8d1ef40eb36c0f92900cae75e63b831978c330d6ce8f35cf382150c9cc9e7adb6c386b0a9677f7c0d6dee3284f7c", 0xf7) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0x6a, "a8e2975890ceadd84d4b9f940a23b515e05f71067bbc638b0d1eb7a5eb9655d760cca7d4b641432359dff9f253ca142af11299fc490b6176f26110db135be208c4575e4ebe54423732996b7bb3f0840134beb8e84cafa787d1f33d8a24b7f75089d7875fec9cb3948d1a"}, &(0x7f0000000240)=0x72) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000340)={r3, 0x40}, 0x8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x244, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4dc, @empty, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x90c6, @private1, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf35}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1, 0xe0b}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x820, @private2={0xfc, 0x2, '\x00', 0x1}, 0x30}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6b6}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40}, 0x8000001) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@generic={&(0x7f0000000700)='./file0\x00', r6}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000800)={r2, 0xa}, 0x8) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000840)={0x7f, "f42a74b44b8305bd30f61d9fcbb801ad569588a118e697b04261c16756da7e9b12e223cfa51848d0d3cf91c37dd581e84709163e3c7dce5326c4ef58ace7789f85026378713c8ed5fb79749f860f3e63c95f00efcf5dd18eb77ea57d5ccb84f8a98f9541dbe3aec9b500699592d48e4e055930341cf3e85a229a9d9023dc3101"}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000900)={r2, 0xe9, "6143516669c1d11a2ab70e03be1ebf7a1472b271609ac6429d754aa187f27c91239e7e3ba932cb220ba8e92fa67090ac5a4fc79dea8c58fe3abbc14ff8972deaa8ff527cc44eed5a3b5f135e822e315bc0ccb08d6aefb0a7dff6ed3410233f1c7c1344f8b830ce4d6e802c13032bbd0eaf92d368648ee3cebc26e87b7bbffd1d91183db73c26263676bbf0cf7188caa1c0cfeddcea8215f80989cecb922638d34681d7f3b70667515a4ba2b2b9e7d48fe31b4fa7c67dd82903ab609ab26cb706d63f40820cf2e1b2f08875f42fd075fa530fe15fde73e9b3bbc1c309a920b17f9a7cdaa7c9ff4f102f"}, &(0x7f0000000a00)=0xf1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000a40)) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000a80)=[{{0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{}, {0x3, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4}}], 0x28) r8 = accept4$rose(r0, 0x0, &(0x7f0000000ac0), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000b00)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x1d, r9}, 0x10, &(0x7f0000000bc0)={&(0x7f0000000b80)=@can={{0x2, 0x1, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "95b86ac03afdeaba"}, 0x10}, 0x1, 0x0, 0x0, 0x400}, 0x40855) sendmsg$key(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000c40)={0x2, 0xd, 0x54, 0x3, 0x228, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_sec_ctx={0x201, 0x18, 0xd, 0x5, 0x1000, "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"}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0xffffffffffffffff}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa, 0x10}, @sadb_x_sec_ctx={0xf, 0x18, 0x74, 0x7, 0x70, "9d3cce8023a0998993a5c0b0789b7b5d6d39b7cfe9b8d7a1ddb4126e4addc7d4376cbfa90bf731ae595f76c8a01425666e40d01912a339c8faa18811acd604a36937a97825f6c56a9f7b9dcdd299518013b4ddb35e2362362ede1694d8b2e40befd7f6488e0bdf397518be25d74548ce"}, @sadb_address={0x3, 0x17, 0x33, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}, @sadb_lifetime={0x4, 0x3, 0x8, 0x8, 0x8, 0x80000000}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bbf, 0x0, {0x6, 0x33, 0x1, 0x8, 0x0, 0x1, 0x0, @in6=@mcast1, @in=@local}}]}, 0x1140}}, 0x20000000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001e00)={0x5, 0x8, 0x600, 0x1, 0x8, 0x0, 0x2, 0x3, r7}, &(0x7f0000001e40)=0x20) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8) sendto$inet(r1, &(0x7f0000001fc0)="7bec7e96a9a79087043031ae73e758d7d147d90c923cf086c5ef38b652b252f04c851ae1f7b81eec9e8061d12d3eff08bc35040ad774b33b237545cd40a2a8bef68f396a42ad3b8972a6934e", 0x4c, 0x40, &(0x7f0000002040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002140)={'syztnl1\x00', &(0x7f00000020c0)={'ip6_vti0\x00', r9, 0x2f, 0x1, 0x81, 0x7, 0x20, @empty, @mcast1, 0x700, 0x700, 0xd, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002240)={'erspan0\x00', &(0x7f0000002180)={'ip_vti0\x00', r11, 0x10, 0x20, 0x25, 0x5, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4c, 0x21, 0x3, 0x5, [{@rand_addr=0x64010100, 0xfffffffc}, {@loopback}, {@private=0xa010102, 0x9}, {@multicast1, 0xf}, {@private=0xa010101, 0x7}, {@private=0xa010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf95}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @generic={0x89, 0x6, "af2f025c"}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x8, [0x6, 0x4]}, @ssrr={0x89, 0xf, 0xb2, [@private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xb, "ac91161e5f5fef1944"}, @noop]}}}}}) 252.578969ms ago: executing program 2 (id=1189): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) close(r0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000540)=0x1000000, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x80800) (rerun: 64) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r5, 0x0) (async) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce50590977f46ae9500a02586edbc885d4063b4da2f46780e6a6a96d804d16", 0xf7}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798d998ec67834462b2263d3e5e30427b12224b228b33c290723e8fd00c1834c07cdc5aa5a1f93021339c5135964fa1ad9f7793e00be56ed261e9e84ddd16135c351188a8daf6cc3c95171e14d0ce50e3c887aa233d51291a249e2b", 0x91}, {&(0x7f0000000140)="b2775fe35fcc15e777bb7fb90d4c8651511b532442d3829d0a9d850535c96c02bd7228dfa68408791416a19db591e465b7f3a48c73068d", 0x37}, {&(0x7f0000000600)="9db1cd3a4165de7d2aed0579f91434d380248bb62a439260c528728c8d4df5624d", 0x21}], 0x4}, 0x40000000) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x259fdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x8}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) (async, rerun: 32) recvmmsg$unix(r3, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}, {&(0x7f0000001080)=""/215, 0xd7}], 0x2}}], 0x1, 0x200, 0x0) (rerun: 32) 243.589534ms ago: executing program 3 (id=1190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="1200ec005c26265b28282725242bf9272c00000022e98bc1422a93407d867f8dad064d99efdfd3b98b0aa24d98f551f29e2587a082242dca71fd9d412e727710"], 0x14c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) recvfrom(r0, &(0x7f0000000200)=""/62, 0x3e, 0x99bcb88de02507d2, 0x0, 0x0) 202.365892ms ago: executing program 4 (id=1191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x29, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[], 0x0, 0x397}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$TUNSETIFF(r1, 0xb701, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a0104005161b1d90000000000000002000002090001007379711e010000000000000000030073"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) 148.826407ms ago: executing program 0 (id=1192): socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0x1004, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x39) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000004c0), 0x8}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="12671a0064150500080000d7b93130a700000000956728350000000075e9543e3ba9ec49811fbac368ece7bbf3309c2320f80984a1de1eb166634159dd49bfff5346d4978292c7596ac211aa7de4c56617b69487249125830462cd654e1a927daaf062b9efa7eff3cca79431ea8e717264b0f789395f8385d3ca634d79a44ecdc4b33240ad2b827e06b414883464fca42b0d33bc744f35062446ec21400d7a6fe801a310568afd57547c7cd1aaf706b7e8a0e3d560e5ac5116dd0d047699ce3dcad158f5e5aff2b712199c0b73c1e05c4b8c6e972645"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000240), &(0x7f0000000380)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 37.649604ms ago: executing program 0 (id=1193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r0, 0xb1bcc000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000740)=""/154, 0x9a}], 0x5, &(0x7f0000000880)=""/211, 0xd3}, 0x100) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000002006449a10d1fd753730b101352ac41386f7ef968f3084712abdedca149905fc7e54700e74d14dd7240d38bc799e96a3200a6ba1ed74056b501a35bb8b2e2a440c71dd7b31a3b77684f96ab3366133de76f0825ad08218a6f887ba50b22867f52d29d0355585880adfe0bc3d2aba36ce766f2da96f3f1e6d971a7a6262d1e7fff17aea234124ea3a7d812d56dc2845b1e1e2725e402ecc6de27e79078c19216fb2376dca4f7d561923d724", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf2510000000060028000000000008003c0006000000080039000700000008003a000600000008000b00810000000a00090000000000000000000500330002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x5}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x40048c4) 0s ago: executing program 3 (id=1194): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffdd7, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 82.633242][ T5816] cgroup: Unknown subsys name 'net' [ 82.761377][ T5816] cgroup: Unknown subsys name 'cpuset' [ 82.770148][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.469350][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.642291][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.650868][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.658885][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.662748][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.667188][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.681952][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.682485][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.697388][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.706855][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.715305][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.728093][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.735221][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.743201][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.762983][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.764975][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.778420][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.779113][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.788546][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.795781][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.801210][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.807954][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.828629][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.836720][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.844903][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.848478][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.541772][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.566505][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.673550][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.822014][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.863533][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.871548][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.879514][ T5836] bridge_slave_0: entered allmulticast mode [ 89.886915][ T5836] bridge_slave_0: entered promiscuous mode [ 89.946960][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.954341][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.961779][ T5836] bridge_slave_1: entered allmulticast mode [ 89.969804][ T5836] bridge_slave_1: entered promiscuous mode [ 89.977480][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 90.042785][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.050408][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.057728][ T5827] bridge_slave_0: entered allmulticast mode [ 90.065029][ T5827] bridge_slave_0: entered promiscuous mode [ 90.077440][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.085261][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.093262][ T5839] bridge_slave_0: entered allmulticast mode [ 90.100762][ T5839] bridge_slave_0: entered promiscuous mode [ 90.141063][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.148403][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.155545][ T5827] bridge_slave_1: entered allmulticast mode [ 90.163715][ T5827] bridge_slave_1: entered promiscuous mode [ 90.175069][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.182487][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.190251][ T5839] bridge_slave_1: entered allmulticast mode [ 90.197497][ T5839] bridge_slave_1: entered promiscuous mode [ 90.207414][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.220955][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.338488][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.364652][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.377142][ T5836] team0: Port device team_slave_0 added [ 90.397339][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.422563][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.429965][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.437190][ T5829] bridge_slave_0: entered allmulticast mode [ 90.445150][ T5829] bridge_slave_0: entered promiscuous mode [ 90.455198][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.478782][ T5836] team0: Port device team_slave_1 added [ 90.522438][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.530064][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.537393][ T5829] bridge_slave_1: entered allmulticast mode [ 90.544941][ T5829] bridge_slave_1: entered promiscuous mode [ 90.565686][ T5839] team0: Port device team_slave_0 added [ 90.571894][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.579375][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.586636][ T5828] bridge_slave_0: entered allmulticast mode [ 90.593995][ T5828] bridge_slave_0: entered promiscuous mode [ 90.602848][ T5827] team0: Port device team_slave_0 added [ 90.635406][ T5839] team0: Port device team_slave_1 added [ 90.641865][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.649348][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.656523][ T5828] bridge_slave_1: entered allmulticast mode [ 90.664129][ T5828] bridge_slave_1: entered promiscuous mode [ 90.672600][ T5827] team0: Port device team_slave_1 added [ 90.691546][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.698707][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.725382][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.777356][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.788425][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.795486][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.819078][ T5148] Bluetooth: hci0: command tx timeout [ 90.822385][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.877631][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.893767][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.898481][ T52] Bluetooth: hci2: command tx timeout [ 90.901253][ T5846] Bluetooth: hci3: command tx timeout [ 90.906820][ T5834] Bluetooth: hci4: command tx timeout [ 90.912811][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.919187][ T5148] Bluetooth: hci1: command tx timeout [ 90.945283][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.965380][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.975392][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.982540][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.009036][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.049426][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.056424][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.082962][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.096709][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.107854][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.115012][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.141460][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.155465][ T5829] team0: Port device team_slave_0 added [ 91.213775][ T5829] team0: Port device team_slave_1 added [ 91.239680][ T5828] team0: Port device team_slave_0 added [ 91.285044][ T5828] team0: Port device team_slave_1 added [ 91.296903][ T5836] hsr_slave_0: entered promiscuous mode [ 91.303834][ T5836] hsr_slave_1: entered promiscuous mode [ 91.322954][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.330214][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.356506][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.404643][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.411997][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.438552][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.455325][ T5839] hsr_slave_0: entered promiscuous mode [ 91.463518][ T5839] hsr_slave_1: entered promiscuous mode [ 91.470121][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 91.476170][ T5839] Cannot create hsr debugfs directory [ 91.495689][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.503240][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.530372][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.547437][ T5827] hsr_slave_0: entered promiscuous mode [ 91.554110][ T5827] hsr_slave_1: entered promiscuous mode [ 91.560485][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 91.566234][ T5827] Cannot create hsr debugfs directory [ 91.615411][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.622749][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.649281][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.744524][ T5829] hsr_slave_0: entered promiscuous mode [ 91.750863][ T5829] hsr_slave_1: entered promiscuous mode [ 91.757094][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 91.763760][ T5829] Cannot create hsr debugfs directory [ 91.887865][ T5828] hsr_slave_0: entered promiscuous mode [ 91.894597][ T5828] hsr_slave_1: entered promiscuous mode [ 91.901106][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 91.906859][ T5828] Cannot create hsr debugfs directory [ 92.031323][ T24] cfg80211: failed to load regulatory.db [ 92.352162][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.366265][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.377505][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.397377][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.464307][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.495180][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.505974][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.526431][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.580151][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.603459][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.614172][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.645845][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.732948][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.745357][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.770597][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.782190][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.891181][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.899165][ T5148] Bluetooth: hci0: command tx timeout [ 92.921770][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.939084][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.959465][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.970112][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.978536][ T5834] Bluetooth: hci4: command tx timeout [ 92.984069][ T5834] Bluetooth: hci3: command tx timeout [ 92.990528][ T52] Bluetooth: hci2: command tx timeout [ 92.996100][ T5148] Bluetooth: hci1: command tx timeout [ 93.053179][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.066452][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.112093][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.119427][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.131697][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.157360][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.164615][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.190624][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.197758][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.209428][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.216527][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.230340][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.291885][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.306384][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.331943][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.339105][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.374006][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.381218][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.435359][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.480011][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.487227][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.527808][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.535189][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.599837][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.716897][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.783197][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.790482][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.884640][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.892414][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.030526][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.101501][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.257834][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.274556][ T5839] veth0_vlan: entered promiscuous mode [ 94.327202][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.370852][ T5839] veth1_vlan: entered promiscuous mode [ 94.379000][ T5836] veth0_vlan: entered promiscuous mode [ 94.444079][ T5836] veth1_vlan: entered promiscuous mode [ 94.545791][ T5839] veth0_macvtap: entered promiscuous mode [ 94.571348][ T5828] veth0_vlan: entered promiscuous mode [ 94.589379][ T5839] veth1_macvtap: entered promiscuous mode [ 94.633709][ T5828] veth1_vlan: entered promiscuous mode [ 94.679141][ T5836] veth0_macvtap: entered promiscuous mode [ 94.695212][ T5836] veth1_macvtap: entered promiscuous mode [ 94.717507][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.731777][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.764397][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.793387][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.823874][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.833936][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.845288][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.867952][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.877354][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.921207][ T5828] veth0_macvtap: entered promiscuous mode [ 94.931284][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.941754][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.953394][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.973277][ T5828] veth1_macvtap: entered promiscuous mode [ 94.984121][ T5148] Bluetooth: hci0: command tx timeout [ 95.001768][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.058986][ T5834] Bluetooth: hci3: command tx timeout [ 95.064464][ T5834] Bluetooth: hci2: command tx timeout [ 95.070646][ T52] Bluetooth: hci4: command tx timeout [ 95.076300][ T5148] Bluetooth: hci1: command tx timeout [ 95.153225][ T5829] veth0_vlan: entered promiscuous mode [ 95.162230][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.170300][ T5829] veth1_vlan: entered promiscuous mode [ 95.183129][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.185546][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.198532][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.211654][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.254997][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.273694][ T5827] veth0_vlan: entered promiscuous mode [ 95.311750][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.327807][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.345096][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.356793][ T5829] veth0_macvtap: entered promiscuous mode [ 95.374370][ T5827] veth1_vlan: entered promiscuous mode [ 95.388969][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.397862][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.413441][ T5829] veth1_macvtap: entered promiscuous mode [ 95.433152][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.433324][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.442511][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.479080][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.491546][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.520274][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.568904][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.577845][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.616949][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.651765][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.733371][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.756535][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.830174][ T5827] veth0_macvtap: entered promiscuous mode [ 95.900561][ T5958] Zero length message leads to an empty skb [ 95.910900][ T5827] veth1_macvtap: entered promiscuous mode [ 95.926519][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.937320][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.188538][ T5971] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 96.273003][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.427518][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.485538][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.535886][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.599874][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.615021][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.866817][ T5988] netlink: 'syz.0.8': attribute type 4 has an invalid length. [ 97.016873][ T5995] netlink: 'syz.0.8': attribute type 4 has an invalid length. [ 97.059052][ T5148] Bluetooth: hci0: command tx timeout [ 97.093741][ T6000] netlink: zone id is out of range [ 97.100254][ T6000] netlink: zone id is out of range [ 97.105400][ T6000] netlink: zone id is out of range [ 97.110812][ T6000] netlink: zone id is out of range [ 97.116059][ T6000] netlink: zone id is out of range [ 97.128320][ T6000] netlink: zone id is out of range [ 97.133560][ T6000] netlink: zone id is out of range [ 97.146314][ T5148] Bluetooth: hci1: command tx timeout [ 97.151989][ T5834] Bluetooth: hci4: command tx timeout [ 97.155527][ T5846] Bluetooth: hci3: command tx timeout [ 97.187852][ T6000] netlink: zone id is out of range [ 97.193662][ T6000] netlink: zone id is out of range [ 97.211480][ T6000] netlink: del zone limit has 4 unknown bytes [ 97.255912][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.541703][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.641764][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.677118][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.924416][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.073754][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.137335][ T6041] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 98.206951][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.248546][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.603521][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.614256][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.623218][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.636464][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.653235][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.863744][ T6056] ipvlan2: entered promiscuous mode [ 99.007732][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 99.031907][ T50] bridge_slave_1: left allmulticast mode [ 99.037764][ T50] bridge_slave_1: left promiscuous mode [ 99.089786][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.135674][ T50] bridge_slave_0: left allmulticast mode [ 99.153953][ T6069] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.155183][ T50] bridge_slave_0: left promiscuous mode [ 99.187104][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.236227][ T6076] sctp: [Deprecated]: syz.1.21 (pid 6076) Use of int in max_burst socket option deprecated. [ 99.236227][ T6076] Use struct sctp_assoc_value instead [ 99.622928][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.633894][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.644219][ T50] bond0 (unregistering): Released all slaves [ 100.112556][ T6093] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.271738][ T50] hsr_slave_0: left promiscuous mode [ 100.306274][ T50] hsr_slave_1: left promiscuous mode [ 100.332835][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.346263][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 100.370771][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.380863][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 100.429622][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.437078][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.595129][ T50] veth1_macvtap: left promiscuous mode [ 100.629011][ T50] veth0_macvtap: left promiscuous mode [ 100.640144][ T6113] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 100.665953][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.29'. [ 100.708685][ T50] veth1_vlan: left promiscuous mode [ 100.714383][ T50] veth0_vlan: left promiscuous mode [ 100.740215][ T5846] Bluetooth: hci2: command tx timeout [ 101.061246][ T6131] netlink: 'syz.3.33': attribute type 9 has an invalid length. [ 101.083153][ T6131] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.33'. [ 101.452565][ T50] team0 (unregistering): Port device team_slave_1 removed [ 101.482917][ T50] team0 (unregistering): Port device team_slave_0 removed [ 101.787964][ T6113] dummy0: entered promiscuous mode [ 101.794809][ T6113] bridge0: port 3(dummy0) entered blocking state [ 101.802187][ T6113] bridge0: port 3(dummy0) entered disabled state [ 101.810269][ T6113] dummy0: entered allmulticast mode [ 101.817730][ T6113] bridge0: port 3(dummy0) entered blocking state [ 101.824384][ T6113] bridge0: port 3(dummy0) entered forwarding state [ 102.183615][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 102.479639][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.39'. [ 102.545891][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 102.553700][ T6159] netlink: 3 bytes leftover after parsing attributes in process `syz.2.40'. [ 102.843609][ T5846] Bluetooth: hci2: command tx timeout [ 102.889404][ T6178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.42'. [ 103.292138][ T6194] netlink: 'syz.3.47': attribute type 58 has an invalid length. [ 103.309222][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 103.557594][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.565281][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.575302][ T6048] bridge_slave_0: entered allmulticast mode [ 103.599347][ T6048] bridge_slave_0: entered promiscuous mode [ 103.682689][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.697485][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.723871][ T6048] bridge_slave_1: entered allmulticast mode [ 103.757949][ T6048] bridge_slave_1: entered promiscuous mode [ 104.026161][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.093783][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.506476][ T6249] __nla_validate_parse: 1 callbacks suppressed [ 104.506496][ T6249] netlink: 11 bytes leftover after parsing attributes in process `syz.0.56'. [ 104.534761][ T6048] team0: Port device team_slave_0 added [ 104.584044][ T6249] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 104.628881][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.637945][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.725543][ T6048] team0: Port device team_slave_1 added [ 104.783721][ T6247] pim6reg1: entered promiscuous mode [ 104.818331][ T6247] pim6reg1: entered allmulticast mode [ 104.834451][ T6267] netlink: 156 bytes leftover after parsing attributes in process `syz.1.60'. [ 104.899441][ T5846] Bluetooth: hci2: command tx timeout [ 104.944915][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.962727][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.023537][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.075260][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.094666][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.193442][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.412166][ T30] audit: type=1804 audit(1762414690.927:2): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.65" name="/newroot/14/cgroup.controllers" dev="tmpfs" ino=88 res=1 errno=0 [ 105.444335][ T6286] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 105.473643][ T30] audit: type=1800 audit(1762414690.947:3): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name="cgroup.controllers" dev="tmpfs" ino=88 res=0 errno=0 [ 105.497592][ T30] audit: type=1800 audit(1762414690.947:4): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name="cgroup.controllers" dev="tmpfs" ino=88 res=0 errno=0 [ 105.500882][ T6048] hsr_slave_0: entered promiscuous mode [ 105.527699][ T6048] hsr_slave_1: entered promiscuous mode [ 105.535720][ T6048] debugfs: 'hsr0' already exists in 'hsr' [ 105.542588][ T6048] Cannot create hsr debugfs directory [ 105.572123][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 106.673251][ T6343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.78'. [ 106.737016][ T6345] bridge_slave_0: left allmulticast mode [ 106.770482][ T6345] bridge_slave_0: left promiscuous mode [ 106.787831][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.858341][ T6345] bridge_slave_1: left allmulticast mode [ 106.880057][ T6345] bridge_slave_1: left promiscuous mode [ 106.886060][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.944336][ T6345] bond0: (slave bond_slave_0): Releasing backup interface [ 106.967491][ T6345] bond0: (slave bond_slave_1): Releasing backup interface [ 106.972621][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 106.996643][ T6345] team0: Port device team_slave_0 removed [ 107.003388][ T5846] Bluetooth: hci2: command tx timeout [ 107.023243][ T6345] team0: Port device team_slave_1 removed [ 107.030684][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.046331][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.057391][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.067107][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.081365][ T6345] net_ratelimit: 3 callbacks suppressed [ 107.081386][ T6345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.489006][ T6373] bridge0: port 1(batadv1) entered blocking state [ 107.512502][ T6373] bridge0: port 1(batadv1) entered disabled state [ 107.532539][ T6373] batadv1: entered allmulticast mode [ 107.554520][ T6373] batadv1: entered promiscuous mode [ 107.572798][ T6386] netlink: 68 bytes leftover after parsing attributes in process `syz.1.88'. [ 107.919714][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 107.968410][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 107.977881][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 108.103390][ T6048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.199091][ T6048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.376094][ T6048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.395778][ T6048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.592506][ T6432] netlink: 56 bytes leftover after parsing attributes in process `syz.0.96'. [ 108.776637][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 108.836281][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 108.865882][ T6443] tc_dump_action: action bad kind [ 109.072092][ T6444] hsr_slave_1 (unregistering): left promiscuous mode [ 109.197309][ T6458] 0: reclassify loop, rule prio 0, protocol 800 [ 109.224614][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.363617][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.497790][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.505437][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.547676][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.554973][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.089601][ T6506] warning: `syz.2.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.460532][ T6530] __nla_validate_parse: 1 callbacks suppressed [ 110.460553][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.553778][ T6534] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 110.623856][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.697682][ T6538] syzkaller0: entered allmulticast mode [ 110.885730][ T6534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.897193][ T6534] bond1: (slave bond2): making interface the new active one [ 110.906837][ T6534] bond1: (slave bond2): Enslaving as an active interface with an up link [ 110.941393][ T6538] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.955358][ T6538] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 111.025075][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.296192][ T6564] IPv6: NLM_F_REPLACE set, but no existing node found! [ 111.817481][ T6581] veth3: entered promiscuous mode [ 111.835525][ T6581] veth3: entered allmulticast mode [ 111.931408][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 111.968359][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 112.050744][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 112.069576][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.094142][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 112.101528][ T6601] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 112.103232][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.185588][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.227819][ T6607] netlink: 'syz.1.129': attribute type 5 has an invalid length. [ 112.267723][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.312737][ T6048] veth0_vlan: entered promiscuous mode [ 112.324963][ T6611] netlink: 184 bytes leftover after parsing attributes in process `syz.3.130'. [ 112.362329][ T6048] veth1_vlan: entered promiscuous mode [ 112.506780][ T6048] veth0_macvtap: entered promiscuous mode [ 112.543021][ T6048] veth1_macvtap: entered promiscuous mode [ 112.614865][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.671921][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.763647][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.795756][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.846383][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.952363][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.084829][ T6645] smc: net device vcan0 applied user defined pnetid SYZ1 [ 113.111688][ T6649] netlink: 104 bytes leftover after parsing attributes in process `syz.2.137'. [ 113.216940][ T6649] netlink: 32 bytes leftover after parsing attributes in process `syz.2.137'. [ 113.246800][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.261928][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 113.271046][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.506783][ T6658] bond1 (unregistering): Released all slaves [ 113.584109][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.634702][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.361787][ T6694] netlink: 'syz.3.150': attribute type 2 has an invalid length. [ 114.406410][ T6698] vlan2: entered allmulticast mode [ 114.423029][ T6698] bridge_slave_0: entered allmulticast mode [ 115.079176][ T6740] Bluetooth: MGMT ver 1.23 [ 115.554661][ T6762] __nla_validate_parse: 8 callbacks suppressed [ 115.554682][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.167'. [ 115.844877][ T6751] x_tables: unsorted underflow at hook 3 [ 115.845818][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 115.927160][ T6772] tipc: Started in network mode [ 115.953740][ T6772] tipc: Node identity 92a8efd02985, cluster identity 4711 [ 115.972347][ T6772] tipc: Enabled bearer , priority 0 [ 115.993559][ T6770] syzkaller0: entered promiscuous mode [ 116.004890][ T6770] syzkaller0: entered allmulticast mode [ 116.201702][ T6770] tipc: Resetting bearer [ 116.290189][ T6770] tipc: Disabling bearer [ 116.390514][ T6779] tc_dump_action: action bad kind [ 116.463807][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 116.499250][ T6788] netlink: 'syz.0.172': attribute type 30 has an invalid length. [ 116.559976][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 116.844942][ T6804] netlink: 'syz.1.173': attribute type 30 has an invalid length. [ 116.975898][ T6804] bond1: option arp_missed_max: invalid value (0) [ 116.985558][ T6804] bond1: option arp_missed_max: allowed values 1 - 255 [ 117.094546][ T6804] bond1 (unregistering): Released all slaves [ 117.327995][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'. [ 117.341079][ T6827] netlink: 52 bytes leftover after parsing attributes in process `syz.0.180'. [ 117.372744][ T6817] syzkaller0: entered promiscuous mode [ 117.382011][ T6817] syzkaller0: entered allmulticast mode [ 117.720087][ T6836] trusted_key: syz.0.181 sent an empty control message without MSG_MORE. [ 117.962715][ T6853] bridge_slave_0: left allmulticast mode [ 117.970793][ T6853] bridge_slave_0: left promiscuous mode [ 117.976765][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.009420][ T6853] bridge_slave_1: left allmulticast mode [ 118.022514][ T6853] bridge_slave_1: left promiscuous mode [ 118.036973][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.056593][ T6853] bond0: (slave bond_slave_0): Releasing backup interface [ 118.079936][ T6853] bond0: (slave bond_slave_1): Releasing backup interface [ 118.178125][ T6853] team0: Port device team_slave_0 removed [ 118.199540][ T6853] team0: Port device team_slave_1 removed [ 118.207853][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.266596][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.310859][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.318780][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.328953][ T6853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.349451][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 118.366357][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 118.375833][ T6851] netlink: 'syz.1.186': attribute type 3 has an invalid length. [ 118.384529][ T6858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.416480][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 118.523674][ T6863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.543196][ T6868] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.557387][ T6868] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 118.904967][ T6898] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 119.017195][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 119.030529][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 119.197023][ T6915] netlink: 'syz.3.202': attribute type 29 has an invalid length. [ 119.216461][ T6915] netlink: 'syz.3.202': attribute type 29 has an invalid length. [ 120.334572][ T6971] syz.1.214 (6971) used greatest stack depth: 17832 bytes left [ 120.458221][ T6985] netlink: 'syz.2.218': attribute type 18 has an invalid length. [ 120.591005][ T1144] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.595888][ T6996] sctp: [Deprecated]: syz.0.220 (pid 6996) Use of int in max_burst socket option deprecated. [ 120.595888][ T6996] Use struct sctp_assoc_value instead [ 120.619162][ T1144] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.631387][ T1144] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.669604][ T1144] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.693689][ T6997] __nla_validate_parse: 3 callbacks suppressed [ 120.693710][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 120.738093][ T7001] sctp: [Deprecated]: syz.3.223 (pid 7001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.738093][ T7001] Use struct sctp_sack_info instead [ 120.950727][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 121.286680][ T7029] netlink: 64 bytes leftover after parsing attributes in process `syz.1.231'. [ 121.300814][ T7026] smc: net device gre0 applied user defined pnetid SYZ1 [ 121.308707][ T7026] smc: net device gre0 erased user defined pnetid SYZ1 [ 121.322483][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 121.322726][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 121.367428][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 121.486468][ T7035] netlink: 44 bytes leftover after parsing attributes in process `syz.1.233'. [ 121.515346][ T7031] syzkaller0: entered promiscuous mode [ 121.521327][ T7031] syzkaller0: entered allmulticast mode [ 121.545553][ T7035] netlink: 43 bytes leftover after parsing attributes in process `syz.1.233'. [ 121.588367][ T7035] netlink: 'syz.1.233': attribute type 6 has an invalid length. [ 121.609841][ T7035] netlink: 'syz.1.233': attribute type 5 has an invalid length. [ 121.617625][ T7035] netlink: 43 bytes leftover after parsing attributes in process `syz.1.233'. [ 121.641324][ T7036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.233'. [ 121.679308][ T7036] netlink: 'syz.1.233': attribute type 6 has an invalid length. [ 121.692809][ T7036] netlink: 'syz.1.233': attribute type 5 has an invalid length. [ 121.742878][ T7047] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 122.784961][ T7047] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 122.806922][ T7052] syz_tun: entered allmulticast mode [ 122.813636][ T7052] syz_tun: left allmulticast mode [ 122.951039][ T7057] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 123.127365][ T7057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 123.333893][ T7071] bond4: (slave ip6erspan0): making interface the new active one [ 123.353440][ T7071] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 123.394106][ T7087] geneve2: entered promiscuous mode [ 123.418670][ T7087] geneve2: entered allmulticast mode [ 123.712363][ T7105] tipc: Started in network mode [ 123.717301][ T7105] tipc: Node identity 62636389f5da, cluster identity 4711 [ 123.770475][ T7105] tipc: Enabled bearer , priority 0 [ 123.777812][ T7099] syzkaller0: entered promiscuous mode [ 123.843023][ T7099] syzkaller0: entered allmulticast mode [ 123.979003][ T7099] tipc: Resetting bearer [ 124.086789][ T7099] tipc: Disabling bearer [ 125.144269][ T7163] syzkaller0: entered promiscuous mode [ 125.156842][ T7166] netlink: 'syz.0.266': attribute type 39 has an invalid length. [ 125.173374][ T7163] syzkaller0: entered allmulticast mode [ 125.382423][ T7175] erspan0: entered promiscuous mode [ 125.390290][ T7175] erspan0: entered allmulticast mode [ 125.407708][ T7177] syzkaller1: entered promiscuous mode [ 125.415596][ T7177] syzkaller1: entered allmulticast mode [ 125.681824][ T7182] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 125.954629][ T7194] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 125.985496][ T7194] syzkaller1: entered promiscuous mode [ 126.018377][ T7194] syzkaller1: entered allmulticast mode [ 126.055233][ T7205] ip6t_srh: unknown srh match flags 5F28 [ 126.137399][ T7212] __nla_validate_parse: 10 callbacks suppressed [ 126.137421][ T7212] netlink: 176 bytes leftover after parsing attributes in process `syz.1.279'. [ 126.159775][ T7212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 126.244016][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 126.515548][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 126.954781][ T7244] netlink: 'syz.3.292': attribute type 11 has an invalid length. [ 126.973612][ T7244] netlink: 'syz.3.292': attribute type 11 has an invalid length. [ 126.984266][ T7244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.292'. [ 127.316220][ T7264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.296'. [ 127.325852][ T7264] block nbd0: not configured, cannot reconfigure [ 127.608090][ T7282] netlink: 'syz.4.300': attribute type 12 has an invalid length. [ 127.643131][ T7282] netlink: 'syz.4.300': attribute type 29 has an invalid length. [ 127.651983][ T7284] netlink: 'syz.0.301': attribute type 27 has an invalid length. [ 127.669365][ T7287] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 127.684003][ T7282] netlink: 148 bytes leftover after parsing attributes in process `syz.4.300'. [ 127.714876][ T7282] netlink: 59 bytes leftover after parsing attributes in process `syz.4.300'. [ 128.105108][ T7311] netlink: 'syz.2.305': attribute type 5 has an invalid length. [ 128.693567][ T7320] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.745877][ T7320] syzkaller0: entered promiscuous mode [ 128.770537][ T7320] syzkaller0: entered allmulticast mode [ 128.845957][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 129.110859][ T7361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.316'. [ 130.299059][ T7368] syz_tun: entered allmulticast mode [ 130.316846][ T7372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.336773][ T7366] syz_tun: left allmulticast mode [ 130.623587][ T7387] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 130.651875][ T7387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.779238][ T7455] xt_limit: Overflow, try lower: 271964/0 [ 132.271069][ T7473] __nla_validate_parse: 2 callbacks suppressed [ 132.271089][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 132.417299][ T7484] netlink: 'syz.0.344': attribute type 10 has an invalid length. [ 132.459267][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.344'. [ 132.479146][ T7484] netlink: 59 bytes leftover after parsing attributes in process `syz.0.344'. [ 132.909254][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 133.032327][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.410640][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.353'. [ 133.437511][ T7520] bond0: entered allmulticast mode [ 133.462752][ T7529] netlink: 'syz.3.356': attribute type 1 has an invalid length. [ 133.530803][ T7525] netlink: 408 bytes leftover after parsing attributes in process `syz.2.357'. [ 133.701609][ T7545] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.732194][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 133.910019][ T7549] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.929916][ T7554] netlink: 'syz.1.363': attribute type 23 has an invalid length. [ 133.953404][ T7545] netlink: 'syz.3.359': attribute type 75 has an invalid length. [ 134.112753][ T7572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.363'. [ 134.392534][ T7582] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 134.527942][ T7588] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 134.549060][ T7588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.373'. [ 134.549426][ T7585] tipc: Enabling of bearer rejected, failed to enable media [ 134.732502][ T7596] netlink: 516 bytes leftover after parsing attributes in process `syz.2.376'. [ 134.940978][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.380'. [ 134.980551][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 135.449400][ T7632] tipc: Enabling of bearer rejected, failed to enable media [ 135.613682][ T7637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.092150][ T7659] veth0: entered promiscuous mode [ 136.320653][ T7654] veth0: left promiscuous mode [ 136.351539][ T7673] netlink: 'syz.3.397': attribute type 21 has an invalid length. [ 136.398596][ T7677] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 136.406335][ T7678] lo: entered allmulticast mode [ 136.420386][ T7681] lo: left allmulticast mode [ 136.462320][ T7677] x_tables: duplicate underflow at hook 1 [ 136.640327][ T7687] bond0: entered promiscuous mode [ 136.668453][ T7687] bond0: left allmulticast mode [ 136.886184][ T7702] netlink: 'syz.0.407': attribute type 13 has an invalid length. [ 136.895075][ T7702] netlink: 'syz.0.407': attribute type 58 has an invalid length. [ 137.410480][ T7720] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.489769][ T7733] xt_socket: unknown flags 0x50 [ 137.500062][ T7731] nbd0: detected capacity change from 0 to 64 [ 137.526754][ T5834] block nbd0: Receive control failed (result -32) [ 137.536696][ T5893] block nbd0: Dead connection, failed to find a fallback [ 137.677054][ T7720] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.731070][ T7740] __nla_validate_parse: 5 callbacks suppressed [ 137.731091][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 137.751682][ T7743] syzkaller0: entered promiscuous mode [ 137.757961][ T7743] syzkaller0: entered allmulticast mode [ 137.798569][ T7720] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.865164][ T7750] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 137.943249][ T7720] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.070205][ T30] audit: type=1107 audit(1762414723.557:5): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' M`ˍ p +AGl' [ 138.097016][ T30] audit: type=1107 audit(1762414723.557:6): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' M`ˍ p +AGl' [ 138.186911][ T7762] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 138.279699][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 138.288727][ T5925] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.342037][ T7766] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 138.344192][ T7771] netlink: 148 bytes leftover after parsing attributes in process `syz.1.426'. [ 138.353634][ T7766] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 138.402754][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 138.428023][ T7770] gretap1: entered promiscuous mode [ 138.439896][ T7770] bond2: (slave gretap1): making interface the new active one [ 138.449327][ T7770] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 138.458140][ T5925] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.581043][ T7765] bond5: option lp_interval: invalid value (0) [ 138.593127][ T7765] bond5: option lp_interval: allowed values 1 - 2147483647 [ 138.610264][ T7765] bond5 (unregistering): Released all slaves [ 138.683147][ T5925] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.735600][ T5925] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.939344][ T7798] netlink: 44 bytes leftover after parsing attributes in process `syz.3.430'. [ 138.963546][ T7798] netlink: 43 bytes leftover after parsing attributes in process `syz.3.430'. [ 139.004195][ T7798] netlink: 'syz.3.430': attribute type 5 has an invalid length. [ 139.039519][ T7798] netlink: 43 bytes leftover after parsing attributes in process `syz.3.430'. [ 139.041765][ T7805] netlink: 'syz.3.430': attribute type 2 has an invalid length. [ 139.092330][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 139.117209][ T7804] : renamed from bridge_slave_0 (while UP) [ 139.391168][ T50] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8 [ 139.854568][ T7845] ieee802154 phy1 wpan1: encryption failed: -90 [ 140.063702][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 140.325874][ T7869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.453'. [ 140.844987][ T7879] netlink: 'syz.0.457': attribute type 8 has an invalid length. [ 140.964780][ T7890] netlink: 'syz.2.458': attribute type 9 has an invalid length. [ 141.842344][ T7920] Driver unsupported XDP return value 0 on prog (id 170) dev N/A, expect packet loss! [ 142.076410][ T7936] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.138687][ T7935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.660072][ T7954] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 142.688935][ T7954] openvswitch: netlink: Missing key (keys=40, expected=100) [ 142.783596][ T7963] __nla_validate_parse: 7 callbacks suppressed [ 142.783616][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.483'. [ 142.867211][ T7967] netlink: 256 bytes leftover after parsing attributes in process `syz.4.487'. [ 143.115747][ T7976] netlink: 'syz.4.492': attribute type 10 has an invalid length. [ 143.124846][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 143.234781][ T7976] veth0_virt_wifi: entered allmulticast mode [ 143.265075][ T7976] team0: Port device veth0_virt_wifi added [ 143.284123][ T7984] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 143.344198][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 143.478923][ T7995] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.806041][ T8015] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 144.506409][ T8044] netlink: 184 bytes leftover after parsing attributes in process `syz.1.505'. [ 144.518357][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 145.133340][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 145.293163][ T8070] bond1: option xmit_hash_policy: invalid value (64) [ 145.346486][ T8070] bond1 (unregistering): Released all slaves [ 145.742231][ T8098] netlink: 192 bytes leftover after parsing attributes in process `syz.3.517'. [ 145.782300][ T8092] syzkaller0: entered promiscuous mode [ 145.808644][ T8092] syzkaller0: entered allmulticast mode [ 145.878496][ T8111] netlink: 300 bytes leftover after parsing attributes in process `syz.2.520'. [ 145.973767][ T8116] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 146.060396][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 146.506649][ T8135] tipc: Enabling of bearer rejected, failed to enable media [ 147.135291][ T8161] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 147.186578][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.218681][ T8167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.254465][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.276517][ T8167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.348012][ T8169] tipc: Started in network mode [ 147.359235][ T8169] tipc: Node identity 06864b299f78, cluster identity 4711 [ 147.373315][ T8169] tipc: Enabled bearer , priority 0 [ 147.417698][ T8169] syzkaller0: entered promiscuous mode [ 147.448292][ T8169] syzkaller0: entered allmulticast mode [ 147.524261][ T8168] tipc: Resetting bearer [ 147.581586][ T8185] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 147.614186][ T8168] tipc: Disabling bearer [ 147.637836][ T8188] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 147.791527][ T8194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.809989][ T8194] bond4: (slave bond5): making interface the new active one [ 147.819873][ T8194] bond4: (slave bond5): Enslaving as an active interface with an up link [ 147.925067][ T8206] __nla_validate_parse: 6 callbacks suppressed [ 147.925087][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'. [ 148.178903][ T8215] sock: sock_set_timeout: `syz.2.546' (pid 8215) tries to set negative timeout [ 148.211649][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 148.238811][ T8221] sock: sock_set_timeout: `syz.2.546' (pid 8221) tries to set negative timeout [ 148.254801][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 148.304507][ T8219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.549'. [ 148.718920][ T8241] netlink: 596 bytes leftover after parsing attributes in process `syz.4.553'. [ 148.720459][ T8235] netlink: 'syz.4.553': attribute type 29 has an invalid length. [ 148.749642][ T8239] netlink: 'syz.4.553': attribute type 29 has an invalid length. [ 148.806774][ T8234] tipc: Started in network mode [ 148.812085][ T8234] tipc: Node identity 62e6bcc760cd, cluster identity 4711 [ 148.820484][ T8234] tipc: Enabled bearer , priority 0 [ 148.849700][ T8234] syzkaller0: entered promiscuous mode [ 148.858475][ T8234] syzkaller0: entered allmulticast mode [ 148.922612][ T8248] openvswitch: netlink: Message has 1 unknown bytes. [ 148.936762][ T8235] bridge1: entered promiscuous mode [ 148.945212][ T8248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.956160][ T8235] bridge1: entered allmulticast mode [ 148.965897][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 149.021766][ T8234] tipc: Resetting bearer [ 149.068849][ T8232] tipc: Resetting bearer [ 149.186347][ T8232] tipc: Disabling bearer [ 149.567158][ T8288] netlink: 'syz.1.567': attribute type 2 has an invalid length. [ 149.618346][ T8298] netlink: 'syz.2.569': attribute type 4 has an invalid length. [ 149.645696][ T8298] netlink: 17 bytes leftover after parsing attributes in process `syz.2.569'. [ 149.669886][ T8299] netlink: 'syz.2.569': attribute type 5 has an invalid length. [ 150.481067][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.496584][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 150.553193][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 150.778494][ T8357] syz_tun: entered allmulticast mode [ 150.797648][ T8357] dvmrp6: entered allmulticast mode [ 150.805975][ T8356] syz_tun: left allmulticast mode [ 150.915050][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'. [ 151.115036][ T8371] lo speed is unknown, defaulting to 1000 [ 151.401517][ T8371] lo speed is unknown, defaulting to 1000 [ 151.423756][ T8371] lo speed is unknown, defaulting to 1000 [ 151.649643][ T8410] ip6tnl0: mtu less than device minimum [ 151.914194][ T8418] erspan0: entered allmulticast mode [ 152.159048][ T8371] infiniband syz0: set active [ 152.173744][ T8371] infiniband syz0: added lo [ 152.325322][ T8371] RDS/IB: syz0: added [ 152.330300][ T8371] smc: adding ib device syz0 with port count 1 [ 152.342810][ T8371] smc: ib device syz0 port 1 has no pnetid [ 152.697994][ T8434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.702024][ T8433] sctp: [Deprecated]: syz.2.606 (pid 8433) Use of int in maxseg socket option. [ 152.702024][ T8433] Use struct sctp_assoc_value instead [ 152.947364][ T8443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.954727][ T8443] IPv6: NLM_F_CREATE should be set when creating new route [ 152.963912][ T8443] __nla_validate_parse: 6 callbacks suppressed [ 152.963930][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 153.487431][ T5919] lo speed is unknown, defaulting to 1000 [ 153.519321][ T24] lo speed is unknown, defaulting to 1000 [ 153.529146][ T8371] lo speed is unknown, defaulting to 1000 [ 153.703019][ T8451] netlink: 104 bytes leftover after parsing attributes in process `syz.2.612'. [ 153.865752][ T8463] netlink: 144 bytes leftover after parsing attributes in process `syz.0.615'. [ 153.891894][ T8465] netlink: 144 bytes leftover after parsing attributes in process `syz.0.615'. [ 154.006106][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.617'. [ 154.245603][ T8371] lo speed is unknown, defaulting to 1000 [ 154.473657][ T8371] lo speed is unknown, defaulting to 1000 [ 155.039402][ T8371] lo speed is unknown, defaulting to 1000 [ 155.046538][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 155.591457][ T8538] syzkaller0: refused to change device tx_queue_len [ 155.603070][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 155.946879][ T8371] lo speed is unknown, defaulting to 1000 [ 156.203125][ T8562] netlink: 256 bytes leftover after parsing attributes in process `syz.4.646'. [ 156.231999][ T8562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.646'. [ 156.242825][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 156.880946][ T8581] xt_SECMARK: invalid mode: 9 [ 157.414894][ T8603] netlink: 'syz.0.657': attribute type 8 has an invalid length. [ 157.781574][ T43] hid-generic 0005:0002:5508.0001: item fetching failed at offset 0/1 [ 157.793103][ T43] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 157.872747][ T8387] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.920775][ T8387] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.945879][ T8387] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.995862][ T8387] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.013269][ T8630] __nla_validate_parse: 3 callbacks suppressed [ 158.013290][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.668'. [ 158.332521][ T30] audit: type=1107 audit(1762414743.847:7): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+Ͷ}<>Ծ~Y`nG h :x `dȗ:<:gc?!H zeN'/d{)>Ï놦S>hߟāK [0& xEEG*x, priority 0 [ 161.709698][ T8757] syzkaller0: entered promiscuous mode [ 161.715330][ T8757] syzkaller0: entered allmulticast mode [ 161.995360][ T8757] tipc: Resetting bearer [ 162.083916][ T8757] tipc: Disabling bearer [ 162.141241][ T8783] netlink: 'syz.3.706': attribute type 11 has an invalid length. [ 162.222353][ T8772] bond2: (slave bond_slave_1): Device is not our slave [ 162.236402][ T8772] bond2: option active_slave: invalid value (bond_slave_1) [ 162.255678][ T8772] bond2 (unregistering): Released all slaves [ 162.312221][ T8793] IPv6: sit3: Disabled Multicast RS [ 162.327833][ T8793] sit3: entered allmulticast mode [ 162.651077][ T8802] can: request_module (can-proto-0) failed. [ 162.986746][ T8382] tipc: Subscription rejected, illegal request [ 163.176241][ T8837] vlan2: entered promiscuous mode [ 163.199396][ T8837] geneve1: entered promiscuous mode [ 163.204993][ T8837] vlan2: entered allmulticast mode [ 163.230815][ T8837] geneve1: entered allmulticast mode [ 163.260063][ T8842] netlink: 'syz.4.721': attribute type 28 has an invalid length. [ 163.281917][ T8842] netlink: 'syz.4.721': attribute type 3 has an invalid length. [ 163.297432][ T8842] __nla_validate_parse: 8 callbacks suppressed [ 163.297451][ T8842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.721'. [ 163.335376][ T8840] syzkaller0: entered promiscuous mode [ 163.341210][ T8840] syzkaller0: entered allmulticast mode [ 163.511206][ T8854] netlink: 'syz.2.725': attribute type 2 has an invalid length. [ 163.962169][ T8867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.114283][ T8871] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.730'. [ 164.861703][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.723'. [ 165.182807][ T8882] netlink: 6 bytes leftover after parsing attributes in process `syz.0.734'. [ 165.264763][ T8888] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.351450][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 165.383080][ T8888] netlink: 'syz.2.735': attribute type 83 has an invalid length. [ 165.420268][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 165.476151][ T8901] syzkaller0: entered promiscuous mode [ 165.493398][ T8901] syzkaller0: entered allmulticast mode [ 165.745897][ T8913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.742'. [ 166.120391][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.750'. [ 166.489337][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 166.544341][ T8953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.556245][ T8957] xt_hashlimit: size too large, truncated to 1048576 [ 166.753364][ T8961] bond1: entered promiscuous mode [ 166.759055][ T8961] bond1: entered allmulticast mode [ 166.764884][ T8961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.891626][ T8971] tc_dump_action: action bad kind [ 167.375439][ T8994] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 167.384542][ T8994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.768'. [ 167.394631][ T8994] NCSI netlink: No device for ifindex 0 [ 167.542928][ T8999] macvtap1: entered promiscuous mode [ 167.548468][ T8999] vlan0: entered promiscuous mode [ 167.554127][ T8999] macvtap1: entered allmulticast mode [ 167.560761][ T8999] vlan0: entered allmulticast mode [ 167.566052][ T8999] veth0_vlan: entered allmulticast mode [ 167.584312][ T8999] macvtap2: entered promiscuous mode [ 167.590483][ T8999] macvtap2: entered allmulticast mode [ 167.892305][ T9016] Bluetooth: MGMT ver 1.23 [ 167.897918][ T9016] openvswitch: netlink: Flow key attr not present in new flow. [ 167.952410][ T9022] netlink: 'syz.0.776': attribute type 5 has an invalid length. [ 167.969728][ T9022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.332125][ T9041] syzkaller1: entered promiscuous mode [ 168.337664][ T9041] syzkaller1: entered allmulticast mode [ 168.439685][ T9045] __nla_validate_parse: 2 callbacks suppressed [ 168.439704][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 168.488999][ T9045] bridge0: port 3(dummy0) entered disabled state [ 168.495627][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.503831][ T9045] bridge0: port 1() entered disabled state [ 168.725929][ T9058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.786'. [ 168.765695][ T9060] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 168.801965][ T9060] netlink: 1 bytes leftover after parsing attributes in process `syz.4.788'. [ 168.825576][ T9063] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 168.884667][ T9063] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 169.054964][ T9069] syzkaller0: entered promiscuous mode [ 169.074027][ T9069] syzkaller0: entered allmulticast mode [ 169.344474][ T9092] netlink: 106648 bytes leftover after parsing attributes in process `syz.4.797'. [ 170.623203][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.797'. [ 170.634784][ T9088] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 170.651578][ T9094] IPv6: sit2: Disabled Multicast RS [ 170.658034][ T9094] sit2: entered allmulticast mode [ 171.218984][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'. [ 171.247869][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.808'. [ 171.281981][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 171.318729][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 171.329159][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'. [ 172.155555][ T9186] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 172.171773][ T9183] dvmrp0: entered allmulticast mode [ 172.222227][ T9190] netlink: 'syz.0.826': attribute type 30 has an invalid length. [ 172.260246][ T9190] bond6: option arp_missed_max: invalid value (0) [ 172.267982][ T9190] bond6: option arp_missed_max: allowed values 1 - 255 [ 172.278557][ T9190] bond6 (unregistering): Released all slaves [ 172.451697][ T9198] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 172.620509][ T9205] netlink: 'syz.3.833': attribute type 8 has an invalid length. [ 172.724213][ T9219] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 172.819272][ T9227] x_tables: duplicate underflow at hook 1 [ 172.834967][ T9219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.842387][ T9226] netlink: 'syz.1.837': attribute type 23 has an invalid length. [ 172.907648][ T9226] x_tables: duplicate underflow at hook 2 [ 172.917423][ T9230] tipc: Enabled bearer , priority 0 [ 172.925683][ T9230] syzkaller0: entered promiscuous mode [ 172.946773][ T9230] syzkaller0: entered allmulticast mode [ 172.987736][ T9230] tipc: Resetting bearer [ 173.000641][ T6139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.018309][ T6139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.068653][ T9230] tipc: Resetting bearer [ 173.124802][ T9230] tipc: Disabling bearer [ 173.435418][ T9259] nbd: must specify a size in bytes for the device [ 173.635338][ T9272] netlink: 'syz.0.852': attribute type 21 has an invalid length. [ 173.645690][ T9272] __nla_validate_parse: 13 callbacks suppressed [ 173.645710][ T9272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.852'. [ 173.789277][ T9278] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 173.856124][ T9278] 8021q: adding VLAN 0 to HW filter on device bond7 [ 173.890115][ T9285] bond7: (slave gretap1): making interface the new active one [ 173.902272][ T9285] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 174.084516][ T9293] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 174.086288][ T9294] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 174.110883][ T9293] netlink: 'syz.3.859': attribute type 5 has an invalid length. [ 174.121111][ T9293] netlink: 140 bytes leftover after parsing attributes in process `syz.3.859'. [ 174.309765][ T9298] vcan0: entered allmulticast mode [ 174.443816][ T9316] netlink: 'syz.2.864': attribute type 7 has an invalid length. [ 174.531144][ T9316] netlink: 'syz.2.864': attribute type 7 has an invalid length. [ 174.776748][ T9329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.110813][ T9339] raw_sendmsg: syz.0.872 forgot to set AF_INET. Fix it! [ 175.369411][ T9349] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.876'. [ 175.506911][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 175.540566][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 175.733214][ T9373] Cannot find add_set index 65532 as target [ 175.812557][ T9379] syz.1.882 uses old SIOCAX25GETINFO [ 175.879979][ T9382] tipc: Enabling of bearer rejected, failed to enable media [ 176.566360][ T9420] sctp: [Deprecated]: syz.1.892 (pid 9420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.566360][ T9420] Use struct sctp_sack_info instead [ 176.689097][ T9425] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 177.085009][ T9439] : renamed from hsr0 (while UP) [ 177.214354][ T9447] sctp: [Deprecated]: syz.3.901 (pid 9447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.214354][ T9447] Use struct sctp_sack_info instead [ 177.312211][ T9456] Bluetooth: MGMT ver 1.23 [ 177.549177][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.905'. [ 177.919465][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 177.941657][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 178.084977][ T9497] netlink: 'syz.2.918': attribute type 10 has an invalid length. [ 178.093657][ T9497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.918'. [ 178.269131][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 178.280607][ T9497] team0: Port device geneve0 added [ 178.410854][ T9509] bond0: (slave syz_tun): Releasing backup interface [ 178.719389][ T9532] __nla_validate_parse: 2 callbacks suppressed [ 178.719410][ T9532] netlink: 64 bytes leftover after parsing attributes in process `syz.3.926'. [ 178.953683][ T9542] nft_compat: unsupported protocol 0 [ 179.000647][ T9548] netlink: 236 bytes leftover after parsing attributes in process `syz.0.928'. [ 179.164781][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 179.193868][ T9555] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 179.228530][ T9551] ksmbd: Unknown IPC event: 0, ignore. [ 179.355898][ T9555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.394694][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 179.401152][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 179.508865][ T9556] vlan2: entered promiscuous mode [ 179.514208][ T9556] bond3: entered promiscuous mode [ 179.520461][ T9556] vlan2: entered allmulticast mode [ 179.525882][ T9556] bond3: entered allmulticast mode [ 179.547093][ T9569] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.934'. [ 179.910141][ T9580] netlink: 88 bytes leftover after parsing attributes in process `syz.2.938'. [ 179.933939][ T9580] netem: invalid attributes len -24 [ 179.948645][ T9580] netem: change failed [ 180.097189][ T9588] netlink: 208 bytes leftover after parsing attributes in process `syz.0.939'. [ 180.112779][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.939'. [ 180.301649][ T9602] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 180.365312][ T9602] bond3: (slave gretap1): making interface the new active one [ 180.374102][ T9602] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 180.420496][ T9607] netlink: 'syz.0.944': attribute type 24 has an invalid length. [ 180.451901][ T9609] tipc: Enabled bearer , priority 0 [ 180.491086][ T9609] syzkaller0: entered promiscuous mode [ 180.496645][ T9609] syzkaller0: entered allmulticast mode [ 180.563010][ T9609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.945'. [ 180.619087][ T9610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.671283][ T9620] bond0: left promiscuous mode [ 180.701452][ T9609] tipc: Resetting bearer [ 180.736620][ T9605] tipc: Resetting bearer [ 180.868720][ T9624] netlink: 'syz.1.951': attribute type 30 has an invalid length. [ 180.889418][ T9605] tipc: Disabling bearer [ 180.985086][ T9624] bond4: option arp_missed_max: invalid value (0) [ 180.997577][ T9624] bond4: option arp_missed_max: allowed values 1 - 255 [ 181.107591][ T9624] bond4 (unregistering): Released all slaves [ 181.184112][ T9644] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 181.800420][ T9661] syzkaller1: entered promiscuous mode [ 181.816266][ T9661] syzkaller1: entered allmulticast mode [ 181.912951][ T9666] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 181.965759][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.961'. [ 182.256370][ T9678] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 182.280585][ T9678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 182.510723][ T9688] netlink: 'syz.2.969': attribute type 6 has an invalid length. [ 182.530861][ T9682] bond2: (slave bond_slave_1): Device is not our slave [ 182.544503][ T9682] bond2: option active_slave: invalid value (bond_slave_1) [ 182.563191][ T9682] bond2 (unregistering): Released all slaves [ 182.567060][ T9694] netlink: 'syz.2.969': attribute type 6 has an invalid length. [ 182.654107][ T9700] syzkaller0: entered promiscuous mode [ 182.671689][ T9700] syzkaller0: entered allmulticast mode [ 182.750585][ T9701] vlan3: entered allmulticast mode [ 182.756146][ T9701] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 183.007656][ T9704] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 183.032560][ T9718] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 183.132696][ T9719] veth3: entered promiscuous mode [ 183.163110][ T9719] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 183.249028][ T9718] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 183.520520][ T9744] tipc: Started in network mode [ 183.530085][ T9744] tipc: Node identity 080211000001, cluster identity 4711 [ 183.547861][ T9744] tipc: Enabled bearer , priority 0 [ 183.565798][ T9744] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 183.583434][ T9744] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 183.609564][ T9744] tipc: Resetting bearer [ 183.922542][ T9761] __nla_validate_parse: 4 callbacks suppressed [ 183.922563][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 184.589474][ T5900] tipc: Node number set to 134418688 [ 194.422998][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.333934][ T5198] udevd[5198]: worker [5893] /devices/virtual/block/nbd0 is taking a long time [ 211.861177][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 211.866754][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.867829][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 211.873857][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 246.689829][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 246.989581][ T9808] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1006'. [ 247.012095][ T9811] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1006'. [ 247.077205][ T9808] gretap0: entered promiscuous mode [ 247.087633][ T9801] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1001'. [ 247.098590][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 247.509501][ T9835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1008'. [ 247.573632][ T9844] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1013'. [ 247.632395][ T9849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1011'. [ 247.676007][ T9849] unsupported nlmsg_type 40 [ 247.873152][ T9864] netlink: 'syz.2.1015': attribute type 21 has an invalid length. [ 247.881457][ T9864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1015'. [ 248.361718][ T9882] dvmrp8: entered allmulticast mode [ 248.400330][ T9885] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1021'. [ 249.202464][ T9929] syzkaller0: entered promiscuous mode [ 249.210576][ T9929] syzkaller0: entered allmulticast mode [ 249.271834][ T9929] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 249.674928][ T5834] Bluetooth: hci2: link tx timeout [ 249.682108][ T5834] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 249.692312][ T5834] Bluetooth: hci2: link tx timeout [ 249.697658][ T5834] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 249.894268][ T9968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.901667][ T9968] IPv6: NLM_F_CREATE should be set when creating new route [ 250.176692][ T9983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.770915][ T43] IPVS: starting estimator thread 0... [ 250.811878][T10014] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.823764][T10014] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 250.892482][T10019] IPVS: using max 25 ests per chain, 60000 per kthread [ 250.930079][T10017] macvlan3: entered promiscuous mode [ 250.935448][T10017] macvlan3: entered allmulticast mode [ 250.945037][T10029] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 250.957709][T10017] bond9: (slave macvlan3): Error -98 calling set_mac_address [ 251.000887][T10021] macvlan3: entered promiscuous mode [ 251.019935][T10021] macvlan3: entered allmulticast mode [ 251.051075][T10021] bond9: (slave macvlan3): Error -98 calling set_mac_address [ 251.383805][T10053] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 251.492936][T10053] 8021q: adding VLAN 0 to HW filter on device bond10 [ 251.522395][T10053] netem: change failed [ 251.538523][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 251.665226][T10067] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 251.771662][T10063] delete_channel: no stack [ 251.822085][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f43c00: rx timeout, send abort [ 251.837148][T10077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.323548][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f40c00: rx timeout, send abort [ 252.332085][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f43c00: abort rx timeout. Force session deactivation [ 252.436841][T10106] netlink: 'syz.2.1083': attribute type 21 has an invalid length. [ 252.445546][T10108] __nla_validate_parse: 11 callbacks suppressed [ 252.445575][T10108] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1081'. [ 252.734897][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 252.831882][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f40c00: abort rx timeout. Force session deactivation [ 252.877997][T10121] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1087'. [ 253.360377][T10148] : renamed from bridge_slave_0 (while UP) [ 253.582279][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 253.625521][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 253.650577][T10160] dummy0: left allmulticast mode [ 253.655886][T10160] bridge0: port 3(dummy0) entered disabled state [ 253.735486][T10164] netlink: 'syz.4.1098': attribute type 21 has an invalid length. [ 253.776848][T10160] bridge_slave_1: left allmulticast mode [ 253.796007][T10160] bridge_slave_1: left promiscuous mode [ 253.815417][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.839293][T10160] : left allmulticast mode [ 253.848360][T10160] : left promiscuous mode [ 253.860276][T10160] bridge0: port 1() entered disabled state [ 253.875552][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1099'. [ 253.896141][T10179] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1099'. [ 254.078558][T10184] netlink: 'syz.2.1102': attribute type 8 has an invalid length. [ 254.166994][T10164] netlink: 'syz.4.1098': attribute type 1 has an invalid length. [ 254.186236][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'. [ 254.712565][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1110'. [ 254.778791][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'. [ 255.421077][T10261] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1121'. [ 255.701588][ T5148] Bluetooth: hci2: command 0x0405 tx timeout [ 255.863567][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.005064][T10294] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 256.007527][T10290] pimreg: entered allmulticast mode [ 256.014565][T10294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.541412][T10319] netlink: 'syz.4.1138': attribute type 29 has an invalid length. [ 256.617813][T10324] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 256.642971][T10324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.778803][T10332] vlan3: entered allmulticast mode [ 256.793889][T10332] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 256.805556][T10334] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 256.856920][T10342] netlink: 'syz.4.1146': attribute type 2 has an invalid length. [ 257.111501][T10347] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 257.159761][T10347] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 257.172398][T10347] gretap2: entered promiscuous mode [ 257.177865][T10347] gretap2: entered allmulticast mode [ 257.284858][T10362] atomic_op ffff88802ee90998 conn xmit_atomic 0000000000000000 [ 257.320908][T10364] atomic_op ffff88807cfaa198 conn xmit_atomic 0000000000000000 [ 258.160943][T10390] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 258.613690][T10424] sit0: Master is either lo or non-ether device [ 258.656056][T10427] __nla_validate_parse: 13 callbacks suppressed [ 258.656078][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1172'. [ 258.824059][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 258.946291][T10443] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1177'. [ 258.957492][T10443] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 258.972044][T10442] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 259.002114][T10442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1178'. [ 259.006986][T10436] bond11: Invalid ad_actor_system MAC address. [ 259.018911][T10436] bond11: option ad_actor_system: invalid value (1) [ 259.030131][T10436] bond11 (unregistering): Released all slaves [ 259.095217][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1179'. [ 259.177564][T10448] syzkaller0: create flow: hash 1326177235 index 2 [ 259.300097][T10448] syzkaller0: delete flow: hash 1326177235 index 2 [ 259.341255][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 259.383963][T10466] Bluetooth: hci1: too big key_count value 32778 [ 259.833137][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1191'. [ 260.237896][T10510] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 261.271622][T10499] ipvlan2: entered promiscuous mode [ 261.289037][T10505] geneve3: entered promiscuous mode [ 261.294674][T10505] geneve3: entered allmulticast mode [ 261.372786][T10509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.424607][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 261.449072][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 261.474323][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 262.972487][T10509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.983032][T10509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 263.034078][T10509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.044604][T10509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 263.104673][T10509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.115456][T10509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 263.218085][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 263.226734][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 263.245317][ T8383] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 263.253841][ T8383] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 263.270075][ T8383] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 263.278651][ T8383] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 263.294319][ T8383] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 263.303566][ T8383] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.218487][ T31] INFO: task udevd:5893 blocked for more than 143 seconds. [ 287.225849][ T31] Not tainted syzkaller #0 [ 287.231223][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.240267][ T31] task:udevd state:D stack:22760 pid:5893 tgid:5893 ppid:5198 task_flags:0x400140 flags:0x00080001 [ 287.252654][ T31] Call Trace: [ 287.255957][ T31] [ 287.259153][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 287.264304][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 287.269968][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 287.275909][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.281520][ T31] ? __pfx___schedule+0x10/0x10 [ 287.286442][ T31] ? schedule+0x91/0x360 [ 287.290917][ T31] schedule+0x165/0x360 [ 287.295112][ T31] schedule_timeout+0x12b/0x270 [ 287.300598][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 287.306018][ T31] ? __pfx_process_timeout+0x10/0x10 [ 287.359063][ T31] ? prepare_to_wait_event+0x437/0x480 [ 287.364629][ T31] nbd_queue_rq+0x662/0xf10 [ 287.410690][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 287.415809][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 287.464815][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 287.480282][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 287.485412][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 287.492783][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 287.498932][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 287.505340][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 287.512715][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 287.518413][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 287.524877][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 287.530308][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 287.535455][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 287.541398][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 287.546812][ T31] ? blk_mq_dispatch_list+0x1a0/0xe00 [ 287.552854][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 287.559243][ T31] ? rcu_is_watching+0x15/0xb0 [ 287.564055][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 287.570685][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 287.576055][ T31] ? blk_mq_submit_bio+0x1a65/0x25b0 [ 287.582057][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 287.588388][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 287.593487][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 287.600435][ T31] __submit_bio+0x2d3/0x5a0 [ 287.605070][ T31] ? __pfx___submit_bio+0x10/0x10 [ 287.610711][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 287.616429][ T31] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 287.623335][ T31] ? bio_associate_blkg+0x6d/0x230 [ 287.629388][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 287.635612][ T31] ? submit_bio_noacct+0xe0c/0x1b80 [ 287.641498][ T31] block_read_full_folio+0x7b7/0x830 [ 287.647089][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 287.653363][ T31] filemap_read_folio+0x117/0x380 [ 287.659693][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 287.665296][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 287.672622][ T31] ? filemap_add_folio+0x35f/0x540 [ 287.677809][ T31] do_read_cache_folio+0x350/0x590 [ 287.683769][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 287.690119][ T31] read_part_sector+0xb6/0x2b0 [ 287.694928][ T31] adfspart_check_ICS+0xa4/0xa50 [ 287.700504][ T31] ? snprintf+0xda/0x120 [ 287.704790][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 287.711225][ T31] bdev_disk_changed+0x75f/0x14b0 [ 287.716325][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 287.722663][ T31] ? wait_on_inode+0xc0/0x230 [ 287.727389][ T31] blkdev_get_whole+0x380/0x510 [ 287.732371][ T31] bdev_open+0x31e/0xd30 [ 287.736649][ T31] blkdev_open+0x457/0x600 [ 287.741544][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 287.746798][ T31] do_dentry_open+0x953/0x13f0 [ 287.752110][ T31] vfs_open+0x3b/0x340 [ 287.756203][ T31] ? path_openat+0x2ecd/0x3830 [ 287.761046][ T31] path_openat+0x2ee5/0x3830 [ 287.765690][ T31] ? __pfx_path_openat+0x10/0x10 [ 287.770841][ T31] do_filp_open+0x1fa/0x410 [ 287.776086][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.782064][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 287.787179][ T31] ? _raw_spin_unlock+0x28/0x50 [ 287.792233][ T31] ? alloc_fd+0x64c/0x6c0 [ 287.796600][ T31] do_sys_openat2+0x121/0x1c0 [ 287.801489][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.806754][ T31] __x64_sys_openat+0x138/0x170 [ 287.812144][ T31] do_syscall_64+0xfa/0xfa0 [ 287.816664][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.823107][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.829367][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.834089][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.840551][ T31] RIP: 0033:0x7f5e350a7407 [ 287.844977][ T31] RSP: 002b:00007fff4d86c360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 287.853735][ T31] RAX: ffffffffffffffda RBX: 00007f5e34fb9880 RCX: 00007f5e350a7407 [ 287.862314][ T31] RDX: 00000000000a0800 RSI: 000055e84c5ac190 RDI: ffffffffffffff9c [ 287.870708][ T31] RBP: 000055e84c587910 R08: 0000000000000000 R09: 0000000000000000 [ 287.878861][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e84c59bba0 [ 287.886875][ T31] R13: 000055e84c595190 R14: 0000000000000000 R15: 000055e84c59bba0 [ 287.895284][ T31] [ 287.899006][ T31] [ 287.899006][ T31] Showing all locks held in the system: [ 287.918185][ T31] 1 lock held by khungtaskd/31: [ 287.923106][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 287.948269][ T31] 2 locks held by getty/5593: [ 287.953178][ T31] #0: ffff8880335c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.998373][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 288.028374][ T31] 5 locks held by syz-executor/5827: [ 288.033809][ T31] #0: ffff888031328dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 288.088830][ T31] #1: ffff8880313280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 288.108819][ T31] #2: ffffffff8f4354e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 288.148158][ T31] #3: ffff88807d28f338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 288.157765][ T31] #4: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 288.208345][ T31] 1 lock held by syz-executor/5828: [ 288.213695][ T31] 1 lock held by syz-executor/5836: [ 288.248316][ T31] 3 locks held by udevd/5893: [ 288.253054][ T31] #0: ffff888024e19358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 288.284320][ T31] #1: ffff888024c8e590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 288.318643][ T31] #2: ffff888024f451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 288.327734][ T31] 1 lock held by syz-executor/6048: [ 288.358174][ T31] 3 locks held by kworker/0:6/8316: [ 288.363473][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.418169][ T31] #1: ffffc9000ade7ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.458186][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 288.507393][ T31] [ 288.517209][ T31] ============================================= [ 288.517209][ T31] [ 288.554432][ T31] NMI backtrace for cpu 1 [ 288.554455][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.554476][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.554487][ T31] Call Trace: [ 288.554494][ T31] [ 288.554503][ T31] dump_stack_lvl+0x189/0x250 [ 288.554538][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.554564][ T31] ? __pfx__printk+0x10/0x10 [ 288.554593][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 288.554619][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 288.554643][ T31] ? __pfx__printk+0x10/0x10 [ 288.554675][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.554708][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 288.554733][ T31] watchdog+0xf60/0xfa0 [ 288.554758][ T31] ? watchdog+0x1e2/0xfa0 [ 288.554782][ T31] kthread+0x711/0x8a0 [ 288.554810][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.554830][ T31] ? __pfx_kthread+0x10/0x10 [ 288.554858][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.554883][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.554908][ T31] ? __pfx_kthread+0x10/0x10 [ 288.554935][ T31] ret_from_fork+0x4bc/0x870 [ 288.554959][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 288.554988][ T31] ? __switch_to_asm+0x39/0x70 [ 288.555004][ T31] ? __switch_to_asm+0x33/0x70 [ 288.555019][ T31] ? __pfx_kthread+0x10/0x10 [ 288.555046][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.555083][ T31] [ 288.555091][ T31] Sending NMI from CPU 1 to CPUs 0: [ 288.708037][ C0] NMI backtrace for cpu 0 [ 288.708058][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 288.708075][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.708090][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 288.708118][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 288.708131][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 288.708148][ C0] RAX: 2f6e2b3de48e3300 RBX: ffffffff81967be7 RCX: 2f6e2b3de48e3300 [ 288.708160][ C0] RDX: 0000000000000001 RSI: ffffffff8d70d51f RDI: ffffffff8bbf05e0 [ 288.708171][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 288.708183][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cdc70 [ 288.708195][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 288.708207][ C0] FS: 0000000000000000(0000) GS:ffff88812613c000(0000) knlGS:0000000000000000 [ 288.708221][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.708232][ C0] CR2: 000055f2a5439000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 288.708248][ C0] Call Trace: [ 288.708255][ C0] [ 288.708262][ C0] default_idle+0x13/0x20 [ 288.708280][ C0] default_idle_call+0x73/0xb0 [ 288.708298][ C0] do_idle+0x1e7/0x510 [ 288.708321][ C0] ? __pfx_do_idle+0x10/0x10 [ 288.708349][ C0] cpu_startup_entry+0x44/0x60 [ 288.708368][ C0] rest_init+0x2de/0x300 [ 288.708386][ C0] start_kernel+0x3ae/0x410 [ 288.708415][ C0] x86_64_start_reservations+0x24/0x30 [ 288.708437][ C0] x86_64_start_kernel+0x143/0x1c0 [ 288.708477][ C0] common_startup_64+0x13e/0x147 [ 288.708505][ C0] [ 289.101727][ T8389] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.184487][ T8389] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.235337][ T8389] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.301910][ T8389] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.422677][ T8389] bridge_slave_1: left allmulticast mode [ 289.429039][ T8389] bridge_slave_1: left promiscuous mode [ 289.434784][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.445506][ T8389] bridge_slave_0: left allmulticast mode [ 289.451896][ T8389] bridge_slave_0: left promiscuous mode [ 289.457979][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.545960][ T8389] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 289.686695][ T8389] dvmrp6 (unregistering): left allmulticast mode [ 289.818982][ T8389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.831614][ T8389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.841508][ T8389] bond0 (unregistering): Released all slaves [ 289.931975][ T8389] bond1 (unregistering): Released all slaves [ 289.945940][ T8389] bond2 (unregistering): (slave veth3): Releasing backup interface [ 289.956472][ T8389] bond2 (unregistering): Released all slaves [ 290.071105][ T8389] tipc: Left network mode [ 290.105044][ T8389] IPVS: stopping master sync thread 9644 ... [ 290.593274][ T8389] hsr_slave_0: left promiscuous mode [ 290.602601][ T8389] hsr_slave_1: left promiscuous mode [ 290.628615][ T8389] veth1_macvtap: left promiscuous mode [ 290.634241][ T8389] veth0_macvtap: left promiscuous mode [ 290.641751][ T8389] veth1_vlan: left promiscuous mode [ 290.647152][ T8389] veth0_vlan: left promiscuous mode [ 291.078571][ T8389] team0 (unregistering): Port device veth0_virt_wifi removed [ 291.287468][ T8389] team0 (unregistering): Port device team_slave_1 removed [ 291.323925][ T8389] team0 (unregistering): Port device team_slave_0 removed [ 291.893946][ T8389] ------------[ cut here ]------------ [ 291.905324][ T8389] WARNING: CPU: 1 PID: 8389 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100 [ 291.915897][ T8389] Modules linked in: [ 291.920155][ T8389] CPU: 1 UID: 0 PID: 8389 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 291.930699][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.941111][ T8389] Workqueue: netns cleanup_net [ 291.945937][ T8389] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 291.952429][ T8389] Code: 58 eb 17 f8 4b 83 3c 2c 00 75 19 e8 2c 36 b2 f7 49 81 fd f8 07 00 00 74 1d e8 1e 36 b2 f7 49 83 c5 08 eb c9 e8 13 36 b2 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 291.973093][ T8389] RSP: 0018:ffffc900041af890 EFLAGS: 00010293 [ 291.980140][ T8389] RAX: ffffffff8a0dce5d RBX: ffff888026bf0000 RCX: ffff88802ea91e40 [ 291.988533][ T8389] RDX: 0000000000000000 RSI: ffffffff8d8f4029 RDI: ffff888026bf03f0 [ 291.996550][ T8389] RBP: ffffc900041af990 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e [ 292.005142][ T8389] R10: dffffc0000000000 R11: fffffbfff1ef9b8f R12: ffff888026bf0000 [ 292.013233][ T8389] R13: 00000000000003f0 R14: ffff8880323b4900 R15: dffffc0000000000 [ 292.021344][ T8389] FS: 0000000000000000(0000) GS:ffff88812623c000(0000) knlGS:0000000000000000 [ 292.030425][ T8389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.037032][ T8389] CR2: 0000560d6e032950 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 292.045128][ T8389] Call Trace: [ 292.048512][ T8389] [ 292.051484][ T8389] ops_undo_list+0x49a/0x990 [ 292.056136][ T8389] ? __pfx_ops_undo_list+0x10/0x10 [ 292.061378][ T8389] ? do_raw_spin_unlock+0x122/0x240 [ 292.066621][ T8389] cleanup_net+0x4d8/0x820 [ 292.071178][ T8389] ? __pfx_cleanup_net+0x10/0x10 [ 292.076738][ T8389] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.082478][ T8389] ? process_scheduled_works+0x9ef/0x17b0 [ 292.088501][ T8389] ? process_scheduled_works+0x9ef/0x17b0 [ 292.094435][ T8389] process_scheduled_works+0xae1/0x17b0 [ 292.100370][ T8389] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.106412][ T8389] worker_thread+0x8a0/0xda0 [ 292.111131][ T8389] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.117509][ T8389] ? __kthread_parkme+0x7b/0x200 [ 292.122606][ T8389] kthread+0x711/0x8a0 [ 292.126731][ T8389] ? __pfx_worker_thread+0x10/0x10 [ 292.132064][ T8389] ? __pfx_kthread+0x10/0x10 [ 292.136708][ T8389] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.142018][ T8389] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.147419][ T8389] ? __pfx_kthread+0x10/0x10 [ 292.152600][ T8389] ret_from_fork+0x4bc/0x870 [ 292.157508][ T8389] ? __pfx_ret_from_fork+0x10/0x10 [ 292.162784][ T8389] ? __switch_to_asm+0x39/0x70 [ 292.167668][ T8389] ? __switch_to_asm+0x33/0x70 [ 292.173021][ T8389] ? __pfx_kthread+0x10/0x10 [ 292.178345][ T8389] ret_from_fork_asm+0x1a/0x30 [ 292.183593][ T8389] [ 292.186664][ T8389] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 292.193974][ T8389] CPU: 1 UID: 0 PID: 8389 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 292.203567][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.213781][ T8389] Workqueue: netns cleanup_net [ 292.218628][ T8389] Call Trace: [ 292.221953][ T8389] [ 292.224920][ T8389] dump_stack_lvl+0x99/0x250 [ 292.229556][ T8389] ? __asan_memcpy+0x40/0x70 [ 292.234274][ T8389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.239515][ T8389] ? __pfx__printk+0x10/0x10 [ 292.244152][ T8389] vpanic+0x237/0x6d0 [ 292.248176][ T8389] ? __pfx_vpanic+0x10/0x10 [ 292.252834][ T8389] panic+0xb9/0xc0 [ 292.256598][ T8389] ? __pfx_panic+0x10/0x10 [ 292.261085][ T8389] __warn+0x31b/0x4b0 [ 292.265197][ T8389] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 292.270616][ T8389] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 292.276055][ T8389] report_bug+0x2be/0x4f0 [ 292.280424][ T8389] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 292.285830][ T8389] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 292.291233][ T8389] ? xfrm6_tunnel_net_exit+0x80/0x100 [ 292.296623][ T8389] handle_bug+0x84/0x160 [ 292.300881][ T8389] exc_invalid_op+0x1a/0x50 [ 292.305451][ T8389] asm_exc_invalid_op+0x1a/0x20 [ 292.310365][ T8389] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 292.316368][ T8389] Code: 58 eb 17 f8 4b 83 3c 2c 00 75 19 e8 2c 36 b2 f7 49 81 fd f8 07 00 00 74 1d e8 1e 36 b2 f7 49 83 c5 08 eb c9 e8 13 36 b2 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 292.335979][ T8389] RSP: 0018:ffffc900041af890 EFLAGS: 00010293 [ 292.342059][ T8389] RAX: ffffffff8a0dce5d RBX: ffff888026bf0000 RCX: ffff88802ea91e40 [ 292.350045][ T8389] RDX: 0000000000000000 RSI: ffffffff8d8f4029 RDI: ffff888026bf03f0 [ 292.358017][ T8389] RBP: ffffc900041af990 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e [ 292.366000][ T8389] R10: dffffc0000000000 R11: fffffbfff1ef9b8f R12: ffff888026bf0000 [ 292.373975][ T8389] R13: 00000000000003f0 R14: ffff8880323b4900 R15: dffffc0000000000 [ 292.382052][ T8389] ? xfrm6_tunnel_net_exit+0x7d/0x100 [ 292.387540][ T8389] ops_undo_list+0x49a/0x990 [ 292.392191][ T8389] ? __pfx_ops_undo_list+0x10/0x10 [ 292.397413][ T8389] ? do_raw_spin_unlock+0x122/0x240 [ 292.402638][ T8389] cleanup_net+0x4d8/0x820 [ 292.407077][ T8389] ? __pfx_cleanup_net+0x10/0x10 [ 292.412132][ T8389] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.417338][ T8389] ? process_scheduled_works+0x9ef/0x17b0 [ 292.423061][ T8389] ? process_scheduled_works+0x9ef/0x17b0 [ 292.428789][ T8389] process_scheduled_works+0xae1/0x17b0 [ 292.434433][ T8389] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.440434][ T8389] worker_thread+0x8a0/0xda0 [ 292.445034][ T8389] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.451461][ T8389] ? __kthread_parkme+0x7b/0x200 [ 292.456490][ T8389] kthread+0x711/0x8a0 [ 292.460573][ T8389] ? __pfx_worker_thread+0x10/0x10 [ 292.465687][ T8389] ? __pfx_kthread+0x10/0x10 [ 292.470308][ T8389] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.475514][ T8389] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.480724][ T8389] ? __pfx_kthread+0x10/0x10 [ 292.485414][ T8389] ret_from_fork+0x4bc/0x870 [ 292.490363][ T8389] ? __pfx_ret_from_fork+0x10/0x10 [ 292.495490][ T8389] ? __switch_to_asm+0x39/0x70 [ 292.500255][ T8389] ? __switch_to_asm+0x33/0x70 [ 292.505021][ T8389] ? __pfx_kthread+0x10/0x10 [ 292.509624][ T8389] ret_from_fork_asm+0x1a/0x30 [ 292.514410][ T8389] [ 292.518313][ T8389] Kernel Offset: disabled [ 292.522640][ T8389] Rebooting in 86400 seconds..