last executing test programs: 6m2.170001963s ago: executing program 0 (id=1727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9", 0xbb}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d0202035", 0x5a}, {0x0}, {&(0x7f0000000300)}], 0x5, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x2, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 6m1.310725316s ago: executing program 0 (id=1734): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd27, 0x2, 0x2, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {0x6}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x2}}]}}]}, 0x38}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m1.060071209s ago: executing program 0 (id=1737): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000001480)=0x80000000003, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6m0.829934612s ago: executing program 0 (id=1738): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="990000bd7000ffdbdf25010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800002000001100100000001000000005000021040000001600000e030900"/45], 0x0, 0x2d}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x80004c0}, 0x20044040) r3 = socket(0x3c, 0x4, 0x401) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r9, r8, 0x0, 0xfffbffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x68, r10, 0xd0d, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000090) connect$can_bcm(r5, &(0x7f00000012c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x4, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0x38, 0xc, "91eb616db214b96ed2ebb71991a5088c3137cc43e224c874d26fda8a09fb3635660419c1bd77bc0f515faab0c12ba83c3d1cf231"}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc366}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7e4c}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 6m0.505467669s ago: executing program 0 (id=1744): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xffff}, {0x5}}}, 0x8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x1, 0xc}, {0xc, 0x16}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x880) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r2, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1c0, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2000}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6c}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2cad68e7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x45c}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xec6, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xffff}, {0x5}}}, 0x8}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x1, 0xc}, {0xc, 0x16}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x880) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r2, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1c0, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2000}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6c}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2cad68e7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x45c}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000880) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xec6, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 6m0.064456533s ago: executing program 0 (id=1749): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3ff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='signal_generate\x00', r4, 0x0, 0x3}, 0x18) clock_gettime(0x3, &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x7, 0x3, 0x4, {{0xe, 0x4, 0x1, 0x19, 0x38, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x23, 0xa1, [@rand_addr=0x64010101, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @remote]}]}}}}}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x2, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xe5, 0xd6, &(0x7f0000000280)=""/214, 0x60700, 0x7a, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000004c0)=[r3, r3, r3, r6, r3, r3], &(0x7f0000000500)=[{0x1, 0x2, 0x4, 0xd}, {0x0, 0x2, 0x1, 0x8}], 0x10, 0x7}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={r6, &(0x7f0000000680)="05ad58dbe3da3832e4d9d662816a3dc6441655fc67ba67751fe15e12a022b993a48ca7531527612cf7cccf13e9baf2585a2a18b8fb66033f5319fab0cc085c72bcf2d89234c86e9cd1a8f8580e530c65c891c24345e93ae775a3f48025475ba9697f62dd8b8bf126ffe62addeb5955f87a0c6793f9f30cca28b2"}, 0x20) 5m59.717003838s ago: executing program 32 (id=1749): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3ff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='signal_generate\x00', r4, 0x0, 0x3}, 0x18) clock_gettime(0x3, &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x7, 0x3, 0x4, {{0xe, 0x4, 0x1, 0x19, 0x38, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x23, 0xa1, [@rand_addr=0x64010101, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @remote]}]}}}}}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x2, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xe5, 0xd6, &(0x7f0000000280)=""/214, 0x60700, 0x7a, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000004c0)=[r3, r3, r3, r6, r3, r3], &(0x7f0000000500)=[{0x1, 0x2, 0x4, 0xd}, {0x0, 0x2, 0x1, 0x8}], 0x10, 0x7}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={r6, &(0x7f0000000680)="05ad58dbe3da3832e4d9d662816a3dc6441655fc67ba67751fe15e12a022b993a48ca7531527612cf7cccf13e9baf2585a2a18b8fb66033f5319fab0cc085c72bcf2d89234c86e9cd1a8f8580e530c65c891c24345e93ae775a3f48025475ba9697f62dd8b8bf126ffe62addeb5955f87a0c6793f9f30cca28b2"}, 0x20) 7.562856309s ago: executing program 1 (id=4345): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa46}, 0xe) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6ad, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x1d, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@call={0x85, 0x0, 0x0, 0x48}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x1, 0xd, 0x0, 0x8, 0x20, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x1d, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@call={0x85, 0x0, 0x0, 0x48}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x1, 0xd, 0x0, 0x8, 0x20, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 6.612822998s ago: executing program 1 (id=4358): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x2, [0x0, 0x0]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000880d) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44805}, 0x40400c4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8804) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x40040) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000640), &(0x7f0000000680)=0x4) write(r0, &(0x7f00000006c0)="6a5ec2b14970119bbf232ead73f4f839321215391cd084c67fb7f5659af873faecfa1ddc2b92fff3f885181d9d6f1685f7f61de3ed879f20802f39b8bd30ea259bc4c6c3568bda6e9bec2803f1aa7acc9fa32e298e87192f8f12dad7", 0x5c) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000740)=0x4, 0x4) sendfile(r2, r0, &(0x7f0000000780)=0x3, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xb4, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000b80)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000c40)={'gretap0\x00', &(0x7f0000000bc0)={'gretap0\x00', 0x0, 0x1, 0x1, 0x8000, 0x0, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@lsrr={0x83, 0x1b, 0xca, [@dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}]}, @end, @generic={0x44, 0x4, 'od'}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d00)={'gre0\x00', &(0x7f0000000c80)={'gre0\x00', 0x0, 0x8, 0x700, 0x1, 0x46, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x66, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x10, 0x3, [{0x0, 0xa, "46bcc2728f39d5a9"}]}, @ssrr={0x89, 0x1b, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @multicast1, @remote, @multicast1]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000ec0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x118, r7, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r13, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x361a}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000c0) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r15) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r13, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x101}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20001}, 0x4000000) 6.470548658s ago: executing program 1 (id=4362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in6=@private1, {0x2, 0x0, 0x5}, {0x2000000000000, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b00)={0x2410, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x24, 0x2a, [@mic={0x8c, 0x18, {0x4cb, "519a068dece3", @long="39fdd474bd3c0673ef51623800dba2d6"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xea}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffc}], @NL80211_ATTR_IE={0x25, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8, 0x41}}, @measure_req={0x26, 0x16, {0x7, 0x3, 0x7, "cd2128d36cb62b6baba3b238b60233f49509d6"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "27d8311ce2b6b83ee739e207bab4ff"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "37015a7f7c67d1e1098b74cbed54f723c711e7141647bf2db7eab1c83b0fd4e76d16f28e79130d3ea30747a530a7678d7dceb49ea0173c93fb71dd0c04b58f539405fe9368456ab35a33666a72a45143b013c47812d1181a4ec2c2e7b38792f38cfbe7cb72743fd9cf97099e2103399b39e84e2e8b73503cfe6edfc4d7e4f7a46e803faa56e1e3adac9e28f58ff095119337d13a4504afb3572e5d4ee55d520ed4f230faf2404dd0289e0f5684bd0e21e0d3472339645c502939c4633d4d1b98e231cfd5e870a949f15213cb72c09c8ec39b245397be5517fdcbbc4d18c9fface84fa6023e9b72311252a1ffadbd009f241c7d8248da1bb0e05b0058d3f2addcec767b92e11b1884eef44a398284211f1677765621ab58c87fe756882b68e511653acb76f7a99ceccdbf8c505f41db4092950e233b8ead799e065aec503e6986cceef6283c1db0f0256dd28dfb8c86c54c059f8a41e6379eb4a5d9d8197933eca6728569440a023004f9d3f8596741aedc49657050685e5678bee1ae956e5cd6fe6cc77598ccb3ee4babb6e6db4474fc088d5c50f36c693548b22b14d8946685cacd34a6ae0340b6264680c087e538f4e518a8d0130aaebb90bbbc3f26c6202db2b972d2c038a8d276d3affb966b401cf95384ac2267acacd9da1eb41178d190c969d76929dbe63bf84f9168a1657d139b598ccb6de4cbb32f25fde07d8a748204b3ccf7d84de9ca3367b7080855edb07761bcd12baf2f10a712833a0c95524248e9e32d818d56fc7bb89d58bb1ffdeee8d36250396ac6ff2552e665827c2391f8d17d4705434861785f4dbaf78a8d81677858e4f3e806415cd7b28ddf936abec7a7851bf212c840292970c72c109dfafd8e879cb10338b91bb5c10e072d4fafc5ced8de845ea7025ebf631255fcfbdaa4b30b688dd460ae5f28b8ba9b6b9709010621c5965d1fc368af1d9db92ad716998f454777c71e8f79e92e334819d9c5f0cce31b4452e37d53995ade435f615a1600e8fd451175a640559787e08d10af9d39fedb8d0615584b01cfada4a68a64c79aa31d6ed88e3d69559d77c5f3745106cb537f0bbab5f3513f7c819e8bac54554cd7065b349d1203f7cbf45624eecfe24737a541d4f92162bbddf5fba82316dd6c3d7bebd7a554c73705b622bbcce63e8ed6a1ecab9bd852c7519422821c48ae7553c52220f328bd79b720ada4677af7e20a3a000c6df536a710341100b281363dfda6c74bda482780b29b2f12210235c9047e464df00578a705214fe36ee244d4f2136c31d74609b8acb350bf83c8c89bdc48863ec4861c32b6b3472231e40ea09162accdfcd46842883616ed167e891ff98a517af822894ce1889b89c8b60e553d3483a3a95b3b3448ef4d9f3660c7dd7580caf8ffc152f63c73cc5589193dfa89f247f73b5e0b7716a8420a2c5531fc405220af8eb584ea15245cfde8596aaf9c6689ba7645af0e7ea248bfb95e0ec81e973e030714e6b3f361609641e82367f45a0dee81d2fb806fee6ecc39ed7fb5d56757d2129da3599fa61c9fce673fca594385b75ecafe4fa7cf1f960520fb7b6d2b120bea26907481c0769a55dfdbb4b435ea301d1507b9e11dc96343fa6b196a7e341d475500c5d96ebb2d0109d697193de90c4d15575f0c889d737466b3c21bf756b59350a55773a33ede40ea402180cf318c80215dcebf9546b1e1f88b93bc8375740d26fdd809b447b4e8140c10bbaa8d893413d74a5be8b6ea398d85e733c1932ba6071b9f469eec4979da13d24503552ba75fea0ab1d7df635e8b205ebf1f5067baa40e2914d0d21921c6e57743b8193e3e079eb21d5d3e36c2d8254dcae1b86c38c9df0aedc102aa19cf5ff6c664a8b4aa47697e3bd3ee7146de21224282602346ccd4cb2e1495f931008722d2433fe60f7cf341d0649a90f1d533924965fe3babb0097ad1465acbea5a6cd281c95fb01eee1e5b69d7e4656a37261359f609e35280d1e5afddc6ed7a2066a8955655d9720f8d057cfb2987133f97ac3805e984e49fdda9f42e0bbabb23dc06873e174ade51c95d772047a65838cd4b5b80dc9e81b6c86e03d095f9321736893a83cf50bc35a6af7439c769b61ddd118f02f87e8eadbbdd6baacc24cc7d6177fba0f36a71afc0c752975d70114275f01acb411ab1c491a0bef8fa10486d2bb1c16cec4d3b23e796602bbde998aae5de0195321261c7547f3ab9e706ecd12e63824e8561c874fe27f93a61380ae0add577905da875fc3ea5f10728788a83d8ab158a799c815243ea73701ec14e63fcc774f3f3ce9b946609662d6282e95b85d0f8d31f74805bbf871d19051429f9238b69c0cc67c404a211bdc96e254d8e9f1a6d66e48ab54e0140d41ea9ffdaf9d63c0fec28687615692dac989af7ef520af1f0bebd484fe2ef857814c510dab69e4a319a4a02706fc54a1deebb9c8534ec828045b1f9b38970a98bcd34d8f39d31a1076ea116a6bdfb7f1d2f66c8728cb5f74e780e4594e60dc865091e418b803f7d6e515687ba1706336b91759e5b5264f5bf4b58c13b0f93503504aadc09d300e83537e1fa7339fcf04ba7dfa5fda4baa1888f1e67263912af68f0a3209371b96224157a2b69e41344c5e683db131eb3f3d8cdbc05076006f07dd16b8603aae298ca65f133418f7c58ba458a3f8833da40808e3232d63a468467a463255b0fa850b1b140573e6065ac491fc31fe489f0e9f0127476ae2d82dde4ac3ab5046eb1e19cce892b5789192f556917db00621ba8804fd238e469573a9246288bcd23e45456eef969f8585dc0cbd3dfb06a47882013914a68f08eca2e22015325d4ab4745788a29047a846e208752baaef95a46c6f85d48132533c2777b46b77a080a39edfc38fdf2e4718f02f770c3d9646886c7bc869c34d883747e53b237cdd6299dbf769cead977037d9621cbfedcf3405c3b6c04879e2f1ae8702a121096c3dbb549a3800dad15e2167e5a3414709ef5e9b4021880ebda29ac66db2357941e880ecebf19e76ec99800c4e978e1b3f32f5ca305b7b22c572826dc83782f22ea6d11dbd5b3a093f92ab9813d4eaa50f789722b9e361308cb3c875fe6aa58ceff915e677a4dbbea73edd373e40c24c538dd19c66b166a0b7d9a748da0742b653efc2a909c731e6ecc4a73bd67f5c912e752f3dd2775637ac4b8e07ad9d1e709a98ed2f2e0e0f80e6c92a088f89127a0b473c6b4ac5c14de527bc5423e315195a8cf9656b320c6be298e606f0f163ea7cd12fc29acb9804cd5d3f60716bc809e9003b2b86106880ca39dce916c0e4fbc02c2ab1d0528969e62e8ad096356a3f17a25e164a90d1b2d5b2a9a06a090db832278d204c2b1c5a29422ab7c887875a0f0de735806589f3a03e15c17f751c1b2e7827ece1917da237d5ce935c99354eb87f41791dbe6b2266653197184631d2dc7a40e9a6bf41ac7cc0cda2271e16f3ec2b1eb974018617cedde804d466a856becb28536343653c24a79de51454f93286f1a76e42b5d4aab9bf9f32ed32ab4b399183caa1fcea5f4a813ceda62cb1a25218fa2a48e67cda1da2a642a999df0cc929977c2055557a73cee6f843433462b0f6555638236876b686cab1bab550c52f7c37816a68559aa2880c8f2b538a20ccbb1675218a62278a53293c2daf56cebe51924c549ac6e789b6eccf193c0342468490823a82e2c1022d008345b1e059d4bc0ebdac2f22140601da2154c580be38e5c65cf3cbfa4aa142324a2ed4c52da0877a62fdea28d77be7760b0ca2f1f98db8442f56a04f05227fbf30b00c76f482be42f84966284e2404ec4438395f9e0087ceeb21b78a12fa9e38a345786510e34ab65eeafc0043ca699455c709dffa3f3fb80444f1ca41d5b4b3ec7c926038757cbbe7b9cde8aa1d4c1d676a7024c9e20aaf4125dc0629f1f62950b280c1b12af93bb41dba17098de62894bd4f16bf05ef001f110c040ca951062549159f87e08292bc079ed410506dcf94b8fd7bb4a4e21541589c4f326f59b3e30e87f4a895ebe8f8ec87c20e73185ac6d94c2ff1679b80c05a642bbda0b3bf7c582ba61e9972ffeb580bc0d7f8be8134666adb4ad6de2179ffb88b04acfc18db12b8b00d8f68a851289bc0b797d0b2a3a5f6eeae2ddba2f083566ae30158d09cdbe19eb215a87a2481e01a2533ad4045762a4b9ea6d0d48d991b18fdf0cda5465d45e181c59db81b163e01b3652546012accd2742eda7036b474efb081e03b13cae324fe62672c99a5b2a3f22794580085a1e128a7c6f5d99614e04f0f5ed325adac42f14422f455f0678872fabf98506ed984bdec39b2afb5a3d1e5d775eafd0b65a5c58a3e327362764838b447361a7a3258168997e0d571ec499dcfef90bcc75438a54638bcc73e32fb99c3ac475a1fb02a46b1901631df5951efb1195af460b848e91aff17a115afde9f7c87ac02bf9c9e6704eec9280eb072876eb3703bf9c72ffac71e6f8bd245433d9cb98b442e9cd97cb8a5ddd9eb8ab35b1ab11cd0530cc5ad0fb018078b4a4df4a9fe27e9c8df33d546b63ab4a764a11c52443095f76674205ab59e70bcbb2f2f0fdaef0a1bddf42a778bfabbe70088b2f5977f74d5efea72fb993d7e20ed4c6ba7f7eb37b6bcdca2b6b6868349e4c7c661d6d5081d0ca663e6eabf3f4fbe630443eb931b6f0d3a5389131e260d8a8a83112362ddc8d3ea77f8a2889dabc5f79c4f7bcbb206db5fe505323277652cc81ded6823a2bcea7acd93357faaa35a8656d9ed570b2cec2e1abff579d2a3345ced8fecfd09eae171554ffd4433fbf662efc5d9be184377675ec82b1e28bd29bc77f072bce5185f148ee9a7aad0c6d2d0d2f52e482939657bd4ecec6fb8282187a287509c89cc23356f68a19eba51ad9936636587f62c82fe2d488070626ba6f7eea8596a80157eedcd58369182b0784ca9dae378a6f0d2a15afe8c2f8e3937cfdc2b18a601b2cbdb83831fed1347b7c81083a84b157bc49e185eae89b0d48bc05dc47894b729557ef25b20db08635419fb73b22c4b32689b4d44bb78584a58ac63d1f931e051408f0fe1412e24641f3defb857348daa9b48194278d94d129b76798c7a8f96953bc9b24c31cbe83a192effb24578b9549e032284890f05bf93a985a5bd0304a77fed624db45b7a4a2bb7479d183d5bd37f9f6d8ef2acf9d7cddc3a65b0d6b97df94ce18cfa9e709ef55260cf269d27277075ae16da8d2cbd006090c295eb1f8d620ac20d99a39deb13bb5b5ecebabc49f679f6ff8ed37e13b38d4a4fce69e8ae656c192c503196123a467476545c2a1ca3d5f2bc216e9033330fab5d4b1f726e20cd68695e0801d37c656c85b65cd4ae9c48842950e9d8ae0b12d2d1a088ae2231619dc876a6150b12807a5bfc526d865d3ab5a885e5827d14606c4fa45823a1a688f602d33c25137987ac3ec0f35dce556b069bdbfd1534ecc2338727dc1a7d851e43b28fe6fa2a6f071e7167a2365371ee8068d2b505dcf1ef80d6875d85b5fb01ea1d43b84ec42297ed7148c86201e1d366755bda58f4d4bec87afff6063fbde79800178048cfdf6a1ba62162ed84cdde5223cf72039d67134fc8f2d94a01924e08d39685208743674a8e1991180bab7cbac7877c46d247f13b384bc8a59dcb4bb9e443b2df64769343140de6bd6015b434443a78fecfdeb236f7233974793132cfaa57022573040604d9957458d7e9f5aa44c90620235b2efcbd224028f7e40ba125c80b4b76373186486996a521206eaa2e48e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "67c77dc742a82ec3a18a60ab9b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "2f187722251656ce345b2c4e"}, @NL80211_ATTR_FILS_ERP_REALM={0x93, 0xfa, "e1688ff44ccfd0d55ebc24d47df1b9d6ce23c30cb85fabcdb97062edb8bd26439b143eb2869e6fd5342f2c28ffe514846a585ac02a7708679e6a33929b290f1c4b7a3803e6832b4671fbf8d909187d73a00d964a2d44648e69635c808195e802a93efa7ac2cbc66c58541ac2de814c4d291e2ac44b420c91cf7811e4897e91dba7f12f1c672899f9e4375979c252d2"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xf4, 0xfa, "b5c1277878d2fe0991ba276d6b45ada4be90a650b966f3ab979c3cb6ad58a3434e1d24fcb6921b97142622e024f00519d4fdfdfef0674606f8940a965d398514bde166518c7e963a528b6880ccf96d6583cda434d079b16742687574b19e1babf8c3f2cb54ada00f78f2d978da0a4b8b52b3a663b8efbca0b25bfcb89b9e7d39f01db54ba5e386c2b7a07def8fd48f584ae0c4d3d4ce2c75228e9fed2165a3160675c1e3a65cff3203a6b5f8316496bf69b21421a9e398bd75a0cb528f23cda0d69f75c672a66c84c22850f2b00a0f6488f0762086436de6c0332f7b2e02f480b02ad3e22e23bdcb09d379d739ac04f3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x400}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_RRK={0xff, 0xfc, "25adec18dc5734e9eda1e596ebab6a459ca5e62113dc6804d5fff0f3ea10ab802937f6e1033ebba578010cf0cfda94ab1554e1343ca5a4bd7c4815618489d19819fe7ead7aeccaa2d4eef4f38cf4451302953497436d84cd111fb15830552e41cc7280ec97d7b572792d1f1e1aa1d802a91681bbe069ff975a22890520dcc33a916b31cadc5faa36999cea6ebb07d13f7fdee41904ce8616f6bab5f90301f62c5a36120a467c25ce8d0edd5f4ed9ee9b5b12c2007369687d4395f9851ca1bda2d5f3146b60256dfae43b2ede29cf26ee1aab2af931ab85d1304e5ccf74a1054b670c80589958c640c3bdbba25b400846499aaf20c869c96b1b2e8d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x90, 0xfa, "fa90b80550e88738bdd366f56e1b58fff21c6378764bf8c1d0833f1a731b1a79dd0f8d16ec295ee569916b3f540954685a38b52eca5cc27e061533a7361b052ba46d5345596e545c421dd0ce5e4c8ac1f7bd542cac899ef747daf6d5fce2c5b3113fad936b3359422fb9aa059d6fe8caa55094774984e96bea5caed4ce32e97c740353565d80f3bfce2366fc"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "4079958a9a81e7d53ea43f7b9ec48b18"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "6d965984"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}], @NL80211_ATTR_IE={0x4}]}, 0x2410}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0xb, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x840) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x48001}, 0x40040) 6.303530093s ago: executing program 1 (id=4366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}}, 0x44094) 6.036214151s ago: executing program 1 (id=4369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4008010) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffe, 0x3a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x24040805) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010328bd70000000000034000000080003000300ed"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x8800) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@mcast2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) 5.856570685s ago: executing program 1 (id=4371): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/219, 0xdb}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f00000001c0)=""/106, 0x6a}], 0x4, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x2f, &(0x7f0000001400)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001780)='syzkaller\x00', 0x7fff, 0x3c, &(0x7f00000015c0)=""/60, 0x41000, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000016c0)={0x2, 0xe, 0xfffffff0, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001700)=[r7, 0xffffffffffffffff], &(0x7f0000001740)=[{0x2, 0x2, 0x10000004, 0x3}], 0x10, 0xffff}, 0x94) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/219, 0xdb}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f00000001c0)=""/106, 0x6a}], 0x4, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x58, &(0x7f0000001600)}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x2f, &(0x7f0000001400)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001780)='syzkaller\x00', 0x7fff, 0x3c, &(0x7f00000015c0)=""/60, 0x41000, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000016c0)={0x2, 0xe, 0xfffffff0, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001700)=[r7, 0xffffffffffffffff], &(0x7f0000001740)=[{0x2, 0x2, 0x10000004, 0x3}], 0x10, 0xffff}, 0x94) (async) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) (async) 3.401055857s ago: executing program 5 (id=4407): socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) (async) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 3.266812238s ago: executing program 5 (id=4411): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f00000010c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r8, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x12c, r8, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa529}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x44, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc800}, 0x20008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2.256915699s ago: executing program 5 (id=4420): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', r2, 0x1, 0x8000, 0x4, 0x1, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @private=0xa010102, {[@lsrr={0x83, 0x2b, 0x99, [@rand_addr=0x64010102, @remote, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @broadcast]}]}}}}}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x8, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) 1.98478416s ago: executing program 5 (id=4428): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @multicast1, 0x0}, &(0x7f0000000180)=0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x7, [@restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @struct={0x7, 0x5, 0x0, 0x4, 0x0, 0x101, [{0x9, 0x4, 0x544}, {0x5, 0x5, 0xffff}, {0x9, 0x5, 0x62}, {0x1, 0x5, 0x6}, {0x5, 0x0, 0x7}]}]}, {0x0, [0x30, 0x61, 0x79, 0x36, 0x30]}}, &(0x7f0000000480)=""/4096, 0xaf, 0x1000, 0x1, 0x80000000}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x1b, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x0, 0x1, 0x3, 0x0, 0x2, 0x2, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x2, 0x5, 0x0, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000380)='GPL\x00', 0x1, 0x1e, &(0x7f0000001580)=""/30, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x2, 0x10, 0xfffffffb, 0xfbf9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001600)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x5}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5c}], &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0x0, 0xfffffffffffffffd, 0x40f00, 0x1, '\x00', r1, 0x19, r2, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xacff, r3, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r4, 0x24}, 0x14) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (rerun: 64) 1.584594234s ago: executing program 2 (id=4432): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500010700000000002f9078ac1e0001e0000001000086dd00f39078a102000034cb6dcdd2bc08508f3e2edd0d265b8bc0497d01ee697d19758303462c8c7aea2c"], 0x119) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r6, @ANYRESHEX=r5, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095", @ANYRESDEC=r2, @ANYRES8=r4, @ANYBLOB="04eb77ced26359b554739e8a317a91cf29c8001ca4ef3d473cb864380553c984341cd2e08cc14a364bfd4af85904622261ca5afadf49c915dd16268a5f312f93bb5bb8519b6170ce24e31ab42f026c3b5efe5128d941a5186f5ab2393b0cfe978ae38fac9a7b8314a8c36d52398a3295f4c26e6e16850d6a791248e0f231f19bc64203a1eaf942d67a82d6255844bd082d42672fa75c1fd531f88f52d8a7842eff7716f7978ed6e0366bd86c1b6cdffaab4f"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000080)={0x0, 0x62, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x4000001) r9 = socket(0x25, 0x8, 0x2) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0xbad13039, 0x8, 0x8000, 0x7f, 0x8, 0x80, 0xc92}, 0x1c) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x800) accept4$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c, 0x0) 1.41126203s ago: executing program 4 (id=4433): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) close(r1) 908.45246ms ago: executing program 5 (id=4434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "111a8b569cf7a1051b714f48ae772f93"}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="70df8564b0974cb9bfd1ffcb02f0c6ccd9e68c78e1f3cfe453"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1f52a7c10164cb63ff60470cf9aaa9d4"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 907.252528ms ago: executing program 4 (id=4435): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x10}}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) syz_emit_ethernet(0xec6, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0xeb8, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @echo={0x8, 0x0, 0x0, 0xd, 0x6d63, "fae6e45069177add1d2716d12735186cf372cbf515f574d4875f0166432ebb15ee217175acab5eccf26b1e28522d47d3256acee2aef5fbed1860f2ccb9044c04d6e1cef8c6abce6183bb658e1524e7edd89262f82df3e82e9daaa0eba033bcc84dcefd2c6119033ee00b062b66282707060c2fee2a2a980d05e0732c1320557f350dfc21476f79da9bc773af3153db9ae1f16bac98306bf8d9542bb6be872cd5923a31b5e79a7914ee2dc3e0e1aeab1ccbe885a19205758a066db8b2b2c98079b55a8e9bcd5f87dbacb548f8be54a9415815375cb8e61de036d51b77c997b7b9806fd88f7eab15286d9d850d1d234b661b03f1fadb324b08a50c9ba10786e3f78f32c8d125492f80e212cbf4d6e554f786a447be3fcecc9b1a69880e7eacfa4b737fe1fe34f92df52da033f24a8e09ff62c3a89668bc808131236b911f2b3d5eafe579f284dc1b56878d2e939c33a6c05e4828fa1c11d1da576d0cf5979d61ef29d45041500c179b5327418453594f3fbbef19413237c9d6820a559bcf3c795b28a1a614006c5295d04239a3ab617160856f086df4d7dbf30e0b69427a01cd5a83ee8cc605cd07d25dadd3427607e7676575ce5d640874868c2587e997ed8384f18a82c54229b763493d75113143953f1b583c96cf2922f66528f9e51e1b227f1ee993bfe5e551892fb8819e0ac1d7cf2e3af461114b788a028f47ab9922385574ef36b5ba76a40d7683020ba09c5f8bfaa022c96d7e9be5a1e0d4f39f9617806d04be72a6d1061917f79fea3ea76740e0dc58d176fa2cdfcac8af12fe479e9729b912e3cc4f6e2ecc98d63be79ee40f11fa55d118a1000d6051f05a8aaba0a0a64399921297eeef026e3f332aaf0a5462f5c96536c4e09efa558e85b30f6e3e612d64c5ed9004bc41a132a7c8160f9ec5f784540afc5a6bf6c30ff3a8f86547415467cf19c3385eaf749a7e6661eea6ede6e6b9b9edfba57dfd98747533cf343663a12f77674754919251ee12bef589902178acefdb36bc43bd6a883286c3ca4d177983064904bdbed8d72a38f9b603718a952bf050dd2add5a6e4026379769095fefdcfc8a6067b8c570295a453f043df991c8bb2f00ab7a2f36b4d5211514e5883bef28f45a479ae9d9924849d77096a5617658c4b13dee336f6982f660e7b0b96cd77c8c229a7c4fd6cd3549adb99b1bb3ed151757133b683adec2ca957342dacc7a1a4822e3202c46c73fdfa22744ee02d860df3309598a7cbddf25fa7dd443f3fe5f64b90e3f2e48d814bc0ed1010ac3cd826d1136dfac3252d20675bf833fe908312552e1f82457ac274fb9c48f6a4e84e1eb9e8fccbb6a311bc851187a3d2737c5d0894fccbf82ebcdc4738a234fa5d467403dc95ee62e212b8b191d2b37357919427107ff7d6115eaa3e6493956856d5ae13d13c8271b512b065439f2fd509bf9f7233bd8b19ce5470d9ffdded8bc53e57010ed8d3faf0717ddc9318fbfbfd4f272924ae8ef4167f86a60306d211f0b194aebbf6f93cff7ae6ac9f6592965475caa4de0f570d17a2b59c58f21a41b7d22f5162429c3fb70ef6e9f21a9d1d06e63b924ce973d73da7a21568f1464a439f9b52dc4c4f41fe55e575f102c0360a8a967f84b01f875bb644766db5a2d146af88c4383d6ef40461fb254388b13ed901cf09cdecfb6e81af1b71687bad91002aa3133b333e97fe157c8ef600728fc611bd0daa0fe0bef95e0251db30d43a35efba56f84a55b4436fb3c02d5b7881592646cfc7f6a918ef7383b29df14af8c3f7573ad67cb0f71090e50eb289da0269e319340ec8863a682b31aac421fd9b70989f59da139712511181642d561800733bb2cc5a280de2ec1c50c665a52076caeaf282fd607527873eebb34ae48e6a525541d08a99746be07f1646e3a81ef5555973ad52b3b64b0f8b2c2c3cfee10811708825dceea9aec55b52f72dc1b3a9a8b9d63649ffdcdf248fb90363b184f53cc2e54fcc7ad9d87672f35c7f5b68d79b96d5ba4e77e7162f7b1c52f1695c60591f61b26bfd3adbc7590cc6bef533f0102a87304d7460994aae5862b586186542a4acc1553df79b0bfc0faf0344e0a015d404fda342b7ac9cfbadba3f2f6004102c2b5b3aeb2ed3359f2090e04df7b55980076a2db2b9de461fdadfbad1efeb8bd65c855a68c22bc9859c7147b92eb24088acf220ca8f294c14a0433277f47107cd913446a60bb5df2d68ca1662506546f73f9f52489aeff594cdf299291888185f120302f5468686217d4046e05cd54ff079231d1d1b398ea0e469e6137d18b4f4dbb75adddd74af80651c0a2a7aa646688186fea0e99a104337e60029cda0e8cfe30ad4d8e3e34eab25cc0a35d375b6d1719136b5b7c9535d2f82c211f1bd5d664bb3b9a5750ec8d51765450bab04427870d405083ce1dace42fee15c024ad64bccd419b15bae30ecc3b163fbc05bf4de07890d947ff5f0e16200b1c37aeb2aac4389adb2ca0362d1621b7fd1f0b6a3a8e05388a9ef333520b46429918cd0c71899c55729214b7d6181335b5862f0162ef987b888f0b04146149271ca48f4d40d864702018978875e767b7406a22a60b224897e9c5a5f1582fd86159ee3a99b9db707860b617a5379576be3e411dc7f6f99f87fb3fc57276b202fda10e2b6c8592487eb93477354b05bb88bd3aeedb1544ea5cae1e02e9620f48262122aede1f924ebaefc93d5a66109ad9b2090889bdb52e07b4a007b122a6e70a0889025daf8a1fc2abb2198487994132ad1075706c1039e677ff07489e50144542613cc74caae4dc2bea7024d2db560c0a4f5ab04bc7216c3f690802df9e02762e8f10d2eda1dc403e77ce668f44dd16c1aab1681f05691f194c8f98e7f345374cc4249d6156b5c50c385a68c41f773696d819cfb4e48d749b7b26bf9c5c436c963cda5a4b2f04eb5a023fcac50e517d7526a5ec8d90b2989b9be26643518b59ae41ac2568c0d6f74ad7f8fee4623ddd40d443d399307e4ca4fe9b78a3e59023dd3cfadb2dbe4e45141efb5ecc3dc77d8f8d3333f655b55526acc9397f5038e208054a6bb5288854bc6a7bf5bfefb0ae4b28771e52198872439ec896a7453a2c6b3a8a8e7adde55d5b1d086ac8f7aa550fd6dd026542bbf0935e4b0393ce37a26a7e9cc4bd2885e7c34e49004eef10b6ededc6a2506419cfeac48b7457513c58a8e55de7af7c756efb7d9df3b53b5fa5d466ea7de907b5489bbb0d03398770fe36dc7f87ccda4103776a381ce95e4796f2fd084c246e970548da56074cf30e8cf6ba857d8b8226298a555f358bd77283289cfc283ac4c0dd3359614ee1e61a6db524d950b1c62b8ec53cd10f7d64098879baace7b46ef961953d0a4b092ba4d6f50ee1b45c3685f0deb8b57191b61a46aa0c3d5ccac639d7d420230fbf1565e3221fda740c5bc6d66dbe343e21e707794d2bab568efec07219625cd4249850099d86c131f9c291e9285b43002c1d04786e890281881a65e19d21907f1dcbf44c643b426395adc075250a9397094e56f5dd595ab109a7843406c637ac0f971632d99ccbe6359e1f0998271ff284f12bee62b16e1b9cdd832a0f032fc0999c46682fd6c39a0809c960fbb540949d7aba1e0fac4cec9806c1b8027fb2d76cfda48af82ec554f6094ac2f0b8fe28e3a3ff18db516bd045acef659293583ed48d4ea112386feaca1704ff5502c0f092befddb18678cf8551be644da54d4b903c39b564c9e570d3e6933059af0a6ce6b81613aae0edd9599eaab216c057752cdd422b1828467898cceb194d914ebe81e1192db09c70b6804bef361724f257890ac41b5bbf950141664f50a4912604136627591dee0595b61780e35e7c4d3e6e6bc41e1b568643040d65f7aff987f5dbde44984da976e38b94b02e721ee4413e741315ffb27c40fda91fc419e82bbf79bbf46625a50ba1dffbd1063a761bec638be1d9629ed40e9f9813bdf48186df8b844f2563e0dd929dcc3fa5dbf46b9d463d51d259dac710a141eed85074b7f01c77db49177bed115b910d935867c2c557a1ffca8fd39381a4cbb1beae330860e7a34332207fdb659f17f5fa0ba6205f97803bd33b897ef59d3971f5dae1371bd184b5a8d5355ea7c7cd56f7be0f0f7f3c2790d58f5348c6918bf133576cb3b032a40574b4e7eada14e4cace5ee3b62ccce387f48ffe217bd2f2f4cb99d445fa2dc9935bb6f67e1058210c68b48545e6a6cda386a9fbf95b691e768edee9d35659d0102ebeef2c52ef67aae339a22a83f7222c86ba3b40b7a937f2270a5562c65fbeebb7e8aa67d520d9a0416a4fb56e08febc9e3e91c82b3e090a639beeb62eae33c378b202c6fc8035f63d801d9978ac3ad91569181716ed69d391f6853dec223b9cafa7ef75e7ab29952f44b3ff88e99ddb08d2d43a406b3d81a715ca66eb147a50e5f5a6c54d5f8d0e52aee12f020abc09c63f9cb97be62bbe05a55fbf7a3743321cde00584875f955021dd61ebdebbbcd552bc18a9e186c6975f34de19db97c292e9aa6005d2160725a6c8cf0a0f9078e26a84bd6877b8524c01e7ae2cf58acb1497b08cdb6dd91574270e72fe626678ef8159c7741f6fb616607bee23c9ebce14e7797d552ea03c08d4f266ef0339c0b28570557c51fda80e8748850bc75005fdd233af1d103987e194c0cacebc113da47678dbbb94b702a54e28043c8c43047da8c34277e42beec68dfe92d148a7251eecf4845caf9e62d962708136556f0d316bed00ba2ab9d9845a0dac67c5045419c5224306380caedbf1760736934edf400bdee761a4c3c43cc2d31b6ca76f643c374d9a564d5633b02d435b0aa8659d17db70d2f474825d189fa10ecf5b789259be79510f99a54c1a576d5c63b25b6f4d4d118d2d62f15ffb1edb603493fa946a9022e37b528d32f208d64fdd8444c49be9673a175af618f20764eda8a4f848ffcc2f9fe5af04f873233b803016aec00542d64443f1f4de31f65073e2e542f9270a1c06e76deeb4727fa02d691a44910b01041df7ca9ea98dfdc3aa51daffcf4dfdb44a6d4c3f86417ed81f6dab5646f814dd5ae03da57d8eeea2876fa9677c6e1d6758f909cb94dbb42a33f76f49aa100ddfb9b352294d96738519c0a8773778d51ff97b4daadb492ab13a1162b4bfd3a36c9f9513d311c57feccde8c57f18c22927609b41346afefaad350650e4a6f05c64bc6259acb90bb107dae6ce56f6f4a85ce240ca12bb7d80f37fd1f215438cd7b5d7cbc232f841669765ebfc8f"}}}}}, 0x0) 906.347598ms ago: executing program 3 (id=4436): unshare(0x6020400) (async) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') (async) unshare(0x2020000) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) close(0x3) 905.583125ms ago: executing program 3 (id=4437): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf6d8839b3394a969, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1c250000dfffff030000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 892.79723ms ago: executing program 5 (id=4438): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xf7, 0x3, 0x3, 0xfe, 0xfffffffe}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x75}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 891.193275ms ago: executing program 4 (id=4439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000000c0)=0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010003", 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d10002"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) writev(r0, &(0x7f0000000180), 0x100000000000003c) 837.46184ms ago: executing program 2 (id=4440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0xa, 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8, 0x10, 0x7, 0x3, {{0x27, 0x4, 0x1, 0x7, 0x9c, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @local, {[@lsrr={0x83, 0x27, 0x7e, [@private=0xa010102, @loopback, @empty, @rand_addr=0x64010101, @broadcast, @local, @broadcast, @private=0xa010100, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0x2e, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @timestamp_addr={0x44, 0xc, 0x12, 0x1, 0x9, [{@private=0xa010102, 0x8}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x20, 0x0, 0x8, [0x2, 0x4, 0xc56b, 0x97, 0x1, 0xfff]}, @timestamp_prespec={0x44, 0x14, 0xc3, 0x3, 0x5, [{@empty, 0x2}, {@local}]}, @noop, @timestamp={0x44, 0xc, 0x2e, 0x0, 0x0, [0x9, 0x9]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x4, 0xd) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r7, @ANYRES32=r6], 0x44}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf250b0000000800030001000000140001800500020052000000080006ed", @ANYRES32=r5, @ANYBLOB="0800030006000000080002000200000008000300060000000800020007000000"], 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x48001) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001808dd403d92fdf1b7c06b6060065580000100402800c0009ce04eac1deaeda2c68cdaa54719b6aa44d50768034d36d232622110d8ea455219d5f40d6642864b146d917c2df908c3674da5276ea0841321aa04474b2ea03068f69afbfe8a240b33045feab6c03ac773ff6b5891fcd88b5fecc6b17608a7a920ef434d67173adf035fd85227879c4f2c62c3ded54b1"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 710.663181ms ago: executing program 4 (id=4441): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000380)=0xf, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 596.608023ms ago: executing program 3 (id=4442): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="1036c4d97b137ef776fb2bb2deaae73db1c7883a654ecbdc4b32b256aaeeb78c5c2fcf4370aa13799922ce1d4133bca17656546e0c573ddf3bfeea068a82d1442c24269d7405b046b8850a686d830177e191939f8a489168b8e8c8e6c74e95c5abe950223d3a8781bcc3ef9679693b753774ecf43a84323652daa48126b4749836daa95e23cfb2cb29266152562a8c3899f7157500d7ad64f8d1963b1805b28a", 0xa0}, {&(0x7f0000000140)="5bd024d6ae907dad0c593143dc785327db8a6546b1aad997bdc35ffd57b2079c3fe80407c7bc8df87a685b5ba97cb3caeaf8c6140f378c6ea242f3f4178fa58e6dd97478bca7ae4636656135f71618e5163785d314449734aaba68e051dea964719a5933b1ed73e649d23563e02d6ff752894997b0", 0x75}, {&(0x7f0000000300)="9db80caf14a6864860c7c5f23e1335e100d115a70532fc51e6aa2a596f77214b8f903bc35049b61b98c09504d80be6b76956e024874cb7cc17d9d8a0b3298e5d92275ad4b88e186fbe877082e82fdc049f2fa06a4cbc65484eed2c0dd784c902f1a0af306c5190a60e8bc620226c01af062466cd", 0x74}, {&(0x7f00000000c0)="cf21868573683e6fc2b1ed630f5757f4fb4e", 0x12}, {&(0x7f0000000380)="4a1d1a1e2698f2cdfa726196be723b36305132562128ebb31bbacc779f43fa5b1deaa6592893aa5dec02ffa02c892ebfc55fb9b50aa57fc7ed468f10185e2392e96356fa231a79b6c6ef2bd42dbaaa05e11d8d981dd528a362492895534c2e493f5aa07dc00e707c7303e4cb37989bd319a8b42611b8735bf6e7e6fb45ce1b7346a8880a5e9482493726facd449bc978f70c86efe9070fbad719644d47ae359fc710091618fa2621", 0xa8}], 0x5, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0xffbffe00}}, @rthdr={{0xa8, 0x29, 0x39, {0x2f, 0x12, 0x2, 0x6, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @mcast2]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x2e, 0x18, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x800}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xbe}, @generic={0x5, 0x5b, "0411ef0c888abbf9921228cc04ba306586a4529159965fca99f14e18041cb571031fb893e0f418f25e40200bc82f7aa023b43b9f628fa6a12e8e6c131dd8a9b2d1f30be22babd3162a4c518899d9ddb468a7b813861fa653bc544a"}, @calipso={0x7, 0x58, {0x2, 0x14, 0xf, 0x5, [0x3, 0x10000, 0x8, 0xfff, 0x4, 0xbd, 0x0, 0x6804c6e1, 0x401, 0x5]}}]}}}], 0x1a0}}], 0x1, 0x4004) ioctl$FIOCLEX(r0, 0x5451) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x20) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x500, 0x4) 460.68205ms ago: executing program 2 (id=4443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) setsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f00000001c0)="520222171935f335f1e859e48843f49ecfabe6b7aa722b66173da5cfcfd393c7d2070bbb91ab1ffa5da786cc4db054006fd676484e513462d69932ded722da3375df83a1748971fa20cecfc3ab09095aad8df77320aa60a2395a9b1c2ef04ac3a39350293363d331ab4061e904586bc47e737a30bc4eb214f6d15c3ebdf02fe04e78c21c2c3a0352e3c22402e8ecce7ff6", 0x91) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002380)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', r6, 0x7, 0x40, 0x476b, 0x3, {{0x9, 0x4, 0x2, 0x20, 0x24, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast2, @remote, {[@generic={0x83, 0xe, "f7fe0078b0d415b02421adb6"}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000001200000429bd7000fcdbdf2507000000", @ANYRES32=r7, @ANYBLOB="024004000000000008002800f8610007080020000500000008001a8008000f00000000000000000000000030", @ANYRES32, @ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x4005}, 0x48800) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={0x0, "7696d7014319da64616a5f5683a93764"}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0x0, 0x0, 0xcb, 0x0, &(0x7f0000000a80)=""/203, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2, 0x0, 0x4}, 0x50) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) connect(r1, &(0x7f0000002300)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001300)={r8, "9ed84af4bba8e7bcbf0125bbb2489692"}) 453.728908ms ago: executing program 4 (id=4444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1e, 0x8}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={0x1, @null, @rose={'rose', 0x0}, 0xd, 'syz1\x00', @bcast, 0x3, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r8, 0x25, 0x4, @void}, 0x10) write$tun(r4, &(0x7f0000000300)={@void, @val={0x3, 0x5, 0x4, 0x7ff, 0x9d}, @ipv4=@tipc={{0x5, 0x4, 0x3, 0x3, 0x40, 0x68, 0x0, 0x1, 0x6, 0x0, @local, @rand_addr=0x64010102}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x1, 0x2, 0x7, 0x0, 0x3, 0x4, 0x2, 0x1, 0x40, 0x4, 0x4, 0x4e20, 0x4e23}, 0x0, 0x3}, 0x3, 0x3}, 0x1}}}}}, 0x4a) r9 = socket(0x10, 0x803, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x109, 0x0, 0x0, {}, [{0x8}, {0x4}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}}, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000001c0)=0x54) 440.132484ms ago: executing program 3 (id=4445): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) connect$ax25(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}], 0x2}}], 0x2, 0x10, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 144.997325ms ago: executing program 2 (id=4446): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x122, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@mpls_mc={0x8848, {[{0x1000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xffff3}, {0x100}, {0x4, 0x0, 0x1}, {0xdd82}], @ipv4=@tipc={{0x20, 0x4, 0x3, 0x4, 0xfc, 0x68, 0x0, 0x7, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x1, [{@loopback, 0xbc}]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0x5, "1687ff"}, {0x2, 0x12, "c212f70572077bfb5968bcc2676aa016"}, {0x5, 0x2}]}, @timestamp={0x44, 0x10, 0x11, 0x0, 0x0, [0x6, 0x1ff, 0xd3]}, @ssrr={0x89, 0xf, 0x1b, [@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x86, 0x5, "c36a72"}, @timestamp_addr={0x44, 0x1c, 0x9c, 0x1, 0x0, [{@remote, 0xfef}, {@rand_addr=0x64010102, 0xabd}, {@dev={0xac, 0x14, 0x14, 0x6}, 0x4}]}]}}, @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x1, 0x0, 0x1, 0x6, 0xff4d, 0x1, 0x4e24, 0x4e23, 0x2, 0x4, 0x0, 0x0, 0x1}, [{0x4, 0x0, 0x6, 0x1, 0x80, 0x10000, 0x2, 0x1}, {0x3, 0x7, 0x1000, 0x49c, 0x7, 0x70f, 0x6, 0xd}, {0x7, 0x6, 0x8, 0x1ff, 0x8001, 0x101, 0x2, 0xffffff9}]}}}}}}, 0x0) 144.245522ms ago: executing program 3 (id=4447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xfffffffffffffcca, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 114.659637ms ago: executing program 2 (id=4448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0xc6f}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x610000000}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 61.760013ms ago: executing program 3 (id=4449): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', r1, 0x7, 0x10, 0x5, 0x1, {{0xf, 0x4, 0x1, 0x7, 0x3c, 0x67, 0x0, 0x15, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@generic={0x86, 0xd, "407c704981f2c7b0877a05"}, @generic={0x88, 0xa, "07c998882f14ab93"}, @ssrr={0x89, 0xf, 0x56, [@empty, @multicast1, @local]}]}}}}}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x6, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x404c8d5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.519126ms ago: executing program 4 (id=4450): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000240)=0x357, 0x4) listen(r0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000004000070127bd7000fedbdf25037c00000400c280100001800b0008000000000000008b0004000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) r3 = socket$packet(0x11, 0x2, 0x300) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000011c0), &(0x7f0000001200)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000001180)={0x28, r7, 0x10, 0x70bd22, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x28}}, 0x0) sendto$packet(r3, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}]}, 0x3c}}, 0x40004) 0s ago: executing program 2 (id=4451): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x4, &(0x7f0000000040)) r2 = socket(0x26, 0x1, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300000400000000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00000000000014001a81100005800c0008800800fe00f8ff00000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r6, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x420}, 0x420}}, 0x40000) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r9, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x40010000) sendto$l2tp6(r2, &(0x7f00000001c0)="9c6cc4d4edaf5d43ee35f47f18ad250f52fae900ba739b97bf911cb333102dce", 0x20, 0x1, &(0x7f0000000200)={0xa, 0x0, 0x1bc2, @empty, 0xd9, 0x4}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) kernel console output (not intermixed with test programs): onger supported [ 376.149502][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.640525][T15654] bond4: (slave lo): Releasing backup interface [ 376.659492][T15654] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 376.676275][T15654] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 376.792409][T15662] netlink: 'syz.1.2752': attribute type 11 has an invalid length. [ 376.909377][T15672] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2752'. [ 377.215338][T15687] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2761'. [ 377.251659][T15689] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2759'. [ 377.401375][T15693] SET target dimension over the limit! [ 377.645791][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 377.760606][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 377.810640][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2770'. [ 377.867376][T15711] netlink: 'syz.2.2770': attribute type 12 has an invalid length. [ 377.895051][T15711] netlink: 'syz.2.2770': attribute type 11 has an invalid length. [ 378.445754][T15754] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2780'. [ 378.457480][T15752] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2780'. [ 378.639528][T15766] netlink: 'syz.5.2784': attribute type 1 has an invalid length. [ 378.726817][T15773] IPVS: Unknown mcast interface: pimreg1 [ 379.573754][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 379.704726][T15832] vxcan1 speed is unknown, defaulting to 1000 [ 380.022936][T15854] netlink: 'syz.5.2813': attribute type 1 has an invalid length. [ 380.194688][T15858] ip6gre1: entered promiscuous mode [ 380.200663][T15858] ip6gre1: entered allmulticast mode [ 380.206307][T15858] team0: Device ip6gre1 is of different type [ 380.468373][T15861] tunl0: entered promiscuous mode [ 380.480558][T15861] netlink: 'syz.4.2816': attribute type 3 has an invalid length. [ 380.792746][T15879] block nbd0: not configured, cannot reconfigure [ 381.405880][T15902] ipt_rpfilter: unknown options [ 381.589944][T15917] __nla_validate_parse: 8 callbacks suppressed [ 381.589968][T15917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2833'. [ 381.941079][T15931] tipc: Enabling of bearer rejected, failed to enable media [ 382.209468][T15943] sctp: [Deprecated]: syz.1.2838 (pid 15943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.209468][T15943] Use struct sctp_sack_info instead [ 382.337025][T15951] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2840'. [ 382.572165][T15959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2843'. [ 382.826067][T15975] bond_slave_1: entered promiscuous mode [ 382.956719][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2852'. [ 383.127835][T15996] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 383.192182][T16003] netlink: 'syz.5.2858': attribute type 10 has an invalid length. [ 383.224372][T16003] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 383.252138][T16003] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 383.336741][T16014] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 383.346218][T16014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.486221][T16023] vlan0: entered promiscuous mode [ 383.499576][T16023] vlan0: entered allmulticast mode [ 383.515606][T16023] veth0_vlan: entered allmulticast mode [ 383.588314][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2866'. [ 383.603203][T16028] netlink: 'syz.4.2868': attribute type 10 has an invalid length. [ 383.674307][T16026] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.691739][T16026] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 383.742309][T16030] pim6reg1: entered promiscuous mode [ 383.753666][T16030] pim6reg1: entered allmulticast mode [ 383.762465][T16030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2869'. [ 383.788257][T16026] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.807818][T16026] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 383.921628][T16026] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.939713][T16026] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.051921][T16026] bond0: (slave netdevsim0): Releasing backup interface [ 384.062199][T16026] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 384.074018][T16026] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.084850][T16026] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 384.091259][T16044] openvswitch: netlink: Missing key (keys=40, expected=80) [ 384.217346][T16048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2876'. [ 384.240720][ T6082] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.250706][ T6082] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 384.301838][ T6082] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.328038][ T6082] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 384.438527][ T6082] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.467489][ T6082] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 384.504906][ T6488] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.520220][ T6488] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 384.597452][T16063] netlink: 'syz.1.2878': attribute type 21 has an invalid length. [ 384.674014][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2878'. [ 385.068361][T16099] netlink: 'syz.4.2889': attribute type 12 has an invalid length. [ 385.124236][T16099] bond0: option primary_reselect: invalid value (255) [ 385.133953][T16099] bond0 (unregistering): Released all slaves [ 385.219739][T16105] netlink: 'syz.4.2889': attribute type 64 has an invalid length. [ 385.237359][T16105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2889'. [ 385.283103][T16112] : renamed from team_slave_1 [ 385.510759][T16120] smc: net device gre0 applied user defined pnetid SYZ1 [ 385.536918][T16120] smc: net device gre0 erased user defined pnetid SYZ1 [ 385.664935][T16127] netlink: 'syz.2.2899': attribute type 1 has an invalid length. [ 385.780846][T16134] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2904'. [ 385.926561][T16142] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 386.759502][T16191] netlink: 'syz.2.2920': attribute type 29 has an invalid length. [ 386.815392][T16194] netlink: 'syz.2.2920': attribute type 29 has an invalid length. [ 386.834955][T16191] __nla_validate_parse: 7 callbacks suppressed [ 386.834972][T16191] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2920'. [ 386.876939][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 386.991172][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2922'. [ 387.029639][T16160] lec:lec_atm_close: lec0: Shut down! [ 387.224906][ T13] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.238088][ T13] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 387.246605][ T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.268834][ T13] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 387.290471][ T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.309131][ T13] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 387.380391][T16222] dvmrp1: entered allmulticast mode [ 387.408997][ T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.417812][ T13] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 387.692264][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2931'. [ 387.786432][T16240] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2931'. [ 387.809780][T16247] netlink: 'syz.3.2933': attribute type 10 has an invalid length. [ 387.824187][T16247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.843705][T16247] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 387.889594][T16250] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2934'. [ 387.929811][T16250] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2934'. [ 387.953852][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2934'. [ 388.194788][T16267] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2939'. [ 388.348772][T16272] ip_vti0: entered promiscuous mode [ 388.354288][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2942'. [ 388.658926][T16298] netlink: 'syz.1.2949': attribute type 1 has an invalid length. [ 388.719038][T16303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.735285][T16304] bond11: (slave xfrm1): The slave device specified does not support setting the MAC address [ 388.816011][T16304] bond11: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 388.848117][T16304] bond11: (slave xfrm1): making interface the new active one [ 388.864701][T16304] bond11: (slave xfrm1): Enslaving as an active interface with an up link [ 388.884014][T16298] bond11 (unregistering): (slave xfrm1): Releasing backup interface [ 388.912456][T16298] bond11 (unregistering): Released all slaves [ 388.991018][T16314] openvswitch: netlink: Flow actions attr not present in new flow. [ 389.450887][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.470483][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.479348][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.518843][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.528823][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.732879][T16339] netlink: 'syz.2.2964': attribute type 4 has an invalid length. [ 389.745468][T16329] vxcan1 speed is unknown, defaulting to 1000 [ 389.759250][T16339] netlink: 'syz.2.2964': attribute type 4 has an invalid length. [ 390.446855][T16365] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 390.639809][T16372] netem: incorrect gi model size [ 390.645272][T16372] netem: change failed [ 390.803362][T16377] netlink: 'syz.2.2974': attribute type 32 has an invalid length. [ 390.868925][T16376] team0: Device gtp0 is up. Set it down before adding it as a team port [ 391.141771][T16391] netlink: 'syz.3.2979': attribute type 64 has an invalid length. [ 391.465679][T16407] pim6reg1: entered promiscuous mode [ 391.479497][T16407] pim6reg1: entered allmulticast mode [ 391.509561][T16329] chnl_net:caif_netlink_parms(): no params data found [ 391.588449][ T5841] Bluetooth: hci5: command tx timeout [ 391.813573][ T6110] IPVS: starting estimator thread 0... [ 391.835540][T16329] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.843107][T16329] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.855859][T16329] bridge_slave_0: entered allmulticast mode [ 391.872146][T16329] bridge_slave_0: entered promiscuous mode [ 391.884927][T16329] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.892721][T16329] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.900991][T16329] bridge_slave_1: entered allmulticast mode [ 391.910305][T16329] bridge_slave_1: entered promiscuous mode [ 391.918021][T16427] IPVS: using max 24 ests per chain, 57600 per kthread [ 392.005096][T16329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.020166][T16329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.103162][T16329] team0: Port device team_slave_0 added [ 392.113138][T16329] team0: Port device team_slave_1 added [ 392.194947][T16439] __nla_validate_parse: 5 callbacks suppressed [ 392.194965][T16439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2990'. [ 392.225501][T16329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.238393][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.287632][T16329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.325928][T16329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.333723][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.360218][T16329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.424129][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 392.487646][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2994'. [ 392.513934][T16329] hsr_slave_0: entered promiscuous mode [ 392.520722][T16329] hsr_slave_1: entered promiscuous mode [ 392.527078][T16329] debugfs: 'hsr0' already exists in 'hsr' [ 392.533488][T16329] Cannot create hsr debugfs directory [ 392.830557][T16468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2995'. [ 392.891417][T16468] bridge_slave_0 (unregistering): left allmulticast mode [ 392.899246][T16468] bridge_slave_0 (unregistering): left promiscuous mode [ 392.906408][T16468] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.018118][T16329] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.040876][T16329] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.154177][T16329] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.172216][T16329] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.188676][T16486] netlink: 'syz.2.3003': attribute type 83 has an invalid length. [ 393.282903][T16329] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.307784][T16329] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.333186][T16493] netlink: 'syz.2.3005': attribute type 11 has an invalid length. [ 393.342828][T16493] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.3005'. [ 393.372246][T16329] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.387816][T16329] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.568978][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3007'. [ 393.610616][T16329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.623089][T16329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.636137][T16329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.649759][T16329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.677630][ T5841] Bluetooth: hci5: command tx timeout [ 393.746414][T16329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.771776][T16329] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.784786][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.792190][ T6488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.812582][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.819882][ T6487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.044840][T16329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.292285][T16329] veth0_vlan: entered promiscuous mode [ 394.309636][T16329] veth1_vlan: entered promiscuous mode [ 394.342295][T16329] veth0_macvtap: entered promiscuous mode [ 394.352728][T16329] veth1_macvtap: entered promiscuous mode [ 394.373427][T16329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.391865][T16329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.407054][ T7747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.416878][ T7747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.430366][ T7747] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.439737][ T7747] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.517777][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.525674][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.572548][ T4572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.581974][ T4572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.747709][ T5841] Bluetooth: hci5: command tx timeout [ 397.827600][ T5841] Bluetooth: hci5: command tx timeout [ 408.317358][ T4572] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.227713][ T6271] IPVS: ip_vs_send_async error -101 [ 435.245001][ T1114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.257653][ T1114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 435.267953][ T1114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.279270][ T1114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 435.352748][ T1114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.363437][ T1114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 435.373792][ T1114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.384469][ T1114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 435.463456][ T1114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.474036][ T1114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 435.484442][ T1114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.495125][ T1114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 435.568938][ T1114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.580590][ T1114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 435.591431][ T1114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.601913][ T1114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 435.737897][ T1114] bridge_slave_1: left allmulticast mode [ 435.744081][ T1114] bridge_slave_1: left promiscuous mode [ 435.755474][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.769548][ T1114] bridge_slave_0: left allmulticast mode [ 435.775283][ T1114] bridge_slave_0: left promiscuous mode [ 435.783302][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.823940][ T1114] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 437.003500][ T1114] dvmrp4 (unregistering): left allmulticast mode [ 437.043025][ T1114] bond6 (unregistering): (slave geneve2): Releasing active interface [ 437.324045][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.336141][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.348228][ T1114] bond0 (unregistering): Released all slaves [ 437.364524][ T1114] bond1 (unregistering): Released all slaves [ 437.382112][ T1114] bond2 (unregistering): (slave bond3): Releasing backup interface [ 437.392182][ T1114] bond2 (unregistering): Released all slaves [ 437.523002][ T1114] bond3 (unregistering): Released all slaves [ 437.537774][ T1114] bond4 (unregistering): Released all slaves [ 437.653858][ T1114] bond5 (unregistering): Released all slaves [ 437.763604][ T1114] bond6 (unregistering): Released all slaves [ 437.871692][ T1114] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 437.882563][ T1114] bond7 (unregistering): Released all slaves [ 437.993950][ T1114] 9: left promiscuous mode [ 438.090099][ T1114] tipc: Left network mode [ 438.495545][ T1114] hsr_slave_0: left promiscuous mode [ 438.512635][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.520445][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.528844][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.536274][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.566622][ T1114] veth1_macvtap: left promiscuous mode [ 438.572850][ T1114] veth0_macvtap: left promiscuous mode [ 438.579351][ T1114] veth1_vlan: left promiscuous mode [ 438.808867][ T1114] vlan1 (unregistering): left allmulticast mode [ 439.667528][ T7747] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.692539][ T1114] IPVS: stop unused estimator thread 0... [ 471.667679][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 473.241649][T16525] openvswitch: netlink: IP tunnel dst address not specified [ 473.366267][T16530] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3011'. [ 473.535841][T16531] syzkaller0: entered promiscuous mode [ 473.574230][T16531] syzkaller0: entered allmulticast mode [ 473.597339][ T6271] IPVS: ip_vs_send_async error -101 [ 473.738684][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.754521][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.777708][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.788373][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.796323][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.828737][ T5841] Bluetooth: hci1: command tx timeout [ 476.531192][T16551] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3014'. [ 477.604883][T16542] vxcan1 speed is unknown, defaulting to 1000 [ 477.703561][ T7747] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 477.766580][T16566] tipc: Enabling of bearer rejected, failed to enable media [ 477.788334][T16568] mac80211_hwsim hwsim23 : renamed from wlan1 [ 477.846014][ T7747] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 477.885410][T16565] syzkaller1: entered promiscuous mode [ 477.891787][T16565] syzkaller1: entered allmulticast mode [ 477.911260][ T5841] Bluetooth: hci1: command tx timeout [ 477.939442][T16571] bridge5: entered promiscuous mode [ 477.947486][T16571] bridge5: entered allmulticast mode [ 477.965478][T16568] bridge6: entered promiscuous mode [ 477.971171][T16568] bridge6: entered allmulticast mode [ 478.106540][ T7747] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 478.215788][ T7747] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 478.807643][ T7747] bridge_slave_1: left allmulticast mode [ 478.813393][ T7747] bridge_slave_1: left promiscuous mode [ 478.848227][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.949295][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3035'. [ 479.025815][T16625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3036'. [ 479.150849][T16633] netlink: 'syz.5.3035': attribute type 3 has an invalid length. [ 479.258033][ T7747] bond10 (unregistering): (slave gretap2): Releasing active interface [ 479.338146][ T7747] dvmrp1 (unregistering): left allmulticast mode [ 479.708464][ T7747] bond0 (unregistering): (slave 32): Releasing backup interface [ 479.718920][ T7747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.731336][ T7747] bond0 (unregistering): Released all slaves [ 479.748934][ T7747] bond1 (unregistering): Released all slaves [ 479.871772][ T7747] bond2 (unregistering): Released all slaves [ 479.987383][ T5841] Bluetooth: hci1: command tx timeout [ 479.996668][ T7747] bond3 (unregistering): Released all slaves [ 480.011707][ T7747] bond4 (unregistering): Released all slaves [ 480.123618][ T7747] bond5 (unregistering): Released all slaves [ 480.229116][ T7747] bond6 (unregistering): Released all slaves [ 480.334493][ T7747] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 480.345222][ T7747] bond7 (unregistering): (slave bond8): Releasing active interface [ 480.355305][ T7747] bond7 (unregistering): (slave bond9): Releasing active interface [ 480.364748][ T7747] bond7 (unregistering): Released all slaves [ 480.478040][ T7747] bond8 (unregistering): Released all slaves [ 480.591333][ T7747] bond9 (unregistering): Released all slaves [ 480.697909][ T7747] bond10 (unregistering): Released all slaves [ 480.768130][T16629] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3036'. [ 480.950300][ T7747] 9: left promiscuous mode [ 481.099001][ T7747] tipc: Disabling bearer [ 481.140482][ T7747] tipc: Left network mode [ 481.225779][ T7747] IPVS: stopping master sync thread 6271 ... [ 481.277085][ T7747] IPVS: stopping backup sync thread 6301 ... [ 481.287425][T16656] FAULT_INJECTION: forcing a failure. [ 481.287425][T16656] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 481.348611][T16656] CPU: 0 UID: 0 PID: 16656 Comm: syz.4.3042 Not tainted syzkaller #0 PREEMPT(full) [ 481.348647][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.348669][T16656] Call Trace: [ 481.348680][T16656] [ 481.348691][T16656] dump_stack_lvl+0xe8/0x150 [ 481.348731][T16656] should_fail_ex+0x414/0x560 [ 481.348779][T16656] _copy_to_user+0x31/0xb0 [ 481.348813][T16656] simple_read_from_buffer+0xe1/0x170 [ 481.348851][T16656] proc_fail_nth_read+0x1b3/0x220 [ 481.348882][T16656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.348914][T16656] ? rw_verify_area+0x2a6/0x4d0 [ 481.348936][T16656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.348966][T16656] vfs_read+0x200/0xa30 [ 481.348989][T16656] ? fdget_pos+0x247/0x320 [ 481.349026][T16656] ? __pfx___mutex_lock+0x10/0x10 [ 481.349055][T16656] ? __pfx_vfs_read+0x10/0x10 [ 481.349080][T16656] ? __fget_files+0x2a/0x420 [ 481.349118][T16656] ? __fget_files+0x3a0/0x420 [ 481.349147][T16656] ? __fget_files+0x2a/0x420 [ 481.349199][T16656] ksys_read+0x145/0x250 [ 481.349226][T16656] ? __pfx_ksys_read+0x10/0x10 [ 481.349265][T16656] do_syscall_64+0xec/0xf80 [ 481.349291][T16656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.349314][T16656] ? trace_irq_disable+0x37/0x100 [ 481.349348][T16656] ? clear_bhb_loop+0x60/0xb0 [ 481.349379][T16656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.349410][T16656] RIP: 0033:0x7f772a58e15c [ 481.349433][T16656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 481.349455][T16656] RSP: 002b:00007f772b456030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.349482][T16656] RAX: ffffffffffffffda RBX: 00007f772a7e6090 RCX: 00007f772a58e15c [ 481.349501][T16656] RDX: 000000000000000f RSI: 00007f772b4560a0 RDI: 0000000000000008 [ 481.349517][T16656] RBP: 00007f772b456090 R08: 0000000000000000 R09: 0000000000000000 [ 481.349533][T16656] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 481.349550][T16656] R13: 00007f772a7e6128 R14: 00007f772a7e6090 R15: 00007fff29f359e8 [ 481.349591][T16656] [ 481.626337][T16667] x_tables: duplicate underflow at hook 2 [ 481.713328][T16542] chnl_net:caif_netlink_parms(): no params data found [ 481.797758][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 481.836019][T16677] ip6gre1: entered promiscuous mode [ 481.841163][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 481.845421][T16677] ip6gre1: entered allmulticast mode [ 481.855969][T16677] team0: Device ip6gre1 is of different type [ 482.068548][ T5841] Bluetooth: hci1: command tx timeout [ 482.152294][T16696] netlink: 'syz.5.3054': attribute type 11 has an invalid length. [ 482.168524][T16696] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3054'. [ 482.426069][T16542] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.440869][T16542] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.463369][T16542] bridge_slave_0: entered allmulticast mode [ 482.484005][T16542] bridge_slave_0: entered promiscuous mode [ 482.641834][T16542] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.679857][T16542] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.708021][T16542] bridge_slave_1: entered allmulticast mode [ 482.716256][T16542] bridge_slave_1: entered promiscuous mode [ 482.972731][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3065'. [ 483.041847][T16740] netlink: 'syz.3.3065': attribute type 10 has an invalid length. [ 483.196879][T16732] bond1: option all_slaves_active: invalid value (222) [ 483.210139][T16732] bond1 (unregistering): Released all slaves [ 483.294391][T16745] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3066'. [ 483.332341][T16736] vlan4: entered allmulticast mode [ 483.353791][T16736] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 483.386513][T16740] bridge_slave_1: left allmulticast mode [ 483.394886][T16740] bridge_slave_1: left promiscuous mode [ 483.401101][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.448127][T16740] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 483.481864][T16542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.524245][T16542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.699194][T16542] team0: Port device team_slave_0 added [ 483.721016][T16542] team0: Port device team_slave_1 added [ 483.847657][ T7747] hsr_slave_0: left promiscuous mode [ 483.853974][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.888346][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.198283][T16782] ip6t_REJECT: ECHOREPLY is not supported [ 484.206452][T16782] netlink: 'syz.5.3077': attribute type 1 has an invalid length. [ 484.523385][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 484.589462][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 484.845156][T16788] netlink: 'syz.2.3078': attribute type 21 has an invalid length. [ 484.933832][ T7747] team0 (unregistering): Port device dummy0 removed [ 485.104992][T16782] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 485.179743][T16788] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3078'. [ 485.196507][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 485.208640][T16542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.218294][T16542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.245229][T16542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.260613][T16542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.269277][T16542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.296619][T16542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.425120][T16792] bond0: (slave bond_slave_1): Releasing backup interface [ 485.763666][T16542] hsr_slave_0: entered promiscuous mode [ 485.788940][T16542] hsr_slave_1: entered promiscuous mode [ 485.871990][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 486.016131][ T7747] IPVS: stop unused estimator thread 0... [ 486.033368][T16824] syzkaller1: entered promiscuous mode [ 486.039992][T16824] syzkaller1: entered allmulticast mode [ 486.185390][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3092'. [ 486.319250][T16844] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3093'. [ 486.359301][T16844] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3093'. [ 486.401888][T16849] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 486.405907][T16844] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 486.569683][T16847] can: request_module (can-proto-0) failed. [ 486.577466][T16859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3094'. [ 486.619430][T16859] can: request_module (can-proto-0) failed. [ 486.781142][T16870] ip6t_srh: unknown srh invflags 4000 [ 486.804374][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3102'. [ 486.941842][T16879] netlink: 'syz.3.3103': attribute type 10 has an invalid length. [ 486.950320][T16879] veth0_macvtap: left promiscuous mode [ 486.957060][T16879] team0: Device veth0_macvtap failed to register rx_handler [ 487.259426][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 487.277721][T16897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3107'. [ 487.292333][T16542] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 487.330484][T16542] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 487.363818][T16542] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 487.416271][T16542] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 487.577450][T16905] tipc: Enabling of bearer rejected, failed to enable media [ 487.782487][T16542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.851527][T16542] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.895489][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.902785][ T6488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.946624][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.953984][ T7747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.081505][T16936] netlink: 'syz.4.3117': attribute type 10 has an invalid length. [ 488.116546][T16936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.162073][T16936] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 488.927806][T16542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.052223][T16542] veth0_vlan: entered promiscuous mode [ 489.076700][T16542] veth1_vlan: entered promiscuous mode [ 489.142271][T16542] veth0_macvtap: entered promiscuous mode [ 489.178516][T16542] veth1_macvtap: entered promiscuous mode [ 489.215243][T16542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.250667][T16542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.276356][ T6082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.304039][ T6082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.326390][ T6082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.338165][ T6082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.449265][ T4572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.467398][ T4572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.567865][ T6093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.576132][ T6093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.065481][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.080580][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 490.091319][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 490.091531][T17029] netlink: 'syz.5.3146': attribute type 10 has an invalid length. [ 490.110574][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 490.118695][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 490.174664][T17027] vxcan1 speed is unknown, defaulting to 1000 [ 490.398251][T17041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.461431][T17036] bridge0: port 3(batadv1) entered blocking state [ 490.469001][T17036] bridge0: port 3(batadv1) entered disabled state [ 490.482779][T17036] batadv1: entered allmulticast mode [ 490.516415][T17036] batadv1: entered promiscuous mode [ 490.814441][T17056] sctp: [Deprecated]: syz.3.3155 (pid 17056) Use of int in max_burst socket option deprecated. [ 490.814441][T17056] Use struct sctp_assoc_value instead [ 490.958359][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 490.967831][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 491.096188][T17076] netlink: 'syz.5.3159': attribute type 10 has an invalid length. [ 491.207356][T17080] __nla_validate_parse: 8 callbacks suppressed [ 491.207376][T17080] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3160'. [ 491.257660][T17083] netlink: 'syz.1.3161': attribute type 15 has an invalid length. [ 491.432441][T17093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3163'. [ 491.536986][T17096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3163'. [ 491.600933][T17100] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3165'. [ 491.604852][ T6093] bridge_slave_1: left allmulticast mode [ 491.618098][ T6093] bridge_slave_1: left promiscuous mode [ 491.624101][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.653664][T17101] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3165'. [ 491.677064][ T6093] bridge_slave_0: left promiscuous mode [ 491.696447][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.909192][T17110] x_tables: duplicate entry at hook 3 [ 492.072632][ T6093] tipc: Disabling bearer [ 492.103468][ T6093] bond2 (unregistering): (slave gretap2): Releasing active interface [ 492.154404][ T5841] Bluetooth: hci2: command tx timeout [ 492.176926][ T6093] bond1 (unregistering): (slave geneve2): Releasing active interface [ 492.785344][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.796924][ T6093] bond_slave_0: left promiscuous mode [ 492.805980][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.815433][ T6093] bond_slave_1: left promiscuous mode [ 492.823182][ T6093] bond0 (unregistering): Released all slaves [ 492.944905][ T6093] bond1 (unregistering): Released all slaves [ 492.960057][ T6093] bond2 (unregistering): Released all slaves [ 492.974714][ T6093] bond3 (unregistering): Released all slaves [ 492.995872][ T6093] bond4 (unregistering): Released all slaves [ 493.111215][ T6093] bond5 (unregistering): (slave veth3): Releasing active interface [ 493.122595][ T6093] bond5 (unregistering): Released all slaves [ 493.241751][ T6093] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 493.252433][ T6093] bond6 (unregistering): (slave bond7): Releasing active interface [ 493.261955][ T6093] bond6 (unregistering): (slave bond8): Releasing active interface [ 493.272280][ T6093] bond6 (unregistering): Released all slaves [ 493.383357][ T6093] bond7 (unregistering): Released all slaves [ 493.495027][ T6093] bond8 (unregistering): Released all slaves [ 493.619752][ T6093] bond9 (unregistering): Released all slaves [ 493.729189][ T6093] bond10 (unregistering): Released all slaves [ 493.743736][ T6093] bond11 (unregistering): Released all slaves [ 493.861385][ T6093] bond12 (unregistering): (slave bond13): Releasing backup interface [ 493.869716][ T6093] bond13 (unregistering): left promiscuous mode [ 493.876923][ T6093] bond12 (unregistering): Released all slaves [ 493.985816][ T6093] bond13 (unregistering): Released all slaves [ 494.001107][ T6093] bond14 (unregistering): Released all slaves [ 494.015537][ T6093] bond15 (unregistering): Released all slaves [ 494.031215][ T6093] bond16 (unregistering): Released all slaves [ 494.073318][T17093] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 494.096145][T17093] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 494.228468][ T5835] Bluetooth: hci2: command tx timeout [ 494.236342][ T6093] : left promiscuous mode [ 494.282808][T17093] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 494.298104][T17093] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 494.324964][ T6093] tipc: Left network mode [ 494.514115][T17093] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 494.520597][T17093] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 494.613375][T17093] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 494.621849][T17093] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 494.813725][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 495.070635][T17151] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 495.188052][T17151] netlink: 'syz.1.3177': attribute type 2 has an invalid length. [ 495.244126][T17163] netlink: 'syz.5.3179': attribute type 10 has an invalid length. [ 495.293849][T17163] veth1_macvtap: left promiscuous mode [ 495.312615][T17163] team0: Device veth1_macvtap failed to register rx_handler [ 495.356517][T17027] chnl_net:caif_netlink_parms(): no params data found [ 495.691551][T17183] netlink: 'syz.5.3184': attribute type 1 has an invalid length. [ 495.702658][T17175] policy can only be matched on NF_INET_PRE_ROUTING [ 495.702679][T17175] unable to load match [ 495.765671][T17186] bond7: (slave ip6gretap1): making interface the new active one [ 495.774729][T17186] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 495.889029][T17191] xt_TCPMSS: Only works on TCP SYN packets [ 495.908432][T17191] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3187'. [ 495.982729][T17027] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.020180][T17027] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.042920][T17027] bridge_slave_0: entered allmulticast mode [ 496.125167][T17027] bridge_slave_0: entered promiscuous mode [ 496.232572][T17027] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.255237][T17027] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.271546][T17027] bridge_slave_1: entered allmulticast mode [ 496.297817][T17027] bridge_slave_1: entered promiscuous mode [ 496.602049][T17220] netlink: 'syz.5.3195': attribute type 10 has an invalid length. [ 496.610530][T17220] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3195'. [ 496.796035][T17027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.814918][T17220] dummy0: entered promiscuous mode [ 496.832240][T17220] bridge0: port 4(dummy0) entered blocking state [ 496.850611][T17220] bridge0: port 4(dummy0) entered disabled state [ 496.863509][T17220] dummy0: entered allmulticast mode [ 496.889013][T17215] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.940140][T17215] bond1: (slave lo): Enslaving as a backup interface with an up link [ 496.970292][T17215] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 496.995369][T17027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.025200][ T6093] hsr_slave_1: left promiscuous mode [ 497.032696][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.041256][ T6093] batman_adv: batadv0: Removing interface: dummy0 [ 497.084137][ T6093] pim6reg527 (unregistering): left allmulticast mode [ 497.195207][T17239] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3199'. [ 497.207067][T17239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3199'. [ 497.546713][ T6093] team0 (unregistering): Port device  removed [ 497.593982][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 498.246289][T17255] tap0: tun_chr_ioctl cmd 1074025676 [ 498.252044][T17255] tap0: owner set to 0 [ 498.262038][T17027] team0: Port device team_slave_0 added [ 498.333540][T17027] team0: Port device team_slave_1 added [ 498.494200][T17027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.524595][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.637236][T17027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.683648][T17027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.708444][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.751818][T17027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.793586][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3211'. [ 498.825296][ T6093] IPVS: stop unused estimator thread 0... [ 498.865625][T17287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3212'. [ 499.006968][T17027] hsr_slave_0: entered promiscuous mode [ 499.028798][T17027] hsr_slave_1: entered promiscuous mode [ 499.035369][T17027] debugfs: 'hsr0' already exists in 'hsr' [ 499.053327][T17027] Cannot create hsr debugfs directory [ 499.251685][T17304] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3215'. [ 499.301436][T17304] netlink: 'syz.5.3215': attribute type 1 has an invalid length. [ 499.600245][T17314] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3219'. [ 499.801315][T17331] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3224'. [ 499.812321][T17328] vlan2: entered promiscuous mode [ 499.818262][T17328] bridge0: entered promiscuous mode [ 499.839128][T17331] SET target dimension over the limit! [ 500.176913][T17027] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.256613][T17027] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 500.273705][T17027] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 500.332119][T17027] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.390756][T17352] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3232'. [ 500.482272][T17352] bond0: entered promiscuous mode [ 500.501461][T17352] bond_slave_0: entered promiscuous mode [ 500.540141][T17352] bond_slave_1: entered promiscuous mode [ 500.546207][T17352] batadv0: entered promiscuous mode [ 500.622560][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3234'. [ 500.740455][T17373] dvmrp6: entered allmulticast mode [ 500.890092][T17027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.932808][T17381] netlink: 'syz.5.3241': attribute type 2 has an invalid length. [ 500.960460][T17027] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.975733][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.983069][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.003998][T17381] bridge0: port 5(veth0_to_bridge) entered blocking state [ 501.012201][T17381] bridge0: port 5(veth0_to_bridge) entered disabled state [ 501.021583][T17381] veth0_to_bridge: entered allmulticast mode [ 501.033345][T17381] veth0_to_bridge: entered promiscuous mode [ 501.055579][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.063015][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.250417][T17381] netlink: 'syz.5.3241': attribute type 2 has an invalid length. [ 501.519202][T17410] syzkaller0: entered promiscuous mode [ 501.524779][T17410] syzkaller0: entered allmulticast mode [ 501.923351][T17443] __nla_validate_parse: 5 callbacks suppressed [ 501.923388][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'. [ 502.158767][T17446] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3249'. [ 503.566869][T17426] bond0: left promiscuous mode [ 503.571997][T17426] bond_slave_0: left promiscuous mode [ 503.577710][T17426] bond_slave_1: left promiscuous mode [ 503.583234][T17426] batadv0: left promiscuous mode [ 503.598091][T17440] veth1_macvtap: left promiscuous mode [ 503.682397][T17451] syzkaller0: entered promiscuous mode [ 503.688332][T17451] syzkaller0: entered allmulticast mode [ 503.747912][T17436] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.385293][T17456] ip6gre2: entered allmulticast mode [ 505.445752][T17436] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.532152][T17472] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3256'. [ 505.552324][T17436] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.574063][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3256'. [ 505.629005][T17472] bond1: (slave lo): Device is not bonding slave [ 505.635534][T17472] bond1: option active_slave: invalid value (lo) [ 505.645090][T17472] bond1 (unregistering): Released all slaves [ 505.704345][T17436] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.792999][T17027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.911193][T17027] veth0_vlan: entered promiscuous mode [ 505.950734][T17027] veth1_vlan: entered promiscuous mode [ 505.991856][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.065478][T17493] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3262'. [ 506.089944][T17027] veth0_macvtap: entered promiscuous mode [ 506.103068][ T7747] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.157714][ T7747] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.181742][T17027] veth1_macvtap: entered promiscuous mode [ 506.222854][ T34] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.272459][T17027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.340006][T17027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.389789][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.405724][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.462903][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.510665][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.630773][T17513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3268'. [ 506.724889][T17513] netlink: 'syz.1.3268': attribute type 2 has an invalid length. [ 506.917615][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.925547][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.019254][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.034928][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.224623][T17525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3269'. [ 507.315362][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3271'. [ 507.389361][T17535] netlink: 'syz.5.3271': attribute type 10 has an invalid length. [ 507.495596][T17525] syz.3.3269 uses old SIOCAX25GETINFO [ 507.506643][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3271'. [ 507.641758][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 507.685533][T17549] netlink: 'syz.1.3273': attribute type 39 has an invalid length. [ 507.724120][T17545] openvswitch: netlink: IP tunnel dst address not specified [ 507.806907][T17554] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3274'. [ 507.904977][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3276'. [ 507.939708][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3276'. [ 508.225671][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.248206][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.256897][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.265597][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.273964][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.372444][T17570] vxcan1 speed is unknown, defaulting to 1000 [ 508.549618][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3283'. [ 508.811666][ T7747] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 508.901584][ T7747] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 508.998870][T17602] netlink: 'syz.4.3289': attribute type 3 has an invalid length. [ 509.011913][ T7747] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 509.155802][ T7747] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 509.490052][ T7747] batadv1: left allmulticast mode [ 509.495249][ T7747] batadv1: left promiscuous mode [ 509.508293][ T7747] bridge0: port 3(batadv1) entered disabled state [ 509.528895][ T7747] bridge_slave_0: left allmulticast mode [ 509.537257][ T7747] bridge_slave_0: left promiscuous mode [ 509.543573][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'. [ 509.545570][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.649322][ T7747] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 510.308431][ T5835] Bluetooth: hci0: command tx timeout [ 510.415051][T17623] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 510.564173][ T7747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.594956][ T7747] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 510.610844][ T7747] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 510.621642][ T7747] bond0 (unregistering): Released all slaves [ 510.636335][ T7747] bond1 (unregistering): Released all slaves [ 510.753374][ T7747] bond2 (unregistering): Released all slaves [ 510.769294][ T7747] bond3 (unregistering): Released all slaves [ 510.783854][ T7747] bond4 (unregistering): Released all slaves [ 510.800104][ T7747] bond5 (unregistering): Released all slaves [ 510.823540][ T7747] bond6 (unregistering): Released all slaves [ 510.840219][ T7747] bond7 (unregistering): Released all slaves [ 510.854929][ T7747] bond8 (unregistering): Released all slaves [ 510.870113][ T7747] bond9 (unregistering): Released all slaves [ 511.085126][ T7747] : left promiscuous mode [ 511.247537][ T7747] tipc: Left network mode [ 511.415734][T17570] chnl_net:caif_netlink_parms(): no params data found [ 511.429889][T17648] pim6reg1: entered promiscuous mode [ 511.435258][T17648] pim6reg1: entered allmulticast mode [ 511.495106][T17648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.505670][T17648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3301'. [ 511.675966][T17665] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 511.701373][T17665] team0: Port device batadv1 added [ 512.155329][T17570] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.177344][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.184887][T17570] bridge_slave_0: entered allmulticast mode [ 512.193898][T17570] bridge_slave_0: entered promiscuous mode [ 512.250641][T17692] macvtap1: entered promiscuous mode [ 512.256028][T17692] vlan0: entered promiscuous mode [ 512.261667][T17692] macvtap1: entered allmulticast mode [ 512.267195][T17692] vlan0: entered allmulticast mode [ 512.273383][T17692] veth0_vlan: entered allmulticast mode [ 512.294972][T17681] team0 (unregistering): left allmulticast mode [ 512.312599][T17681] team_slave_0: left allmulticast mode [ 512.333612][T17681] team_slave_1: left allmulticast mode [ 512.353386][T17681] team0 (unregistering): left promiscuous mode [ 512.367904][T17681] team_slave_0: left promiscuous mode [ 512.373745][T17681] team_slave_1: left promiscuous mode [ 512.379644][T17681] bridge0: port 3(team0) entered disabled state [ 512.388903][ T5835] Bluetooth: hci0: command 0x041b tx timeout [ 512.402465][T17681] team0 (unregistering): Port device team_slave_0 removed [ 512.413518][T17681] team0 (unregistering): Port device team_slave_1 removed [ 512.450859][T17570] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.481973][T17570] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.494448][T17570] bridge_slave_1: entered allmulticast mode [ 512.505725][T17570] bridge_slave_1: entered promiscuous mode [ 512.517684][T17704] __nla_validate_parse: 2 callbacks suppressed [ 512.517707][T17704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3316'. [ 512.545354][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3316'. [ 512.651739][T17704] gretap1: entered promiscuous mode [ 512.670408][T17704] gretap1: entered allmulticast mode [ 512.795312][T17570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.890710][T17570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.972408][T17721] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 512.987551][T17721] bond1 (unregistering): Released all slaves [ 513.344376][T17743] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 513.390317][T17728] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 513.402828][T17728] bond1 (unregistering): Released all slaves [ 513.493525][T17570] team0: Port device team_slave_0 added [ 513.596431][T17754] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3328'. [ 513.655379][ T7747] hsr_slave_0: left promiscuous mode [ 513.703634][ T7747] hsr_slave_1: left promiscuous mode [ 513.710493][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.738150][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.782686][T17761] netlink: 'syz.5.3328': attribute type 1 has an invalid length. [ 513.826431][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3332'. [ 514.026865][T17779] netlink: 'syz.1.3334': attribute type 18 has an invalid length. [ 514.467660][ T5835] Bluetooth: hci0: command 0x041b tx timeout [ 515.192321][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 515.237909][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 515.432561][ T74] smc: removing ib device syz2 [ 515.672234][T17570] team0: Port device team_slave_1 added [ 515.850031][T17761] 8021q: adding VLAN 0 to HW filter on device bond9 [ 515.863837][T17771] bond9: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 515.882208][T17771] bond9: entered allmulticast mode [ 516.157001][ T3528] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.176869][ T3528] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.297469][T17807] Bluetooth: MGMT ver 1.23 [ 516.415785][ T3528] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.424579][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3339'. [ 516.443503][T17570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.477489][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.528500][T17570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.542335][T17813] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3339'. [ 516.555350][ T5835] Bluetooth: hci0: command 0x041b tx timeout [ 516.577977][ T3528] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.679147][T17570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.706808][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.743871][T17570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.968183][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3343'. [ 516.983805][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3343'. [ 517.313301][T17570] hsr_slave_0: entered promiscuous mode [ 517.349180][T17570] hsr_slave_1: entered promiscuous mode [ 517.355865][T17570] debugfs: 'hsr0' already exists in 'hsr' [ 517.387574][T17570] Cannot create hsr debugfs directory [ 517.483182][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3347'. [ 517.791455][T17839] openvswitch: netlink: IP tunnel dst address not specified [ 517.846934][T17859] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 518.098539][ T7747] IPVS: stop unused estimator thread 0... [ 518.113042][T17870] netlink: 'syz.1.3353': attribute type 7 has an invalid length. [ 518.147804][T17870] netlink: 'syz.1.3353': attribute type 8 has an invalid length. [ 518.252375][T17874] syzkaller0: entered promiscuous mode [ 518.270732][T17874] syzkaller0: entered allmulticast mode [ 518.392395][T17880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3357'. [ 518.420400][T17882] netlink: 'syz.4.3358': attribute type 1 has an invalid length. [ 518.472356][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3358'. [ 518.584673][T17884] netlink: 'syz.2.3359': attribute type 29 has an invalid length. [ 518.627871][ T5835] Bluetooth: hci0: command 0x041b tx timeout [ 518.771653][T17898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3361'. [ 519.156183][T17570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 519.198871][T17570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 519.234204][T17570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 519.269681][T17570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.426369][T17929] syzkaller0: entered promiscuous mode [ 519.433603][T17929] syzkaller0: entered allmulticast mode [ 519.584921][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.621432][T17570] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.649257][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.656565][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.707171][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.714463][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.860841][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 519.870407][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3374'. [ 520.139480][T17962] netlink: 'syz.5.3378': attribute type 1 has an invalid length. [ 520.169295][T17962] netlink: 'syz.5.3378': attribute type 2 has an invalid length. [ 520.178339][T17967] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3380'. [ 520.194780][T17962] netlink: 'syz.5.3378': attribute type 1 has an invalid length. [ 520.263343][T17962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3378'. [ 520.421044][T17570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.634528][T17570] veth0_vlan: entered promiscuous mode [ 520.668424][T17570] veth1_vlan: entered promiscuous mode [ 520.730890][T17570] veth0_macvtap: entered promiscuous mode [ 520.752464][T17570] veth1_macvtap: entered promiscuous mode [ 520.776425][T17996] netlink: 'syz.5.3389': attribute type 1 has an invalid length. [ 520.797321][T17996] netlink: 16167 bytes leftover after parsing attributes in process `syz.5.3389'. [ 520.808835][T17570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.832455][T17570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.935607][ T3528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.965208][ T3528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.996945][ T3528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.046838][T18007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 521.054235][T18007] IPv6: NLM_F_CREATE should be set when creating new route [ 521.061737][T18007] IPv6: NLM_F_CREATE should be set when creating new route [ 521.069159][T18007] IPv6: NLM_F_CREATE should be set when creating new route [ 521.082740][ T3528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.093887][T18005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 521.209092][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3392'. [ 521.499191][T18010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.511789][T18010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.529083][T18010] bond0 (unregistering): Released all slaves [ 521.615430][ T6093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.649956][ T6093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.789807][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.801679][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.126412][T18049] openvswitch: netlink: Message has 592 unknown bytes. [ 522.134203][T18049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.293155][T18033] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.301188][T18033] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.568821][T18033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.597499][T18026] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 522.619731][T18033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.785255][T18045] tipc: Started in network mode [ 522.791657][T18045] tipc: Node identity 080211000001, cluster identity 4711 [ 522.799981][T18045] tipc: Enabled bearer , priority 0 [ 522.818217][T18046] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 522.828380][T18047] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 522.877512][T18047] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 522.906340][T18068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3405'. [ 522.927425][ T6487] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.957480][ T6487] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.991974][ T6487] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.005864][T18070] Bluetooth: MGMT ver 1.23 [ 523.008250][ T6487] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.041377][T18070] syzkaller0: entered promiscuous mode [ 523.046916][T18070] syzkaller0: entered allmulticast mode [ 523.064764][ T6487] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.088266][ T6487] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.134499][ T6487] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.154101][ T6487] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.183314][T18074] ip6erspan0: entered promiscuous mode [ 523.197683][ T9] IPVS: starting estimator thread 0... [ 523.213964][T18074] ip6erspan0: entered allmulticast mode [ 523.314819][T18080] IPVS: using max 26 ests per chain, 62400 per kthread [ 523.502575][T18093] bridge0: port 3(batadv1) entered blocking state [ 523.513084][T18093] bridge0: port 3(batadv1) entered disabled state [ 523.519961][T18093] batadv1: entered allmulticast mode [ 523.527912][T18093] batadv1: entered promiscuous mode [ 523.637837][T18101] __nla_validate_parse: 1 callbacks suppressed [ 523.637860][T18101] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3415'. [ 523.668774][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 523.738861][T18109] netlink: 'syz.4.3418': attribute type 10 has an invalid length. [ 523.779224][ T39] IPVS: starting estimator thread 0... [ 523.829071][T18109] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.830615][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 523.844053][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 523.868057][T18109] bridge_slave_1: left allmulticast mode [ 523.871586][T18112] IPVS: using max 23 ests per chain, 55200 per kthread [ 523.915692][T18109] bridge_slave_1: left promiscuous mode [ 523.944056][T18109] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.992651][ T7747] batman_adv: batadv1: IGMP Querier appeared [ 523.998841][ T7747] batman_adv: batadv1: MLD Querier appeared [ 524.035342][T18109] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 524.079274][T18011] tipc: Node number set to 134418688 [ 524.423179][T18147] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3427'. [ 524.563229][T18155] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3429'. [ 524.668513][T18160] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3431'. [ 524.719555][T18160] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3431'. [ 524.968344][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3433'. [ 525.032414][T18183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3436'. [ 525.214689][T18190] xt_CONNSECMARK: invalid mode: 0 [ 525.907382][ T5835] Bluetooth: hci0: command 0x041b tx timeout [ 526.141600][T18220] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.218682][T18230] netlink: 'syz.5.3447': attribute type 1 has an invalid length. [ 526.227994][T18230] netlink: 'syz.5.3447': attribute type 3 has an invalid length. [ 526.239127][T18230] netlink: 'syz.5.3447': attribute type 7 has an invalid length. [ 526.247471][T18230] netlink: 'syz.5.3447': attribute type 8 has an invalid length. [ 526.258226][T18230] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3447'. [ 526.268773][T18230] NCSI netlink: No device for ifindex 131092 [ 526.282190][T18220] tipc: Resetting bearer [ 526.288858][T18220] tipc: Resetting bearer [ 526.604072][ T30] audit: type=1800 audit(1767862991.474:2): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3454" name="memory.events" dev="tmpfs" ino=591 res=0 errno=0 [ 526.628707][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3454'. [ 526.688925][ T30] audit: type=1804 audit(1767862991.504:3): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3454" name="/newroot/111/memory.events" dev="tmpfs" ino=591 res=1 errno=0 [ 526.726001][T18252] bond1: option xmit_hash_policy: invalid value (64) [ 526.743541][T18252] bond1 (unregistering): Released all slaves [ 526.860890][T18262] netlink: 'syz.2.3457': attribute type 2 has an invalid length. [ 527.322560][T18290] pim6reg: entered allmulticast mode [ 527.342412][T18290] pim6reg: left allmulticast mode [ 528.061638][T18324] netlink: 'syz.1.3475': attribute type 1 has an invalid length. [ 528.328008][T18338] netlink: 'syz.4.3477': attribute type 14 has an invalid length. [ 528.648192][T18357] netlink: 'syz.4.3481': attribute type 2 has an invalid length. [ 528.681853][T18357] 9: entered promiscuous mode [ 528.778596][T18357] openvswitch: netlink: Flow actions attr not present in new flow. [ 528.819310][T18365] __nla_validate_parse: 8 callbacks suppressed [ 528.819332][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 529.005724][T18373] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3488'. [ 529.148458][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3489'. [ 530.030726][T18415] syzkaller0: entered promiscuous mode [ 530.036297][T18415] syzkaller0: entered allmulticast mode [ 530.048528][T18411] xt_hashlimit: overflow, rate too high: 0 [ 530.403375][T18435] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3503'. [ 530.623313][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 531.007695][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3513'. [ 531.349815][T18503] gretap0: entered promiscuous mode [ 531.355591][T18503] vlan3: entered promiscuous mode [ 531.490926][T18514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3523'. [ 531.707485][T18526] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3528'. [ 531.930608][T18536] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3532'. [ 532.081091][T18546] batadv_slave_1: entered promiscuous mode [ 532.117357][T18546] 8021q: VLANs not supported on ip6_vti0 [ 532.134069][T18543] batadv_slave_1: left promiscuous mode [ 532.150452][T18548] netlink: 'syz.2.3538': attribute type 23 has an invalid length. [ 532.335814][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3542'. [ 532.418873][T18563] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 532.554213][T18568] openvswitch: netlink: Missing key (keys=40, expected=80) [ 532.675247][T18571] delete_channel: no stack [ 532.675526][T18568] smc: removing ib device sy [ 532.900350][T18585] netlink: 'syz.5.3554': attribute type 2 has an invalid length. [ 533.146808][T18601] netlink: 'syz.5.3558': attribute type 28 has an invalid length. [ 533.198766][T18601] netlink: 'syz.5.3558': attribute type 3 has an invalid length. [ 533.273967][T18606] 0{X: renamed from gretap0 (while UP) [ 533.295044][T18606] 0{X: entered allmulticast mode [ 533.332974][T18606] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 533.572992][ T6487] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.596480][ T6487] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.639729][ T6487] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.674775][ T6487] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.827231][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 533.923879][T18634] veth0_to_team: entered promiscuous mode [ 534.168702][T18646] __nla_validate_parse: 7 callbacks suppressed [ 534.168723][T18646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3569'. [ 534.215930][T18642] can: request_module (can-proto-4) failed. [ 534.379537][T18654] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 534.420757][T18658] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3573'. [ 534.613538][T18667] set match dimension is over the limit! [ 534.661033][T18667] set match dimension is over the limit! [ 534.666846][T18666] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3575'. [ 534.682603][T18666] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3575'. [ 534.709941][T18667] set match dimension is over the limit! [ 534.727770][T18667] set match dimension is over the limit! [ 534.733850][T18667] set match dimension is over the limit! [ 534.770961][T18667] set match dimension is over the limit! [ 534.796952][T18667] set match dimension is over the limit! [ 534.824737][T18667] set match dimension is over the limit! [ 534.841215][T18667] set match dimension is over the limit! [ 534.849000][T18667] set match dimension is over the limit! [ 535.268573][T18690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.393775][T18697] geneve2: entered promiscuous mode [ 535.399489][T18697] geneve2: entered allmulticast mode [ 535.406442][ T6487] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.488650][ T6487] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.500154][ T6487] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.518020][ T6487] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.208859][T18733] xt_hashlimit: size too large, truncated to 1048576 [ 536.301157][T18743] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3595'. [ 536.336149][T18743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3595'. [ 536.364539][T18741] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3596'. [ 536.444573][T18747] syzkaller1: entered promiscuous mode [ 536.472098][T18747] syzkaller1: entered allmulticast mode [ 536.955787][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3605'. [ 537.082017][T18772] bond1: (slave lo): Device is not bonding slave [ 537.097881][T18772] bond1: option active_slave: invalid value (lo) [ 537.133665][T18772] bond1 (unregistering): Released all slaves [ 537.186672][T18789] netlink: 'syz.1.3610': attribute type 29 has an invalid length. [ 537.207520][T18789] netlink: 'syz.1.3610': attribute type 29 has an invalid length. [ 537.469719][T18805] erspan0: entered promiscuous mode [ 537.501862][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3616'. [ 537.725975][T18818] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3618'. [ 538.184548][T18844] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 538.207664][T18844] bond4 (unregistering): Released all slaves [ 538.343020][T18851] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 538.381815][T18851] bond1 (unregistering): Released all slaves [ 538.604767][T18867] netlink: 'syz.2.3632': attribute type 18 has an invalid length. [ 538.641268][T18866] netlink: 'syz.2.3632': attribute type 18 has an invalid length. [ 538.676940][ T6487] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.704039][ T6487] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.734302][ T6487] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.747978][ T6487] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.855453][T18884] netlink: 'syz.2.3639': attribute type 4 has an invalid length. [ 539.319598][T18912] netlink: 'syz.5.3648': attribute type 33 has an invalid length. [ 539.345724][T18916] __nla_validate_parse: 6 callbacks suppressed [ 539.345746][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3644'. [ 539.494307][T18912] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 539.529754][T18912] bond10 (unregistering): Released all slaves [ 539.771384][T18929] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 539.823041][T18929] bond1: (slave lo): Enslaving as a backup interface with an up link [ 539.826810][T18930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3652'. [ 539.860500][T18929] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 540.654820][T18987] netlink: 'syz.5.3667': attribute type 29 has an invalid length. [ 540.666433][T18987] netlink: 'syz.5.3667': attribute type 29 has an invalid length. [ 540.678672][T18987] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3667'. [ 540.692489][T18987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3667'. [ 540.724963][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3666'. [ 540.871475][T18999] veth5: entered allmulticast mode [ 541.073479][T19014] tipc: Failed to remove unknown binding: 66,0,0/0:1940547866/1940547867 [ 541.090922][T19014] tipc: Failed to remove unknown binding: 66,0,0/0:1940547866/1940547867 [ 541.279996][T19026] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3680'. [ 541.573697][T19046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3683'. [ 541.795651][T19050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3687'. [ 542.037241][T19065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.269718][T19080] netlink: 'syz.4.3695': attribute type 11 has an invalid length. [ 542.587291][T19096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3700'. [ 542.811977][T19108] netlink: 'syz.4.3703': attribute type 3 has an invalid length. [ 542.900847][T19108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3703'. [ 542.911038][T18728] udevd[18728]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 542.956476][T19105] udevd[19105]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 543.226286][T19133] 0{X: renamed from gretap0 [ 543.235036][T19133] 0{X: entered allmulticast mode [ 543.274944][T19133] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 543.306103][T19137] netlink: 'syz.4.3711': attribute type 1 has an invalid length. [ 543.528296][T19151] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 543.538984][T19150] : entered promiscuous mode [ 544.190454][T19180] bridge_slave_0: invalid flags given to default FDB implementation [ 544.338937][T19192] veth0: entered promiscuous mode [ 544.376172][T19191] veth0: left promiscuous mode [ 545.149095][T19234] tipc: Started in network mode [ 545.167562][T19234] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 545.199114][T19234] tipc: Enabled bearer , priority 10 [ 545.406980][T19245] ipvlan2: entered promiscuous mode [ 545.464541][T19246] batadv_slave_0: entered promiscuous mode [ 545.541570][T19244] batadv_slave_0: left promiscuous mode [ 545.603877][T19254] __nla_validate_parse: 12 callbacks suppressed [ 545.603899][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3743'. [ 545.747440][T13859] IPVS: ip_vs_send_async error -101 [ 545.890938][T19262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3744'. [ 545.950164][T19271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3744'. [ 545.965140][T19224] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 546.025025][T19219] lec:lec_atm_close: lec0: Shut down! [ 546.131837][T19280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3748'. [ 546.286681][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 546.306354][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3750'. [ 546.323516][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'. [ 546.333302][ T24] tipc: Node number set to 4269801492 [ 546.396382][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 546.396381][ T74] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.396656][ T74] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.462851][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3750'. [ 546.496900][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'. [ 546.501504][ T74] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.528465][T19300] netlink: 'syz.2.3754': attribute type 1 has an invalid length. [ 546.666551][T19300] bond1: entered promiscuous mode [ 546.693323][T19300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.743144][ T74] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.801492][T19308] bond1: entered allmulticast mode [ 546.843547][T19305] bond1: (slave bridge2): making interface the new active one [ 546.865835][T19305] bridge2: entered promiscuous mode [ 546.883895][T19305] bridge2: entered allmulticast mode [ 546.895310][T19305] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 547.278588][T19325] syzkaller0: entered promiscuous mode [ 547.299710][T19325] syzkaller0: entered allmulticast mode [ 549.370159][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.395969][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.439938][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.465057][T19359] sit0: entered promiscuous mode [ 549.485629][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.508623][T19359] netlink: 'syz.2.3767': attribute type 1 has an invalid length. [ 549.517887][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.566446][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.598877][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.606731][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.683632][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.698224][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 549.851362][T19380] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 550.290230][T19408] bond4: option mode: invalid value (133) [ 550.299599][T19408] bond4 (unregistering): Released all slaves [ 551.051472][T19429] syzkaller0: entered promiscuous mode [ 551.066071][T19429] syzkaller0: entered allmulticast mode [ 551.080477][T19434] __nla_validate_parse: 8 callbacks suppressed [ 551.080498][T19434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3788'. [ 551.275661][T19438] syzkaller0: entered promiscuous mode [ 551.293635][T19447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3794'. [ 551.321321][T19438] syzkaller0: entered allmulticast mode [ 551.634688][T19464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3798'. [ 553.173744][T19453] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 553.182396][T19460] tipc: New replicast peer: 255.255.255.255 [ 553.228597][T19460] tipc: Enabled bearer , priority 10 [ 553.286932][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'. [ 553.348494][T19470] netlink: 'syz.3.3799': attribute type 42 has an invalid length. [ 553.381133][T19475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3801'. [ 553.510443][T19485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3805'. [ 553.665339][T19496] geneve2: entered promiscuous mode [ 553.672214][T19496] geneve2: entered allmulticast mode [ 553.690648][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.701853][T19494] netlink: 'syz.4.3808': attribute type 8 has an invalid length. [ 553.712465][T19494] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 553.803287][T19503] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3812'. [ 554.248052][T19530] bond0: Error: Cannot enslave bond to itself. [ 554.268735][T19533] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 554.405490][T19492] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 554.711453][T19553] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 554.796571][T19553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.865358][T19557] bond2: entered allmulticast mode [ 554.958947][T19563] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 555.206369][T19565] net_ratelimit: 24 callbacks suppressed [ 555.206393][T19565] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 555.560805][T19603] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3840'. [ 555.574705][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3840'. [ 555.671569][ T5835] Bluetooth: hci0: command 0x041b tx timeout [ 555.751570][T19611] netlink: 'syz.5.3843': attribute type 21 has an invalid length. [ 555.760050][T19611] netlink: 'syz.5.3843': attribute type 22 has an invalid length. [ 555.768202][T19611] netlink: 'syz.5.3843': attribute type 23 has an invalid length. [ 555.776099][T19611] netlink: 'syz.5.3843': attribute type 25 has an invalid length. [ 555.947602][T19625] bridge3: entered promiscuous mode [ 555.957704][T19625] bridge3: entered allmulticast mode [ 556.120651][T19635] __nla_validate_parse: 5 callbacks suppressed [ 556.120678][T19635] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3852'. [ 556.161380][T19639] Cannot find set identified by id 0 to match [ 556.179424][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3852'. [ 556.219004][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 556.239595][T19641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3857'. [ 556.609976][T19665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3864'. [ 556.657605][T19666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3864'. [ 556.733773][T19675] netlink: 'syz.5.3867': attribute type 2 has an invalid length. [ 556.753807][T19675] netlink: 'syz.5.3867': attribute type 1 has an invalid length. [ 556.900382][T19688] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 556.997477][T19691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 557.024149][T19686] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.051538][T19686] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.095320][T19702] netlink: 'syz.2.3868': attribute type 16 has an invalid length. [ 557.123675][T19702] netlink: 'syz.2.3868': attribute type 17 has an invalid length. [ 557.279745][T19702] sit0: left promiscuous mode [ 557.378731][T19702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.629113][T19729] wg1: entered promiscuous mode [ 557.644262][T19729] wg1: entered allmulticast mode [ 558.202865][ T49] tipc: Resetting bearer [ 558.232143][T19733] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3881'. [ 558.357488][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3882'. [ 558.499763][ T49] tipc: Disabling bearer [ 558.657431][T19751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 558.671892][ T49] dvmrp6 (unregistering): left allmulticast mode [ 559.254011][ T49] bond1 (unregistering): Released all slaves [ 559.411281][ T49] bond2 (unregistering): Released all slaves [ 559.443387][ T49] bond3 (unregistering): Released all slaves [ 559.562360][ T49] bond4 (unregistering): Released all slaves [ 559.577800][ T49] bond5 (unregistering): Released all slaves [ 559.697021][ T49] bond6 (unregistering): Released all slaves [ 559.712482][ T49] bond7 (unregistering): Released all slaves [ 559.727051][ T49] bond8 (unregistering): Released all slaves [ 559.782230][T19743] macsec1: entered promiscuous mode [ 559.793852][T19743] macsec1: entered allmulticast mode [ 559.802749][T19743] bridge0: entered allmulticast mode [ 559.831555][T19743] bridge0: port 2(macsec1) entered blocking state [ 559.847703][T19743] bridge0: port 2(macsec1) entered disabled state [ 559.870452][T19743] bridge0: left allmulticast mode [ 559.940983][T19751] : entered promiscuous mode [ 559.955995][ T49] : left promiscuous mode [ 560.097416][ T49] tipc: Left network mode [ 560.180182][T19769] netlink: 'syz.5.3893': attribute type 1 has an invalid length. [ 560.449508][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3897'. [ 560.582825][ T49] veth1_macvtap: left promiscuous mode [ 560.599202][ T49] veth0_macvtap: left promiscuous mode [ 560.609905][ T49] veth1_vlan: left promiscuous mode [ 560.620554][ T49] veth0_vlan: left promiscuous mode [ 560.711169][T19797] x_tables: duplicate underflow at hook 2 [ 561.901441][T19819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.938935][T19824] tipc: Resetting bearer [ 561.945054][T19819] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 562.258052][T19842] __nla_validate_parse: 6 callbacks suppressed [ 562.258074][T19842] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3914'. [ 562.275336][T19842] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3914'. [ 562.369223][ T49] IPVS: stop unused estimator thread 0... [ 562.379367][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 562.526227][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 562.592723][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 562.671827][T19857] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 562.704782][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 562.831035][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3921'. [ 562.855931][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 562.981591][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 563.040675][T19875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3923'. [ 563.055054][T19878] lo: entered allmulticast mode [ 563.060455][T19878] tunl0: entered allmulticast mode [ 563.065966][T19878] gre0: entered allmulticast mode [ 563.121272][T19878] erspan0: entered allmulticast mode [ 563.141841][T19878] ip_vti0: entered allmulticast mode [ 563.163388][T19878] ip6_vti0: entered allmulticast mode [ 563.200144][T19878] sit0: entered allmulticast mode [ 563.233034][T19878] ip6tnl0: entered allmulticast mode [ 563.242238][T19885] netlink: 'syz.4.3926': attribute type 1 has an invalid length. [ 563.256731][T19878] ip6gre0: entered allmulticast mode [ 563.286919][T19878] syz_tun: entered allmulticast mode [ 563.307404][T19878] ip6gretap0: entered allmulticast mode [ 563.313160][T19878] bridge0: entered allmulticast mode [ 563.321605][T19878] bond0: entered allmulticast mode [ 563.326806][T19878] bond_slave_0: entered allmulticast mode [ 563.332754][T19878] bond_slave_1: entered allmulticast mode [ 563.389500][T19878] nlmon0: entered allmulticast mode [ 563.394965][T19878] caif0: entered allmulticast mode [ 563.407344][T19878] batadv0: entered allmulticast mode [ 563.412906][T19878] veth0: entered allmulticast mode [ 563.430897][T19878] veth1: entered allmulticast mode [ 563.436270][T19878] wg0: entered allmulticast mode [ 563.453771][T19878] wg1: left promiscuous mode [ 563.472749][T19878] wg2: entered allmulticast mode [ 563.493722][T19878] veth1_to_bridge: entered allmulticast mode [ 563.501310][T19878] veth0_to_bond: entered allmulticast mode [ 563.512189][T19878] veth1_to_bond: entered allmulticast mode [ 563.520776][T19878] veth0_to_team: entered allmulticast mode [ 563.548758][T19878] team_slave_0: entered allmulticast mode [ 563.564593][T19878] veth1_to_team: entered allmulticast mode [ 563.582373][T19878] team_slave_1: entered allmulticast mode [ 563.591811][T19878] veth0_to_batadv: entered allmulticast mode [ 563.599743][T19878] batadv_slave_0: entered allmulticast mode [ 563.606038][T19878] veth1_to_batadv: entered allmulticast mode [ 563.613242][T19878] batadv_slave_1: entered allmulticast mode [ 563.619637][T19878] xfrm0: entered allmulticast mode [ 563.625243][T19878] veth0_to_hsr: entered allmulticast mode [ 563.631846][T19878] hsr_slave_0: entered allmulticast mode [ 563.638215][T19878] veth1_to_hsr: entered allmulticast mode [ 563.644327][T19878] hsr_slave_1: entered allmulticast mode [ 563.651140][T19878] hsr0: entered allmulticast mode [ 563.656547][T19878] veth1_virt_wifi: entered allmulticast mode [ 563.663617][T19878] veth0_virt_wifi: entered allmulticast mode [ 563.670777][T19878] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 563.678756][T19878] veth1_vlan: entered allmulticast mode [ 563.684674][T19878] v: entered allmulticast mode [ 563.694270][T19878] vlan0: entered allmulticast mode [ 563.700065][T19878] vlan1: entered allmulticast mode [ 563.705861][T19878] macvlan0: entered allmulticast mode [ 563.711830][T19878] macvlan1: entered allmulticast mode [ 563.718846][T19878] ipvlan0: entered allmulticast mode [ 563.725352][T19878] ipvlan1: entered allmulticast mode [ 563.731660][T19878] veth1_macvtap: entered allmulticast mode [ 563.738050][T19878] veth0_macvtap: entered allmulticast mode [ 563.744567][T19878] macvtap0: entered allmulticast mode [ 563.751245][T19878] macsec0: entered allmulticast mode [ 563.757224][T19878] geneve0: entered allmulticast mode [ 563.762891][T19878] geneve1: entered allmulticast mode [ 563.769009][T19878] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 563.776485][T19878] mac80211_hwsim hwsim23 : entered allmulticast mode [ 563.784526][T19878] vlan2: entered allmulticast mode [ 563.790174][T19878] sit1: entered allmulticast mode [ 563.795606][T19878] bridge1: entered allmulticast mode [ 563.801598][T19903] netlink: 'syz.4.3931': attribute type 9 has an invalid length. [ 563.810471][T19878] bond1: entered allmulticast mode [ 563.816500][T19878] bridge2: entered allmulticast mode [ 563.823628][T19878] geneve2: left promiscuous mode [ 563.829811][T19878] bond2: entered allmulticast mode [ 563.835331][T19878] geneve3: entered allmulticast mode [ 563.844764][T19878] veth2: entered allmulticast mode [ 563.851929][T19878] veth3: entered allmulticast mode [ 563.858806][T19878] bond3: entered allmulticast mode [ 563.864391][T19878] pimreg0: entered allmulticast mode [ 563.870807][T19878] veth4: entered allmulticast mode [ 563.876399][T19878] veth5: entered allmulticast mode [ 563.882017][T19878] bond4: entered allmulticast mode [ 563.893935][T19878] bond5: entered allmulticast mode [ 563.900566][T19878] bridge3: entered allmulticast mode [ 563.906379][T19878] hsr1: left promiscuous mode [ 563.911548][T19878] hsr1: entered allmulticast mode [ 563.917186][T19878] gre1: entered allmulticast mode [ 563.922584][T19878] bridge4: entered allmulticast mode [ 563.928866][T19878] bond6: entered allmulticast mode [ 563.934384][T19878] syztnl0: entered allmulticast mode [ 563.940193][T19878] netdevsim netdevsim5 eth0: entered allmulticast mode [ 563.948048][T19878] netdevsim netdevsim5 eth1: entered allmulticast mode [ 563.955117][T19878] netdevsim netdevsim5 eth2: entered allmulticast mode [ 563.963427][T19878] netdevsim netdevsim5 eth3: entered allmulticast mode [ 563.970820][T19878] vlan3: entered allmulticast mode [ 563.976914][T19878] bridge5: left promiscuous mode [ 563.992616][T19878] bridge6: left promiscuous mode [ 564.005793][T19878] veth6: entered allmulticast mode [ 564.011323][T19878] veth7: entered allmulticast mode [ 564.016746][T19878] bond7: entered allmulticast mode [ 564.022705][T19878] ip6gretap1: entered allmulticast mode [ 564.036524][T19878] bond8: entered allmulticast mode [ 564.042152][T19878] bridge7: entered allmulticast mode [ 564.048130][T19878] macsec1: entered allmulticast mode [ 564.053701][T19878] veth8: entered allmulticast mode [ 564.059655][T19878] veth9: entered allmulticast mode [ 564.064929][T19878] sit2: entered allmulticast mode [ 564.071269][T19878] ip6erspan0: left promiscuous mode [ 564.086229][T19878] bridge8: entered allmulticast mode [ 564.097437][T19878] erspan1: entered allmulticast mode [ 564.145481][T19888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.251446][T19911] bond3: Unable to set down delay as MII monitoring is disabled [ 564.262522][T19911] bond3 (unregistering): Released all slaves [ 564.337528][T19917] netlink: 'syz.5.3933': attribute type 14 has an invalid length. [ 564.406767][ T74] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.428598][ T74] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.448308][T19922] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 564.513693][T19922] team1: entered promiscuous mode [ 564.533494][T19922] team1: entered allmulticast mode [ 564.554274][ T74] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.574765][ T74] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.964852][T19956] lo: entered promiscuous mode [ 564.971397][T19953] nbd: must specify a size in bytes for the device [ 565.003756][T19957] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 565.039979][T19956] tunl0: entered promiscuous mode [ 565.064831][T19956] gre0: entered promiscuous mode [ 565.128015][T19956] gretap0: entered promiscuous mode [ 565.142973][T19965] openvswitch: netlink: IP tunnel dst address not specified [ 565.169286][T19956] erspan0: entered promiscuous mode [ 565.198303][T19956] ip_vti0: entered promiscuous mode [ 565.304658][T19969] bridge4: entered promiscuous mode [ 565.319423][T19969] bridge4: entered allmulticast mode [ 565.462745][T19978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.361521][T20037] netlink: 'syz.1.3965': attribute type 1 has an invalid length. [ 566.679485][T20048] bond1 (unregistering): Released all slaves [ 566.735388][T20055] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 566.773220][T20046] bond1 (unregistering): Released all slaves [ 566.955076][T20062] pimreg: entered allmulticast mode [ 567.066099][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.098325][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.114031][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.122472][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.145881][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.160214][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.168947][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.177355][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.185452][T20070] netlink: 'syz.3.3976': attribute type 3 has an invalid length. [ 567.574562][T20096] bond4: (slave geneve3): making interface the new active one [ 567.595653][T20096] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 567.709792][ T49] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 567.732547][ T49] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 567.752451][T20101] SET target dimension over the limit! [ 567.814469][ T49] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 567.839957][ T49] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 567.861161][T20101] __nla_validate_parse: 14 callbacks suppressed [ 567.861180][T20101] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3983'. [ 568.178753][T20115] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3986'. [ 568.362061][T20123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3989'. [ 568.374619][T20127] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3990'. [ 568.494764][T20136] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3993'. [ 568.758137][T20150] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3997'. [ 568.779301][T20140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.884722][T20157] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3999'. [ 569.221909][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'. [ 569.605937][T20191] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4009'. [ 569.618435][T20204] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4008'. [ 569.769185][T20195] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 569.998382][T20218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.022394][T20218] macvlan3: entered promiscuous mode [ 570.028749][T20218] macvlan3: entered allmulticast mode [ 570.520270][ T39] IPVS: starting estimator thread 0... [ 570.607798][T20251] IPVS: using max 31 ests per chain, 74400 per kthread [ 570.700048][T20262] openvswitch: netlink: Flow actions attr not present in new flow. [ 570.712991][T20265] openvswitch: netlink: Flow actions attr not present in new flow. [ 570.853910][T20272] syzkaller0: entered promiscuous mode [ 570.862032][T20272] syzkaller0: entered allmulticast mode [ 571.876924][T20318] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 571.999476][T20326] syzkaller0: entered promiscuous mode [ 572.005659][T20326] syzkaller0: entered allmulticast mode [ 572.256430][T20341] syzkaller0: entered promiscuous mode [ 572.281237][T20341] syzkaller0: entered allmulticast mode [ 572.868578][T20364] validate_nla: 103 callbacks suppressed [ 572.868604][T20364] netlink: 'syz.1.4059': attribute type 4 has an invalid length. [ 573.133294][T20386] pim6reg1: entered promiscuous mode [ 573.168074][T20386] pim6reg1: entered allmulticast mode [ 573.179846][T20389] __nla_validate_parse: 9 callbacks suppressed [ 573.179866][T20389] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4066'. [ 573.346101][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4070'. [ 574.399788][T20449] netlink: 'syz.1.4081': attribute type 16 has an invalid length. [ 574.437314][T20449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4081'. [ 574.601066][T20464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4086'. [ 574.624793][T20468] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4087'. [ 574.936758][T20470] udevd[20470]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 574.972302][T20404] udevd[20404]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 575.207805][T20495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4093'. [ 575.490107][T20516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4099'. [ 575.888713][T20533] netlink: 'syz.1.4103': attribute type 29 has an invalid length. [ 575.939922][T20544] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 575.957778][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 576.042808][T20550] netlink: 'syz.5.4106': attribute type 11 has an invalid length. [ 576.063713][T20544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.078310][T20550] netlink: 'syz.5.4106': attribute type 11 has an invalid length. [ 576.086228][T20550] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4106'. [ 576.146329][T20551] bond3: (slave geneve2): making interface the new active one [ 576.157517][T20551] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 576.193225][ T6082] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 576.237037][T20556] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 576.308706][T20559] kthread_run failed with err -4 [ 576.318387][ T6082] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 576.337038][T20561] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 576.347642][T20565] xt_l2tp: v2 tid > 0xffff: 1114244 [ 576.359578][ T6082] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 576.378121][T20553] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 576.406595][T20572] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4111'. [ 576.407775][T20553] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 576.460444][ T6082] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 576.478215][T20553] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 576.494795][T20553] netlink: 'syz.4.4107': attribute type 29 has an invalid length. [ 576.510587][T20577] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 576.565925][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.578600][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.604223][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.634326][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.650413][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.663899][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.690855][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.772471][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.778455][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.784731][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.791657][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.797288][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.803255][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.811521][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.817554][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.837356][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.842880][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.855828][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.916987][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.922964][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.938136][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.943743][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.971732][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 576.987291][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.004087][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.028448][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.034326][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.087261][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.092759][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.147314][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.159561][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.173463][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.186083][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.206260][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.238887][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.269569][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.275549][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.286306][T20579] tap0: tun_chr_ioctl cmd 2148553947 [ 577.560473][T20615] tipc: Started in network mode [ 577.571278][T20615] tipc: Node identity 2a3ec23b3f, cluster identity 4711 [ 577.587629][T20615] tipc: Enabled bearer , priority 11 [ 577.826562][T20629] bond4 (unregistering): Released all slaves [ 578.191812][T20654] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 578.294437][T20659] netlink: 'syz.1.4134': attribute type 3 has an invalid length. [ 578.328513][T20659] __nla_validate_parse: 4 callbacks suppressed [ 578.328537][T20659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4134'. [ 578.358419][T20666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4137'. [ 578.374847][T20657] netlink: 'syz.1.4134': attribute type 3 has an invalid length. [ 578.407210][T20657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4134'. [ 578.464613][T20672] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4138'. [ 578.476073][T20672] netlink: 'syz.5.4138': attribute type 7 has an invalid length. [ 578.501548][T20672] netlink: 'syz.5.4138': attribute type 8 has an invalid length. [ 578.528952][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4138'. [ 578.563032][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4138'. [ 578.735273][ T5839] tipc: Node number set to 356434491 [ 578.744930][T20683] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 578.754046][T20688] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4142'. [ 578.780154][T20683] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode [ 578.788824][T20683] tipc: Resetting bearer [ 578.808759][T20688] vlan2: entered allmulticast mode [ 578.817279][T20688] syz_tun: entered allmulticast mode [ 579.041128][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 579.595457][T20742] netlink: 'syz.5.4158': attribute type 1 has an invalid length. [ 579.899163][T20757] syzkaller1: entered promiscuous mode [ 579.904722][T20757] syzkaller1: entered allmulticast mode [ 580.003005][T20766] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 580.089457][T20757] syzkaller0: entered promiscuous mode [ 580.095130][T20757] syzkaller0: entered allmulticast mode [ 580.178235][T20778] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4171'. [ 580.191258][T20776] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4170'. [ 582.225874][T20793] tipc: Resetting bearer [ 582.918726][T20870] veth0: entered promiscuous mode [ 583.014024][T20860] veth0: left promiscuous mode [ 583.449030][T20905] netlink: 'syz.5.4206': attribute type 13 has an invalid length. [ 583.468380][T20905] __nla_validate_parse: 5 callbacks suppressed [ 583.468403][T20905] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4206'. [ 583.495118][T20905] syz_tun: refused to change device tx_queue_len [ 583.502079][T20905] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 583.652359][T20916] netlink: 10632 bytes leftover after parsing attributes in process `syz.3.4209'. [ 584.123544][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4216'. [ 584.202603][T20934] syzkaller0: entered promiscuous mode [ 584.217226][T20934] syzkaller0: entered allmulticast mode [ 584.362263][T20955] netlink: 'syz.4.4218': attribute type 6 has an invalid length. [ 584.469835][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4219'. [ 584.665834][T20969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4219'. [ 586.399495][T20959] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 586.689587][T21002] netlink: 'syz.5.4232': attribute type 1 has an invalid length. [ 586.715542][T21002] netlink: 'syz.5.4232': attribute type 1 has an invalid length. [ 587.246593][T21034] syzkaller1: entered promiscuous mode [ 587.265074][T21034] syzkaller1: entered allmulticast mode [ 587.549298][T21052] IPVS: Error connecting to the multicast addr [ 587.562826][T21053] syzkaller0: entered promiscuous mode [ 587.571476][T21053] syzkaller0: entered allmulticast mode [ 587.808347][T21065] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.464635][T21107] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4267'. [ 588.917864][T21136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4274'. [ 588.954568][T21136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4274'. [ 588.973870][T21139] vcan1: entered promiscuous mode [ 588.979442][T21139] vcan1: entered allmulticast mode [ 590.467397][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 591.026024][T21171] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4284'. [ 591.066455][T21176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4285'. [ 591.265576][T21190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4288'. [ 591.318807][T21198] netlink: 'syz.4.4290': attribute type 1 has an invalid length. [ 591.326905][T21198] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4290'. [ 591.353280][T21198] netlink: 'syz.4.4290': attribute type 5 has an invalid length. [ 591.688517][T21218] netlink: 'syz.5.4293': attribute type 1 has an invalid length. [ 591.755713][T21221] netlink: 'syz.4.4296': attribute type 4 has an invalid length. [ 591.764942][T21223] lo: left promiscuous mode [ 591.777916][T21226] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4293'. [ 591.792334][T21223] tunl0: left promiscuous mode [ 591.798728][T21223] gre0: left promiscuous mode [ 591.813380][T21228] netlink: 'syz.4.4296': attribute type 4 has an invalid length. [ 591.827893][T21223] gretap0: left promiscuous mode [ 591.856792][T21218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4293'. [ 591.868467][T21223] erspan0: left promiscuous mode [ 591.876408][T21223] ip_vti0: left promiscuous mode [ 592.537609][T21254] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4300'. [ 592.570495][T21253] syzkaller1: entered promiscuous mode [ 592.597431][T21253] syzkaller1: entered allmulticast mode [ 592.632390][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4302'. [ 593.382874][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.420055][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.447500][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.471881][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.497185][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.522951][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.556832][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.574928][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.642561][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.657239][ T5839] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 593.657468][T21269] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 593.687049][T21276] tipc: Enabled bearer , priority 2 [ 593.700047][ T5839] hid-generic 0005:046D:0401.0001: unexpected long global item [ 593.739934][ T5839] hid-generic 0005:046D:0401.0001: probe with driver hid-generic failed with error -22 [ 593.867022][T21278] syzkaller0: entered promiscuous mode [ 593.896795][T21278] syzkaller0: entered allmulticast mode [ 594.045499][T21314] __nla_validate_parse: 3 callbacks suppressed [ 594.045523][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4314'. [ 596.030099][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4320'. [ 596.063898][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4320'. [ 596.064907][T21332] syzkaller0: entered promiscuous mode [ 596.126120][T21332] syzkaller0: entered allmulticast mode [ 596.311858][T21350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4322'. [ 596.325282][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4324'. [ 596.364152][T21352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4324'. [ 596.772410][T21378] netlink: 'syz.3.4330': attribute type 1 has an invalid length. [ 596.819451][T21374] tipc: Enabling of bearer rejected, already enabled [ 596.830244][T21382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4333'. [ 596.955592][ T5835] Bluetooth: hci0: link tx timeout [ 596.963529][ T5835] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 597.038929][T21390] netlink: 'syz.2.4336': attribute type 1 has an invalid length. [ 597.056707][T21395] netlink: 'syz.3.4338': attribute type 1 has an invalid length. [ 597.069133][T21395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.145715][T21404] netlink: 'syz.3.4338': attribute type 1 has an invalid length. [ 597.157302][T21404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.178029][T21399] bond4: (slave geneve3): Opening slave failed [ 597.184925][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4340'. [ 597.285874][T21407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.353034][T21417] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20001 [ 597.702708][T21437] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4348'. [ 598.041412][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4352'. [ 599.047342][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 599.160482][T21513] netlink: 'syz.3.4370': attribute type 1 has an invalid length. [ 599.197618][T21513] __nla_validate_parse: 1 callbacks suppressed [ 599.197643][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4370'. [ 599.390534][T21525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4375'. [ 599.508631][T21525] nbd0: detected capacity change from 0 to 127 [ 599.516584][T21527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'. [ 599.531690][ T5835] block nbd0: Receive control failed (result -104) [ 600.123973][T21558] xt_l2tp: unknown flags: 10 [ 600.250823][T21573] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.273279][T21573] bond5: (slave lo): Enslaving as a backup interface with an up link [ 600.284055][T21573] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 600.308881][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 600.352367][T21564] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 600.391266][T21564] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 600.399364][T21564] gretap1: entered promiscuous mode [ 600.405056][T21564] gretap1: entered allmulticast mode [ 600.544376][T21591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4390'. [ 600.612254][T21593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4394'. [ 600.702784][T21598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4395'. [ 600.762937][T21606] sctp: [Deprecated]: syz.4.4397 (pid 21606) Use of int in max_burst socket option deprecated. [ 600.762937][T21606] Use struct sctp_assoc_value instead [ 600.955774][T21612] xt_hashlimit: max too large, truncated to 1048576 [ 601.170193][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 601.222699][T21626] vlan2: entered allmulticast mode [ 601.307409][T21626] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 601.954237][T21673] netlink: 'syz.5.4411': attribute type 1 has an invalid length. [ 601.985114][T21678] vlan1: entered allmulticast mode [ 601.997344][T21678] veth0_vlan: entered allmulticast mode [ 602.084471][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4412'. [ 602.461701][T21685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4416'. [ 602.640594][T21685] hsr_slave_1 (unregistering): left promiscuous mode [ 602.903686][T21701] hsr_slave_0 (unregistering): left promiscuous mode [ 603.926791][T21735] syzkaller1: entered promiscuous mode [ 603.957194][T21735] syzkaller1: entered allmulticast mode [ 604.200565][T21754] netlink: 'syz.4.4439': attribute type 2 has an invalid length. [ 604.260517][T21759] __nla_validate_parse: 4 callbacks suppressed [ 604.260540][T21759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4440'. [ 604.389461][T21759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4440'. [ 604.433907][T21763] tipc: Resetting bearer [ 604.461006][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4442'. [ 604.479763][T21770] xt_ipcomp: unknown flags 1D [ 604.592665][T21777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4443'. [ 604.727224][T21782] bond4: option resend_igmp: invalid value (32767) [ 604.733848][T21782] bond4: option resend_igmp: allowed values 0 - 255 [ 604.743492][T21782] bond4 (unregistering): Released all slaves [ 604.779973][T21783] netlink: 'syz.4.4444': attribute type 11 has an invalid length. [ 604.902167][T21792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4447'. [ 605.023236][T21763] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.029670][T21763] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 605.076426][T21763] ------------[ cut here ]------------ [ 605.082439][T21763] refcount_t: underflow; use-after-free. [ 605.088286][T21763] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#0: syz.5.4438/21763 [ 605.098806][T21763] Modules linked in: [ 605.103264][T21763] CPU: 0 UID: 0 PID: 21763 Comm: syz.5.4438 Not tainted syzkaller #0 PREEMPT(full) [ 605.113680][T21763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.125058][T21763] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 605.131511][T21763] Code: d4 91 fe 0a 67 48 0f b9 3a eb 4a e8 c8 0c 33 fd 48 8d 3d d1 91 fe 0a 67 48 0f b9 3a eb 37 e8 b5 0c 33 fd 48 8d 3d ce 91 fe 0a <67> 48 0f b9 3a eb 24 e8 a2 0c 33 fd 48 8d 3d cb 91 fe 0a 67 48 0f [ 605.151454][T21763] RSP: 0018:ffffc9000dedf7b8 EFLAGS: 00010293 [ 605.158072][T21763] RAX: ffffffff848deb0b RBX: 0000000000000003 RCX: ffff888058315b80 [ 605.166205][T21763] RDX: 0000000000000000 RSI: ffffffff8e68e200 RDI: ffffffff8f8c7ce0 [ 605.174524][T21763] RBP: 0000000000000000 R08: ffff888058315b80 R09: 0000000000000005 [ 605.182765][T21763] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880564f5400 [ 605.191420][T21763] R13: ffff88805687e860 R14: ffff88805687e878 R15: dffffc0000000000 [ 605.200224][T21763] FS: 00007fbfacc9b6c0(0000) GS:ffff888125e21000(0000) knlGS:0000000000000000 [ 605.209431][T21763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.216185][T21763] CR2: 000000110c300d80 CR3: 0000000058392000 CR4: 00000000003526f0 [ 605.223102][T21801] netlink: 'syz.3.4449': attribute type 10 has an invalid length. [ 605.225328][T21763] Call Trace: [ 605.235902][T21763] [ 605.238967][T21763] klist_dec_and_del+0x3c7/0x3d0 [ 605.243994][T21763] klist_remove+0x1bd/0x340 [ 605.249017][T21763] ? __pfx_klist_children_put+0x10/0x10 [ 605.254731][T21763] ? __pfx_klist_remove+0x10/0x10 [ 605.259874][T21763] ? kobject_move+0x5a6/0x6e0 [ 605.264625][T21763] ? __pfx_kobject_move+0x10/0x10 [ 605.269844][T21763] ? do_raw_spin_unlock+0x122/0x240 [ 605.275119][T21763] ? get_device_parent+0x366/0x3a0 [ 605.280776][T21763] device_move+0x193/0x730 [ 605.285266][T21763] hci_conn_del_sysfs+0xb8/0x1a0 [ 605.290391][T21763] hci_conn_del+0xc36/0x1240 [ 605.295060][T21763] hci_conn_hash_flush+0x191/0x260 [ 605.300425][T21763] hci_dev_close_sync+0x821/0x1100 [ 605.305611][T21763] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 605.311683][T21763] hci_dev_do_close+0x30/0xc0 [ 605.316448][T21763] hci_rfkill_set_block+0x21d/0x330 [ 605.321789][T21763] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 605.327725][T21763] rfkill_set_block+0x1d2/0x440 [ 605.332921][T21763] rfkill_fop_write+0x44b/0x570 [ 605.338315][T21763] ? __pfx_rfkill_fop_write+0x10/0x10 [ 605.343770][T21763] ? __pfx_security_file_permission+0x10/0x10 [ 605.350199][T21763] ? rw_verify_area+0x255/0x4d0 [ 605.355134][T21763] ? __pfx_rfkill_fop_write+0x10/0x10 [ 605.360686][T21763] vfs_write+0x27e/0xb30 [ 605.364999][T21763] ? __pfx_vfs_write+0x10/0x10 [ 605.370309][T21763] ? __fget_files+0x2a/0x420 [ 605.374985][T21763] ? __fget_files+0x2a/0x420 [ 605.379740][T21763] ? __fget_files+0x3a0/0x420 [ 605.384491][T21763] ? __fget_files+0x2a/0x420 [ 605.389244][T21763] ksys_write+0x145/0x250 [ 605.393637][T21763] ? __pfx_ksys_write+0x10/0x10 [ 605.399168][T21763] do_syscall_64+0xec/0xf80 [ 605.403740][T21763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.410005][T21763] ? trace_irq_disable+0x37/0x100 [ 605.415098][T21763] ? clear_bhb_loop+0x60/0xb0 [ 605.419935][T21763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.425894][T21763] RIP: 0033:0x7fbfabd8f749 [ 605.430937][T21763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.450761][T21763] RSP: 002b:00007fbfacc9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 605.459712][T21763] RAX: ffffffffffffffda RBX: 00007fbfabfe6090 RCX: 00007fbfabd8f749 [ 605.467844][T21763] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 605.475880][T21763] RBP: 00007fbfabe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.484488][T21763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.490646][ T3528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.493131][T21763] R13: 00007fbfabfe6128 R14: 00007fbfabfe6090 R15: 00007ffe0f49b768 [ 605.509166][T21763] [ 605.512232][T21763] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 605.519565][T21763] CPU: 0 UID: 0 PID: 21763 Comm: syz.5.4438 Not tainted syzkaller #0 PREEMPT(full) [ 605.528975][T21763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.539060][T21763] Call Trace: [ 605.542371][T21763] [ 605.545336][T21763] vpanic+0x1e0/0x670 [ 605.549461][T21763] panic+0xb9/0xc0 [ 605.553235][T21763] ? __pfx_panic+0x10/0x10 [ 605.557700][T21763] __warn+0x317/0x4b0 [ 605.561723][T21763] ? refcount_warn_saturate+0xb2/0x110 [ 605.567219][T21763] ? refcount_warn_saturate+0xb2/0x110 [ 605.572825][T21763] __report_bug+0x288/0x500 [ 605.577364][T21763] ? __pfx_stack_trace_save+0x10/0x10 [ 605.582778][T21763] ? refcount_warn_saturate+0xb2/0x110 [ 605.588275][T21763] ? __pfx___report_bug+0x10/0x10 [ 605.593342][T21763] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 605.599644][T21763] ? __lock_acquire+0x146f/0x2cf0 [ 605.604713][T21763] report_bug_entry+0x19a/0x290 [ 605.609600][T21763] ? refcount_warn_saturate+0xb2/0x110 [ 605.615188][T21763] ? refcount_warn_saturate+0xb7/0x110 [ 605.620686][T21763] handle_bug+0xca/0x200 [ 605.624973][T21763] exc_invalid_op+0x1a/0x50 [ 605.629516][T21763] asm_exc_invalid_op+0x1a/0x20 [ 605.634404][T21763] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 605.640513][T21763] Code: d4 91 fe 0a 67 48 0f b9 3a eb 4a e8 c8 0c 33 fd 48 8d 3d d1 91 fe 0a 67 48 0f b9 3a eb 37 e8 b5 0c 33 fd 48 8d 3d ce 91 fe 0a <67> 48 0f b9 3a eb 24 e8 a2 0c 33 fd 48 8d 3d cb 91 fe 0a 67 48 0f [ 605.660259][T21763] RSP: 0018:ffffc9000dedf7b8 EFLAGS: 00010293 [ 605.666373][T21763] RAX: ffffffff848deb0b RBX: 0000000000000003 RCX: ffff888058315b80 [ 605.674373][T21763] RDX: 0000000000000000 RSI: ffffffff8e68e200 RDI: ffffffff8f8c7ce0 [ 605.682370][T21763] RBP: 0000000000000000 R08: ffff888058315b80 R09: 0000000000000005 [ 605.690366][T21763] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880564f5400 [ 605.698447][T21763] R13: ffff88805687e860 R14: ffff88805687e878 R15: dffffc0000000000 [ 605.706469][T21763] ? refcount_warn_saturate+0xab/0x110 [ 605.712002][T21763] ? refcount_warn_saturate+0xab/0x110 [ 605.717499][T21763] klist_dec_and_del+0x3c7/0x3d0 [ 605.722482][T21763] klist_remove+0x1bd/0x340 [ 605.727039][T21763] ? __pfx_klist_children_put+0x10/0x10 [ 605.732628][T21763] ? __pfx_klist_remove+0x10/0x10 [ 605.737696][T21763] ? kobject_move+0x5a6/0x6e0 [ 605.742410][T21763] ? __pfx_kobject_move+0x10/0x10 [ 605.747461][T21763] ? do_raw_spin_unlock+0x122/0x240 [ 605.752705][T21763] ? get_device_parent+0x366/0x3a0 [ 605.757849][T21763] device_move+0x193/0x730 [ 605.762306][T21763] hci_conn_del_sysfs+0xb8/0x1a0 [ 605.767365][T21763] hci_conn_del+0xc36/0x1240 [ 605.772026][T21763] hci_conn_hash_flush+0x191/0x260 [ 605.777224][T21763] hci_dev_close_sync+0x821/0x1100 [ 605.782422][T21763] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 605.788099][T21763] hci_dev_do_close+0x30/0xc0 [ 605.792830][T21763] hci_rfkill_set_block+0x21d/0x330 [ 605.798089][T21763] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 605.803868][T21763] rfkill_set_block+0x1d2/0x440 [ 605.808768][T21763] rfkill_fop_write+0x44b/0x570 [ 605.813654][T21763] ? __pfx_rfkill_fop_write+0x10/0x10 [ 605.819139][T21763] ? __pfx_security_file_permission+0x10/0x10 [ 605.825258][T21763] ? rw_verify_area+0x255/0x4d0 [ 605.830144][T21763] ? __pfx_rfkill_fop_write+0x10/0x10 [ 605.835553][T21763] vfs_write+0x27e/0xb30 [ 605.839927][T21763] ? __pfx_vfs_write+0x10/0x10 [ 605.844731][T21763] ? __fget_files+0x2a/0x420 [ 605.849356][T21763] ? __fget_files+0x2a/0x420 [ 605.854083][T21763] ? __fget_files+0x3a0/0x420 [ 605.858819][T21763] ? __fget_files+0x2a/0x420 [ 605.863820][T21763] ksys_write+0x145/0x250 [ 605.868188][T21763] ? __pfx_ksys_write+0x10/0x10 [ 605.873185][T21763] do_syscall_64+0xec/0xf80 [ 605.877740][T21763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.884097][T21763] ? trace_irq_disable+0x37/0x100 [ 605.889239][T21763] ? clear_bhb_loop+0x60/0xb0 [ 605.894055][T21763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.900344][T21763] RIP: 0033:0x7fbfabd8f749 [ 605.904795][T21763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.924872][T21763] RSP: 002b:00007fbfacc9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 605.933409][T21763] RAX: ffffffffffffffda RBX: 00007fbfabfe6090 RCX: 00007fbfabd8f749 [ 605.941410][T21763] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 605.949409][T21763] RBP: 00007fbfabe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.957404][T21763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.965411][T21763] R13: 00007fbfabfe6128 R14: 00007fbfabfe6090 R15: 00007ffe0f49b768 [ 605.973437][T21763] [ 605.977119][T21763] Kernel Offset: disabled [ 605.981464][T21763] Rebooting in 86400 seconds..