last executing test programs: 21m22.713364642s ago: executing program 2 (id=559): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f00000019c0)='}+{#],$}:\x00', 0xa) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) close(r1) 21m22.543961464s ago: executing program 2 (id=561): r0 = socket(0x80000000000000a, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4c000, &(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0xfa, 0x80, 0x7]}, &(0x7f00000002c0)=0x44) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) sendto$inet6(r0, &(0x7f00000000c0)="9ea7b88d80724d5c1f5390811dc1188da1e4de8ef443734ca55c9a43e569bf802c3cdf3c4ae562a53de6f54f128db6a8e8e4100b53266a6917f410439d38432005a93983716dbf51f7f4d68e615b0f33f7ef5c7e04fbc02c8bbc4b89a5368e51d294e6e9670b6d2e62e15f4fc334a20853e19e02485e51858c89e18246e45483b880dedcbb639f8a32fbe80fa0f1df600dcb85be12925ef61d8c8fc75312538b23f178896c3a9fab3b5a9e40455a6f847ffa3b4b27957380381a30e1961ab4ed2269db3ee47b054d9d00ed115ea2cd4da600c7c04f7bc270ad89584126e302e39de527c3fcc13cd863ee5fba", 0xec, 0x820, &(0x7f00000001c0)={0xa, 0x4e21, 0x401e7337, @private2, 0x101}, 0x1c) (async) unshare(0xc040480) (async) r2 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x0) (async) unshare(0xc040480) (async) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x38}}, 0x4002) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}], 0x1, 0x8000) (async) recvmsg(r6, 0x0, 0x0) poll(&(0x7f0000000040)=[{r6, 0x10}], 0x1, 0x3) (async) close(r0) 21m22.499758726s ago: executing program 2 (id=562): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x40010) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff"], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x4c050) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e00"], 0x80}}, 0x4814) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 21m22.353820012s ago: executing program 2 (id=565): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 21m22.144995414s ago: executing program 2 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x4c051}, 0x20044080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x11a111}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}]}]}, 0x38}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x61}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xb7bf}, @NL80211_ATTR_PMK={0x14, 0xfe, "742a313dc5b252d934df265bd150e41c"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x84}, 0x1, 0x0, 0x0, 0x2001}, 0x20000850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 21m21.371919721s ago: executing program 2 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10044) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x4b}, @nested={0x28, 0x1, 0x0, 0x1, [@nested={0x22, 0x10, 0x0, 0x1, [@generic="2fecb5d76df447f1be5ad45b24006f7babe531e6303e5561e1701cf17899"]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xffffffffffffff15}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000000000000000000000d000000000000000000000000000800000000000000006100"/82], 0x0, 0x52}, 0x20) 21m14.624369257s ago: executing program 4 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "be87069cbf6be2b9f4c5260f227a12ba9d4fe9cd23fd06a13ae4f00e23eff5d2", "d97eb8a59160ab762da61253ca0c2950c2dc3296dd6f0dbe55dc92e079390146", "86ae32e0522e835c68af76a258027c6198c17a19136785fb94e7be596e0ca343", "99bce87e902d4cc38f5b756cb3bca6fe41f31bbbc8fabfad9344482dedcb969b", "82298e791e7e2927f00d05c228fbccb2b63460072314314d7a08992b8facbeb9", "e6e403f391a97a5896f87106", 0x1c2d9085, 0x3ff, 0x0, 0x2d, 0x5}}) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000180001000000000000000000020000000000000300040000080005007f000001100016800c00018008000100", @ANYRES32, @ANYBLOB="35438dcd5cf0248e4147b54683719b3b6e9817a10af6d59c8e735ed9ea62e97c977eef31f67c17a97ca36d8ff81691f9e8d66a8ebd4e34f84dab8c116fc869a685403aea8d253b29857d0e818ee59c16b616ba51b7b8c53c5cbbe84add12bb0169569758e0b8581e981e6aece1f833406f2aa91b21daba71e90798e640ea8f93b73e5d8f5b5e1cd79fd0afa41769704e006ab0e68af58ed4a391203356eaf0f59ed4c4d2067f789a16a8ed3611f8ae18fc5bb535eb435ac4c10932a77d81ae478c9c58e63813bc56c5d53176c502694833a3157fbadbb2188840e764de79bd"], 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x694ef61e4f92d942) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 21m11.820851019s ago: executing program 4 (id=633): syz_emit_ethernet(0x23, &(0x7f0000000100)=ANY=[@ANYBLOB="2aaaaaaaaaaa00000000000086dd699eebf9001806fffe800000000000220000000000000039fe8000000000000000000000000000aa4e224e24c3af3c60add93fc7d3e8a5c7ec41e146a06a735a84e9b2eb5b18e9c976dac4bcf0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c2000190780ffd03030700"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010180000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080010000800000000000c0015"], 0xe0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={r2, r1, 0x8, 0x0, 0x0, 0x6, 0xfe, 0xb, 0x1004, 0x5, 0x6, 0x1, 'syz0\x00'}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt(r6, 0x84, 0x7d, &(0x7f0000000040)="0200000bcdb7f681", 0x8) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000001c0)={r2, 0x0, 0x101, "4ce0690020056916695cc32f93efefec82819c5a4103d8f1ae4d1dc44cda84adf6a417d10b498ae1f5cb22d7593d10472dfc5a3d934d1804feaad1b29a5eda7a451c8acfb6d91d0a97fea52d3cbfd53dced538e741c285704f93c9917171f29c"}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000007140100000000020000000015c7a38e00000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r8}, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e23, @multicast2}, @ethernet={0x6, @local}, @xdp={0x2c, 0x0, r8, 0x26}, 0x5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)='dvmrp0\x00', 0x9, 0x8, 0x401}) shutdown(r1, 0x1) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x307, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 21m10.916884187s ago: executing program 4 (id=645): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040), 0x4) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=@base={0xe, 0x0, 0x0, 0x202000, 0x841}, 0x50) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0xb8, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x601e, 0x708b}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x800}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0xb8}}, 0x0) 21m10.527881615s ago: executing program 4 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "670b1ed7eb6ddfd6a99d8f91dc075e8e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5306714faa60e503cb174547cac66f7e"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x757d64f033f3bd07, &(0x7f0000000980)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x40048a4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0) getpid() r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x8}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r6, 0xc003}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 21m10.392876065s ago: executing program 4 (id=653): r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x4, "0536e202"}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000001000c0a9d36edcda9a1e84b08877ccf00630"], 0x6c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 21m10.200739716s ago: executing program 4 (id=656): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001200)={'lo\x00', &(0x7f00000011c0)=@ethtool_cmd={0x4a, 0x9, 0xe21, 0x2, 0x9, 0x2, 0xa5, 0x0, 0x7, 0xfc, 0x2, 0xc, 0x5, 0x2, 0xf9, 0x2, [0xffffffff, 0x42]}}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x8804) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001200)={'lo\x00', &(0x7f00000011c0)=@ethtool_cmd={0x4a, 0x9, 0xe21, 0x2, 0x9, 0x2, 0xa5, 0x0, 0x7, 0xfc, 0x2, 0xc, 0x5, 0x2, 0xf9, 0x2, [0xffffffff, 0x42]}}) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x8804) (async) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (async) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) (async) 21m6.297684403s ago: executing program 32 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10044) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x4b}, @nested={0x28, 0x1, 0x0, 0x1, [@nested={0x22, 0x10, 0x0, 0x1, [@generic="2fecb5d76df447f1be5ad45b24006f7babe531e6303e5561e1701cf17899"]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xffffffffffffff15}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000000000000000000000d000000000000000000000000000800000000000000006100"/82], 0x0, 0x52}, 0x20) 20m55.098228232s ago: executing program 33 (id=656): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001200)={'lo\x00', &(0x7f00000011c0)=@ethtool_cmd={0x4a, 0x9, 0xe21, 0x2, 0x9, 0x2, 0xa5, 0x0, 0x7, 0xfc, 0x2, 0xc, 0x5, 0x2, 0xf9, 0x2, [0xffffffff, 0x42]}}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x8804) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001200)={'lo\x00', &(0x7f00000011c0)=@ethtool_cmd={0x4a, 0x9, 0xe21, 0x2, 0x9, 0x2, 0xa5, 0x0, 0x7, 0xfc, 0x2, 0xc, 0x5, 0x2, 0xf9, 0x2, [0xffffffff, 0x42]}}) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x8804) (async) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (async) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) (async) 2.067616692s ago: executing program 6 (id=11026): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) (async) 1.803949707s ago: executing program 5 (id=11029): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd700006dcdf250100000008000100", @ANYRES32=r4, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=r2], 0x60}, 0x1, 0x400000000000000}, 0x0) sendmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f0000000100)=@xdp={0x2c, 0x3, r4, 0x16}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="91cf98ab835eca81b1496f3071c678b2b44555e7bbe0ffb781e2d522462d3c4ecbc924708afc83a3151c1c56b5e58ad1d93bd1ea", 0x34}, {&(0x7f0000000240)="e96d59b59a06bbf583d2420d", 0xc}], 0x2, &(0x7f0000000300)=[{0xb8, 0x6, 0x6, "408d7294ee2a4a68262e5c7b467cf108863466d4c9d3a5430f821d838c418ded284c82069a1860b8ec149712c1fc46bf2089a4977a5e3045e3cdba664f1293937a7d0e6f71b6b9838d292d75309953d4c789609f317e9a9424cce9f76170e5eff293bd70948f718c454bd9e53673f67c2e3d15c6c34c940a6004dac86231686cb7066f7313d5da9daf6fbcea9cd0d983ea8596900e51ce25b23a2c00596137644a90265a"}], 0xb8}}, {{&(0x7f00000003c0)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x1000}], 0x1, &(0x7f0000001600)=[{0x88, 0x1, 0xfffffffc, "382b6f86beb914549fb691e2ed736135b2c8c053c7856dcaf1f3c05afb9bd2300401345230b8a81b438ea8eca2da0dcc8e2bb22e63f0b33cb5a04b34eaf0755d4adb9486a99a82569f8b9abd723dabd1c43bca2de031e07c50a5f0e04e6bf5cacff3c9088fd7b23cbeb81e8aea8ab40fe68165da9b"}, {0x108, 0xff, 0x2, "418f646ef09af4bc9de8760bc8057d19fb9b1163986c989ef1043f18134a9971b5e0982f863b54fa06cc2c058c028806c77e4c440f1d4edb165fd67c863b89fa1bf677715605a552b0b505b79624f5409d4b3a9220a085ffa35f987f1b330c45f902537983502080aad3c04523f585618657ac06c19847d99e64aa89d8204b8a5959ab80d5b12a1afb177cd9800041510e951e93b60ab48f913ce238e2440bb6211aaa366ffd7cf83079336c423007c03acbea6b04dbb3584d4e7491693c8177842feea69685e2de5a9c30acd774ffd8265a24267b4d644ba6c2704307865dbe4e50f6a1807c18db800281b69bc053940a90a754"}], 0x190}}], 0x2, 0x20040800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x302, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x5c}}, 0x0) 1.803710422s ago: executing program 6 (id=11030): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 1.626854663s ago: executing program 5 (id=11033): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x67}, 0x64) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x2f0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x32fe3cf8, 0x0, 0x11}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r9 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x20040800) 1.48212654s ago: executing program 6 (id=11035): syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0xffffffff, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80000) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) poll(&(0x7f00000000c0)=[{r0, 0x1084}, {}, {r2, 0x80e0}, {r3, 0x1010}, {r4, 0x2000}, {r5, 0x27a0}, {r6, 0x2001}], 0x7, 0x1) 1.388781794s ago: executing program 3 (id=11036): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x4, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x4, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) (async) 1.352691496s ago: executing program 6 (id=11037): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e6", 0x3}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a43", 0x45}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000440)}, 0x43) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.327700366s ago: executing program 5 (id=11038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf252600030008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf252600030008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 1.240867523s ago: executing program 1 (id=11039): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x7, &(0x7f0000000740)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.240661732s ago: executing program 3 (id=11040): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 1.195677437s ago: executing program 0 (id=11041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x805, 0x0) socket$inet6(0xa, 0x3, 0x7) (async) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x380000, @mcast1, 0x100}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x380000, @mcast1, 0x100}, 0x1c) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) (async) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.11927833s ago: executing program 6 (id=11042): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000021007fc226bd700031a3fcdbdf2502142000050000081400000008000200ffffffff08000d00f762000008000200e0000002"], 0x40}}, 0x8002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x0, 'cpu'}, {0x2d, 'net'}, {0x15, 'net'}, {0x2b, 'rlimit'}, {0x2d, 'net'}, {0x0, 'memory'}]}, 0x24) 1.044607917s ago: executing program 5 (id=11043): epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000400), 0xffffffffffffff71) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x903, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365bb884260dd402b5f2bcd6b53868bd8a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3dc}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x0, 0x1, 0x80}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000067c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x13, r1, 0xb8cbd000) 1.006504537s ago: executing program 3 (id=11044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000280)}, &(0x7f0000002100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f80)={0x34, r9, 0x219, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x401}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r7, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "c4250260"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r11, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r11, 0x6, 0x5, 0x0, &(0x7f00000009c0)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r3, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x110}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 942.130991ms ago: executing program 0 (id=11045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r1, &(0x7f0000000140)='\x00', 0x0, &(0x7f0000000180)={@_ha_fsid={[0x9aad, 0x5]}, {0x3ff, 0x5, 0xff}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0xd}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @multicast2}, &(0x7f0000000400)=0xc) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x4c, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x94}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x178045c4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x4c}}, 0x20000003) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000023c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x4044804) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 852.517737ms ago: executing program 1 (id=11046): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100)=0x4f, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x60, r4, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x2}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001280e8135925060b12d608a1cb40dd12434ff36a4e3265e9f1cd70dd697f1279111372e550373973ae7d6bd40bba5801a065f3d4bb10ebb616aa3003c1fa1a67d4e07d575007d244e516a978448ff6274fce9fc2b052a2123a189e6d25c87af639e96ab5a86809d278cec8035be08f8efb658550110dd85dcf1ff1edb1c0ae61a3e6b4595236af06da7fe37c7f59413fdb23c86d6d3bcd558360f25a6327222a3cd3d086f25838f7775795cafc560cd4b304e32e079ea58558d0106b944736002897dbccdb287b"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x7f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x200000d5) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r11) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f00000010c0)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0xc01, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) (async, rerun: 64) r15 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r15, &(0x7f0000000600)={0x0, 0xd, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) 847.654589ms ago: executing program 6 (id=11047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x127, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x119, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}}, @redirect={0x5, 0x3, 0x0, @private=0xa010100, {0x3f, 0x4, 0x3, 0x7, 0x3ff, 0x64, 0x1, 0x3, 0x4, 0x1ff, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@lsrr={0x83, 0xf, 0x21, [@rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xeb, [@loopback, @multicast2, @multicast2, @empty]}, @rr={0x7, 0x3, 0x6c}, @rr={0x7, 0x1b, 0x30, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x9d, 0x3, 0x6, [{@loopback, 0x4}, {@multicast2, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x5f, 0x3, 0x7, [{@multicast2, 0x80}, {@empty, 0x4}]}, @cipso={0x86, 0x19, 0x2, [{0x1, 0x9, "6e31e860890170"}, {0x7, 0x3, '/'}, {0x5, 0x7, "892f598267"}]}, @cipso={0x86, 0x52, 0x2, [{0x6, 0x5, "558834"}, {0x6, 0xe, "726811836cace984a1532ce4"}, {0x6, 0x10, "f4e88f81175be37e10af02dd5c15"}, {0x5, 0xf, "6e95f1c8becb4977a112367f81"}, {0x5, 0xd, "d419c5d374787dc1efc4fb"}, {0x0, 0xd, "38fcd35152c224261e07c3"}]}, @lsrr={0x83, 0xb, 0xff, [@private=0xa010101, @private=0xa010102]}]}}, 'I'}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r4, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r8, &(0x7f00000002c0)={[{0x2d, 'net_prio'}, {0x2d, 'cpu'}]}, 0xf) ioctl$sock_inet_tcp_SIOCINQ(r8, 0xff02, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r9, 0x111, 0x3, 0x0, 0x4) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16=r8], 0x50}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, '\"\x00'}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02090000020000000000000000000000eb720cf8a00e60a980689fe34175772f269da50cb69caff563a7a4afda03ba42b707e8e4759da0d2cdb3df1acede4381763f2971bb89e5937c9ea2874e26e555cafa6ce9b4784374a10c1c0996c9b3abd654d8a42bb623c9df77e6e630c9623c04c2084315dbc8d404705f7064b2675f8e555360f3ee96cde13972fa495861f9ac3f76ed1eaaa86e96b1a183c1d8dcc90b093a3615471bc71b6bf92c0eb76b6c2f9f4334c9ebbc9609acd804d41da8ea4df24b9fa6"], 0x10}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a050000000000000000000300000308000240000000050910010073797a300000000028000000000a010400000000000000000300000a0900010073797a30000000000800024000000007140000001000010000000000000000000184c9b97a4177547f7b3e2700000a"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) 778.503647ms ago: executing program 5 (id=11048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000002c0)=0x6, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe41) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd0442ec66071230398b6e7000fbdbdf25140000000c000600010000000102f6ff08001d00", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) unshare(0x20000400) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x3a, 0x1, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x1c, 0x0, 0x0, 0xfffffe01}, {0x6}]}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 700.970281ms ago: executing program 0 (id=11049): unshare(0x20000400) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="760a00000000000061112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r1}, 0x18) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfd3fb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 520.343344ms ago: executing program 0 (id=11050): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010004}, 0x44000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000000)=0x5) 520.011613ms ago: executing program 3 (id=11051): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0), 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000007480)=[{{&(0x7f00000027c0)={0xa, 0x4e20, 0xffff, @mcast2, 0xc}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0) 516.702486ms ago: executing program 5 (id=11052): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000180)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000002780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x2162, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffe72, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x8045}, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmmsg(r1, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f00000053c0)}}, {{&(0x7f0000005440)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x8, 0x8, "dfe34a40e176874d358e508a5f538a0def1e71f2993674ec026185c72d2b13dffc4bc1ccf732d2a285819debd4bc0d0258a869d66f99c475731a61d340633a", 0x2f}, 0x80, &(0x7f0000005800)=[{&(0x7f00000054c0)}, {&(0x7f0000005500)="3b27566d45965395d32eec3ae77bc95e4abf863a312bbff16a780fdcebff2571845c79af5d6f044b177f283a2a736dc0d64c417a05c14db4db4a29ff588f7febbe7bccfaef16a40d51d60f550c40b444a455bd824090682ecea3f3bf25344db612217c798a4e59a5b681a42aea9959da4bd02fc869db010f11523385cef91bfaecf2ef3d26a862b3c085fefcf8dea69355ba5872f8576a3f89e7bfe3cb23de2000b3444308bbc35021a3c896d3f74bdb9a32b8", 0xb3}, {&(0x7f00000055c0)="ac4c3775eadbbab087b6ef755c8e578cbb340b644af712598c72e2f609116172bf3c9b35ba07cee47bd7c9e4b1ce3f10e5600954e2dd", 0x36}, {&(0x7f0000005600)="407dc8dd237197b067d2e7d24d75d8e9d632a34263b34f173624e062294f154a1013c9bf6c20f9d40b7bdb02483e0fbda47512179e19b03ccddb028759258812fab886512c3e1e828fbad0ff32e58d086b17f42b2ebd7f344bff15d5e201b7b816bf79c19fdb9898bbf048a430374cc1f3d78c5a3ed65cdc6c61f23322fff58be4dc4afe4882f9886dfe6eee109e709cdde5e2d406fedd8a15d087dea0e550baa3cf46bd690f2611ca8f4eab8de4749852547e62c32efc72b9276a959656d2c15de87edae021814c55382442e7e47d29861742187c3c3ddf2a0d075b67ff3515333aedd66dd0ce251befbd48aa69de335139", 0xf2}, {&(0x7f0000005700)="d6d13d4fc4f170513f5e262c9f7ca3ed81d9868579f537b58c407f8e93912e755e5c697f77572c5843e4b4f4b516ed82442ad6656bb330ec89a29f58ff323bb205566dc10ddd61ca756a229ca1c1d3e3964b83de525c9f732de295155360f0279cd8e3f803d531d27348c832949c6f94554ab4f7c147642fd0546af33e15e607362f2e6be9dd828cab01aa0bb25ec68b69954d47e470cf1e212567104156fa5bb786459fec26a919830b307329275cdac74b92655ff9873630643b781e9c40ad80b43363a19ea4b7ce99b83ca712", 0xce}], 0x5, &(0x7f0000005880)=[{0x98, 0x84, 0x8, "d47f64f8652e7a2703d6dd4e2c813d577556470a82573e4cf17d418c29611b3002262a2afd153382e6a1edb940890f71890c91f641264110c63684d43c751d7e27e0e4bfaca84429a829418b0badd81c19c14ba4d9ac0aa9a1f56232e608ca9aa36a12a5450eff5ee2c9b6ab43461515824f09439d24c49309f6c7e430aef141eb81538f13f37bab"}, {0xf0, 0x1, 0x8, "308361bf4c3fb5dfd622a7ab5d1ffbd6d7ff23e46d80d8d82371b3441b657ebdfe8207000a3aaa47ec25c09b68a6201dc9fce03ca66228496ccaf5a7341f1f979282387a3a160070ec598ea68b77476754551a59fc97917b35dc88eee87bfbf1df3b1c45186f23ac46cfdc038f8c90c90150d7ff30048c34903e28b15787651f7dad7a5fb7e82671c4eded9d1e1b3d582b4d0960e1531d785be2727a1bbe0048e3933a2427fe11354c7a9eb52162c6076e54243d98fb3731cc1a2a0f367b66a6bac4e12ef49a62cc6b296f88d65e335bdac7e0178b35b6a850ca321c1e"}], 0x188}}], 0x2, 0x0) socket$key(0xf, 0x3, 0x2) 375.316026ms ago: executing program 0 (id=11053): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, 0x0, &(0x7f0000000340)=0x9e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0xc, 0x36c, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 231.983988ms ago: executing program 1 (id=11054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 229.217694ms ago: executing program 0 (id=11055): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x241, 0x0) socket$kcm(0x29, 0x7, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="0d000500010001", 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 168.707823ms ago: executing program 3 (id=11056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3000000000001c0000060a010400000000000000000100000008000b4000000000d81b0480541701800e000100696d6d65646961746500000040170280080001400000001318020280da000100eacc8759c940812b39f267d0d50d0499c80ced83ec4e58ded054b8c4a69ce3e9988eede7727e27e3dbff7e874cb1b05d587c253d495a053c719492db971f200e5bcf9a3bc095a26b61c9223f919be897ec511a8f508c6a5c8b12302d7734616c27da2316dd53a73312d3b378520796a6e349b06f99806394ad060919c8e6ec0702663f3c0ab0d9ed5f5944b8c19374ca21c2d2af8a899321e4549923584914221e95e35a16e33def4b5fbd5a78387388356f070ebdf992da0d227e98833e7d1ac7b846b257489164571ad67de3a54982f48f6538870e00002800028008000180fffffffb080003400000001f08000340000000800900020073797a32000000005400028008000180ffffffff0900020073797a31000000000900020073797a31000000000800034000000004080003400000000208000340000003160900020073797a30000000000900020073797a3200000000260001008d8fbb0bd19126e91fa6bb081a555f4f093b22335ea65b5e6443a42bc7772c627563000094000100a601cb73261b6882237a065ff363762d4e1f15598e444ff364754c34b4528543748c9b79c430aa603175a7e3b5b9d190a2c2c4188b7c26120148c094d265a74365a97767ab9cbb31397039ab3f063f96a0d751f68f1af1a4f74a3f5d1cd4c3f29834815f07d702f399b124dfd3b860402c6998b9ad7d6cab6628759fc92df931a9e7e7bb6acbcb7ef909c15a79d6479a0800014000000000bc1102806000010065fe9bb27826716fe37215876f3fdda74da914f0fe731980c3a4996a301da00f85e6a0d1e57217beef5c385d81f53cda9f47f7a3be67cf71ac8f58d16c169cfd9eba864d0d4d18181c1553667bc0f38b5d57f6db4617cf5aaee197826b000100f04fae3424364745390144ae9195c1d849951647176fbdd72c494fc2c8de4c3944c44516d2102eb25df75495a12cc963f6a65ea08d592069903d9ee593f218fb2d283c99fd01863a445de39926371b52a915a28c9fb94599947edf821d946b401a8b5693727aad002400028008000340000000060900020073797a32000000000900020073797a32000000000400028024000100a1d1361784bb6ca44fd5d07d33e06b7c0400466cd48ee5496c948e573baa0d077c0001007cec8b0057578ebd97c694cb01a31ef11e6f6f569023457553731f08213dcee163ae01b55a7a5fd908b8b74bfb5976c6b37dc1869e7383660478b5ff689033897f8792462855aef9e6222e794a93f8e9e1f6908c646c7b0bc78eb6bfa6fd829658a286d8b211229ec22252f93aa88bb87d05a35cf8e88d2c100002800900020073797a3200000000040002800c000280080003400080100004100100a50dccc20bdba1839e7e75a6bd58dac9063761500001c99a5a3edac0be788c5e3a0bd46472e7f5b6e49c7d9a9bec4b199c37e72b6e37497d9a7ff6911f9e588b3f5973c3bb9d22d90fede8ff634ed65fd5e4c0aa24a8f81e7ffc690221569c425c0e98c4c76a0b2fcc283328eee6e7fbb9348622add94e22229754b31f66b336bf5fa31b7d628a9024383408755f9d90e9050cb637524ca1b83f22b2009944656cec2b6696b528571e10fd82b0526b9dd7c128953863376e0bb9931b085db2572561e67b227763010f1f41dd5eb52b076900354c6c39279e0ee4d9d42f002b923518d13a0e5c092ce532d9f4b74fa8039549eaee57f6db389b0fa08604caa4edadef0cc3825133d26a4db36770cc2384822cb67efcb1fda960bb9b30b43f0f480bb38f9695d244153d411d407180c42f0b7edbc2a67dc0127442be628e5923eb9ede3579666fe9054afae87fc70928a7f65acf020628ef352f0e536a73d0cad686607d8958ffa02caa38305c0d6c5757569479c7d24f2f77828d029c6caf99bd9ebe723187521c9a90860a71bcb2756eda673f05138112c46cf01452d493ca5c7169fdd9b072f249f465e06e98c4e14fe87eebe28712ef7ff84c6501cb708ad2a8a256a2a6996bd449a62e6f08ec4338be46d84c129fb555ffb8857a9662098cb0123f82cb348dff614cb0d5fd9bd88b0052981dae9375edc65939f6a372dd26b9fd6da8e7aa60d2b77870a388477575683e4b071f8df923b38dadafff09eae68dbad4932d70a9a76cff3bb7c2deb3efe1c311ab212380cc51986cd9eacad9ef77b0e3d7212fdacc25707ac72518ee9b9ac136fb3297fb3197ef04e489aef2cdb5c21ddadea7ac8eb4a5b411c24e9ad00de7b07e8b2299fa6b85f8eed59aca91622bf9ebafc8051413ff279e88b8c835f486e9e169d0d0b71a86182a0f153db5c74e2bfba3355b21b155ef77a1aaf39f4031132281a991"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket(0x1, 0x80802, 0x0) (async) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000840), &(0x7f0000000880)=0x4) (async) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000840), &(0x7f0000000880)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="050003"], 0x28}}, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r11, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r13}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x38}}], 0x2, 0x801) r14 = getpid() sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_NEWNSID={0x3c, 0x58, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r10}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8, 0x2, r13}, @NETNSA_PID={0x8, 0x2, r14}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 154.869964ms ago: executing program 1 (id=11057): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)=0x4, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000002c0)=0xfa0, 0xfee3) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0xffffffffffffff61) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @remote, 0x83e}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) sendmmsg$inet6(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)="56dd7cdaca9c0a493ae27f174389719c1f8a0648c697ba6c4e22845d980b3e1c697e9e6b7af5c14948decddd237a0d0d69041dd0b768252319e43c9abcb4d917e6323731bdeecad3e7d9973262a1dfbfba7da50ecc", 0x55}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000900)={0xa, 0x4e21, 0x6, @empty, 0x7}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000940)="ffd55b168ef758ce3ae31c16da209997f43f5f38fb7192549d5b30730e66b5a8a4d0a933cdb93e08e543d29d7487fd390afff1453e93b9e46e3069cc202124992a7685b7e2a326a519bbb96583d311caeba7082ab0e08ca6571720ade5233049d2041c73585e3d653ff528f67afc5b31e7d37dc4e45e534ee22cf51d46c9c85b528f8e5f29dabcf49a19c8af44073031fc8dd36e9273789df9dfa9c1189e60b626fa58f851fed6f75c4caef2ed886ab67ec46c55fac01ba0679d9a0b", 0xbc}], 0x1, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0xe0}}, {{0x0, 0x0, &(0x7f00000022c0)}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400df2500000000000000345389d00000000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB="08000400ff010000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) (async) recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f0000001f40)=""/190, 0xbe}, {&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/83, 0x53}, {&(0x7f0000001940)=""/128, 0x80}], 0x7, &(0x7f0000001a40)=""/89, 0x59}, 0x41000}, {{&(0x7f0000001c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001b40)=""/80, 0x50}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f0000001e80)=""/189, 0xbd}, {&(0x7f0000002f00)=""/4099, 0x1003}, {&(0x7f0000002d00)=""/85, 0x55}], 0x5, &(0x7f0000001cc0)=""/120, 0x78}, 0xf}], 0x2, 0x45833af92e4b39df, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000140)={0x2, 0x0, 0x3}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) 31.601639ms ago: executing program 1 (id=11058): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3f3cd1ed, "0c9e260476bc9108eb5dd497749068b9"}}}]}, 0x48}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00", @ANYRESDEC], 0xc0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xd, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r12 = socket(0x11, 0x3, 0x0) setsockopt(r12, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r12, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r14, 0x6}, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000000600)="60a75dc565ef116aa4125804cdd8a174caf38d7adc18f691e4e8be68cafee956a3dcf20892f18b0c208b13fe821c0d246e12adbd7527847a9f4ec9c95056014a", 0x40}], 0x2}, 0x40001) sendmmsg$inet6(r1, &(0x7f0000006800)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000640)="c863b1079dccd4e78e59b6d41ecad6149837ffc7418236d295f111cd201ad565c1587e96c6700ffe241eb99fd1af3003bc2f062decdb0287a7c4fd229cbcb05974038659", 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="85116b7c5c", 0x5}, {0x0}], 0x2}}], 0x3, 0x4048800) 12.660181ms ago: executing program 3 (id=11059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'xfrm0\x00'}) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4004040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7ff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x10800}, 0x20004000) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xac, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:hald_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) syz_emit_ethernet(0xa6, &(0x7f0000000b00)={@empty, @random="82f578d841ca", @void, {@x25={0x805, {0x1, 0x40, 0xfd, "ff5a274664d9c143f4cfc24a36cb6901f95b17d26ba8506b334b36e8c21d5d238ddf8f2877b5fb12fe5f0fd05d4b3a615e14d9e89a1e9f7bd7f4cbb1367e4c3755f5919fd23c32f1d0e85fc9b010544fd5f17ddf5cd93bb8e0d7de7ac3f08875c4bbcbddc1452e562cc511a6cf9540346d4d0135348888fb226561ec109e3a0d4e2a43bfb24de514991485303eca0d71337ae68fa7"}}}}, &(0x7f0000000bc0)={0x0, 0x4, [0x7d5, 0xabb, 0x2e2, 0x20e]}) (async) r10 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000c00)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000c40)=0x1c, 0x80800) shutdown(r10, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x140e, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x40050) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r11, 0x5201) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r12, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0x7, &(0x7f0000000ec0)={0x3, 0x4, 0xffff, 0xd}, 0x10) 0s ago: executing program 1 (id=11060): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x1, @bcast, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9acf, 0x7, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x1, @bcast, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9acf, 0x7, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) (async) kernel console output (not intermixed with test programs): figuration, please check. [ 1168.109390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1168.117523][ C1] lec:lec_tx_timeout: lec0 [ 1168.123012][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1168.207752][ T8721] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.219387][ T8721] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.231733][ T8721] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1168.259048][ T5276] hsr_slave_0: left promiscuous mode [ 1168.267516][ T5276] hsr_slave_1: left promiscuous mode [ 1168.274701][ T5276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.285509][ T5276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.294134][ T5276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.316791][ T5276] veth1_vlan: left allmulticast mode [ 1168.322903][ T5276] veth1_macvtap: left promiscuous mode [ 1168.328908][ T5276] veth0_macvtap: left promiscuous mode [ 1168.335047][ T5276] veth1_vlan: left promiscuous mode [ 1168.340643][ T5276] veth0_vlan: left promiscuous mode [ 1168.894142][ T8752] netlink: 'syz.6.9120': attribute type 12 has an invalid length. [ 1168.982700][ T8721] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.021716][ T8721] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.031306][ T8763] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9123'. [ 1169.039255][ T8721] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1169.301286][ T8763] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9123'. [ 1169.351144][ T8774] bond10: Removing last arp target with arp_interval on [ 1169.804362][ T8797] netlink: 'syz.6.9127': attribute type 1 has an invalid length. [ 1169.950675][ T5834] block nbd1: Receive control failed (result -32) [ 1169.987485][ T5276] IPVS: stop unused estimator thread 0... [ 1170.225344][ T30] audit: type=1107 audit(1776679310.639:13): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1170.304033][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.323494][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1170.358929][ T8818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9129'. [ 1170.380874][ T12] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1170.651856][T23962] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.663506][T23962] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1170.672699][T23962] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1170.762785][T23962] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.791367][T23962] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1170.809358][T23962] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1170.885383][T23962] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.936615][T23962] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1170.974236][T23962] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1171.045758][ T8810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1171.071320][ T8840] netlink: 'syz.6.9133': attribute type 2 has an invalid length. [ 1171.192995][ T8497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1171.217950][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1171.250172][ T8497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1171.280454][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1171.294654][ T8497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1171.312550][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.339250][ T8497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1171.373028][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1171.454272][ T8863] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1171.715691][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.771446][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.812634][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.819894][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.033532][ T8893] netlink: 'syz.6.9144': attribute type 1 has an invalid length. [ 1172.070734][ T8893] netlink: 'syz.6.9144': attribute type 3 has an invalid length. [ 1172.090014][ T8893] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9144'. [ 1172.236757][T25143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.244031][T25143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.447286][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9146'. [ 1173.139350][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1173.147497][ C1] lec:lec_tx_timeout: lec0 [ 1173.152927][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1173.410711][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.435452][ T8958] bridge_slave_1: left allmulticast mode [ 1173.456205][ T8958] bridge_slave_1: left promiscuous mode [ 1173.469711][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.506240][ T8958] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1173.579556][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.644804][ T8962] tipc: Enabled bearer , priority 0 [ 1173.747511][ T8962] syzkaller0: entered promiscuous mode [ 1173.764049][ T8962] syzkaller0: entered allmulticast mode [ 1173.782674][ T8962] tipc: Resetting bearer [ 1173.816421][ T8965] pimreg: entered allmulticast mode [ 1173.883850][ T8962] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9157'. [ 1173.996133][ T8497] veth0_vlan: entered promiscuous mode [ 1174.032283][ T8960] tipc: Resetting bearer [ 1177.505983][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1178.172400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1178.180484][ C1] lec:lec_tx_timeout: lec0 [ 1178.185566][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1178.565146][ T8960] tipc: Disabling bearer [ 1178.599242][ T8994] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1178.644038][ T8497] veth1_vlan: entered promiscuous mode [ 1178.799947][ T8497] veth0_macvtap: entered promiscuous mode [ 1178.822179][ T9011] syzkaller0: entered promiscuous mode [ 1178.836746][ T9011] syzkaller0: entered allmulticast mode [ 1178.859629][ T8497] veth1_macvtap: entered promiscuous mode [ 1179.052859][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.101999][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.135926][T25143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.181371][T25143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.206633][T25143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.225286][T25143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.229544][ T9023] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9172'. [ 1179.257823][ T9025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.269762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.304927][ T9023] vlan1: entered allmulticast mode [ 1179.320367][ T9023] gretap0: entered allmulticast mode [ 1179.506399][ T9030] bridge0: port 2(wlan0) entered blocking state [ 1179.524197][ T9030] bridge0: port 2(wlan0) entered disabled state [ 1179.531512][ T9030] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 1179.541242][ T9030] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 1179.575593][ T9010] bridge1: entered promiscuous mode [ 1179.590935][ T9010] bridge1: entered allmulticast mode [ 1179.606242][ T9033] netlink: 'syz.6.9175': attribute type 12 has an invalid length. [ 1179.635254][T25141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.663713][T25141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.766543][T25143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.785462][T25143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.156033][ T9062] bond1: entered allmulticast mode [ 1180.309420][ T9076] netlink: 'syz.5.9183': attribute type 1 has an invalid length. [ 1180.319260][ T9073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1180.346903][ T9076] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1181.545464][ T9090] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9187'. [ 1182.935011][ T9044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1182.953343][ T9084] netlink: 'syz.0.9185': attribute type 1 has an invalid length. [ 1182.984554][ T9085] netlink: 'syz.0.9185': attribute type 1 has an invalid length. [ 1183.174797][ T9095] netlink: 'syz.1.9188': attribute type 29 has an invalid length. [ 1183.199092][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1183.207245][ C1] lec:lec_tx_timeout: lec0 [ 1183.212548][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9192'. [ 1183.214648][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1183.246728][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9192'. [ 1183.275860][ T9095] netlink: 'syz.1.9188': attribute type 29 has an invalid length. [ 1183.296695][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9192'. [ 1183.313808][ T9095] netlink: 264 bytes leftover after parsing attributes in process `syz.1.9188'. [ 1183.522763][ T9120] netlink: 'syz.3.9193': attribute type 1 has an invalid length. [ 1183.619421][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1183.629655][ T9120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1183.667046][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1183.796203][ T9131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9198'. [ 1184.094840][ T9139] netlink: 'syz.6.9202': attribute type 10 has an invalid length. [ 1184.115567][ T9139] batadv0: left allmulticast mode [ 1184.125269][ T9139] batadv0: left promiscuous mode [ 1184.133371][ T9139] bridge0: port 3(batadv0) entered disabled state [ 1184.158212][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.173600][ T9139] batadv0: entered promiscuous mode [ 1184.180999][ T9139] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1184.230015][ T9146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1184.273583][ T9144] __nla_validate_parse: 1 callbacks suppressed [ 1184.273606][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9204'. [ 1184.314803][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9204'. [ 1184.345271][ T9144] mac80211_hwsim hwsim73 wlan0 (unregistering): left allmulticast mode [ 1184.364691][ T9144] mac80211_hwsim hwsim73 wlan0 (unregistering): left promiscuous mode [ 1184.390798][ T9158] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9208'. [ 1184.407294][ T9144] bridge0: port 2(wlan0) entered disabled state [ 1184.494016][ T9161] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1184.621648][ T9173] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1184.862963][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9216'. [ 1184.885462][ T9185] erspan0: entered promiscuous mode [ 1185.043530][ T9190] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1185.419725][ T9210] netlink: 196 bytes leftover after parsing attributes in process `syz.6.9225'. [ 1185.456404][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9226'. [ 1186.678220][ T9290] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9247'. [ 1186.765435][ T9290] bond9 (unregistering): Released all slaves [ 1186.840375][ T9298] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9250'. [ 1187.368262][ T9319] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9254'. [ 1187.527561][ T9330] netlink: 'syz.3.9256': attribute type 1 has an invalid length. [ 1187.551732][ T9330] netlink: 'syz.3.9256': attribute type 7 has an invalid length. [ 1187.574721][ T9330] netlink: 'syz.3.9256': attribute type 8 has an invalid length. [ 1187.596298][ T9330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9256'. [ 1188.049592][ T5276] wlan1: Trigger new scan to find an IBSS to join [ 1188.191395][ T9364] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1188.230105][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1188.238319][ C1] lec:lec_tx_timeout: lec0 [ 1188.243887][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1188.507813][ T9370] netlink: 'syz.6.9269': attribute type 5 has an invalid length. [ 1188.629595][ T9385] netlink: 'syz.1.9273': attribute type 32 has an invalid length. [ 1188.723706][ T9385] bond1: option coupled_control: invalid value (192) [ 1188.734879][ T9385] bond1 (unregistering): Released all slaves [ 1188.775761][ T9382] syzkaller1: entered promiscuous mode [ 1188.781970][ T9382] syzkaller1: entered allmulticast mode [ 1189.143657][ T9418] netlink: 'syz.1.9279': attribute type 10 has an invalid length. [ 1189.264707][ T9418] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1189.366323][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.674751][ T9438] netlink: 'syz.3.9287': attribute type 83 has an invalid length. [ 1189.759793][ T9441] __nla_validate_parse: 9 callbacks suppressed [ 1189.759818][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9288'. [ 1190.146300][ T9464] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9294'. [ 1190.401125][ T9480] netlink: 'syz.5.9298': attribute type 12 has an invalid length. [ 1190.410270][ T9480] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9298'. [ 1190.430165][ T9480] pim6reg527: entered allmulticast mode [ 1190.444709][ T9480] netlink: 92 bytes leftover after parsing attributes in process `syz.5.9298'. [ 1190.721250][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9304'. [ 1190.765899][ T9498] netlink: 'syz.6.9304': attribute type 1 has an invalid length. [ 1190.870099][ T9500] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 1190.883729][ T9500] bond0 (unregistering): Released all slaves [ 1190.968930][ T9504] bond11: (slave ip6gretap0): making interface the new active one [ 1190.977705][ T9504] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1190.987442][ T9504] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1190.995785][ T9504] bond11: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1191.189552][ T9521] netlink: 'syz.0.9313': attribute type 2 has an invalid length. [ 1191.405967][ T9540] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1191.423883][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9318'. [ 1191.476863][ T9540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1191.536105][ T5834] block nbd2: Receive control failed (result -32) [ 1191.597262][ T9546] bond5: entered promiscuous mode [ 1191.615867][ T9546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1191.648992][ T5834] Bluetooth: hci5: command tx timeout [ 1191.731750][ T9546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1191.752049][ T9546] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 1191.782497][ T9546] bond5: (slave sit1): Error -95 calling set_mac_address [ 1191.837575][ T9567] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9322'. [ 1191.880731][ T9562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.049835][T23962] wlan1: Trigger new scan to find an IBSS to join [ 1192.146878][ T9582] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1192.339705][ T9595] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9332'. [ 1192.516580][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9335'. [ 1192.575025][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9335'. [ 1192.612966][ T9598] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1192.623761][ T9598] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1192.646981][ T9598] bond6: (slave vxcan3): making interface the new active one [ 1192.663364][ T9598] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 1192.674947][ T9603] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1192.785028][ T9617] bond7 (unregistering): Released all slaves [ 1193.090634][ T9628] validate_nla: 2 callbacks suppressed [ 1193.090658][ T9628] netlink: 'syz.1.9340': attribute type 13 has an invalid length. [ 1193.103979][ T9632] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526 [ 1193.148000][ T9632] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1193.193091][ T9632] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1193.208296][ T9632] gretap1: entered promiscuous mode [ 1193.226743][ T9632] gretap1: entered allmulticast mode [ 1193.368044][ T9645] openvswitch: netlink: Missing valid actions attribute. [ 1193.385459][ T9645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.685573][ T9637] gre0: Caught tx_queue_len zero misconfig [ 1193.736044][ T9640] netlink: 'syz.1.9340': attribute type 9 has an invalid length. [ 1194.042376][ T9679] x_tables: duplicate underflow at hook 4 [ 1194.128606][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5880 ms [ 1194.136829][ C1] lec:lec_tx_timeout: lec0 [ 1194.142929][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1194.750667][ T9712] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1194.770577][ T9710] __nla_validate_parse: 9 callbacks suppressed [ 1194.770598][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9360'. [ 1194.803385][ T9712] xt_hashlimit: size too large, truncated to 1048576 [ 1194.820334][ T9710] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1194.833925][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9361'. [ 1194.974927][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9362'. [ 1195.017083][ T9724] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9362'. [ 1195.119571][ T9719] vxcan1 speed is unknown, defaulting to 1000 [ 1195.163178][ T9730] IPVS: length: 199 != 8 [ 1196.151515][ T9771] ip6gre2: entered promiscuous mode [ 1196.165812][ T9771] ip6gre2: entered allmulticast mode [ 1196.520223][ T6159] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1196.572953][ T6159] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1196.586512][ T6557] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1196.639162][ T6557] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1197.287229][ T9829] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9385'. [ 1197.328911][ T6559] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1197.835593][ T9843] x_tables: duplicate underflow at hook 2 [ 1198.053814][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9388'. [ 1198.108706][ T9850] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9388'. [ 1198.236414][ T9848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1198.389604][ T9861] netlink: 408 bytes leftover after parsing attributes in process `syz.5.9390'. [ 1198.921657][ T9883] netlink: 'syz.1.9395': attribute type 4 has an invalid length. [ 1199.033592][ T9888] netlink: 'syz.0.9397': attribute type 7 has an invalid length. [ 1199.069916][ T9888] netlink: 'syz.0.9397': attribute type 8 has an invalid length. [ 1199.159414][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1199.167528][ C1] lec:lec_tx_timeout: lec0 [ 1199.174592][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1199.204360][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9399'. [ 1199.229890][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9399'. [ 1199.551813][ T9916] IPVS: set_ctl: invalid protocol: 4 172.20.20.48:20003 [ 1199.606312][ T9916] syz_tun: left allmulticast mode [ 1199.854936][ T9932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.879970][ T9932] batadv_slave_0: entered promiscuous mode [ 1199.915518][ T9925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1200.033376][ T9935] vxcan1 speed is unknown, defaulting to 1000 [ 1200.194575][ T9946] __nla_validate_parse: 2 callbacks suppressed [ 1200.194599][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9412'. [ 1200.763271][ T9962] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1200.849059][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1200.950873][ T9969] netlink: 288 bytes leftover after parsing attributes in process `syz.0.9418'. [ 1201.366356][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9425'. [ 1201.376760][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9425'. [ 1201.481221][ T9994] bond7: Unable to set down delay as MII monitoring is disabled [ 1201.521387][ T9994] bond7 (unregistering): Released all slaves [ 1204.072544][ T9979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1204.189134][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1204.197299][ C1] lec:lec_tx_timeout: lec0 [ 1204.202606][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1204.375051][T10028] tunl0: Caught tx_queue_len zero misconfig [ 1204.401554][T10032] netlink: 332 bytes leftover after parsing attributes in process `syz.6.9429'. [ 1204.550767][T10039] syzkaller0: entered promiscuous mode [ 1204.642847][T10052] netlink: 'syz.3.9437': attribute type 1 has an invalid length. [ 1204.654559][ T30] audit: type=1800 audit(1776679345.069:14): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9435" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=268 res=0 errno=0 [ 1204.688963][T10052] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1204.845640][T10062] netlink: set zone limit has 4 unknown bytes [ 1204.893326][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9439'. [ 1205.101750][T10084] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1205.145207][T10084] netlink: 'syz.3.9443': attribute type 1 has an invalid length. [ 1205.452591][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9447'. [ 1205.576193][T29510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1205.586959][T29510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1205.596373][T29510] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1205.607390][T29510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1205.615231][T29510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1205.667605][T10103] netlink: zone id is out of range [ 1205.673148][T10103] netlink: zone id is out of range [ 1205.678775][T10103] netlink: zone id is out of range [ 1205.684069][T10103] netlink: zone id is out of range [ 1205.689601][T10103] netlink: zone id is out of range [ 1205.695168][T10103] netlink: zone id is out of range [ 1205.700964][T10103] netlink: zone id is out of range [ 1205.706223][T10103] netlink: zone id is out of range [ 1205.780771][T10100] vxcan1 speed is unknown, defaulting to 1000 [ 1206.110551][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1206.231859][T10118] net_ratelimit: 47 callbacks suppressed [ 1206.231880][T10118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1206.314155][T10122] team0: Device vlan2 is already an upper device of the team interface [ 1206.326384][T10118] Bluetooth: MGMT ver 1.23 [ 1206.343847][T10118] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9452'. [ 1206.591399][T10130] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1206.742660][T10137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1206.761980][T10138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1206.955621][T25141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.071873][T10146] netlink: 67 bytes leftover after parsing attributes in process `syz.3.9460'. [ 1207.113946][T10145] netlink: 67 bytes leftover after parsing attributes in process `syz.3.9460'. [ 1207.126630][T10151] netlink: 7 bytes leftover after parsing attributes in process `syz.5.9459'. [ 1207.136224][T25141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.172449][T10100] chnl_net:caif_netlink_parms(): no params data found [ 1207.350882][T25141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.505115][T25141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.623743][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.641546][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.664088][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9464'. [ 1207.681075][T10100] bridge_slave_0: entered allmulticast mode [ 1207.696104][T10100] bridge_slave_0: entered promiscuous mode [ 1207.702471][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9464'. [ 1207.716447][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.731344][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.731754][T29510] Bluetooth: hci0: command tx timeout [ 1207.739417][T10100] bridge_slave_1: entered allmulticast mode [ 1207.753249][T10100] bridge_slave_1: entered promiscuous mode [ 1207.784179][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9464'. [ 1207.811830][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9464'. [ 1207.930447][T10100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.966407][T10100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.107169][T10100] team0: Port device team_slave_0 added [ 1208.123315][T10100] team0: Port device team_slave_1 added [ 1208.236923][T25141] x9: left allmulticast mode [ 1208.242922][T25141] x9: left promiscuous mode [ 1208.248854][T25141] bridge0: port 1(1x9) entered disabled state [ 1208.302594][T25141] pimreg3: left allmulticast mode [ 1208.895892][T25141] bond5 (unregistering): (slave bridge5): Releasing active interface [ 1209.204020][T25141] bond1 (unregistering): Released all slaves [ 1209.218811][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1209.226956][ C1] lec:lec_tx_timeout: lec0 [ 1209.231704][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1209.243175][T25141] bond2 (unregistering): Released all slaves [ 1209.262030][T25141] bond3 (unregistering): Released all slaves [ 1209.282992][T25141] bond4 (unregistering): Released all slaves [ 1209.302855][T25141] bond5 (unregistering): Released all slaves [ 1209.323521][T25141] bond6 (unregistering): Released all slaves [ 1209.348033][T25141] bond7 (unregistering): Released all slaves [ 1209.372649][T25141] bond8 (unregistering): (slave lo): Releasing backup interface [ 1209.381274][T25141] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1209.393525][T25141] bond8 (unregistering): Released all slaves [ 1209.417054][T25141] bond9 (unregistering): Released all slaves [ 1209.436840][T25141] bond10 (unregistering): Released all slaves [ 1209.455293][T25141] bond11 (unregistering): Released all slaves [ 1209.476513][T10100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.487233][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.520731][T10100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.608105][T25141] : left promiscuous mode [ 1209.656395][T10100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.675939][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.737334][T10100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.792521][T25141] tipc: Left network mode [ 1209.820732][T29510] Bluetooth: hci0: command tx timeout [ 1210.176762][T10100] hsr_slave_0: entered promiscuous mode [ 1210.197567][T10100] hsr_slave_1: entered promiscuous mode [ 1210.209775][T10100] debugfs: 'hsr0' already exists in 'hsr' [ 1210.230651][T10100] Cannot create hsr debugfs directory [ 1210.533843][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9482'. [ 1211.458282][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9489'. [ 1211.520449][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9489'. [ 1211.654441][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9492'. [ 1211.715578][ T5487] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1211.889991][T29510] Bluetooth: hci0: command tx timeout [ 1211.932673][T10304] netlink: 'syz.6.9495': attribute type 21 has an invalid length. [ 1212.023778][T10304] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9495'. [ 1212.435729][T10304] netlink: 'syz.6.9495': attribute type 5 has an invalid length. [ 1212.473589][T10304] netlink: 'syz.6.9495': attribute type 6 has an invalid length. [ 1212.517684][T10304] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9495'. [ 1212.554164][T10309] syzkaller0: entered allmulticast mode [ 1212.633193][T25141] hsr_slave_0: left promiscuous mode [ 1212.664163][T25141] hsr_slave_1: left promiscuous mode [ 1212.682775][T25141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.963015][T10346] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9499'. [ 1213.246614][T10302] syzkaller0: left allmulticast mode [ 1213.387757][T10331] syzkaller0: entered promiscuous mode [ 1213.393685][T10331] syzkaller0: entered allmulticast mode [ 1213.972838][T29510] Bluetooth: hci0: command tx timeout [ 1215.028469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 1215.036644][ C1] lec:lec_tx_timeout: lec0 [ 1215.046758][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1217.756739][ T5487] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1218.004297][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9504'. [ 1218.057632][T10369] netlink: 'syz.5.9505': attribute type 10 has an invalid length. [ 1218.201526][T10366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1218.250757][T10379] netlink: 92 bytes leftover after parsing attributes in process `syz.6.9506'. [ 1218.259949][T10379] netlink: 'syz.6.9506': attribute type 1 has an invalid length. [ 1218.261509][T10371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1218.292646][T10371] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1218.305575][T10371] bond1: (slave vti0): Error -95 calling set_mac_address [ 1218.357482][T10369] veth0_vlan: left promiscuous mode [ 1218.365786][T10369] veth0_vlan: entered promiscuous mode [ 1218.376155][T10369] team0: Device veth0_vlan failed to register rx_handler [ 1218.655699][T10392] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.9509'. [ 1219.513619][T10100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1219.564374][T10100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1219.673689][T10100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1219.686465][T10100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1219.695691][T10100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1219.723402][T10100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1219.744001][T10100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1219.762417][T10100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1219.974126][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9524'. [ 1220.058416][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1220.066571][ C1] lec:lec_tx_timeout: lec0 [ 1220.072072][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1220.227989][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9525'. [ 1220.261079][T10463] openvswitch: netlink: Flow actions attr not present in new flow. [ 1220.343440][T10100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.426721][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.499021][T25141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.506292][T25141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.535753][T10479] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.9530'. [ 1220.545300][T10477] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1220.605519][T10479] netlink: Unknown conntrack attr (0) [ 1220.614932][T25141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.622276][T25141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.655808][T10479] "syz.6.9530" (10479) uses obsolete ecb(arc4) skcipher [ 1220.967433][T10500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1221.013731][T10500] netlink: 'syz.3.9534': attribute type 1 has an invalid length. [ 1221.216500][T27194] IPVS: starting estimator thread 0... [ 1221.225807][T10508] tipc: Started in network mode [ 1221.244341][T10508] tipc: Node identity ac14140f, cluster identity 4711 [ 1221.272904][T10508] tipc: Enabled bearer , priority 10 [ 1221.313398][T10511] IPVS: using max 27 ests per chain, 64800 per kthread [ 1221.554061][T10521] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9537'. [ 1221.579784][T10100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.604650][T10521] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1221.780817][T10100] veth0_vlan: entered promiscuous mode [ 1221.809623][T10100] veth1_vlan: entered promiscuous mode [ 1222.004530][T10100] veth0_macvtap: entered promiscuous mode [ 1222.032968][T10100] veth1_macvtap: entered promiscuous mode [ 1222.106414][T10100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.148037][T10100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.176719][ T6159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.195566][ T6159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.219716][ T6159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.234458][ T6159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.415705][ T9026] tipc: Node number set to 2886997007 [ 1222.479985][ T6153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.506012][ T6153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.611104][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.639912][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.806169][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9550'. [ 1222.845984][T10566] hsr0: entered promiscuous mode [ 1222.867366][T10566] macvlan2: entered allmulticast mode [ 1222.873080][T10566] hsr0: entered allmulticast mode [ 1222.878316][T10566] hsr_slave_0: entered allmulticast mode [ 1222.886294][T10566] hsr_slave_1: entered allmulticast mode [ 1222.910987][T10570] netlink: 196 bytes leftover after parsing attributes in process `syz.1.9551'. [ 1223.146157][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1223.163221][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1223.174361][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1223.187160][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1223.195652][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1223.271951][T10575] vxcan1 speed is unknown, defaulting to 1000 [ 1223.586732][T10575] chnl_net:caif_netlink_parms(): no params data found [ 1223.672696][T10575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.680644][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.688001][T10575] bridge_slave_0: entered allmulticast mode [ 1223.695866][T10575] bridge_slave_0: entered promiscuous mode [ 1223.704409][T10575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.712370][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.719872][T10575] bridge_slave_1: entered allmulticast mode [ 1223.727388][T10575] bridge_slave_1: entered promiscuous mode [ 1223.763057][T10575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.776323][T10575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.812964][T10575] team0: Port device team_slave_0 added [ 1223.823302][T10575] team0: Port device team_slave_1 added [ 1223.852029][T10575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.859747][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.887044][T10575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.900285][T10575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.907273][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.935207][T10575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.986671][T10575] hsr_slave_0: entered promiscuous mode [ 1223.993961][T10575] hsr_slave_1: entered promiscuous mode [ 1224.000722][T10575] debugfs: 'hsr0' already exists in 'hsr' [ 1224.006515][T10575] Cannot create hsr debugfs directory [ 1224.137835][T10575] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.149666][T10575] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1224.160452][T10575] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1224.232678][T10575] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.242827][T10575] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1224.253269][T10575] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1224.318034][T10575] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.327994][T10575] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1224.339903][T10575] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1224.396037][T10575] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.406374][T10575] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1224.416594][T10575] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1224.572759][T10575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1224.583937][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.592765][T10575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1224.603994][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1224.612515][T10575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1224.623969][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1224.632546][T10575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1224.643032][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.729514][T10575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.750620][T10575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.765837][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.773045][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.788168][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.795399][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.993375][T10575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.078848][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1225.086963][ C1] lec:lec_tx_timeout: lec0 [ 1225.093066][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1225.245469][T10575] veth0_vlan: entered promiscuous mode [ 1225.258140][T10575] veth1_vlan: entered promiscuous mode [ 1225.263788][T29510] Bluetooth: hci2: command tx timeout [ 1225.301612][T10575] veth0_macvtap: entered promiscuous mode [ 1225.313222][T10575] veth1_macvtap: entered promiscuous mode [ 1225.333804][T10575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.350641][T10575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.366754][ T6159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.376093][ T6159] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.387670][ T6159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.398312][ T6159] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.523639][ T6159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.531886][ T6159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.577829][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.586256][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.329523][T29510] Bluetooth: hci2: command tx timeout [ 1229.408882][T29510] Bluetooth: hci2: command tx timeout [ 1230.108566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1230.116736][ C1] lec:lec_tx_timeout: lec0 [ 1230.122162][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1231.489556][T29510] Bluetooth: hci2: command tx timeout [ 1235.128875][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1235.137029][ C1] lec:lec_tx_timeout: lec0 [ 1235.141833][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1238.935186][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1240.148873][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1240.156971][ C1] lec:lec_tx_timeout: lec0 [ 1240.161957][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1245.168919][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1245.177020][ C1] lec:lec_tx_timeout: lec0 [ 1245.181810][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1250.188821][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1250.196908][ C1] lec:lec_tx_timeout: lec0 [ 1250.201623][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1255.209261][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1255.217368][ C1] lec:lec_tx_timeout: lec0 [ 1255.222640][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1256.689865][T10611] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9554'. [ 1256.997007][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1257.017027][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1257.027202][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1257.039595][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1257.053738][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1257.112081][T10621] vxcan1 speed is unknown, defaulting to 1000 [ 1257.130005][T10625] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1257.394700][T10631] tipc: Enabling of bearer rejected, failed to enable media [ 1257.575355][T10640] netlink: 244 bytes leftover after parsing attributes in process `syz.5.9564'. [ 1257.606538][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9565'. [ 1257.878299][T10651] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1258.417714][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9577'. [ 1258.536649][T10621] chnl_net:caif_netlink_parms(): no params data found [ 1258.590578][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9578'. [ 1258.601783][T10688] pim6reg1: entered promiscuous mode [ 1258.607444][T10688] pim6reg1: entered allmulticast mode [ 1258.631433][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9580'. [ 1258.713919][T10692] sctp: [Deprecated]: syz.5.9581 (pid 10692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1258.713919][T10692] Use struct sctp_sack_info instead [ 1258.759358][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9581'. [ 1258.939189][T10704] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1258.973499][T10704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.053446][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.062149][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.069877][T10621] bridge_slave_0: entered allmulticast mode [ 1259.078083][T10621] bridge_slave_0: entered promiscuous mode [ 1259.087703][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.095145][ T5834] Bluetooth: hci3: command tx timeout [ 1259.102819][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.111519][T10621] bridge_slave_1: entered allmulticast mode [ 1259.121356][T10621] bridge_slave_1: entered promiscuous mode [ 1259.173983][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.186826][T10712] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9587'. [ 1259.195862][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.242119][T10621] team0: Port device team_slave_0 added [ 1259.256365][T10621] team0: Port device team_slave_1 added [ 1259.281922][T10712] 0: renamed from hsr_slave_1 (while UP) [ 1259.297721][T10712] 0: entered allmulticast mode [ 1259.307020][T10712] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1259.336416][T10718] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9590'. [ 1259.379421][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.393055][T10721] netlink: 'syz.5.9590': attribute type 4 has an invalid length. [ 1259.403721][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.418605][T10721] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9590'. [ 1259.482880][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.511096][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.528706][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.598793][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.647493][T10728] netlink: 'syz.1.9591': attribute type 1 has an invalid length. [ 1259.775890][T10621] hsr_slave_0: entered promiscuous mode [ 1259.783488][T10621] hsr_slave_1: entered promiscuous mode [ 1259.790559][T10621] debugfs: 'hsr0' already exists in 'hsr' [ 1259.796511][T10621] Cannot create hsr debugfs directory [ 1259.935132][T10742] syzkaller0: entered promiscuous mode [ 1259.943751][T10742] syzkaller0: entered allmulticast mode [ 1260.151698][T10753] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1260.172189][T10753] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1260.317181][T10759] syzkaller1: entered promiscuous mode [ 1260.332867][T10759] syzkaller1: entered allmulticast mode [ 1260.622326][T10621] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.807175][T10621] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.959870][T10621] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.018386][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 1261.026524][ C1] lec:lec_tx_timeout: lec0 [ 1261.032346][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1261.224060][ T5834] Bluetooth: hci3: command tx timeout [ 1261.340555][T10621] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1262.383409][T10621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1262.408191][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1262.446781][T10621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1262.470427][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1262.502464][T10621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1262.518125][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1262.529490][T10621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1262.565164][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1262.714405][T10880] netlink: 'syz.1.9637': attribute type 1 has an invalid length. [ 1262.724383][T10880] __nla_validate_parse: 8 callbacks suppressed [ 1262.724402][T10880] netlink: 280 bytes leftover after parsing attributes in process `syz.1.9637'. [ 1263.051259][T10880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.058912][T10880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.248866][ T5834] Bluetooth: hci3: command tx timeout [ 1263.582878][T10880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.609353][T10880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.263330][T23964] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.273094][T23964] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.282357][T23964] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.293267][T23964] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.319159][T10857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1265.328701][ T5834] Bluetooth: hci3: command tx timeout [ 1265.512138][T10902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.541517][T10906] netlink: 'syz.1.9639': attribute type 1 has an invalid length. [ 1265.716172][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.875258][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.926994][T25141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.934284][T25141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.011411][T25141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.018663][T25141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.048683][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1266.056802][ C1] lec:lec_tx_timeout: lec0 [ 1266.064465][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1266.116931][T10937] netlink: 'syz.1.9646': attribute type 1 has an invalid length. [ 1266.154153][T10937] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9646'. [ 1266.233042][T10944] netlink: 'syz.3.9648': attribute type 10 has an invalid length. [ 1266.353277][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1266.366982][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1266.414826][T10944] veth0_vlan: left promiscuous mode [ 1266.433894][T10944] veth0_vlan: entered promiscuous mode [ 1266.452946][T10944] team0: Device veth0_vlan failed to register rx_handler [ 1266.533359][T10952] team0: Caught tx_queue_len zero misconfig [ 1266.554943][T10951] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1266.800124][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.923583][T10977] ip6tnl0: Caught tx_queue_len zero misconfig [ 1267.286932][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9656'. [ 1267.323888][T10621] veth0_vlan: entered promiscuous mode [ 1267.353775][T10998] ip6erspan0: entered promiscuous mode [ 1267.373199][T10621] veth1_vlan: entered promiscuous mode [ 1267.415120][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1267.454428][T10621] veth0_macvtap: entered promiscuous mode [ 1267.470776][T10621] veth1_macvtap: entered promiscuous mode [ 1267.514059][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.549649][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.584719][T25143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.594599][T11008] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9660'. [ 1267.607156][T25143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.635908][T25143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.660177][T25143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.637806][T10968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1269.797029][T23964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.848033][T23964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.885070][T11023] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9663'. [ 1269.931571][T23964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.957898][T23964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.982101][T11027] lo: Caught tx_queue_len zero misconfig [ 1270.005579][T11027] netlink: 45 bytes leftover after parsing attributes in process `syz.1.9666'. [ 1270.162120][T11037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1270.187337][T11037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1270.245220][T11041] xt_ecn: cannot match TCP bits for non-tcp packets [ 1270.249562][T11037] gretap2: entered promiscuous mode [ 1270.275048][T11037] gretap2: entered allmulticast mode [ 1270.283600][T11041] xt_ecn: cannot match TCP bits for non-tcp packets [ 1270.755883][T11066] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1271.056476][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9681'. [ 1271.078727][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1271.086962][ C1] lec:lec_tx_timeout: lec0 [ 1271.092357][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1271.240819][T11090] netlink: 'syz.6.9685': attribute type 1 has an invalid length. [ 1271.375923][T10883] IPVS: starting estimator thread 0... [ 1271.481195][T11103] netlink: 'syz.6.9690': attribute type 3 has an invalid length. [ 1271.502187][T11101] IPVS: using max 25 ests per chain, 60000 per kthread [ 1271.676352][T11120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9692'. [ 1271.955234][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9698'. [ 1271.997238][T11138] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1272.050142][T11141] x_tables: duplicate underflow at hook 1 [ 1272.124792][T11149] ip6t_srh: unknown srh match flags 5F28 [ 1272.535390][T11165] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9705'. [ 1272.557168][T11168] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9706'. [ 1272.753286][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9706'. [ 1272.998740][T11181] netlink: 'syz.1.9710': attribute type 83 has an invalid length. [ 1273.565807][T11207] netlink: 'syz.5.9718': attribute type 10 has an invalid length. [ 1273.579778][T11207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.588195][T11207] bridge_slave_1: left allmulticast mode [ 1273.594920][T11207] bridge_slave_1: left promiscuous mode [ 1273.606695][T11207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.634604][T11207] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1274.046498][T11228] xt_policy: neither incoming nor outgoing policy selected [ 1274.261273][T27194] IPVS: starting estimator thread 0... [ 1274.359470][T11251] IPVS: using max 28 ests per chain, 67200 per kthread [ 1274.975326][T11289] __nla_validate_parse: 10 callbacks suppressed [ 1274.975347][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9743'. [ 1275.053730][T11298] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.9747'. [ 1275.081915][T11293] syzkaller0: entered promiscuous mode [ 1275.087911][T11293] syzkaller0: entered allmulticast mode [ 1275.182431][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9749'. [ 1275.474946][T11315] vxcan1 speed is unknown, defaulting to 1000 [ 1275.565378][T11318] geneve1: entered promiscuous mode [ 1276.118844][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1276.126922][ C1] lec:lec_tx_timeout: lec0 [ 1276.131982][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1276.873863][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 1277.993179][T11293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1281.118867][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1281.127020][ C1] lec:lec_tx_timeout: lec0 [ 1281.132607][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1281.293081][T11348] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.9760'. [ 1281.437771][T11351] netlink: 'syz.5.9762': attribute type 10 has an invalid length. [ 1281.584397][T11351] team0 (unregistering): Port device team_slave_0 removed [ 1281.645843][T11351] team0 (unregistering): Port device team_slave_1 removed [ 1281.837375][T11368] netlink: 228 bytes leftover after parsing attributes in process `syz.6.9765'. [ 1282.187025][T11404] netlink: 'syz.3.9774': attribute type 1 has an invalid length. [ 1282.196028][T11405] x_tables: unsorted entry at hook 3 [ 1285.034802][T11387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1285.374243][T11436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.416065][T11436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.542530][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9784'. [ 1285.846843][T11468] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9791'. [ 1285.982950][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9791'. [ 1286.016516][T11475] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1286.040644][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9791'. [ 1286.148406][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1286.156521][ C1] lec:lec_tx_timeout: lec0 [ 1286.161943][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1286.285787][T11486] netlink: 'syz.3.9797': attribute type 10 has an invalid length. [ 1286.335290][T11486] team0: Device ipvlan1 failed to register rx_handler [ 1286.366651][T11490] siw: device registration error -23 [ 1286.638799][T11503] vxcan1 speed is unknown, defaulting to 1000 [ 1286.693137][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1287.353926][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9806'. [ 1288.104403][T11560] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1288.135201][T11560] bond1: (slave lo): Enslaving as an active interface with an up link [ 1288.157542][T11549] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9809'. [ 1288.167682][T11549] netlink: 43 bytes leftover after parsing attributes in process `syz.5.9809'. [ 1288.176888][T11549] netlink: 'syz.5.9809': attribute type 6 has an invalid length. [ 1288.186483][T11560] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1288.189611][T11549] netlink: 'syz.5.9809': attribute type 5 has an invalid length. [ 1288.216892][T11549] netlink: 43 bytes leftover after parsing attributes in process `syz.5.9809'. [ 1289.275142][T11594] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9817'. [ 1289.424797][T11603] syzkaller0: entered promiscuous mode [ 1289.432175][T11603] syzkaller0: entered allmulticast mode [ 1290.524103][T11544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1290.567438][T11585] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9815'. [ 1290.827911][T11613] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1290.920029][T11616] bond7: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1291.062529][T11616] bond7: (slave C): Enslaving as an active interface with an up link [ 1291.107080][T11616] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1291.168533][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1291.176670][ C1] lec:lec_tx_timeout: lec0 [ 1291.181727][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1291.382965][T11633] netlink: 9 bytes leftover after parsing attributes in process `syz.6.9826'. [ 1291.459896][T11635] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9827'. [ 1291.512246][T23964] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.702244][T11649] netlink: 276 bytes leftover after parsing attributes in process `syz.6.9829'. [ 1291.891625][T11657] netlink: 'syz.3.9832': attribute type 1 has an invalid length. [ 1291.923306][T11657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.128105][T11666] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1292.160839][T11665] netlink: 'syz.3.9833': attribute type 1 has an invalid length. [ 1292.202258][T11665] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9833'. [ 1292.276172][T11670] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 1292.285777][T11670] bond2: option packets_per_slave: allowed values 0 - 65535 [ 1292.298071][T11670] bond2 (unregistering): Released all slaves [ 1292.493878][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9838'. [ 1292.511758][T11677] syzkaller0: entered promiscuous mode [ 1292.517643][T11677] syzkaller0: entered allmulticast mode [ 1292.626131][T11682] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1292.658001][T11682] bond10 (unregistering): Released all slaves [ 1294.409583][T11637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1294.727897][T11706] syzkaller1: entered promiscuous mode [ 1294.755924][T11706] syzkaller1: entered allmulticast mode [ 1294.951954][T11719] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9847'. [ 1295.231046][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9851'. [ 1295.262432][T11742] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1295.339040][T11738] team0: entered promiscuous mode [ 1295.344528][T11738] team0: entered allmulticast mode [ 1295.539149][T11758] netlink: 'syz.6.9853': attribute type 21 has an invalid length. [ 1295.560638][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9853'. [ 1295.929485][T11769] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1295.961260][T11784] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9864'. [ 1296.014143][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9865'. [ 1296.029446][T11791] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9866'. [ 1296.188490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1296.196660][ C1] lec:lec_tx_timeout: lec0 [ 1296.201784][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1296.237997][T11798] sctp: [Deprecated]: syz.1.9867 (pid 11798) Use of int in max_burst socket option. [ 1296.237997][T11798] Use struct sctp_assoc_value instead [ 1296.283940][T11800] veth3: entered allmulticast mode [ 1296.292056][T11800] netlink: 'syz.0.9868': attribute type 10 has an invalid length. [ 1296.300729][T11799] netlink: 'syz.0.9868': attribute type 10 has an invalid length. [ 1296.342684][T11798] syzkaller0: entered promiscuous mode [ 1296.367697][T11798] syzkaller0: entered allmulticast mode [ 1296.409065][T11807] tipc: Started in network mode [ 1296.421077][T11807] tipc: Node identity , cluster identity 4711 [ 1296.711772][T11814] syzkaller0: entered promiscuous mode [ 1296.734602][T11814] syzkaller0: entered allmulticast mode [ 1296.749058][T11818] netlink: 'syz.3.9875': attribute type 21 has an invalid length. [ 1296.866375][T11818] netlink: 'syz.3.9875': attribute type 1 has an invalid length. [ 1296.946528][T11823] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1296.992586][T11823] bond1 (unregistering): Released all slaves [ 1297.033747][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9876'. [ 1297.142084][T11838] veth0_macvtap: left promiscuous mode [ 1297.153700][T11840] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9880'. [ 1297.267614][T11849] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9879'. [ 1297.502476][T11868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1298.103394][T11900] netlink: 'syz.5.9893': attribute type 1 has an invalid length. [ 1298.130750][T11900] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9893'. [ 1298.151192][T11900] netlink: 'syz.5.9893': attribute type 1 has an invalid length. [ 1298.178763][T11900] netlink: 'syz.5.9893': attribute type 8 has an invalid length. [ 1298.187162][T11900] netlink: 606 bytes leftover after parsing attributes in process `syz.5.9893'. [ 1298.205864][T11900] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9893'. [ 1298.217910][T11901] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9893'. [ 1298.267139][T11910] netlink: 'syz.6.9895': attribute type 5 has an invalid length. [ 1298.491734][T11919] vlan2: entered promiscuous mode [ 1298.517151][T11919] bridge0: entered promiscuous mode [ 1298.658848][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9904'. [ 1298.711332][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9904'. [ 1298.917417][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9910'. [ 1299.115605][T11966] netlink: 'syz.0.9913': attribute type 3 has an invalid length. [ 1299.206292][T11971] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1299.213030][T11972] Cannot find map_set index 65533 as target [ 1299.243689][T11974] lo: MTU too low for tipc bearer [ 1299.290759][T11974] tipc: Enabling of bearer rejected, failed to enable media [ 1299.409279][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 1299.554529][T11995] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 1300.378753][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.828406][T12069] validate_nla: 3 callbacks suppressed [ 1300.828424][T12069] netlink: 'syz.6.9942': attribute type 10 has an invalid length. [ 1300.845405][T12069] team0: Device ipvlan1 failed to register rx_handler [ 1301.208773][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1301.216981][ C1] lec:lec_tx_timeout: lec0 [ 1301.221734][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1302.763877][T12017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1303.024275][T12078] __nla_validate_parse: 5 callbacks suppressed [ 1303.024297][T12078] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9944'. [ 1303.071688][T12081] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9947'. [ 1303.097171][T12083] netlink: 'syz.6.9946': attribute type 1 has an invalid length. [ 1303.126458][T12083] netlink: 2108 bytes leftover after parsing attributes in process `syz.6.9946'. [ 1303.187548][ T30] audit: type=1800 audit(1776679443.599:15): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9948" name="memory.events" dev="tmpfs" ino=460 res=0 errno=0 [ 1303.235249][T12089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9948'. [ 1303.266166][ T30] audit: type=1804 audit(1776679443.629:16): pid=12089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9948" name="/newroot/87/memory.events" dev="tmpfs" ino=460 res=1 errno=0 [ 1303.765249][T12090] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1303.789466][T12088] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1304.167224][T12115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9955'. [ 1304.255900][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9957'. [ 1304.326164][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9957'. [ 1304.366864][T12129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9960'. [ 1304.378580][T12125] netlink: 'syz.6.9957': attribute type 12 has an invalid length. [ 1304.404463][T12125] netlink: 'syz.6.9957': attribute type 11 has an invalid length. [ 1304.472193][T12135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9962'. [ 1304.592301][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9964'. [ 1304.906819][T12158] netlink: 'syz.3.9967': attribute type 5 has an invalid length. [ 1305.085887][T12161] bond1: entered promiscuous mode [ 1305.108231][T12161] bond1: entered allmulticast mode [ 1305.125058][T12161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1305.234043][T12179] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1305.254067][T12179] bond3 (unregistering): Released all slaves [ 1305.645455][T12197] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1305.922610][T12208] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1305.941880][T12208] bond3: (slave lo): Enslaving as an active interface with an up link [ 1305.951148][T12208] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1305.969656][T12208] sctp: [Deprecated]: syz.1.9982 (pid 12208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1305.969656][T12208] Use struct sctp_sack_info instead [ 1306.024141][T12211] netlink: 'syz.6.9984': attribute type 3 has an invalid length. [ 1306.053785][T12210] netlink: 'syz.6.9984': attribute type 3 has an invalid length. [ 1306.228463][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1306.236607][ C1] lec:lec_tx_timeout: lec0 [ 1306.241971][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1306.480183][T12251] xt_hashlimit: size too large, truncated to 1048576 [ 1306.952662][T12271] netdevsim netdevsim6: Direct firmware load for .. @ failed with error -2 [ 1307.004044][T12271] netdevsim netdevsim6: Falling back to sysfs fallback for: .. @ [ 1307.071842][T12276] netlink: 'syz.6.10002': attribute type 1 has an invalid length. [ 1307.647069][T12307] bridge_slave_1: left allmulticast mode [ 1307.667343][T12307] bridge_slave_1: left promiscuous mode [ 1307.674138][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.689388][T12307] bridge_slave_0: left allmulticast mode [ 1307.726370][T12307] bridge_slave_0: left promiscuous mode [ 1307.750052][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.787395][T12314] netlink: 'syz.5.10011': attribute type 1 has an invalid length. [ 1307.966607][T12329] netlink: 'syz.6.10014': attribute type 26 has an invalid length. [ 1307.992665][T12321] bond1: (slave geneve2): making interface the new active one [ 1308.005162][T12321] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1308.029101][T12314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1308.050073][T23964] wlan1: Trigger new scan to find an IBSS to join [ 1308.077002][ T5276] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1308.108009][ T5276] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1308.134052][ T5276] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1308.162683][ T5276] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1308.210474][T12337] __nla_validate_parse: 10 callbacks suppressed [ 1308.210497][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10018'. [ 1308.237131][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10017'. [ 1308.274061][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10016'. [ 1308.323523][T12345] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10019'. [ 1308.431648][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10021'. [ 1308.500745][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10021'. [ 1308.650526][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10024'. [ 1308.671698][T12362] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10024'. [ 1308.742722][T12366] netlink: 'syz.0.10026': attribute type 1 has an invalid length. [ 1308.892584][T12375] bond2: (slave gretap1): making interface the new active one [ 1308.906189][T12375] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1308.986981][T12377] bond2: option mode: invalid value (133) [ 1308.996959][T12377] bond2 (unregistering): Released all slaves [ 1309.331890][T12400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10034'. [ 1309.391891][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10035'. [ 1309.433390][T12402] bond10: entered promiscuous mode [ 1309.441121][T12402] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1309.550979][T12402] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1309.587098][T12402] bond10: (slave sit2): The slave device specified does not support setting the MAC address [ 1309.605555][T12402] bond10: (slave sit2): Error -95 calling set_mac_address [ 1309.829544][T12431] sctp: [Deprecated]: syz.1.10042 (pid 12431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1309.829544][T12431] Use struct sctp_sack_info instead [ 1309.955796][T12433] can: request_module (can-proto-0) failed. [ 1310.394679][T12467] netlink: 'syz.0.10054': attribute type 8 has an invalid length. [ 1310.445515][T12467] tipc: Failed to obtain node identity [ 1310.454152][T12467] tipc: Enabling of bearer rejected, failed to enable media [ 1310.513372][T12467] tipc: Started in network mode [ 1310.523283][T12467] tipc: Node identity 02ab8e7e8981, cluster identity 4711 [ 1310.560937][T12467] tipc: Enabled bearer , priority 0 [ 1310.683167][T12474] syzkaller0: entered promiscuous mode [ 1310.716508][T12474] syzkaller0: entered allmulticast mode [ 1310.724438][T12474] tipc: Resetting bearer [ 1310.876462][T12484] team0: Port device team_slave_0 removed [ 1311.088674][ T5275] wlan1: Trigger new scan to find an IBSS to join [ 1311.210000][T12465] tipc: Resetting bearer [ 1311.530562][T12513] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1311.953310][T12526] netlink: 'syz.5.10069': attribute type 2 has an invalid length. [ 1312.548107][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6300 ms [ 1312.556188][ C1] lec:lec_tx_timeout: lec0 [ 1312.563920][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1314.063745][ T6153] wlan1: Creating new IBSS network, BSSID 72:45:39:c1:e0:4e [ 1316.330813][T12465] tipc: Disabling bearer [ 1316.348210][ T5810] tipc: Node number set to 2334822014 [ 1316.376013][T12526] 9: entered promiscuous mode [ 1316.559494][T12541] __nla_validate_parse: 8 callbacks suppressed [ 1316.559524][T12541] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.10070'. [ 1316.587818][T12531] IPVS: Scheduler module ip_vs_sip not found [ 1316.611908][T12538] netlink: 'syz.6.10072': attribute type 13 has an invalid length. [ 1316.651539][T12538] gretap0: refused to change device tx_queue_len [ 1316.673666][T12538] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1316.817653][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10078'. [ 1317.020592][T12568] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1317.095785][T12568] netlink: 'syz.1.10082': attribute type 29 has an invalid length. [ 1317.106634][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10082'. [ 1317.163493][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10082'. [ 1317.197701][T12574] vxcan1 speed is unknown, defaulting to 1000 [ 1317.260986][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10083'. [ 1318.063358][T12592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1318.288176][T12599] xt_l2tp: v2 doesn't support IP mode [ 1318.293996][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 1318.294032][ C1] lec:lec_tx_timeout: lec0 [ 1318.501804][T12601] netlink: 1192 bytes leftover after parsing attributes in process `syz.5.10092'. [ 1318.641524][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10093'. [ 1318.742849][T12607] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10095'. [ 1318.756578][T12607] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10095'. [ 1318.778867][T12607] netlink: 'syz.0.10095': attribute type 5 has an invalid length. [ 1318.811062][T12607] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10095'. [ 1319.143129][T12623] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1319.226506][T12627] netlink: 'syz.0.10101': attribute type 7 has an invalid length. [ 1319.265283][T12627] netlink: 'syz.0.10101': attribute type 8 has an invalid length. [ 1320.233268][T12665] netlink: 'syz.5.10113': attribute type 4 has an invalid length. [ 1320.327453][T12669] No such timeout policy "syz1" [ 1320.339287][T12667] Unknown metaid 0 dlen 28 [ 1321.107102][T12707] netlink: 'syz.3.10125': attribute type 1 has an invalid length. [ 1321.116793][T12707] netlink: 'syz.3.10125': attribute type 3 has an invalid length. [ 1321.128263][T12707] NCSI netlink: No device for ifindex 813332851 [ 1321.139624][T12712] netlink: 'syz.1.10127': attribute type 1 has an invalid length. [ 1321.219174][T12712] bond4: (slave bridge0): Enslaving as a backup interface with an up link [ 1321.265088][T12712] veth5: entered promiscuous mode [ 1321.270830][T12712] veth5: entered allmulticast mode [ 1321.280863][T12712] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 1321.381113][T12725] netlink: 'syz.5.10128': attribute type 3 has an invalid length. [ 1321.652840][T12737] __nla_validate_parse: 10 callbacks suppressed [ 1321.652867][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10133'. [ 1321.781467][T12744] ip6gre1: entered allmulticast mode [ 1322.377139][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10142'. [ 1322.475654][T12773] bond3: entered promiscuous mode [ 1322.489220][T12773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1322.507701][T12774] syzkaller0: entered promiscuous mode [ 1322.514285][T12774] syzkaller0: entered allmulticast mode [ 1322.856762][T12802] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1323.127354][T12813] xt_hashlimit: size too large, truncated to 1048576 [ 1323.127355][ T30] audit: type=1107 audit(1776679463.539:17): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1323.364443][T12825] netlink: 'syz.5.10157': attribute type 1 has an invalid length. [ 1323.482115][T12825] bond2: entered promiscuous mode [ 1323.487917][T12825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1323.651170][T27192] IPVS: starting estimator thread 0... [ 1323.670526][T12839] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10162'. [ 1323.694873][T12840] tipc: Enabling of bearer rejected, failed to enable media [ 1323.782139][T12842] IPVS: using max 27 ests per chain, 64800 per kthread [ 1323.952960][T12855] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10165'. [ 1324.206095][T12871] netlink: 175008 bytes leftover after parsing attributes in process `syz.3.10171'. [ 1324.373832][T12874] netlink: 'syz.6.10172': attribute type 1 has an invalid length. [ 1324.544302][T12874] bond2: entered promiscuous mode [ 1324.564115][T12874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1324.676939][T12879] bond2: (slave bridge2): making interface the new active one [ 1324.714262][T12879] bridge2: entered promiscuous mode [ 1324.741712][T12879] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1324.865437][T12897] netlink: 'syz.3.10176': attribute type 1 has an invalid length. [ 1324.892954][T12897] netlink: 11 bytes leftover after parsing attributes in process `syz.3.10176'. [ 1324.962644][T12903] xt_connbytes: Forcing CT accounting to be enabled [ 1325.192087][T12911] netlink: 168 bytes leftover after parsing attributes in process `syz.6.10179'. [ 1325.684836][T12938] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1326.117953][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10194'. [ 1326.305996][T12974] openvswitch: netlink: IP tunnel dst address not specified [ 1326.315818][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10196'. [ 1326.326493][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10196'. [ 1326.432343][T12980] openvswitch: netlink: IP tunnel dst address not specified [ 1326.466005][T12984] netlink: 'syz.1.10198': attribute type 11 has an invalid length. [ 1326.481309][T12985] openvswitch: netlink: IP tunnel dst address not specified [ 1326.682635][T12997] __nla_validate_parse: 2 callbacks suppressed [ 1326.682659][T12997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10200'. [ 1326.878902][T13006] tipc: Enabling of bearer rejected, failed to enable media [ 1327.077053][T13013] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.10207'. [ 1327.189050][T13019] x_tables: duplicate underflow at hook 1 [ 1327.201986][T13019] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10209'. [ 1327.326644][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10212'. [ 1327.405461][T13035] netlink: 'syz.0.10211': attribute type 28 has an invalid length. [ 1327.441257][T13035] netlink: 'syz.0.10211': attribute type 3 has an invalid length. [ 1327.462862][T13035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10211'. [ 1327.644571][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10216'. [ 1328.072569][T12957] Bluetooth: hci0: command 0x0406 tx timeout [ 1328.079351][T12957] Bluetooth: hci5: command 0x0406 tx timeout [ 1328.521647][T13084] netlink: 'syz.6.10226': attribute type 2 has an invalid length. [ 1328.733426][T13092] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1329.495385][T13115] bond4 (unregistering): Released all slaves [ 1329.752846][T13126] syzkaller0: entered promiscuous mode [ 1329.761810][T13126] syzkaller0: entered allmulticast mode [ 1330.306154][T13149] netlink: 'syz.3.10242': attribute type 1 has an invalid length. [ 1330.340035][T13149] netlink: 'syz.3.10242': attribute type 2 has an invalid length. [ 1330.455358][T13156] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1330.500591][T13159] netlink: 'syz.6.10245': attribute type 1 has an invalid length. [ 1330.511990][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10245'. [ 1330.974035][T13169] netlink: 'syz.0.10248': attribute type 62 has an invalid length. [ 1330.989966][T13169] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10248'. [ 1331.270955][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10253'. [ 1331.285104][T13182] bridge_slave_0: left allmulticast mode [ 1331.293168][T13182] bridge_slave_0: left promiscuous mode [ 1331.299943][T13182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.461592][T13189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10255'. [ 1331.755087][T13206] veth3: entered promiscuous mode [ 1331.787484][T13206] veth3: entered allmulticast mode [ 1332.104638][T13228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.157456][T13230] __nla_validate_parse: 1 callbacks suppressed [ 1332.157479][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10265'. [ 1332.286960][T13235] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10267'. [ 1332.461284][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10270'. [ 1332.476000][T13248] netlink: 'syz.6.10270': attribute type 51 has an invalid length. [ 1332.510956][T13251] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10271'. [ 1332.546337][T13254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.735057][T13264] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1332.752547][T13264] sit0: entered promiscuous mode [ 1332.764126][T13264] netlink: 'syz.6.10275': attribute type 1 has an invalid length. [ 1332.772990][T13264] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10275'. [ 1332.839778][T13271] team0: No ports can be present during mode change [ 1332.872596][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10277'. [ 1333.151590][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10281'. [ 1333.657495][T13318] syzkaller0: entered promiscuous mode [ 1333.663216][T13318] syzkaller0: entered allmulticast mode [ 1333.931877][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10295'. [ 1333.980887][T13337] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1333.992367][T13337] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1334.007409][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10294'. [ 1334.133804][T13346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10299'. [ 1334.145300][T13346] bridge: RTM_NEWNEIGH with invalid ether address [ 1334.161714][T13346] bridge: RTM_NEWNEIGH with invalid ether address [ 1334.244867][T13348] vxcan1 speed is unknown, defaulting to 1000 [ 1334.255017][ T5162] lec:lec_start_xmit: lec0:No lecd attached [ 1334.929684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1336.833028][T13329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1337.455600][T13420] netlink: 'syz.0.10319': attribute type 1 has an invalid length. [ 1337.481041][T13420] __nla_validate_parse: 2 callbacks suppressed [ 1337.481063][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10319'. [ 1337.559657][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10319'. [ 1338.200958][T13447] tipc: Enabling of bearer rejected, failed to enable media [ 1338.299304][T13450] netlink: 'syz.0.10330': attribute type 1 has an invalid length. [ 1338.334585][T13450] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1338.471439][T13452] bridge2: entered promiscuous mode [ 1338.489384][T13452] bridge2: entered allmulticast mode [ 1338.522331][T13452] team0: Port device bridge2 added [ 1338.534286][T13455] bridge0: port 1(team0) entered blocking state [ 1338.544297][T13455] bridge0: port 1(team0) entered disabled state [ 1338.551201][T13454] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1338.571677][T13455] team0: entered allmulticast mode [ 1338.589778][T13455] team_slave_0: entered allmulticast mode [ 1338.596108][T13455] team_slave_1: entered allmulticast mode [ 1338.621303][T13455] team0: entered promiscuous mode [ 1338.629946][T13455] team_slave_0: entered promiscuous mode [ 1338.638116][T13455] team_slave_1: entered promiscuous mode [ 1338.778799][T13465] netlink: 76 bytes leftover after parsing attributes in process `syz.6.10335'. [ 1339.312771][T13494] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.10343'. [ 1339.363724][T13496] netlink: 80 bytes leftover after parsing attributes in process `syz.6.10344'. [ 1339.618021][T13508] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.10347'. [ 1339.692394][T13496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.700228][T13496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.833507][T13516] netlink: 'syz.3.10349': attribute type 7 has an invalid length. [ 1339.927836][T13496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.946004][T13496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.058424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 1340.066545][ C1] lec:lec_tx_timeout: lec0 [ 1340.203551][T13518] macvtap1: entered allmulticast mode [ 1340.227482][T13518] veth0_macvtap: entered allmulticast mode [ 1340.264081][T13520] team0: left promiscuous mode [ 1340.280699][T13520] team_slave_0: left promiscuous mode [ 1340.294904][T13520] team_slave_1: left promiscuous mode [ 1340.316562][T25141] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.337442][T25141] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.362806][T13527] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10352'. [ 1340.561361][T25141] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.582783][T25141] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.779492][T13547] netlink: 'syz.1.10357': attribute type 1 has an invalid length. [ 1340.980528][T13562] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 1341.012944][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10361'. [ 1341.427158][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10369'. [ 1341.450798][T13591] netlink: 'syz.6.10367': attribute type 1 has an invalid length. [ 1341.488541][T13591] netlink: 280 bytes leftover after parsing attributes in process `syz.6.10367'. [ 1341.877611][T13613] xt_policy: output policy not valid in PREROUTING and INPUT [ 1342.582372][T13667] __nla_validate_parse: 2 callbacks suppressed [ 1342.582393][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10384'. [ 1342.674173][T13660] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1342.689831][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10384'. [ 1342.703153][T13660] bond4 (unregistering): Released all slaves [ 1342.711506][T13673] netlink: 'syz.5.10389': attribute type 8 has an invalid length. [ 1342.752280][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10389'. [ 1342.915453][T13673] bond0: entered promiscuous mode [ 1342.941900][T13673] bond_slave_0: entered promiscuous mode [ 1342.957376][T13673] bond_slave_1: entered promiscuous mode [ 1342.977802][T13673] bridge_slave_1: entered promiscuous mode [ 1343.005297][T13673] macsec0: entered promiscuous mode [ 1343.024457][T13673] ip6gretap0: entered promiscuous mode [ 1343.034513][T13673] debugfs: 'hsr1' already exists in 'hsr' [ 1343.045245][T13673] Cannot create hsr debugfs directory [ 1343.053043][T13673] hsr1: entered promiscuous mode [ 1343.069108][T13680] syzkaller0: entered promiscuous mode [ 1343.100439][T13680] syzkaller0: entered allmulticast mode [ 1343.190445][ T5273] nci: nci_ntf_packet: unknown ntf opcode 0x903 [ 1343.494737][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10395'. [ 1343.557257][T13719] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10396'. [ 1343.567532][T13719] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10396'. [ 1343.642212][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10397'. [ 1343.752764][T13725] macvtap1: entered allmulticast mode [ 1343.763167][T13725] veth0_macvtap: entered allmulticast mode [ 1343.809600][T13725] macvtap2: entered allmulticast mode [ 1343.963690][T13739] xt_l2tp: invalid flags combination: 0 [ 1344.155719][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10405'. [ 1344.254333][T13750] vlan1: entered allmulticast mode [ 1344.261204][T13750] bridge3: entered allmulticast mode [ 1344.389523][T13756] IPVS: set_ctl: invalid protocol: 0 1.0.0.0:20001 [ 1344.595418][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10409'. [ 1344.696550][T13768] netlink: 'syz.3.10409': attribute type 4 has an invalid length. [ 1344.707817][T13768] netlink: 'syz.3.10409': attribute type 1 has an invalid length. [ 1346.009597][T13697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1346.299815][T13781] bond3: option mode: invalid value (133) [ 1346.320084][T13781] bond3 (unregistering): Released all slaves [ 1346.452902][ T6157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1346.531034][T13805] netlink: 332 bytes leftover after parsing attributes in process `syz.0.10419'. [ 1346.720237][T13813] syzkaller0: left allmulticast mode [ 1346.806525][T13813] netlink: 'syz.1.10421': attribute type 11 has an invalid length. [ 1347.233412][T13841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1348.466819][T13894] xt_HMARK: spi-set and port-set can't be combined [ 1348.529570][T29510] Bluetooth: hci2: command 0x0406 tx timeout [ 1348.847138][T13905] __nla_validate_parse: 2 callbacks suppressed [ 1348.847161][T13905] netlink: 51 bytes leftover after parsing attributes in process `syz.0.10443'. [ 1348.871413][T13906] netlink: 'syz.5.10444': attribute type 1 has an invalid length. [ 1348.901002][T13906] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1348.915756][T13906] bond3: option mode: unable to set because the bond device is up [ 1350.277010][T13846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1350.445108][T13910] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1350.678162][T13933] x_tables: duplicate underflow at hook 3 [ 1351.122154][T13954] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10460'. [ 1351.165229][T13954] vlan2: entered allmulticast mode [ 1351.180828][T13954] gretap0: entered allmulticast mode [ 1351.212163][T13959] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10462'. [ 1351.239226][T13960] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10462'. [ 1351.439056][T13967] netlink: 288 bytes leftover after parsing attributes in process `syz.3.10464'. [ 1351.737810][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10468'. [ 1351.783858][T13982] netlink: 'syz.3.10469': attribute type 1 has an invalid length. [ 1351.810788][T13979] netlink: 'syz.0.10468': attribute type 1 has an invalid length. [ 1351.833092][T13979] netlink: 'syz.0.10468': attribute type 2 has an invalid length. [ 1351.956007][T13995] bond11: (slave gretap3): making interface the new active one [ 1351.992451][T13995] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 1352.087316][T14008] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10474'. [ 1352.103942][T14010] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10474'. [ 1352.266621][T14020] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.10479'. [ 1352.302220][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10478'. [ 1352.640524][T14037] syzkaller0: entered promiscuous mode [ 1352.646295][T14037] syzkaller0: entered allmulticast mode [ 1352.774099][T14042] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1352.815276][T14044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.064672][T14061] netlink: 'syz.3.10492': attribute type 32 has an invalid length. [ 1353.106339][T14062] netlink: 'syz.6.10494': attribute type 39 has an invalid length. [ 1353.123933][T14061] bond12: Setting coupled_control to off (0) [ 1353.185956][T14061] team0 (unregistering): Port device team_slave_1 removed [ 1353.577269][T14084] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1353.635805][T14084] bond3: (slave lo): Enslaving as an active interface with an up link [ 1353.648052][T14084] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1353.800387][T14096] syzkaller0: entered promiscuous mode [ 1353.806191][T14096] syzkaller0: entered allmulticast mode [ 1354.027857][T14110] __nla_validate_parse: 7 callbacks suppressed [ 1354.027880][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10509'. [ 1354.045192][T14112] netlink: 'syz.6.10510': attribute type 1 has an invalid length. [ 1354.083991][T14112] netlink: 'syz.6.10510': attribute type 2 has an invalid length. [ 1354.129054][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 1355.094980][T14170] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10523'. [ 1355.117812][T14173] netlink: 766 bytes leftover after parsing attributes in process `syz.0.10522'. [ 1355.152603][T14170] syzkaller0: entered allmulticast mode [ 1355.176965][T14170] netlink: 'syz.1.10523': attribute type 17 has an invalid length. [ 1355.200348][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10523'. [ 1355.223370][T14170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10523'. [ 1355.287031][T14170] gretap0: entered promiscuous mode [ 1355.320222][T14170] gretap0: left promiscuous mode [ 1355.508118][T14185] netlink: 'syz.0.10527': attribute type 1 has an invalid length. [ 1355.548852][T14185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10527'. [ 1355.686705][T14196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1355.719976][T14202] netlink: 'syz.1.10533': attribute type 1 has an invalid length. [ 1355.774883][T14203] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1355.787343][T14202] bond6: entered promiscuous mode [ 1355.793569][T14202] bond6: entered allmulticast mode [ 1355.803153][T14202] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1355.848867][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10532'. [ 1355.897093][T14212] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10537'. [ 1356.060820][T14219] netlink: 'syz.1.10538': attribute type 2 has an invalid length. [ 1356.079351][T14217] syzkaller1: entered promiscuous mode [ 1356.091380][T14217] syzkaller1: entered allmulticast mode [ 1356.114317][T14218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.254941][T14225] vxcan1 speed is unknown, defaulting to 1000 [ 1356.327083][T14231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10542'. [ 1356.408033][T14234] netlink: 'syz.6.10543': attribute type 32 has an invalid length. [ 1356.634895][T14243] netlink: 'syz.3.10544': attribute type 2 has an invalid length. [ 1357.144894][T14258] bond7 (unregistering): Released all slaves [ 1357.226827][T14275] netlink: get zone limit has 4 unknown bytes [ 1357.586247][T14290] x_tables: duplicate underflow at hook 1 [ 1357.691822][T14299] sctp: [Deprecated]: syz.6.10557 (pid 14299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1357.691822][T14299] Use struct sctp_sack_info instead [ 1357.765497][T14301] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1357.994776][T14310] netlink: 'syz.6.10561': attribute type 1 has an invalid length. [ 1358.683626][T14341] hsr_slave_1 (unregistering): left promiscuous mode [ 1358.797505][T14359] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1359.001685][T14368] 8021q: VLANs not supported on tunl0 [ 1359.271727][T14383] netlink: 'syz.0.10580': attribute type 4 has an invalid length. [ 1359.281329][T14383] __nla_validate_parse: 5 callbacks suppressed [ 1359.281350][T14383] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10580'. [ 1360.188266][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10594'. [ 1360.210839][T14431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10594'. [ 1360.391912][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10596'. [ 1360.413470][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10596'. [ 1360.437945][T14436] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10596'. [ 1360.716175][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10599'. [ 1360.830635][T14454] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10602'. [ 1360.840996][T14449] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10601'. [ 1360.930649][T14450] syzkaller1: entered promiscuous mode [ 1360.977387][T14450] syzkaller1: entered allmulticast mode [ 1361.019755][ T5810] IPVS: starting estimator thread 0... [ 1361.124610][T14463] tipc: Started in network mode [ 1361.130262][T14464] IPVS: using max 28 ests per chain, 67200 per kthread [ 1361.137490][T14463] tipc: Node identity ac14140f, cluster identity 4711 [ 1361.148032][T14463] tipc: Enabled bearer , priority 10 [ 1361.235505][T14467] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.10606'. [ 1361.272776][T14467] netlink: Conntrack attr has 3 unknown bytes [ 1361.708843][T14496] tls_set_device_offload_rx: netdev not found [ 1361.822128][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1361.831427][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1361.950591][T14503] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20004 [ 1361.980493][T14505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1362.258873][T27194] tipc: Node number set to 2886997007 [ 1362.613745][T14544] tipc: Resetting bearer [ 1362.789556][T14544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1362.812017][T14544] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1362.968750][T14544] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1363.003174][T14544] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1363.229293][T14544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1363.250009][T14544] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1363.335325][T14544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1363.373188][T14544] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1363.472941][T14583] netlink: 'syz.1.10633': attribute type 7 has an invalid length. [ 1363.546185][T14544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1363.576296][T14544] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1363.779750][T14604] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1363.872391][T14608] netlink: 'syz.0.10637': attribute type 11 has an invalid length. [ 1364.123396][T14622] netlink: 'syz.1.10643': attribute type 9 has an invalid length. [ 1364.530770][T14645] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1364.882004][T14665] __nla_validate_parse: 9 callbacks suppressed [ 1364.882027][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10650'. [ 1365.213828][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10656'. [ 1365.701370][T14710] openvswitch: netlink: Flow key attribute not present in set flow. [ 1365.879817][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10661'. [ 1365.910691][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10661'. [ 1365.932277][T14721] netlink: 'syz.1.10661': attribute type 1 has an invalid length. [ 1365.954324][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10662'. [ 1366.349160][T14739] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10666'. [ 1367.008492][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1367.016657][ C1] lec:lec_tx_timeout: lec0 [ 1367.057692][T14772] netlink: 'syz.1.10671': attribute type 1 has an invalid length. [ 1367.125573][T14772] bond7: (slave ip6gretap1): making interface the new active one [ 1367.139836][T14772] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1367.178077][T14772] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1367.221452][T14772] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1367.893924][T14802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.027290][T14802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.111988][T14802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.889762][T14851] netlink: 'syz.6.10692': attribute type 1 has an invalid length. [ 1368.917490][T14851] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10692'. [ 1368.946515][T14851] netlink: 658 bytes leftover after parsing attributes in process `syz.6.10692'. [ 1368.983976][T14851] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10692'. [ 1369.164441][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1369.505710][T14874] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 1369.585862][T14874] bond4 (unregistering): Released all slaves [ 1369.978133][T14897] IPVS: set_ctl: invalid protocol: 35 172.20.20.170:20003 [ 1370.060148][T14900] __nla_validate_parse: 1 callbacks suppressed [ 1370.060170][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10705'. [ 1370.102203][T14900] openvswitch: netlink: Flow actions attr not present in new flow. [ 1370.224369][T14903] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1370.494458][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10709'. [ 1370.892293][T14935] xt_socket: unknown flags 0x50 [ 1370.918284][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10715'. [ 1370.939409][T14940] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10714'. [ 1370.976977][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10713'. [ 1371.066643][T14941] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10715'. [ 1371.209808][T14948] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1371.223143][T14948] syzkaller1: Linktype set failed because interface is up [ 1371.238575][ T5810] syzkaller1: tun_net_xmit 90 [ 1371.649384][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10721'. [ 1371.697029][T14983] netlink: 'syz.1.10725': attribute type 1 has an invalid length. [ 1371.951916][T14993] netlink: 'syz.1.10728': attribute type 1 has an invalid length. [ 1371.967812][T14993] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.10728'. [ 1371.990753][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10727'. [ 1372.027050][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10729'. [ 1372.095376][T14999] xt_ecn: cannot match TCP bits for non-tcp packets [ 1372.107571][T14997] bond0: entered promiscuous mode [ 1372.113193][T14997] bond_slave_0: entered promiscuous mode [ 1372.119996][T14997] bond_slave_1: entered promiscuous mode [ 1372.126264][T14997] mac80211_hwsim hwsim94 wlan1: entered promiscuous mode [ 1372.148572][T14997] bond0: left promiscuous mode [ 1372.165788][T14997] bond_slave_0: left promiscuous mode [ 1372.174731][T14997] bond_slave_1: left promiscuous mode [ 1372.208769][T14997] mac80211_hwsim hwsim94 wlan1: left promiscuous mode [ 1372.287982][T15015] netlink: 'syz.5.10733': attribute type 7 has an invalid length. [ 1372.308243][T15015] netlink: 'syz.5.10733': attribute type 8 has an invalid length. [ 1372.376071][T15020] netlink: 'syz.3.10736': attribute type 11 has an invalid length. [ 1372.637158][T15038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1372.691462][T15040] syzkaller0: entered promiscuous mode [ 1372.711818][T15040] syzkaller0: entered allmulticast mode [ 1372.903480][ T5272] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.930549][ T5272] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1373.792755][T15104] x_tables: duplicate underflow at hook 1 [ 1374.259912][T15129] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1374.273568][T15129] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1375.161388][T15184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1395.898002][T15221] netlink: 'syz.6.10789': attribute type 1 has an invalid length. [ 1396.559353][T15240] bond0: Caught tx_queue_len zero misconfig [ 1396.575978][T15238] __nla_validate_parse: 14 callbacks suppressed [ 1396.576001][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10794'. [ 1396.599452][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10794'. [ 1396.615668][T15236] netlink: 256 bytes leftover after parsing attributes in process `syz.6.10793'. [ 1396.641279][T15238] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10794'. [ 1396.651960][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10794'. [ 1396.662435][T15238] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10794'. [ 1397.086978][T15271] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10804'. [ 1397.421853][T15291] netlink: 51 bytes leftover after parsing attributes in process `syz.1.10808'. [ 1397.928965][T15326] syzkaller0: entered promiscuous mode [ 1397.938259][T15326] syzkaller0: entered allmulticast mode [ 1398.110305][T15339] netlink: 'syz.6.10824': attribute type 4 has an invalid length. [ 1398.184437][T15344] netlink: 'syz.6.10824': attribute type 4 has an invalid length. [ 1398.250988][T15347] veth0: entered promiscuous mode [ 1398.269737][T15346] veth0: left promiscuous mode [ 1398.304619][T15349] netlink: 'syz.0.10829': attribute type 12 has an invalid length. [ 1398.329058][T15349] netlink: 'syz.0.10829': attribute type 29 has an invalid length. [ 1398.341617][T15349] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10829'. [ 1398.352166][T15349] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10829'. [ 1398.432580][T15357] siw: device registration error -23 [ 1398.435742][T15358] siw: device registration error -23 [ 1398.537266][T15363] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1398.560864][T15363] tipc: Enabled bearer , priority 0 [ 1398.569366][T15363] syzkaller0: entered promiscuous mode [ 1398.575495][T15363] syzkaller0: entered allmulticast mode [ 1398.594365][T15363] tipc: Resetting bearer [ 1398.606194][T15363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.649037][T15361] tipc: Resetting bearer [ 1398.722490][T15361] tipc: Disabling bearer [ 1398.807524][T25139] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.835649][T25139] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.858899][T25139] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.878718][T25139] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.972855][ T5162] lec:lec_start_xmit: lec0:No lecd attached [ 1398.979678][T15386] IPv6: Can't replace route, no match found [ 1399.050589][T15389] netlink: 'syz.3.10842': attribute type 2 has an invalid length. [ 1399.322470][T15402] veth7: entered allmulticast mode [ 1400.028085][T15430] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1400.662203][T15441] tipc: Started in network mode [ 1400.678592][T15441] tipc: Node identity 8a465452c866, cluster identity 4711 [ 1400.689420][T15441] tipc: Enabled bearer , priority 0 [ 1400.831563][T15460] syzkaller0: entered promiscuous mode [ 1400.849592][T15460] syzkaller0: entered allmulticast mode [ 1400.869729][T15460] tipc: Resetting bearer [ 1400.923081][T15472] nbd: must specify a device to reconfigure [ 1400.951140][T15439] tipc: Resetting bearer [ 1404.056792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5070 ms [ 1404.064919][ C1] lec:lec_tx_timeout: lec0 [ 1405.900596][T15439] tipc: Disabling bearer [ 1405.913212][T15475] netlink: 'syz.5.10866': attribute type 1 has an invalid length. [ 1405.921627][T15475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.932940][T27192] tipc: Node number set to 1109414994 [ 1406.214057][T15527] __nla_validate_parse: 10 callbacks suppressed [ 1406.214079][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10878'. [ 1406.597296][T15543] bridge0: port 2(veth1) entered blocking state [ 1406.606885][T15543] bridge0: port 2(veth1) entered disabled state [ 1406.639275][T15543] veth1: entered allmulticast mode [ 1406.650779][T15543] veth1: entered promiscuous mode [ 1406.666815][T15543] team0: entered promiscuous mode [ 1406.687630][T15543] team_slave_0: entered promiscuous mode [ 1406.734834][T15543] team_slave_1: entered promiscuous mode [ 1406.893580][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10885'. [ 1406.930062][T15563] set match dimension is over the limit! [ 1407.091557][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10891'. [ 1407.242541][T15579] openvswitch: netlink: Missing valid actions attribute. [ 1407.255798][T15579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.273219][T15579] openvswitch: netlink: Missing valid actions attribute. [ 1407.288899][T15579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1423.255889][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1423.262574][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1429.009000][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1429.017092][ C1] lec:lec_tx_timeout: lec0 [ 1430.603739][T15613] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10902'. [ 1430.677498][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10899'. [ 1430.849902][T15624] netlink: 'syz.0.10904': attribute type 28 has an invalid length. [ 1430.871970][T15624] netlink: 'syz.0.10904': attribute type 3 has an invalid length. [ 1430.880307][T15624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10904'. [ 1431.306784][T15644] syzkaller1: entered promiscuous mode [ 1431.314537][T15644] syzkaller1: entered allmulticast mode [ 1431.343880][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10911'. [ 1431.385075][T15650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.888201][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10923'. [ 1431.911538][T15681] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1432.109441][T15696] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10928'. [ 1432.194177][T15696] bond4: option miimon: invalid value (18446744073709551585) [ 1432.202173][T15696] bond4: option miimon: allowed values 0 - 2147483647 [ 1432.219604][T15696] bond4 (unregistering): Released all slaves [ 1432.307936][T15701] s5: renamed from vlan1 [ 1432.486978][T15711] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.10931'. [ 1432.570974][T15715] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.675427][T15721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10934'. [ 1432.914465][T15733] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10937'. [ 1432.950837][T15733] netlink: 'syz.3.10937': attribute type 30 has an invalid length. [ 1433.039779][T15733] bond13: option arp_missed_max: invalid value (0) [ 1433.047003][T15733] bond13: option arp_missed_max: allowed values 1 - 255 [ 1433.066194][T15733] bond13 (unregistering): Released all slaves [ 1433.139208][T15746] netlink: 292 bytes leftover after parsing attributes in process `syz.1.10942'. [ 1433.565604][T15784] xt_connbytes: Forcing CT accounting to be enabled [ 1433.720695][T15788] SET target dimension over the limit! [ 1433.833884][T15794] Bluetooth: MGMT ver 1.23 [ 1433.973703][T15806] netlink: 'syz.5.10957': attribute type 1 has an invalid length. [ 1433.990626][T15806] netlink: 'syz.5.10957': attribute type 1 has an invalid length. [ 1434.004137][T15806] netlink: 'syz.5.10957': attribute type 8 has an invalid length. [ 1434.183913][T15815] syzkaller0: entered promiscuous mode [ 1434.191750][T15815] syzkaller0: entered allmulticast mode [ 1434.215547][T15818] netlink: 'syz.6.10960': attribute type 1 has an invalid length. [ 1434.364644][T15818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1434.503513][T15832] x_tables: duplicate entry at hook 3 [ 1434.539683][T15835] x_tables: duplicate entry at hook 3 [ 1434.894210][T15858] netlink: 'syz.5.10970': attribute type 9 has an invalid length. [ 1434.940276][T15856] macvlan0: entered promiscuous mode [ 1435.344501][T15886] IPVS: Error connecting to the multicast addr [ 1435.354900][T15885] netlink: 'syz.3.10975': attribute type 21 has an invalid length. [ 1435.391092][T15885] 0: renamed from hsr_slave_1 (while UP) [ 1435.434632][T15885] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1435.632065][T15902] __nla_validate_parse: 15 callbacks suppressed [ 1435.632087][T15902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10981'. [ 1435.816326][T15906] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1436.001130][T15911] syzkaller0: entered promiscuous mode [ 1436.007351][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10984'. [ 1436.028548][T15911] syzkaller0: entered allmulticast mode [ 1436.306053][T15926] bond1: option mode: unable to set because the bond device has slaves [ 1436.352262][T15926] tipc: Trying to set illegal importance in message [ 1436.384032][T15926] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1436.828893][T15954] openvswitch: netlink: EtherType 50a is less than min 600 [ 1437.050146][T15970] netlink: 'syz.5.11004': attribute type 1 has an invalid length. [ 1437.083903][T15971] netlink: 'syz.6.11003': attribute type 10 has an invalid length. [ 1437.099275][T15970] bond4: entered promiscuous mode [ 1437.105085][T15970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1437.117138][T15971] bond0: (slave wlan1): Opening slave failed [ 1437.163014][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11006'. [ 1437.178884][T15970] bond4: (slave bridge3): making interface the new active one [ 1437.216424][T15970] bridge3: entered promiscuous mode [ 1437.262634][T15970] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1437.322372][T15975] xt_CT: No such helper "syz1" [ 1437.641067][T16002] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1437.694829][T16002] netlink: 'syz.1.11014': attribute type 1 has an invalid length. [ 1437.763873][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11020'. [ 1438.037109][T16022] netlink: 'syz.1.11022': attribute type 3 has an invalid length. [ 1438.057127][T16022] netlink: 'syz.1.11022': attribute type 3 has an invalid length. [ 1438.091497][T16022] lo speed is unknown, defaulting to 1000 [ 1438.108757][T16022] lo speed is unknown, defaulting to 1000 [ 1438.139648][T16022] lo speed is unknown, defaulting to 1000 [ 1438.196483][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11024'. [ 1438.230109][T16022] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1438.293147][T16034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11027'. [ 1438.356300][T16022] lo speed is unknown, defaulting to 1000 [ 1438.385815][T16022] lo speed is unknown, defaulting to 1000 [ 1438.412507][T16022] lo speed is unknown, defaulting to 1000 [ 1438.440820][T16022] lo speed is unknown, defaulting to 1000 [ 1438.501328][T16022] lo speed is unknown, defaulting to 1000 [ 1438.562531][T16022] lo speed is unknown, defaulting to 1000 [ 1438.587679][T16022] lo speed is unknown, defaulting to 1000 [ 1438.672214][T16055] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11034'. [ 1438.704105][T16022] lo speed is unknown, defaulting to 1000 [ 1438.723861][T16022] lo speed is unknown, defaulting to 1000 [ 1438.750074][T16022] lo speed is unknown, defaulting to 1000 [ 1438.759168][T16022] lo speed is unknown, defaulting to 1000 [ 1439.061671][T16068] netlink: 'syz.1.11039': attribute type 29 has an invalid length. [ 1439.111120][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11039'. [ 1439.171520][T16076] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.11042'. [ 1439.177295][T16078] netlink: 'syz.5.11043': attribute type 1 has an invalid length. [ 1439.209544][T16078] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11043'. [ 1439.235810][T16078] netlink: 'syz.5.11043': attribute type 1 has an invalid length. [ 1439.278414][T16078] netlink: 'syz.5.11043': attribute type 8 has an invalid length. [ 1439.373440][T16087] netlink: 'syz.1.11046': attribute type 2 has an invalid length. [ 1439.495692][T16095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.506876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.690521][T16087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1439.814229][T16105] bond13: Unable to set down delay as MII monitoring is disabled [ 1439.854014][T16105] bond13 (unregistering): Released all slaves [ 1440.053844][T16125] Bluetooth: MGMT ver 1.23 [ 1440.064194][T16127] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 1440.219755][T16141] [ 1440.222162][T16141] ====================================================== [ 1440.229224][T16141] WARNING: possible circular locking dependency detected [ 1440.236296][T16141] syzkaller #0 Not tainted [ 1440.240752][T16141] ------------------------------------------------------ [ 1440.247807][T16141] syz.1.11060/16141 is trying to acquire lock: [ 1440.253993][T16141] ffffffff8ff4be58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 1440.263206][T16141] [ 1440.263206][T16141] but task is already holding lock: [ 1440.270613][T16141] ffff8880798b9270 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 1440.279916][T16141] [ 1440.279916][T16141] which lock already depends on the new lock. [ 1440.279916][T16141] [ 1440.290361][T16141] [ 1440.290361][T16141] the existing dependency chain (in reverse order) is: [ 1440.299440][T16141] [ 1440.299440][T16141] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1440.307613][T16141] _raw_spin_lock_bh+0x36/0x50 [ 1440.312948][T16141] nr_del_node+0x2a9/0xbb0 [ 1440.317936][T16141] nr_rt_ioctl+0xb34/0xf90 [ 1440.322921][T16141] sock_do_ioctl+0x101/0x320 [ 1440.328064][T16141] sock_ioctl+0x5c6/0x7f0 [ 1440.332949][T16141] __se_sys_ioctl+0xfc/0x170 [ 1440.338091][T16141] do_syscall_64+0x15f/0xf80 [ 1440.343236][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.349677][T16141] [ 1440.349677][T16141] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1440.357533][T16141] _raw_spin_lock_bh+0x36/0x50 [ 1440.362852][T16141] nr_rt_device_down+0xbe/0x860 [ 1440.368261][T16141] nr_device_event+0x137/0x150 [ 1440.373582][T16141] notifier_call_chain+0x1ad/0x3d0 [ 1440.379244][T16141] netif_close_many+0x2ae/0x420 [ 1440.384650][T16141] netif_close+0x160/0x220 [ 1440.389619][T16141] dev_close+0x10a/0x220 [ 1440.394425][T16141] bpq_device_event+0x377/0x6a0 [ 1440.399839][T16141] notifier_call_chain+0x1ad/0x3d0 [ 1440.405499][T16141] __dev_notify_flags+0x16d/0x310 [ 1440.411083][T16141] netif_change_flags+0xe8/0x1a0 [ 1440.416580][T16141] dev_change_flags+0x130/0x260 [ 1440.421982][T16141] dev_ioctl+0x7b4/0x1150 [ 1440.426866][T16141] sock_do_ioctl+0x23e/0x320 [ 1440.432009][T16141] sock_ioctl+0x5c6/0x7f0 [ 1440.436888][T16141] __se_sys_ioctl+0xfc/0x170 [ 1440.442022][T16141] do_syscall_64+0x15f/0xf80 [ 1440.447163][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.453607][T16141] [ 1440.453607][T16141] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1440.461556][T16141] __lock_acquire+0x15a5/0x2cf0 [ 1440.466969][T16141] lock_acquire+0x106/0x350 [ 1440.472030][T16141] _raw_spin_lock_bh+0x36/0x50 [ 1440.477344][T16141] nr_del_node+0x57d/0xbb0 [ 1440.482315][T16141] nr_rt_ioctl+0xb34/0xf90 [ 1440.487299][T16141] sock_do_ioctl+0x101/0x320 [ 1440.492442][T16141] sock_ioctl+0x5c6/0x7f0 [ 1440.497356][T16141] __se_sys_ioctl+0xfc/0x170 [ 1440.502524][T16141] do_syscall_64+0x15f/0xf80 [ 1440.507682][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.514132][T16141] [ 1440.514132][T16141] other info that might help us debug this: [ 1440.514132][T16141] [ 1440.524470][T16141] Chain exists of: [ 1440.524470][T16141] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1440.524470][T16141] [ 1440.538332][T16141] Possible unsafe locking scenario: [ 1440.538332][T16141] [ 1440.545811][T16141] CPU0 CPU1 [ 1440.551203][T16141] ---- ---- [ 1440.556588][T16141] lock(&nr_node->node_lock); [ 1440.561380][T16141] lock(nr_node_list_lock); [ 1440.568520][T16141] lock(&nr_node->node_lock); [ 1440.575832][T16141] lock(nr_neigh_list_lock); [ 1440.580542][T16141] [ 1440.580542][T16141] *** DEADLOCK *** [ 1440.580542][T16141] [ 1440.588742][T16141] 2 locks held by syz.1.11060/16141: [ 1440.594049][T16141] #0: ffffffff8ff4beb8 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 1440.603579][T16141] #1: ffff8880798b9270 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 1440.613304][T16141] [ 1440.613304][T16141] stack backtrace: [ 1440.619220][T16141] CPU: 0 UID: 0 PID: 16141 Comm: syz.1.11060 Not tainted syzkaller #0 PREEMPT(full) [ 1440.619242][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1440.619254][T16141] Call Trace: [ 1440.619262][T16141] [ 1440.619271][T16141] dump_stack_lvl+0xe8/0x150 [ 1440.619300][T16141] print_circular_bug+0x2e1/0x300 [ 1440.619332][T16141] check_noncircular+0x12e/0x150 [ 1440.619362][T16141] __lock_acquire+0x15a5/0x2cf0 [ 1440.619397][T16141] ? nr_del_node+0x57d/0xbb0 [ 1440.619421][T16141] lock_acquire+0x106/0x350 [ 1440.619444][T16141] ? nr_del_node+0x57d/0xbb0 [ 1440.619470][T16141] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1440.619488][T16141] ? nr_del_node+0x247/0xbb0 [ 1440.619520][T16141] ? nr_del_node+0x57d/0xbb0 [ 1440.619544][T16141] _raw_spin_lock_bh+0x36/0x50 [ 1440.619563][T16141] ? nr_del_node+0x57d/0xbb0 [ 1440.619587][T16141] nr_del_node+0x57d/0xbb0 [ 1440.619615][T16141] nr_rt_ioctl+0xb34/0xf90 [ 1440.619644][T16141] ? kasan_quarantine_put+0xbb/0x1f0 [ 1440.619675][T16141] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1440.619705][T16141] ? apparmor_capable+0x126/0x170 [ 1440.619727][T16141] ? capable+0x88/0xe0 [ 1440.619752][T16141] ? nr_ioctl+0x1b1/0x3b0 [ 1440.619774][T16141] sock_do_ioctl+0x101/0x320 [ 1440.619796][T16141] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1440.619814][T16141] ? do_futex+0x333/0x420 [ 1440.619847][T16141] sock_ioctl+0x5c6/0x7f0 [ 1440.619866][T16141] ? __pfx_sock_ioctl+0x10/0x10 [ 1440.619885][T16141] ? __fget_files+0x2a/0x420 [ 1440.619907][T16141] ? __fget_files+0x3a0/0x420 [ 1440.619928][T16141] ? __fget_files+0x2a/0x420 [ 1440.619951][T16141] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1440.619970][T16141] ? __pfx_sock_ioctl+0x10/0x10 [ 1440.619988][T16141] __se_sys_ioctl+0xfc/0x170 [ 1440.620005][T16141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.620023][T16141] do_syscall_64+0x15f/0xf80 [ 1440.620045][T16141] ? trace_irq_disable+0x3b/0x140 [ 1440.620063][T16141] ? clear_bhb_loop+0x40/0x90 [ 1440.620084][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.620102][T16141] RIP: 0033:0x7f2e4519c819 [ 1440.620120][T16141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.620136][T16141] RSP: 002b:00007f2e45fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.620155][T16141] RAX: ffffffffffffffda RBX: 00007f2e45415fa0 RCX: 00007f2e4519c819 [ 1440.620168][T16141] RDX: 0000200000000740 RSI: 000000000000890c RDI: 0000000000000004 [ 1440.620181][T16141] RBP: 00007f2e45232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1440.620192][T16141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.620204][T16141] R13: 00007f2e45416038 R14: 00007f2e45415fa0 R15: 00007ffd0d638858 [ 1440.620226][T16141] [ 1440.852000][T16148] __nla_validate_parse: 5 callbacks suppressed [ 1440.852067][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11062'.