last executing test programs: 2m25.330103388s ago: executing program 4 (id=2509): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c00048028000180080001006e6174001c000280080002400000000a080003400000081608000140000000000900020073797a320000"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2m24.988997422s ago: executing program 4 (id=2510): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) connect(r0, &(0x7f00000000c0)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x20040840) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) 2m24.789068631s ago: executing program 4 (id=2512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x9c) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f00000000001a37ee450200000008000300", @ANYRES32=r2, @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0xb}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x80000001, 0x45, &(0x7f00000002c0)=""/69, 0x40f00, 0x2, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x9, 0x80}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x1, 0x2, 0xc}, {0x1, 0x1, 0x8, 0x6}, {0x1, 0x2, 0x3, 0xb}, {0x3, 0x1, 0x6, 0x6}], 0x10, 0xd}, 0x94) ioctl(r7, 0xa, &(0x7f0000000600)="6213e3b0fd6c8cb4fe123a30142fef43ff3b9d4aec599dce4dd414e871ba9011d5a7d3a6ef8d9ff5418bfafe4e0dfe0784635a730520d4801791debc30a8995762fcbfd880") ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000880}, 0x20000000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000680)=0x5, 0x4) (async) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) socket$inet6_udp(0xa, 0x2, 0x0) 2m24.403591908s ago: executing program 4 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1000, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x3, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r11, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000) sendmmsg$sock(r10, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x2}, {0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2m23.839915227s ago: executing program 4 (id=2525): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1, {0x1, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$unix(0xffffffffffffffff, 0x0, 0x861) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000020500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x55, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff8}, {0x9, 0xffe0}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x40c00d4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x881}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) close(0x3) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a008000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmmsg(r5, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="67a9b424e88be3c629c0512c94fb6223bd2af904dd67137e49d8257b0ff940aa822095950ecf85f25caf757260bf1c20a20132ab86d922efb2b516f4aa6f6e0174737496070d5456f551507e65a6b6ceddafe864b0d874b81c5430ac01ce9ed682a103451c6787f85e62d86bbc611caa108e95f4baf685b4293e44ad845c9da49b4217cba0d31adc26ca7e6f450895c2db5c620edbeebed1e1b44026b90277d2555170a44503e3e3c5a5b511e1aba8314d750260751eb8282ee5b04b4ac44086dfea0ffd100fb89186946a3be7976b3a7aa34078c789aafa074619c690511d9fd85faf1c71e7331c7b22c5e228264a", 0xef}, {&(0x7f0000000480)="ad9b761900166f0ec3a69976052a78843ed9bfc342a61ec51b29fd56e67fac11ccb6b4bc0ba9d6fa95badfc19a2795e78d5cfde93b935b54ddc4f5819d5ae59efc6cdb53bdaa59ce4c84d5da59", 0x4d}, {&(0x7f0000000500)="9ed4c613daf7f5abcc97f3887c3d4daf5df76851b3c651e16bfed19742fe5efe607c750777", 0x25}], 0x3, &(0x7f0000000c00)=[{0xa0, 0x0, 0x7, "501b054e8673911dde656379fca37964ce639595d2801ab7fb5d9625d926e5b201ba13c25a09fcabbcf283fe0949cb7d0c178e7412c5e86215d54631d9b64daa75c0fbebd76bbee3ed0685ec0d778b47d3fbb0cd7e2420f1dada7cff7301a03ff1b6434444b05e9b86e8ce3bb10162c65ab86a31a96aa3a716ca5e9cdc7a7978a62f69c2ac85cc4ecdc0050ce51cca"}, {0xc8, 0x109, 0x9, "e55a9a60ff7cbcc8f14d913281d3b7bc4daf9ae884e97eedc6b1927b4c7b510070a9b7f1657b9010a9104352d725f9046bb53ea60a1f135b5259838606d103cc4cda7d4d8218600fcb0cae5752432f78e4e602d446834b17dc87a20d00fa33bb002957023de38985c15cbe5cf86201dbc17e1187325fd60d61fefce5f1dcfb85067a2f4f003df052484be974c4276a5f0a994dbcecbf56110813ab87625273c160aef1ae7c5681d0aac94271ea31b4abc9d3dd"}, {0xf0, 0x7, 0x7, "89dc237a2c0f20ed10ac6f6692317ac2a5556a040983ae58fbeeb31371c362788abdbc6647b54780a0696bcd7cb6e32e3e26026fdcd9af635a0dedb85505caec8578c36de609b6c974026be0932343e565f1a5919f2f61d3f53c2b4f0d561b2385bc04496ea4d1f364242af9136d40d2fc8f7ed0054a2927c6b6629faa6c4639a9f794271e4007b57d169e7dbbcd3dd528284f8d8d2b7849632bb9b92c74d99f287ee814134bea7ff722f52759cc8586f2ab5ca72d0c4e3833802977da70eb9a734ecbe88b850070432304832caa0f4d9eb715aa697586e907"}], 0x258}}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x3, @mcast2}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)="7f18418acc41130c936a0ec31fa3a31cabaa9714103eb418894ce6e9905daa8d9cb3ed4d1fbf7b89122f686197aefa75f15381e87c40a46a784c87e5db8eee8a5793cf6997700e354e4f85b8cc19193ef237f0ef13af0d9479f50cca580b9d99f1d9cf59d4634daead8bcbd6267bfe6f300db863da1c241f", 0x78}, {&(0x7f0000000880)="1d29207cd72e44d019570c455a062d9027d854a829ae24f5b3b888038ff5edd61c5dedc2955b51e7b7b4ff261f1ce1153a835279005cc15f7a7d62851d8166304a80bbcc35d9cb2b1903151417e848f31881684da4a7acb9f645243d721d62ea7f", 0x61}, {&(0x7f0000000600)="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", 0x167}, {&(0x7f0000000a00)="6bc498c5898eae8e3dc970554ea405f77fa48cb5949b77624b51ad088f6329e7ab0e34f73190394229cc2393794a3bb3d1a9b167aefddc88f4442bfb1d396bcdeaa33861ed36a5fb14fc24", 0x4b}, {&(0x7f0000000a80)="98fb6dc14e5887c9a6a2dfe99e27ed57df84b97e5bdeba935365a50a9238d1c29972a3898e6515dda137536fa8eb2d43bb424d232de883cb5561b2bd96babc87561e88f76fad9212b94a926a86f1c4ac0cf00d1cfd72af231b72094d04a4e6d9bba9461e692c58fefda6c48df6e58d4944373335fe47c38cf276a12709175cd10d8cdbc3eaff9d684dd28d453681e66271d85d0772309bd55fdd3d6ade3dc294034be310187b8b2474da22a9bca0acd1f814d7cd29eddd52cda186e0767d51731dce9f14ee47ea7e4266164058664325c162e44139e8077c522c617270cae9a59dac3a", 0xe3}], 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x1340}}, {{&(0x7f0000003100)=@can={0x1d, r1}, 0x80, &(0x7f0000004600)=[{&(0x7f0000003180)="60a77eb37c", 0x5}, {&(0x7f00000031c0)="a8fceceb2901bb893f8d7153186b29e736b38186de152ef5f768795391f3a61384dce3ef251aba95fa1002ac81abff6806633a10b68929fd7f5114eb1a75545da7a46dd767fcda09a5614b8da226c0e2db886c10084ee594556dcc62ab34fe930d5f6f96d375566b9106098c8a38ea76d8fa2b52d8ef4f0b272608294743d5ebbb9378f68834123ca7786eeb541e9c0fa8d47f45e69a51615f20bbabc37efe8e67fef0acb36108be22125981770539068c5f882fe43d9bd1affc56d2a284b6bf5a9049565fa66b259e7a6361d84c377576d539e9c463cec57aabe0e21e1aa513fbd770bac0746ce09967f0b04fd83c3e5d", 0xf1}, {&(0x7f00000032c0)="1401f00a48b826f41b493413936f0704131b35ac2ee3eb583965b562486ae1cf576d26c3c6cb", 0x26}, {&(0x7f0000003300)="c5a2069f53083ffb94b45c012243bf3671f2561760d69d65fee14a233d37b875c36caff3126ef6bb0c0a7d888712c34e94b4e46f634d8a75c024b51a489af6fc1847f21eb2423145e9c100251b324c9a5ad5d815ab7dfbfa11408211dfe5fa5589991fdb591b0e65a2ad63e23a49aba89eb01481ee9e8f87ea5bd7035f4095e262c8d8fa6c9fe0ee5321", 0x8a}, {&(0x7f00000033c0)="7dd4c139cdeff9ab87eab3d2c2c3dca44e488428a3528871f9d588ad9c0815f3699e2304e2f0", 0x26}, {&(0x7f0000003400)="4c92dcb645990180dde41c6b97bd62fa3a5f44be1a22892d9b4a7509636f6c65890b07142a4ebaba1ef3beccd365b939789fb8733016b7f9a8bf583102ce03fd71f61879e67004e3c35f036d1366ec7df5380e07cd53815a74a870e4bb0933154725ad212133d0b408fb5d195fc4c79eb71756c15e67393e03f604e3120d745d2df27f116b25073b8e559a855ce15b4e768c314963438c9bb26125007da59f38204774deb9689e6ec43f416e5ab5f99aa216b4a63a93138b67a655f1a082166ad1978fa02db4f6266420fcfc57b9eec5058b61f400394fece2bba345a360677ca72ed4e7778cb4892908bfcdda4e68415b", 0xf1}, {&(0x7f0000003500)}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000004540)="574ad98650f14e9cf999ae5322d8e442a90a07448223e943931c24be310be8e9040260776f7bad82b52a2f61f9e69cc3047dc75bd0d758f6f6d5e0751f61a739a5ab3998f23513e948cda0b61d367947103c0c9ac4541da765a60f691fbda9ef2ce476dcfd05868e2ba62a0b3184b14457b060826d07c01d75340fb6fb522fd11d911798f26c9035b18d519f8f402f489d6fbf0f037015fcb2a35822707066f4e0f2bfdf1f0a9d4c", 0xa8}], 0x9, &(0x7f00000046c0)=[{0x10, 0x1}, {0xc8, 0x10b, 0x10000, "9cc4c52a5d55e36a2b52096fac14e77a8985bb9a4bf07e17a256491e874ba796f34242038cb556fc6c86d7ffbe9fb841a85f8b115e75316f2f3a6dd42d21943c056df4cbc08ccfdeeb67a6c4a2ad2b73bfbf75f2dfb6319a84eb3dbe1ca72d14deb7b26d1868c2057cb17ff8b3cf2d1e7353611c8b8c84862227cf0dc2126ba4fa19da7d0f937c86ccef42570f9bf466a3a37ab0e21636eac873e9d1375c1f7f0cffc46c36fcc559d8f4095e5e0d5fc82e"}, {0xf8, 0x113, 0xfea, "f2fa7f7492510ef6db7aaef71b3d7ddbf670bb14e54b4670c96564bc85869918819814aeac0823b0244069a3c4a6faec6b216a9f0284cdb36d405015eba231e3f0aec85ef7b5d229e6e65a8b871586e941bc2b204ee29f34a3ebec1e363be81f33612d67fac5b6b141bcd4dda6843ae018669840880f24d80197663f78d9cc5f254982cfa79779c6afcda409446bff54ee26f8ac298f7a45d5a2dd4c7bf436afdc7b8c2b2d7a46325e5f911418f9a943640197b3230b91236d2f36d7209e8bf8240eeb8cdf56cba6e90127ec965297eca4ba2590f08bad8219b4abee70ba9cf07362b7"}, {0xe0, 0x6, 0x9, "991b95c1b679052a865182e7557990e17d9625144648126229a5f295637431ede96e71ca8ebe83f25aaddece3370a4ccfbb39c3c9da960bf1fe339a5dc4fad8a253cb74ffbdf25ebb8a2e80442e8cf4ad30f1aa9151196847960cab9f3ce7bbb15ae6267a1f21f0f58373f30a703d0bf96cc823c718e49b2657a92a033209eac87da776062a9cad6b9d4b92257b88681fea7aa507f5b783348ef44e29ee4960c6886227327d01bd69545d5a9c64f444a9c6ea73cc9f8aa49ed54a4a32b854878cefea55cf16206b5b336e07d4fdea8b6"}, {0x60, 0x88, 0x2, "94b023863243a7758bb7c3c72c343ee1dd045f32961cd0c06b19c64e62965e807843a6848adad8616093218e2bb2ffb51cd321311a94bbd6dab268e48ee3e238be9a50187e0c93fc8ed8e47367"}, {0x28, 0x110, 0x0, "b97c34dcfa627d0b342bee61b0f771bc3d0babd8"}], 0x338}}, {{&(0x7f0000004a00)=@caif=@rfm={0x25, 0x523, "efab1a5e31ea7c0f1e010741a83edc6e"}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004a80)="079217bc34b7898834f9a05de71584711d4f13badf9e1f0d3d71c2f2f7857394f9d543f705efa525459f5c0f741156d3fa6af9f98cfb7c2c7ceb13ccba1e5efd00fb5c8432b4cf383d4b76d03b86c7d0a8bf2bbb0451d65ad185af6468e9468de921f88f9049bc8360ee310689585ccb6b65789c522d842df14f5a2e63f0313dcb3d4e2c1662fe0b0f079bd439936ec4ae0591aba96876021c25af91127278f211a4551a20f2ff7e10873ddc1f4dbca6f931147b643649133eff3bdc4a1c07997506a6ee", 0xc4}], 0x1, &(0x7f0000004bc0)=[{0x68, 0x88, 0x4, "5c73c2a50e7e4deb015d36596deaee2b8e4ddf9a5021b10dadb16e63cbd1502e5605949bcde3d39293d0c569b045e5826d64659891e9bf3e64f1b4c1c9d70369f9277b3065a472f7a5c32e1b6a08de1ffc"}, {0x58, 0x104, 0x1, "9378327b2046b379cb61fcee58ef9afd0e75e26e3be15c454f3c969529dd51a2d75ecab55053ae70e5e6a0b318c35b952008e8f0d2bfd4116d2753c120f2b19cac087bc2"}], 0xc0}}], 0x4, 0x4008091) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r10, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 2m23.504095567s ago: executing program 4 (id=2528): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61f0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="32b05253", @ANYRESDEC=r0, @ANYBLOB="010026bd7000fcdbdf25160000000500030001000000050004000000000005000400010000000c00018003000300010000000500040000000000050003000000000018000180140002006c6f00"/90], 0xffffff47}, 0x1, 0x0, 0x0, 0x40095}, 0x52fd794718c63698) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x5) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) listen(r1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000200)=@file={0x1}, 0x6e) syz_emit_ethernet(0xe, &(0x7f0000000300)={@broadcast, @local, @void, {@generic={0x2}}}, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f0000000040)=0x7, 0x4) close(0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x30, r8, 0x301, 0x0, 0x0, {0x17}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) 2m8.389094128s ago: executing program 32 (id=2528): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61f0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="32b05253", @ANYRESDEC=r0, @ANYBLOB="010026bd7000fcdbdf25160000000500030001000000050004000000000005000400010000000c00018003000300010000000500040000000000050003000000000018000180140002006c6f00"/90], 0xffffff47}, 0x1, 0x0, 0x0, 0x40095}, 0x52fd794718c63698) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x5) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) listen(r1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000200)=@file={0x1}, 0x6e) syz_emit_ethernet(0xe, &(0x7f0000000300)={@broadcast, @local, @void, {@generic={0x2}}}, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f0000000040)=0x7, 0x4) close(0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x30, r8, 0x301, 0x0, 0x0, {0x17}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) 6.201816153s ago: executing program 1 (id=3877): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000080)='\x00', 0x1, &(0x7f0000000100)={@align=0x1, {0xd43, 0x200, 0x6, 0x9}}, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @hopopts_2292={{0x18}}], 0x40}, 0x0) 5.974009797s ago: executing program 1 (id=3885): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) close(0x4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x94}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x311}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24048050}, 0x4008001) 5.560055456s ago: executing program 1 (id=3891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(r3, r4, 0x0, 0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r2, 0x20, &(0x7f0000000880)={&(0x7f0000000300)=""/192, 0xc0, 0x0, &(0x7f00000007c0)=""/125, 0x7d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRESDEC=r5, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0xb, &(0x7f0000000180)=@raw=[@generic={0x81, 0x8, 0x5, 0xa44, 0x14cdde7a}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x101, 0x6}, 0x10, 0x6918, r3, 0x3, &(0x7f0000000680)=[0xffffffffffffffff, r5, r6, r7, r8, r9, r11, r13, 0x1], &(0x7f00000006c0)=[{0x0, 0x5, 0x9, 0x5}, {0x0, 0x2, 0x6, 0x7}, {0x5, 0x3, 0x5, 0x4}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r15, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r16, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xda6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601080000000000a4c5000000fffd14000780080011400000001805001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x0, 0x7}}]}}}]}, 0x60}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @nfc={0x27, r18, 0xffffffffffffffff, 0x3}, @ethernet={0x306, @link_local}, @ax25={0x3, @bcast, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8, 0xc3f, 0x3d8e}) 5.419878845s ago: executing program 5 (id=3895): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) sendto$inet6(r1, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x0, &(0x7f0000000040)={0xa, 0xfffd, 0x800ff, @mcast1}, 0x1c) socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21131, 0x31}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 5.316183918s ago: executing program 1 (id=3896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) 5.311220878s ago: executing program 5 (id=3897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b75d937e552300", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ffffffffffffffff"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r7 = accept(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x41061df5efd3e95a, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4010) connect$x25(r5, 0x0, 0x0) pipe(&(0x7f0000000100)) close(r2) 5.053414263s ago: executing program 1 (id=3901): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x6, 0xc3, 0x7, 0x2, 0x2}) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x6, 0xc3, 0x7, 0x2, 0x2}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x4, 0x2, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) recvfrom(r6, &(0x7f0000000280)=""/92, 0x5c, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x10, 0x3, 0x4) (async) r9 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r10, 0x0, 0xc854) setsockopt$sock_int(r10, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) socket(0x11, 0x3, 0x8) write$tun(r7, &(0x7f00000024c0)=ANY=[@ANYBLOB="000088084959002c0065000004019078ac1414bbffffffff940ff00c8e76d0966f8e2b2407c08a001000907807ff0006"], 0x30) (async) write$tun(r7, &(0x7f00000024c0)=ANY=[@ANYBLOB="000088084959002c0065000004019078ac1414bbffffffff940ff00c8e76d0966f8e2b2407c08a001000907807ff0006"], 0x30) 4.943153615s ago: executing program 5 (id=3903): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {0x0, 0x6}, {0xc, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x5000}]}, 0x2c}}, 0x20000000) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x6, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2e}}, 0x14) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_stats}) 4.808296976s ago: executing program 5 (id=3905): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3e}]}}]}, 0x44}}, 0x4814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a3000000000140007800800130000000000080012400000000d050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.663202974s ago: executing program 5 (id=3906): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0xe940}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) unshare(0x6020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)=ANY=[], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x800) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0)=0xebb4, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000203050000000000000000f901000000090002000700003402"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}}, 0x4000010) unshare(0xa020480) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, 0x0, 0x0) 3.61862702s ago: executing program 3 (id=3915): socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@perf_event={0x7}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0}, 0x16) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 3.531870167s ago: executing program 3 (id=3916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0xf5ff, &(0x7f0000000040)={&(0x7f0000000700)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000001c0)=0x8) 3.530735475s ago: executing program 3 (id=3917): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8080000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16747762}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x2404c002}, 0x80) r2 = socket$inet6(0xa, 0x800, 0xd2ad) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000300)={r3, 0x19, "ca7515588f9bb3bcd97b3fb2241bc330efd8209d81b17da164"}, &(0x7f0000000340)=0x21) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1f4, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "8ff9fa83920cb5f6e2e4d3e4fed76b7f18686331e86d5a2b8f605f9b0ceed14436329e13c88576fde4d88d79f5b96fdeacb0fa574142de"}, @TIPC_NLA_NODE_ID={0x4e, 0x3, "751e557c1ed04b266343e7910ac94fccabf23d615bc48b2d93c6f6bae6ac52d2bb822f5c5fbaf276c050958307c175ccf3ac86838ccff628aaf4f37ba7fe14a35ded787d13fe935f5291"}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @local, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x652}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8041}, 0x20040840) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000640)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000680)={0x80000001, 0xb, 0x9, 0x31e0, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000700)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000740)={0x2c, 0x4, r4, 0xe}, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x8018}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@union={0x7, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x9, 0x5, 0x2}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @ptr={0xf}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0xa}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x2}}]}, {0x0, [0x61]}}, &(0x7f0000000a40), 0x7f, 0x0, 0x1, 0x4}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x2, &(0x7f0000000b00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000b40)='GPL\x00', 0x80000, 0x2f, &(0x7f0000000b80)=""/47, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0xc4, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000c40)=[{0x5, 0x1, 0x7}, {0x2, 0x5, 0xb, 0x2}], 0x10, 0x4}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='cpuacct.usage_percpu\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x13a2997d, '\x00', r4, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0\x00', 0x0, 0x0, r0}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x19, 0x26, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @generic={0x2, 0xe, 0xc, 0x8dfe, 0xb}]}, &(0x7f0000000940)='GPL\x00', 0x4, 0x8, &(0x7f0000000980)=""/8, 0x41100, 0x16, '\x00', r4, @cgroup_sockopt=0x3f, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x3, 0x20000000}, 0x10, 0xffffffffffffffff, r6, 0x7, &(0x7f0000000f00)=[r7, r8, r9, r10], &(0x7f0000000f40)=[{0x4, 0x1, 0xb, 0x4}, {0x0, 0x1, 0x0, 0x7}, {0x3, 0x2, 0x3, 0x5}, {0x5, 0x4, 0x3}, {0x3, 0x1, 0x10, 0x8}, {0x0, 0x5, 0x2, 0x1}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x7}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001080)={0x1, [0x5]}, &(0x7f00000010c0)=0x6) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000001100)={@private0={0xfc, 0x0, '\x00', 0x1}, r4}, 0x14) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x35d5000) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000001140)={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, 0x3ff, 0x1, 0x1, 0x0, 0x1, 0x80040002, r4}) unshare(0x44030000) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f00000011c0)) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x12c, 0x12, 0x200, 0x70bd28, 0x25dfdbfd, {0x3, 0x13, 0x8f, 0x3, {0x4e24, 0x4e21, [0x0, 0x5a51, 0x2, 0x80000000], [0x6, 0x9, 0xff, 0x12c], 0x0, [0x622f54d3]}, 0x1, 0xe8d5}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "48251fd4a8f5b86ce5c66cb9b26a4683"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "c05842521e5e3baacc10e12dbdf3d1c469b22f7797cea1c8ef44a366e93085bd4821a7edd2b7e166c20093f6d6"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "0330cebe6b6b14a4d1c79e9127e06f7e42ec41266eb9a7f997b173"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "82eedccc574eb5b6"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "8611a8f803a1f65c30a1af3810a95b2ee1a5b0ce9460a5f2b66e9df6e0e6927fa60a48826ae940544f6edc206d0fef279a75fbaff8d850e2a25c6ddde69a993056d74c4c4a10830d75afa60baa9aa55f9ef9f1bbb90823c062d768f9b3b2275c9301cd0fe530"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x8c}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x24004000) recvmsg(r2, &(0x7f0000002c00)={&(0x7f0000001540)=@nfc, 0x80, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/118, 0x76}, {&(0x7f0000001640)=""/207, 0xcf}, {&(0x7f0000001740)=""/108, 0x6c}, {&(0x7f00000017c0)=""/213, 0xd5}, {&(0x7f00000018c0)=""/25, 0x19}, {&(0x7f0000001900)=""/95, 0x5f}, {&(0x7f0000001980)=""/107, 0x6b}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/241, 0xf1}], 0x9, &(0x7f0000002bc0)=""/63, 0x3f}, 0x40000165) 1.911108813s ago: executing program 1 (id=3919): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffffc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000000)=0x40, 0x4) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x7970db99}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r3, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 1.831088393s ago: executing program 3 (id=3921): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB="0a000000160000595109fa007f0000de91b84498e6efa8f72f175be304a5abe45e1a431daba0a4fca459df1b5b4a5e4d1f2324318e65349bfcd3b8f84f38535af0bba40d3d76d43f8e0ee665e98bb348ba9f2a542a4cb51caf340b08f73bce90857d3a0492cd7837e4ef4bdd131954d18c7342f28dec64fb13f2c2bc3aaaa78f23f05d83069ccb29dd0fd096b399a50029443929315019383715e6d5dd9506cb6afe0300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000001480)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="00000000000000006100000a0000000018000000000b000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8a321ffb702000008000000b50200000000000085000000cb0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x28}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6}, &(0x7f0000000700), &(0x7f0000000740)=r4, 0x600}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x20000000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000040), 0x0, 0x4c010) recvmmsg$unix(r10, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/88, 0x58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/47, 0x2f}], 0x1}}], 0x2, 0x10120, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x96, &(0x7f00000011c0)=ANY=[@ANYBLOB="c92752ede1340180c200000e81000704886445a7008400680057072f907800000000ffffffff02875ab70dad3af018603f07efdcb2f2b70a55b74a2d598071b1a931bf18a4e77d040fc571d9a2a82d678e7cf947a679a79a4b138eeb69e238b71ef39636c5108a4870ad618031f578bd9227000000004b1f0030555ef1449fbc6abdc6b20a82860e0678360b4ea9a0abcf486a0961c072045f9c68087737e9393d5e925ca19dd9251dc23b673da621bb7ca15642b96826aad0fbd80498adbe"], 0x0) r11 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001140)={'wlan1\x00'}) r12 = accept$unix(r5, &(0x7f0000001280), &(0x7f0000001300)=0x6e) getsockname$unix(r12, &(0x7f0000001400)=@abs, &(0x7f00000013c0)=0x6e) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000040)={0x0, 0xa}, 0x8) 1.82792952s ago: executing program 5 (id=3922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000"], 0x78}}, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"/316]}, 0x28a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000000)=[{{&(0x7f0000000b40)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe4}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x32, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}], 0x30}}], 0x1, 0x20000040) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) 1.412363961s ago: executing program 2 (id=3924): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = epoll_create(0x4) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r6, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000001}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) 1.248603535s ago: executing program 0 (id=3926): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000240)=0x80, 0x80000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.170641025s ago: executing program 2 (id=3927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delqdisc={0x4c8, 0x25, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x14151e60bb2db932}, {0xfff1, 0xfff1}, {0xc, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}, @qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xed6d8908b0f4f033}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3b5, 0xac, 0x28a6, 0x9}, {0x2, 0x2, 0xc2be, 0x4, 0x5, 0x5}, 0x200, 0x4, 0x2015}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x41d745dbc918eb41}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x0, 0x2, 0xec6, 0xe1, 0x7, 0x7, 0x8001, 0x3ff, 0x40, 0xb, 0xf, 0x3, 0xffff, 0x400, 0xd3, 0x4, 0x1, 0x4, 0x3, 0x1, 0x6, 0x6, 0x3, 0x1, 0x269c, 0x7, 0x10, 0x663, 0x3, 0x5, 0xb, 0x6, 0x0, 0x6, 0x2, 0x8001, 0x7fffffff, 0x8a, 0x6454, 0x101, 0x3, 0x9, 0x4, 0x9, 0xfffffc01, 0xa34, 0x6, 0x7, 0x80000000, 0x1000, 0x0, 0x1, 0xbec, 0x1d, 0x3, 0x6, 0xc70, 0x1ff, 0xf18, 0x7, 0x10, 0x1, 0x1, 0x8, 0x4, 0x3, 0x2, 0x9, 0x4, 0x2, 0x8, 0x1cd, 0x101, 0x7, 0x7, 0x3, 0x8, 0x3, 0x71f, 0x7, 0x6, 0x401, 0x60, 0x80000001, 0x4, 0x7, 0xf, 0x4ac, 0x7, 0x40, 0x3, 0x401, 0x1, 0xff, 0xc71e, 0x4, 0x5, 0x3, 0x3, 0xffffd7e5, 0x5, 0x7, 0x5, 0xe, 0x0, 0x1, 0x2, 0x0, 0xfffffd00, 0x8, 0x8, 0x4, 0x192f, 0x8, 0x10, 0xa, 0x9, 0x7, 0x6, 0x968, 0x3ff, 0x7, 0xdf89623, 0x1ff, 0x3c4530e, 0x6, 0x5, 0x3, 0x100, 0x4, 0xb2a, 0x4, 0xc, 0x8, 0x8, 0x1eb, 0x5, 0xe7d7, 0x0, 0x37, 0x8, 0x2, 0x1, 0x8, 0x1, 0xfffffff3, 0x6, 0xa, 0x3, 0x10001, 0x6, 0x3de5, 0x80f6, 0x2e1, 0x3, 0x0, 0xfffffff4, 0x1, 0x9aa6, 0x0, 0x1, 0x5, 0x6, 0x6ce0, 0x16, 0x7, 0x4, 0x6, 0xff, 0x6d8, 0x2, 0x1, 0x2, 0x0, 0x8, 0x7, 0x800, 0x0, 0x30, 0x5, 0x9, 0x4, 0xd, 0x7ff, 0xa, 0x3abe, 0x10, 0xe1c, 0x7, 0x81, 0x7, 0x9, 0x8, 0xa, 0x0, 0x81, 0x96ea, 0x4, 0xe, 0x5, 0x4, 0x39cb, 0x3ff, 0x9, 0x467, 0xb, 0x8001, 0x24d9, 0x0, 0x400, 0x8d3, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x8, 0x6, 0xfffffff9, 0x2, 0x9, 0x1, 0xb, 0x2, 0x9, 0x0, 0x1, 0x9, 0x20, 0x2, 0x5, 0x3, 0x9, 0xe, 0x2, 0x80, 0x1, 0x2166, 0x1, 0x5, 0x0, 0x1, 0x4, 0x401, 0x8, 0x4, 0x9, 0x4, 0x4, 0x3, 0x5, 0x2, 0x81, 0xb, 0x1]}, @TCA_TBF_BURST={0x8, 0x6, 0x80}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc00}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x4c8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x13c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0xd8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aea1c581d4e3abca8530b7632960e843"}, @NL802154_KEY_ATTR_ID={0xb0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7c}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "85b291231423936f66db4dbca1d761663a4d6ce0a81c5825088d1f042bb95948"}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x2048804) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delqdisc={0x4c8, 0x25, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x14151e60bb2db932}, {0xfff1, 0xfff1}, {0xc, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}, @qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xed6d8908b0f4f033}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3b5, 0xac, 0x28a6, 0x9}, {0x2, 0x2, 0xc2be, 0x4, 0x5, 0x5}, 0x200, 0x4, 0x2015}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x41d745dbc918eb41}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x0, 0x2, 0xec6, 0xe1, 0x7, 0x7, 0x8001, 0x3ff, 0x40, 0xb, 0xf, 0x3, 0xffff, 0x400, 0xd3, 0x4, 0x1, 0x4, 0x3, 0x1, 0x6, 0x6, 0x3, 0x1, 0x269c, 0x7, 0x10, 0x663, 0x3, 0x5, 0xb, 0x6, 0x0, 0x6, 0x2, 0x8001, 0x7fffffff, 0x8a, 0x6454, 0x101, 0x3, 0x9, 0x4, 0x9, 0xfffffc01, 0xa34, 0x6, 0x7, 0x80000000, 0x1000, 0x0, 0x1, 0xbec, 0x1d, 0x3, 0x6, 0xc70, 0x1ff, 0xf18, 0x7, 0x10, 0x1, 0x1, 0x8, 0x4, 0x3, 0x2, 0x9, 0x4, 0x2, 0x8, 0x1cd, 0x101, 0x7, 0x7, 0x3, 0x8, 0x3, 0x71f, 0x7, 0x6, 0x401, 0x60, 0x80000001, 0x4, 0x7, 0xf, 0x4ac, 0x7, 0x40, 0x3, 0x401, 0x1, 0xff, 0xc71e, 0x4, 0x5, 0x3, 0x3, 0xffffd7e5, 0x5, 0x7, 0x5, 0xe, 0x0, 0x1, 0x2, 0x0, 0xfffffd00, 0x8, 0x8, 0x4, 0x192f, 0x8, 0x10, 0xa, 0x9, 0x7, 0x6, 0x968, 0x3ff, 0x7, 0xdf89623, 0x1ff, 0x3c4530e, 0x6, 0x5, 0x3, 0x100, 0x4, 0xb2a, 0x4, 0xc, 0x8, 0x8, 0x1eb, 0x5, 0xe7d7, 0x0, 0x37, 0x8, 0x2, 0x1, 0x8, 0x1, 0xfffffff3, 0x6, 0xa, 0x3, 0x10001, 0x6, 0x3de5, 0x80f6, 0x2e1, 0x3, 0x0, 0xfffffff4, 0x1, 0x9aa6, 0x0, 0x1, 0x5, 0x6, 0x6ce0, 0x16, 0x7, 0x4, 0x6, 0xff, 0x6d8, 0x2, 0x1, 0x2, 0x0, 0x8, 0x7, 0x800, 0x0, 0x30, 0x5, 0x9, 0x4, 0xd, 0x7ff, 0xa, 0x3abe, 0x10, 0xe1c, 0x7, 0x81, 0x7, 0x9, 0x8, 0xa, 0x0, 0x81, 0x96ea, 0x4, 0xe, 0x5, 0x4, 0x39cb, 0x3ff, 0x9, 0x467, 0xb, 0x8001, 0x24d9, 0x0, 0x400, 0x8d3, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x8, 0x6, 0xfffffff9, 0x2, 0x9, 0x1, 0xb, 0x2, 0x9, 0x0, 0x1, 0x9, 0x20, 0x2, 0x5, 0x3, 0x9, 0xe, 0x2, 0x80, 0x1, 0x2166, 0x1, 0x5, 0x0, 0x1, 0x4, 0x401, 0x8, 0x4, 0x9, 0x4, 0x4, 0x3, 0x5, 0x2, 0x81, 0xb, 0x1]}, @TCA_TBF_BURST={0x8, 0x6, 0x80}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc00}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x4c8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x13c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0xd8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aea1c581d4e3abca8530b7632960e843"}, @NL802154_KEY_ATTR_ID={0xb0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7c}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "85b291231423936f66db4dbca1d761663a4d6ce0a81c5825088d1f042bb95948"}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x2048804) (async) 987.397341ms ago: executing program 2 (id=3928): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21131, 0x31}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21131, 0x31}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) 871.480113ms ago: executing program 3 (id=3929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@ipv6_delroute={0xac, 0x19, 0x100, 0x800, 0x25dfdbff, {0xa, 0x20, 0x20, 0x25, 0xff, 0x4, 0xfe, 0x8, 0x2a00}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_UID={0x8, 0x19, r7}, @RTA_METRICS={0x49, 0x8, 0x0, 0x1, "3ccd4e9ddb5b03e1f56415527204cb89e370d877d20b690b8d54ce6cb493d17e370ee6efcf25b798122243d651085e5ef2617f16c2680baf2f7803587188755ea7c4a21a10"}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0xa, 0x0, r6}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x14, 0x5, r6}}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xac}}, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private0, @in6=@mcast1}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@ipv6_delroute={0xac, 0x19, 0x100, 0x800, 0x25dfdbff, {0xa, 0x20, 0x20, 0x25, 0xff, 0x4, 0xfe, 0x8, 0x2a00}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_UID={0x8, 0x19, r7}, @RTA_METRICS={0x49, 0x8, 0x0, 0x1, "3ccd4e9ddb5b03e1f56415527204cb89e370d877d20b690b8d54ce6cb493d17e370ee6efcf25b798122243d651085e5ef2617f16c2680baf2f7803587188755ea7c4a21a10"}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0xa, 0x0, r6}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x14, 0x5, r6}}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xac}}, 0x0) (async) socket$kcm(0xf, 0x3, 0x2) (async) socket$kcm(0xf, 0x3, 0x2) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) 795.674217ms ago: executing program 0 (id=3930): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c400000000018000000000007000000440c0b000000000500000000000000"], 0x20}, 0x804) syz_emit_ethernet(0x1d9, &(0x7f0000000600)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e01a33afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000000000000000000000000ffff64010102fc010000000000000000000000000000042f9595f429ae08a565c9a44007130a791d413a70a44d2e6f790a3872d50bb1d710154d25344dc4b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d93d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a911096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba4159c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e71995214804dea5e0135118be22dc6c97e730f7053d6ec34cb64994c78f38f5c966190288a11b5c7c3830af6b26868600f042ff7778f02de78c461feec2dbc7777f3c1648da649b02ab84887d321d98ce20c8e1998ba0b5dc8c3a0b319b563b758f3368982151727decc966d3971da04a3de762195acbe67019b828d036a19d90c13890cac99197cc8195d6e1db000000000000000000000000002d51e8f1a50e0ca00fcabc498e823b7e548cc497c944def5c30bdc7d11b5306c12c6af8c98534e090d43543748a442415806f8747d6a6d7492feacee4c0b070b25a236c07d9b975470205ac0d903348997d13799d3f6b71bc625eb91c4602a457bc63a9e0a3947331cef930ea9bf61d92c3b8765558918f66cf0ad4346263e7c4d882368a1cc41a618416a3501c6f5b66fc0c2cc4d036521c2bec17caf99551539a6ef780c2a42a79992be56fe29c7e9f2f262012c3ade512df4d51cff5d149aee7a4b0552c8881bd68d00"/681], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000480), &(0x7f0000000500)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="1300000010"], 0x20) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="040000007f00030000000200"], 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd25, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) r6 = accept4(r4, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000540)={0x6, 0x5, 0x9, 0x5}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x20040050) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}], 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 736.15226ms ago: executing program 2 (id=3931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000340)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffff7}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x18, 0x29, 0x39, {0x8, 0x0, 0x0, 0xfc}}}], 0x18}, 0x1400c0c0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt(r3, 0x6, 0x0, 0x0, &(0x7f0000000000)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r6}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000018000000bd0500000800000085000000a5000000950000000000000015153b86d21fa137f9a56d53f67f7f3397b2c666832379f4333a6784a136428e5cf8ecb31d65294ed6e73261fad393ba047be981b0f64c5e448a116c76f4d698f41f7e6ed3e073f6cf876d04be8d7e32689cccc9d39a4a32f64bf2af893b61963710a89d6c6fb50cb1b695a488beb1e3df97dd3bd82147185b5b42bff4f5a4aa8928778dc1e2417aaa83671df067703c7625a8f780118ff45239680bcbc86b4303595d529fb99089f2a214e20733bbb48c86870704671e5f464fb82356294d0260a5fe4900000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 660.477617ms ago: executing program 3 (id=3932): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0) socket$unix(0x1, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100003070a3217c4d10f47b9e1e5c2c830000000000000000000000000000080000000000000000003af6a89975326c0000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"], 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) accept4(r2, 0x0, 0x0, 0x80000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x59b, 0x4000, &(0x7f0000000940)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f00000006c0)="9c01bd6f9a6028c80d7364240f0700000000000000c565f0c7ac65dd4a0fadceb6c65dcb07f2421e69087e0f0700000000000000722709c46bef17c4cb9aed9fb1c342179ea3496361ccedfdb9ace43b54fa7516c64f6a4aa330b0870715169d054a78e0f38089ca5dfd878405265d5fc19365633436571ad49c85f8024a7a85a30c9094b986548e876736175d0c1e7cf4eb7ba63055ddf1b750f9a870161c6cfcde0d78700f3426f563dea457197237337448e430c6f90f8275cd4fb4ac203c9694d88e9b583829e8697aacf38ebfc7ec26f20061cfd8f676cbcaabd3efb063b8a637232c04263241b54d5d3c", &(0x7f0000001a40)="2c5b483103067e8a9bd26ffbe3489cf5aa50b1367c3de2b1d1cdc219274a5a514f852161bc4015e7564b08584290c5", 0x1}, 0x22) 548.387687ms ago: executing program 0 (id=3933): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x98ae, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)='/', 0x1}], 0x1}}], 0x2, 0xc010) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd60f53a0400403a0000000000000000000000000000000000ff72bcd002000000000000000000000000000102"], 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) shutdown(r0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x41, 0x50, 0x0, 0x0, 0x0, 0x10015}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10084840) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 548.005816ms ago: executing program 2 (id=3934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x63, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x4050) 460.432198ms ago: executing program 2 (id=3935): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xb0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x12, 0xb4, &(0x7f0000000240)="7a943be023d757e1a07aafc5dd1321d12e18", &(0x7f00000003c0)=""/180, 0x5, 0x0, 0x9, 0xce, &(0x7f0000000480)="71b804460816aa34c9", &(0x7f00000004c0)="ba0fab2e6925e7459a12f89fb310c8557e88ea9be4556f30b58f7694cd81f31f263d8de20c2bfc5a2cf05c186fbb0d9eccd0b404b3f167273941474b406d84c6d7bc1a7af4871ee8629f1da4cb287fcb0c18bce840d11ab8fcbc84d2fb1c16f8cdf372411f267ee011b3a81cf588c19e321bfaab3c3e055b46c0bf93a6c3c1827c5c59c12bae2bab90bf51158d1c4b365cf622f75b9ab52f0fc7b39676b7f32bd7c0a654ce5c993ffdcc36475f53b6747d6ce8ac62bc5f6348be22c8fdc361ec876c1167178355cf392b53d94776", 0x0, 0x0, 0x6}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) (async) recvmmsg(r7, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x1, 0x2002, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=r7, 0x0, 0x0, 0xee, &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r6], 0x44}}, 0x0) 448.807994ms ago: executing program 0 (id=3936): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x4, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x21) write(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x16, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="6cd29a955a8ba64f71dd048120cc85f5ec5a521359080f43a633209c98f62c7b12ab0d7647", @ANYRES16=r2, @ANYRES32=r3], &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x2c, 0x4, 0x1) 157.919548ms ago: executing program 0 (id=3937): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000001c0)=0x199675c7, 0x4) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)='0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000280), 0x8, 0xa1, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f00000016c0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @local}, 0xb, 0x0}}], 0x1, 0x4084) (async) sendmmsg$inet(r8, &(0x7f00000016c0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @local}, 0xb, 0x0}}], 0x1, 0x4084) sendmsg$xdp(r0, &(0x7f0000001140)={&(0x7f0000000b40)={0x2c, 0xd, r7, 0x2a}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000b80)="c68e1c5e3817169315f2997309e53acd56f022d7a18bcd5b31e50e5365c3dec14b5c936cad1906ffeb853e163bc8837ee60585b8e951", 0x36}, {&(0x7f0000000bc0)="30b57f789e0076a02015f0564f08f66e81de8e4fbf0a8024bfebb2c2c50cd8e2ddcd26b9ef73549050cbcf99cc51a7123cb96c90613da7985ce3ff7ff3f00f2cbcc8d515890fbe9758c4b1c82898fb9ec44dc06561dad1f82d923a8d2c7aa99b74ff113ee35a1173a3a62a7ad5fb14d314c54f967e5552070fabef15f57e7afa7b9b9b9bfddca76eeb4eec36530ca89c959a8da7eca9426840bde5001e9eafc9c7c9c5b4ee890a5f1a462da6bde2e36bada347c5968abe4f0502cc1ded2491f7920d3b115137f87796c20d1065c10cd5", 0xd0}, {&(0x7f0000000cc0)="a4b647f4286c6c1c2dcee2e05c3a1e66f9f013adc73f91840648489c4c4259af23300ca70549169ded20a6c0e9908eb0bc731eed8328d7ba9435b887c8f1da147a739feaf75002c0d6abc3e242c9098ee6aaf7ae9db4d25fdcc7c690d793a957a14b6c06e3056720827b283528b56911d1f358592cb49d07620e8b34d08f0bc330af67b6fc9feafe62d1a2e310c67cc0f6ab535caa374687b23b3af3cf2284aef2ce5b35495f18a0f6194cf62a", 0xad}, {&(0x7f0000000d80)="98a84f42e2e8876241936b43a752a4c9ba0a2cf3e88dd954aa007406dd5622b9afbf196ff6f3cb74851c8ec4856fd556099f413afe6019443a6c5e828e2c226aae141464b98108a66c775d3c12e1a8a469317a1989909023d8602cba132446c8be6e813419063dde4edfddbb13398d5e8131686e9110ef702b562567dec183731b4c6d8b8716552fc57e8dee645991f5141495de3937209be117612a5cb1683b75a1a9657813ae3ad7ed3ed8d4dc3c13742177", 0xb3}, {&(0x7f0000000e40)="8c74ebaa23f876e6e70f1a7f0cb86276721539887a13ba67cba5d954723f5eb26c8659a8b35c64860f8362302608d6128f404d6ac81165ee54cb7f002c771c95e9084cbe141dd09c483d9e6623eb86152eb16d47c15f33e3806f15d650e89ec6e7075631a398006f28b953cac9c44bad3ea27c43fc13ca2a17881a8990119c882e58a1ffc62a388580133a64b1b4dda48b941936803297547cb9e803671c7364711e9cebf257b7ad7d44a245d9e804d87dc777e408c94faeb1eeb567b0e975", 0xbf}, {&(0x7f0000000f00)="fded8fa682ddfe424c0a3bc788d83e952e0e3990158109490aa60bbd9089e3721cea0f84817294a2474c0c0d75fc453000a32336cf8b5e0df1bc96d2d2e5", 0x3e}, {&(0x7f0000000f40)="bace9b13f342360487", 0x9}, {&(0x7f0000000f80)="304493bd33466f3ad0950a3f2626110179145f35e04863a449188819f742f567366d01bc112f7c4e3f9b89f6011b1d58d8d366ec114c0bda6f7d3b7677afca2ceff5c5d0134febb07af4ea890b6c06f1ee35b12c957dea149df451636e307c9c3bcd4a15e16574280b325869bb80c66336aba0731f270cd947eb0d346de63a49e210e094dcf2954cbd3473e295", 0x8d}, {&(0x7f0000001040)="f54582ad662caa467607156138454a04fac7b2b2", 0x14}], 0x9}, 0x4) (async) sendmsg$xdp(r0, &(0x7f0000001140)={&(0x7f0000000b40)={0x2c, 0xd, r7, 0x2a}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000b80)="c68e1c5e3817169315f2997309e53acd56f022d7a18bcd5b31e50e5365c3dec14b5c936cad1906ffeb853e163bc8837ee60585b8e951", 0x36}, {&(0x7f0000000bc0)="30b57f789e0076a02015f0564f08f66e81de8e4fbf0a8024bfebb2c2c50cd8e2ddcd26b9ef73549050cbcf99cc51a7123cb96c90613da7985ce3ff7ff3f00f2cbcc8d515890fbe9758c4b1c82898fb9ec44dc06561dad1f82d923a8d2c7aa99b74ff113ee35a1173a3a62a7ad5fb14d314c54f967e5552070fabef15f57e7afa7b9b9b9bfddca76eeb4eec36530ca89c959a8da7eca9426840bde5001e9eafc9c7c9c5b4ee890a5f1a462da6bde2e36bada347c5968abe4f0502cc1ded2491f7920d3b115137f87796c20d1065c10cd5", 0xd0}, {&(0x7f0000000cc0)="a4b647f4286c6c1c2dcee2e05c3a1e66f9f013adc73f91840648489c4c4259af23300ca70549169ded20a6c0e9908eb0bc731eed8328d7ba9435b887c8f1da147a739feaf75002c0d6abc3e242c9098ee6aaf7ae9db4d25fdcc7c690d793a957a14b6c06e3056720827b283528b56911d1f358592cb49d07620e8b34d08f0bc330af67b6fc9feafe62d1a2e310c67cc0f6ab535caa374687b23b3af3cf2284aef2ce5b35495f18a0f6194cf62a", 0xad}, {&(0x7f0000000d80)="98a84f42e2e8876241936b43a752a4c9ba0a2cf3e88dd954aa007406dd5622b9afbf196ff6f3cb74851c8ec4856fd556099f413afe6019443a6c5e828e2c226aae141464b98108a66c775d3c12e1a8a469317a1989909023d8602cba132446c8be6e813419063dde4edfddbb13398d5e8131686e9110ef702b562567dec183731b4c6d8b8716552fc57e8dee645991f5141495de3937209be117612a5cb1683b75a1a9657813ae3ad7ed3ed8d4dc3c13742177", 0xb3}, {&(0x7f0000000e40)="8c74ebaa23f876e6e70f1a7f0cb86276721539887a13ba67cba5d954723f5eb26c8659a8b35c64860f8362302608d6128f404d6ac81165ee54cb7f002c771c95e9084cbe141dd09c483d9e6623eb86152eb16d47c15f33e3806f15d650e89ec6e7075631a398006f28b953cac9c44bad3ea27c43fc13ca2a17881a8990119c882e58a1ffc62a388580133a64b1b4dda48b941936803297547cb9e803671c7364711e9cebf257b7ad7d44a245d9e804d87dc777e408c94faeb1eeb567b0e975", 0xbf}, {&(0x7f0000000f00)="fded8fa682ddfe424c0a3bc788d83e952e0e3990158109490aa60bbd9089e3721cea0f84817294a2474c0c0d75fc453000a32336cf8b5e0df1bc96d2d2e5", 0x3e}, {&(0x7f0000000f40)="bace9b13f342360487", 0x9}, {&(0x7f0000000f80)="304493bd33466f3ad0950a3f2626110179145f35e04863a449188819f742f567366d01bc112f7c4e3f9b89f6011b1d58d8d366ec114c0bda6f7d3b7677afca2ceff5c5d0134febb07af4ea890b6c06f1ee35b12c957dea149df451636e307c9c3bcd4a15e16574280b325869bb80c66336aba0731f270cd947eb0d346de63a49e210e094dcf2954cbd3473e295", 0x8d}, {&(0x7f0000001040)="f54582ad662caa467607156138454a04fac7b2b2", 0x14}], 0x9}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) kernel console output (not intermixed with test programs): 5553] netlink: zone id is out of range [ 390.148711][T15571] bond8: option min_links: invalid value (18446744073709551612) [ 390.156838][T15571] bond8: option min_links: allowed values 0 - 2147483647 [ 390.169365][T15571] bond8 (unregistering): Released all slaves [ 390.211711][T15579] __nla_validate_parse: 7 callbacks suppressed [ 390.211728][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 390.230755][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 390.244546][T15572] syzkaller1: entered promiscuous mode [ 390.254305][T15572] syzkaller1: entered allmulticast mode [ 390.272981][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 390.293819][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 390.321335][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 390.345605][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 390.895037][T15619] tipc: Enabled bearer , priority 0 [ 390.918966][T15620] tipc: Enabling of bearer rejected, already enabled [ 390.952224][T15619] syzkaller0: entered promiscuous mode [ 390.970314][T15619] syzkaller0: entered allmulticast mode [ 390.998545][T15629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2437'. [ 391.015330][T15628] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 391.123755][T15628] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.343849][T15633] bond7: (slave veth7): Enslaving as an active interface with a down link [ 391.375526][T15629] tipc: Resetting bearer [ 391.442116][T15629] tipc: Disabling bearer [ 391.484428][T15646] sctp: [Deprecated]: syz.2.2445 (pid 15646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.484428][T15646] Use struct sctp_sack_info instead [ 391.530747][T15645] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2445'. [ 391.580879][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'. [ 391.819613][T15663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2448'. [ 391.961527][T15663] bond10 (unregistering): Released all slaves [ 391.978798][ T1508] block nbd3: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 60 seconds [ 392.289790][T15693] x_tables: duplicate underflow at hook 1 [ 392.479620][T15704] netlink: 'syz.2.2461': attribute type 4 has an invalid length. [ 392.544807][T15708] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 392.552773][T15708] NCSI netlink: No device for ifindex 0 [ 392.580845][T15708] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 392.603185][T15708] NCSI netlink: No device for ifindex 0 [ 392.660992][T15713] bond10: option packets_per_slave: invalid value (1048582) [ 392.668543][T15713] bond10: option packets_per_slave: allowed values 0 - 65535 [ 392.680740][T15713] bond10 (unregistering): Released all slaves [ 392.772235][T15723] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 392.780158][T15723] netlink: 'syz.1.2464': attribute type 2 has an invalid length. [ 392.812527][T15723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.825135][T15723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.841114][T15723] bond0 (unregistering): Released all slaves [ 393.012649][T15732] FAULT_INJECTION: forcing a failure. [ 393.012649][T15732] name failslab, interval 1, probability 0, space 0, times 0 [ 393.028988][T15732] CPU: 0 UID: 0 PID: 15732 Comm: syz.1.2466 Not tainted syzkaller #0 PREEMPT(full) [ 393.029011][T15732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.029021][T15732] Call Trace: [ 393.029028][T15732] [ 393.029035][T15732] dump_stack_lvl+0xe8/0x150 [ 393.029059][T15732] should_fail_ex+0x412/0x560 [ 393.029083][T15732] should_failslab+0xa8/0x100 [ 393.029102][T15732] __kmalloc_noprof+0xe8/0x760 [ 393.029127][T15732] ? nf_tables_newrule+0x152c/0x28b0 [ 393.029156][T15732] ? nla_strcmp+0x106/0x140 [ 393.029180][T15732] nf_tables_newrule+0x152c/0x28b0 [ 393.029219][T15732] ? __pfx_nf_tables_newrule+0x10/0x10 [ 393.029240][T15732] ? nfnl_pernet+0x23/0x240 [ 393.029257][T15732] ? nfnl_pernet+0x23/0x240 [ 393.029282][T15732] ? __nla_parse+0x40/0x60 [ 393.029305][T15732] nfnetlink_rcv+0x123e/0x27b0 [ 393.029354][T15732] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 393.029392][T15732] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.029409][T15732] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.029420][T15732] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.029434][T15732] netlink_unicast+0x75c/0x8e0 [ 393.029452][T15732] netlink_sendmsg+0x813/0xb40 [ 393.029469][T15732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.029482][T15732] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.029499][T15732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.029515][T15732] ____sys_sendmsg+0x972/0x9f0 [ 393.029526][T15732] ? __might_fault+0xaf/0x130 [ 393.029543][T15732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.029559][T15732] ? import_iovec+0x73/0xa0 [ 393.029574][T15732] ___sys_sendmsg+0x2a5/0x360 [ 393.029584][T15732] ? __lock_acquire+0x6b5/0x2cf0 [ 393.029598][T15732] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.029628][T15732] ? __fget_files+0x2a/0x420 [ 393.029640][T15732] ? __fget_files+0x3a0/0x420 [ 393.029657][T15732] __x64_sys_sendmsg+0x1bd/0x2a0 [ 393.029670][T15732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.029687][T15732] ? __pfx_ksys_write+0x10/0x10 [ 393.029706][T15732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.029717][T15732] do_syscall_64+0x174/0x580 [ 393.029728][T15732] ? trace_irq_disable+0x3b/0x140 [ 393.029744][T15732] ? clear_bhb_loop+0x40/0x90 [ 393.029756][T15732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.029766][T15732] RIP: 0033:0x7f794b59ce59 [ 393.029776][T15732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.029784][T15732] RSP: 002b:00007f794c43a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.029797][T15732] RAX: ffffffffffffffda RBX: 00007f794b815fa0 RCX: 00007f794b59ce59 [ 393.029804][T15732] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 393.029810][T15732] RBP: 00007f794c43a090 R08: 0000000000000000 R09: 0000000000000000 [ 393.029816][T15732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.029821][T15732] R13: 00007f794b816038 R14: 00007f794b815fa0 R15: 00007ffd162e2ee8 [ 393.029837][T15732] [ 393.695739][T15748] netlink: 'syz.1.2470': attribute type 5 has an invalid length. [ 393.710024][T15748] geneve3: entered promiscuous mode [ 393.715258][T15748] geneve3: entered allmulticast mode [ 393.721959][T15245] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 393.730315][T15245] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 393.743209][T15245] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 393.751592][T15245] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 393.803784][T15750] team0: entered promiscuous mode [ 393.809003][T15750] team_slave_0: entered promiscuous mode [ 393.814826][T15750] ªªªªª»: entered promiscuous mode [ 393.821530][T15750] team0: entered allmulticast mode [ 393.827494][T15750] team_slave_0: entered allmulticast mode [ 393.833281][T15750] ªªªªª»: entered allmulticast mode [ 393.839259][T15750] team0: Cannot enslave team device to itself [ 394.132055][T15764] bond8: entered promiscuous mode [ 394.137746][T15764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.587402][T15717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.862100][T15791] bond0: Caught tx_queue_len zero misconfig [ 396.576504][T15822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.583819][T15822] IPv6: NLM_F_CREATE should be set when creating new route [ 396.591111][T15822] IPv6: NLM_F_CREATE should be set when creating new route [ 396.615114][T15822] netlink: 'syz.0.2489': attribute type 1 has an invalid length. [ 397.161276][T15840] __nla_validate_parse: 12 callbacks suppressed [ 397.161295][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2495'. [ 397.259877][T15842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2496'. [ 397.541383][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 397.669646][T15850] veth9: entered allmulticast mode [ 397.687059][T15850] bond0: (slave veth9): Enslaving as an active interface with an up link [ 397.713701][T15852] bond0 (unregistering): (slave veth9): Releasing backup interface [ 397.737631][T15852] bond0 (unregistering): Released all slaves [ 397.821903][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 397.833137][T15850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2497'. [ 397.869165][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 397.888473][T15850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2497'. [ 398.019734][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 398.235395][T15244] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.262677][T15244] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.277549][T15244] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.294725][T15244] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.956616][T15798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.178944][T15874] netlink: 'syz.3.2503': attribute type 5 has an invalid length. [ 399.199231][T15873] netlink: 'syz.1.2502': attribute type 2 has an invalid length. [ 399.450093][T15882] syzkaller0: entered promiscuous mode [ 399.472234][T15882] syzkaller0: entered allmulticast mode [ 400.130944][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2512'. [ 400.319153][T15912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 400.337440][T15903] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2513'. [ 400.631037][T15930] netlink: 'syz.0.2522': attribute type 9 has an invalid length. [ 401.455131][T15958] net_ratelimit: 292 callbacks suppressed [ 401.455149][T15958] openvswitch: netlink: Invalid VLAN frame [ 401.827265][T15985] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 401.857129][T15985] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 401.867002][T15985] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 402.158583][T16005] syzkaller0: entered promiscuous mode [ 402.164213][T16005] syzkaller0: entered allmulticast mode [ 402.318635][T16011] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 402.397936][T16011] netlink: 'syz.0.2544': attribute type 3 has an invalid length. [ 402.409125][T16011] __nla_validate_parse: 5 callbacks suppressed [ 402.409141][T16011] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2544'. [ 402.415168][T16016] xfrm1: entered allmulticast mode [ 402.534792][T16023] syzkaller0: entered promiscuous mode [ 402.547074][T16023] syzkaller0: entered allmulticast mode [ 402.677776][T16030] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2551'. [ 402.692619][T16030] batman_adv: batadv0: Removing interface: dummy0 [ 402.850347][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'. [ 402.942640][T16046] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2555'. [ 402.967320][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'. [ 403.000257][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022f71400: rx timeout, send abort [ 403.500428][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880567f1800: rx timeout, send abort [ 403.510980][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022f71400: abort rx timeout. Force session deactivation [ 403.568758][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'. [ 403.583743][T16059] netlink: 'syz.1.2560': attribute type 5 has an invalid length. [ 403.884859][T16070] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 404.009113][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880567f1800: abort rx timeout. Force session deactivation [ 404.450199][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2570'. [ 404.493917][T16103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.522296][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.542213][T16105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.718086][T16116] xt_hashlimit: max too large, truncated to 1048576 [ 404.779547][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 404.790672][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 405.244196][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2581'. [ 405.416218][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 405.965801][T16165] netlink: 'syz.1.2587': attribute type 12 has an invalid length. [ 405.974788][T16165] netlink: 'syz.1.2587': attribute type 29 has an invalid length. [ 405.992805][T16165] netlink: 'syz.1.2587': attribute type 2 has an invalid length. [ 406.302176][T16194] syzkaller0: entered promiscuous mode [ 406.313121][T16194] syzkaller0: entered allmulticast mode [ 406.654399][T16219] dvmrp0: entered allmulticast mode [ 407.148095][T16239] ÿÿÿÿÿÿ: renamed from bond_slave_0 (while UP) [ 407.505029][T16254] netlink: 'syz.0.2609': attribute type 1 has an invalid length. [ 407.519110][T16253] __nla_validate_parse: 3 callbacks suppressed [ 407.519128][T16253] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2608'. [ 407.561005][T16253] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2608'. [ 407.581840][T16253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2608'. [ 407.623454][T16254] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 407.631374][T16259] veth0_macvtap: entered allmulticast mode [ 407.696408][T16259] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 408.202230][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2618'. [ 408.311607][T16289] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2620'. [ 408.473017][T16292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 408.556860][T16292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 408.596180][T16296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2622'. [ 408.702523][T16292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 408.765995][T16302] pim6reg: entered allmulticast mode [ 408.777567][T16302] pim6reg: left allmulticast mode [ 409.058204][T16310] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2626'. [ 409.154218][T16316] netlink: 'syz.3.2628': attribute type 3 has an invalid length. [ 409.770632][T16333] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 409.824615][T16335] netlink: 'syz.3.2635': attribute type 9 has an invalid length. [ 409.841889][T15245] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.852491][T15245] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.863442][T15245] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.873044][T15245] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.766711][T16378] syzkaller0: entered promiscuous mode [ 410.788377][T16378] syzkaller0: entered allmulticast mode [ 411.097368][T16401] netlink: 'syz.2.2653': attribute type 1 has an invalid length. [ 411.135534][T16406] netlink: 'syz.0.2654': attribute type 21 has an invalid length. [ 411.160703][T16406] netlink: 'syz.0.2654': attribute type 22 has an invalid length. [ 411.195324][T16406] netlink: 'syz.0.2654': attribute type 23 has an invalid length. [ 411.472007][T16425] tipc: Enabling of bearer rejected, failed to enable media [ 411.618379][T16432] 8021q: adding VLAN 0 to HW filter on device bond10 [ 411.670470][T16432] 8021q: adding VLAN 0 to HW filter on device bond11 [ 411.685133][T16432] bond10: (slave bond11): Enslaving as an active interface with an up link [ 411.711793][T16435] netlink: 'syz.1.2661': attribute type 9 has an invalid length. [ 411.734859][T16440] bond10 (unregistering): (slave bond11): Releasing backup interface [ 411.752006][T16440] bond10 (unregistering): Released all slaves [ 412.162329][T16459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.174951][T16466] vxcan0: tx address claim with different name [ 412.319993][T16468] tipc: Enabling of bearer rejected, failed to enable media [ 412.343852][T16468] syzkaller0: entered promiscuous mode [ 412.349998][T16468] syzkaller0: entered allmulticast mode [ 412.527186][T16484] __nla_validate_parse: 25 callbacks suppressed [ 412.527200][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2671'. [ 412.545375][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2671'. [ 412.734248][T16494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2675'. [ 412.743670][T16494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2675'. [ 412.753796][T16494] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2675'. [ 413.194550][T16472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.321416][T16506] x_tables: duplicate underflow at hook 1 [ 413.531649][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'. [ 413.642425][T16529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.855239][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'. [ 413.918125][T16543] SET target dimension over the limit! [ 414.376288][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.403719][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'. [ 414.532599][ T5653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.547489][ T5653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.556454][ T5653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.573626][ T5653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.581427][ T5653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.632648][T16579] dvmrp0: entered allmulticast mode [ 415.813614][T16645] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 415.833189][T16646] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 415.868927][T16646] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2715'. [ 415.892295][T16646] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 415.901630][T16646] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2715'. [ 416.063596][T16657] netlink: 'syz.0.2718': attribute type 39 has an invalid length. [ 416.402968][T16674] syzkaller0: entered promiscuous mode [ 416.412958][T16674] syzkaller0: entered allmulticast mode [ 416.618698][ T50] Bluetooth: hci5: command tx timeout [ 416.645617][T16581] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.653896][T16581] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.661556][T16581] bridge_slave_0: entered allmulticast mode [ 416.677506][ T5653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.691693][ T5653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.699729][ T5653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.711985][ T5653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.720962][ T5653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.730301][T16581] bridge_slave_0: entered promiscuous mode [ 416.739078][T16581] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.746627][T16581] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.753867][T16581] bridge_slave_1: entered allmulticast mode [ 416.766524][T16581] bridge_slave_1: entered promiscuous mode [ 416.864565][T16581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.900052][T16581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.927762][T16696] netlink: 'syz.0.2727': attribute type 3 has an invalid length. [ 416.986800][T16581] team0: Port device team_slave_0 added [ 417.006519][T16581] team0: Port device team_slave_1 added [ 417.111622][T16581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.125552][T16581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.193681][T16581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.228005][T16581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.242970][T16581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.303040][T16581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.350228][T16715] syzkaller1: entered promiscuous mode [ 417.370859][T16715] syzkaller1: entered allmulticast mode [ 417.390525][T16710] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 417.479791][T16581] hsr_slave_0: entered promiscuous mode [ 417.486872][T16581] hsr_slave_1: entered promiscuous mode [ 417.493247][T16581] debugfs: 'hsr0' already exists in 'hsr' [ 417.502301][T16581] Cannot create hsr debugfs directory [ 417.700080][T16726] C: renamed from veth1_to_team (while UP) [ 417.719700][T16726] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 417.739921][T16726] __nla_validate_parse: 10 callbacks suppressed [ 417.739936][T16726] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2734'. [ 417.770015][T16726] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 417.784452][T16734] netlink: 'syz.2.2735': attribute type 8 has an invalid length. [ 417.923259][T16734] IPVS: Scheduler module ip_vs_ not found [ 418.091275][T16581] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.106689][T16747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.120723][T16581] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.129851][T16750] netlink: 'syz.2.2742': attribute type 2 has an invalid length. [ 418.305207][T16581] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.317765][T16581] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.410134][T16581] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.433330][T16581] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.512195][T16760] netpci0: tun_chr_ioctl cmd 1074025678 [ 418.521280][T16760] netpci0: group set to 0 [ 418.566076][T16581] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.577669][T16581] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.636588][T16769] syzkaller0: entered promiscuous mode [ 418.642366][T16769] syzkaller0: entered allmulticast mode [ 418.666741][T16769] netlink: 212232 bytes leftover after parsing attributes in process `syz.0.2748'. [ 418.696291][ T5653] Bluetooth: hci5: command tx timeout [ 418.779320][ T5653] Bluetooth: hci2: command tx timeout [ 418.967347][T16686] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.983466][T16686] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.991096][T16686] bridge_slave_0: entered allmulticast mode [ 419.000949][T16686] bridge_slave_0: entered promiscuous mode [ 419.011412][T16785] syzkaller0: entered promiscuous mode [ 419.027766][T16785] syzkaller0: entered allmulticast mode [ 419.046747][T16686] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.062217][T16686] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.070702][T16686] bridge_slave_1: entered allmulticast mode [ 419.078122][T16686] bridge_slave_1: entered promiscuous mode [ 419.149207][T16686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.169401][T16686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.178595][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2752'. [ 419.189359][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2752'. [ 419.200344][T16798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2752'. [ 419.283481][T16798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2752'. [ 419.297024][T16803] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 419.321385][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2754'. [ 419.342841][T16686] team0: Port device team_slave_0 added [ 419.379239][T16686] team0: Port device team_slave_1 added [ 419.419889][T16581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.452208][T16581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.460996][T16798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2752'. [ 419.504002][T16581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.524011][T16581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.535457][T16686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.543507][T16686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.573077][T16686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.590491][T16581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.600981][T16581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.609757][T16686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.619442][T16686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.647099][T16686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.658757][T16581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.670237][T16581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.767910][T16686] hsr_slave_0: entered promiscuous mode [ 419.774882][T16686] hsr_slave_1: entered promiscuous mode [ 419.781627][T16686] debugfs: 'hsr0' already exists in 'hsr' [ 419.789028][T16686] Cannot create hsr debugfs directory [ 420.541299][T16581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.684867][T16686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.729288][T16686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.751606][T16858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2768'. [ 420.758342][T16686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.776834][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 420.793108][ T5653] Bluetooth: hci5: command tx timeout [ 420.825543][T16686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.852360][T16581] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.859121][ T5653] Bluetooth: hci2: command tx timeout [ 420.894149][T16686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.934012][T16686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.031110][T16686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 421.059565][T16686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.102678][T16874] veth15: entered promiscuous mode [ 421.110826][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.118030][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.157869][T15246] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.165007][T15246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.232806][T16892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2775'. [ 421.451519][T16686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.501337][T16686] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.540454][T15246] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.547655][T15246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.607804][T15244] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.615000][T15244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.952729][T16918] netlink: 'syz.0.2780': attribute type 1 has an invalid length. [ 421.954473][T16917] netlink: 'syz.0.2780': attribute type 1 has an invalid length. [ 422.001294][T16918] netlink: 'syz.0.2780': attribute type 3 has an invalid length. [ 422.023470][T16917] netlink: 'syz.0.2780': attribute type 3 has an invalid length. [ 422.070848][ T1508] block nbd3: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 90 seconds [ 422.175354][T16581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.544823][T16936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.575761][T16936] batadv_slave_1: entered allmulticast mode [ 422.647290][T16938] geneve2: entered promiscuous mode [ 422.775392][T16581] veth0_vlan: entered promiscuous mode [ 422.821184][T16581] veth1_vlan: entered promiscuous mode [ 422.831688][T16950] __nla_validate_parse: 3 callbacks suppressed [ 422.831704][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 422.856425][ T5653] Bluetooth: hci5: command tx timeout [ 422.861533][T16950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2786'. [ 422.893075][T16953] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20000 [ 422.904490][T16581] veth0_macvtap: entered promiscuous mode [ 422.910149][T16953] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 422.937380][ T5653] Bluetooth: hci2: command tx timeout [ 422.983434][T16686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.008699][T16581] veth1_macvtap: entered promiscuous mode [ 423.120347][T16581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.140642][T16581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.162138][T15245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.183799][T15245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.205325][T15245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.215202][T15245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.426597][T15245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.441231][T15245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.453990][T16972] openvswitch: netlink: Duplicate or invalid key (type 0). [ 423.478408][T16972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.500146][T11732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.512167][T11732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.565437][T16686] veth0_vlan: entered promiscuous mode [ 423.616339][T16686] veth1_vlan: entered promiscuous mode [ 423.671539][T16977] bond9: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 423.690900][T16977] bond9 (unregistering): Released all slaves [ 423.840471][T16686] veth0_macvtap: entered promiscuous mode [ 423.874646][T16686] veth1_macvtap: entered promiscuous mode [ 423.962245][T16686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.010005][T16686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.041144][T17000] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2798'. [ 424.060744][T15245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.091479][T15245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.119380][T15245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.158069][T15245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.465263][T17014] hmó3)ó: entered promiscuous mode [ 424.489074][T17018] tipc: Enabled bearer , priority 0 [ 424.501489][T17012] syzkaller0: entered promiscuous mode [ 424.506551][T11725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.508709][T17012] syzkaller0: entered allmulticast mode [ 424.522886][T11725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.677988][T17027] x_tables: duplicate underflow at hook 1 [ 424.907012][T17030] tipc: Resetting bearer [ 424.925654][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.935468][T17011] tipc: Resetting bearer [ 424.941336][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.968025][T17011] tipc: Disabling bearer [ 425.025412][ T5653] Bluetooth: hci2: command tx timeout [ 425.182137][T17047] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 425.662777][T17060] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2812'. [ 425.859421][T17069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2812'. [ 425.905505][T17073] syzkaller0: entered promiscuous mode [ 425.920679][T17073] syzkaller0: entered allmulticast mode [ 426.029477][T17075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2816'. [ 426.140298][T17077] tipc: Enabled bearer , priority 0 [ 426.168204][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 426.179004][T17071] tipc: Resetting bearer [ 426.237884][T17071] tipc: Disabling bearer [ 426.291929][T17095] netlink: 'syz.5.2820': attribute type 2 has an invalid length. [ 426.521153][T17106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2822'. [ 426.567836][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2823'. [ 426.595173][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2823'. [ 426.627402][T17107] netlink: 'syz.2.2823': attribute type 18 has an invalid length. [ 426.681387][T17110] netlink: 'syz.5.2825': attribute type 11 has an invalid length. [ 426.848144][T17115] team0: Port device team_slave_0 removed [ 427.181669][T17129] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 427.222999][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 427.237818][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 427.254005][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 427.263670][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 427.271692][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 427.325695][T17132] netlink: 'syz.1.2830': attribute type 1 has an invalid length. [ 427.872950][T17161] pim6reg: entered allmulticast mode [ 428.000603][T17162] bond1: Removing last arp target with arp_interval on [ 428.028473][T17151] pim6reg: left allmulticast mode [ 428.291760][ T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.311342][T17175] __nla_validate_parse: 5 callbacks suppressed [ 428.311359][T17175] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2839'. [ 428.329069][ T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.640863][ T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.723552][ T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.883298][T17197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2845'. [ 428.982387][ T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.032826][ T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.163663][T17209] netlink: 'syz.3.2849': attribute type 3 has an invalid length. [ 429.177833][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'. [ 429.314020][T17218] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 429.336719][ T50] Bluetooth: hci6: command tx timeout [ 429.343464][ T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.397243][ T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.446844][T17224] netlink: 'syz.3.2852': attribute type 13 has an invalid length. [ 429.464319][T17224] netlink: 'syz.3.2852': attribute type 17 has an invalid length. [ 429.682890][T17234] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 429.711633][T17224] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.718882][T17224] bridge0: port 2(bridge_slave_1) entered listening state [ 429.726303][T17224] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.733479][T17224] bridge0: port 1(bridge_slave_0) entered listening state [ 429.829312][T17237] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2855'. [ 429.870002][T17224] wg2: left promiscuous mode [ 429.882162][T17224] wg2: left allmulticast mode [ 429.948458][T17224] batadv_slave_1: left allmulticast mode [ 429.954964][T17224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.988109][T17224] macvtap0: left promiscuous mode [ 430.030889][T17224] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 430.074379][T17237] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2855'. [ 430.527395][T17256] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 430.618912][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 430.652643][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2860'. [ 430.754188][T17267] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20000 [ 430.801358][ T138] dvmrp0: left allmulticast mode [ 431.310371][ T138] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 431.418391][ T50] Bluetooth: hci6: command 0x041b tx timeout [ 431.466924][ T138] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 431.478969][ T138] bridge2 (unregistering): left promiscuous mode [ 431.509051][ T138] bond1 (unregistering): Released all slaves [ 431.530919][ T138] bond2 (unregistering): Released all slaves [ 431.555498][ T138] bond3 (unregistering): Released all slaves [ 431.580955][ T138] bond4 (unregistering): Released all slaves [ 431.598941][ T138] bond5 (unregistering): Released all slaves [ 431.615575][ T138] bond0 (unregistering): left promiscuous mode [ 431.629169][ T138] bond0 (unregistering): Released all slaves [ 431.644081][ T138] bond6 (unregistering): Released all slaves [ 431.664220][ T138] bond7 (unregistering): Released all slaves [ 431.681631][ T138] bond8 (unregistering): Released all slaves [ 431.695773][ T138] bond9 (unregistering): (slave veth13): Releasing backup interface [ 431.705718][ T138] bond9 (unregistering): Released all slaves [ 431.730527][ T138] bond11 (unregistering): Released all slaves [ 431.899147][ T138] tipc: Left network mode [ 431.910074][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.920071][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.929254][T17130] bridge_slave_0: entered allmulticast mode [ 431.941364][T17130] bridge_slave_0: entered promiscuous mode [ 431.962023][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.009344][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.034239][T17130] bridge_slave_1: entered allmulticast mode [ 432.066267][T17130] bridge_slave_1: entered promiscuous mode [ 432.237595][T17130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.290375][T17130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.334688][T17299] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2870'. [ 432.402065][T17130] team0: Port device team_slave_0 added [ 432.433565][ T138] IPVS: stopping master sync thread 10044 ... [ 432.478182][T17130] team0: Port device team_slave_1 added [ 432.669248][T17130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.692814][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.698351][T17314] netlink: 'syz.2.2873': attribute type 1 has an invalid length. [ 432.765107][T17130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.124147][T17130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.159043][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.212402][T17130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.271257][ T5660] udevd[5660]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 433.318277][T17320] gretap2: entered allmulticast mode [ 433.441485][T17320] bond8: (slave gretap2): making interface the new active one [ 433.451697][T17320] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 433.496037][ T5653] Bluetooth: hci6: command 0x041b tx timeout [ 433.594958][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 433.734387][T17130] hsr_slave_0: entered promiscuous mode [ 433.750506][T17130] hsr_slave_1: entered promiscuous mode [ 433.757004][T17360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2883'. [ 433.760134][T17130] debugfs: 'hsr0' already exists in 'hsr' [ 433.773669][T17130] Cannot create hsr debugfs directory [ 433.774252][T17359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2883'. [ 433.941848][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 433.987704][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 434.018512][T17368] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 434.081365][ T5649] IPVS: starting estimator thread 0... [ 434.142460][T17372] bridge1: entered promiscuous mode [ 434.152596][T17372] bridge1: entered allmulticast mode [ 434.161897][T17372] team0: Port device bridge1 added [ 434.196300][T17386] IPVS: using max 31 ests per chain, 74400 per kthread [ 434.265061][T17368] bridge2: entered promiscuous mode [ 434.286768][T17368] bridge2: entered allmulticast mode [ 434.311522][T17368] team0: Port device bridge2 added [ 434.350517][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2889'. [ 434.407946][T17402] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2889'. [ 434.443127][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2889'. [ 434.548576][ T5745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 434.888648][T17425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2892'. [ 434.945747][T17427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2895'. [ 434.976430][T17427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2895'. [ 434.996091][ T8344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.029369][T17432] xt_hashlimit: max too large, truncated to 1048576 [ 435.049787][T17419] syzkaller1: entered promiscuous mode [ 435.073147][T17419] syzkaller1: entered allmulticast mode [ 435.248069][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 435.576718][ T5653] Bluetooth: hci6: command 0x041b tx timeout [ 435.779087][ T138] hsr_slave_0: left promiscuous mode [ 435.827058][ T138] hsr_slave_1: left promiscuous mode [ 435.928425][ T138] veth1: left allmulticast mode [ 435.938349][ T138] veth1: left promiscuous mode [ 435.950252][ T138] veth1_macvtap: left promiscuous mode [ 435.967705][ T138] veth0_macvtap: left promiscuous mode [ 435.986762][ T138] veth0_vlan: left promiscuous mode [ 437.139979][ T138] team0 (unregistering): Port device vxcan1 removed [ 437.186275][T17461] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode [ 437.194591][T17461] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 437.250886][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 437.391719][T17503] x_tables: duplicate underflow at hook 2 [ 437.656173][ T5653] Bluetooth: hci6: command 0x041b tx timeout [ 437.732879][T17510] hsr0: entered promiscuous mode [ 437.766669][ T138] IPVS: stop unused estimator thread 0... [ 437.813808][T17517] netlink: 'syz.5.2912': attribute type 2 has an invalid length. [ 437.830677][T17517] netlink: 'syz.5.2912': attribute type 9 has an invalid length. [ 438.575308][T17130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.618875][T17130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.639571][T17130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.672673][T17130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.698822][T17130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.752488][T17130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.791898][T17130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.817651][T17130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.932264][T17565] sctp: [Deprecated]: syz.3.2923 (pid 17565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.932264][T17565] Use struct sctp_sack_info instead [ 439.095842][T17576] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 439.184341][T17580] __nla_validate_parse: 7 callbacks suppressed [ 439.184364][T17580] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2926'. [ 439.212487][T17576] bond2: entered promiscuous mode [ 439.218399][T17576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.242486][T17130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.441223][T17130] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.489701][T15245] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.496908][T15245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.587237][T15245] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.594393][T15245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.616303][T17605] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2931'. [ 439.634287][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2931'. [ 439.648650][T17605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2931'. [ 439.682356][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2933'. [ 439.748017][T17609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.801395][T17616] ip6tnl0: Caught tx_queue_len zero misconfig [ 439.922767][T17620] netlink: 'syz.2.2934': attribute type 1 has an invalid length. [ 440.037520][T17620] erspan1: entered allmulticast mode [ 440.249616][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2938'. [ 440.349358][T17647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2939'. [ 440.532808][T17658] netlink: 'syz.5.2942': attribute type 1 has an invalid length. [ 440.564354][T17658] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2942'. [ 440.675032][T17669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2944'. [ 440.701561][T17672] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2946'. [ 441.954437][T17130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.090514][T17713] gretap0: entered promiscuous mode [ 442.164692][T17713] 0ªî{X¹¦: renamed from gretap0 [ 442.189756][T17713] 0ªî{X¹¦: left promiscuous mode [ 442.205761][T17713] 0ªî{X¹¦: entered allmulticast mode [ 442.224490][T17713] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 442.294615][T17722] netlink: 'syz.3.2952': attribute type 2 has an invalid length. [ 442.344494][T17130] veth0_vlan: entered promiscuous mode [ 442.402860][T17130] veth1_vlan: entered promiscuous mode [ 442.485847][T17130] veth0_macvtap: entered promiscuous mode [ 442.675048][T17130] veth1_macvtap: entered promiscuous mode [ 442.965827][T17739] netlink: 'syz.3.2956': attribute type 10 has an invalid length. [ 443.089031][T17130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.131230][T17130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.164471][T15244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.184772][T15244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.220669][T15244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.237542][T15244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.569872][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.604869][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.873998][T15246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.885596][T15246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.338475][T17789] __nla_validate_parse: 6 callbacks suppressed [ 444.338493][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2965'. [ 444.466492][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2968'. [ 444.499938][T17798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.573551][T17803] tipc: Started in network mode [ 444.584163][T17803] tipc: Node identity 4246, cluster identity 4711 [ 444.604407][T17803] tipc: Node number set to 16966 [ 444.678434][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.699937][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.710561][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.724809][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.735643][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.944993][T17814] openvswitch: netlink: Flow actions attr not present in new flow. [ 445.232382][T17824] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 445.247105][T17824] bridge1: entered allmulticast mode [ 445.547821][T17828] bond2: ARP target 9.0.0.0 is already present [ 445.562805][T17828] bond2: option arp_ip_target: invalid value (9) [ 445.575487][T17828] bond2 (unregistering): Released all slaves [ 445.585119][T17850] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2978'. [ 445.695005][T17846] bond0: entered promiscuous mode [ 445.715096][T17846] bond_slave_0: entered promiscuous mode [ 445.746668][T17846] bond_slave_1: entered promiscuous mode [ 445.782156][T17846] batadv0: entered promiscuous mode [ 445.794239][T17846] debugfs: 'hsr1' already exists in 'hsr' [ 445.800764][T17846] Cannot create hsr debugfs directory [ 445.814139][T17846] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 445.823082][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'. [ 445.839259][T17846] bond0: left promiscuous mode [ 445.851058][T17846] bond_slave_0: left promiscuous mode [ 445.857299][T17846] bond_slave_1: left promiscuous mode [ 445.864992][T17846] batadv0: left promiscuous mode [ 445.905614][T17861] tipc: Enabling of bearer rejected, media not registered [ 445.919267][T17865] netlink: 'syz.1.2980': attribute type 2 has an invalid length. [ 445.978884][T17865] netlink: 'syz.1.2980': attribute type 2 has an invalid length. [ 446.776503][ T5653] Bluetooth: hci0: command tx timeout [ 447.564021][T17946] tipc: Enabled bearer , priority 0 [ 447.610633][T17946] mac80211_hwsim hwsim42 d: renamed from syzkaller0 [ 447.625618][T17946] tipc: Disabling bearer [ 447.716083][T17951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2996'. [ 447.902879][T17806] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.910378][T17806] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.928653][T17806] bridge_slave_0: entered allmulticast mode [ 447.951058][T17806] bridge_slave_0: entered promiscuous mode [ 447.968850][T17806] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.979621][T17972] netlink: 'syz.5.2998': attribute type 1 has an invalid length. [ 447.987216][T17806] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.995767][T17806] bridge_slave_1: entered allmulticast mode [ 448.005537][T17806] bridge_slave_1: entered promiscuous mode [ 448.138631][T17806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.204978][T17806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.358439][T17806] team0: Port device team_slave_0 added [ 448.484749][T17977] 5nè: entered promiscuous mode [ 448.504859][T17806] team0: Port device team_slave_1 added [ 448.541155][T17992] ip6tnl1: entered allmulticast mode [ 448.724236][T18010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3005'. [ 448.856592][ T5653] Bluetooth: hci0: command tx timeout [ 449.224276][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.232015][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.942499][T18055] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 449.955976][ T5649] IPVS: starting estimator thread 0... [ 450.009531][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.057652][T18060] IPVS: using max 27 ests per chain, 64800 per kthread [ 450.067874][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.662537][T18019] tipc: Enabling of bearer rejected, failed to enable media [ 450.713568][T11732] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.739437][T18077] syzkaller1: entered promiscuous mode [ 450.756521][T18077] syzkaller1: entered allmulticast mode [ 450.766494][T17806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.786019][T17806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.831206][T17806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.855201][T11732] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.887114][T11732] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.934142][T17806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.936392][ T5653] Bluetooth: hci0: command tx timeout [ 450.951139][T17806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.011382][T17806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.026766][T11732] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.145368][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 451.204751][T17806] hsr_slave_0: entered promiscuous mode [ 451.215233][T17806] hsr_slave_1: entered promiscuous mode [ 451.429880][T18114] netlink: 'syz.5.3021': attribute type 1 has an invalid length. [ 451.438349][T18114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3021'. [ 451.655794][T17806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.688026][T17806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.794262][T17806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.807586][T17806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.962432][T18140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3028'. [ 451.999060][T18143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3027'. [ 452.010314][T18144] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3027'. [ 452.140250][ T1508] block nbd3: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 120 seconds [ 452.417181][T17806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.438542][T17806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.584360][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 452.626655][T18168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.640927][T17806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.658288][T17806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.691717][T18175] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 452.704331][T18168] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 453.076121][T17806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 453.097649][T17806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.106513][T17806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 453.135002][T17806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.144891][T17806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.160661][T17806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.201627][T17806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 453.220767][T17806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.291295][T18196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3035'. [ 453.383474][T17806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.421477][T17806] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.453157][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.460385][ T7943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.484806][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3039'. [ 453.501083][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.502928][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3039'. [ 453.508346][ T7943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.620415][T18222] netlink: 'syz.3.3040': attribute type 1 has an invalid length. [ 453.662830][T18222] 8021q: adding VLAN 0 to HW filter on device bond9 [ 453.722990][T18226] bond9: (slave veth9): Enslaving as an active interface with a down link [ 453.765324][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 453.779480][T18222] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 453.790815][T18222] bond9: (slave batadv1): making interface the new active one [ 453.803937][T18222] batadv1: entered promiscuous mode [ 453.813435][T18222] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 453.846434][T18226] bond9 (unregistering): (slave veth9): Releasing active interface [ 453.865131][T18226] bond9 (unregistering): (slave batadv1): Releasing active interface [ 453.880224][T18226] bond9 (unregistering): Released all slaves [ 454.574447][T17806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.595247][T18276] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 454.725689][T17806] veth0_vlan: entered promiscuous mode [ 454.758176][T17806] veth1_vlan: entered promiscuous mode [ 454.824800][T17806] veth0_macvtap: entered promiscuous mode [ 454.846760][T17806] veth1_macvtap: entered promiscuous mode [ 454.898766][T17806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.939462][T17806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.977120][ T100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.990243][ T100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.012563][ T100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.032069][ T100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.124099][T18294] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 455.397922][T11717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.437765][T11717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.503034][T11717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.518191][T11717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.852078][T18325] netlink: 'syz.0.3063': attribute type 32 has an invalid length. [ 455.902842][T18325] openvswitch: netlink: Flow key attr not present in new flow. [ 455.991519][T18329] xt_hashlimit: size too large, truncated to 1048576 [ 456.157757][T18333] : renamed from veth0_to_bond (while UP) [ 456.271071][T18336] __nla_validate_parse: 10 callbacks suppressed [ 456.271087][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3067'. [ 456.475551][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.494684][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.504725][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.521121][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.532409][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.598109][T18339] netlink: 'syz.0.3068': attribute type 1 has an invalid length. [ 456.617544][T18339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.775275][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'. [ 456.784803][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3073'. [ 456.871870][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'. [ 456.884102][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3073'. [ 456.905822][T18357] macvtap1: entered promiscuous mode [ 456.911334][T18357] bridge0: entered promiscuous mode [ 456.918366][T18357] bridge0: port 3(macvtap1) entered blocking state [ 456.924975][T18357] bridge0: port 3(macvtap1) entered disabled state [ 456.932040][T18357] macvtap1: entered allmulticast mode [ 456.938412][T18357] bridge0: entered allmulticast mode [ 456.945404][T18357] macvtap1: left allmulticast mode [ 456.950664][T18357] bridge0: left allmulticast mode [ 456.998963][T11725] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.008215][T11725] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.035788][ T5829] bridge0: left promiscuous mode [ 457.049343][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'. [ 457.062130][T11725] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.089607][T11725] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.330037][T15246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.360795][T15246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.611303][T15246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.634164][T15246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.793271][T15246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.809030][T15246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.854614][T18390] block nbd5: not configured, cannot reconfigure [ 457.931914][T15246] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.942765][T15246] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.049105][T18407] syzkaller0: entered promiscuous mode [ 458.067607][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'. [ 458.074837][T18407] syzkaller0: entered allmulticast mode [ 458.508814][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 458.538751][T18428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3089'. [ 458.549758][T18428] tipc: Can't bind to reserved service type 0 [ 458.617209][ T5653] Bluetooth: hci4: command tx timeout [ 458.618688][T18428] tipc: Failed to remove unknown binding: 66,0,0/0:3206195634/3206195635 [ 458.712155][T18428] tipc: Failed to remove unknown binding: 66,0,0/0:3206195634/3206195635 [ 458.741866][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 458.759666][T15246] bridge_slave_1: left allmulticast mode [ 458.765838][T15246] bridge_slave_1: left promiscuous mode [ 458.788179][T15246] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.831543][T15246] bridge_slave_0: left allmulticast mode [ 458.847675][T15246] bridge_slave_0: left promiscuous mode [ 458.863750][T15246] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.901724][T15246] dvmrp0: left allmulticast mode [ 458.911425][T15246] dvmrp8: left allmulticast mode [ 459.204113][T15246] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 459.244896][T15246] bond0 (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface [ 459.255033][T15246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.273916][T15246] bond0 (unregistering): Released all slaves [ 459.284276][T15246] bond1 (unregistering): Released all slaves [ 459.298217][T15246] bond2 (unregistering): Released all slaves [ 459.313042][T15246] bond3 (unregistering): (slave bond4): Releasing backup interface [ 459.323006][T15246] bond4 (unregistering): left promiscuous mode [ 459.337269][T15246] bond3 (unregistering): Released all slaves [ 459.350976][T15246] bond4 (unregistering): Released all slaves [ 459.365690][T15246] bond5 (unregistering): Released all slaves [ 459.379838][T15246] bond6 (unregistering): Released all slaves [ 459.401731][T15246] bond7 (unregistering): (slave veth7): Releasing active interface [ 459.411647][T15246] bond7 (unregistering): Released all slaves [ 459.425598][T15246] bond8 (unregistering): Released all slaves [ 459.459956][T18437] macvtap1: entered promiscuous mode [ 459.465434][T18437] bridge0: entered promiscuous mode [ 459.485753][T18437] bridge0: port 3(macvtap1) entered blocking state [ 459.493083][T18437] bridge0: port 3(macvtap1) entered disabled state [ 459.508755][T18437] macvtap1: entered allmulticast mode [ 459.514568][T18437] bridge0: entered allmulticast mode [ 459.523699][T18437] macvtap1: left allmulticast mode [ 459.529637][T18437] bridge0: left allmulticast mode [ 459.635851][T18442] bond3 (unregistering): Released all slaves [ 459.674885][ T9] bridge0: left promiscuous mode [ 459.706038][T15246] hmó3)ó: left promiscuous mode [ 459.867894][T15246] tipc: Left network mode [ 460.726122][ T5653] Bluetooth: hci4: command tx timeout [ 460.856639][T18487] syzkaller0: entered promiscuous mode [ 460.865409][T18487] syzkaller0: entered allmulticast mode [ 462.787114][ T5653] Bluetooth: hci4: command tx timeout [ 462.899774][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 462.923653][T18344] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.932038][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.939798][T18344] bridge_slave_0: entered allmulticast mode [ 462.969375][T18344] bridge_slave_0: entered promiscuous mode [ 462.987619][T18344] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.005281][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.021259][T18344] bridge_slave_1: entered allmulticast mode [ 463.034983][T18344] bridge_slave_1: entered promiscuous mode [ 463.147497][T18344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.160232][T18344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.752701][T18505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.910398][T18538] __nla_validate_parse: 3 callbacks suppressed [ 463.910416][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'. [ 463.992444][T18344] team0: Port device team_slave_0 added [ 464.054117][T18344] team0: Port device team_slave_1 added [ 464.200350][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 464.263065][T18344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.321130][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.428877][T18344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.455774][T18344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.473372][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.556025][T18344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.614156][T18569] syzkaller0: entered promiscuous mode [ 464.620628][T18569] syzkaller0: entered allmulticast mode [ 464.824002][T18581] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 464.857650][ T5653] Bluetooth: hci4: command tx timeout [ 465.003462][T18344] hsr_slave_0: entered promiscuous mode [ 465.022412][T18344] hsr_slave_1: entered promiscuous mode [ 465.039548][T18344] debugfs: 'hsr0' already exists in 'hsr' [ 465.060917][T18344] Cannot create hsr debugfs directory [ 465.355418][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3123'. [ 465.364660][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3123'. [ 465.394556][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 465.421896][T18603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3122'. [ 465.454349][T18607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3123'. [ 465.458302][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3122'. [ 465.488316][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3122'. [ 465.544785][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3122'. [ 465.586421][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3122'. [ 465.682173][T18622] xt_hashlimit: size too large, truncated to 1048576 [ 465.834861][T15246] hsr_slave_0: left promiscuous mode [ 465.852288][T15246] hsr_slave_1: left promiscuous mode [ 465.862138][T15246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.878688][T15246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.891505][T15246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.909307][T15246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.949338][T15246] veth1_macvtap: left promiscuous mode [ 465.955375][T15246] veth0_macvtap: left promiscuous mode [ 465.963222][T15246] veth1_vlan: left promiscuous mode [ 465.970124][T15246] veth0_vlan: left promiscuous mode [ 466.316590][T15246] team0 (unregistering): Port device team_slave_1 removed [ 466.330891][T15246] team0 (unregistering): Port device team_slave_0 removed [ 466.491120][T18628] veth0: entered promiscuous mode [ 466.532559][T18629] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 466.664305][T18634] bridge_slave_0: left allmulticast mode [ 466.676597][T18634] bridge_slave_0: left promiscuous mode [ 466.682843][T18634] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.709754][T18634] bridge_slave_1: left allmulticast mode [ 466.719573][T18634] bridge_slave_1: left promiscuous mode [ 466.725367][T18634] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.745032][T18634] bond0: (slave bond_slave_0): Releasing backup interface [ 466.762803][T18647] Cannot find set identified by id 0 to match [ 466.773233][T18634] bond0: (slave bond_slave_1): Releasing backup interface [ 466.780244][T18647] netlink: 'syz.0.3132': attribute type 21 has an invalid length. [ 466.811480][T18634] team0: Port device team_slave_0 removed [ 466.841153][T18634] team0: Port device team_slave_1 removed [ 466.861960][T18634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.888442][T18634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.907604][T18634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.924382][T18634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.948769][T18634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 467.071837][T18625] veth0: left promiscuous mode [ 467.327517][T18661] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 467.347028][T18661] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.354856][T18661] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.455050][T18680] netlink: 'syz.0.3136': attribute type 8 has an invalid length. [ 467.492258][T18662] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 467.555078][T18685] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 467.614694][T15246] IPVS: stop unused estimator thread 0... [ 467.803087][T18697] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 467.967294][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 468.039299][T15246] bridge_slave_1: left allmulticast mode [ 468.045162][T15246] bridge_slave_1: left promiscuous mode [ 468.052077][T15246] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.064081][T15246] bridge_slave_0: left allmulticast mode [ 468.069839][T15246] bridge_slave_0: left promiscuous mode [ 468.075806][T15246] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.290537][T15246] gretap0 (unregistering): left allmulticast mode [ 468.297380][T15246] gretap0 (unregistering): left promiscuous mode [ 468.334371][T15246] bond3 (unregistering): (slave gretap1): Releasing active interface [ 468.524428][T15246] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 468.561785][T15246] bond1 (unregistering): Released all slaves [ 468.575307][T15246] bond2 (unregistering): Released all slaves [ 468.589922][T15246] bond3 (unregistering): Released all slaves [ 468.604155][T15246] bond4 (unregistering): Released all slaves [ 468.619621][T15246] bond5 (unregistering): Released all slaves [ 468.636378][T15246] bond6 (unregistering): Released all slaves [ 468.663749][T15246] bond7 (unregistering): Released all slaves [ 468.678521][T15246] bond8 (unregistering): Released all slaves [ 468.692923][T15246] bond9 (unregistering): Released all slaves [ 469.077931][T18718] __nla_validate_parse: 7 callbacks suppressed [ 469.077948][T18718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3144'. [ 469.094619][T15246] tipc: Left network mode [ 469.359187][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.395152][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.617914][T18737] sock: sock_set_timeout: `syz.5.3148' (pid 18737) tries to set negative timeout [ 469.811889][T18751] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3150'. [ 470.465194][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3156'. [ 470.649084][T18344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.693012][T18344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.728841][T18344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.783797][T18344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.814615][T18344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.864464][T18790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3159'. [ 470.867442][T18344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.905137][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3159'. [ 470.916870][T18344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.937615][T18344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.965239][T15246] hsr_slave_0: left promiscuous mode [ 470.997877][T15246] hsr_slave_1: left promiscuous mode [ 471.013589][T15246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.050236][T15246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.670727][T15246] ªªªªª» (unregistering): left promiscuous mode [ 471.686319][T15246] ªªªªª» (unregistering): left allmulticast mode [ 471.694230][T15246] team0 (unregistering): Port device ªªªªª» removed [ 471.733481][T15246] team_slave_0 (unregistering): left promiscuous mode [ 471.740755][T15246] team_slave_0 (unregistering): left allmulticast mode [ 471.751552][T15246] team0 (unregistering): Port device team_slave_0 removed [ 471.911745][T18830] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 471.998646][T18833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.138548][T11725] wlan1: Trigger new scan to find an IBSS to join [ 472.225171][T18850] netlink: 'syz.0.3166': attribute type 6 has an invalid length. [ 472.281388][T18850] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3166'. [ 472.352119][T18854] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.3166'. [ 472.362501][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'. [ 472.425494][T18344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.513728][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3170'. [ 472.566926][T18344] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.568222][T18873] netlink: 'syz.5.3170': attribute type 32 has an invalid length. [ 472.597482][T11717] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.604645][T11717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.636396][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3170'. [ 472.680404][T11717] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.687562][T11717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.727666][ T5660] udevd[5660]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 472.845345][T18865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.869971][T15246] IPVS: stop unused estimator thread 0... [ 472.949825][T18873] bond4: Setting coupled_control to off (0) [ 473.333531][T18913] vlan2: entered promiscuous mode [ 473.344343][T18913] bridge0: entered promiscuous mode [ 473.981883][T18344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.133110][T18344] veth0_vlan: entered promiscuous mode [ 474.163786][T18954] __nla_validate_parse: 17 callbacks suppressed [ 474.163802][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3182'. [ 474.178690][T18344] veth1_vlan: entered promiscuous mode [ 474.213824][T18954] macsec1: entered promiscuous mode [ 474.226482][T18954] batadv0: entered promiscuous mode [ 474.243818][T18954] macsec1: entered allmulticast mode [ 474.256040][T18954] batadv0: entered allmulticast mode [ 474.270186][T18954] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 474.361375][T18344] veth0_macvtap: entered promiscuous mode [ 474.389235][T18344] veth1_macvtap: entered promiscuous mode [ 474.425730][T18344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.467037][T18344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.501705][T18964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3184'. [ 474.514262][T15245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.524718][T15245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.535145][T18967] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3183'. [ 474.553475][T15245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.567315][T15245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.642782][T18969] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3185'. [ 474.747172][ T7931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.762527][ T7931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.807208][ T7931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.815785][ T7931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.030082][T18987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3189'. [ 475.099662][ T100] wlan1: Trigger new scan to find an IBSS to join [ 475.213451][T18998] netlink: 'syz.5.3191': attribute type 83 has an invalid length. [ 475.271681][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3194'. [ 475.285529][T19007] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 475.507714][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3196'. [ 475.756311][T19032] netlink: 392 bytes leftover after parsing attributes in process `syz.5.3199'. [ 476.026973][T19050] gretap1: entered allmulticast mode [ 476.113179][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 476.273051][T19069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3212'. [ 476.454187][T19076] netlink: 'syz.1.3214': attribute type 3 has an invalid length. [ 476.474348][T19076] netlink: 'syz.1.3214': attribute type 1 has an invalid length. [ 476.498752][T19084] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 476.773776][T19101] netlink: 'syz.2.3220': attribute type 7 has an invalid length. [ 476.808876][T19101] netlink: 'syz.2.3220': attribute type 8 has an invalid length. [ 477.045838][T19112] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 477.096548][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 477.390545][T19133] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 477.674627][T19145] --map-set only usable from mangle table [ 478.056759][ T7931] wlan1: Trigger new scan to find an IBSS to join [ 478.967327][ T7931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.176080][ T5653] Bluetooth: hci4: command tx timeout [ 481.789553][T19179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.974202][T19213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.151862][T19209] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 482.224125][ T1508] block nbd3: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 150 seconds [ 482.243664][T19218] __nla_validate_parse: 14 callbacks suppressed [ 482.243682][T19218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 482.400850][T19233] : renamed from bond0 (while UP) [ 482.426854][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'. [ 482.461480][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 482.490637][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'. [ 482.516395][T19233] team1: entered promiscuous mode [ 482.535956][T19233] team1: entered allmulticast mode [ 482.546567][T19233] 8021q: adding VLAN 0 to HW filter on device team1 [ 482.572833][T19242] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 482.609709][T19242] team2: entered promiscuous mode [ 482.615100][T19242] team2: entered allmulticast mode [ 482.621655][T19242] 8021q: adding VLAN 0 to HW filter on device team2 [ 482.808866][T19245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.851190][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3263'. [ 482.853393][T19249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3265'. [ 482.902411][T19245] erspan0: entered promiscuous mode [ 482.935026][T19245] dummy0: entered promiscuous mode [ 482.975513][T19245] debugfs: 'hsr1' already exists in 'hsr' [ 482.992944][T19245] Cannot create hsr debugfs directory [ 483.025989][T19245] hsr1: entered promiscuous mode [ 483.112980][T19257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3269'. [ 483.244340][T19274] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3272'. [ 483.322044][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 483.876795][T19312] netlink: 'syz.5.3281': attribute type 1 has an invalid length. [ 483.989970][T19320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3284'. [ 484.089597][T19320] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 484.847698][T19354] veth3: entered promiscuous mode [ 485.258377][T19386] netlink: 'syz.2.3300': attribute type 1 has an invalid length. [ 485.384540][T19398] netlink: 'syz.1.3304': attribute type 1 has an invalid length. [ 485.433649][T19398] bond0: entered promiscuous mode [ 485.441132][T19398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.491081][T19399] veth3: entered promiscuous mode [ 485.497359][T19399] veth3: entered allmulticast mode [ 485.530420][T19403] veth5: entered promiscuous mode [ 485.544653][T19403] veth5: entered allmulticast mode [ 485.594521][T19405] netlink: 'syz.0.3305': attribute type 1 has an invalid length. [ 486.620637][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cde5000: rx timeout, send abort [ 487.120447][T19457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.129473][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cde5000: abort rx timeout. Force session deactivation [ 487.338150][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 487.639955][T19486] __nla_validate_parse: 13 callbacks suppressed [ 487.639973][T19486] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3324'. [ 487.703933][T19487] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 487.747472][T19486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3324'. [ 487.782663][T19487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3324'. [ 487.967748][T19513] netlink: 'syz.0.3329': attribute type 11 has an invalid length. [ 487.988313][T19513] netlink: 'syz.0.3329': attribute type 4 has an invalid length. [ 488.005572][T19513] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.3329'. [ 488.169027][T19524] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3334'. [ 488.206844][T19522] syzkaller0: entered promiscuous mode [ 488.219423][T19522] syzkaller0: entered allmulticast mode [ 488.422801][T19531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3335'. [ 488.461418][T19533] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 488.500000][T19533] bridge3: entered allmulticast mode [ 488.587215][T19549] netlink: 36764 bytes leftover after parsing attributes in process `syz.2.3339'. [ 488.633079][T19549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3339'. [ 488.783980][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'. [ 488.810462][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'. [ 489.237744][T19577] IPv6: addrconf: prefix option has invalid lifetime [ 489.425837][T19585] lo speed is unknown, defaulting to 1000 [ 489.471776][T19585] lo speed is unknown, defaulting to 1000 [ 489.519616][T19593] netlink: 'syz.0.3346': attribute type 2 has an invalid length. [ 489.587597][T19585] lo speed is unknown, defaulting to 1000 [ 489.622284][T19585] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 489.681115][T19585] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 489.780759][T19585] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 489.843808][T19585] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 489.909981][T19585] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 489.943385][T19619] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 490.151361][T19619] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 490.210091][T19585] lo speed is unknown, defaulting to 1000 [ 490.289797][T19585] lo speed is unknown, defaulting to 1000 [ 490.344535][T19585] lo speed is unknown, defaulting to 1000 [ 490.371571][T19585] lo speed is unknown, defaulting to 1000 [ 490.396410][T19585] lo speed is unknown, defaulting to 1000 [ 490.418856][T19585] lo speed is unknown, defaulting to 1000 [ 490.526656][T19585] lo speed is unknown, defaulting to 1000 [ 491.121829][T19677] netlink: 'syz.5.3366': attribute type 10 has an invalid length. [ 491.141845][T19677] syz_tun: entered promiscuous mode [ 491.169125][T19677] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 491.409164][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ae8c000: rx timeout, send abort [ 491.728282][T19701] bond1: entered allmulticast mode [ 491.910575][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ae8f400: rx timeout, send abort [ 491.919535][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ae8c000: abort rx timeout. Force session deactivation [ 492.027000][T19722] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 492.418832][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ae8f400: abort rx timeout. Force session deactivation [ 492.995118][T19789] __nla_validate_parse: 10 callbacks suppressed [ 492.995139][T19789] netlink: 316 bytes leftover after parsing attributes in process `syz.5.3390'. [ 493.029245][T19789] netlink: 'syz.5.3390': attribute type 9 has an invalid length. [ 493.044274][T19789] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3390'. [ 493.057112][T19789] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3390'. [ 493.444659][T19812] nbd: nbd0 already in use [ 493.450363][T19812] block nbd0: NBD_DISCONNECT [ 493.455015][T19812] block nbd0: Send disconnect failed -107 [ 493.492738][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3396'. [ 493.662595][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'. [ 494.289079][T19840] syzkaller1: entered promiscuous mode [ 494.295811][T19840] syzkaller1: entered allmulticast mode [ 494.595428][T19855] netlink: 'syz.3.3407': attribute type 58 has an invalid length. [ 494.611661][T19855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3407'. [ 495.139538][T19888] pim6reg: entered allmulticast mode [ 495.210535][T19895] openvswitch: netlink: Message has 4 unknown bytes. [ 495.236792][T19895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.438793][T19905] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3423'. [ 495.826562][T19929] netlink: 'syz.2.3431': attribute type 1 has an invalid length. [ 495.932269][T19929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.022292][T19934] veth5: entered allmulticast mode [ 496.053235][T19934] bond1: (slave veth5): Enslaving as an active interface with an up link [ 496.110551][T19935] bond1 (unregistering): (slave veth5): Releasing backup interface [ 496.128949][T19935] bond1 (unregistering): Released all slaves [ 496.150966][T19941] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3433'. [ 496.204205][T19943] bridge0: port 3(vlan2) entered blocking state [ 496.218766][T19943] bridge0: port 3(vlan2) entered disabled state [ 496.258894][T19943] vlan2: entered allmulticast mode [ 496.273772][T19943] dummy0: entered allmulticast mode [ 496.281250][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3434'. [ 496.284261][T19943] vlan2: entered promiscuous mode [ 496.297350][T19943] dummy0: entered promiscuous mode [ 496.351932][T19948] vlan0: entered promiscuous mode [ 496.458738][T19952] netlink: 'syz.2.3436': attribute type 10 has an invalid length. [ 496.496669][T19952] geneve1: entered promiscuous mode [ 496.566344][T19958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3438'. [ 496.579615][T19952] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 497.013577][T19985] netlink: 'syz.1.3443': attribute type 12 has an invalid length. [ 497.520845][T20013] netlink: 'syz.1.3453': attribute type 10 has an invalid length. [ 497.590324][T20013] team0: Port device dummy0 added [ 497.629452][T20015] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 497.686312][T20021] –: renamed from dummy0 [ 497.842954][T20024] bond2: entered promiscuous mode [ 497.852444][T20024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.302340][T20047] __nla_validate_parse: 1 callbacks suppressed [ 498.302356][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3461'. [ 498.303968][T20048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3460'. [ 498.374028][T20044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3460'. [ 498.578826][T20067] netlink: 'syz.2.3466': attribute type 8 has an invalid length. [ 498.581695][T20064] netlink: 'syz.1.3464': attribute type 3 has an invalid length. [ 498.593996][T20067] netlink: 'syz.2.3466': attribute type 12 has an invalid length. [ 498.595298][T20064] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3464'. [ 498.611830][T20067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3466'. [ 498.634926][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3464'. [ 498.682239][T20064] vlan2: entered promiscuous mode [ 498.707835][T20064] geneve1: entered promiscuous mode [ 498.713352][T20064] vlan2: entered allmulticast mode [ 498.718541][T20064] geneve1: entered allmulticast mode [ 498.792074][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3470'. [ 499.365507][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'. [ 499.385288][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3481'. [ 499.446132][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'. [ 499.490222][T20118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.516509][T20121] veth0_to_batadv: entered promiscuous mode [ 499.522719][T20121] veth0_to_batadv: entered allmulticast mode [ 500.242956][T20172] vlan0: entered promiscuous mode [ 500.885556][T20172] lo speed is unknown, defaulting to 1000 [ 500.933803][T20189] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.286308][T20202] syzkaller1: entered allmulticast mode [ 502.060392][ T5766] page_pool_release_retry() stalled pool shutdown: id 134, 1 inflight 60 sec [ 503.712139][T20311] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 503.848180][T20317] __nla_validate_parse: 12 callbacks suppressed [ 503.848199][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3531'. [ 504.155311][T20311] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.163072][T20311] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.624595][T20218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.835548][T20334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 504.884063][T20311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.904737][T20346] Bluetooth: MGMT ver 1.23 [ 504.961581][T20311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.241219][T20357] netlink: zone id is out of range [ 505.253183][T20357] netlink: zone id is out of range [ 505.254512][T20352] netlink: 'syz.3.3539': attribute type 11 has an invalid length. [ 505.268207][T20357] netlink: zone id is out of range [ 505.268219][T20357] netlink: zone id is out of range [ 505.268227][T20357] netlink: zone id is out of range [ 505.268234][T20357] netlink: zone id is out of range [ 505.396572][T20352] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3539'. [ 505.643837][T20320] –: renamed from dummy0 [ 505.651672][ T8344] lo speed is unknown, defaulting to 1000 [ 505.669292][ T8344] syz2: Port: 1 Link DOWN [ 505.699105][T20334] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 505.731583][T20366] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3541'. [ 505.780468][T20347] veth7: entered allmulticast mode [ 505.853526][T11725] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.875245][T11725] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.888822][T20372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 505.963558][T20371] netlink: 'syz.2.3543': attribute type 29 has an invalid length. [ 505.975353][T11725] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.984899][T20373] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 506.054338][T11725] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.082013][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3543'. [ 506.232934][T20376] syzkaller0: entered promiscuous mode [ 506.259660][T20376] syzkaller0: entered allmulticast mode [ 507.016044][ T5653] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 509.606331][ T4999] udevd[4999]: worker [5668] /devices/virtual/block/nbd3 is taking a long time [ 510.474629][T20431] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 510.490145][T20442] batadv_slave_1: entered promiscuous mode [ 510.531777][T20437] batadv_slave_1: left promiscuous mode [ 510.686384][T20453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3564'. [ 510.697863][T20452] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3563'. [ 510.708755][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 510.765468][T20453] syzkaller1: entered promiscuous mode [ 510.784869][T20453] syzkaller1: entered allmulticast mode [ 510.865370][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3564'. [ 510.954227][T20463] hsr_slave_0: left promiscuous mode [ 510.968755][T20463] hsr_slave_1: left promiscuous mode [ 511.004729][T20468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3568'. [ 511.080481][T20435] lo speed is unknown, defaulting to 1000 [ 511.094125][T20478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3570'. [ 511.175099][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3570'. [ 511.562990][T20453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.750181][T20500] tipc: Started in network mode [ 511.755621][T20503] netlink: 'syz.2.3576': attribute type 3 has an invalid length. [ 511.763625][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3576'. [ 511.767223][T20500] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 511.792923][T20500] tipc: Enabled bearer , priority 26 [ 511.824516][T20505] netlink: 'syz.0.3579': attribute type 32 has an invalid length. [ 511.883248][T20506] batman_adv: batadv0: Adding interface: ipvlan2 [ 511.892828][T20505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3579'. [ 511.929201][T20506] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.990555][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.010847][ T7943] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3 [ 512.039875][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.057631][T20506] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 512.259278][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 512.296818][ T1508] block nbd3: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 180 seconds [ 512.425336][T20539] dvmrp0: entered allmulticast mode [ 512.475150][T20502] lo speed is unknown, defaulting to 1000 [ 512.921656][ T9] tipc: Node number set to 4269801491 [ 512.986069][T20565] netlink: 'syz.0.3595': attribute type 1 has an invalid length. [ 513.084704][T20568] netlink: 'syz.2.3596': attribute type 2 has an invalid length. [ 513.229865][ T30] audit: type=1804 audit(1780210510.994:8): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3598" name="/newroot/70/cgroup.controllers" dev="tmpfs" ino=377 res=1 errno=0 [ 513.305326][ T30] audit: type=1800 audit(1780210510.994:9): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3598" name="cgroup.controllers" dev="tmpfs" ino=377 res=0 errno=0 [ 513.421511][T20586] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 513.849350][T20612] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.073081][T20638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.461343][ T30] audit: type=1804 audit(1780210512.224:10): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3619" name="/newroot/178/cgroup.controllers" dev="tmpfs" ino=927 res=1 errno=0 [ 514.525486][ T30] audit: type=1800 audit(1780210512.244:11): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3619" name="cgroup.controllers" dev="tmpfs" ino=927 res=0 errno=0 [ 514.570432][ T30] audit: type=1804 audit(1780210512.274:12): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3619" name="/newroot/178/cgroup.controllers" dev="tmpfs" ino=927 res=1 errno=0 [ 514.619841][T20672] openvswitch: netlink: Invalid VLAN frame [ 514.690885][T20678] netlink: 'syz.5.3624': attribute type 48 has an invalid length. [ 514.791609][T20680] macvtap1: entered promiscuous mode [ 514.832394][T20680] bridge0: entered promiscuous mode [ 514.888019][T20680] bridge0: left promiscuous mode [ 515.040435][T20690] syzkaller1: entered promiscuous mode [ 515.062855][T20690] syzkaller1: entered allmulticast mode [ 515.131028][T20704] netlink: 'syz.0.3628': attribute type 11 has an invalid length. [ 515.301989][T20715] openvswitch: netlink: Missing valid actions attribute. [ 515.319185][T20715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.653148][T20735] batadv0: entered promiscuous mode [ 516.160541][T20741] netlink: 'syz.3.3641': attribute type 21 has an invalid length. [ 516.173780][T20741] __nla_validate_parse: 36 callbacks suppressed [ 516.173797][T20741] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3641'. [ 516.191726][T20741] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3641'. [ 517.851683][T20684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.950078][T20753] syzkaller0: entered promiscuous mode [ 517.983993][T20753] syzkaller0: entered allmulticast mode [ 518.002960][T20734] batadv0: left promiscuous mode [ 518.093423][T20760] openvswitch: netlink: IP tunnel dst address not specified [ 518.193904][T20769] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 518.361794][T20779] xt_hashlimit: size too large, truncated to 1048576 [ 518.414453][T20783] syzkaller0: entered promiscuous mode [ 518.449110][T20783] syzkaller0: entered allmulticast mode [ 519.380185][T20813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3662'. [ 519.510877][T20813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.518435][T20775] lo speed is unknown, defaulting to 1000 [ 519.537222][T20815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 519.833102][T20829] tipc: Enabling of bearer rejected, failed to enable media [ 520.027983][T20835] tipc: Started in network mode [ 520.069183][T20835] tipc: Node identity 8efd3417db18, cluster identity 4711 [ 520.096279][T20835] tipc: Enabled bearer , priority 0 [ 520.275603][T20853] netlink: 'syz.5.3671': attribute type 39 has an invalid length. [ 520.330164][T20856] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3671'. [ 520.529949][T20820] tipc: Disabling bearer [ 520.922596][T20867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3676'. [ 521.092846][T20869] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 521.146245][T20876] bond7: entered promiscuous mode [ 521.161209][T20876] bond7: entered allmulticast mode [ 521.177011][T20876] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.275630][T20890] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3683'. [ 521.519219][T20895] syzkaller0: entered promiscuous mode [ 521.531945][T20895] syzkaller0: entered allmulticast mode [ 521.539669][T20909] netlink: 'syz.2.3686': attribute type 8 has an invalid length. [ 521.593267][T20902] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.623758][T20902] bridge_slave_0 (unregistering): left allmulticast mode [ 521.651639][T20902] bridge_slave_0 (unregistering): left promiscuous mode [ 521.673275][T20902] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.829382][T20926] netlink: 'syz.3.3690': attribute type 1 has an invalid length. [ 524.289328][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3697'. [ 524.482832][T20975] netlink: 'syz.2.3701': attribute type 1 has an invalid length. [ 524.535384][T20975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.627081][T20984] syzkaller1: entered promiscuous mode [ 524.638062][T20984] syzkaller1: entered allmulticast mode [ 524.661978][T20986] netlink: 'syz.5.3705': attribute type 1 has an invalid length. [ 524.699479][T20986] 8021q: adding VLAN 0 to HW filter on device bond8 [ 524.907496][T20997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3708'. [ 524.978049][T20962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.190535][T21007] netlink: 'syz.0.3714': attribute type 4 has an invalid length. [ 525.349970][T21010] bond9: Removing last ns target with arp_interval on [ 525.374639][T21018] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3715'. [ 525.664813][T21039] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3722'. [ 525.689921][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 525.887105][T21048] 5Ò: entered promiscuous mode [ 525.956662][T21055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3726'. [ 526.044168][T21056] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3726'. [ 526.107913][T21059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3727'. [ 526.189230][T21063] netlink: 'syz.1.3728': attribute type 1 has an invalid length. [ 526.389201][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'. [ 526.468157][T21083] batadv0: entered promiscuous mode [ 526.497796][T21084] netlink: 'syz.1.3734': attribute type 1 has an invalid length. [ 526.564627][T21084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.703897][ T8344] IPVS: starting estimator thread 0... [ 526.816268][T21095] IPVS: using max 29 ests per chain, 69600 per kthread [ 527.120373][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3748'. [ 527.218509][T21122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.247702][T21125] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3747'. [ 527.257747][T21135] Cannot find add_set index 2 as target [ 527.434605][ T9] IPVS: starting estimator thread 0... [ 527.450257][T21139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3752'. [ 527.536070][T21143] IPVS: using max 28 ests per chain, 67200 per kthread [ 527.769086][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'. [ 527.862486][T21157] geneve2: entered promiscuous mode [ 527.988792][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3758'. [ 528.016993][T21167] syzkaller1: entered promiscuous mode [ 528.024000][T21169] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3761'. [ 528.026340][T21167] syzkaller1: entered allmulticast mode [ 528.103185][T21172] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3762'. [ 528.114088][T21172] netlink: 'syz.5.3762': attribute type 1 has an invalid length. [ 528.215040][T21172] bond10: entered promiscuous mode [ 528.242944][T21172] 8021q: adding VLAN 0 to HW filter on device bond10 [ 528.277872][T21182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3765'. [ 528.333946][T21177] 8021q: adding VLAN 0 to HW filter on device bond11 [ 528.370406][T21177] bond10: (slave bond11): making interface the new active one [ 528.396018][T21177] bond11: entered promiscuous mode [ 528.407686][T21177] bond10: (slave bond11): Enslaving as an active interface with an up link [ 529.011260][T21224] tipc: Trying to set illegal importance in message [ 529.312619][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 530.200964][ T5653] block nbd0: Receive control failed (result -32) [ 530.226152][T21247] nbd0: detected capacity change from 0 to 63 [ 530.238896][T21254] block nbd0: NBD_DISCONNECT [ 530.240947][ T5660] block nbd0: Dead connection, failed to find a fallback [ 530.270737][T21254] block nbd0: Send disconnect failed -32 [ 530.286004][ T5660] block nbd0: shutting down sockets [ 530.301494][ T5660] blk_print_req_error: 27 callbacks suppressed [ 530.301511][ T5660] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.334655][ T5660] buffer_io_error: 27 callbacks suppressed [ 530.334670][ T5660] Buffer I/O error on dev nbd0, logical block 0, async page read [ 530.408119][ T1508] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 530.420610][ T1508] Buffer I/O error on dev nbd0, logical block 1, async page read [ 530.429754][ T1508] Buffer I/O error on dev nbd0, logical block 2, async page read [ 530.437641][ T1508] Buffer I/O error on dev nbd0, logical block 3, async page read [ 530.447313][ T5660] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.458496][ T5660] Buffer I/O error on dev nbd0, logical block 0, async page read [ 530.466507][ T5660] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.475697][ T5660] Buffer I/O error on dev nbd0, logical block 1, async page read [ 530.484494][ T5660] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.493610][ T5660] Buffer I/O error on dev nbd0, logical block 2, async page read [ 530.501682][ T5660] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.510835][ T5660] Buffer I/O error on dev nbd0, logical block 3, async page read [ 530.519580][ T5660] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.529060][ T5660] Buffer I/O error on dev nbd0, logical block 0, async page read [ 530.537288][ T5660] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.546450][ T5660] Buffer I/O error on dev nbd0, logical block 1, async page read [ 530.555070][ T5660] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.565942][ T5660] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.578020][ T5660] ldm_validate_partition_table(): Disk read failed. [ 530.590532][ T5660] Dev nbd0: unable to read RDB block 0 [ 530.598350][ T5660] nbd0: unable to read partition table [ 530.636563][ T5660] ldm_validate_partition_table(): Disk read failed. [ 530.660081][ T5660] Dev nbd0: unable to read RDB block 0 [ 530.689260][ T5660] nbd0: unable to read partition table [ 530.765035][T21284] netlink: 'syz.1.3785': attribute type 1 has an invalid length. [ 530.892213][T21290] netlink: 'syz.2.3788': attribute type 1 has an invalid length. [ 531.401075][T21311] __nla_validate_parse: 4 callbacks suppressed [ 531.401098][T21311] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3794'. [ 531.432546][T21311] 0ªX¹¦À: renamed from batadv0 (while UP) [ 531.458441][T21311] 0ªX¹¦À: entered allmulticast mode [ 531.474412][T21311] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 531.516826][T21297] lo speed is unknown, defaulting to 1000 [ 531.810621][T21326] netlink: 'syz.5.3798': attribute type 1 has an invalid length. [ 531.898646][T21326] bond12: entered promiscuous mode [ 531.916919][T21326] 8021q: adding VLAN 0 to HW filter on device bond12 [ 532.085211][T21332] syzkaller1: entered promiscuous mode [ 532.091167][T21332] syzkaller1: entered allmulticast mode [ 532.104974][T21334] syzkaller0: entered promiscuous mode [ 532.126365][T21334] syzkaller0: entered allmulticast mode [ 532.295718][T21306] lo speed is unknown, defaulting to 1000 [ 532.611914][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3804'. [ 532.785504][T21356] xt_limit: Overflow, try lower: 324382443/0 [ 532.814775][T21357] xt_limit: Overflow, try lower: 324382443/0 [ 532.827291][T21356] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3806'. [ 532.844782][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3807'. [ 533.158927][T21381] netlink: 'syz.2.3813': attribute type 11 has an invalid length. [ 533.184378][T21383] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3812'. [ 533.193855][T21383] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3812'. [ 533.212589][T21383] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 533.247706][T21386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3814'. [ 533.369576][T21389] syzkaller1: entered promiscuous mode [ 533.392672][T21389] syzkaller1: entered allmulticast mode [ 533.785553][ T9] lo speed is unknown, defaulting to 1000 [ 533.800977][ T9] syz2: Port: 1 Link ACTIVE [ 533.823047][T21422] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3823'. [ 533.845351][T21413] syz_tun: entered allmulticast mode [ 533.885458][T21408] syz_tun: left allmulticast mode [ 534.260454][T21418] bond0: Error: Cannot enslave bond to itself. [ 534.348044][T21430] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 534.390989][T21430] bond13 (unregistering): Released all slaves [ 534.506985][T21422] bridge0: port 3(ipvlan2) entered blocking state [ 534.525129][T21422] bridge0: port 3(ipvlan2) entered disabled state [ 534.545156][T21422] ipvlan2: entered allmulticast mode [ 534.555926][T21422] bridge0: entered allmulticast mode [ 534.569654][T21422] ipvlan2: left allmulticast mode [ 534.585934][T21422] bridge0: left allmulticast mode [ 534.741048][T21453] netlink: 'syz.3.3830': attribute type 10 has an invalid length. [ 534.750497][T21453] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3830'. [ 534.959456][T21466] netlink: 'syz.0.3837': attribute type 11 has an invalid length. [ 534.970917][T21466] netlink: 'syz.0.3837': attribute type 11 has an invalid length. [ 535.001890][T21467] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 535.150607][T21477] xt_hashlimit: size too large, truncated to 1048576 [ 535.185450][T21477] xt_hashlimit: max too large, truncated to 1048576 [ 535.290959][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3839'. [ 535.581208][T21508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.720489][T21511] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.851511][T21511] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.925167][T21506] lo speed is unknown, defaulting to 1000 [ 535.974475][T21511] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.091564][T21511] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.407894][T21524] netlink: 'syz.1.3852': attribute type 21 has an invalid length. [ 536.417813][ T100] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.437377][T21524] netlink: 'syz.1.3852': attribute type 1 has an invalid length. [ 536.449690][T21524] __nla_validate_parse: 3 callbacks suppressed [ 536.449706][T21524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3852'. [ 536.516214][ T7939] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.527520][T21530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3853'. [ 536.819173][ T7939] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.852283][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3855'. [ 536.903070][T21538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3855'. [ 537.068198][T21549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 537.080380][T21537] team3: entered promiscuous mode [ 537.099051][T21537] team3: entered allmulticast mode [ 537.116622][T21537] 8021q: adding VLAN 0 to HW filter on device team3 [ 537.183976][T21538] team4: entered promiscuous mode [ 537.191082][T21554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3861'. [ 537.191939][T21538] team4: entered allmulticast mode [ 537.209326][T21538] 8021q: adding VLAN 0 to HW filter on device team4 [ 537.222229][T11725] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.381136][T21552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.403502][T21552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.438225][T21552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.461784][T21552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.499253][T21571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3867'. [ 537.623003][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3869'. [ 538.341079][T21590] bridge0: entered allmulticast mode [ 538.362018][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'. [ 538.402220][T21593] bridge_slave_1: left allmulticast mode [ 538.408762][T21593] bridge_slave_1: left promiscuous mode [ 538.420538][T21593] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.453367][T21593] bridge_slave_0: left allmulticast mode [ 538.460127][T21593] bridge_slave_0: left promiscuous mode [ 538.465993][T21593] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.875702][T21630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3885'. [ 538.898424][T21627] netlink: 'syz.5.3884': attribute type 1 has an invalid length. [ 538.942080][T21630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.976354][T21638] macvlan2: entered promiscuous mode [ 538.986325][T21638] bond4: entered promiscuous mode [ 538.991632][T21638] macvlan2: entered allmulticast mode [ 538.999918][T21638] bond4: entered allmulticast mode [ 539.006768][T21638] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 539.012018][T21642] netlink: 'syz.0.3886': attribute type 1 has an invalid length. [ 539.017164][T21638] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 539.033444][T21638] bond4: left allmulticast mode [ 539.038836][T21638] bond4: left promiscuous mode [ 539.410964][T21660] bond4: entered promiscuous mode [ 539.417796][T21660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.441939][T11717] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.460555][T11717] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.482311][T11717] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.537271][T11717] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.581743][T21669] syzkaller0: entered promiscuous mode [ 539.598181][T21669] syzkaller0: entered allmulticast mode [ 539.794880][T21677] pim6reg: entered allmulticast mode [ 540.617129][ T5653] Bluetooth: hci5: command 0x0406 tx timeout [ 541.081382][T21735] netlink: 'syz.3.3914': attribute type 7 has an invalid length. [ 541.089750][T21735] netlink: 'syz.3.3914': attribute type 8 has an invalid length. [ 541.193697][T21737] ip6erspan0: entered allmulticast mode [ 542.387232][ T1508] block nbd3: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 210 seconds [ 542.790423][T21680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.038972][T21755] __nla_validate_parse: 14 callbacks suppressed [ 543.038989][T21755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3918'. [ 543.068988][T21757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3922'. [ 543.121412][T21757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3922'. [ 543.404080][T21769] syzkaller1: entered promiscuous mode [ 543.416187][T21769] syzkaller1: entered allmulticast mode [ 543.625634][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3926'. [ 543.662148][T21776] team0: Mode changed to "activebackup" [ 543.673791][T21748] lo speed is unknown, defaulting to 1000 [ 543.749001][T21773] bridge0: port 1(veth11) entered blocking state [ 543.755558][T21773] bridge0: port 1(veth11) entered disabled state [ 543.762155][T21773] veth11: entered allmulticast mode [ 543.782238][T21773] veth11: entered promiscuous mode [ 543.855126][T21781] bridge0: port 2(veth13) entered blocking state [ 543.861925][T21781] bridge0: port 2(veth13) entered disabled state [ 543.871288][T21781] veth13: entered allmulticast mode [ 543.885360][T21781] veth13: entered promiscuous mode [ 543.976305][T21784] erspan0: entered promiscuous mode [ 544.063917][T21763] lo speed is unknown, defaulting to 1000 [ 544.493525][T21811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 544.506325][T21811] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 544.653690][T21811] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 544.676176][T21811] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 544.714843][T21811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 544.735836][T21811] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 544.818957][T21811] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 544.829216][T21821] xt_hashlimit: size too large, truncated to 1048576 [ 544.842062][T21811] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 544.941079][ T31] INFO: task syz.4.2528:15958 blocked for more than 143 seconds. [ 544.965389][ T31] Not tainted syzkaller #0 [ 544.979967][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.006472][ T31] task:syz.4.2528 state:D stack:24840 pid:15958 tgid:15957 ppid:5643 task_flags:0x400140 flags:0x00080002 [ 545.035951][ T31] Call Trace: [ 545.043954][ T31] [ 545.050976][ T31] __schedule+0x1821/0x5740 [ 545.055613][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.061280][ T31] ? __pfx___schedule+0x10/0x10 [ 545.066569][ T31] ? schedule+0x90/0x360 [ 545.070864][ T31] schedule+0x164/0x360 [ 545.075112][ T31] svc_listen+0x2c3/0x500 [ 545.079898][ T31] ? __pfx_svc_listen+0x10/0x10 [ 545.084793][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 545.091069][ T31] ? __fget_files+0x3a0/0x420 [ 545.095769][ T31] ? __fget_files+0x2a/0x420 [ 545.100566][ T31] ? apparmor_socket_listen+0xde/0x180 [ 545.106308][ T31] __x64_sys_listen+0x1c7/0x240 [ 545.111200][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.117480][ T31] do_syscall_64+0x174/0x580 [ 545.122097][ T31] ? clear_bhb_loop+0x40/0x90 [ 545.126883][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.132807][ T31] RIP: 0033:0x7f4b3879ce59 [ 545.137294][ T31] RSP: 002b:00007f4b39698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 545.145717][ T31] RAX: ffffffffffffffda RBX: 00007f4b38a15fa0 RCX: 00007f4b3879ce59 [ 545.153774][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 545.161837][ T31] RBP: 00007f4b38832d6f R08: 0000000000000000 R09: 0000000000000000 [ 545.169931][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.178025][ T31] R13: 00007f4b38a16038 R14: 00007f4b38a15fa0 R15: 00007fff62ea27b8 [ 545.186715][ T31] [ 545.189870][ T31] [ 545.189870][ T31] Showing all locks held in the system: [ 545.198639][ T31] 1 lock held by khungtaskd/31: [ 545.203572][ T31] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 545.215325][ T31] 2 locks held by getty/5388: [ 545.220039][ T31] #0: ffff8880365370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 545.230181][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 545.240370][ T31] 1 lock held by udevd/5668: [ 545.245154][ T31] #0: ffff888027432350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 545.254496][ T31] 3 locks held by kworker/1:10/8344: [ 545.260140][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 545.271277][ T31] #1: ffffc90003627c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 545.284811][ T31] #2: ffffffff900daf20 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 545.296536][ T31] 1 lock held by syz.4.2528/15958: [ 545.301674][ T31] #0: ffff88807d2c9260 (sk_lock-AF_ATMSVC){+.+.}-{0:0}, at: svc_listen+0x13f/0x500 [ 545.312289][ T31] 2 locks held by syz.5.3922/21763: [ 545.317636][ T31] #0: ffffffff8fdba0e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 545.327172][ T31] #1: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x22/0xf0 [ 545.336874][ T31] 2 locks held by syz.2.3935/21811: [ 545.342077][ T31] #0: ffffffff900daf20 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x19a/0x5a0 [ 545.352239][ T31] #1: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 545.362244][ T31] 2 locks held by syz.0.3938/21822: [ 545.367577][ T31] #0: ffffffff903298a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 545.377219][ T31] #1: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 545.388195][ T31] 3 locks held by syz.0.3938/21823: [ 545.393394][ T31] #0: ffffffff903298a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 545.402963][ T31] #1: ffffffff8fdc8e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 545.412167][ T31] #2: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 545.423609][ T31] [ 545.426033][ T31] ============================================= [ 545.426033][ T31] [ 545.434502][ T31] NMI backtrace for cpu 0 [ 545.434516][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 545.434534][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.434541][ T31] Call Trace: [ 545.434547][ T31] [ 545.434553][ T31] dump_stack_lvl+0xe8/0x150 [ 545.434572][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 545.434591][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 545.434608][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 545.434630][ T31] sys_info+0x135/0x170 [ 545.434647][ T31] watchdog+0xfd3/0x1030 [ 545.434676][ T31] ? watchdog+0x1c9/0x1030 [ 545.434704][ T31] kthread+0x389/0x470 [ 545.434724][ T31] ? __pfx_watchdog+0x10/0x10 [ 545.434745][ T31] ? __pfx_kthread+0x10/0x10 [ 545.434767][ T31] ret_from_fork+0x514/0xb70 [ 545.434789][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 545.434807][ T31] ? __switch_to+0xc79/0x1410 [ 545.434833][ T31] ? __pfx_kthread+0x10/0x10 [ 545.434855][ T31] ret_from_fork_asm+0x1a/0x30 [ 545.434890][ T31] [ 545.434896][ T31] Sending NMI from CPU 0 to CPUs 1: [ 545.544432][ C1] NMI backtrace for cpu 1 [ 545.544447][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 545.544464][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.544473][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 545.544494][ C1] Code: 8b 7d 02 e9 d3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 51 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 545.544506][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 545.544520][ C1] RAX: 00000000000fe39d RBX: ffffffff819a858a RCX: 0000000080000001 [ 545.544531][ C1] RDX: 0000000000000001 RSI: ffffffff8dfad876 RDI: ffffffff8c28b860 [ 545.544541][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 545.544551][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 545.544561][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 545.544571][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 545.544583][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.544593][ C1] CR2: 00007f196afea2f8 CR3: 0000000051f46000 CR4: 00000000003526f0 [ 545.544607][ C1] Call Trace: [ 545.544613][ C1] [ 545.544619][ C1] default_idle+0x9/0x20 [ 545.544635][ C1] default_idle_call+0x72/0xb0 [ 545.544654][ C1] do_idle+0x36a/0x5f0 [ 545.544674][ C1] ? __pfx_do_idle+0x10/0x10 [ 545.544691][ C1] ? do_idle+0x5c7/0x5f0 [ 545.544707][ C1] cpu_startup_entry+0x43/0x60 [ 545.544723][ C1] start_secondary+0x101/0x110 [ 545.544739][ C1] common_startup_64+0x13e/0x147 [ 545.544766][ C1] [ 545.712132][T21811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 545.718385][T21811] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 545.726747][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 545.733607][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 545.742701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.752746][ T31] Call Trace: [ 545.756019][ T31] [ 545.758948][ T31] vpanic+0x56c/0xa60 [ 545.762923][ T31] ? __pfx___schedule+0x10/0x10 [ 545.767766][ T31] ? __pfx_vpanic+0x10/0x10 [ 545.772256][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 545.778406][ T31] panic+0xc5/0xd0 [ 545.782117][ T31] ? __pfx_panic+0x10/0x10 [ 545.786523][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 545.791891][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 545.798036][ T31] watchdog+0x102c/0x1030 [ 545.802363][ T31] ? watchdog+0x1c9/0x1030 [ 545.806776][ T31] kthread+0x389/0x470 [ 545.810841][ T31] ? __pfx_watchdog+0x10/0x10 [ 545.815504][ T31] ? __pfx_kthread+0x10/0x10 [ 545.820084][ T31] ret_from_fork+0x514/0xb70 [ 545.824662][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 545.829757][ T31] ? __switch_to+0xc79/0x1410 [ 545.834425][ T31] ? __pfx_kthread+0x10/0x10 [ 545.839027][ T31] ret_from_fork_asm+0x1a/0x30 [ 545.843793][ T31] [ 545.847408][ T31] Kernel Offset: disabled [ 545.851732][ T31] Rebooting in 86400 seconds..