last executing test programs: 2m45.937592052s ago: executing program 3 (id=2807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newneigh={0x24, 0x1c, 0x1, 0x70bd2e, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048800}, 0x4048800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m45.378372762s ago: executing program 3 (id=2812): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000014c0)={{0xffffffffffffffff, &(0x7f0000000080)='\xf8,\x00', 0x20080, &(0x7f00000000c0)={@align=0x10001, {0xfff7, 0x80, 0x5, 0x7f55}}, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x9}, 0x3, &(0x7f0000001440)=[{0x1, 0xc00, &(0x7f0000000180)='.$*,#\xb6*^@--\'),#^\x00', &(0x7f00000001c0)="772ea184cbfd00fb8f8c522689a471b42ecf3a5fbbd195607c492a", 0x1b, 0x22}, {0x1, 0x1, &(0x7f0000000200)='\x00', &(0x7f00000003c0)="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", 0x1000, 0x12}, {0x3, 0xe, &(0x7f00000013c0)='GPL\x00', &(0x7f0000001400)="1ced2e50568606fb97210654c3be8669f1ba7631ab026f7fd8", 0x19, 0x10}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_lsm={0xd, 0x21, &(0x7f0000001600)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0x3, 0x8, 0x5, 0x1}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) 2m45.111302602s ago: executing program 3 (id=2817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000014c0)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000027c0)={0x3, 0x0}, 0x8) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000002880)={0x2, 0x4e1c, @multicast1}, 0x10) connect$inet(r3, &(0x7f00000028c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000002900)=0x34) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002800)={@fallback=r0, r1, 0x2f, 0x2030, 0x4, @void, @void, @value=r2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002840)=ANY=[], 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002840)={0xffffffffffffffff, r0, 0x4, r1}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r6 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000300)={0x11, 0xd, r7, 0x1, 0xda, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fdffffff390000e18624c98f", @ANYRES32=0x0, @ANYBLOB="0c009900020000005600000119000d80180003801400030001000200e1fd0000030003003ef3090000000500020009002e0e04000000070001003b000000010064000000"], 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f00000000c0)={0xec000000, 0x4f, 0xfff, 0x2, 0x5}) 2m42.859213313s ago: executing program 3 (id=2837): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x40000000000009f, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x3000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r7, 0x80000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a50020000090a010400000000000000000a0000040900010073797a310000000008000540000000e9d800020073797a310000000008000a40fffffffc140011800c000100636f756e7465720004000280400000000c0a01010000000000981a330000000a0000020900020073797a31000000000900010073797a310000000014000380100000800c00018005000100d10000001400000011000100000000000000000001"], 0xb8}}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) 2m42.478637372s ago: executing program 3 (id=2843): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000500)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="24002d8005000100030000000500040006000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24881}, 0x800) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4008801) sendto$packet(r1, &(0x7f0000000080)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f00000000c0)={0x11, 0x86dd, r3}, 0x14) write(r0, &(0x7f0000000540)="1b00020008001122334455660001", 0xe) 2m42.135100038s ago: executing program 3 (id=2848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) shutdown(r2, 0x0) 2m26.989305932s ago: executing program 32 (id=2848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) shutdown(r2, 0x0) 6.145912319s ago: executing program 4 (id=3640): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@private2, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x1, 0x9, 0x23, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x8000, 0xfff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x7e, 0x3, 0x0, @private0, @rand_addr=' \x01\x00', 0x40, 0x8, 0x3, 0x9}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="ad4f4f057276bffa832593", 0xb}, {&(0x7f0000000080)="d8a26b3a1729f3299b03b060915ef4d87e6fea96ed33a15072783f959221fd90198bc0cf71d5075724cb99437bb85a19034266a0d7c4f6372b5504fe5a77f66365414d29b5b34bc1e11255c904798afbdae55f221e0cb9af38b8e5787cfd0cf1b361d8392faa1b6acab2737653da9962cef2bbc6cbc1d5319d7754a77e5f66150c5491c4196f14d0aafb9301781cb0608a07ec0f2836ff2be3d9b2f3d83fe21b24982c00a0", 0xa5}, {&(0x7f0000000140)="ce3e894309b0f0bc1894f3e37b41a407c2cd3a81cf2b41ecc9efdaf9", 0x1c}, {&(0x7f0000000180)="dc8526532613205e846b37e3b90c485f20634e1e5c124c23f3f26c5c089907bdc0938a505dca9f0a27d585bd4088ea09589049a6aa5bd47c8a2d0cac67ca3bcad29fb000e36ce51f0713d42684cec5ae92cfb99c00482b22ef1b9b6fe198835a093912f16b6c20ca4f84dd0eba4b27eb2ae4a9ffbb6d7fee57cf6a18f258976d91591b", 0x83}], 0x4, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010101, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)="913328d9a2f004c80158b232ada2f44835a18aa743a717ef0fe90558116f60bd7b611f8fb3805d371a9ea7c03d2ac18b6f668c6e3cb72607da6a1364837274708878cc7a03a91b9440dae014659ff7ed558aa051d85d4a1a85c7e1c19ebf3c082b8433472af80e002e7149507d9f78e0b7233d8fb9241abb55a219c14177637db968f7cb0e2c8cdd400dc75514b836b4e527baf6ee190820b8d14cad7cbbea327d7f", 0xa2}, {&(0x7f0000000540)="6801218bb32965ba55ba3ebdab0bda4cc8972b1950f6589ffb6d25924bc8c5397eba9b9337186634cb03124cf6edbfb3815efac521c958f56fff44637736562b4ccf6f7d39aae58494b4c76453c638d4022d2969f8e5ebb484842e8607d2755dd7c1d0da7180847bda560967aaa23ca94dec98ca7974629238aae1575ed789d32780c9e3e829e87335078cbe1ba4f9ac81bfe67a234f987d55bfb46feaa73175fe846089a99654514c614e6a90714f5788cf6fbb53fb3e99d1d6dba662d300713bac6976981405b5902c9810c48bf108bd835e5e", 0xd4}, {&(0x7f0000000640)="77532536213f0e46e74a6ec066b177964b6f830fe483a4c19eaddd8cc0adf3e75d278c5c38b4ec6988bdd3a42101fc6e9d97565a14150367560d7af38cf8d3f4b43f32c8f908d3f604317196e786cfe4af6e6686", 0x54}, {&(0x7f00000006c0)="35569399358449a6f7fa7d7612a34fbb6bc423d99fe87dc505d33d56921e0efb2ce00d42f078e463e6140182edfd38476a0367d80267677ede167376f832550826daf46c9e724941e74540fe9843db9c42884d4809e89773097c7878020bf4daeba05c2c3e77bc7a0a3b62602ba9db85dd74627364f1cc76042af016fbc60f16e17bf2317781a70f6457c9eff2819269143f5b51d0c76e85a8e18d190c7c300a16a8882bbc527cf02574154da7fa30533e7165f49dfc05b94d7f38df949caeae4afd0d52482b7a16fa08bfe00b88b0fea76bba421d67a1c158865414e2e7d905c5c7d3", 0xe3}, {&(0x7f00000007c0)="02c39a2ed9a082de475c2d5f640ea964d64951942c1feaeb36978d1b1fecc7390047115b13eb1fef0eb6f162e270da424b9fbaaf30315c395e45a984cc449170342b41c0bd70d3112a5bcf94e22ecea3a2491e3bce403f99081293339a92f1525dbf1dda84980943fa1a42a4", 0x6c}, {&(0x7f0000000840)="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", 0xff}, {&(0x7f0000000940)="426e8b400aaff4263071d53dc914497c82aaf3295bf69a4a9c5f739c85308cf0b6c3", 0x22}], 0x7, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xe0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0xb}]}]}}}], 0xd8}}], 0x2, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%pS \x00'}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001800)={{r0, &(0x7f0000000dc0)='ip6gre0\x00', 0x80000, &(0x7f0000000e00)={@_ha_fsid={[0x7, 0xe]}, {0x2, 0xd, 0x3, 0xb}}, 0x8e000000, &(0x7f0000000e40), &(0x7f0000000e80)=0x3}, 0xa, &(0x7f00000016c0)=[{0x3, 0x7fffffff, &(0x7f0000000ec0)='\x00', &(0x7f0000000f00)="772f105a0db154aaf65202f890523608ea4b0c4e63f3f824b1c0049f9cba1d87d547cd8a2a3ea8b95f8da327bdca4e3509bbb14c77ca0713deeb6d1d2691f18026bcfaa35c40ef10f115f362d97645563c4de309dc97d985e1f2ae8d64d4038e", 0x60, 0x20}, {0x3, 0x7, &(0x7f0000000f80)='##\x00', &(0x7f0000000fc0)="0b3047fff83085c40c0a9a68d9164f410b0f9266e9e7d2cd42d0fc8efcfb05c5cd9cf6f30a61ab86a681f86c7538dfcc38b3a3b81581b1642f1c8eec03dd8da15d6fce332c142be06004a92ed4d85759aebdd16de48dbf827ceb5ed2a41705e61c1153b57da447038d8f00b8d1c3779f4293e5196f688e98bb1dad5b779c1cc164087f0c8f999b893598f72111e3fd107b7fd656b11c79a8e52e271fb2e3ce2318947183d15de6fd117b7e23a1bd0d6d2d42ae93c616132120e42dfec7c4d845504466ce8bd82a1f7e29dd5ff22b4ca2b9f3241e", 0xd4}, {0x1, 0xfffffff6, &(0x7f00000010c0)='ip6gre0\x00', &(0x7f0000001100)="9548480c437101720eda0bdb2059a11b1ac1351b03771ca1825113718a", 0x1d, 0x28}, {0x1, 0x5c49, &(0x7f0000001140)=']!\x00', &(0x7f0000001180)="b920239b3163662b1209f5ec87c8f3c2272a67f1888ab5c1aaee81284bc244758cfc7e2d9cb3009e8f19336c588402eb5dac2e810c7a09ae740e5498c9b57167cbf1328caf5ac166ebfc7723d375c8b1a6166750c8a5c9ca0f9a2d9a4ae8d14c37108eddd0afa7ad4e9a277984186cdb2186298f67ce778a0e0cc81c8f2143aa01d30a9ee988df495ed11f4e49e34c32f3fb3157a4a92a0dd369bac96d56657589b74cab6801140458b5f6bb3dfc82bce7e52cf83065c32ceba13b2f3479b236a95fa8e7488e46a5c3b9bfda3557c45c1536e108e15596", 0xd7, 0x8}, {0x1, 0x5, &(0x7f0000001280)='\x00', &(0x7f00000012c0)="1fd5010ff43a2e54ee7be58dcc65b7c96e8df1077411b863ff3ac53966b1e4e8edad5f6a7fdb354eff7760e8146c43c2eb8fd6de365658972bb962a535a2262e508b", 0x42, 0x22}, {0x3, 0x7, &(0x7f0000001340)='\x00', &(0x7f0000001380)="72888a5d96a3d948d850b2c400ce7f574f63e6013c", 0x15, 0x30}, {0x2, 0x3, &(0x7f00000013c0)='\x00', &(0x7f0000001400)="b8c2f20ded3e93b02b28c9d6f3e7a00836b109f06b78a55ee76422cb4cf2b18e8e928c1bd5e6b2ee76d6056b5b3601af984234e434aae2df96e0590b003c7ee4f245e46785ae707bf5d1b81f467c8e4b8080b62dc95de53dce9e4baab35008e8c5", 0x61, 0x20}, {0x1, 0x0, &(0x7f0000001480)='/@:Q]@]\x00', &(0x7f00000014c0)="f81a51545b08", 0x6}, {0x2, 0x1, &(0x7f0000001500)='/\x00', &(0x7f0000001540)="b8b1d07815f9cdd1012b3641db0e6b95c0a8f557dd4534", 0x17, 0x10}, {0x2, 0x6, &(0x7f0000001580)='\xfb*\',\x00', &(0x7f00000015c0)="dfe90fffb102f9734ef56435aa695958d28905e53294e623f84b78ab0c4723c171c4bd17741986e0e65ea60d8bcdace497814dd9df444c36b8bd83f91aecb4b37f2ed83cb3bda2c11b41e7dc3bd1ae6599a97b330ddd1717e90bdaaefeba7d0d302b42dc4c738f72d016940e32fc0ba36f56d08b219e157410e785a5536cf206eb2e6cee5d51dcf264c2d8acc0143677f5d1c53efdbc435fc9c188446aa623ccbde4eab68617f58a9df24b254a147304c23517d41042ede626490028e39566e424efa95d31438fa7ba5f47f8753bcfb8a70658f0925611f07476153f658e476b58c8498d32322522a4a80958077b3917d0e2d123f467", 0xf6, 0x2}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x40000000, 0x8, 0x7, 0x4000, r5, 0x4, '\x00', r4, r6, 0x5, 0x5, 0x1, 0x7}, 0x50) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001900)='wlan1\x00', 0x10) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000001940)) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000001ac0)={@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x2, 0x1, 0x4, {0xa, 0x4e23, 0x1ff, @mcast2}}}, {&(0x7f0000001980)=""/198, 0xc6}, &(0x7f0000001a80), 0x2}, 0xa0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x0, 0x7, &(0x7f0000001b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x20bc}, [@map_val={0x18, 0x3, 0x2, 0x0, r6}, @exit, @exit]}, &(0x7f0000001bc0)='syzkaller\x00', 0x3, 0x7c, &(0x7f0000001c00)=""/124, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x34, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c80)={0x3, 0x6, 0x4, 0xe}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000001cc0)=[r6], &(0x7f0000001d00)=[{0x0, 0x2, 0xf, 0x6}, {0x4, 0x1, 0xb, 0x8}, {0x5, 0x1, 0xd, 0x6}, {0x4, 0x5, 0x0, 0x3}, {0x5, 0x2, 0x4, 0x1}, {0x1, 0x4, 0x2, 0x6}], 0x10, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001e40)={0x2, 0xd1, "3397129445d82960d9cede7b1f93f058d33d901e433fa3e96060eec1fcc1a2b8da39da8a18446849f6476f1993bbc18d12ded6fbb12360f15532adcb684d50f6f389b897ac1dd816711301d834df0d47bc91f0f629f9169b9e9f482f5921ad237766356e2cda4d5da680c75eb15ef7996ea4ec83bf7db42df5da25cb8d902121de573dac36eea1634559b9257e4bf666f897d8fc6e263cfa02ae163b75737ba5975d9d57b7993a085363d5e623c126509108634f51b5cfbed3f9eccef68ad3599a67106011b0f68d2308328da971e571a5"}, &(0x7f0000001f40)=0xd9) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001f80)={r10, 0xcdf}, &(0x7f0000001fc0)=0x8) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x78c990e16995bab4}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r7) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r11, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4011) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000002240)={{0x4, 0x8}, 0x100, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002600)={r5, 0x58, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x553, '\x00', r2, r6, 0x0, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002800)={0x18, 0x1e, &(0x7f0000002380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x0, 0xb, 0x7, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000002480)='syzkaller\x00', 0x3, 0x9e, &(0x7f00000024c0)=""/158, 0x41000, 0x24, '\x00', r12, 0x0, r6, 0x8, &(0x7f0000002640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002680)={0x1, 0x4, 0x6, 0x401}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002740)=[r6, r5, r6, r13, r6, r7, r7, r5], &(0x7f0000002780)=[{0x5, 0x2, 0x9}, {0x4, 0x2, 0x10, 0xb}, {0x0, 0x5, 0xb, 0x2}, {0x5, 0x2, 0x7, 0x1}, {0x2, 0x4, 0x10, 0x3}, {0x1, 0x5, 0x0, 0x5}], 0x10, 0x9}, 0x94) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f00000028c0)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000002900), &(0x7f0000002940)=0x4) r14 = socket$inet_sctp(0x2, 0x4, 0x84) sendmmsg$inet_sctp(r14, &(0x7f00000032c0)=[{&(0x7f0000002980)=@in6={0xa, 0x4e23, 0xe26, @empty, 0x8}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f00000029c0)="bd653537f32f953ec8b9036eb4c5d85ff6f25ca87891c044eb64c6c8147aa24392a64a405bdbc406a9986d29682dbb1b68970b2f1bd01f633901b0be1ab7f34da513afe5e4", 0x45}, {&(0x7f0000002a40)="709444f9aa8790fa4c38c8ae2944cb93613ca52bb40d4d373b2e87bb98a8aa6fd1fa5ee73d70a9d410af9d7a94d3c651cd8cbc92aa908c10d45ab9e53a6066df1b79003a1b32bcbcc840b760df85cb4b876a9ccef3c4", 0x56}], 0x2, 0x0, 0x0, 0x28000}, {&(0x7f0000002b00)=@in6={0xa, 0x4e24, 0x5, @local, 0x1}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000002b40)="99e0f12fb6b46545e618765ab0fe37e232b6c8e90f08e0abb819a22e6c64f49e833b5d60b05048e3a6715f247f37a21edfaf544cd0e01b2d6d4f4fb8c263075791ccc5287acbaec518e7b18b3fe229f33c4118efd572a2f79a9e015cabf379c612ff33f1e21713d0e5adabf579e886340360f16923caec76e23c5bb7ba87f0894ffe1e3621346778d28974b12cb0ad35ba36", 0x92}, {&(0x7f0000002c00)="62025048d164769279eba8f7293fb1ac2a1468f2d72d7233d23f4e4f1cd9ce81f0b45ab735d259f6452210f2f9e7c5", 0x2f}], 0x2, 0x0, 0x0, 0x40004}, {&(0x7f0000002c80)=@in6={0xa, 0x4e21, 0x3, @private0, 0xffff}, 0x1c, &(0x7f0000003200)=[{&(0x7f0000002cc0)="192c62b2a71a7e20a572e1b8aa2ea311d5b780fa4510730912febe527f326f2db55d7bf6d33d1311b4eac269a5d8a5d8bf1af56e7807bd9c8cdab2bd8894dce93ab55d320799b96ad02cbcce50f129ca89982a2639cfe51e8651d482b3f4cae089ba9ddd1aa80a35c45c71bb642bb89d9d647cd51c2819b84967df5923c8f80450af97ef3dbd1591641041208000fbdab79d31ad75fb3f71dd5601bab906e33e8e213af21490416df34ee484d656f56a9bef6da394c5a0ca", 0xb8}, {&(0x7f0000002d80)="193b6ad9e29a53d2b7436d6effccb9a042edd615d2f4995c35a946f75df3245f3a86b1608aa7fd280396024e3caf6b04ab822c4043ae9351133590eee26e4bb1", 0x40}, {&(0x7f0000002dc0)="b88685027f4a0a93ae24b79ebcda468f9cece7a0e8fb5b52894f1b04591e285303b3c0733115cd0c624196ce9068e20c4344886f43b556391c2e8bb524dd9b62946e18767ad4f44452440628a9a682b50bc4b99a9290700cee851f3fc1dab084406ffb2f08c51fb10169d1e56c580ed08663c17be9539180edf14d3ab722ba9b0deb53654e8cdefdd4d2d1ec964cbe17667c40ae0f474085a0bc03c434c157231eda8a0ce9028e9028adc12c0fc31ec05e740b534ab5bdc2555a54a4d9246700", 0xc0}, {&(0x7f0000002e80)="b4df431536bd3a690ca7ec0db531ebe2ce44b4ce563d53ad77ae1a2a740a1932e60380ff95bcd9994fdc19c2763baf89c6334937fd7a21c5231d305b2f62fa795ff8807538e136b4d3c143f00a68b0b0c4b42b751efca0fce411f0ac86ddec08c16f6aeb0fad4185ed5d4f644a63f5ada8391401d0ba1d862799c95b81a726b0b732944dc91324e6564c539cd5aece3f393c42f0b7be4bd62c61ea0b336e24f01b4c3aaaee2c93f700f76b08", 0xac}, {&(0x7f0000002f40)="277b2a4ed593ba14678f37ec8a7efe3bc13c71bc90", 0x15}, {&(0x7f0000002f80)="db0fa45dfa5f74cc0649d4c6939b9960ad84aa1ee19a01a1319ee017e1f9ef71e8c09285b281eda872b43223d173afafff96afc2b7e9a0e82fa831645dc8f819b6c6603e4f1f9ee6972989fc6c2fef06a24965cab405ba819b7abd8171e4e8a264ef972f1b254ec2b66494787c3f079a309a0a9520a5b4c9d1c3b848da796a6d6faaa8f3865199fdeae7028d461602ec81f4ecfdaec9ec0303827bf799e31ec85a9d", 0xa2}, {&(0x7f0000003040)="c258d28665f618b0e36ca066e428e301c5d50bf2d5abcf16500d6a888ad21bf69bc455ba01cb67253bab827098cc6a13555c33d0bf8347d59edc75e99206a77aa81f55c5d916a78c343e4898501f1fbe0b0755895890f75b37d551e2f8f81af8cdc287aa04f1c8f6add41d57ffed40bf8fcd8c43801dc80ae5e0a088562a2cd4ec5eba3bc42f5023cf7e0fb0aa9a4309f3f0e8d77b7a52d4d3dc81946ceebe933e4c616318fbc2e44bb945546ee81ada5d0bf14ce5b567f94001c0f3399524e21b81fa2fabc1", 0xc6}, {&(0x7f0000003140)="a0eb6699b0ef523a00d8cfa0662209a5edc8", 0x12}, {&(0x7f0000003180)="29567f1abf1d1b79760b2fd3be1249ce10f4d08446b1ca2a18c403516cf829e1f9b2e0b5cfd148374a4dd637cb4008b75173d1db8ab889e5f5ae6dbd06f042feea593d745ed1261fe2cc9071d28da6bb2e4a58963eb4b382419f07726055", 0x5e}], 0x9, 0x0, 0x0, 0x4000005}], 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003380)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x2c}}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003580)={0x4e0, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_IE={0x1df, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @cf={0x4, 0x6, {0x1, 0x2, 0x8, 0x6}}, @chsw_timing={0x68, 0x4, {0x0, 0x1ff}}, @erp={0x2a, 0x1, {0x1}}, @tim={0x5, 0xe8, {0x0, 0x42, 0xb, "7fdde74a97b8f060f5ae740a44be7b3d8c4254410d66df72a22ecc49c898ac5d3f1a49d391bade8098d629ed308b0e7e98fbc62fc8d4ae9ff59270f4f92587bce0ca3c09e65046ff1a24128f9dca3a3c944594433a8a7347da6d9258e8b72fe43429046fca2b631d9ef878c860e57276063433453c28576129baee0754970b723ae8584d3696535f58cb6263126522f9499ef86d8d617b3b84030225a2c0d74874fd2d4b82d6b2806892fc0b8dd1bbcf20df356cc78b0d779a6232556f0a07227ed02eff232e9eabcd24619b007a292ff5112a4b468e12032a064b51cf04cca80eeb1d363c"}}, @measure_req={0x26, 0x6, {0x40, 0x2, 0x46, "fa63a3"}}, @supported_rates, @random_vendor={0xdd, 0xac, "debd9dfe19aa8c5e1453a80d84a278e110869faa61f64be3c5ed9de27530fe81e3e57f9ab2b7422e6aeb369a15cd86bf1272a8af0a6defe7c68442cef266b332f6af54f355dd86c23adc185846fe5d82f03a725901aace2fd40cf808e9e8cd50f8d0559fee55666981609b011345a52a6e736d748076a2a035d5ec17dc49e8d4c860788dbcb8573a27f3b74ab4b1c67329cd6df6a037f07adb108e9e97c35007afa54cbf23ae6fa65377f6b9"}, @link_id={0x65, 0x12, {@random="6e3401a2beae", @broadcast}}]}, @NL80211_ATTR_IE={0xe8, 0x2a, [@perr={0x84, 0xe2, {0xfc, 0xe, [{{}, @device_a, 0xe46f, @void, 0x3b}, {{0x0, 0x1}, @device_a, 0x80000000, @value=@device_b, 0x26}, {{}, @broadcast, 0x7, @void, 0xe}, {{}, @device_a, 0x4, @void, 0x16}, {{}, @device_b, 0x2, @void, 0x41}, {{}, @device_b, 0xf3c, @void, 0x2c}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x33}, {{}, @device_a, 0x13, @void, 0xb}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x2}, {{}, @device_a, 0x5c, @void, 0x2d}, {{0x0, 0x1}, @broadcast, 0x33, @value, 0x11}, {{0x0, 0x1}, @device_a, 0x9309, @value=@device_b, 0x1a}, {{0x0, 0x1}, @device_a, 0xba5, @value, 0x2a}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x15}]}}]}, @NL80211_ATTR_IE={0x1e6, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xd7, 0x3, @device_a, 0x7, @value=@device_b, 0x200, 0x6, @device_a, 0x2}}, @random={0x11, 0x5f, "a0b0dc5a2e3bbfcaea266584100a655b8a03cd178a245e718bacf7fcf06c531631a68b4c95a4fe28618728bf12b341d5cdf6963404e027daee7d324b552031a8c052c678346c80927401e7ba0f23bc892a4574bb3fc83ea31cbfc7d3818f49"}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x1, 0x0, {0x1, 0x6, 0x0, 0xa, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x53d, 0x3}}, @mesh_id={0x72, 0x6}, @random={0x9, 0xcc, "a42a01347e76e7fe2589b540ce8f1f99cdcde8236ba3d9f6e7e750d4fae946871282659288f3b58c2f48f818f1f1f1360375718e8a0021a4c865a9743819c38bff65f0d02f8a253656e66e4fd20ea2edf0b9024632f1b66b15ea8a3c48b431fcadf2750ae1a57438680b83f0df204b6b7a467e46cdca8140d104a810db01cdc01c8aae64fe485e61e959ee0ff59dd7f64b8c925d46bbf469e6109502da38ade02d5350d67ef8023109ff3377594e43cdbecfac452d12da87ef650c5c8815852ddb47f1eb9c53afe618fc6869"}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x1, 0x0, {0x6, 0x3, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x401, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xfb, 0x1}}, @peer_mgmt={0x75, 0x14, {0x0, 0x7ff, @void, @void, @val="7dfd37cd14add7510ed200f86efb549c"}}, @preq={0x82, 0x2b, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x26, 0xa, 0x6, @device_b, 0x7, @value, 0x7, 0x1, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0xffffffff}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4e0}}, 0x81) 5.403520859s ago: executing program 5 (id=3644): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0xa, 0x4e20, 0x2000007a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3000000000000000290000000400000084020004003000000302"], 0x30}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000038000180060001000a0000000700060073680000080005000100000008009ef7d755d40800000000000c00070000000000000000000800090080000000"], 0x4c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000014000180060001000a0000000800050001000000200002"], 0x48}}, 0x0) 4.76613918s ago: executing program 5 (id=3646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f0000000400)={0x1140, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6}}}}, [@NL80211_ATTR_TESTDATA={0x3a, 0x45, "73f2f875511a083869f0947f59801ac6bfbeecffe885fd4b1aab746cbef1b5f58c2b6a82175556f3a2c121684165bd6f7b517cc4ff61"}, @NL80211_ATTR_TESTDATA={0x4d, 0x45, "674d949ef36033fcb6e18f54e8393e49099f3175093ab7785d97b518f57a00895fb685bbcc29c14f7b39c2751860219b451dad8921b92b28bde5bcf119fcf6af231781be80afc1221a"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "41643f3c55e9ed4cf83b0b462819551fb6f3de79b9827d935246afc4659376f3ab6bda85787685ad4e964a5b95f08f37ec6ef64e93ff19a485986fb839e57f47f54352ffa162a443259ff42469b53e4bb82c48bae9c6a81cd6d339f9094ea4c12dff98c61801bda1a51bc735c217df08471653bf382c23c63301a514102b8e177397b7dda4fb47530c24bb2e591dea0bd4a20b94bfe555b5e4a1c65a6b60d3ce774cab3a1852583c3e8b9100d0782dadf00456d3b13865f790d7f5ebae1718fbdbcea4238fb051d7d527cf8737c98a997068f77f38e567f445857250cdf280d7b5f7ed622a653fb2783f65c78889ed038f07146c0ff22602507c4fdb347e3ef49e358b292775186da2fb0d03c69b43ab38f7adf8bc5a512b66df6dc2b016fc66f4ed3f2e90193eb72277488a19d9181111eeacdea052d868697c35beaefbeb22091c2def6189576660d209fb9f96ecd757596f25afe973ca4c757b12276d096dc66141324dfd42577b2162bc5839ff28fafc73231cb847f428365157d72cc42c3941a05b7751b4fc9f996dfecde65364f0c514d52de6230c24c5a79c6938d3de3a552d448acecd001b8fcf2cba9e62b34f74ecfc98e1674f45df47142cb7fcbef9e208cdb50bb38fdf4075117bd75bc7ca79a8da9782a8c629f03007f0285d09f3f082be3ff6d266dccb82bd6a7867ed96a6ade2ee56cfc2cacd96586a49aa5544f5c483e8606feb02b2cb3bff02ef875cebca2a1d88a81423848b61ecffd98db4d7282302f711c989fd9585b82a1686c5aa72fbfab9da8e325b39bda279fab3562e9c3600597d01264e3927d8aaf29a46209dec70114a7a80df78bd3575c72e3b9696c40f9d366b0658bca32b7d8cc060a5dafab4cb90959d2be6c84fcf2dab94d482ec99a265968a7292e7486664b19b3090335a90f639950e52a7e44d2d48a843c5b637d22949ac19e91151a7848b0b820f160b32eaa4d45488d87b5e5f8fb2e73a04fd55830c6a0c140a2c0cc043d44ca140fad8d1e6908554853d09efcf5f81564dd5dfd5b5eae51f8a25db3331abff8542a394abb608a326ee1d3d47de3941e1c63546920e4d5bcd66d197f79b5a9ac876bc4d58ffc2f79d7a5218fecb55010f5adb6e5f7e3cf20cc32a76994af6ac57610969eb574ffb4e62783902cc7db20c9d603a6c53cd9723c147907d8aba6b9bab28275cce7d762a6ea5169f91d0d14ac562887eec758ee23f587920ff25e98e531e61c99d4a731b6cba27e381ad9fd36b13f382b30de5b6ffa167e03e9940b3223e720ace13bf3140e233896dcdc920f1bcb2f7560c9f09f13ed12484a21769749faa9c76be282b117e5a154aed4cb45d134e8966c53611e1127a865a8c260b56bc4549ab43bc64eb36f038f98575a71991aed57080fd83226c906ee09574578433f9ecfa7a928188c2f9b96d86d8440f107195c745d8d0e08c80f19652263d79a79c95d7ee956ffa1ecd55f07d62687d8170dd373f37091952aedfc844fedba7dc8335886f6cfafceb88808c3b796a9657dbcfc823d2b8b8dbdf2698732a95fbf330fc362063f08e0bf1e6c17f7fef830c97125f8049b12970959efb7d9bfc684d0a9da27101efcf3e3107d4d74e0c914a302b529bdff9d396d1ada92c1f9acd24ee81b50f46a359789b1a376d3576b37cbc74301d4ce709ead5ced08d6bb59003072c7835845c3f6606ff5f1b38dc7912d615a2ce7acb568e0a1a76efc8466929a4e42692acfe61b03f251b2f0e12a5f921dbd41ed5a3ac529aa1d42916a902aa88e86a7fd2a4686f99d916245b2a8e575c42981364a3d22f4684c4f096ef4f42fb15691ccdb04b3eec10a37e8d2a3bcf2aa900e302a09b06de112a3d1fa3625652566dbd94bd4623417e3f4a9b4bb187b139206e8ef620d81fb92c8bc1bc0d2b0391d86c49c0d6f622bd60da54f1ca42853f4a92eecac125038c405c47f6acd16496d4561dc304426e60f4fc8cf5d7d7ad89d9957dc41a45d87cfd812eaf16fa36877a4de942710c999d2b5b39bdfb0891414f4c3208eae9f625d5a308e19fdad98af2a648ba8c208a669fa2d830171982f4a20618c4b4b986062449aa8cfadadb736016eae7867e728cc816c333595dab57f10c48aba0c8907dbf5be331501803f0ee944f1585e0dc086f9d490866b4a2def40989c4e239931e7b2e8dcfca38f3d201c13e76212d45917111a5f3039ecc61dba02daec3c6c5479cc989e4e78019d6edbc48eed68c3ed8979fe53935102bc3d76a40b629d6912214b4a1207eab73acb4b3ef16b919918c4004cfd0cc7fc0cbd7b03c294d57e7b8108618ce9867d85d2ddf01e8e88f7bf30aa3c5c5781cae9cd60c603715b22237a4f2d834d15a0c36f8468f7ab0a2c664b777ebc407f1caffab4d06a11d5033321056f135b02c04c761b33dc114dcd0b8a455928bed36ed380b3b58712a21be86e33a9e407e22b72465a3f6e702e6c05bdd72563bd62b052d0e400fbe7e572c1bb9e7b1905747df606738afa2243be3c8ebf4d296ae0c8d330e3b7b59005bafad95da53da0b6de01a137965c92ae839f339b40a07e1a14e96a17c8c95042c48bb813a570f1ca882f3f3879e8e5e02ece076abdc2fdd095bedf4c25ff541712d1202ad49e7e4bdf89642a90fa926c2afa8466fdf3077daee0cbf1856c146009d567dd6f41f13c79429e7a561886839678a369db1539ec311d841307f9deec7a1a6312a46271cca721b596ac9a65a57316181403d8abb83942da4863daf52cf5cf2f07833f9ef0b83a26bf40ddd973f0e930c6447bc77366b4e5a4f7dffe617691115ec4b3e5c52cdc18f29ff5cb39982b383702f75182cac90b9e268112dda62bedd0b226c350cb3807bf78280ca17f45777f2a4ac98e9892ead9a41998c1a61b96bf3d5717187977fda56f507798ac14f4f6e0b6bf48d6282212b3d1a82b1ee5e3de44004e1bd14aeac8b63131477b910d1446db16cc80074ff3c333e57ef80ab3c59dd2c48e0f94a8144d8e5d51e799cb04bb5af9b869bed9fcc6ef2e3bae12bd6d43faa686bacefcdfe8e78ef8b910f6722caf8bddf2970c91554244e2e800454c08198d3b799fe94891f56292d9f384616637b38478e49869a21f27deb7a45162360bb352f2f48e0939df6c9e35c9cf7c0490078b0d65b52a71e5a347ef71e1a2533df234f93982d5b38668e620b73b4dab2c35a0beea3ceef60150ed6d026a55ba401d02562a4d7485c18b4f33f1936c8d0295dff0b5ecd82999fd1fe4904ae692755d89db0eae1eb5b55765cd2060efe7fc3a75ec0a2bb32c820293811a589eeaf898eabb1c72618124000430dccd0931f162fe7ea23eebb49e16a409372f882d5c5f94b2967acafde577a3bb86ba00ef08b39d5140885fc9dd84085cb0f770326c11c7ca1ae66059599db1cae1bdfe0db214bb7014e6c5a9493a538471349bf31e7a040d31df768a3b3273a0ef7b030ef5ea12fa48dc0f37e60c85740a1e68ffe473831ddd1f3954448b52c93c0b4f553d796243cee613755e3f6673ad973ebe05cc80dd9bd00b42f86949c092ebccb78d1a33527d5c8adf9262d2f083d9efa02ce8ecd26480e9796ba6c3f375267e3e660846452072b14f8aee710e5309169c2c034e1a27752db5f30dee0925669f5259f8b43eb0b3a5fea426ddf6de7f25a3cdc16742050cbba8e7cb9abeb9415b964c7b63a3c6baa8e2a3f1a6202ead7f3ff5523e268661b703c14f95e980b659d2f6eae827ad701ed496a72dbf4245e767f6213d155ef5f7b04166302d41b7e826e1a4f7effc3daa320174bc97aebff1fe5bdde6065aed9d06da80b5e491857b7709eafa0b4d2592aa7fba3a7e54a518d5d383f9b7a26d199d9547e42f4f0ed9c3e99ced31e7d9d6288270297586a94f39fbc42431309ecf0af456f8876a2fc3ee39d3cf17da3d354d87eb414a05eee3d644c883c33bb5ee7042254cc684e5301753a151c17ace3308a13a5e7854d76c79e1c90b3ad329bc80bc19243addcf0da693b700a3cf41f703594afd6ffac7b9cd549ee1fdc196673c578a4785221c1a41e97e70418ee3f2bd09d5289d291f0baba34ec18df13b406a6de325a7c38b3a81c5d552f4036e8b4100e12426346748df2070b5f6d5cc25c43bfc744e10322de3927c1d4731021279b2d4f74a75e092d0bfdc5004625dbede3205b58954b7e1f3615a4c983546a23b1d7e99ed1419b2c7c6ae9d8076081388222365b1285594219970d53a400226e7119d94a526bf4135e5b166f82858332fb6343b0b2374a6f14ea73449180648183557db79bc0622d2584dd0f0e750c7608ffb8c30c518ede9c067c2dcaf4afdd48cd7a946d4fdd5249ae6cf3ed0b422778404039a73943c99e3540cca10e69f1ac0228cd1d21c7d13731494ac83ca94ff7c930b804bb78f46d787e16f4a5c75f9af3a8adb5f01cc373ac650e4d2686d6e63ddd8adc3974d61b3e993f200a28acb58eef188b0da17668513ef7a6931148e5eeeea598cc3c992c7e4bf66aa8bbac9eb09e352cd45e5fba4f9ce2243fcbb0a455d93a08bc176df5c137026cf0b3052dfe835d436d3e7e745af80d2f9fc5a737aa3682a936deca9b2aec63af094ecaa3f4fd2b8071fcd9a42c686242037c2685d51bae65d0ed632eadda15325c29a34a462cbe9cb257302cf24bd9f36b50d22a8fb4c6d0f277d3cbd42492e267a0b472aba79e0e5ddeec16dba1f7539b8d8831c70f6e855beb1ceb17818b718b6dcb4e7ad898a43b2de286e17854d58efe19361c8a9f70195fab6e7423c7ed9b9182cdabded116f2f9dc41f6b5b1d2538ccb82eec011fc09f292fe89c97cbb305711e98c2462d8520012f3abf24671bbd3346e48d29df47ce80bb1d85c7becc60447dd94c4ee51136911e31b9d2810d11b81254328f156ee787cf6a254b5d1646b9b4df7dfabcbf976d2a2e2da161520f75ae46059ff95f7155bdcca8938441854d5b54aed99c81ec4d1d2a6895ac07166918a6a39df2ea24f35016501dc73642b1854d44ac30c6efef960f4ae203a0e4a0dc4a59fc20a1bd28d45d1bbce2e5d8e01a9132e85086b1ff43db5ad2cf364a023d6a807b924679ff883242f46f7760affa20b1161d97a6e4a7702870410f5bd692e922b8ad0efab42cdfa260ad43a10826fb4d32560d24784304c84313cfa129982856feb22a5d095e3bd237fa58130d598fc832d60d95b3c406a7cb788fd57cf5229c6cb9b1b1c9f4833779355dbac80369716efbebc4d1f3dfa2324b79515fb110e4dc8a9ca08d78a623192cdd731b575cef0dee273b2ec295bb0a2dc573a51d82a81bbe53fcf91113b21fb213ecdade9d378e40d366d7ead1ac130cc556139c3a4ef856604b8f04f1e9df4027b1e0441289f66b38c010a859d47251c3e14cf6d2e0f537f24dcf3ba98f61a11ee14770c4803e330499947e73ddfeb6ef304c6ace095d8bce636ba1e2a195d36412f4317d3d3872b20414425ec867249749d90d4beba7732c6de9df75117ba613a9908af5b50c73d271fd83518d41975240c3a11237ba318d8a5135954de6699ddae844529247d490192e77085b5771a330a629ca86a09894cf64754c2f6ee42f6c9a64a2ac26a07c9fea281c0884d2253f5e39dc03786091e67bb9360c111c04917e2a6f0df64bba2a749cd3f1303e559a3b3a335dfece8d505b175f2d86bd2336924ddfd8c590de652c23d038292b6f5723cf6bb706c60f5421e570995adf6d09d3ece88924199d0169b0bed46adc51dfd43486a1af6542c09"}, @NL80211_ATTR_TESTDATA={0x8e, 0x45, "87da62c64cd9db4cf6f77ed595ae0b3a0849f9d7654798da46a4751171762304c2c8ba1199795ef681b80861a884d9cf9cd2b9ae51b302297b5642a926c9fad6748cf1651f81c6e630bf3f91a57152c9ab475dae4e1e5be20fb464aaf1e702770426b64d40a9830f38cce3c80681d1cb3900842d4ce348e4e9f9160b9fcbaded2532ac6dae0a4483f796"}]}, 0x1140}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a300000000005004200050000000800010001000000090002007379b6bf000000000900020073797a3000000000080001"], 0x68}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0xd]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001840)={'syzkaller0\x00', 0x7101}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmmsg(r9, &(0x7f0000001a80), 0x4000000000001f2, 0x0) r15 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r15, &(0x7f00000015c0)=[{&(0x7f0000001600)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) write$tun(0xffffffffffffffff, &(0x7f0000001680)={@void, @val={0x0, 0x1, 0x0, 0xff, 0x51}, @arp=@generic={0x309, 0xf8, 0x6, 0x0, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}, "", @random="7f1385f6d272", "fc"}}, 0x1f) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r8, 0xf6695000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fe", @ANYRES32=r3, @ANYBLOB="14000100000000000000000000000000000000411400060007000000ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 4.765342597s ago: executing program 4 (id=3647): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x8840) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2a42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7001}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r7 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r7, &(0x7f0000000880)={0xa, 0x0, 0x1, @local, 0x9}, 0x1c) setsockopt$inet6_buf(r7, 0x29, 0x32, &(0x7f00000008c0)="ff02040004fffffffff40f936e83775a710cb663", 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xa, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4800) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/de\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x8, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f00000006c0), 0x56) sendmsg$kcm(r9, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r11, 0x21}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000840)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="1c30dc92bbfef1f911409e3a79236f49ece1994cf1d3d7cf68b0e143beb3db63ed86c4a43aa6d2f0d205964c8d19ff43515154576671bd9624200f6343563b7364511b4ea44efeec8aa2073b53e5cedc0ee887f04f616d1b48c27c0dec556bfa000546f8dd616830b47a74cd859297a1ad7f17103f0529a273da76e574ecb9220ba7437602759c1650c9416e40a5a7bfa2cbc2021481d82e7f3c4fb8aa456a634787ad22b9756e5f88"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x170bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 4.017952631s ago: executing program 0 (id=3651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0xc000) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000380)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff250000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}}, 0x4084) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x3, 0x0, [0x80000000, 0x0, 0xfffffffffffffff8, 0x8, 0x5, 0x3], 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x78) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0xb, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) 3.413817653s ago: executing program 2 (id=3653): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000cc0)="2700000014000707030e0000120f0a0011000e000000000000000000078a151f7508003900050021", 0x28) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) (rerun: 64) r2 = socket$inet6(0xa, 0x3, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000bc0)='syz_tun\x00', 0x10) (async) connect$inet(r4, &(0x7f0000000c00)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000c40)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'}) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01"], 0x1c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) 3.360790703s ago: executing program 5 (id=3654): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x50) 2.835628956s ago: executing program 1 (id=3655): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200), 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000000c0)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000180)=0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000300)=""/4102, &(0x7f0000001340)=0x1006) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000001500)=""/75, 0x100000, 0x800, 0x5, 0x3}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="000000000000ea4400000000000000000000000000000000000000000000000001000000000000000900000000000000020020ffffffffffffff000000000000010000000000000002", @ANYBLOB="f48a69e8a094b09242b0700471fa3653de15ead0f711d13f1057c742114b2f800d991a3031a5c443f8d1aeb51e2bf9e64e2462c218547f17a2f88be61700a8f6828bacdf38fb3ad361a2f846741d2c94780a5e6b9d4ee76ed1bf2f7841fdbed63fbb2880c39c7ffb239a7d2623979e92057f3d293f6883890969ab6d006e0456759a2ea6c5830ea20c217c88204c3a4a", @ANYRESDEC=r2, @ANYRESHEX=r0], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) 2.506400237s ago: executing program 4 (id=3656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xff}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.316072342s ago: executing program 5 (id=3657): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/51, 0x1}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f00000000c0)="25b6248f02b3d5e54dde85e07e947421c5f7ecedae1567645ff93301b2908f8312787859bd02db3c6dfc78f605229defc1a840b29bf219733cfad9b6f9051866adc8dffdf0ee3a786c735308495a18e8db37c3b02cc78cebef", 0x59) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x2}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8e, 0xbe, "7c7e70b64c7d45f826848a3e45d5544dcc60e0fff672ba941a8c8cbce83b20fe5ae93f664e036eda61119dcba17855b4d00eaf10a18af2e637094e6a7875ba1e632c81b82fb1ed76adfcfe95819022c962ee38e2f73256fefce88328b50a9408da9f1db8b162d8dd9ba9fdad245f52e702f7ced494c934ea238887207a730b5649977c9ed04bbe6dc455"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040094}, 0x8895) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x304, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x2c0, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x26c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xcc0f}, @WGPEER_A_ALLOWEDIPS={0x218, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x304}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000c00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xfffff97b, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0xa, [@restrict={0x4, 0x0, 0x0, 0xb, 0x2}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8000}}, @var={0x7, 0x0, 0x0, 0xe, 0x2, 0x1}, @restrict={0x5}, @union={0xb, 0x8, 0x0, 0x5, 0x0, 0x5, [{0xb, 0x2}, {0x8, 0x1, 0x3}, {0x6, 0x5, 0x2}, {0x2, 0x3, 0x5}, {0xf, 0x2, 0x10000}, {0x8, 0x5, 0x8}, {0xe, 0x4, 0x4}, {0xf, 0x5, 0x6}]}]}, {0x0, [0x0, 0x2e, 0x2e, 0x5f, 0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/197, 0xda, 0xc5, 0x0, 0x400, 0x10000}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0xd, 0x34, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xb1cc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x6, 0x2, 0x1, 0xffffffffffffffff, 0x10}, @ringbuf_query, @map_fd={0x18, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001240)='GPL\x00', 0x1, 0xcf, &(0x7f0000001280)=""/207, 0x41100, 0x2, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380)={0x5, 0xb, 0xe7, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001400)=[{0x1, 0x3, 0xb, 0x1}, {0x3, 0x5, 0x5, 0x7}], 0x10, 0xd24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x4, 0x19, &(0x7f0000000940)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @jmp={0x5, 0x0, 0xb, 0x4, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @ldst={0x0, 0x3, 0x0, 0xb, 0x9, 0xfffffffffffffff4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0xb6, &(0x7f0000000a80)=""/182, 0x40f00, 0x0, '\x00', r7, @fallback=0x23, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9, 0x9, &(0x7f0000001500)=[r0], &(0x7f0000001540)=[{0x4, 0x3, 0xe, 0x5}, {0x3, 0x1, 0x7, 0x2}, {0x2, 0x5, 0x1, 0xa}, {0x0, 0x2, 0x1, 0xc}, {0x5, 0x5, 0x6, 0xb}, {0x0, 0x3, 0xa, 0x1}, {0x5, 0x2, 0xb, 0x5}, {0x5, 0x1, 0xe, 0x3}, {0x4, 0x3, 0x4, 0x2}], 0x10, 0x400}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f00000016c0)) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000017c0)='syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000001800)='memory.events\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0x2, '\x00', r7, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0)={r11, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{r11, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x34, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6a5, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}}, @ldst={0x3, 0x0, 0x0, 0x4, 0x5, 0xfffffffffffffff8, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x42}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x692098db587faba5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3b6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @map_fd={0x18, 0xa, 0x1, 0x0, r14}]}, &(0x7f0000001b80)='GPL\x00', 0x1ff, 0xdf, &(0x7f0000001bc0)=""/223, 0x41000, 0x40, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000001cc0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001d00)={0x1, 0x3, 0x6, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r11, r11], 0x0, 0x10, 0x3}, 0x94) openat$cgroup_pressure(r10, &(0x7f0000001e40)='memory.pressure\x00', 0x2, 0x0) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), r11) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000002100)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f00)={0x184, r15, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf61}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x76092587}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8aa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x15}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000022c0)={{r13, 0xffffffffffffffff}, &(0x7f0000002240), &(0x7f0000002280)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x11, 0x16, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0xb7}, @call={0x85, 0x0, 0x0, 0xca}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}]}, &(0x7f0000002200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x20, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002300)=[r16, r14, r11], &(0x7f0000002340)=[{0x1, 0x4, 0xd}, {0x0, 0x4, 0xe, 0x1}, {0x5, 0x1, 0x10}, {0x1, 0x1, 0x6, 0x7}], 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(r11, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0xa8, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x58, 0x8, "b314e325199b8e6928f926dfd9614a70e3236a6ecada6a9393a581a443a39f99230245832581c99715716e7cf343831ab1b2c8d97be7c6744f248532d75fe66bb4fcc468c3c1560992d96bbeb6f0db7397273beb"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3f4, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x170, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HOOK={0x238, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}]}, @NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x80, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x52, 0x3, "6a170ef843adfde44263b01de10ecf293db7b0cb5841fa548c8294bd91c00f5b4992c42282e3b28407185d061ed87deb354dedfa467f51ca871a50eafc9d1ab827eed91ca856852586f5b9391138"}, @NFTA_MATCH_NAME={0x8, 0x1, 'tcp\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10001}, @NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xcc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x38}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x66c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2.117272246s ago: executing program 1 (id=3658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048818) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) 1.998647377s ago: executing program 0 (id=3659): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f000000"], 0x38}}, 0x0) 1.998204691s ago: executing program 4 (id=3660): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000940)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x68, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0x7}, {0xffe0, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2af, 0x7, 0x1}, {{0x3}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x1000}, {0x1, 0x3, 0x2}}}]}]}]}}]}, 0x68}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e3100e3000000000000001c0012800b0001006970766c616e00000c0002800600020000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="ea00d1ebb3951b10000100", @ANYRES32=r8, @ANYBLOB="008000000001000008002500020000001400350065727370616e30000000000000000000a80018803c0001800800010081000000140004002500df48709004e55bc822d790130e5414000500f8f186481fa517a1558304253d6d5e67060002003a0000003c00018005000600b7000000080001000500000014000500bbf2aeb4ae3a012329419986164572bd1800040016292cb3c2272d1519278c6a42ee3a2a2c00018014000500641555ea9cd43bbf2c25436795ed9b261400020021282a21241b2e265f245c3a5d5d2500"], 0xe4}, 0x1, 0x0, 0x0, 0x4048008}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000008c0)={@rand_addr, @dev}, &(0x7f0000000900)=0xc) r9 = socket$pptp(0x18, 0x1, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000000014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020010db8000000000000000000000099000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff00"/197], 0xc8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39}, 0x20) bind$pptp(r9, &(0x7f00000000c0)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) connect$802154_dgram(r0, &(0x7f0000000240)={0x2, @short}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040080}, 0x24004000) 1.929218944s ago: executing program 2 (id=3661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e0009022bbd7000fcdbdf250000009affd6880886234f00", @ANYRES32=0x0, @ANYBLOB="04000000"], 0x1c}}, 0x20004804) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x3a) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000440)=0x40, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000004c0)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000500)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000540)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000005c0)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000600)={0x2c, 0x0, r8}, 0x10) bind$xdp(r6, &(0x7f0000000640)={0x2c, 0x1, r8, 0x0, r7}, 0x10) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f00000002c0), 0x10) close(0x3) sendmmsg(r9, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r10, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r0], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000001000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000740)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) 1.647642173s ago: executing program 1 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000018c0)={r0, 0x0}, 0x20) syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000006c06e3bcee5586dd6001010000161100fc020000000000000000000000000000fe8000000000000000000000000000aa00000e220006"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000200)=0x100, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000200)=0x100, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000010d1000000180000000a000000000000000000000408000000000000000000000200000000002e5f61610030dc3000"], 0x0, 0x3a}, 0x28) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x8010) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c000100000000000000000010000a800c0001"], 0x100}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="114353012008ba000000375186dd", 0x59f, 0x4008015, &(0x7f0000000100)={0x11, 0xe5, r5, 0x1, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000001900)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', r5, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001940)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) 1.594290625s ago: executing program 5 (id=3663): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000050000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400000900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) write(0xca, &(0x7f0000000bc0)="040e0c01011000ffffffdfffff50ff", 0xf) write(0xca, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r3 = socket$kcm(0x11, 0x6, 0x0) sendfile(r3, r2, &(0x7f0000000440)=0x1349cdec, 0x7) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) (async) listen(r0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e02, 0xffffffff, @empty, 0x5}}, 0x0, 0x0, 0x23f, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r4 = socket$kcm(0x23, 0x5, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000340)=0x9, 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000c00)=@newtaction={0xd4, 0x30, 0x300, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x19, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x83, 0x6, "79a7d38e7a2ec8167e4144909256e723d0397abec1121a5f51186043be00987f8485e041513ebdd3ce11216c825ba08f996963d3790a02b7ff8626e8b89f0a31901ecbf6af5730e27c10b6b9287f7f6110db68868c875dd05d414653a6b4e0011ce50aa6cf854fbe890cb3869efcd70ea3995b09198f72be0ad056f627a482"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xd4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) listen(r4, 0x800) (async) r8 = accept4(r4, 0x0, 0x0, 0x80000) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x4042c0, 0x0) (async) writev(r8, &(0x7f0000000900)=[{&(0x7f00000003c0)="e14fee690def4eee8d6eb9c88b8a0b780bd3a4e197a3dcbcfd41c3f2dd51efe53c9369c425012326d56a17748663dce7aa07f8ead79db5d9cdb678ae12", 0x3d}, {&(0x7f0000000540)="bced831763c117b8ed525dc50aafcb0db5770da8739ca70c86aa59bade79fb07cb29f17661b6c4185cf8c7658697a2660fed35e89947db7c44fa6509a571839bb615a3f85f65a6f878209234a33fb7fd28c285197d3ef7fb1f5fe55dce1d36e7aebb76fbcb1967c0eadba14a13ce60c3dc710af757b29cd9d657e15a262f65ebfd8c77e317398d585cb3bdcff3c5ca8952d21f1419fd84c7f3fdd676f8ee94a300505bafd304d74f4187498a8c5408b14a21a60af61334ecfc9d70b1d37ff1da1e7dee7f6b765487fdf28b0526983cf99389cdf728ca5a73be9a8c6c40895ecfb1dcfb7c9c8e", 0xe6}, {&(0x7f0000000640)="9d19bdc2edc39224912e133766ff497ccbc847ab8e70f1258bf9437c72f6370681cc54b8d87a3cde375ce80ed78340508fd9744271d6cc2f5918b818828baf1c9088d3208df572a24a74800886324fa500dd2425d7856e54e221e224c39c83a85266bfbe24e0395fb1f4b2e7d35f9bad712b4df63d1f3950bd4a1b39693fb4f7f5cc0b5018fc7cedd230762f00a4c293f927c32f964bafbcc1b53d0d5dc4406ad19e12167ea2f8611f5362a513b4be51643e6c05617122422929380c366b527061f54ed2b70672e33275892853cfdd9ca23b", 0xd2}, {&(0x7f0000000740)="e7297684583ca95b54e11a32f489abcc7291e481a668a97ce290b1b0123789735d18aff928c360c203578d8d4f55f803bd8a7480f0ce9ae085035d96d728bcf6fc98cec8e8929bb00cc739050e3654", 0x4f}, {&(0x7f00000007c0)="da68b9cca1209bd0f7484b7588af155c8c", 0x11}, {&(0x7f0000000800)="d85cc511ae095764ff4de9e29fd43aaf5bf43f89f0e08265240f7331060b0e9a822cad08b9bd74638702bf2f754ccdf97fd99c6a39200178e1590b9c26e3c85773ff8c4ced0a3736fcc24ad5b05e66beb8e175c65f50afab844c1fc8a5df49922df31800bb5b5ead5b", 0x69}, {&(0x7f0000000880)="9cf1a94e84e9d9083acfdb44839a1a590e0418b3c74c0b2ddfe499e1acbc5f99e5c742a67604318ab256bfc36b099fb52d592d40a29013bab93dec4ebef712c49a817bafee46342b39fc8c1ab910b7701e5b64bda137d53f446f7f", 0x5b}], 0x7) 1.583521606s ago: executing program 0 (id=3664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100756e636f6e6669"], 0x90}}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x20, 0x3, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}]}, 0x20}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000400)=""/207, &(0x7f0000000500)=0xcf) connect$inet(r2, &(0x7f0000000200)={0x2, 0x200, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="3ac2f5c800ad32c9", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340), 0x100002bd}}], 0x2, 0x2004004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="200027bd7000fbdbdf250800000005002a0000400000"], 0x1c}}, 0x20000000) 1.367998403s ago: executing program 2 (id=3665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1daa00"/24], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.166589511s ago: executing program 4 (id=3666): r0 = socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x7f}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="6daa00000000000079100800000000009500000002008000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x23, 0x5, 0x0) getsockopt(r4, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004"], 0xbc}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], 0xea) 1.158871497s ago: executing program 1 (id=3667): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000600)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x2b, 0xae, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @multicast2, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private=0x4}]}]}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.138229761s ago: executing program 0 (id=3668): unshare(0x2040400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xffffff81, 0x4) 946.682055ms ago: executing program 2 (id=3669): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0xa, 0xd, 0x2}], 0x10, 0x3}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x418000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) 805.748725ms ago: executing program 0 (id=3670): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000000c0)="c2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x80000001, 0x30}, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1cc, 0x34, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@generic="fdf28693c034c1ecd16bd598f0c23171ddf233a28821688a03956bebda3493944cdd16504db3ffeafea1df28f7423048ac0516978e6b3fcfd725dd5d6405330ee6a46ac8a757d10b0e1b7710f30a6f690749ec5ceb230adb90a1098f7f873d8f50849e73ff8096c292243bbd3f063e07b84c04120997c6a93cd8d229498f0b69cf42472019312e8eeb6d339ce170e20f52fe1f260ab8ca32", @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x1cc}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000130005001a88ca2400000000000000008dcc693ef0fd58e335497dc703000000500d530f30d798d7d12df1e9d40382988e09c33b3b814ef9797f8c5a2f4e35850c566b95b49e1eca45b696a6a1a569ce27601609de84791e044bf611e0dc00", @ANYRES32=0x0, @ANYBLOB="00800000000006001400030073797a5f74756e00000000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB], 0x3c}}, 0x0) 799.09592ms ago: executing program 4 (id=3671): close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="86", 0x1}], 0x1}, 0x0) accept4$tipc(r1, &(0x7f0000000240)=@name, &(0x7f0000000280)=0x10, 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 775.625083ms ago: executing program 1 (id=3672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x400, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r4, 0x118, 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 554.594521ms ago: executing program 2 (id=3673): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="9c000000100005000100000000000000000000000000000000000000000000000900030063616e3000000000700012000800010063616e00640002000c00050020020000200200002400010020a1070000000000000000000000000000000000000000000022000000000000243c4db562b07ea300090080841e00000f0000000000000000ffffffffffffffff000000000000000000000c0010e407", 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x20004000) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x20004000) 149.628044ms ago: executing program 0 (id=3674): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="c2b0", 0x2}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x25dfdc01, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x38}}, 0x44000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000020000000c0000000000000002"], 0x0, 0x26, 0x0, 0x1}, 0x28) 141.930907ms ago: executing program 1 (id=3675): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x8007) r2 = socket$netlink(0x10, 0x3, 0x14) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x10}}, 0xbfd3a2af17efe858) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x8398}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="2b00fa00", @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="04005b000600650040000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x7, 0xc, 0x5, 0x0, 0x1, 0x2]}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008f80200", @ANYRES32=r11, @ANYBLOB="04005b00"], 0x20}}, 0x48000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) 38.600909ms ago: executing program 2 (id=3676): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x703840, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x6, 0x92, 0x4, 0x7}, {0x9, 0x6, 0x4, 0x3}, {0xffff, 0x8, 0x80, 0x400}, {0x6, 0x6, 0x4, 0x7}, {0x3, 0x3, 0x3, 0x1}, {0x616d, 0xe9, 0xd, 0xa1}]}) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x6, 0x92, 0x4, 0x7}, {0x9, 0x6, 0x4, 0x3}, {0xffff, 0x8, 0x80, 0x400}, {0x6, 0x6, 0x4, 0x7}, {0x3, 0x3, 0x3, 0x1}, {0x616d, 0xe9, 0xd, 0xa1}]}) 0s ago: executing program 5 (id=3677): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x2, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x5, 0x0, 0x4, 0x5, 0x6}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r1, 0x7f, 0x77, "4c5af320e62599671016451fb3cbbbe1c76104ee65360eebcf6507ae2831c632be43186330112a80916b481108d71bb7263855f39bbc2af29642c23b1c49bd3236ae8bd9f9b1b2c95e60226f8fbe62460d8fdb170f4dcfe9a51c6bfd25fee0627bc7ac6ba038179d95c2060a213dcdc4b7d143956d3cbf"}, 0x7f) (async, rerun: 64) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x400}, &(0x7f00000001c0)=0xc) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r5) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x9) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc000, 0x0) write$tun(r6, &(0x7f00000002c0)={@void, @void, @x25={0x2, 0x2, 0x9, "09526474141cc5ca71e036d1aeb4e158c81ad7797b1aa040b45b2bef0084ecebd44047098868799d058efa8d1e6a540191a1631e2f8723c6abc9adbd705b32a2de97570fade1a63ff64d65f8af5d11625fac11883c268df50cd09dca00069c88c839e36af6627abc366d7df9ce9a769aaf2a03713486136786a6409a3a29314c1edf622e84801f6ebaa67832f89c45caefd431f4759f6e23f4c3b82f1347848cfeb015688fdcfba0ad03da0bde24ccff397f47edf6036ed18fd074673e949af07edf74dae5e636c9e0f923cc639c24812d28b315e5445e1124d85513496aa22bf9e33b8ec5847999596ebb75636947382f12cd23b07a2c41ef648fd5cb352798a297606c4b6cf3d3f4c4f829f9f75492d2918a0dec5b28eb17003629c87726138aa342e75310b35b443830ce75ecf4e18ea5c9091270bb7f44f5a5c1d091ff59cfc088b766cdb9977826d5890e79adc1cbc2d7379495046ca340327c6f54d48fa7bb1acb6339a7e909c956f50c1ef0df4de779a501eb196d1a48e5c953c2bb5dc04992148779a5c633428707fb3f1796822dca32938b2e47a081d8377610ff76dc1a54c35fbeb076fa0f7adf68683a1f4928a3abab521717e96b3610ba69fec6b1ec49a54e1873fd90f11681f71aabaa3e4dc919f751e35cc7c15b9e931008c5ba44c548d7ec4f804ef29d0de48dff0f67b87c5cdee41ee92a25f0073cc4c8a64eecd6c30805395d19338573b2722681dec086b8ff868418e97d89e7dbd56cf50211278735629702b66eb2c19e5258ac8a4b79502d79deff6750efc2179984268cae7d311d066425fcc46dc5875e10ae88a0d1c195cd95c758f8e662e54bb3b6142f37ec545960764dd912e03150ad9caa7f3496e5037a5b4434b85779f809c52094f0010d7a881efc15d60334a8c44dff2467c19baa40508fe100f8632de1f62dda3c78143acb2595057a889488735f23eea290eaecb3bc4698da7ae505f103592c929a0e250e4d84666405ab3004adf1b45d7d2b6280faa4d18c51aa2866ca89a07b4e9a16bf9e023ff4543bd9dbf799ec383be7450f43440722b055691afdc07c200b38d984ccec0431ce2b09c4022695dacdc776d6c82d8d9bc4084d62a461529b6c9e364f65110c49ed83ff57991db5260dcc9374bcdb0c82fc2b417e518fc6da3ed5a612376d22c6522c5ed2b4395ad22eab4948548a8b9a39fbaef6b245e80d1c2d89a1898b5022df5939dd86489e3d23477d4477778402db5857643740ec6688a7995fbe9475032e436eda976aea9e0372c8facd14a2d6a6953302930d87dbce8e5442b977656b0e7111efadb90512d00e19a76e65c782e9dc68171b1b3db905ca91d6bd859d8de699d5e53eebd2d19385279329956930b7c7668ec4f683c8e5f7d029b43c2cd98790c2bee9f754d30fd9c95e601fdb766a643b50b811edaf98f998bc0952bee68a198f8863256428cc5d4ff16e372215eb3829cf76ee6f3b29e53b7467ba440f92deb3f7a0f22a6c92bd829216276dabdcfe8bc412dee3fefefa1b14c3ae781967892a51e50a0c22b823f48f3d5d5e2a0217f40521a00f1eda33e4a661880fff4dab222fd573cca10da3b2a18a061538fdb5c62fe09870267285df7ffbe62945a12db004ef83ba3d94018598c70e83381ac7c7946745e81bbb09d7eef69281685e05a5e18a34df49719c231c9ab15dc7505925c703ddf0f166296e8ff54778a8b33a8a05c19a50d39f0944ed1bf23df407dfa29b05d3dbd4df0e0e46903e6b6d655f8bb48ee95e4464903721b9963c243cb572b8ecc333cce74aa5eef46699630bf2d79b73a6b37e9985ad5403a22d39cc900a93e190b8fe36f26c9c76d59c27c01c3cd6c12b4ced678b663519384695b9ba457e81416e7806a97c2195561bc2e6b6d9835dfe161ee544095e58cbd0296ed0a32811622a175b92a7c07c428e2d550cdcf62bb77bdde5510aacd4ef23d4079b0ec691270f383f43f218b3965002bcfc0d5f4c95bf7ef206fa9b5b08692571e2ac0294b65df8123b14bc06ead5d664799a7bcdc11816c604512c78822cbb640cfb58277341fc77fa3dada8ebd33d218a37ab10a21a1338e46ee6067a4a53000b9fc245ae01d87a3869038290f56b3876ba3905f071df46a808db5a3215110299621fc116c42dd2b9d2f1981e014a964ea41f71f1d503da01f21354bce88340730af3b6b15fb9482b5b6bd9a03013d2a175497eb3624b835e869532e00554ef27ab01cd44f432e437b41b724511cd267b792e75d5147d52d008dd4171cd8526210691954badaf187d0113b117b25b42fe58074e768bf775aa8416f79f577a657edc52e59bf2a4c221c5726718feb6b3bb92aeb9bb94a2f5c2d6093f21422d0148c11f3e2f93be780d1bbd4ad321d0af9b33910ca0d8161b06cb52196514d8ed597ebb1cdddff34aababb3b488827966863cd1ccf4144e9f299cc7b3bd23d0f2e7b9174480c88d9817646acd30bfeb81b10f8e45ffeb95da00d1301205c81033ff0a217fee0b2ce81e96ff6ddc9a7316a87bec53a15f36c9f6d66da2f6e552a4bc15a7fc61e33c2d4990e75bcc649cbecb78cc8d0685fec38d19765d179537f3753d7b1c5a88415a92a416d49e4d6ab47bdb39ea2c8958c31c596db1ae6a4e82983465f1a9a2fcc8f7befc43dbd4d877febc7a3849c94734c5d204b5de517eeb4d923a970674c1e9e247faeb93c71796a2559d7d3288592f2956deaaadaeb870f83914f027349b4b72e36b605ae328e3dbcc1e1d544e7902816b74881bfd90a153c445f437b834a9c3c64794a89269e4c94faa7398bac544555880a2d75c8a14744dcdf8db2c53929241505e03c0e0cdff4706ad03feba9393b3bf72365630ce2db3a444a3f8fed1eebcd71ae7dc2d89cd7bd8e29705d2313a4a0e819a97fe7f1200a25f959dd63006a37e58753306dcdb68264a17741b209c309761a61f64a75d8dbe7a8fde00372c909b065383cdaeadae436b8e39cee9636efe48e9b04f03169a9d4faf595c12960df28bb3f9019c26b8a556c7ad7cfeba0b12b82b5e154b82f1732b970212738f30aca5e5f12420619710eef952f81f6f777adaf0e8b73e42a323e171646d91e444c824bc7ad534ea26afea05a5866b534f24dc2ddf0a4aea6c616acb0366f703951c8c3b763f8ffa5a12bb7f2e2dde2ddabee7eb22f8e8c01b3546653c7de60ac7bf99a18d1045a72306888d7d2215689c8072a031c1288e1e853640c176c8af50fd92940705cc02bfbf441db914059c41d63c2ebfc986088998b6c28b507ddceefe970314fe84bbe3cd9773e43dffcdce573b7c4626ed96f3aca612a40d338406fdc72192a115b7ecd2be6525b900085ca3a0cf63b6cdb9ce2e3176ba22ec7f62dcdbe35dc7f77e02ee3eaee52252e803b0e871059ebdb2ceb4063903dac68fa267de1cc71de1c44e7f7ab096c69f8c058ec33a1de4995dddb46b763bac8ac3864c18275b9c321a7b8e4f6ac92789eb52f5778e0afc6d684f18588c026d7e295092ffb10557090764a5aa3313382cc9084afaddb9628d2234f2183041180f2627c552ae03b99a3e5d9967cebf6ca63ce9726c4759fe087fbc132ebc28c994f9d4fddb56c8149cf5ad3cda84bac4f83423d9199024a8599148b3f7fc5162d8cce3d57fcf98a393d6b3fc307187cfa5d65d90d6f48d2873d289dca8c3c776cf411e2c5bfc5c1325349ca0afa4cd38a0e74378331e5260cec95b3076b664f6a8bddf778a7cfced844991b0c63748ec5d368ee37673e2ddd9f8216283dc851629f5665b261c78e27925d818cc7b552377f626040dfe816f7a6e83c80f59b1cdf230270ce24608cb9148a04842a544240ff8c2cf36c8765fb2cdb7cb3da9c6dcbd97dddea8718fa723250da6df06090028893c08be5ec751d9fb7a903cad4686c75c76ad30ec02d9c4243322ec6b28608887a001b63a6542fb3e623f0acc3b5151eb050d2ee71c8de82f2fa618d343941de31db12aba6013ff09561708deebb1c78d51af1490cfb4a2b3a30432252a3090b28acbc1a1c78164af0bf9626dee6dda6d96f6326404d3d096d8116a25e5ddde6cc290cd8cbe85a244bad3e1711a95e7f1e5d60c3b231f638d89a04e30cb6992e9941ca5494682f50ee148735187c6c94b3525e78a716798bdc5b8d5671985e3f74da2d76c4265786dd17e2b708989a77df3ee259f9f97276641412e3412b1d54fd3c8db46fdd5846076d2bffdc731a372d49eb2938f6edeb5bbf67922cc18c4c147c64fae0f4d59f2da14e0e2e1cf8fcaf01a25857ba816287af441d273e512cceb39e84ed19b37a1d99e982717b3240ed4b92912d6985c76ccb2a9d4f4c53ca3e17c9c39e48af5384788321a41c1bd6d761c6330126a1a63ae014b1b16177bd0d84c8dcef25dd6d6a6bc34733e3a56b777dd79c55a61c0c14873c722da95aac3df033e8b620d528daa06ce92ef7ad6b3699ee796a15a7a4f8194589b3512ca0bcafe6631e37db0ab40809c9f93a33576bf13eb3eedd958a90b12b9fa202d9d26dc0b1975b3e439219a6d7c9ddee9c60224a89f3380689a150d8123f8a92971ebf6270c78006e608297b7f8922aba6eb5c65d45d733811f16113d0908e9246832554b119570696600173fd2fe38f50e2b1c6ee2c7908972320ba690360658c5b6cffe19a7f5f61799f1894df2a0661639d9cd80f01a63e4d8ea1b43dd4b27ace7dd0a81a07189651441095b70b0b25c19818aee2ce007b003df278e3b1b694af976347a2a81ec6595f4ebae91a1dd74f17d09388fa8b78209f992275cd4c6c1f7b92d17df07569f2201523f03732b81b0d10eea5a194b3c8233c3da11260c5ef464945847a9a064d1678972434dfda01bbadf8e36e6863154af73a6c6cf2356bf4180b5b3bf518963a26d7fa768fa9a331c0e6f1d48847b12330493627abd558993f1345db922ad55e9eef23d8e911b56c10363309864fbe923e5e7c3fbbda302d26ba78b592990005e848e91cfb26f9e573dd583fc09272cb9eca6ec841ced5ccef3da252d08f643b0371719c0aed6b9a4f49eb93e1c5d58da1fbe5fa375b5e902b4137dc69fc35babaa180b0fef998186909e110e503e200bbb2b27897473a4e0d138fd793afa8b18bf0a6f0aaa343b149bbaf6d39814df8a35be2277b4aa602b65570a2bdf585ba892ba3f0ff9d496b0e23fee7864cd6cd4aa2633c8afcf622d6e47cee50f84840a66de1bd3e479d410c7c46bb2c40413d2b2a4885bc9cd786748ad8193bd5dd710e4e7e40026dacd9cbb4510147f13d1d7698f593d12be7a365a9ad22a9b112619029782dc5070bf277a88d6b733712ee9418a2750589ce555283546ad48103c6abf857a6631336216beaa9565b2d29b12177eafbe6cd94ba971b38867362bc29a358985d54a1e12046d275b8ec81e03c4d330c0433199cde1b16d9f279f9ff40fd2b2e91a122b7b47478b47ffe5b5d498b4b2022f7821efcc97250e7b7550555fddba641d97a08f12c399c886eb6c0631a8f610c8d06003392e42b0ecea310569d7285e888dee832dab55716d10b84377eb700567bbe1b2a03282b177dd790e75301ad6e624c951ec1b9a28d6951263ab98a1f9851ddeef098bf246571759f8fe81444666cfbb4a81a0d8563816c7566a3840bcaac21d94fbb49b4d66b4a21423176c0385bec28f8920b5b31e671d44e9f314be8f3a45d45380c231761c04d8b85b85d824f07457c5e45e1bcdde9cbfb01086559dbdf075e3cb7169e6ee16740892bf"}}, 0x1003) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001440)={'syztnl2\x00', &(0x7f0000001400)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x6, 0x88c, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x65, 0x0, 0xfd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @end]}}}}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000014c0)={0xaa45, 0x0}, 0x8) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_ext={0x1c, 0x2f, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x244}, {}, {}, [@alu={0x7, 0x0, 0x6, 0x8, 0x3, 0x100, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x775}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x6, 0xb, 0x1, 0x2, 0xb1c}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001680)='GPL\x00', 0xa, 0x6d, &(0x7f00000016c0)=""/109, 0xc0f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001780)={0x5, 0xf, 0x9, 0x200}, 0x10, 0xbb99, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4778}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{0x1, 0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x10, 0xd, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@generic={0x1, 0x4, 0x4, 0x3, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000001380)='GPL\x00', 0x9, 0xa, &(0x7f00000013c0)=""/10, 0x41000, 0x1, '\x00', r7, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x7, &(0x7f00000019c0)=[r10, r11], &(0x7f0000001a00)=[{0x3, 0x4, 0x9, 0xc}, {0x2, 0x5, 0xf, 0x4}, {0x5, 0x5, 0xf, 0x6}, {0x5, 0x4, 0xa, 0xc}, {0x2, 0x5, 0xd}, {0x4, 0x2, 0xd, 0xb}, {0x5, 0x5, 0x3, 0xb}], 0x10, 0x9}, 0x94) (async, rerun: 64) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000001b40)={'bridge_slave_1\x00', {0x2, 0x0, @initdev}}) (rerun: 64) accept4$llc(r12, &(0x7f0000001b80), &(0x7f0000001bc0)=0x10, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2497}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xbda}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000810) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000001d40)={0x9, [0x62, 0x3, 0x5, 0x4, 0x168, 0x1, 0xfff, 0x9, 0xfff7]}, 0x16) syz_genetlink_get_family_id$team(&(0x7f0000001d80), r5) socket$netlink(0x10, 0x3, 0xb) (async) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r3, 0x84, 0x85, &(0x7f0000001dc0)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0xfffffffc}, 0x90) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001e80), r5) (async) r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001ec0)={0x1f, 0x0, @none}, &(0x7f0000001f00)=0xe, 0x80800) recvfrom(r13, &(0x7f0000001f40)=""/4096, 0x1000, 0x10070, &(0x7f0000002f40)=@x25, 0x80) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r11, 0x40046f01, &(0x7f0000002fc0)=0x2) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000003000)={0x0, "e906e0dcdd15824169119a097e75c35d"}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000004000)={r14, 0x6, 0x0, [0x81c, 0x9, 0x1, 0x5, 0x7ff], [0x8, 0x5, 0x10001, 0x495b, 0x6, 0x443, 0x1, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x9, 0x2, 0xffffffffffffffff, 0x6, 0x2, 0x100000000, 0x2, 0x9, 0x6, 0x8, 0xb71, 0x9, 0x7ff, 0xfff, 0x1, 0x100, 0x72ef, 0x0, 0x6, 0x84, 0x0, 0xffffffff, 0xde8, 0x1000, 0x3ff, 0xff, 0x2422, 0x9, 0xfff, 0x9, 0x100000000, 0x3, 0x0, 0xffff, 0x3, 0x7f, 0x0, 0x0, 0x6, 0x3ff, 0x8000, 0x2, 0x4, 0xfffffffffffffffd, 0x7f, 0x9c3, 0x0, 0x8000000000000001, 0x1, 0x7, 0x8000000000000001, 0x6, 0x6, 0x1, 0x4, 0x3, 0x2, 0x6, 0xfffffffffffffffe, 0x6, 0x6, 0x7, 0x3, 0x401, 0x7, 0x4, 0xd574, 0x100000001, 0x5, 0x200000000000, 0x80, 0xfffffffffffffff8, 0x2, 0x9, 0x8, 0x10, 0x1, 0xaf0, 0x80000001, 0x4, 0xffffffffffffffff, 0x7ff, 0x2, 0x100, 0xdae4, 0x3, 0xffffffffffffffff, 0xa6, 0x8, 0x5, 0x800, 0xcb21, 0x5, 0x3, 0x7fff, 0xd9, 0x3, 0x0, 0x5, 0x39, 0x7, 0xa04c, 0xfffffffffffffff8, 0x2, 0x3, 0x0, 0xaf0e, 0x1, 0x4, 0x5841]}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000004440)) kernel console output (not intermixed with test programs): n process `syz.0.2353'. [ 468.068390][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 468.112542][ T5625] Bluetooth: hci4: ISO packet for unknown connection handle 2723 [ 468.345348][T15166] netlink: 'syz.0.2360': attribute type 2 has an invalid length. [ 468.422006][ T5625] Bluetooth: hci1: Malformed Event: 0x13 [ 468.537671][T15179] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2361'. [ 468.537721][T15179] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2361'. [ 468.800465][T15194] netlink: 'syz.4.2367': attribute type 10 has an invalid length. [ 468.949847][T15201] netlink: 'syz.3.2371': attribute type 9 has an invalid length. [ 469.050432][T15206] netlink: 'syz.4.2373': attribute type 1 has an invalid length. [ 469.195814][T15213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2377'. [ 469.498363][ T1697] block nbd0: Possible stuck request ffff8880284be000: control (read@0,1024B). Runtime 30 seconds [ 469.498935][ T1697] block nbd0: Possible stuck request ffff8880284be1c0: control (read@1024,1024B). Runtime 30 seconds [ 469.498969][ T1697] block nbd0: Possible stuck request ffff8880284be380: control (read@2048,1024B). Runtime 30 seconds [ 469.498997][ T1697] block nbd0: Possible stuck request ffff8880284be540: control (read@3072,1024B). Runtime 30 seconds [ 469.698195][T15233] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 469.740196][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 470.116386][T15246] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 470.326692][T15259] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 470.330744][T15259] bond7 (unregistering): Released all slaves [ 470.366519][T15273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2391'. [ 470.425651][T15275] netlink: 'syz.4.2391': attribute type 34 has an invalid length. [ 470.425675][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 470.756344][T15292] netlink: 'syz.3.2395': attribute type 2 has an invalid length. [ 470.924067][T15299] netlink: 'syz.3.2397': attribute type 9 has an invalid length. [ 470.957552][T15299] netlink: 'syz.3.2397': attribute type 9 has an invalid length. [ 470.988980][T15302] netlink: 'syz.2.2396': attribute type 29 has an invalid length. [ 471.050985][T15304] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 471.051015][T15304] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 471.081501][T15304] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 472.056787][T15351] xt_l2tp: unknown flags: 43 [ 472.068719][T15351] netlink: 'syz.1.2409': attribute type 16 has an invalid length. [ 472.157014][T15359] xt_l2tp: unknown flags: 43 [ 472.175357][T15356] netlink: 'syz.1.2409': attribute type 16 has an invalid length. [ 472.331628][T15365] netlink: 'syz.0.2410': attribute type 2 has an invalid length. [ 472.773320][ T5625] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 473.128881][T15405] netlink: 'syz.1.2417': attribute type 49 has an invalid length. [ 473.481778][T15421] __nla_validate_parse: 9 callbacks suppressed [ 473.481801][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 473.505752][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 473.505774][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2421'. [ 473.508501][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 473.508520][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2421'. [ 473.794461][T15448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2427'. [ 473.910511][T15446] veth9: entered allmulticast mode [ 475.039074][T15516] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2440'. [ 475.086307][T15513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.121576][T15514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.201153][T15516] bond16 (unregistering): Released all slaves [ 475.220808][T15528] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2442'. [ 475.398692][T15533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.440260][T15536] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2444'. [ 475.470859][T15537] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2445'. [ 475.577575][T15541] validate_nla: 2 callbacks suppressed [ 475.577596][T15541] netlink: 'syz.1.2446': attribute type 28 has an invalid length. [ 475.577611][T15541] netlink: 'syz.1.2446': attribute type 3 has an invalid length. [ 475.577888][T15543] batman_adv: batadv0: Adding interface: veth0 [ 475.577903][T15543] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.577936][T15543] batman_adv: batadv0: Interface activated: veth0 [ 475.959612][T15565] Bluetooth: hci0: unsupported parameter 5135 [ 475.959635][T15565] Bluetooth: hci0: unsupported parameter 8192 [ 475.959672][T15565] Bluetooth: hci0: unsupported parameter 5135 [ 475.959686][T15565] Bluetooth: hci0: unsupported parameter 8192 [ 476.638089][T15596] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20001 [ 476.638206][T15596] IPVS: ip_vs_edit_dest(): server weight less than zero [ 476.638254][T15597] IPVS: ip_vs_edit_dest(): server weight less than zero [ 476.857829][T15608] netlink: 'syz.4.2464': attribute type 64 has an invalid length. [ 477.294309][T15631] openvswitch: netlink: Flow actions attr not present in new flow. [ 477.404479][T15640] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 477.430389][ T8583] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.430448][ T8583] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.430485][ T8583] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.430521][ T8583] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.606237][T15651] nft_compat: unsupported protocol 0 [ 477.606461][T15651] nft_compat: unsupported protocol 0 [ 477.606644][T15651] nft_compat: unsupported protocol 0 [ 477.606824][T15651] nft_compat: unsupported protocol 0 [ 477.607015][T15651] nft_compat: unsupported protocol 0 [ 477.607197][T15651] nft_compat: unsupported protocol 0 [ 477.607380][T15651] nft_compat: unsupported protocol 0 [ 477.607563][T15651] nft_compat: unsupported protocol 0 [ 477.609420][T15651] nft_compat: unsupported protocol 0 [ 477.609600][T15651] nft_compat: unsupported protocol 0 [ 477.609773][T15651] nft_compat: unsupported protocol 0 [ 477.609988][T15651] nft_compat: unsupported protocol 0 [ 477.610164][T15651] nft_compat: unsupported protocol 0 [ 477.610334][T15651] nft_compat: unsupported protocol 0 [ 477.610507][T15651] nft_compat: unsupported protocol 0 [ 477.610722][T15651] nft_compat: unsupported protocol 0 [ 477.652311][T15651] nft_compat: unsupported protocol 0 [ 477.652512][T15651] nft_compat: unsupported protocol 0 [ 477.652688][T15651] nft_compat: unsupported protocol 0 [ 477.652874][T15651] nft_compat: unsupported protocol 0 [ 477.653051][T15651] nft_compat: unsupported protocol 0 [ 477.653228][T15651] nft_compat: unsupported protocol 0 [ 477.653406][T15651] nft_compat: unsupported protocol 0 [ 477.744128][T15651] nft_compat: unsupported protocol 0 [ 477.744336][T15651] nft_compat: unsupported protocol 0 [ 477.744516][T15651] nft_compat: unsupported protocol 0 [ 477.744692][T15651] nft_compat: unsupported protocol 0 [ 477.744889][T15651] nft_compat: unsupported protocol 0 [ 477.745060][T15651] nft_compat: unsupported protocol 0 [ 477.745229][T15651] nft_compat: unsupported protocol 0 [ 477.745400][T15651] nft_compat: unsupported protocol 0 [ 477.745593][T15651] nft_compat: unsupported protocol 0 [ 477.745788][T15651] nft_compat: unsupported protocol 0 [ 477.745973][T15651] nft_compat: unsupported protocol 0 [ 477.746151][T15651] nft_compat: unsupported protocol 0 [ 477.746336][T15651] nft_compat: unsupported protocol 0 [ 477.746544][T15651] nft_compat: unsupported protocol 0 [ 477.746721][T15651] nft_compat: unsupported protocol 0 [ 477.746916][T15651] nft_compat: unsupported protocol 0 [ 477.747087][T15651] nft_compat: unsupported protocol 0 [ 477.747257][T15651] nft_compat: unsupported protocol 0 [ 477.747428][T15651] nft_compat: unsupported protocol 0 [ 477.747603][T15651] nft_compat: unsupported protocol 0 [ 477.747773][T15651] nft_compat: unsupported protocol 0 [ 477.747950][T15651] nft_compat: unsupported protocol 0 [ 477.748121][T15651] nft_compat: unsupported protocol 0 [ 477.748310][T15651] nft_compat: unsupported protocol 0 [ 477.748488][T15651] nft_compat: unsupported protocol 0 [ 477.748664][T15651] nft_compat: unsupported protocol 0 [ 477.748875][T15651] nft_compat: unsupported protocol 0 [ 477.749101][T15651] nft_compat: unsupported protocol 0 [ 477.749278][T15651] nft_compat: unsupported protocol 0 [ 477.749455][T15651] nft_compat: unsupported protocol 0 [ 477.749631][T15651] nft_compat: unsupported protocol 0 [ 477.749808][T15651] nft_compat: unsupported protocol 0 [ 477.749993][T15651] nft_compat: unsupported protocol 0 [ 477.750225][T15651] nft_compat: unsupported protocol 0 [ 477.750401][T15651] nft_compat: unsupported protocol 0 [ 477.750582][T15651] nft_compat: unsupported protocol 0 [ 477.750761][T15651] nft_compat: unsupported protocol 0 [ 477.750949][T15651] nft_compat: unsupported protocol 0 [ 477.751125][T15651] nft_compat: unsupported protocol 0 [ 477.751300][T15651] nft_compat: unsupported protocol 0 [ 477.751520][T15651] nft_compat: unsupported protocol 0 [ 477.751723][T15651] nft_compat: unsupported protocol 0 [ 478.124664][T15658] netlink: 'syz.0.2473': attribute type 26 has an invalid length. [ 478.518583][T15677] __nla_validate_parse: 7 callbacks suppressed [ 478.518616][T15677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2481'. [ 478.902427][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 478.945030][T15692] pim6reg527: entered allmulticast mode [ 478.947449][T15692] netlink: 'syz.2.2485': attribute type 1 has an invalid length. [ 479.054576][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 479.105912][T15692] bond11: (slave bridge5): making interface the new active one [ 479.129144][T15692] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 479.361836][T15712] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2490'. [ 479.398559][T15712] bond7: entered promiscuous mode [ 479.398584][T15712] bond7: entered allmulticast mode [ 479.417572][T15714] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 479.433409][T15712] bond7: left allmulticast mode [ 479.438547][T15712] 8021q: adding VLAN 0 to HW filter on device bond7 [ 479.530575][T15719] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2492'. [ 479.530616][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 479.554744][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2492'. [ 479.592299][T15719] 8021q: adding VLAN 0 to HW filter on device team1 [ 479.649508][T15723] lo speed is unknown, defaulting to 1000 [ 479.668721][T15723] lo speed is unknown, defaulting to 1000 [ 479.670073][T15723] lo speed is unknown, defaulting to 1000 [ 479.776241][T15728] rdma_rxe: rxe_newlink: failed to add lo [ 480.001852][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 480.028902][T15736] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2496'. [ 480.028927][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 480.057200][T15723] infiniband syz0: set down [ 480.057260][ T5726] lo speed is unknown, defaulting to 1000 [ 480.059981][T15723] infiniband syz0: added lo [ 480.176115][T15723] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 480.176155][T15723] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 480.176198][T15723] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 480.353166][T15723] RDS/IB: syz0: added [ 480.353220][T15723] smc: adding ib device syz0 with port count 1 [ 480.353241][T15723] smc: ib device syz0 port 1 has no pnetid [ 480.510660][ T5726] lo speed is unknown, defaulting to 1000 [ 480.510787][T15723] lo speed is unknown, defaulting to 1000 [ 480.763538][T15765] netlink: 'syz.1.2501': attribute type 4 has an invalid length. [ 480.910442][T15767] macsec2: entered promiscuous mode [ 480.910724][T15767] macsec2: entered allmulticast mode [ 480.910746][T15767] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 480.911210][T15767] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 481.005089][T15769] syzkaller0: entered promiscuous mode [ 481.005113][T15769] syzkaller0: entered allmulticast mode [ 481.224444][T15778] netlink: 'syz.2.2505': attribute type 22 has an invalid length. [ 481.366081][T15778] netlink: 'syz.2.2505': attribute type 22 has an invalid length. [ 481.559307][T15790] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 481.590640][T15723] lo speed is unknown, defaulting to 1000 [ 482.292366][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 482.409010][T15723] lo speed is unknown, defaulting to 1000 [ 483.044243][T15723] lo speed is unknown, defaulting to 1000 [ 483.281307][T15844] syzkaller0: left promiscuous mode [ 483.281332][T15844] syzkaller0: left allmulticast mode [ 483.584890][T15723] lo speed is unknown, defaulting to 1000 [ 483.834911][T15866] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 484.160902][T15873] __nla_validate_parse: 4 callbacks suppressed [ 484.160923][T15873] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2532'. [ 484.160940][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2532'. [ 484.160954][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 484.398966][T15879] erspan0: entered promiscuous mode [ 484.420150][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 484.527812][T15891] netlink: 'syz.2.2533': attribute type 9 has an invalid length. [ 484.573665][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2538'. [ 484.575674][T15896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2538'. [ 484.646001][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2538'. [ 484.858658][T15910] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 485.134977][T15924] netlink: 'syz.2.2544': attribute type 2 has an invalid length. [ 485.135001][T15924] netlink: 'syz.2.2544': attribute type 2 has an invalid length. [ 485.168091][T15925] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 485.215681][T15925] 8021q: adding VLAN 0 to HW filter on device bond13 [ 485.235690][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 485.348802][T15939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2549'. [ 485.484404][T15951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2550'. [ 485.574733][T15957] syz.0.2551: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 485.574986][T15957] CPU: 1 UID: 0 PID: 15957 Comm: syz.0.2551 Not tainted syzkaller #0 PREEMPT(full) [ 485.575011][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 485.575025][T15957] Call Trace: [ 485.575034][T15957] [ 485.575043][T15957] dump_stack_lvl+0xe8/0x150 [ 485.575081][T15957] warn_alloc+0x24d/0x270 [ 485.575126][T15957] ? kasan_save_track+0x4f/0x80 [ 485.575176][T15957] ? kasan_save_track+0x3e/0x80 [ 485.575205][T15957] ? __pfx_warn_alloc+0x10/0x10 [ 485.575246][T15957] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 485.575342][T15957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.575387][T15957] __vmalloc_node_range_noprof+0x127/0x1540 [ 485.575438][T15957] ? rcu_is_watching+0x16/0xb0 [ 485.575474][T15957] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 485.575499][T15957] ? __kmalloc_cache_noprof+0x321/0x600 [ 485.575528][T15957] ? __kmalloc_cache_noprof+0x14d/0x600 [ 485.575554][T15957] ? xskq_create+0x56/0x220 [ 485.575618][T15957] xskq_create+0x148/0x220 [ 485.575641][T15957] ? xsk_init_queue+0x8a/0xe0 [ 485.575703][T15957] xsk_init_queue+0x8a/0xe0 [ 485.575742][T15957] xsk_setsockopt+0x52a/0x960 [ 485.575779][T15957] ? __pfx_xsk_setsockopt+0x10/0x10 [ 485.575815][T15957] ? __pfx_aa_sk_perm+0x10/0x10 [ 485.575913][T15957] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 485.575946][T15957] ? __pfx_xsk_setsockopt+0x10/0x10 [ 485.575982][T15957] do_sock_setsockopt+0x17c/0x1b0 [ 485.576015][T15957] __x64_sys_setsockopt+0x13d/0x1b0 [ 485.576044][T15957] do_syscall_64+0x166/0x520 [ 485.576113][T15957] ? trace_irq_disable+0x3b/0x140 [ 485.576146][T15957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.576170][T15957] ? clear_bhb_loop+0x70/0xc0 [ 485.576198][T15957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.576221][T15957] RIP: 0033:0x7f84c779e559 [ 485.576242][T15957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.576262][T15957] RSP: 002b:00007f84c86d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 485.576286][T15957] RAX: ffffffffffffffda RBX: 00007f84c7a26180 RCX: 00007f84c779e559 [ 485.576303][T15957] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 485.576317][T15957] RBP: 00007f84c78358b0 R08: 0000000000000004 R09: 0000000000000000 [ 485.576331][T15957] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 485.576346][T15957] R13: 00007f84c7a26218 R14: 00007f84c7a26180 R15: 00007ffe0de3d108 [ 485.576383][T15957] [ 485.601874][T15957] Mem-Info: [ 485.601913][T15957] active_anon:10293 inactive_anon:0 isolated_anon:0 [ 485.601913][T15957] active_file:0 inactive_file:42953 isolated_file:0 [ 485.601913][T15957] unevictable:0 dirty:73 writeback:0 [ 485.601913][T15957] slab_reclaimable:12093 slab_unreclaimable:112206 [ 485.601913][T15957] mapped:29609 shmem:955 pagetables:5876 [ 485.601913][T15957] sec_pagetables:0 bounce:0 [ 485.601913][T15957] kernel_misc_reclaimable:0 [ 485.601913][T15957] free:1296525 free_pcp:7606 free_cma:0 [ 485.602520][T15957] Node 0 active_anon:41172kB inactive_anon:0kB active_file:0kB inactive_file:171600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118436kB dirty:292kB writeback:0kB shmem:3820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14944kB pagetables:23396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 485.602665][T15957] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 485.602806][T15957] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.602962][T15957] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 485.603064][T15957] Node 0 DMA32 free:1229408kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41172kB inactive_anon:0kB active_file:0kB inactive_file:171600kB unevictable:0kB writepending:292kB zspages:0kB present:3129332kB managed:2527516kB mlocked:0kB bounce:0kB free_pcp:30424kB local_pcp:17820kB free_cma:0kB [ 485.603237][T15957] lowmem_reserve[]: 0 0 0 0 0 [ 485.603364][T15957] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.609847][T15957] lowmem_reserve[]: 0 0 0 0 0 [ 485.638367][T15957] Node 1 Normal free:3941332kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.638547][T15957] lowmem_reserve[]: 0 0 0 0 0 [ 485.638644][T15957] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 485.639016][T15957] Node 0 DMA32: 408*4kB (UM) 2242*8kB (UM) 1225*16kB (UM) 2663*32kB (UME) 1648*64kB (UME) 1199*128kB (UM) 813*256kB (UME) 474*512kB (UME) 196*1024kB (UM) 9*2048kB (UME) 43*4096kB (UM) = 1229408kB [ 485.639556][T15957] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 485.639842][T15957] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 8*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3941332kB [ 485.663157][T15957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.663209][T15957] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.663252][T15957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.663302][T15957] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.663358][T15957] 43979 total pagecache pages [ 485.663395][T15957] 0 pages in swap cache [ 485.663415][T15957] Free swap = 124996kB [ 485.663430][T15957] Total swap = 124996kB [ 485.663452][T15957] 2097051 pages RAM [ 485.663473][T15957] 0 pages HighMem/MovableOnly [ 485.663487][T15957] 433556 pages reserved [ 485.663509][T15957] 0 pages cma reserved [ 486.541272][T15963] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 486.578461][T15963] bond4 (unregistering): Released all slaves [ 486.921163][T15983] netlink: 'syz.2.2556': attribute type 3 has an invalid length. [ 486.921186][T15983] netlink: 'syz.2.2556': attribute type 2 has an invalid length. [ 487.059512][T15985] PKCS7: Unknown OID: [4] (bad) [ 487.059542][T15985] PKCS7: Only support pkcs7_signedData type [ 487.219253][T15999] tipc: Enabled bearer , priority 10 [ 487.455222][T16004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 488.295373][ T31] audit: type=1107 audit(1792121045.704:3): pid=16041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='l>äz7ï‡ZÝô0Æ5†z½ó²ÖPø'ç[¸t.ši/ð_Ù;`}7µ²nCn‚æOr»°‰Òñ:X@3Éô1ðVrÎów+3óZµ½‹V`t;3µñ/Ò6jÉx¡ý¿ëô ' [ 488.463017][T16051] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 488.649095][T16061] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 488.765115][T16061] bond16: entered promiscuous mode [ 488.765744][T16061] 8021q: adding VLAN 0 to HW filter on device bond16 [ 488.816420][T16068] bond16: (slave bridge9): making interface the new active one [ 488.816449][T16068] bridge9: entered promiscuous mode [ 488.817754][T16068] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 488.851089][T16074] netlink: Setting conntrack mark requires 'commit' flag. [ 488.851123][T16074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.124141][T16081] tipc: Enabled bearer , priority 10 [ 489.298725][T16095] __nla_validate_parse: 6 callbacks suppressed [ 489.298746][T16095] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2585'. [ 489.361915][T16088] netlink: 'syz.3.2583': attribute type 4 has an invalid length. [ 489.532656][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.568765][T16104] netlink: 'syz.0.2587': attribute type 11 has an invalid length. [ 489.824293][T16114] .`: (slave team0): Releasing backup interface [ 489.857964][T16114] team0: Cannot enslave team device to itself [ 490.171413][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 490.224252][T16129] bond4: entered promiscuous mode [ 490.224898][T16129] bond4: entered allmulticast mode [ 490.226213][T16129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.232431][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 490.232662][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 490.232881][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 490.287385][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 490.287666][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 490.330077][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 490.330328][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 490.330565][T16127] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 491.631075][T16192] netlink: 'syz.2.2607': attribute type 16 has an invalid length. [ 491.631097][T16192] netlink: 'syz.2.2607': attribute type 17 has an invalid length. [ 491.631208][T16192] lo: left promiscuous mode [ 491.684890][T16192] 0ªX¹¦Dö»: left allmulticast mode [ 491.748805][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2608'. [ 491.812926][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 491.821839][T16192] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.845005][T16192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 491.864712][T16192] bond7: left promiscuous mode [ 491.864738][T16192] bond7: left allmulticast mode [ 491.870869][T16192] 8021q: adding VLAN 0 to HW filter on device bond10 [ 491.872047][T16192] ip6tnl1: left allmulticast mode [ 491.909226][T16192] 8021q: adding VLAN 0 to HW filter on device bond11 [ 491.911852][T16192] 8021q: adding VLAN 0 to HW filter on device bond12 [ 491.928304][T16192] macsec2: left promiscuous mode [ 491.928468][T16192] macsec2: left allmulticast mode [ 491.928488][T16192] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 492.005850][T16198] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2609'. [ 492.087062][T16204] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2609'. [ 492.316764][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2616'. [ 492.852992][ T8572] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 492.853217][ T8572] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 492.883682][ T5734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 492.896175][T16236] netlink: 'syz.4.2623': attribute type 3 has an invalid length. [ 492.922480][T12332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 493.309500][T16257] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 493.351670][T16257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 493.389214][T16256] tipc: Enabling of bearer rejected, already enabled [ 493.574204][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 493.701630][T16271] C: entered promiscuous mode [ 493.711668][T16271] C: left promiscuous mode [ 493.732761][ T5734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 493.906183][T16284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2640'. [ 493.906485][T16285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2640'. [ 494.090461][T16283] bond17: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 494.107199][T16283] bond17 (unregistering): Released all slaves [ 494.360504][T16302] netlink: 'syz.0.2644': attribute type 3 has an invalid length. [ 494.672360][T12332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.730980][T16336] syzkaller0: entered promiscuous mode [ 494.731004][T16336] syzkaller0: entered allmulticast mode [ 495.315489][ T5734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 495.342961][T16365] syzkaller0: left allmulticast mode [ 495.357768][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.358405][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.363985][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.364884][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.374543][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.415160][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.415499][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.418179][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.419394][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.420546][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.420905][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.421192][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.425454][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.439009][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.460804][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.462018][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.525667][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.526005][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.526299][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.526696][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.527000][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.529946][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.530260][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.534939][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.564950][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.575443][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.576231][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.625183][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.625528][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.625819][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.626110][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.626386][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.626685][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 495.721201][T16371] netlink: 'syz.0.2663': attribute type 4 has an invalid length. [ 496.086386][T16381] nbd: nbd1645 already in use [ 496.348359][T16397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2669'. [ 496.612260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.448752][T16456] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2681'. [ 497.936664][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 497.994013][T16479] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 498.009712][T16475] syzkaller1: entered promiscuous mode [ 498.009757][T16475] syzkaller1: entered allmulticast mode [ 498.027198][T16475] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 498.031834][T16479] xt_hashlimit: size too large, truncated to 1048576 [ 498.060485][T16482] netlink: 'syz.2.2692': attribute type 10 has an invalid length. [ 498.106250][T16482] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 498.167844][T16475] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2689'. [ 498.441796][T16493] netlink: 13508 bytes leftover after parsing attributes in process `syz.2.2694'. [ 498.545743][T16498] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2697'. [ 498.545770][T16498] netlink: 'syz.1.2697': attribute type 9 has an invalid length. [ 498.683952][T16503] Bluetooth: MGMT ver 1.23 [ 498.704558][T16511] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 498.709364][T16511] xt_hashlimit: size too large, truncated to 1048576 [ 498.945753][T16534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2706'. [ 499.009561][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2708'. [ 499.022328][T16537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2708'. [ 499.022350][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2708'. [ 499.130585][T16538] bond0: ARP target 8.4.0.0 is already present [ 499.130612][T16538] bond0: option arp_ip_target: invalid value (1032) [ 499.246134][T16542] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 499.246468][T16542] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 499.246759][T16542] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 499.247036][T16542] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 499.247320][T16542] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 499.270447][ T4984] udevd[4984]: worker [13870] /devices/virtual/block/nbd0 is taking a long time [ 499.285051][T16542] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 499.285726][T16542] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 499.314680][T16542] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 499.416576][T16550] xt_hashlimit: size too large, truncated to 1048576 [ 499.575036][ T1697] block nbd0: Possible stuck request ffff8880284be000: control (read@0,1024B). Runtime 60 seconds [ 499.575082][ T1697] block nbd0: Possible stuck request ffff8880284be1c0: control (read@1024,1024B). Runtime 60 seconds [ 499.575112][ T1697] block nbd0: Possible stuck request ffff8880284be380: control (read@2048,1024B). Runtime 60 seconds [ 499.575141][ T1697] block nbd0: Possible stuck request ffff8880284be540: control (read@3072,1024B). Runtime 60 seconds [ 500.009962][T16575] bridge0: left allmulticast mode [ 500.165409][T16585] netlink: NAT attribute has 4 unknown bytes [ 500.165447][T16585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.372352][T16593] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 500.500088][T16590] vlan0 (unregistering): left allmulticast mode [ 500.500122][T16590] veth0_vlan: left allmulticast mode [ 501.428472][T16641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 501.495415][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.607770][T16661] __nla_validate_parse: 3 callbacks suppressed [ 501.607794][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'. [ 501.727641][T16663] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 502.085993][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 502.280816][T16687] veth3: entered allmulticast mode [ 502.360538][T16696] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 502.451763][T16697] sctp: [Deprecated]: syz.3.2741 (pid 16697) Use of int in maxseg socket option. [ 502.451763][T16697] Use struct sctp_assoc_value instead [ 503.188952][T16729] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 503.208157][T16729] bond14 (unregistering): Released all slaves [ 503.385082][T16752] openvswitch: netlink: Unknown key attributes 20 [ 503.427186][T16753] validate_nla: 25 callbacks suppressed [ 503.427208][T16753] netlink: 'syz.1.2756': attribute type 23 has an invalid length. [ 503.854807][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2760'. [ 503.957878][T16775] netlink: 'syz.1.2761': attribute type 7 has an invalid length. [ 504.041620][T16775] netlink: 'syz.1.2761': attribute type 7 has an invalid length. [ 504.066965][T16777] lo: entered promiscuous mode [ 504.071966][T16777] netlink: 'syz.2.2762': attribute type 2 has an invalid length. [ 504.071990][T16777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.191856][T16785] syzkaller0: entered promiscuous mode [ 504.191881][T16785] syzkaller0: entered allmulticast mode [ 504.241992][ T5625] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 504.450682][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 504.451164][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 504.536570][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 504.536944][T16795] xt_cgroup: path and classid specified [ 504.569851][T16803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.590890][T16801] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 504.692561][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 505.027746][T16818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2778'. [ 505.067053][T16822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2779'. [ 505.139503][T16822] 8021q: adding VLAN 0 to HW filter on device bond17 [ 505.168438][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 505.267322][T16822] ipvlan0: entered allmulticast mode [ 505.267347][T16822] bond17: entered allmulticast mode [ 505.440894][T16845] nla_validate_range_unsigned: 44 callbacks suppressed [ 505.440918][T16845] netlink: 'syz.4.2787': attribute type 11 has an invalid length. [ 505.440934][T16845] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2787'. [ 505.693563][T16854] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 506.297475][T16870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.549272][T16866] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 506.749404][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2798'. [ 506.749433][T16885] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2798'. [ 506.976865][T16899] netlink: 'syz.1.2804': attribute type 3 has an invalid length. [ 506.976890][T16899] netlink: 'syz.1.2804': attribute type 1 has an invalid length. [ 507.051675][T16899] 8021q: VLANs not supported on ip6_vti0 [ 507.124886][T16906] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2805'. [ 507.150370][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 507.190311][T16906] bond0 (unregistering): (slave bond1): Releasing backup interface [ 507.226520][T16906] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 507.249425][T16906] bond0 (unregistering): Released all slaves [ 507.556885][T16925] netlink: 'syz.1.2810': attribute type 10 has an invalid length. [ 507.586169][T16925] bond7: (slave veth0_to_bond): Releasing active interface [ 507.615652][T16925] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 508.002971][T16948] syzkaller1: entered promiscuous mode [ 508.002997][T16948] syzkaller1: entered allmulticast mode [ 508.159785][T16961] ip_tables: iptables: counters copy to user failed while replacing table [ 508.185504][T16953] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2817'. [ 508.222453][T16958] netlink: 10623 bytes leftover after parsing attributes in process `syz.1.2820'. [ 508.222765][T16956] netlink: 10623 bytes leftover after parsing attributes in process `syz.1.2820'. [ 508.416193][T16964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2824'. [ 508.560587][T16966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2823'. [ 508.576267][T16966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2823'. [ 508.599378][T16978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.599702][T16978] batadv_slave_0: entered allmulticast mode [ 508.860289][T16950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 508.860316][T16950] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 508.959498][T16996] netlink: 'syz.4.2830': attribute type 1 has an invalid length. [ 508.974272][T16950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 508.974297][T16950] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 509.017141][T16950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 509.017167][T16950] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 509.071618][T16950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 509.071643][T16950] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 510.136711][T17033] 8021q: adding VLAN 0 to HW filter on device .` [ 510.174427][T17033] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 510.609212][T17059] Bluetooth: MGMT ver 1.23 [ 511.028922][T17072] 8021q: adding VLAN 0 to HW filter on device bond9 [ 512.059379][T17139] __nla_validate_parse: 9 callbacks suppressed [ 512.059401][T17139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2860'. [ 513.012334][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.068165][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 513.082378][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 513.083351][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 513.087889][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 513.109688][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 513.176237][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 513.181775][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 513.185519][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 513.186496][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 513.187134][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 513.589143][T17190] netlink: 'syz.1.2869': attribute type 21 has an invalid length. [ 513.589227][T17190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2869'. [ 513.657459][T17193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'. [ 513.741037][T17195] netlink: NAT attribute has 8 unknown bytes [ 513.741070][T17195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.838464][T17193] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2870'. [ 513.918492][T17196] netlink: 'syz.0.2870': attribute type 18 has an invalid length. [ 513.918519][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'. [ 513.919405][T17196] netlink: 'syz.0.2870': attribute type 18 has an invalid length. [ 513.919424][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'. [ 514.097510][T17209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2874'. [ 514.152789][ T8572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.152829][ T8572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.251783][T17213] ip_tables: iptables: counters copy to user failed while replacing table [ 514.259074][T17213] netlink: 'syz.0.2875': attribute type 4 has an invalid length. [ 514.313295][T17218] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2877'. [ 514.323131][T17219] openvswitch: netlink: IP tunnel dst address not specified [ 514.388674][ T8572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.388714][ T8572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.639977][T17230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.740375][T17230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.740404][T17230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.087626][T17230] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 515.087654][T17230] batman_adv: batadv0: Removing interface: ipvlan2 [ 515.089154][T17230] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 515.089176][T17230] batman_adv: batadv0: Removing interface: ipvlan3 [ 515.090343][T17230] batman_adv: batadv0: Interface deactivated: veth0 [ 515.090363][T17230] batman_adv: batadv0: Removing interface: veth0 [ 515.272346][ T5625] Bluetooth: hci5: command tx timeout [ 515.279474][ T8572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.279511][ T8572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.378166][T17244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2880'. [ 515.378406][T17244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2880'. [ 515.531735][ T8572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.531780][ T8572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.599767][T17171] lo speed is unknown, defaulting to 1000 [ 516.004026][T17268] macvlan0: entered promiscuous mode [ 516.178225][ T8572] pim6reg527: left allmulticast mode [ 516.198694][ T8572] tipc: Resetting bearer [ 516.207942][ T8572] tipc: Resetting bearer [ 516.441061][ T8572] tipc: Disabling bearer [ 516.689381][ T8572] bond8 (unregistering): (slave geneve2): Releasing active interface [ 516.733409][ T8572] tipc: Disabling bearer [ 516.786610][ T8572] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 516.801332][ T8572] bond1 (unregistering): Released all slaves [ 516.816151][ T8572] bond2 (unregistering): Released all slaves [ 516.837886][ T8572] bond3 (unregistering): Released all slaves [ 516.863279][ T8572] bond4 (unregistering): Released all slaves [ 517.016915][ T8572] bond5 (unregistering): Released all slaves [ 517.161496][ T8572] bond6 (unregistering): Released all slaves [ 517.271515][ T8572] bond7 (unregistering): Released all slaves [ 517.332243][ T5625] Bluetooth: hci5: command tx timeout [ 517.395722][ T8572] bond8 (unregistering): Released all slaves [ 517.419394][ T8572] bond9 (unregistering): Released all slaves [ 517.449860][ T8572] bond10 (unregistering): Released all slaves [ 517.473967][ T8572] bond11 (unregistering): Released all slaves [ 517.490331][ T8572] bond12 (unregistering): Released all slaves [ 517.526324][ T8572] bond13 (unregistering): Released all slaves [ 517.755520][ T8572] tipc: Left network mode [ 517.889498][T17294] netlink: 'syz.1.2895': attribute type 9 has an invalid length. [ 518.329763][T17302] ip_tables: iptables: counters copy to user failed while replacing table [ 518.990557][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 519.012132][T17303] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 519.012154][T17303] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 519.342304][T17339] __nla_validate_parse: 32 callbacks suppressed [ 519.342325][T17339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2903'. [ 519.346025][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2904'. [ 519.696636][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 519.702607][T17171] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.702742][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.702926][T17171] bridge_slave_0: entered allmulticast mode [ 519.733429][T17171] bridge_slave_0: entered promiscuous mode [ 519.755763][T17171] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.755849][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.755977][T17171] bridge_slave_1: entered allmulticast mode [ 519.760341][T17171] bridge_slave_1: entered promiscuous mode [ 519.994013][T17171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.005124][T17171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.140201][T17171] team0: Port device team_slave_0 added [ 520.166035][T17171] team0: Port device team_slave_1 added [ 520.323122][T17171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.323185][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.323210][T17171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.413600][T17171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.413619][T17171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.413649][T17171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.494325][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 520.669703][T17385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2911'. [ 520.731069][T17390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.731821][T17390] openvswitch: netlink: IPv4 tunnel dst address is zero [ 520.841639][T17171] hsr_slave_0: entered promiscuous mode [ 520.850930][T17171] hsr_slave_1: entered promiscuous mode [ 522.015381][T17433] netlink: 'syz.0.2922': attribute type 83 has an invalid length. [ 522.015648][T17434] netlink: 'syz.0.2922': attribute type 83 has an invalid length. [ 522.188097][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 522.370838][ T8572] hsr_slave_0: left promiscuous mode [ 522.371886][ T8572] hsr_slave_1: left promiscuous mode [ 522.425109][T17445] xt_socket: unknown flags 0x8 [ 522.429203][ T8572] veth1_macvtap: left promiscuous mode [ 522.429252][ T8572] veth0_macvtap: left promiscuous mode [ 522.459063][T17447] netlink: 'syz.4.2925': attribute type 6 has an invalid length. [ 522.479497][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 522.479551][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 523.039958][T17443] syzkaller1: entered promiscuous mode [ 523.039983][T17443] syzkaller1: entered allmulticast mode [ 523.357513][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2926'. [ 523.378031][T17454] batman_adv: batadv0: Adding interface: veth0 [ 523.378054][T17454] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.378089][T17454] batman_adv: batadv0: Interface activated: veth0 [ 523.378899][T17456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.378919][T17456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.381654][T17456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.381676][T17456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.441284][T17456] batman_adv: batadv0: Interface deactivated: veth0 [ 523.441342][T17456] batman_adv: batadv0: Removing interface: veth0 [ 523.750827][ T8572] IPVS: stop unused estimator thread 0... [ 524.058840][T17171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.075485][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.076566][T17171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.080004][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 524.081754][T17171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 524.114754][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.115760][T17171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 524.119156][T17171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.370255][T17171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.438612][T17171] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.463905][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.464115][ T8582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.501373][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.501490][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.551314][T17500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2934'. [ 524.581845][T17503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2934'. [ 525.283520][T17547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2941'. [ 525.395528][T17552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2941'. [ 525.637025][T17563] netlink: 'syz.4.2942': attribute type 2 has an invalid length. [ 525.637049][T17563] netlink: 'syz.4.2942': attribute type 8 has an invalid length. [ 525.637064][T17563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2942'. [ 525.775211][T17171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.936326][T17171] veth0_vlan: entered promiscuous mode [ 525.967288][T17171] veth1_vlan: entered promiscuous mode [ 526.206182][T17171] veth0_macvtap: entered promiscuous mode [ 526.227300][T17592] netlink: 'syz.1.2947': attribute type 2 has an invalid length. [ 526.227322][T17592] netlink: 'syz.1.2947': attribute type 11 has an invalid length. [ 526.227337][T17592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2947'. [ 526.228525][T17588] batman_adv: batadv0: Adding interface: syzkaller0 [ 526.228544][T17588] batman_adv: batadv0: Interface activated: syzkaller0 [ 526.301465][T17588] netlink: 'syz.1.2947': attribute type 1 has an invalid length. [ 526.343045][T17171] veth1_macvtap: entered promiscuous mode [ 526.385044][T17171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.422723][T17171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.487718][T17602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 526.502897][T17602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.511663][T17602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.535592][T17602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.540397][T17602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.626801][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 526.641365][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.652911][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.661888][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.678081][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.746454][T17587] geneve3: entered allmulticast mode [ 526.774869][ T1139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.793650][ T8450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.793704][ T8450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.793745][ T8450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.159852][ T8582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.159876][ T8582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.368630][ T8572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.368654][ T8572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.409967][T17627] netlink: 'syz.1.2952': attribute type 1 has an invalid length. [ 527.409989][T17627] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2952'. [ 527.540253][T17629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 527.699119][T17642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2956'. [ 527.699421][T17640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2956'. [ 528.309888][T17661] openvswitch: netlink: IPv6 tunnel dst address is zero [ 528.472367][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a3277800: rx timeout, send abort [ 528.651487][T17597] lo speed is unknown, defaulting to 1000 [ 528.773805][ T5625] Bluetooth: hci4: command tx timeout [ 528.972687][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a3277800: abort rx timeout. Force session deactivation [ 528.974775][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a3276400: rx timeout, send abort [ 529.069884][T17657] siw: device registration error -23 [ 529.266307][T17687] netlink: 'syz.1.2966': attribute type 3 has an invalid length. [ 529.266500][T17687] netlink: 'syz.1.2966': attribute type 3 has an invalid length. [ 529.474830][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a3276400: abort rx timeout. Force session deactivation [ 529.664284][ T1697] block nbd0: Possible stuck request ffff8880284be000: control (read@0,1024B). Runtime 90 seconds [ 529.664327][ T1697] block nbd0: Possible stuck request ffff8880284be1c0: control (read@1024,1024B). Runtime 90 seconds [ 529.664355][ T1697] block nbd0: Possible stuck request ffff8880284be380: control (read@2048,1024B). Runtime 90 seconds [ 529.664381][ T1697] block nbd0: Possible stuck request ffff8880284be540: control (read@3072,1024B). Runtime 90 seconds [ 529.834202][T17697] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 529.941757][T17718] ip_tables: iptables: counters copy to user failed while replacing table [ 529.979951][T17720] __nla_validate_parse: 5 callbacks suppressed [ 529.979974][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2972'. [ 530.034651][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2972'. [ 530.349123][T17730] netlink: 'syz.1.2973': attribute type 18 has an invalid length. [ 530.349149][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'. [ 530.349393][T17730] netlink: 'syz.1.2973': attribute type 18 has an invalid length. [ 530.349411][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'. [ 530.389291][T17597] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.389436][T17597] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.389649][T17597] bridge_slave_0: entered allmulticast mode [ 530.410195][T17597] bridge_slave_0: entered promiscuous mode [ 530.436644][T17597] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.436781][T17597] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.436953][T17597] bridge_slave_1: entered allmulticast mode [ 530.502404][T17742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2974'. [ 530.502442][T17742] netlink: 'syz.2.2974': attribute type 7 has an invalid length. [ 530.502457][T17742] netlink: 'syz.2.2974': attribute type 8 has an invalid length. [ 530.502470][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 530.506242][T17597] bridge_slave_1: entered promiscuous mode [ 530.591050][T17740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2975'. [ 530.659842][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 530.659872][T17746] openvswitch: netlink: Flow actions attr not present in new flow. [ 530.720810][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'. [ 530.852580][ T5625] Bluetooth: hci4: command tx timeout [ 531.286734][T17597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.310135][T17597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.405018][T17597] team0: Port device team_slave_0 added [ 531.423882][T17597] team0: Port device team_slave_1 added [ 531.496432][T17597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.496452][T17597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.496481][T17597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.500133][T17597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.500149][T17597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.500177][T17597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.667314][T17597] hsr_slave_0: entered promiscuous mode [ 531.668362][T17597] hsr_slave_1: entered promiscuous mode [ 531.669090][T17597] debugfs: 'hsr0' already exists in 'hsr' [ 531.669110][T17597] Cannot create hsr debugfs directory [ 531.815480][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 532.498501][T17800] nbd: must specify at least one socket [ 532.576670][T17597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 532.598457][T17597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.599998][T17597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 532.621655][T17597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.700621][T17597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.721870][T17597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.732956][T17597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.761944][T17597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.771948][T17814] tipc: Enabled bearer , priority 0 [ 532.860928][T17816] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 532.866000][T17816] bond10 (unregistering): Released all slaves [ 532.933428][ T5625] Bluetooth: hci4: command tx timeout [ 533.517479][T17597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.600324][T17597] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.638235][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.638344][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.696984][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.697113][ T8442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.777574][T17873] netlink: 'syz.0.3002': attribute type 1 has an invalid length. [ 533.895485][ T5726] tipc: Node number set to 801814721 [ 534.508205][T17902] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 535.012205][ T5625] Bluetooth: hci4: command tx timeout [ 535.021143][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cee3800: rx timeout, send abort [ 535.023314][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802cee3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 535.396742][T17930] netlink: 'syz.1.3010': attribute type 1 has an invalid length. [ 535.495192][T17930] 8021q: adding VLAN 0 to HW filter on device bond11 [ 535.637440][T17936] bond11: (slave syz_tun): Enslaving as an active interface with an up link [ 535.667690][T17597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.905165][T17951] netlink: 'syz.1.3013': attribute type 1 has an invalid length. [ 536.137830][T17950] bond12: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 536.386804][T17973] __nla_validate_parse: 1 callbacks suppressed [ 536.386825][T17973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3018'. [ 536.600520][T17975] netlink: 'syz.4.3018': attribute type 10 has an invalid length. [ 536.618210][T17975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.649787][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3018'. [ 536.649810][T17973] openvswitch: netlink: Flow actions attr not present in new flow. [ 536.690808][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'. [ 536.707980][T17979] bond1: invalid ARP target 0.0.0.0 specified for addition [ 536.708006][T17979] bond1: option arp_ip_target: invalid value (0) [ 536.710057][T17979] bond1 (unregistering): Released all slaves [ 536.971959][T17597] veth0_vlan: entered promiscuous mode [ 537.039189][T17597] veth1_vlan: entered promiscuous mode [ 537.050866][T17997] ip_tables: iptables: counters copy to user failed while replacing table [ 537.131543][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3021'. [ 537.131579][T17997] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3021'. [ 537.166605][T17997] geneve2: entered promiscuous mode [ 537.166630][T17997] geneve2: entered allmulticast mode [ 537.310054][T17597] veth0_macvtap: entered promiscuous mode [ 537.353000][T17597] veth1_macvtap: entered promiscuous mode [ 537.475072][T17597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.585820][T17597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.654423][ T8574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.773943][ T8442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.774034][ T8442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.774075][ T8442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.970187][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.970211][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.206349][ T8448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.206375][ T8448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.518098][T18062] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3033'. [ 538.518126][T18062] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3033'. [ 538.708698][T18061] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3032'. [ 539.330854][T17602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 539.345631][T17602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 539.349889][T17602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 539.360309][T17602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 539.377392][T17602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 540.210570][T18111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3043'. [ 540.235702][T18111] netlink: 'syz.1.3043': attribute type 2 has an invalid length. [ 540.235725][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'. [ 541.121649][T18092] lo speed is unknown, defaulting to 1000 [ 541.417140][ T5625] Bluetooth: hci6: command tx timeout [ 542.149929][T18195] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3067'. [ 542.166703][T18195] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3067'. [ 542.463507][T18092] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.463618][T18092] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.463779][T18092] bridge_slave_0: entered allmulticast mode [ 542.467213][T18216] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 542.468583][T18092] bridge_slave_0: entered promiscuous mode [ 542.530796][T18092] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.530972][T18092] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.531135][T18092] bridge_slave_1: entered allmulticast mode [ 542.560352][T18092] bridge_slave_1: entered promiscuous mode [ 542.616100][T18092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.619952][T18092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.692648][T18092] team0: Port device team_slave_0 added [ 542.699107][T18092] team0: Port device team_slave_1 added [ 542.777749][T18092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.777768][T18092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.777796][T18092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.780161][T18092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.780176][T18092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.780211][T18092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.074483][T18237] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3073'. [ 543.095479][T18237] netlink: 'syz.1.3073': attribute type 4 has an invalid length. [ 543.109997][T18238] x_tables: ip_tables: osf match: only valid for protocol 6 [ 543.125997][T18092] hsr_slave_0: entered promiscuous mode [ 543.127090][T18092] hsr_slave_1: entered promiscuous mode [ 543.128027][T18092] debugfs: 'hsr0' already exists in 'hsr' [ 543.128065][T18092] Cannot create hsr debugfs directory [ 543.128408][T18238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.340346][T18234] syzkaller1: entered promiscuous mode [ 543.340370][T18234] syzkaller1: entered allmulticast mode [ 543.417194][T18243] xt_IDLETIMER: label is empty or not nul-terminated [ 543.493089][ T5625] Bluetooth: hci6: command tx timeout [ 543.497132][T18251] xt_hashlimit: size too large, truncated to 1048576 [ 543.678911][T18258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3080'. [ 543.692508][T18092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.692545][T18092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.798572][T18264] veth1_macvtap: left promiscuous mode [ 543.798611][T18264] macsec0: entered allmulticast mode [ 543.909131][T18092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.909170][T18092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.944955][T18264] veth1_macvtap: entered promiscuous mode [ 543.944980][T18264] veth1_macvtap: entered allmulticast mode [ 543.945076][T18264] macsec0: left allmulticast mode [ 543.945090][T18264] veth1_macvtap: left allmulticast mode [ 544.086304][T18092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.086344][T18092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.129675][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 544.232978][T18275] SET target dimension over the limit! [ 544.258174][T18271] syzkaller0: entered promiscuous mode [ 544.258200][T18271] syzkaller0: entered allmulticast mode [ 544.316239][T18092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.324473][T18092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.330394][T18280] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3084'. [ 544.449688][T18279] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3086'. [ 544.612971][T18287] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 544.613168][T18287] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 544.613314][T18287] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 544.613453][T18287] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 544.615522][T18287] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 544.615663][T18287] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 544.615800][T18287] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 544.620795][T18287] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 544.731514][T18092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 544.744893][T18092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.745737][T18092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 544.773657][T18092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.776587][T18092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 544.781613][T18092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.794553][T18092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 544.836357][T18092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.921988][T18300] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 544.989385][T18092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.030705][T18092] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.069472][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.069584][ T8450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.121961][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.122129][ T8574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.326862][T18312] xt_hashlimit: size too large, truncated to 1048576 [ 545.572895][ T5625] Bluetooth: hci6: command tx timeout [ 545.577567][T18323] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3096'. [ 545.615855][T18326] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3096'. [ 545.707087][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3100'. [ 546.047283][T18350] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 546.105064][T18352] bond1: entered promiscuous mode [ 546.126052][T18358] macvlan2: entered promiscuous mode [ 546.126076][T18358] macvlan2: entered allmulticast mode [ 546.126968][T18358] bond1: (slave macvlan2): Opening slave failed [ 546.649784][T18092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.791130][T18388] xt_hashlimit: size too large, truncated to 1048576 [ 547.129653][T18092] veth0_vlan: entered promiscuous mode [ 547.147247][T18092] veth1_vlan: entered promiscuous mode [ 547.214319][T18092] veth0_macvtap: entered promiscuous mode [ 547.235147][T18092] veth1_macvtap: entered promiscuous mode [ 547.248557][T18401] __nla_validate_parse: 1 callbacks suppressed [ 547.248578][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3114'. [ 547.304582][T18092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.402115][T18092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.442262][ T8572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.461639][ T8576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.489652][ T8572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.491605][ T8448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.703155][ T5625] Bluetooth: hci6: command tx timeout [ 547.990469][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3116'. [ 548.840712][T18429] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3121'. [ 548.869791][T18427] validate_nla: 26 callbacks suppressed [ 548.869811][T18427] netlink: 'syz.0.3122': attribute type 10 has an invalid length. [ 549.046422][T18427] bond0: (slave bond_slave_0): Releasing backup interface [ 549.119465][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3122'. [ 549.119503][T18436] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 549.175425][T18427] team0: Port device team_slave_0 removed [ 549.195878][T18437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3122'. [ 549.195912][T18437] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 549.350063][T18427] team0: Port device team_slave_1 removed [ 549.577033][T18427] bond4: (slave gre1): Releasing backup interface [ 549.577065][T18427] gre1: left promiscuous mode [ 549.661996][T18444] xt_hashlimit: size too large, truncated to 1048576 [ 549.977149][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.977177][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.392244][ T8574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.392271][ T8574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.745616][T18460] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3129'. [ 551.614978][T18472] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 551.703027][T18472] bond1 (unregistering): Released all slaves [ 552.078297][T17602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.093023][T17602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.100059][T17602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.117665][T17602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.120121][T17602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.203054][T18482] netlink: 'syz.4.3134': attribute type 1 has an invalid length. [ 552.707857][T18497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3138'. [ 553.137634][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'. [ 553.159507][T18518] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3143'. [ 553.717948][T18526] ip_tables: iptables: counters copy to user failed while replacing table [ 553.786380][T18533] netlink: 'syz.5.3145': attribute type 2 has an invalid length. [ 553.890240][T18537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3147'. [ 554.209315][T18540] 8021q: VLANs not supported on ip6_vti0 [ 554.212992][ T5625] Bluetooth: hci3: command tx timeout [ 554.768566][T18550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3150'. [ 554.768816][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3150'. [ 554.883839][T18555] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20002 [ 555.566013][T18564] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3154'. [ 555.634007][T18483] lo speed is unknown, defaulting to 1000 [ 556.303354][ T5625] Bluetooth: hci3: command tx timeout [ 557.571721][T18601] ip_tables: iptables: counters copy to user failed while replacing table [ 557.878574][T18615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3171'. [ 558.372830][ T5625] Bluetooth: hci3: command tx timeout [ 558.411018][T18616] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.226053][T18642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3178'. [ 559.739565][ T1697] block nbd0: Possible stuck request ffff8880284be000: control (read@0,1024B). Runtime 120 seconds [ 559.739611][ T1697] block nbd0: Possible stuck request ffff8880284be1c0: control (read@1024,1024B). Runtime 120 seconds [ 559.739641][ T1697] block nbd0: Possible stuck request ffff8880284be380: control (read@2048,1024B). Runtime 120 seconds [ 559.739668][ T1697] block nbd0: Possible stuck request ffff8880284be540: control (read@3072,1024B). Runtime 120 seconds [ 559.872504][T18483] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.872622][T18483] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.872783][T18483] bridge_slave_0: entered allmulticast mode [ 559.879977][T18483] bridge_slave_0: entered promiscuous mode [ 559.928161][T18483] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.945365][T18483] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.945559][T18483] bridge_slave_1: entered allmulticast mode [ 559.970682][T18483] bridge_slave_1: entered promiscuous mode [ 560.330684][T18483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.353594][T18483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.452815][ T5625] Bluetooth: hci3: command tx timeout [ 560.521470][T18666] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3186'. [ 560.552230][T18667] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3186'. [ 560.641181][T18483] team0: Port device team_slave_0 added [ 560.691044][T18483] team0: Port device team_slave_1 added [ 560.745986][T18666] gretap0: entered promiscuous mode [ 560.888959][T18667] 0ªî{X¹¦: renamed from gretap0 [ 560.956514][T18667] 0ªî{X¹¦: left promiscuous mode [ 560.956540][T18667] 0ªî{X¹¦: entered allmulticast mode [ 561.050092][T18667] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 561.400280][T18483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.400301][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.400331][T18483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.678147][T18483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.678167][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.678196][T18483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.973657][T18663] x_tables: duplicate underflow at hook 2 [ 562.141160][T18483] hsr_slave_0: entered promiscuous mode [ 562.159338][T18483] hsr_slave_1: entered promiscuous mode [ 562.161833][T18483] debugfs: 'hsr0' already exists in 'hsr' [ 562.161855][T18483] Cannot create hsr debugfs directory [ 562.935820][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.119478][T18710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3194'. [ 564.031212][T18483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.055550][T18483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.138590][T18729] trusted_key: syz.1.3201 sent an empty control message without MSG_MORE. [ 564.447938][T18719] tipc: Enabling of bearer rejected, failed to enable media [ 564.826050][T18737] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3203'. [ 564.829910][T18739] ip_tables: iptables: counters copy to user failed while replacing table [ 564.929334][T18483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.929376][T18483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.057570][T18735] tipc: Started in network mode [ 565.057606][T18735] tipc: Node identity ac1414aa, cluster identity 4711 [ 565.057862][T18735] tipc: New replicast peer: 172.20.20.187 [ 565.058775][T18735] tipc: Enabled bearer , priority 10 [ 565.196080][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3203'. [ 565.198517][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3203'. [ 565.198825][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3203'. [ 565.201879][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3203'. [ 565.497231][T18483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.497271][T18483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.621592][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3208'. [ 565.859524][T18483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.859566][T18483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.031514][T18763] netlink: 'syz.4.3207': attribute type 29 has an invalid length. [ 566.182597][ T192] tipc: Node number set to 2886997162 [ 566.847786][T18776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3213'. [ 567.005159][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3216'. [ 567.599543][T18797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3219'. [ 567.696357][T18483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.783142][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.806249][T18483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 567.834617][T18801] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 567.888698][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.903785][T18483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 567.935689][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.949558][T18483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 568.041137][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.441202][T18819] __nla_validate_parse: 64 callbacks suppressed [ 568.441225][T18819] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3223'. [ 568.590804][T18819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3223'. [ 568.907199][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.010342][T18483] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.296474][T18836] netlink: 'syz.1.3227': attribute type 2 has an invalid length. [ 569.298874][T18839] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3226'. [ 569.329177][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.329292][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.476017][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.476133][ T8583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.550873][T18836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3227'. [ 570.173782][T18849] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3229'. [ 570.871804][T18862] netlink: 'syz.2.3233': attribute type 4 has an invalid length. [ 570.911072][T18862] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3233'. [ 571.945756][T18890] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3240'. [ 572.038829][T18895] h: entered promiscuous mode [ 572.716600][T18483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.815722][T18913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3245'. [ 573.036777][T18483] veth0_vlan: entered promiscuous mode [ 573.103199][T18483] veth1_vlan: entered promiscuous mode [ 573.350249][T18483] veth0_macvtap: entered promiscuous mode [ 573.395101][T18483] veth1_macvtap: entered promiscuous mode [ 573.579461][T18483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.640544][T18483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.784019][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.786800][ T8448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.786844][ T8448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.786881][ T8448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.019040][T18932] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3252'. [ 574.715430][ T8578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.715456][ T8578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.136463][ T8572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.136488][ T8572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.419319][T18967] netlink: 'syz.1.3259': attribute type 29 has an invalid length. [ 576.446957][T18967] netlink: 'syz.1.3259': attribute type 29 has an invalid length. [ 576.781817][T18978] netlink: 'syz.5.3261': attribute type 21 has an invalid length. [ 576.815353][T18978] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3261'. [ 576.950383][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 577.029889][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 577.212285][T18993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.637634][T18996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3267'. [ 577.964967][T19000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'. [ 577.965007][T19000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'. [ 578.003893][T17602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 578.025415][T17602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 578.037057][T17602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.049767][T17602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.060777][T17602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.301680][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 578.790124][T19012] IPv6: Can't replace route, no match found [ 578.790457][T19012] IPv6: Can't replace route, no match found [ 578.845542][T19015] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3272'. [ 578.940581][T19018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3271'. [ 579.865481][ T5614] bond11: (slave syz_tun): Removing an active aggregator [ 579.866099][ T5614] bond11: (slave syz_tun): Releasing backup interface [ 579.945284][T19022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3271'. [ 580.214695][ T5625] Bluetooth: hci0: command tx timeout [ 580.678591][T19057] xt_TCPMSS: Only works on TCP SYN packets [ 581.054868][ T8442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.054911][ T8442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.600879][T19078] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 581.837934][ T8442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.837973][ T8442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.951365][T19088] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 582.292458][ T5625] Bluetooth: hci0: command tx timeout [ 582.370349][ T8442] .`: (slave netdevsim1): Releasing backup interface [ 582.419775][ T8442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.419818][ T8442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.376247][ T8442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.376311][ T8442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.661688][T19001] lo speed is unknown, defaulting to 1000 [ 584.372274][ T5625] Bluetooth: hci0: command tx timeout [ 584.598962][T19124] Cannot find set identified by id 0 to match [ 584.698042][T19122] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3295'. [ 584.767836][T19129] netlink: 'syz.0.3296': attribute type 2 has an invalid length. [ 584.770114][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 585.929052][ T8442] pimreg3: left allmulticast mode [ 585.959593][T19146] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3299'. [ 585.996701][ T8442] tipc: Resetting bearer [ 585.997344][ T8442] batman_adv: batadv0: Interface deactivated: gretap1 [ 586.111212][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 586.276704][T19151] ip_tables: iptables: counters copy to user failed while replacing table [ 586.463489][ T5625] Bluetooth: hci0: command tx timeout [ 586.885291][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3302'. [ 587.127319][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056fa9800: rx timeout, send abort [ 587.145080][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3302'. [ 587.166258][T19170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3303'. [ 587.240306][T19174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3303'. [ 587.313747][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 587.313962][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 587.314383][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 587.314595][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 587.627395][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056fa9800: abort rx timeout. Force session deactivation [ 587.630064][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880598fac00: rx timeout, send abort [ 587.652847][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880598fac00: connection exists (fe ff). last cmd: 20 [ 587.733331][ T8442] tipc: Disabling bearer [ 587.902811][ C0] vcan0: j1939_tp_rxtimer: 0xffff888088c85800: rx timeout, send abort [ 588.118696][ T8442] bond12 (unregistering): (slave ip6gretap1): Releasing backup interface [ 588.403052][ C0] vcan0: j1939_tp_rxtimer: 0xffff888088c85800: abort rx timeout. Force session deactivation [ 588.725741][ T8442] batman_adv: batadv0: Removing interface: gretap1 [ 588.793835][ T8442] bond2 (unregistering): (slave gretap3): Releasing active interface [ 588.892146][ T8442] bond8 (unregistering): (slave gretap5): Releasing active interface [ 589.064801][ T8442] bond0 (unregistering): (slave geneve2): Releasing active interface [ 589.239455][ T8442] bond1 (unregistering): (slave bridge2): Releasing active interface [ 589.273171][ T8442] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 589.273204][ T8442] bridge3 (unregistering): left promiscuous mode [ 589.280658][T19192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.450296][ T8442] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.508857][ T8442] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.525319][ T8442] .` (unregistering): (slave veth0_to_bond): Releasing backup interface [ 589.527915][ T8442] .` (unregistering): Released all slaves [ 589.561061][ T8442] bond1 (unregistering): Released all slaves [ 589.622955][ T8442] bond2 (unregistering): Released all slaves [ 589.697189][ T8442] bond3 (unregistering): Released all slaves [ 589.739995][ T8442] bond4 (unregistering): Released all slaves [ 589.769211][ T8442] bond5 (unregistering): Released all slaves [ 589.832098][ T1697] block nbd0: Possible stuck request ffff8880284be000: control (read@0,1024B). Runtime 150 seconds [ 589.832143][ T1697] block nbd0: Possible stuck request ffff8880284be1c0: control (read@1024,1024B). Runtime 150 seconds [ 589.832174][ T1697] block nbd0: Possible stuck request ffff8880284be380: control (read@2048,1024B). Runtime 150 seconds [ 589.832202][ T1697] block nbd0: Possible stuck request ffff8880284be540: control (read@3072,1024B). Runtime 150 seconds [ 589.920965][ T8442] bond6 (unregistering): Released all slaves [ 589.952196][ T8442] bond7 (unregistering): Released all slaves [ 590.310891][ T8442] bond0 (unregistering): Released all slaves [ 590.351721][ T8442] bond8 (unregistering): Released all slaves [ 590.397421][ T8442] bond9 (unregistering): Released all slaves [ 590.439302][ T8442] bond10 (unregistering): Released all slaves [ 590.508651][ T8442] bond11 (unregistering): Released all slaves [ 590.540219][ T8442] bond12 (unregistering): Released all slaves [ 590.649533][T19155] syzkaller1: entered promiscuous mode [ 590.649570][T19155] syzkaller1: entered allmulticast mode [ 590.706470][T19192] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 591.136984][ T8442] tipc: Disabling bearer [ 591.157292][ T8442] tipc: Left network mode [ 591.899831][T19203] xt_hashlimit: size too large, truncated to 1048576 [ 592.773323][T19221] __nla_validate_parse: 32 callbacks suppressed [ 592.773345][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 592.930183][T19225] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3313'. [ 593.243873][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 593.443814][ T8578] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.445504][ T8448] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.445709][ T8448] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.446584][ T8448] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.896361][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3318'. [ 593.910671][T19241] Bluetooth: MGMT ver 1.23 [ 593.910709][T19241] Bluetooth: hci0: unsupported parameter 5135 [ 593.910724][T19241] Bluetooth: hci0: unsupported parameter 8192 [ 593.910738][T19241] Bluetooth: hci0: unsupported parameter 5135 [ 593.910751][T19241] Bluetooth: hci0: unsupported parameter 8192 [ 593.949589][T19241] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3316'. [ 593.987506][T19001] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.987742][T19001] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.987890][T19001] bridge_slave_0: entered allmulticast mode [ 593.989968][T19001] bridge_slave_0: entered promiscuous mode [ 594.093154][T19237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3317'. [ 594.177666][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'. [ 594.397730][T19001] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.397848][T19001] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.398063][T19001] bridge_slave_1: entered allmulticast mode [ 594.437079][T19001] bridge_slave_1: entered promiscuous mode [ 594.939646][T19257] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.201285][T19001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.266311][T19001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.332207][T19264] netlink: 'syz.5.3323': attribute type 1 has an invalid length. [ 595.332233][T19264] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3323'. [ 595.336865][T19266] netlink: 'syz.5.3323': attribute type 1 has an invalid length. [ 595.336887][T19266] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3323'. [ 595.821486][T19001] team0: Port device team_slave_0 added [ 595.904234][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 595.949393][T19001] team0: Port device team_slave_1 added [ 596.289508][T19283] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3326'. [ 596.545669][T19001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.545690][T19001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.545723][T19001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.588715][T19001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.588735][T19001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.588764][T19001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.126437][T19301] xt_TPROXY: Can be used only with -p tcp or -p udp [ 597.188751][T19001] hsr_slave_0: entered promiscuous mode [ 597.203002][T19001] hsr_slave_1: entered promiscuous mode [ 597.209980][T19001] debugfs: 'hsr0' already exists in 'hsr' [ 597.210003][T19001] Cannot create hsr debugfs directory [ 598.004507][T19312] gretap0: entered promiscuous mode [ 598.684697][T19330] xt_hashlimit: size too large, truncated to 1048576 [ 600.040831][T19348] IPv6: NLM_F_CREATE should be specified when creating new route [ 600.041132][T19348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.041146][T19348] IPv6: NLM_F_CREATE should be set when creating new route [ 600.640132][T19355] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.456619][T19380] __nla_validate_parse: 6 callbacks suppressed [ 601.456641][T19380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3345'. [ 602.264756][T19390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.328926][T19392] netlink: 'syz.2.3349': attribute type 21 has an invalid length. [ 602.328957][T19392] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.329068][T19392] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 603.039948][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3352'. [ 603.101141][T19400] ip_tables: iptables: counters copy to user failed while replacing table [ 604.080304][ T8442] hsr_slave_0: left promiscuous mode [ 604.096918][ T8442] hsr_slave_1: left promiscuous mode [ 604.097981][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.098004][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.156922][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.156949][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.187582][ T8442] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 604.187607][ T8442] batman_adv: batadv0: Removing interface: syzkaller0 [ 604.439490][ T8442] veth1_vlan: left promiscuous mode [ 604.441158][ T8442] veth0_vlan: left promiscuous mode [ 605.469782][ T8584] smc: removing ib device syz1 [ 605.950598][ T8442] team0 (unregistering): Port device team_slave_1 removed [ 605.976854][ T8442] team0 (unregistering): Port device team_slave_0 removed [ 606.892504][ T8584] smbdirect: ib_dev[syz1] removed [ 606.993438][T19445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'. [ 607.291220][T19456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3359'. [ 607.774660][T19001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 607.945428][T19001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.946418][T19001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 608.070835][T19001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.204991][T19001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 608.279969][T19001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.281967][T19469] veth0: entered promiscuous mode [ 608.305211][T19001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 608.380050][T19001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.389643][T19469] veth0: left promiscuous mode [ 608.891894][T19477] batadv0: entered promiscuous mode [ 609.016602][T19477] macsec1: entered promiscuous mode [ 609.020353][ T8576] IPVS: starting estimator thread 0... [ 609.075888][ T7766] IPVS: starting estimator thread 0... [ 609.076378][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 609.078320][T19477] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 609.106976][T19491] IPVS: using max 31 ests per chain, 74400 per kthread [ 609.166437][T19477] batadv0: left promiscuous mode [ 609.172328][T19495] IPVS: using max 25 ests per chain, 60000 per kthread [ 610.330618][T19001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.617814][T19001] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.686604][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.686719][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.982154][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.982267][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.976184][T19569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.484692][T19603] bond0: (slave bond_slave_1): Releasing backup interface [ 614.568560][T19596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.036874][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3392'. [ 615.036901][T19619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3392'. [ 615.804712][T19001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.389868][T19001] veth0_vlan: entered promiscuous mode [ 616.450061][T19001] veth1_vlan: entered promiscuous mode [ 616.700793][T19001] veth0_macvtap: entered promiscuous mode [ 616.748526][T19001] veth1_macvtap: entered promiscuous mode [ 616.877586][T19644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3397'. [ 616.880803][T19001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.978050][T19646] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3398'. [ 617.021148][T19644] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 617.041692][T19638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.047384][T19001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.120312][ T8578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.121068][ T1139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.121810][ T1139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.121881][ T1139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.139955][T19644] batadv_slave_1: entered promiscuous mode [ 617.346981][T19636] batadv_slave_1: left promiscuous mode [ 618.268046][T19656] netlink: 'syz.4.3402': attribute type 2 has an invalid length. [ 618.402839][ T8450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.402868][ T8450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.423395][ T7766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.423450][ T7766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.623432][ T8442] IPVS: stop unused estimator thread 0... [ 619.757320][T19687] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 619.897702][ T1697] block nbd0: Possible stuck request ffff8880284be000: control (read@0,1024B). Runtime 180 seconds [ 619.897750][ T1697] block nbd0: Possible stuck request ffff8880284be1c0: control (read@1024,1024B). Runtime 180 seconds [ 619.897778][ T1697] block nbd0: Possible stuck request ffff8880284be380: control (read@2048,1024B). Runtime 180 seconds [ 619.897806][ T1697] block nbd0: Possible stuck request ffff8880284be540: control (read@3072,1024B). Runtime 180 seconds [ 620.019019][T19697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3409'. [ 620.156704][T19692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3409'. [ 620.449113][T19692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.509433][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'. [ 620.633540][T19712] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3411'. [ 621.116989][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'. [ 622.036500][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3417'. [ 622.036536][T19737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3417'. [ 622.831873][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3426'. [ 622.855856][T19755] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3424'. [ 623.363779][T19771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 623.553380][T19776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3425'. [ 624.032169][T19760] netlink: 'syz.4.3427': attribute type 4 has an invalid length. [ 624.384518][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.576097][T19788] macsec1: entered promiscuous mode [ 625.289573][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3434'. [ 625.289664][T19797] lo: Caught tx_queue_len zero misconfig [ 625.594511][T19810] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3437'. [ 625.611893][T19802] xt_hashlimit: size too large, truncated to 1048576 [ 625.659857][T19810] netlink: 'syz.0.3437': attribute type 3 has an invalid length. [ 625.755959][ T4984] udevd[4984]: worker [13870] /devices/virtual/block/nbd0 timeout; kill it [ 625.756067][ T4984] udevd[4984]: seq 15795 '/devices/virtual/block/nbd0' killed [ 626.078025][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3439'. [ 626.078068][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3439'. [ 626.256366][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 626.408054][T19821] sctp: [Deprecated]: syz.2.3441 (pid 19821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.408054][T19821] Use struct sctp_sack_info instead [ 626.434636][T19821] netlink: 'syz.2.3441': attribute type 10 has an invalid length. [ 626.623070][T19824] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3441'. [ 626.830442][T19821] team0: Port device dummy0 added [ 626.978446][T19824] team0: Port device dummy0 removed [ 627.075958][T19826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.330245][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'. [ 627.861490][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 628.324264][T19840] macvtap1: entered promiscuous mode [ 628.324291][T19840] vlan0: entered promiscuous mode [ 628.326930][T19840] macvtap1: entered allmulticast mode [ 628.326949][T19840] vlan0: entered allmulticast mode [ 628.326962][T19840] veth0_vlan: entered allmulticast mode [ 629.769742][T19869] xt_hashlimit: size too large, truncated to 1048576 [ 629.822686][T19874] vlan0: Caught tx_queue_len zero misconfig [ 629.887799][T19871] netlink: Unknown conntrack attr (0) [ 629.912872][T19871] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 630.823414][T19891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3463'. [ 630.828684][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3462'. [ 630.901300][T19892] veth1_macvtap: left promiscuous mode [ 631.063467][T19902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3465'. [ 631.140800][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 631.140826][T19892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3464'. [ 632.174593][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3469'. [ 632.241572][T19917] netlink: 'syz.0.3469': attribute type 1 has an invalid length. [ 632.241601][T19917] netlink: 'syz.0.3469': attribute type 2 has an invalid length. [ 632.486573][T19916] netlink: 'syz.4.3467': attribute type 1 has an invalid length. [ 634.238108][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 634.273771][T19965] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 634.273799][T19965] netlink: 'syz.0.3475': attribute type 3 has an invalid length. [ 634.273816][T19965] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3475'. [ 635.688232][T19980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3481'. [ 635.688263][T19980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3481'. [ 635.849251][T19987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3480'. [ 636.609837][T20004] IPv6: NLM_F_CREATE should be specified when creating new route [ 636.683127][T20000] netlink: 'syz.1.3485': attribute type 2 has an invalid length. [ 636.778933][T20008] ip6tnl0: Caught tx_queue_len zero misconfig [ 636.828037][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3490'. [ 637.004678][T20015] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 637.356523][T20025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3492'. [ 637.482951][T20028] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 637.641652][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3492'. [ 637.946478][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'. [ 638.056179][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'. [ 638.144614][T20057] netlink: 'syz.5.3498': attribute type 2 has an invalid length. [ 638.145327][T20055] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3497'. [ 638.240439][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'. [ 638.679166][T20069] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3501'. [ 640.536678][T20071] syzkaller1: entered promiscuous mode [ 640.536707][T20071] syzkaller1: entered allmulticast mode [ 640.919211][T20107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.029505][T20130] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3517'. [ 642.867402][T20152] netlink: 'syz.5.3521': attribute type 21 has an invalid length. [ 642.867429][T20152] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3521'. [ 642.867514][T20152] netlink: 'syz.5.3521': attribute type 4 has an invalid length. [ 642.867529][T20152] netlink: 'syz.5.3521': attribute type 5 has an invalid length. [ 642.867650][T20152] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3521'. [ 643.050940][T20152] netlink: 'syz.5.3521': attribute type 21 has an invalid length. [ 643.050965][T20152] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3521'. [ 643.051019][T20152] netlink: 'syz.5.3521': attribute type 4 has an invalid length. [ 643.051034][T20152] netlink: 'syz.5.3521': attribute type 5 has an invalid length. [ 643.051048][T20152] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3521'. [ 646.415223][T20201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3532'. [ 649.980871][ T1697] block nbd0: Possible stuck request ffff8880284be000: control (read@0,1024B). Runtime 210 seconds [ 649.980914][ T1697] block nbd0: Possible stuck request ffff8880284be1c0: control (read@1024,1024B). Runtime 210 seconds [ 649.980941][ T1697] block nbd0: Possible stuck request ffff8880284be380: control (read@2048,1024B). Runtime 210 seconds [ 649.980982][ T1697] block nbd0: Possible stuck request ffff8880284be540: control (read@3072,1024B). Runtime 210 seconds [ 650.347462][T20211] netlink: 'syz.4.3536': attribute type 1 has an invalid length. [ 650.429034][T20215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3536'. [ 650.450182][T20216] ip_tables: iptables: counters copy to user failed while replacing table [ 650.517037][T20216] netlink: 'syz.0.3537': attribute type 16 has an invalid length. [ 650.517063][T20216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3537'. [ 650.668631][T20211] bond2: entered promiscuous mode [ 650.669049][T20211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.670330][T20212] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 650.761074][T20216] veth0_macvtap: entered allmulticast mode [ 650.879995][T20225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.903900][T20222] bond2: (slave bridge1): making interface the new active one [ 650.903930][T20222] bridge1: entered promiscuous mode [ 650.910081][T20222] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 650.955859][T20228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.961927][T20228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.729883][T20243] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3545'. [ 652.060580][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 652.246335][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3547'. [ 652.515571][T20261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3550'. [ 652.663846][T17602] Bluetooth: hci0: Malformed Event: 0x02 [ 652.856046][T20271] netlink: 'syz.0.3552': attribute type 3 has an invalid length. [ 653.073968][T20278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.236186][T20305] netlink: 'syz.2.3560': attribute type 3 has an invalid length. [ 654.237965][T20305] netlink: 'syz.2.3560': attribute type 3 has an invalid length. [ 654.484513][T20311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3562'. [ 654.501810][T20310] netlink: 'syz.5.3562': attribute type 33 has an invalid length. [ 655.587696][T20339] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3571'. [ 655.885383][T20355] xt_IDLETIMER: label is empty or not nul-terminated [ 655.932268][ T8583] nci: nci_rx_work: unknown MT 0x1 [ 656.091466][T20358] netlink: 'syz.1.3576': attribute type 1 has an invalid length. [ 656.100421][T20359] netlink: 'syz.1.3576': attribute type 1 has an invalid length. [ 656.310373][T20358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.574270][T20374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3579'. [ 657.201502][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3580'. [ 657.549114][T20385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.571878][T20341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.910457][T20391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3583'. [ 658.982992][T20394] Bluetooth: MGMT ver 1.23 [ 659.211429][T20394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3584'. [ 659.211684][T20392] netlink: 'syz.1.3583': attribute type 11 has an invalid length. [ 659.371653][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3586'. [ 659.406491][T20403] bridge_slave_1: left allmulticast mode [ 659.406528][T20403] bridge_slave_1: left promiscuous mode [ 659.406776][T20403] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.524909][T20403] bridge_slave_0: left allmulticast mode [ 659.524941][T20403] bridge_slave_0: left promiscuous mode [ 659.525264][T20403] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.678403][T20430] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20004 [ 661.060985][T20446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.298517][T20450] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 661.593624][T20464] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 661.593670][T20464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.776636][T20465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.776659][T20465] IPv6: NLM_F_CREATE should be set when creating new route [ 662.309303][T17602] Bluetooth: hci6: command 0x0406 tx timeout [ 662.434033][T20476] wireguard0: entered promiscuous mode [ 662.980077][T20487] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 663.516341][T20506] tipc: Started in network mode [ 663.516368][T20506] tipc: Node identity ffff1083, cluster identity 4711 [ 663.516382][T20506] tipc: Node number set to 4294905987 [ 663.516948][T20506] tipc: Cannot configure node identity twice [ 663.517608][T20511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.519371][T20512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.768535][T20519] netlink: 'syz.1.3620': attribute type 178 has an invalid length. [ 664.163611][T20522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.168302][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 664.170379][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 664.289801][T20529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3621'. [ 664.710154][T20522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.935473][T20525] team0: Port device team_slave_0 removed [ 665.006943][T20529] erspan0: entered promiscuous mode [ 665.055780][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3621'. [ 665.196836][T20553] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3625'. [ 665.546589][T20555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3626'. [ 666.275406][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3630'. [ 666.480678][T20572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3633'. [ 666.503153][T20576] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3634'. [ 666.504218][T20575] netlink: 'syz.1.3635': attribute type 11 has an invalid length. [ 666.710573][T20576] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 666.744387][T20576] openvswitch: netlink: IPv4 tun info is not correct [ 667.137292][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3637'. [ 668.504073][T20624] netlink: 'syz.4.3647': attribute type 1 has an invalid length. [ 668.776879][T20624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 669.128394][T20643] syzkaller0: entered promiscuous mode [ 669.128422][T20643] syzkaller0: entered allmulticast mode [ 669.548208][T20633] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 669.921659][T20674] xt_nat: multiple ranges no longer supported [ 669.921867][T20674] xt_nat: multiple ranges no longer supported [ 669.936500][T20674] xt_nat: multiple ranges no longer supported [ 669.936838][T20674] xt_nat: multiple ranges no longer supported [ 669.937024][T20674] xt_nat: multiple ranges no longer supported [ 669.937206][T20674] xt_nat: multiple ranges no longer supported [ 669.981820][T20674] xt_nat: multiple ranges no longer supported [ 669.982122][T20674] xt_nat: multiple ranges no longer supported [ 669.982319][T20674] xt_nat: multiple ranges no longer supported [ 669.982496][T20674] xt_nat: multiple ranges no longer supported [ 670.217726][T20673] __nla_validate_parse: 5 callbacks suppressed [ 670.217752][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'. [ 670.584454][T20681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3655'. [ 671.079893][T20691] netlink: 'syz.1.3658': attribute type 1 has an invalid length. [ 671.107061][T20691] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3658'. [ 671.107118][T20691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3658'. [ 671.107135][T20691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3658'. [ 671.546840][ T5625] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 671.607164][T20708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3664'. [ 671.658728][T20702] netlink: 'syz.5.3663': attribute type 3 has an invalid length. [ 671.961154][T20716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3666'. [ 672.467745][T20726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3670'. [ 672.529613][T20733] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3673'. [ 673.014189][ T33] INFO: task syz.3.2848:17083 blocked for more than 143 seconds. [ 673.014216][ T33] Not tainted syzkaller #0 [ 673.014226][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.014237][ T33] task:syz.3.2848 state:D stack:26688 pid:17083 tgid:17078 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 673.014306][ T33] Call Trace: [ 673.014315][ T33] [ 673.014329][ T33] __schedule+0x17db/0x58f0 [ 673.014489][ T33] ? __pfx___schedule+0x10/0x10 [ 673.014526][ T33] ? schedule+0x90/0x2b0 [ 673.014559][ T33] schedule+0x164/0x2b0 [ 673.014585][ T33] schedule_preempt_disabled+0x13/0x30 [ 673.014617][ T33] __mutex_lock+0x7c1/0x1550 [ 673.014650][ T33] ? __mutex_lock+0x5d4/0x1550 [ 673.014682][ T33] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 673.014779][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 673.014804][ T33] ? __kasan_kmalloc+0x93/0xb0 [ 673.014844][ T33] ? __nla_validate_parse+0x2429/0x2d50 [ 673.014908][ T33] ? do_syscall_64+0x166/0x520 [ 673.015355][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.015394][ T33] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 673.015437][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 673.015493][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 673.015528][ T33] ? trace_kmalloc+0x2a/0xf0 [ 673.015558][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 673.015624][ T33] ? __nla_parse+0x40/0x60 [ 673.015666][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 673.015705][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 673.015751][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 673.015797][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 673.015849][ T33] ? bpf_lsm_capable+0x9/0x20 [ 673.015874][ T33] ? security_capable+0x7e/0x2c0 [ 673.015972][ T33] genl_rcv_msg+0x614/0x7a0 [ 673.016015][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.016051][ T33] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 673.016102][ T33] netlink_rcv_skb+0x226/0x4a0 [ 673.016132][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.016170][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.016217][ T33] ? down_read+0x2be/0x330 [ 673.016251][ T33] genl_rcv+0x28/0x40 [ 673.016282][ T33] netlink_unicast+0x8ef/0xa80 [ 673.016325][ T33] netlink_sendmsg+0x813/0xb40 [ 673.016365][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.016403][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 673.016438][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.016466][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 673.016501][ T33] ____sys_sendmsg+0x54e/0x850 [ 673.016533][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.016568][ T33] ? import_iovec+0x73/0xa0 [ 673.016673][ T33] ___sys_sendmsg+0x2a5/0x360 [ 673.016697][ T33] ? __lock_acquire+0x747/0x2de0 [ 673.016728][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.016794][ T33] ? __fget_files+0x2a/0x420 [ 673.016816][ T33] ? __fget_files+0x3a2/0x420 [ 673.016850][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 673.016875][ T33] ? _raw_spin_unlock_irq+0x2e/0x50 [ 673.016927][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.016961][ T33] ? do_user_addr_fault+0xc4c/0x1340 [ 673.016998][ T33] do_syscall_64+0x166/0x520 [ 673.017024][ T33] ? trace_irq_disable+0x3b/0x140 [ 673.017050][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.017074][ T33] ? clear_bhb_loop+0x70/0xc0 [ 673.017103][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.017127][ T33] RIP: 0033:0x7f3410b9e559 [ 673.017148][ T33] RSP: 002b:00007f34119fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.017174][ T33] RAX: ffffffffffffffda RBX: 00007f3410e26090 RCX: 00007f3410b9e559 [ 673.017192][ T33] RDX: 000000000000c000 RSI: 0000200000000700 RDI: 0000000000000005 [ 673.017207][ T33] RBP: 00007f3410c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 673.017222][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.017235][ T33] R13: 00007f3410e26128 R14: 00007f3410e26090 R15: 00007ffd75074058 [ 673.017273][ T33] [ 673.017329][ T33] [ 673.017329][ T33] Showing all locks held in the system: [ 673.017341][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 673.017359][ T33] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 673.017420][ T33] locks held by kworker/u8:4/59: 3, last CPU#0: [ 673.017436][ T33] #0: ffff8880563ad140 ((wq_completion)krds_cp_wq#6/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 673.017501][ T33] #1: ffffc9000200fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 673.017565][ T33] #2: ffff8880574b8080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 673.017707][ T33] locks held by getty/5371: 2, on CPU#0: [ 673.017724][ T33] #0: ffff8880264530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 673.017811][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 673.017909][ T33] locks held by udevd/13870: 1, on CPU#1: [ 673.017925][ T33] #0: ffff888027ecc350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 673.018013][ T33] locks held by syz.3.2848/17081: 2, on CPU#0: [ 673.018030][ T33] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.018095][ T33] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 673.018161][ T33] locks held by syz.3.2848/17083: 2, on CPU#1: [ 673.018178][ T33] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.018243][ T33] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 673.018312][ T33] locks held by syz-executor/17597: 4, last CPU#0: [ 673.018329][ T33] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 673.018392][ T33] #1: ffff88804e336540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 673.018448][ T33] #2: ffff888079600f80 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 673.018511][ T33] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 673.018582][ T33] locks held by syz.4.3671/20724: 1, on CPU#0: [ 673.018599][ T33] #0: ffff88807f1be540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 673.018671][ T33] locks held by syz.4.3671/20731: 2, last CPU#1: [ 673.018687][ T33] #0: ffff88807f1be540 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 673.018751][ T33] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 673.018813][ T33] locks held by syz.2.3676/20739: 1, last CPU#1: [ 673.018830][ T33] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 673.018891][ T33] locks held by syz.1.3675/20737: 1, last CPU#0: [ 673.018908][ T33] #0: ffff888079605900 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 673.018972][ T33] [ 673.018978][ T33] ============================================= [ 673.018978][ T33] [ 673.018995][ T33] NMI backtrace for cpu 0 [ 673.019010][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 673.019035][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 673.019049][ T33] Call Trace: [ 673.019058][ T33] [ 673.019067][ T33] dump_stack_lvl+0xe8/0x150 [ 673.019103][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 673.019194][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 673.019234][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 673.019273][ T33] sys_info+0x135/0x170 [ 673.019302][ T33] watchdog+0xfd7/0x1030 [ 673.019338][ T33] ? watchdog+0x1c7/0x1030 [ 673.019371][ T33] kthread+0x38b/0x480 [ 673.019395][ T33] ? __pfx_watchdog+0x10/0x10 [ 673.019418][ T33] ? __pfx_kthread+0x10/0x10 [ 673.019443][ T33] ret_from_fork+0x514/0xb70 [ 673.019470][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 673.019494][ T33] ? __switch_to+0xc89/0x1420 [ 673.019530][ T33] ? __pfx_kthread+0x10/0x10 [ 673.019555][ T33] ret_from_fork_asm+0x1a/0x30 [ 673.019594][ T33] [ 673.019610][ T33] Sending NMI from CPU 0 to CPUs 1: [ 673.019669][ C1] NMI backtrace for cpu 1 [ 673.019683][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 673.019704][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 673.019715][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0xb0 [ 673.019739][ C1] Code: 74 0a 18 48 89 44 0a 20 e9 3d 86 23 0a cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d b8 fb cd 12 65 48 8b 15 b8 fb [ 673.019755][ C1] RSP: 0018:ffffc900001e7c30 EFLAGS: 00000046 [ 673.019771][ C1] RAX: ffffffff81b44eb4 RBX: 0000000000000007 RCX: ffff88801f6fddc0 [ 673.019785][ C1] RDX: 8000000000000100 RSI: 0000000000000008 RDI: 0000000000000021 [ 673.019797][ C1] RBP: 0000000000000080 R08: 0000000000000100 R09: 0000000000000000 [ 673.019809][ C1] R10: ffff888057a8c140 R11: ffffed100af5182a R12: 00000000ffffffdf [ 673.019823][ C1] R13: 0000000000000007 R14: 0000009caece4ba6 R15: 0000000000000008 [ 673.019835][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 673.019850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.019863][ C1] CR2: 000020000000d000 CR3: 000000007f654000 CR4: 00000000003526f0 [ 673.019880][ C1] Call Trace: [ 673.019887][ C1] [ 673.019893][ C1] __hrtimer_get_next_event+0x1b1/0x600 [ 673.019930][ C1] hrtimer_run_softirq+0x20b/0x2e0 [ 673.019951][ C1] handle_softirqs+0x226/0x860 [ 673.019978][ C1] ? run_ksoftirqd+0x36/0x60 [ 673.020009][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 673.020036][ C1] run_ksoftirqd+0x36/0x60 [ 673.020063][ C1] smpboot_thread_fn+0x565/0xa70 [ 673.020092][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 673.020130][ C1] kthread+0x38b/0x480 [ 673.020148][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 673.020175][ C1] ? __pfx_kthread+0x10/0x10 [ 673.020194][ C1] ret_from_fork+0x514/0xb70 [ 673.020213][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 673.020231][ C1] ? __switch_to+0xc89/0x1420 [ 673.020258][ C1] ? __pfx_kthread+0x10/0x10 [ 673.020277][ C1] ret_from_fork_asm+0x1a/0x30 [ 673.020303][ C1] [ 673.020650][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 674.005790][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 674.014936][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 674.025021][ T33] Call Trace: [ 674.028427][ T33] [ 674.031385][ T33] vpanic+0x56d/0xa60 [ 674.035416][ T33] ? __pfx_vpanic+0x10/0x10 [ 674.039971][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 674.045556][ T33] panic+0xc5/0xd0 [ 674.049326][ T33] ? __pfx_panic+0x10/0x10 [ 674.053794][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 674.058864][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 674.065067][ T33] watchdog+0x1030/0x1030 [ 674.069453][ T33] ? watchdog+0x1c7/0x1030 [ 674.073914][ T33] kthread+0x38b/0x480 [ 674.078028][ T33] ? __pfx_watchdog+0x10/0x10 [ 674.082736][ T33] ? __pfx_kthread+0x10/0x10 [ 674.087354][ T33] ret_from_fork+0x514/0xb70 [ 674.091985][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 674.097136][ T33] ? __switch_to+0xc89/0x1420 [ 674.101861][ T33] ? __pfx_kthread+0x10/0x10 [ 674.106493][ T33] ret_from_fork_asm+0x1a/0x30 [ 674.111325][ T33] [ 674.115015][ T33] Kernel Offset: disabled [ 674.119357][ T33] Rebooting in 86400 seconds..