last executing test programs: 3m57.251742608s ago: executing program 0 (id=3477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000080)=""/81, &(0x7f0000000280)=0xffffffffffffffee) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340900000200400008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000340900000200400008000100", @ANYRES32=r9], 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000800) (rerun: 64) 3m53.581691014s ago: executing program 0 (id=3485): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f00000001c0)=0x2, 0x4) recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840), 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7a}, 0x6}, {{0x0, 0x0, 0x0}, 0x20010001}, {{0x0, 0x0, 0x0}, 0xa9e5}, {{&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)=""/172}, {&(0x7f00000005c0)=""/101}, {&(0x7f0000000640)=""/67}, {&(0x7f00000006c0)=""/189}, {&(0x7f0000000780)=""/163}, {&(0x7f0000000840)=""/173}], 0x0, &(0x7f0000000980)}, 0x9}], 0x9, 0x2100, 0x0) 3m52.265761646s ago: executing program 0 (id=3499): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}}, 0x9de, 0x5, 0x842, 0x100}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={r0, 0xb9, "d1de40ed40c681306b0c07f7adb0618d39bc1aba789254604dacabb4f94b186f00d967df5f1b02a9c00bc03234d0d6871155b0d72fdeffd8f9ddf4c91906de76ad13bd94751855387005ef7d7b554b842160e2793f260f5413797754a0927cdf1faa4a78af28b2623c2befc6d63f8860dc7850ef24bc25a389f3b465b092cd49d36e21f711ba27a1ee410e1a160e58c68419ed3b7b7e333b0e9226b6995a1b1e57b6266bea58a2d89223705456a9bcbe8d6274d858e0c077dd"}, &(0x7f0000000200)=0xc1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x4, 0x7}, &(0x7f0000000300)=0x90) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000380)={0x0, 0x3, 0x1, [0x1, 0xae92, 0x8, 0x8, 0x8], [0x7, 0x9, 0x4, 0xf, 0x5, 0x6, 0x2, 0x3ff, 0x4, 0x8, 0xfff, 0xffffffffffffffff, 0x7, 0x2, 0x3da, 0x5, 0x3, 0x3, 0x1, 0x7, 0x6, 0x9b5c, 0x7, 0x1, 0x77f, 0x7, 0x2, 0x2, 0x8, 0xd, 0x4, 0x1, 0x2, 0x2, 0x0, 0x6, 0x1, 0xa, 0x5, 0x0, 0xaf, 0x5, 0x2, 0x5, 0xb, 0xffffffffffffffff, 0x5, 0x669, 0x8, 0x6, 0x9, 0xb5, 0x9, 0x7, 0x2, 0xffffffff, 0x80, 0x100000000, 0x2, 0x2a, 0x7, 0x2, 0x2, 0x6, 0x100000000, 0x7272, 0x1, 0x3, 0x82, 0x7, 0x8, 0x5, 0x4b, 0x5, 0x99, 0x8, 0x0, 0x1, 0x5e0f, 0x7, 0x5, 0x9, 0xfe, 0xac, 0x7, 0x3, 0xdc, 0x401, 0x9, 0x2, 0x8e, 0x9, 0x5, 0x5, 0xfd, 0x6, 0x9, 0xffffffffffffffff, 0x1000, 0x2, 0x800, 0xc, 0x200, 0x0, 0x10, 0x8001, 0xe98, 0x1000, 0x5, 0x1, 0x9942, 0xfffffffffffffff9, 0x5, 0x3, 0x8, 0x9, 0xfffffffffffffff8, 0x1000, 0x8, 0x2, 0xc]}) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f00000007c0)=0x8) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, @broadcast}, &(0x7f0000000840)=0x10) setsockopt$inet_int(r3, 0x0, 0x16, &(0x7f0000000880)=0xf, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000008c0)={r1, 0x8}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000940), &(0x7f0000000980)=0x4) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f00000009c0)=""/181, &(0x7f0000000a80)=0xb5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c080}, 0x8800) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000d40)={r2, &(0x7f0000000c40)='#@),\x00', 0x400, &(0x7f0000000c80)={@_ha_fsid={[0xfff, 0x3]}, {0x9, 0x4e3, 0x4, 0x17}}, 0x4, &(0x7f0000000cc0)={@_ha_fsid}, &(0x7f0000000d00)=0x8}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file0\x00', r6, 0x4000, r2}, 0x18) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r7, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x40}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x44085) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000f40)={r0, 0x7c, "559fd78099121eb1ecad0d5655923713f7b26c54ecc6e71830d241efcbb59bc1f882cf9446b6e5b7c91bec75876b144e289b0c1036418f31f71f648bb8bba2d81019afe6c408cd07b4b38217e4e0d8677af4d79efdd0027ce5a87dd9c18cdcad68c24c053a6c3dfeac417bbb422d9cf054a3c465845ed5cfcd780dc4"}, &(0x7f0000001000)=0x84) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000001140)={r3, &(0x7f0000001040)=')/%\x00', 0x101000, &(0x7f0000001080)={@_ha_fsid={[0x5, 0x1000]}, {0x9, 0x2, 0x7fffffff}}, 0x6, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x8}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000001180), &(0x7f00000011c0)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001200)={r8, 0xa18b, 0x8, 0x5}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000001240)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x3}, 0x1c) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f00000012c0)={0x1a8, 0x12, 0x200, 0x70bd27, 0x25dfdbfd, {0x1f, 0x7, 0x7, 0xf3, {0x4e24, 0x4e22, [0x9, 0x8, 0xfffff065, 0xfffffff2], [0x1c, 0xc, 0x7, 0x101], 0x0, [0x7, 0xed02]}, 0x7fffffff, 0xf346}, [@INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "28080ddbb444df1b8c2362759dd124a2675df31acd233ebfe11b8d9924a301f6b34187caf894bd5c908b0de81c3137fc5afe192c0485c4fc6112e75f072738159dd7485b6623591af7fc5fc6f33283718b0a58e9eabcbc4ab4"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "95d1f48c546d1953e9390b2bc36a02ef1ef2f0ebf443461679596a3a93eb760a093e359d47442ee7b4bc94e744438e8f7b872e7863ea89826bfea31da186f20e4749a298703a5655bf730f6084a12cd3848236b6edf0bf6d7b4ebdcf1bb9051dab24bbff1119b0485d6d11fa1795de05efe8e039ab30589021b007cf8166b38e3450db9204482fd5653ca50403e79d17a30a7d88e25b8968701f0f95f044623aa21607ca6bbd39000ce4f4881c1ee6e8a4d235cdb77df5759f4fb358910986c70b9e50671d03b5f047e8cb8bd170d18a2655946ea3d25f03a552851188e968a319b2c0dc8da1fa1fea11d049464972921ffcef224b2285"}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x880}, 0x4040000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r9, 0x40047211, &(0x7f0000001500)=0x8) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) 3m52.096867136s ago: executing program 0 (id=3501): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @empty, 0x8fc7}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000fef800000000000040000000000061132400004d0000950000bedc6bb9bc91bc8110aa1c5e00b6f5e40fae32cc507fedadcd889f0ad90021f24720ba7e7fded580eecddc315d055e100016e2d7981de562603925ccba51d6b5ed4f6542bcb0f9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 3m52.002000545s ago: executing program 0 (id=3504): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000080)={'full', 0x20, 0x6, 0x20, 0x8f22377}, 0x2f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) 3m51.753848434s ago: executing program 0 (id=3507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00f9ffffff0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r2, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x20000000, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x8, 0xd}, {0x8, 0xf}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r9, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/59, 0xeb}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/126, 0x7e}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10022, 0x0) 3m36.651142203s ago: executing program 32 (id=3507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00f9ffffff0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r2, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x20000000, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x8, 0xd}, {0x8, 0xf}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r9, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/59, 0xeb}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/126, 0x7e}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10022, 0x0) 17.220442828s ago: executing program 1 (id=4580): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1) 14.437030944s ago: executing program 1 (id=4589): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x184}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010425bd78000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000d475c2ddd04d618a08a82df4a800000600010065727370616e00000400"/42], 0x40}}, 0x0) 14.057029493s ago: executing program 1 (id=4592): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x3, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005f3a0002002dbd7a00fddbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x101, 0x0, &(0x7f0000000400)="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", 0x0, 0x4, 0x0, 0x7ca3}, 0x50) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={0xffffffffffffffff, r1}, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$inet6(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x1, 0xd}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x24008085) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000180)) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r7], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 11.082921077s ago: executing program 4 (id=4604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="03987610049886ad00000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.821709816s ago: executing program 4 (id=4605): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f00000001c0)='fq_codel\x00', 0x0, &(0x7f0000000200)={@align=0x6, {0x3, 0x401, 0x2, 0x2}}, 0x7, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x6}, {[0x0, 0x40, 0x8, 0x9e6]}, 0x4, 0x14, &(0x7f00000002c0)=""/20}) pipe(&(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x16, 0x8, 0xfe, 0x0, 0xffffffffffffffff, 0x6f434ab5}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000200)=0x8) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x41d808}]}}]}, 0x3c}}, 0x20040054) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x41d808}]}}]}, 0x3c}}, 0x20040054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 10.506274815s ago: executing program 1 (id=4607): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000"/15, @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b40000001100000125bd7000fbdbdf25070000000c005a800400318004003f8011ffd33a90f43fa80b1479c1f91f5c5515fc079859d409be91a8c2505d5eef32d998780cc8a22e26e0f294b0ceaa39999801f8ffffa90b6089e2c11dd4f87ad349352fbc0c6f4e98731dd7b23d8649afaaaf867e183736044f883c251b5ca44ef6af06c98d1056ec8b9936b5b0d11af53e41e01c5b2e36a005bebf686165c0906a1a46d92f21aac4517e6a08004300", @ANYRES32=r1, @ANYBLOB='\x00'], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2f, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x5, 0x7}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xd, 0xffffffffffffffff, 0x3, 0xd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x68ee31ff28289aa7, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x140) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x18, r12, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x18}}, 0x0) r13 = socket(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x200, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "6d2cee1c954d895d71e395a32a60ef2219fc45f1e03c6011"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x50000000}, @ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "5d3bb8b0019e8fac742baf20cbe3c44edc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "f764b44d92f8b54142c9bba2878b33074cc4310ce35930dde9726df3b9aa7c92f809cb4701a0350a64fbb124dec4077c1ffc6af27de1dd471bb3a716eb1fe120e6ddad527c12fd41cfe02354d48e5bfcd85b885c45640855e505f663fc29b70048439de06696a5e2185dbd9accd8d0161b5b1aa4e357fedd8542be041ae37802e5d575999a9e64d30a4fea1e55a54448339a4b015f5880235b953715"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) close(r2) 9.005296566s ago: executing program 3 (id=4609): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x2, 0x8, 0x100}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7}}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'macvtap0\x00', @remote}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000b00)={{r1, &(0x7f00000000c0)='\x00', 0x100, &(0x7f00000001c0)={@align=0x4, {0x0, 0x7ff, 0x7fffffff, 0xf}}, 0x0, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x7}, 0x4, &(0x7f0000000a80)=[{0x0, 0x3, &(0x7f0000000300)='\x00', &(0x7f0000000440)="3a5a637ed3dab4a9cc5bfceea25b958820335ecc519c37d5fa47e72f9ed991ec883bea4d7aae25626af2b50ed02abdce359c2b8a7556fe1d969ee250c8ce597120915b529d4adb14a859315bda8f75304e8d447dc4e40998882b422f96603f65999f123eb0dbc8088a1c58f50e1bbeae3ee40cffd142ff83acaee3002b0333d07ffa0c9297aec9434504cc978aa049cf3671219a5b98a44d92f6f59561ead488d26b09c8f117f83919e631d0e6a02151345307dc8389e60936ef0a2a4463cc64e8545f505f0f97a52c3adede941a5894c8e675ae6bfb5338423384133207789834701ed869", 0xe5, 0x20}, {0x3, 0xf, &(0x7f0000000540)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000005c0)="088847bf666e0c53d78862e6991f74925bc29bdac11bfa80fe6b7625c1ff810c8f10acec57b3388cee2da8cdfa9bd6e7287cee9deaf7bfe95ae111c17b71514006c848ca65ba80c9f4bf31b7d2ca311c9c69e2f2acf380d44c1f8ddfe3f39321cbbd1b47e34be3bd4d5f1d2c4955e355407820ff25c7a72320e1c0438758ab9623582bacbd11e82485216af9c0bd5f", 0x8f, 0x10}, {0x3, 0xffff64a8, &(0x7f0000000680)='/dev/net/tun\x00', &(0x7f00000008c0)="1cb35939d643612c82b23b51223052cd4985e2324a3269bd8be0e38db7c5d5c36692af331d91911a3b3bf8ca74bd9c829c9b8849e0fbb91e6bef38219ab32aac010ad68ee712bcf7ca1826192d4cafebe3f07bbe0057b546c9f19f9e80f1176cce4af645f91d247dd0640dc4443c03e860facadd0a4261bc7a83e299dd8ffcc1113f3c1f121a4818664026fb7ac95c97765f05c9f91231ce67e6573b56df9648e742ca3a5366490d844a19535640fd7e92cc6e4ca56b11364905f65012af4da8e12330e2a8ad1341bfe5be0292168ecb7b8297df4ca56833a35e0365da8bf2dbd5784ddeaff5dfb2e320ec2176c24ba062b1", 0xf2, 0x20}, {0x3, 0xffff, &(0x7f00000009c0)='macvtap0\x00', &(0x7f0000000a00)="183ceea7b918d30760e721b214999f6fe2746a338d0459ac4daac258a1a1e1881675bd5d22e3116473b8c39196e3039c8c9dacd3e9c20db9c26819273cd219166ddab9c687dd6e2caa1f4162f4ab17ba7dc5c0bc301f524632e0", 0x5a, 0x18}]}) write$tun(r12, &(0x7f0000001440)={@val={0x0, 0x8906}, @val={0x3, 0x0, 0x3ef, 0x8bf, 0xd, 0x3}, @eth={@broadcast, @random="527fce7e21d5", @void, {@generic={0x8906, "d26012bcaf09d26954d1333f8b86c9a4c7922bd4ca4728df8ea7076aad944d4ef56befe9c9c75869af3fac46413e1bcbdaf203c582b2c42f595e9f2b6631f2e9e935ecdc7ccb6a577123966555bc38ab65b6d2ba666c0cbe09cc4c6c4dab5eb964d55fb75343a56f1231c6e8c4c6c9ababae047e73f4cde33961e568e1c10ce1b64e8fcf755cdd48b200dcc45a"}}}}, 0xa9) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8be77786d7556fc8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x7e8, r0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3a}}}}, [@NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x400, 0x4, 0x5, 0x10, 0xd, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x8, 0x7ff, 0x0, 0x0, 0x9, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x4, 0x6c, 0x4, 0x60, 0x30, 0x3, 0x18, 0xb, 0x6, 0x1, 0x9, 0x18, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x3, 0x3, 0x6, 0x7, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x16, 0x6, 0xc, 0x5f, 0xc, 0x18, 0x1, 0x24, 0x1b, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x12, 0x3, 0x6c, 0xc, 0x3, 0x16, 0x30, 0x6, 0x12, 0x48, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x4, 0x10, 0x2, 0x159, 0x5, 0x5]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x4}, {0x5, 0x1}, {0x2, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x6}, {0x7, 0xa}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x2, 0xa}, {0x3}, {0x2, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5}, {0x4, 0x19}, {0x5, 0x4}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0x5}, {0x4, 0x9}, {}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x6, 0x5}, {0x5, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0xd600, 0x0, 0x7ff, 0x80, 0x1000, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x5fd, 0x1, 0x3, 0x6, 0x800, 0x80]}}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x5, 0x8, 0x7, 0x9, 0x401, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf5a1, 0x9, 0x4, 0xf000, 0xb7, 0x3, 0x400, 0x6c]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x6c, 0x3, 0x48, 0x18, 0x1]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x1, 0x3, 0x1000, 0xfd5, 0x4f, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x5, 0x9, 0x9, 0x4, 0x2, 0x9, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x4, 0x1c, 0x40, 0xb0, 0xc, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x92, 0x6, 0x7, 0x80, 0x6, 0x4, 0x40]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x5, 0x0, 0x3, 0x16, 0x60, 0x4, 0x36, 0x1, 0x12, 0x6c, 0x6c, 0x31, 0xc, 0x5, 0x12, 0x24, 0x12, 0x12, 0xc, 0x48, 0xb, 0x3, 0x5, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x5}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0xa}, {0x7}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x9}, {0x5, 0x8}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x5, 0x1}, {0x2, 0x5}, {0x6}, {0x0, 0x2}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x5, 0x31, 0x6, 0x3, 0x6, 0x60, 0x3, 0x4, 0x24, 0x24, 0x36, 0x6, 0xb, 0x6, 0x9, 0x30, 0xc, 0x3, 0x3]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x5}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x7}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x8}, {0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x1}, {0x4}, {0x0, 0x7}, {0x6, 0xa}, {0x3, 0x2}, {0x3, 0x5}, {}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x4, 0xa}, {0x3, 0x2}, {0x4, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x0, 0x5, 0x2, 0xea8, 0x7, 0xa, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfffd, 0x6c24, 0xff, 0x1, 0xffc0, 0x800, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0xc, 0x9, 0x6c, 0xc, 0x16, 0x1, 0x36, 0x12]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x1}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x5, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x4}, {0x1, 0x17}, {0x7, 0x2}, {0x1, 0x2}, {0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x5}, {0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x6, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x4, 0x4}, {0x3, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x7, 0x8}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x7, 0x5}, {0x1}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe2a6, 0x7, 0x6, 0x4, 0x0, 0xd, 0xffff, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x101, 0xc, 0x8000, 0x81, 0xfffe, 0x79, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x3}, {0x2, 0x7}, {0x3}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0xa}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x4, 0x9}, {0x7, 0x2}, {0x6, 0x6}, {0x5, 0x7}, {}, {0x7, 0x2}, {0x5}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x8}, {0x2}, {0x1, 0x7}, {0x1}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x9}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x7, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x7}, {0x5, 0x6}, {0x6}, {0x6, 0x3}, {0x4, 0x4}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x4, 0x9, 0x48, 0x12, 0x0, 0x16, 0x1, 0x48, 0x36, 0x5, 0x4, 0xc, 0xc, 0x12, 0x16, 0x1, 0x24, 0x60, 0x5, 0x1, 0x6592097fc6db6244, 0x9, 0xc, 0x4, 0x4, 0x9, 0x4, 0x12, 0x6, 0x16]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xc, 0x800, 0x5, 0x6, 0x5, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x8, 0x7, 0x80, 0x9, 0xa, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xa, 0x7, 0x42, 0xc3, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x36, 0x0, 0x8, 0x0, 0x2, 0x7, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb6483ae2d2b102b0, 0x16, 0x24, 0x6, 0x16, 0x0, 0x4, 0x48, 0x9, 0x36, 0xc, 0x36, 0xb, 0x12]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x4}, {0x7, 0x6}, {}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x7}, {0x4, 0x3}, {0x4, 0x5}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x8, 0x6, 0x101, 0x2, 0xaec0, 0x0, 0x400]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x8}, {0x7, 0x1}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x6}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x4}, {0x6, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x7, 0x6}, {0x2, 0x5}, {0x2, 0x4}, {0x3}, {0x3}, {0x3, 0x6}, {0x3, 0x6}, {0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x5}, {0x7, 0x1}, {0x5, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x3, 0x5, 0x2, 0x1, 0x9, 0x6]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x1, 0xb, 0xb, 0x30, 0x16, 0x24, 0x3, 0x36, 0x5, 0x36, 0x2, 0x12, 0x0, 0x48, 0x12, 0x24, 0x6a, 0x1b, 0x7a, 0xc, 0x18, 0x4, 0x30, 0x18, 0x1b, 0x3, 0x48, 0x5, 0x18, 0x2, 0x30]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6536, 0x1, 0x5, 0x9, 0x8000, 0xefad, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x9, 0x1, 0x4, 0x74, 0x9, 0x180]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x12, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x1, 0x6}, {0x3, 0x9}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x5}, {0x3, 0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x3, 0xa}, {0x3, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x36, 0x4, 0x58, 0x18, 0x78, 0x6, 0x2, 0xc, 0x4, 0x6c, 0x24, 0x6, 0x3, 0x3, 0x4, 0x4, 0x60, 0x9, 0x60, 0x6c, 0x4, 0x12, 0x2, 0x28, 0x30, 0x18]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0xb, 0x48, 0x48, 0x3a, 0x36, 0xc, 0x2, 0x16]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x5, 0x2, 0x30, 0x60, 0x9, 0x24, 0x60, 0xc, 0x5d, 0x48, 0x6c, 0x0, 0x3, 0x30, 0x1, 0x18, 0x12, 0x30, 0x18]}]}, @NL80211_BAND_6GHZ={0x108, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x4, 0xa}, {0x4, 0x9}, {0x6, 0x3}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x9}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x6}, {0x2, 0x7}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x9}, {0x3, 0x7}, {0x3, 0x5}, {}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0x2}, {0x2}, {0x5, 0x8}, {0x3, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0x4}, {0x2, 0x1}, {0x7, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x4}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x4}, {0x7, 0x1}, {0x5}, {0x6, 0x2}, {0x1}, {0x6}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0xa}, {0x7}, {0x7, 0x9}, {0x3, 0x3}, {0x3, 0x3}, {0x4, 0x9}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x11, 0x5, 0x48, 0x9, 0x9, 0x6c, 0x1b, 0x18, 0xb, 0x3, 0x5, 0x3f, 0x3, 0xc, 0x4, 0x1b, 0x3e, 0x18, 0x48, 0x1b, 0x5, 0x60, 0x36, 0x60, 0x48, 0x24, 0x36, 0x1b]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x9}, {0x4, 0x6}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x1}, {0x5}, {0x0, 0x8}, {0x6, 0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x8}, {0x3, 0x14}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x2, 0xa}, {0x2}, {0x0, 0xa}, {0x2, 0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x4, 0x1}, {0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x3}, {0x2, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x7, 0x1}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3000, 0x7fff, 0x9f6b, 0x4, 0x81, 0x9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x6c, 0x3, 0x18, 0x1b, 0x5, 0x16, 0x79, 0x12, 0xaeeac503e5e933a6, 0x5a, 0x60]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x8, 0x2, 0xa, 0x2fd, 0x7, 0x7ff, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ff, 0x4, 0x2, 0x5, 0x5e3d, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 8.976295857s ago: executing program 5 (id=4610): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {0xffff, 0x6}, {0xfff2, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r9}, 0x38) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0xdd86, r10, 0x2d}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0xdd86, r10, 0x2d}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) (async) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x1) 8.957494288s ago: executing program 1 (id=4611): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x1c, r2, 0x11d, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094) 7.246219523s ago: executing program 1 (id=4613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x1dc, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r1}]}, @nested={0x1b7, 0x131, 0x0, 0x1, [@nested={0xa6, 0x8b, 0x0, 0x1, [@generic="28776e4c7f58eaa27fe403a81ca65b425b39e739559252c52627023d0e2f9cce93fe88f2de0e6b620fd0a498828af224ffb554d839a5d8b065ffdcfaebbc0d5f3801c1765d7d3b1a53f17e15af8544280d8e00991aeb193d04592b5c80b1272b86b72a561266de3d6330c9600598e22e2033e900a570ac02ec0be696e58c31359b45e33433fa26891094a0e50b48", @nested={0x4, 0x164}, @typed={0x9, 0x16, 0x0, 0x0, @str='-^)%\x00'}, @nested={0x4, 0x13d}]}, @typed={0xda, 0x164, 0x0, 0x0, @binary="9475b51577bf7dc42d14b2ffd8f08c075e7a2f3bd3a757b433442f0358d01ec7cd47e1f8308639190059503d04c90209895408c408683abcd10bc9d45b6c988d05ae86ece6648469a2af177961a37bd90df73fff64a6ebfb27a7aaecc2e597b2e7ceffb9c83550957eb38cb3f104179d642c3a7f78d2fc9cfed43340383f1e555a78751c9d6572418cb33ca1bb5a782b8509a344eae6d33feae79fb8b9a629c533828039ed52d82147123f2bf12c1073155f66ea69e3d56a50b3447789180255d05bbd7afda7797ee9ed37466d87914a9cefe6d46a7b"}, @generic="dfa6623247bcb4ee76629a6fad33613991330093a90f81e515e5aa9f8f1901afa957197c1f72d1f7e5f466f5b62efe"]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f00)=ANY=[], 0x28}}], 0x2, 0x2000c845) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0xa, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003740)={0xa4, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}]}]}, 0xa4}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) sendmsg$inet(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="662bf74b587a9abaa6c5cd492208a096bd7edc01f23bf3c89b3b2fcd77cbf6c1cfd5b16d6804d9e0f8daebc80d4b163da3b4287a7eaf0eb04bee1548ff683fd130a363e430a2b47ec0d7cdb8409aec6088c419822156cbed9d3e8bf0d97622201beb49e70feae3ee32dadfff87534a026316bab66f9d0719b4259ccd896dfdb0bdc10ff9a8bbdb84ed663d8fa7b954e71144fbf46b63fa55537e2c5c22fcd88b3e", 0xa1}, {&(0x7f0000000440)="fb163c93ee6f1c77258481040d8f7ed779384d3c9956415da010e6b8cd395fdb051fc69baece75b8569d66fc5f807cb7aec41d5f91d52eeefe71f4775aa9fa323d780d3d28e91a85808c729dc2055edc7a35fd24b10e6dd7861f3ed5eb11eac3f7e4ea870d0a70b7b857d5b73b6bf43f6b74c2fc27b4563b273dfee794957a18c19d0a02631bc896b4ed6e6899c5facbcf5ac8c1cd2626dd9483b159977608d9539ea787b4e2efd0fc7c378eed316f", 0x19}, {&(0x7f0000000500)="8c5a902b550f647bfb8dbb936abf6b6a1679b5f806a29fa7050cd25757a3afa152257ff232f75c4a6f9c5368cebc87622619248223918225f4806a5b2ba27f198b426f619b542863c7d4cf2e1aeefdb8a3a20bc511d59732b5be51777e5fc524d97b1a813ba87ab904be2144b82e03c17e0baae9f676324ae6ee4772fac64144b1bfe4a572baf19cb11f2bbd623e8aac757097269667a628a2ab3d0b913673d7477f92218755fc3ede81b42b5d2bd539af9d481584b52deccbb170", 0xbb}, {&(0x7f00000005c0)="ae1af0a3038907d703e877bd2bc9ed9a722d9a4580172d0026e10f17280cb15140360c5818996d562ddc4957452c697b808bac5dfc91870a3dea560b8d31b3ab73cc1d7637406f0f5d741d9eb9e57dc78cf87533205d7477170411b80c9795", 0x5f}, {&(0x7f0000000640)="32b1b4e4c57d6d9569d4e184c4c0a789824aff6bba3f43728712517ce24c6c951371083aca23fac2f62524ce405c4533984c193d1adcee14c45099e9b03c44c8a540e096b5ea4cb953d0aa9a5f8e49a9130c56fa81c3fbc5bb68d5dbfb27cb", 0x5f}, {&(0x7f00000006c0)="3146b77fe32ffaa3b0576ba3811cc89f25223519734584c26326b2cda18502c8efc382b9647eb3e1acfdba8d4db06b35eeae", 0x32}], 0x6, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x7}}], 0x78}, 0x4) r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000880)=0x10, 0x800) recvmmsg(r7, &(0x7f0000003640)=[{{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000940)=""/86, 0x56}, {&(0x7f0000000bc0)=""/252, 0xfc}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)}], 0x4, &(0x7f0000001d40)=""/189, 0xbd}, 0x5}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000001e00)=""/122, 0x7a}, {&(0x7f0000001e80)=""/240, 0xf0}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/221, 0xdd}, {&(0x7f0000003080)=""/116, 0x74}, {&(0x7f0000003100)=""/207, 0xcf}, {&(0x7f0000003200)=""/255, 0xff}, {&(0x7f0000003300)=""/249, 0xf9}, {&(0x7f0000003400)=""/85, 0x55}, {&(0x7f0000003480)=""/88, 0x58}], 0xa}, 0xe}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000035c0)=""/23, 0x17}], 0x1}, 0x93}], 0x3, 0x40002100, &(0x7f0000003700)={0x0, 0x989680}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_sset_info={0x37, 0x1, 0x7fffffffffffffff}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x10482}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'rose0\x00'}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x2000000000000000}, 0x20044080) 6.293536178s ago: executing program 4 (id=4615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=@delsa={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in=@loopback, 0x4d4, 0x2, 0x6c}}, 0x28}}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x9, 0x8, 0x53, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x7800, 0x700, 0x200, 0x7}}) sendmsg$can_j1939(r3, &(0x7f0000001900)={&(0x7f0000000140)={0x1d, r4, 0x1, {0x2, 0x0, 0x2}, 0xfd}, 0x18, &(0x7f00000018c0)={&(0x7f00000008c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x48800}, 0x40) 5.903774708s ago: executing program 5 (id=4616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5000412b297c8b04a4137c9600001000012700001000d85f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c000280060012004e210000"], 0x50}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={r0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0xb4}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014080009800800014000000081140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x28, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x41, 0x47}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x10000810) r9 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r9, 0x1, 0x22, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}}, 0x0, 0x32, 0x0, 0x0, 0xd0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 5.863682726s ago: executing program 4 (id=4617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffc0}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2798}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x40, 0x140e, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c044}, 0x8040) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.820004343s ago: executing program 2 (id=4618): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x10, 0x2d, 0x1, 0x70bd26}, 0x10}], 0x1}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) close(r3) 5.049136117s ago: executing program 2 (id=4619): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x3c, r2, 0x607, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 5.048445534s ago: executing program 3 (id=4620): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000200f0ffffff18400000fcffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x90) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5.003111662s ago: executing program 3 (id=4621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats={0x4b}}) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) 4.960356581s ago: executing program 2 (id=4622): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x4, 0x700000000000000}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESDEC=r0, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRESDEC=r4, @ANYRESOCT=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40680c0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x28, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0001000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 3.685578591s ago: executing program 5 (id=4623): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x2c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8001}, @tail_call, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x6b, &(0x7f00000006c0)=""/107, 0x41000, 0x58, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x6, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x0, 0x5, 0x3, 0x5}, {0x3, 0x3, 0x8, 0x8}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r1, 0x0, 0xe6, 0xb7, &(0x7f0000001540)="a6d3124458411e18a019385712e7bf3739f05dfc48e3969ca12d657cfc51a75b56f213d2fe62af8e8665a80f3deaece2a035625b9b7b23821f2fb1852193068c585ca66896df242dbf7864fa0fa8ff47d01133994ddab66af0060b8a9447a4787d66a4bba377c6ade0f792bc12f93b26ce0b7ce92a1f835dd3ac6d06a6bea97f613eb6ef976e5e1c51d1b3e6b6b2ffa08aecc944b0bec102166c6786fc8a98849d13fbde679b2388cc0b74fc63c73036e7452354afc7f2864abe4f7ff8bb52f2a9f8f1a31e47837cb1a4b4bbe009ca199b559a8b82815906dfdd68b0a6ceb9134422d2c0ab6e", &(0x7f0000001640)=""/183, 0x0, 0x0, 0x92, 0xc2, &(0x7f0000001700)="89c8295a3c56c4d06a6c69010e39e5e393d4ce424d804e02dc97080a05c392ba70cc5f5990ef901ba9909d255ddee17ccac37a79e05b8a7cf656e4849956621fa71e995aad7fe3ad55254b5625d84dbe111367e21ee0fadf2741f7f80d9d72c6bd8aac32b49f276bec13544d99210e27cfe512448775df7913e17a54d973fbb2828220531693d78aafb3cc1e1db356a7e788", &(0x7f00000017c0)="afaae505566069e4beacb9a5a5931b109aa9c185eac359e65d3cde5fa54379e8b2e88316515f8647f0dce8c6727e0334a4ea99c7d88a0c535a725b86e48e1b36ab3129ec16b53d2fcc703f2363fabc1dae035f5a832ce666a6be3a953af135b05511e1acd283ac1f7e849468443ff0135546006749eaea3213fcd5ef85e2c83971671e216a1d4ac9866993faf126f0a02df65e8a0c4617c082a05791920700dc0b22638ea6b36a14210977b3bd1e556240bbed710a0ceb8e6a9d511261c776a0dbc8", 0x2, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r7 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xff03, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000001dc0)={0xf3, {{0xa, 0x4e21, 0x4, @private2, 0xd67}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x4a6, @remote, 0x6}}, {{0xa, 0x4e24, 0x0, @mcast2, 0x2}}, {{0xa, 0x4e21, 0x715c, @private0, 0x8}}]}, 0x210) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r3, 0x10}, {r10, 0x20b1}, {r0, 0x8}, {r0}, {r2, 0x9c83}], 0x5, &(0x7f0000000440)={r11, r12+60000000}, &(0x7f0000000900)={[0xa]}, 0x8) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027c61a7dd1dbdf250f000000080028"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="738d07dafa271c3bf42669a949429b5cf58d70139ad901b729c003da0808702b6ccde4d26a31c885427aab73d74f02b5d2d76b3117f8b3f350f7762abd995efc742aaddbcf23445c875accab0381bcb72181ad4f3df1", @ANYRESHEX=r0, @ANYRES32=r3], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, &(0x7f00000002c0)=0x84) 3.683188612s ago: executing program 3 (id=4624): ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000040)=0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="c9fe00001d008104e00f80ecdb4cb9f207c804a0b7cf4e10946fd41000000088080efb0a000200250ada1b40d8088756e886b6b8a5bb5fb92bdbb98307ba210276f869b63e1d8bf440d5e7e5001ef0e34c7e31ba7352e58d6b63aed60c4270bf8ce4232c7eb464573e6b3aa6c90c894970d099990d12d48db0a9554721c4203298a75d2bbffff6e71e", 0x89}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.679828536s ago: executing program 2 (id=4625): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb2", 0x5}], 0x1, 0x0, 0x0, 0x8001}], 0x1, 0x20048000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) 2.832859458s ago: executing program 2 (id=4626): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.809048684s ago: executing program 3 (id=4627): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x5, 0x4e24, 0x5, 0xa, 0x80, 0x80, 0x5e}, {0x9, 0xffffffffffffff01, 0x9, 0x2, 0x7, 0x2, 0x4, 0xcf}, {0x0, 0x6, 0x54a, 0x7}, 0x2, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x6c}, 0x2, @in=@multicast2, 0x3502, 0x1, 0x0, 0x5, 0x8, 0x10001, 0x1ad5bd38}}, 0xe8) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2.395790928s ago: executing program 5 (id=4628): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="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", 0x1000, 0x90, &(0x7f0000001000)={0x2, 0x4e22, @multicast2}, 0x10) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000001040)={@private, @multicast2, @remote}, &(0x7f0000001080)=0xc) (async) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000010c0)={{0x2, 0x4e20, @private=0xa010102}, {0x306, @multicast}, 0x5c, {0x2, 0x4e20, @remote}, 'hsr0\x00'}) r1 = accept(r0, 0x0, &(0x7f0000001140)) sendmsg$NFT_BATCH(r1, &(0x7f0000001480)={&(0x7f0000001180), 0xc, &(0x7f0000001440)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x214, 0x2, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x1c, 0x6, "b6c5a7b64059dcce87045104bdb51982c7b8276973e8881e"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "f2a5165ea861d802e745c8d9cf6c9e6647098798095247fca7f71372939e5bc827f67980267ecd5aa29a3f12a21852bbe7eca3ac60d993c75ad332a29b6c6d27b5150019d943736b81156e6e1bfb5807ce5696677aae5b45d9a2bd1a785e20a4270efd27dab31a73ec4fc7e52919bbe0f61a9355dc784658efa993570a23281768492078ffcb6926e0f10ed7f9c089ae4b2e09fd1165c1fb663571c1fe6f1a0aa26c05006634ccbdc0ca10d5db33cce6dd6579f5ef"}, @NFTA_TABLE_USERDATA={0x19, 0x6, "de0aca69e103ef50edfbdb52efdb865f8702cbc719"}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "263afb2dcb0ddd09f08a25f4e15a5ca5cc30120c1e644fc8b1beadbfd4750fa0389f7472fd89dd5094e2f7594d3f062c24cc0bcebe8f5d1a922932e22a63a05cda1516ca144fcb30759cdd8090eb857e68c6b7acb311f4bec9917c791fa6c4fff4c439785376492029c082ed3e8b31ae9df8bb3df7c6b498498586ad6be25db4f55a91e172a5b5172cddba2f3b6206f24c6fa923d840bf357a0435b57b7a1c3dd8736c0581737fc0d53ec4acfb821406c63171db1ecf48043c70e7dbd206813f91968da858941966a80b1592db38d2424a0c16d45b4c06da65cde5a1506ce98405f2b4039df7e1486a09b6cf3141841c8d9ca230eaf2"}]}], {0x14}}, 0x270}, 0x1, 0x0, 0x0, 0x40884}, 0x8000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000014c0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001500)={0x0, 0xfffffff9, 0x9, 0x100}, &(0x7f0000001540)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001580)={r3, 0x9}, &(0x7f00000015c0)=0x8) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001800)={{r2, &(0x7f0000001600)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x0, &(0x7f0000001640)={@align, {0x9f, 0x0, 0x9}}, 0x7fffffff, &(0x7f0000001680)={@_ha_fsid}, &(0x7f00000016c0)=0xfed}, {[0x2ee6, 0x6, 0xa, 0xc3f]}, 0x9, 0xeb, &(0x7f0000001700)=""/235}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000001880)={0x7, [0x5b8, 0x69c, 0x7e33, 0x7f, 0x7, 0x3, 0x2]}, &(0x7f00000018c0)=0x12) (async) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xf) (async) listen(r2, 0x0) (async) getpeername(r5, &(0x7f0000001900)=@ax25={{0x3, @rose}, [@remote, @bcast, @default, @rose, @null, @bcast, @default, @rose]}, &(0x7f0000001980)=0x80) (async) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000019c0)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000001a40)={0x2, 0x8, 0xb, 0x7f, 0x7, 0x50, 0xfa, 0xa, 0xe, 0x9, 0x14, 0x2, 0x5, 0x7}, 0xe) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={r6, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x42100080}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)=@ipv4_getnetconf={0x44, 0x52, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7ff}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_FORWARDING={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xbd}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001d40)={r4, 0x94, &(0x7f0000001c80)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, @in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x9}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000001d80)=0x10) (rerun: 32) close(r2) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001dc0)={'veth1_macvtap\x00'}) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001e00)=0x10001, 0x4) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000001e40)=0x1) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000001e80)={0x7, 0x9}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000001ec0)={'filter\x00', 0x4}, 0x68) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f40)={r7, 0xc}, 0xc) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002000)={0x284, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7c0b}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11ee}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1107}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5787}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1af}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x8041) 2.395512045s ago: executing program 3 (id=4629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000012c0)=0xe) accept4(r3, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x5, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.585892585s ago: executing program 5 (id=4630): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x1010, r1, 0x12504000) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480480001800a000100696e6e6572000000380002800800024000080084080003400000000708000440000000100800014000000000140005800e000100696d6d6564696174650000000900010073797a30000000000900020073797a3000000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) 1.497008243s ago: executing program 4 (id=4631): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="3fab000046d43ab2f39252"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x268, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44}, 0x800) syz_emit_ethernet(0x15, &(0x7f0000000000)={@empty, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@generic={0x8863, "1f7761"}}}, 0x0) 1.083314027s ago: executing program 5 (id=4632): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x405, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000000000002000000e00000010000000002000000000000000000000000000000000000000000000000ff0700"/144], 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000cc0)='\r', 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read$alg(r5, &(0x7f0000000440)=""/204, 0xcc) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r3, 0x5}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)="a9", 0x1}, {&(0x7f0000000180)="fcb339279f0d6b93bd1ec4844dca410a8f14f7e32d113d4350cf3828fa920af0bf53cd12f8bd", 0x26}], 0x2}, 0x20008110) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) socket(0x1a, 0x2, 0x6) r9 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9e9c6482de834993, r9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000001c260000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 893.208µs ago: executing program 4 (id=4633): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000004c0)={'veth0_to_batadv\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r10 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x20801, &(0x7f0000000080)={@align=0x6, {0x9, 0xfffd, 0x4, 0x7}}, 0xf, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x401}, {[0x5, 0x5, 0x8000, 0x2]}, 0x2, 0x1a, &(0x7f0000000140)=""/26}) r13 = socket(0x10, 0x3, 0x0) (async) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}}, 0x0) (async) r16 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r16, 0x8934, &(0x7f0000000340)={'ip6tnl0\x00', 0x4}) (async) sendmsg$nl_route_sched(r12, &(0x7f0000001d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d00)={&(0x7f00000006c0)=@deltfilter={0x162c, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x3, 0xfff4}, {0x5, 0xc}, {0x4, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x15ec, 0x2, [@TCA_BASIC_ACT={0x15e8, 0x3, [@m_vlan={0x194, 0x3, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5cf}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x401, 0x2, 0x5, 0x732}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x40, 0x4, 0x5, 0x4, 0x400}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x2, 0x9, 0x951}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xf2, 0x6, "3a0a1437ba819b92b8e354865f2d700e38d09950321af33b40c7692dc4dd5bfb07c097069366752607afb1674a2acc68d511f7728149861196b4f2a2885fbeffe79dfc8beee657d25f1701d2d056c1734590594caabc9075635b03d2466ddaf04de3967716bb60b22e225083de4a2aadead5b3e0841df62ae9cd79bf1594e2f0682651789ca157d8778c2b50f10e68caf404682f9376af157c3849729402d2968186d422cb9fbc3aa61a5eb5ec31a18ad6c1a5aab1ef2241f4bde05694f73e9637d3a78e13b26a4eb01e0c39233670bfc708ad27433778736f56f0ea2a83cf235a6babc3b905845b68819385b522"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xb8, 0xf, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0x5, 0x0, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x7, 0x4, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x5, 0x0, 0xa9, 0xf26d}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3fe}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80}]}, {0x12, 0x6, "06bb8a9bce1656f4277e5c830be4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x10f8, 0x6, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0x8, 0x7069, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0xfffffca2, 0x20000000, 0x4, 0x1}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x0, 0x7, 0x7, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9c, 0x100, 0x6, 0x2, 0xfffffffd}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x499b, 0x8, 0x400}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xec3080c, 0xe, 0x1, 0x738000, 0x101}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x6, 0x10}, 0x6}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ctinfo={0xd0, 0x4, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x54}, @TCA_CTINFO_ACT={0x18, 0x3, {0x28, 0x0, 0x1, 0x0, 0xfffffffb}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x8000, 0x3, 0x45a, 0x1}}]}, {0x63, 0x6, "b966c26fcec1131c14e5f9999f7523e837e501fb88efbf1b3675bf4c663e1c56f9da4f8fd1f462c124465e4920b5afb69221e2e9a5069d5080549e83c2c2ed8094a152c73e35514afd275de1e59be6185e7c688456afd99ed8ee65c70345cd"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x158, 0xb, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc13}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaf1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x969}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x101, 0xffffffffffffffff, 0xff, 0x6}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x6, 0xffffff00}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffa, 0x1000, 0x10000000, 0x8, 0xffff}, 0x2}}]}, {0xa8, 0x6, "c81f85b8312d4227c976b8353b43209455851a8cbbc5c4d427017259137404474687cc5807ba2c0e949af68b4f6403a86f31c239af6a4ddb6dcb6b032dcac0034b3da6e33a3c461c20e9b4d1851e133e55f1227bfd4b4a043faf7637cfe65858fe19bc221fe42cf8b5c980f904763c731b3979db74bf6348d6bdbca9374bfb9d45d612b9d6f5016ff0ea9e4943b26e53b30b23dc5ebd2c176f110bb6e9dadf39c399dc2f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x78, 0x6, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}]}, {0x9, 0x6, "cd9e61bffa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x162c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4c014) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 0s ago: executing program 2 (id=4634): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000300)={0x1, @le_read_iso_tx_sync={{0x2061, 0x2}, {0xc9}}}, 0x6) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r2, 0x7}, 0x8) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2}, &(0x7f0000000280)=0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0xff, 0x0, 0x9, 0x7, 0xffffffff, 0x1, 0xf, 0x3, r2}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f00000001c0)={r9, 0x6}, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0xc) kernel console output (not intermixed with test programs): 387.411980][T16175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.412602][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 387.583520][T16175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.613130][ T114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.631323][ T114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.641657][ T114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.650647][ T114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.722939][T16471] H: renamed from dummy0 (while UP) [ 387.817204][T12524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.825299][T12524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.900043][T16482] ipvlan2: entered allmulticast mode [ 387.905382][T16482] batadv_slave_1: entered allmulticast mode [ 387.930009][T16482] batman_adv: batadv0: Adding interface: ipvlan2 [ 387.936384][T16482] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.961748][T16482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.972265][T16482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.982083][T16482] batman_adv: batadv0: Interface activated: ipvlan2 [ 388.092764][T16484] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 388.108954][T13010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.111115][T16483] bond1: option mode: unable to set because the bond device has slaves [ 388.116807][T13010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.261947][T16499] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2984'. [ 388.455069][T16503] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.545198][T16503] bridge_slave_0 (unregistering): left allmulticast mode [ 388.590651][T16503] bridge_slave_0 (unregistering): left promiscuous mode [ 388.621108][T16503] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.720336][T16523] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 388.973954][T16529] veth5: entered allmulticast mode [ 389.486521][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 389.690409][T16564] netlink: 'syz.4.3003': attribute type 61 has an invalid length. [ 389.721098][T16564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3003'. [ 389.771793][T16573] netlink: 'syz.4.3003': attribute type 64 has an invalid length. [ 389.817935][T16571] bond1: entered allmulticast mode [ 389.886826][T16564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3003'. [ 390.006339][T16576] veth3: entered allmulticast mode [ 390.087095][T16576] bond1: (slave veth3): Enslaving as an active interface with an up link [ 390.141977][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.151371][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.160139][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.169919][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.177800][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.203022][T16571] bond1 (unregistering): (slave veth3): Releasing backup interface [ 390.298463][T16571] bond1 (unregistering): Released all slaves [ 390.724043][T16599] netlink: 'syz.0.3010': attribute type 4 has an invalid length. [ 390.923537][T16609] netlink: 'syz.1.3011': attribute type 7 has an invalid length. [ 390.990522][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 391.100231][T16614] team0: Mode changed to "loadbalance" [ 391.798864][T16578] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.807521][T16578] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.817536][T16578] bridge_slave_0: entered allmulticast mode [ 391.825357][T16578] bridge_slave_0: entered promiscuous mode [ 391.866865][T16578] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.874485][T16578] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.886711][T16578] bridge_slave_1: entered allmulticast mode [ 391.897606][T16578] bridge_slave_1: entered promiscuous mode [ 391.937452][T16622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.950253][T16578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.953307][T16635] __nla_validate_parse: 1 callbacks suppressed [ 391.953325][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3016'. [ 391.963186][T16578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.025083][T16578] team0: Port device team_slave_0 added [ 392.072050][T16654] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 392.085778][T16578] team0: Port device team_slave_1 added [ 392.126992][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 392.173046][T16578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.180032][T16578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.206488][T16578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.220014][T16578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.227392][T16578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.291707][ T5637] Bluetooth: hci2: command tx timeout [ 392.293320][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3028'. [ 392.315889][T16578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.326672][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3028'. [ 392.384751][T16578] hsr_slave_0: entered promiscuous mode [ 392.391456][T16578] hsr_slave_1: entered promiscuous mode [ 392.399712][T16578] debugfs: 'hsr0' already exists in 'hsr' [ 392.405476][T16578] Cannot create hsr debugfs directory [ 392.556425][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 392.680239][T16687] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3033'. [ 392.689901][T16686] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3035'. [ 392.800438][T16696] netlink: 'syz.3.3039': attribute type 1 has an invalid length. [ 392.842842][T16686] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3035'. [ 392.863814][T16686] openvswitch: netlink: IPv4 tun info is not correct [ 393.175085][T16710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3042'. [ 393.916631][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3050'. [ 394.247151][T16750] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 394.364837][T12524] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 394.385752][ T5637] Bluetooth: hci2: command tx timeout [ 394.831707][T12524] bond3 (unregistering): (slave geneve2): Releasing active interface [ 395.192650][T12524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.211729][T12524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.227206][T12524] bond0 (unregistering): Released all slaves [ 395.243115][T12524] bond1 (unregistering): (slave lo): Releasing backup interface [ 395.252097][T12524] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 395.263585][T12524] bond1 (unregistering): Released all slaves [ 395.290800][T12524] bond2 (unregistering): Released all slaves [ 395.310169][T12524] bond3 (unregistering): Released all slaves [ 395.338037][T12524] bond4 (unregistering): Released all slaves [ 395.360452][T12524] bond5 (unregistering): Released all slaves [ 395.382560][T12524] bond6 (unregistering): Released all slaves [ 395.406957][T12524] bond7 (unregistering): Released all slaves [ 395.431897][T12524] bond8 (unregistering): Released all slaves [ 395.459786][T12524] bond9 (unregistering): Released all slaves [ 395.478988][T12524] bond10 (unregistering): Released all slaves [ 395.506267][T12524] bond11 (unregistering): Released all slaves [ 395.681105][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 395.824479][T16773] syz_tun: entered allmulticast mode [ 395.841657][T12524] tipc: Disabling bearer [ 395.911907][T12524] tipc: Left network mode [ 395.917585][T16774] pimreg: entered allmulticast mode [ 395.929980][T16774] pimreg: left allmulticast mode [ 396.297399][T16798] netlink: 'syz.4.3063': attribute type 12 has an invalid length. [ 396.395699][ T5637] Bluetooth: hci2: command tx timeout [ 396.413779][T16774] syz_tun: left allmulticast mode [ 396.783112][T16816] netlink: 'syz.4.3068': attribute type 5 has an invalid length. [ 397.132585][T16833] __nla_validate_parse: 1 callbacks suppressed [ 397.132604][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3071'. [ 397.155657][T16833] netlink: 'syz.4.3071': attribute type 30 has an invalid length. [ 397.487742][T16842] netlink: 'syz.1.3072': attribute type 2 has an invalid length. [ 397.513324][T16842] netlink: 'syz.1.3072': attribute type 2 has an invalid length. [ 397.827873][T16866] netlink: 'syz.3.3078': attribute type 11 has an invalid length. [ 397.849554][T16866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3078'. [ 397.981040][T16869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3077'. [ 398.367772][T16578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.372515][T16898] netlink: 'syz.1.3086': attribute type 1 has an invalid length. [ 398.420367][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.428272][T16578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 398.488226][ T5637] Bluetooth: hci2: command tx timeout [ 398.537174][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.655306][T16898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.676912][T16578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 398.713930][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.802387][T16578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 398.827515][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.948817][T16936] netlink: 'syz.3.3093': attribute type 1 has an invalid length. [ 398.952584][T16938] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3094'. [ 398.967597][T16938] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3094'. [ 398.977258][T16938] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3094'. [ 399.047992][T16938] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3094'. [ 399.057297][T16938] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3094'. [ 399.066551][T16938] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3094'. [ 399.075920][T16938] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3094'. [ 399.335721][T16936] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 399.555352][T16578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.611757][T16578] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.655629][T12520] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.662927][T12520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.695700][T12520] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.702892][T12520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.120932][T12524] hsr_slave_0: left promiscuous mode [ 400.241999][T16990] Cannot find add_set index 0 as target [ 400.752090][T17003] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 401.031421][T17014] block nbd1: Unsupported socket: should be TCP or UNIX. [ 401.283557][T12524] team0 (unregistering): Port device team_slave_1 removed [ 401.421073][T12524] team0 (unregistering): Port device team_slave_0 removed [ 402.173936][T17035] netlink: 'syz.3.3111': attribute type 1 has an invalid length. [ 402.223061][T17035] __nla_validate_parse: 93 callbacks suppressed [ 402.223080][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 402.361131][ T3356] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.403594][ T3356] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.433093][ T3356] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.471404][ T3356] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.932764][T17075] Cannot find add_set index 0 as target [ 403.010340][T16578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.154338][T16578] veth0_vlan: entered promiscuous mode [ 403.167365][T16578] veth1_vlan: entered promiscuous mode [ 403.193807][T16578] veth0_macvtap: entered promiscuous mode [ 403.241982][T16578] veth1_macvtap: entered promiscuous mode [ 403.298944][T16578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.330500][T16578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.346901][T13009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.355944][T13009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.396169][T17095] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3126'. [ 403.396662][T13009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.414655][T13009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.575932][T13007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.598390][T13007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.658570][T17108] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.3129'. [ 403.676732][ T9] IPVS: starting estimator thread 0... [ 403.717618][ T769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.742043][ T769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.749680][T17108] IPVS: sh: FWM 3 0x00000003 - no destination available [ 403.764214][T17113] netlink: 'syz.4.3131': attribute type 1 has an invalid length. [ 403.773337][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3130'. [ 403.784119][T17113] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 403.804856][T17110] IPVS: using max 30 ests per chain, 72000 per kthread [ 403.884571][T17116] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3132'. [ 404.016298][T17125] tipc: Failed to remove unknown binding: 66,1,1/0:1393606002/1393606004 [ 404.121221][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 404.183340][T17128] netlink: 516 bytes leftover after parsing attributes in process `syz.1.3135'. [ 404.245101][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 404.282778][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 404.292079][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 404.302759][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 404.310392][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.335745][T17135] netlink: 'syz.0.3138': attribute type 4 has an invalid length. [ 405.020930][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3148'. [ 405.038275][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3148'. [ 405.047437][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3148'. [ 405.321771][T17183] xt_hashlimit: size too large, truncated to 1048576 [ 406.398663][ T5633] Bluetooth: hci4: command tx timeout [ 406.522283][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.534394][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.549894][T17129] bridge_slave_0: entered allmulticast mode [ 406.582223][T17129] bridge_slave_0: entered promiscuous mode [ 406.600585][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.609170][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.619809][T17129] bridge_slave_1: entered allmulticast mode [ 406.638432][T17129] bridge_slave_1: entered promiscuous mode [ 406.732713][T17129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.758494][T17129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.838038][T17129] team0: Port device team_slave_0 added [ 406.852425][T17129] team0: Port device team_slave_1 added [ 406.891814][T17252] netlink: 'syz.1.3171': attribute type 12 has an invalid length. [ 406.920405][T17260] netlink: 'syz.2.3174': attribute type 11 has an invalid length. [ 406.945022][T17252] syzkaller0: entered promiscuous mode [ 406.954650][T17252] syzkaller0: entered allmulticast mode [ 406.965847][T17129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.989532][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.015546][T17129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.065533][T17129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.079418][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.122060][T17129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.252162][T17274] __nla_validate_parse: 5 callbacks suppressed [ 407.252182][T17274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3177'. [ 407.352887][T17129] hsr_slave_0: entered promiscuous mode [ 407.360017][T17129] hsr_slave_1: entered promiscuous mode [ 407.366466][T17129] debugfs: 'hsr0' already exists in 'hsr' [ 407.372315][T17129] Cannot create hsr debugfs directory [ 407.397656][T17280] syzkaller1: entered promiscuous mode [ 407.405441][T17280] syzkaller1: entered allmulticast mode [ 407.663044][T17288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3183'. [ 407.698003][T17289] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3184'. [ 407.711749][T17291] netlink: 'syz.3.3185': attribute type 2 has an invalid length. [ 407.741653][T17291] sctp: [Deprecated]: syz.3.3185 (pid 17291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.741653][T17291] Use struct sctp_sack_info instead [ 407.885876][T17129] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.940786][T17129] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.168365][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 408.278601][T17309] netlink: 'syz.3.3191': attribute type 1 has an invalid length. [ 408.360007][T17309] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 408.445885][T17129] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.486559][ T5633] Bluetooth: hci4: command tx timeout [ 408.490194][T17129] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.538687][T17327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3195'. [ 408.617135][T17330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.646743][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'. [ 408.700166][T17336] tipc: Started in network mode [ 408.707797][T17336] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 408.715477][T17336] tipc: Enabled bearer , priority 24 [ 408.723541][T17336] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3197'. [ 408.830595][T17129] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.840491][T17129] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.941452][T17344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.004383][T17348] netlink: 'syz.3.3203': attribute type 4 has an invalid length. [ 409.012462][T17348] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3203'. [ 409.024393][T17129] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.034163][T17129] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.045668][T17355] netlink: 'syz.0.3201': attribute type 11 has an invalid length. [ 409.054952][T17355] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3201'. [ 409.068651][T17348] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.085793][T17354] tipc: Started in network mode [ 409.091097][T17354] tipc: Node identity fffffffc, cluster identity 4711 [ 409.106508][T17354] tipc: Node number set to 4294967292 [ 409.130109][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3203'. [ 409.403202][T17129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.438959][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.449759][T17129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.466631][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.487434][T17129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.509565][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.519132][T17129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.548756][T17129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.571689][T17383] netlink: 'syz.1.3214': attribute type 21 has an invalid length. [ 409.659692][T17129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.692099][T17129] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.730442][T17129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.740826][T17129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.795323][T13009] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.802590][T13009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.854326][T13009] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.861631][T13009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.876569][T17391] netlink: 'syz.1.3215': attribute type 2 has an invalid length. [ 409.950883][ T5820] tipc: Node number set to 11578026 [ 410.092317][T17406] netlink: 'syz.2.3218': attribute type 8 has an invalid length. [ 410.160885][T17408] netlink: 'syz.2.3218': attribute type 7 has an invalid length. [ 410.178264][T17406] veth1_to_team: entered promiscuous mode [ 410.189958][T17406] gretap0: entered promiscuous mode [ 410.202612][T17406] veth1_to_team: left promiscuous mode [ 410.230190][T17406] gretap0: left promiscuous mode [ 410.300611][T17413] xt_cluster: node mask cannot exceed total number of nodes [ 410.371916][T17418] syzkaller0: entered promiscuous mode [ 410.377561][T17418] syzkaller0: entered allmulticast mode [ 410.597467][ T5633] Bluetooth: hci4: command tx timeout [ 410.689369][T17129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.842821][T17129] veth0_vlan: entered promiscuous mode [ 410.855309][T17129] veth1_vlan: entered promiscuous mode [ 411.775293][T17472] block nbd3: not configured, cannot reconfigure [ 411.895142][T17477] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 412.664083][ T5633] Bluetooth: hci4: command tx timeout [ 414.083154][T17129] veth0_macvtap: entered promiscuous mode [ 414.103879][T17129] veth1_macvtap: entered promiscuous mode [ 414.159427][T17129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.189226][T17129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.211985][T12524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.236658][T12524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.257119][T12524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.296394][T12524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.462741][T12524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.504703][T12524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.682211][ T6812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.702437][ T6812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.960534][T17527] __nla_validate_parse: 18 callbacks suppressed [ 414.960555][T17527] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3251'. [ 415.115754][T17529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3252'. [ 415.254072][T17543] netlink: 'syz.4.3255': attribute type 12 has an invalid length. [ 415.346953][T17550] netlink: 'syz.1.3258': attribute type 5 has an invalid length. [ 415.407369][T17555] netem: change failed [ 415.422231][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3260'. [ 415.674491][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.689091][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.697930][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.706925][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.725803][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.878695][T17566] team0: Device ip6gre1 is of different type [ 415.958857][T17574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3265'. [ 416.100306][ T5635] syz_tun (unregistering): left allmulticast mode [ 416.244716][T17589] netlink: 'syz.3.3270': attribute type 11 has an invalid length. [ 416.252669][T17589] netlink: 'syz.3.3270': attribute type 11 has an invalid length. [ 416.317879][T17589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3270'. [ 416.371070][T17594] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 416.742301][T17619] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 416.831679][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 416.840598][T17627] netlink: 'syz.2.3277': attribute type 6 has an invalid length. [ 416.848334][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'. [ 416.867142][T12524] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.867267][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 416.894295][T12524] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.908374][T17627] netlink: 'syz.2.3277': attribute type 6 has an invalid length. [ 416.923468][T12524] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.958119][T12524] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.967162][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'. [ 416.996114][T17631] xt_hashlimit: size too large, truncated to 1048576 [ 417.278376][T17642] netlink: 'syz.4.3281': attribute type 1 has an invalid length. [ 417.347634][T17642] vcan1: entered promiscuous mode [ 417.363302][T17642] vcan1: entered allmulticast mode [ 417.534945][T17656] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 417.793516][T17669] netlink: 'syz.2.3288': attribute type 13 has an invalid length. [ 417.917340][T17561] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.926532][ T5637] Bluetooth: hci1: command tx timeout [ 417.936408][T17561] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.954098][T17561] bridge_slave_0: entered allmulticast mode [ 417.963816][T17561] bridge_slave_0: entered promiscuous mode [ 417.993841][T17669] veth1_macvtap: left promiscuous mode [ 417.999396][T17669] macsec0: entered allmulticast mode [ 418.067275][T17561] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.077582][T17561] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.086259][T17561] bridge_slave_1: entered allmulticast mode [ 418.093416][T17561] bridge_slave_1: entered promiscuous mode [ 418.367884][T17561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.382069][T17561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.420103][T17561] team0: Port device team_slave_0 added [ 418.428687][T17561] team0: Port device team_slave_1 added [ 418.519955][T17561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.527523][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.554776][T17561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.557424][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3293'. [ 418.591330][T17702] Bluetooth: MGMT ver 1.23 [ 418.613235][T17561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.620484][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.646734][T17561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.856887][T17561] hsr_slave_0: entered promiscuous mode [ 418.864552][T17561] hsr_slave_1: entered promiscuous mode [ 418.871026][T17561] debugfs: 'hsr0' already exists in 'hsr' [ 418.876778][T17561] Cannot create hsr debugfs directory [ 419.295871][T17721] netlink: 'syz.3.3297': attribute type 2 has an invalid length. [ 419.303734][T17721] netlink: 'syz.3.3297': attribute type 2 has an invalid length. [ 419.936799][T17743] vlan2: entered allmulticast mode [ 419.942055][T17743] bond0: entered allmulticast mode [ 419.947198][T17743] bond_slave_0: entered allmulticast mode [ 419.952938][T17743] bond_slave_1: entered allmulticast mode [ 419.969440][T17561] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.015990][ T5637] Bluetooth: hci1: command tx timeout [ 420.514697][T17759] team0: Cannot enslave team device to itself [ 421.145330][T17561] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.594970][T17792] __nla_validate_parse: 8 callbacks suppressed [ 421.594990][T17792] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3316'. [ 421.852706][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 421.867519][T17806] bridge2: entered promiscuous mode [ 421.897373][T17806] bridge2: entered allmulticast mode [ 421.910818][T17804] vlan2: entered allmulticast mode [ 421.915981][T17804] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 422.056479][T17561] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.145925][ T5637] Bluetooth: hci1: command tx timeout [ 422.268101][T13007] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 422.671066][T17812] IPv6: sit1: Disabled Multicast RS [ 422.918793][T17838] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3331'. [ 422.927968][T17838] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3331'. [ 422.937013][T17838] netlink: 'syz.1.3331': attribute type 5 has an invalid length. [ 422.944751][T17838] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3331'. [ 423.607201][T17838] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.050623][T17838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.098332][T17838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.197998][ T5637] Bluetooth: hci1: command tx timeout [ 424.565873][T17838] geneve2: left promiscuous mode [ 424.570934][T17838] geneve2: left allmulticast mode [ 424.587723][T17838] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 424.594803][T17838] ipvlan2: left allmulticast mode [ 424.599905][T17838] batadv_slave_1: left allmulticast mode [ 424.612923][T17838] veth3: left allmulticast mode [ 424.622274][T17838] vlan2: left allmulticast mode [ 424.649431][T17838] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 424.758693][T17850] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3334'. [ 424.784309][T12524] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.794666][T12524] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 424.822232][T12524] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.828155][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3337'. [ 424.831148][T12524] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 424.843647][T17861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3337'. [ 424.991332][T12524] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.000227][T12524] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 425.013479][T17561] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.024459][T17863] netlink: 'syz.1.3336': attribute type 30 has an invalid length. [ 425.033812][T12524] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.042720][T12524] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 425.063564][T17863] bond2: option arp_missed_max: invalid value (0) [ 425.070014][T17863] bond2: option arp_missed_max: allowed values 1 - 255 [ 425.201374][T17863] bond2 (unregistering): Released all slaves [ 425.231572][T17867] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 425.868786][T17896] syzkaller0: entered promiscuous mode [ 425.874970][T17896] syzkaller0: entered allmulticast mode [ 425.895973][T17896] tipc: Enabled bearer , priority 0 [ 425.905068][T17896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.914979][T17895] tipc: Resetting bearer [ 426.018701][T17895] tipc: Disabling bearer [ 426.236242][ T5637] Bluetooth: hci1: command tx timeout [ 426.396673][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.519321][T17561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.533300][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'. [ 426.542211][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'. [ 426.586967][T17561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.814527][T17561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.048160][T17561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.063099][T17910] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 427.079443][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3349'. [ 427.097941][T17561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.254301][T17561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.276781][T17915] ipvlan2: entered allmulticast mode [ 427.282222][T17915] syz_tun: entered allmulticast mode [ 427.471590][T17929] IPVS: Unknown mcast interface: pimreg1 [ 427.477433][T17561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.508696][T17561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.538640][T17929] netlink: 'syz.4.3354': attribute type 3 has an invalid length. [ 427.952030][T17561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.968270][T17561] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.003614][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.010835][ T6812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.019990][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.027117][ T6812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.430476][T17951] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3357'. [ 428.921148][T17561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.956678][T17561] veth0_vlan: entered promiscuous mode [ 428.989733][T17561] veth1_vlan: entered promiscuous mode [ 429.061951][T17561] veth0_macvtap: entered promiscuous mode [ 429.082988][T17561] veth1_macvtap: entered promiscuous mode [ 429.141082][T17561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.163314][T17561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.550549][T12520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.559332][T12520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.581553][T12520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.828735][T12520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.090762][T17989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'. [ 430.110580][T17988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3365'. [ 430.441791][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 430.642831][T12520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.679467][T12520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.949512][T18010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3370'. [ 431.183901][ T6812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.191758][ T6812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.965280][T18050] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 432.605138][T18040] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 432.876346][T18086] netlink: 'syz.4.3386': attribute type 8 has an invalid length. [ 432.884206][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3386'. [ 433.024925][T18086] veth1_to_team: entered promiscuous mode [ 433.032054][T18086] gretap0: entered promiscuous mode [ 433.038883][T18086] veth1_to_team: left promiscuous mode [ 433.045716][T18086] gretap0: left promiscuous mode [ 433.067896][T18091] netlink: 408 bytes leftover after parsing attributes in process `syz.3.3387'. [ 433.300684][T18098] netem: change failed [ 433.495313][T18105] netlink: 'syz.0.3391': attribute type 1 has an invalid length. [ 433.522601][T18104] netlink: 'syz.2.3392': attribute type 2 has an invalid length. [ 433.530615][T18104] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3392'. [ 433.539991][T18107] netlink: 'syz.2.3392': attribute type 2 has an invalid length. [ 433.547745][T18107] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3392'. [ 433.954526][T18122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3391'. [ 433.978353][T18105] vlan2: entered promiscuous mode [ 433.983437][T18105] geneve1: entered promiscuous mode [ 433.988896][T18105] vlan2: entered allmulticast mode [ 433.994007][T18105] geneve1: entered allmulticast mode [ 434.215973][T18135] sch_fq: defrate 0 ignored. [ 434.359126][T18139] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3401'. [ 434.544248][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3403'. [ 434.746149][T18151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.753390][T18151] IPv6: NLM_F_CREATE should be set when creating new route [ 435.423655][T18173] netlink: 'syz.2.3412': attribute type 5 has an invalid length. [ 435.423883][T18170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3411'. [ 435.570986][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3412'. [ 435.627269][T18176] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 435.635815][T18176] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 435.644232][T18176] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 435.661267][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 435.849672][T18180] netlink: 'syz.2.3415': attribute type 83 has an invalid length. [ 436.064184][T18186] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.108903][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 436.249016][T18190] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 436.256164][ T808] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 436.740861][T18202] gretap2: entered promiscuous mode [ 436.746126][T18202] gretap2: entered allmulticast mode [ 437.258746][T18223] pimreg: entered allmulticast mode [ 437.488555][T18235] netlink: 'syz.4.3434': attribute type 1 has an invalid length. [ 437.496320][T18235] netlink: 'syz.4.3434': attribute type 2 has an invalid length. [ 437.906584][T18242] __nla_validate_parse: 7 callbacks suppressed [ 437.906602][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'. [ 438.064377][T18244] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 438.119733][T18244] 0ªX¹¦Dö»: entered allmulticast mode [ 438.603279][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3440'. [ 438.629665][T18256] : entered promiscuous mode [ 439.003747][T18264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3443'. [ 439.018456][T18264] pim6reg527: entered allmulticast mode [ 439.025788][T18265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3443'. [ 439.057235][T18269] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3444'. [ 439.068464][T18269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3444'. [ 439.090485][T18269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3444'. [ 439.105616][T18269] gretap0: entered promiscuous mode [ 439.175541][T18269] gretap0: left promiscuous mode [ 439.278055][T18274] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.287326][T18274] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.466595][T18276] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3446'. [ 440.140144][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.392367][T18294] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3451'. [ 440.748667][T18299] x_tables: unsorted underflow at hook 1 [ 442.245330][T18344] netlink: 'syz.1.3465': attribute type 1 has an invalid length. [ 442.685189][T18346] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 442.733989][T18346] bond1 (unregistering): Released all slaves [ 443.499588][T18378] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3475'. [ 443.813887][T18399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3479'. [ 444.165400][T12520] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.175428][T12520] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.184328][T12520] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.193116][T12520] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.692740][T18380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.905913][T18407] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 447.020076][T18412] sctp: [Deprecated]: syz.1.3483 (pid 18412) Use of int in maxseg socket option. [ 447.020076][T18412] Use struct sctp_assoc_value instead [ 447.269289][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'. [ 447.278203][T18418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3484'. [ 447.433739][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'. [ 447.442642][T18418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3484'. [ 447.486687][T18426] netlink: 'syz.4.3484': attribute type 178 has an invalid length. [ 447.885925][T18443] : entered promiscuous mode [ 448.169544][T18458] veth1_macvtap: mtu less than device minimum [ 448.404582][T18466] netlink: 'syz.2.3498': attribute type 1 has an invalid length. [ 448.852593][T18485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3503'. [ 448.861829][T18486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3503'. [ 448.879426][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3505'. [ 449.018918][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 449.283388][T18486] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 449.297951][ T808] bond_slave_0: entered promiscuous mode [ 449.303949][ T808] bond_slave_1: entered promiscuous mode [ 449.310633][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 449.319862][T18485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3503'. [ 449.495884][T18493] syzkaller0: entered promiscuous mode [ 449.501405][T18493] syzkaller0: entered allmulticast mode [ 449.509104][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 449.515519][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 449.518000][T18485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3503'. [ 449.526823][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3503'. [ 451.601203][T18509] netlink: 'syz.3.3512': attribute type 33 has an invalid length. [ 453.521401][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 457.306133][T18509] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 457.566994][T18521] netlink: 'syz.4.3513': attribute type 62 has an invalid length. [ 457.594099][T18522] __nla_validate_parse: 1 callbacks suppressed [ 457.594118][T18522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3514'. [ 457.613621][T18522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.858544][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3519'. [ 459.113577][T18544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 459.125315][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 459.134592][T18544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 459.367345][T18548] netlink: 'syz.1.3523': attribute type 11 has an invalid length. [ 459.375295][T18548] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3523'. [ 459.586681][T18556] netlink: 'syz.4.3525': attribute type 9 has an invalid length. [ 459.801542][T18562] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3526'. [ 460.462695][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3535'. [ 460.514027][T18581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.532115][T18581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.738679][T18590] bond2: entered promiscuous mode [ 460.743815][T18590] bond2: entered allmulticast mode [ 460.749407][T18590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.001697][T18598] xt_socket: unknown flags 0x50 [ 461.175087][T18600] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3540'. [ 461.396332][T18603] netlink: 'syz.4.3542': attribute type 4 has an invalid length. [ 461.404104][T18603] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3542'. [ 461.572518][T18606] netlink: 'syz.4.3543': attribute type 1 has an invalid length. [ 462.537533][T18619] netlink: 'syz.3.3546': attribute type 1 has an invalid length. [ 462.545612][T18619] netlink: 'syz.3.3546': attribute type 1 has an invalid length. [ 462.790752][T18627] syzkaller0: entered promiscuous mode [ 462.796279][T18627] syzkaller0: entered allmulticast mode [ 463.032302][T18640] netlink: 'syz.2.3552': attribute type 3 has an invalid length. [ 463.040077][T18640] __nla_validate_parse: 6 callbacks suppressed [ 463.040091][T18640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3552'. [ 463.052275][T18638] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3548'. [ 463.063913][T18640] syzkaller1: entered promiscuous mode [ 463.172034][T18640] syzkaller1: entered allmulticast mode [ 463.428227][T18649] nbd: couldn't find a device at index 0 [ 465.097027][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 465.110620][T18670] netlink: 'syz.4.3561': attribute type 1 has an invalid length. [ 465.111539][T18675] netlink: 'syz.3.3563': attribute type 39 has an invalid length. [ 465.118419][T18670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.118507][T18670] IPv6: NLM_F_CREATE should be set when creating new route [ 465.151262][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 465.163410][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 465.180908][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.194709][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.402652][T18675] hsr_slave_0: left promiscuous mode [ 465.415626][T18684] ieee802154 phy0 wpan0: encryption failed: -90 [ 465.422038][T18675] hsr_slave_1: left promiscuous mode [ 465.446266][T18684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'. [ 466.056728][T18698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3567'. [ 467.140552][T18707] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3570'. [ 467.274877][ T5650] Bluetooth: hci3: command tx timeout [ 467.700281][T18716] IPv6: addrconf: prefix option has invalid lifetime [ 467.703945][T18664] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.714138][T18664] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.721381][T18664] bridge_slave_0: entered allmulticast mode [ 467.728871][T18664] bridge_slave_0: entered promiscuous mode [ 467.737077][T18664] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.744487][T18664] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.751755][T18664] bridge_slave_1: entered allmulticast mode [ 467.987876][T18664] bridge_slave_1: entered promiscuous mode [ 468.235734][T18664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.248148][T18664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.357397][T18664] team0: Port device team_slave_0 added [ 468.386794][T18664] team0: Port device team_slave_1 added [ 468.452631][T18736] macvtap0: entered allmulticast mode [ 468.458155][T18736] veth0_macvtap: entered allmulticast mode [ 468.505012][T18720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3574'. [ 468.526879][T18736] syzkaller0: entered promiscuous mode [ 468.532486][T18736] syzkaller0: entered allmulticast mode [ 468.997250][T18664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.004239][T18664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.039090][T18757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3586'. [ 469.161390][T18664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.176893][T18757] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3586'. [ 469.206584][T18664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.214916][T18664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.241393][T18664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.433010][ T5650] Bluetooth: hci3: command tx timeout [ 469.486973][T18664] hsr_slave_0: entered promiscuous mode [ 469.493862][T18664] hsr_slave_1: entered promiscuous mode [ 469.500488][T18664] debugfs: 'hsr0' already exists in 'hsr' [ 469.506307][T18664] Cannot create hsr debugfs directory [ 469.626746][T18735] macvtap0: left allmulticast mode [ 469.660056][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3589'. [ 469.688094][T18735] veth0_macvtap: left allmulticast mode [ 470.181559][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'. [ 470.401437][T18792] bond3: entered promiscuous mode [ 470.406523][T18792] bond3: entered allmulticast mode [ 470.411995][T18792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.772671][T18799] netlink: 'syz.3.3597': attribute type 3 has an invalid length. [ 471.016190][T18664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 471.026835][T18664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.063087][T18805] syzkaller0: entered promiscuous mode [ 471.068597][T18805] syzkaller0: entered allmulticast mode [ 471.094534][T18664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.180132][T18664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.188119][T18664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 471.206434][T18664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.605484][ T5650] Bluetooth: hci3: command tx timeout [ 473.722656][ T5650] Bluetooth: hci3: command tx timeout [ 478.014416][T18664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 478.026358][T18664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.336921][T18831] xt_hashlimit: size too large, truncated to 1048576 [ 478.886798][T18664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.905546][T18664] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.918902][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.926159][T13007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.938899][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.138208][T13007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.183366][T18841] hsr0: entered allmulticast mode [ 479.227564][T18841] hsr_slave_0: entered allmulticast mode [ 479.233267][T18841] hsr_slave_1: entered allmulticast mode [ 479.330309][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'. [ 479.479242][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 479.488823][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3612'. [ 479.546632][T18664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.557098][T18664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.272545][T18882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3618'. [ 481.032394][T18664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.461400][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3625'. [ 481.719675][T18913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.730711][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3625'. [ 481.763573][T18919] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 481.772243][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'. [ 481.783356][T18921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3627'. [ 481.793816][T18921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3627'. [ 481.907007][T18913] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 481.958266][T18913] bond3 (unregistering): Released all slaves [ 482.408105][T18664] veth0_vlan: entered promiscuous mode [ 482.420756][T18664] veth1_vlan: entered promiscuous mode [ 482.559215][T18941] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 482.776418][T13009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.260054][T18944] syzkaller0: entered promiscuous mode [ 483.267295][T18944] syzkaller0: entered allmulticast mode [ 483.268304][T18956] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 483.313168][T18664] veth0_macvtap: entered promiscuous mode [ 483.507073][T18664] veth1_macvtap: entered promiscuous mode [ 483.526988][T18664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.844946][T18664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.075449][T13009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.401358][ T3356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.413467][ T3356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.422199][ T3356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.430889][ T3356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.451727][T18974] syz_tun: entered allmulticast mode [ 484.466873][T18974] pim6reg: entered allmulticast mode [ 484.567436][T18974] syz_tun (unregistering): left allmulticast mode [ 484.593900][T18976] syzkaller0: entered promiscuous mode [ 484.599416][T18976] syzkaller0: entered allmulticast mode [ 484.823025][ T3356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.830881][ T3356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.039627][ T3356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.047485][ T3356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.253553][T13009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.392915][T19023] netlink: 'syz.5.3650': attribute type 1 has an invalid length. [ 486.401116][T19023] netlink: 'syz.5.3650': attribute type 2 has an invalid length. [ 486.408889][T19023] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3650'. [ 486.456340][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3652'. [ 486.717285][T19029] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3655'. [ 486.930798][T19034] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3658'. [ 486.957056][T13009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.398739][T19044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3661'. [ 487.410294][T19044] netlink: 'syz.2.3661': attribute type 9 has an invalid length. [ 488.349630][T19057] syzkaller0: entered promiscuous mode [ 488.355210][T19057] syzkaller0: entered allmulticast mode [ 488.382556][T19064] veth0_to_bond: entered allmulticast mode [ 488.576425][T19071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3667'. [ 488.713176][T13009] bridge_slave_1: left allmulticast mode [ 488.718863][T13009] bridge_slave_1: left promiscuous mode [ 488.728071][T13009] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.741382][T13009] bridge_slave_0: left allmulticast mode [ 488.747084][T13009] bridge_slave_0: left promiscuous mode [ 488.753506][T13009] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.629760][T13009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.643199][T13009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.706161][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.747183][T13009] bond0 (unregistering): Released all slaves [ 491.014059][T19111] syzkaller0: entered promiscuous mode [ 491.020803][T19111] syzkaller0: entered allmulticast mode [ 491.166095][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 491.196081][T19139] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 492.422865][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3687'. [ 498.548392][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 498.597596][T19167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.605795][T19167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.616308][T19167] batman_adv: batadv0: Removing interface: ipvlan2 [ 498.632542][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 499.649043][T19214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3697'. [ 500.997611][T19232] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 501.043783][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3701'. [ 501.061929][T19232] bond1 (unregistering): Released all slaves [ 501.600954][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.921593][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 501.927093][T19263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3704'. [ 503.027971][T13009] hsr_slave_0: left promiscuous mode [ 503.222821][T19283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3710'. [ 503.240022][T13009] hsr_slave_1: left promiscuous mode [ 503.295381][T19287] netlink: 'syz.5.3714': attribute type 11 has an invalid length. [ 503.303349][T19287] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3714'. [ 503.342696][T13009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.348927][T13009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.526193][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 503.551899][T19289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3712'. [ 503.562046][T13009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.569539][T13009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.588702][T13009] veth1_macvtap: left promiscuous mode [ 503.594479][T13009] veth0_macvtap: left promiscuous mode [ 503.600063][T13009] veth1_vlan: left promiscuous mode [ 503.765827][T13009] veth0_vlan: left promiscuous mode [ 503.955002][T13009] pim6reg527 (unregistering): left allmulticast mode [ 504.228054][T13009] team0 (unregistering): Port device team_slave_1 removed [ 504.248728][T13009] team0 (unregistering): Port device team_slave_0 removed [ 504.414774][T19277] netem: change failed [ 504.809790][T19311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 505.218122][T19323] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3719'. [ 505.990160][T19342] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 506.671895][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 507.174964][T19365] bond3: option resend_igmp: invalid value (1835444735) [ 507.457624][T19365] bond3: option resend_igmp: allowed values 0 - 255 [ 507.706481][T19365] bond3 (unregistering): Released all slaves [ 508.579751][T19406] bridge_slave_0: left allmulticast mode [ 508.585459][T19406] bridge_slave_0: left promiscuous mode [ 508.591243][T19406] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.819697][T19406] bridge_slave_1: left allmulticast mode [ 508.825395][T19406] bridge_slave_1: left promiscuous mode [ 508.831289][T19406] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.103708][T19406] bond0: (slave bond_slave_0): Releasing backup interface [ 509.291799][T19406] bond0: (slave bond_slave_1): Releasing backup interface [ 509.325400][T19406] team0: Port device team_slave_0 removed [ 509.338226][T19406] team0: Port device team_slave_1 removed [ 509.344665][T19406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.352036][T19406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.360291][T19406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.367687][T19406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.459132][T19406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.510780][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 509.663747][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3740'. [ 509.672664][T19427] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 509.702972][T19429] netlink: 'syz.1.3741': attribute type 30 has an invalid length. [ 509.952873][T19439] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 510.374520][T19451] netlink: 'syz.4.3746': attribute type 4 has an invalid length. [ 510.382572][T19451] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3746'. [ 510.403462][T19451] .`: renamed from bond0 (while UP) [ 510.512600][T19451] bond_slave_0: left promiscuous mode [ 510.518363][T19451] bond_slave_1: left promiscuous mode [ 510.531144][T19454] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3748'. [ 510.960660][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 510.970252][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 510.979266][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 510.988256][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 510.997229][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 511.006725][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 511.015723][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 511.024721][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 511.976599][T19511] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 512.132091][T19505] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 513.255859][T19533] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.264355][T19533] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.467061][T19549] sctp: [Deprecated]: syz.4.3772 (pid 19549) Use of int in maxseg socket option. [ 513.467061][T19549] Use struct sctp_assoc_value instead [ 514.032764][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 514.325315][T19579] netlink: 'syz.1.3780': attribute type 83 has an invalid length. [ 514.543408][T19584] nbd: couldn't find a device at index -373156329 [ 514.964563][T19594] syzkaller0: entered promiscuous mode [ 514.970079][T19594] syzkaller0: entered allmulticast mode [ 514.999279][T19592] netlink: 'syz.3.3786': attribute type 2 has an invalid length. [ 516.659448][T19645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.751122][T19651] openvswitch: netlink: IPv4 tun info is not correct [ 516.780525][T19651] __nla_validate_parse: 14 callbacks suppressed [ 516.780541][T19651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3802'. [ 517.332104][T19669] netlink: 'syz.3.3807': attribute type 1 has an invalid length. [ 517.357709][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 517.366012][T19669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.384863][T19669] bond3: (slave batadv1): Opening slave failed [ 517.510507][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3809'. [ 519.978776][T19737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3822'. [ 520.249517][T19746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3826'. [ 520.271241][T19750] netlink: 'syz.3.3825': attribute type 1 has an invalid length. [ 520.279665][T19746] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 520.395937][T19751] netlink: 'syz.3.3825': attribute type 26 has an invalid length. [ 520.427088][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'. [ 520.427088][T19751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'. [ 520.428100][T19757] netlink: 'syz.2.3824': attribute type 64 has an invalid length. [ 520.486856][T19760] Cannot find map_set index 135 as target [ 520.508757][T19752] ip6gretap1: entered promiscuous mode [ 520.514260][T19752] ip6gretap1: entered allmulticast mode [ 521.409734][T19760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.733244][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3833'. [ 521.923485][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3833'. [ 521.955517][T19796] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 521.974792][T19796] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3833'. [ 522.124560][T19797] netlink: 'syz.1.3834': attribute type 21 has an invalid length. [ 522.138548][T19797] pimreg3: entered allmulticast mode [ 522.871900][T19794] nbd1: detected capacity change from 0 to 63 [ 522.903163][T19194] block nbd1: Send control failed (result -32) [ 522.917241][ T5650] block nbd1: Receive control failed (result -32) [ 522.919247][T19194] block nbd1: Request send failed, requeueing [ 522.932557][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3839'. [ 522.941951][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 523.101875][T19194] block nbd1: Dead connection, failed to find a fallback [ 523.129899][ T1705] block nbd1: Dead connection, failed to find a fallback [ 523.147351][T19831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3838'. [ 523.314208][T19839] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3839'. [ 523.347708][T19839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.380864][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3842'. [ 523.562988][T19847] IPv6: sit1: Disabled Multicast RS [ 523.569277][T19847] sit1: entered allmulticast mode [ 524.036800][T19864] netlink: 'syz.1.3846': attribute type 12 has an invalid length. [ 524.044669][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3846'. [ 524.306510][T19844] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.3841'. [ 524.316024][T19844] netlink: Unknown conntrack attr (type=2304, max=9) [ 524.586905][T13009] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.751469][ T769] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.759761][ T769] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.767990][ T769] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.779624][T19877] veth0: entered promiscuous mode [ 524.789820][T19877] veth0: left promiscuous mode [ 525.424518][T19901] xt_HMARK: proto mask must be zero with L3 mode [ 526.792611][T19851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.876731][T19948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3860'. [ 527.507456][T19956] netlink: 'syz.1.3863': attribute type 1 has an invalid length. [ 527.748866][T19968] netlink: 'syz.4.3866': attribute type 1 has an invalid length. [ 527.758896][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 528.014273][T19956] bond4: entered promiscuous mode [ 528.019932][T19956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.030404][T19968] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 528.262712][T19980] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3868'. [ 528.589758][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'. [ 528.740527][T19995] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3872'. [ 528.820284][T20000] netlink: 'syz.1.3875': attribute type 1 has an invalid length. [ 529.010835][T20004] vcan0: tx address claim with dlc 1 [ 529.214861][T20002] bond5: (slave veth7): Enslaving as an active interface with a down link [ 529.229267][T20005] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.425160][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 529.504707][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3880'. [ 529.746727][T20017] team1: entered promiscuous mode [ 529.769794][T20017] team1: entered allmulticast mode [ 529.778599][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3880'. [ 529.806909][T20017] team2: entered promiscuous mode [ 529.812069][T20017] team2: entered allmulticast mode [ 530.034244][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3884'. [ 530.191162][T20032] ieee802154 phy0 wpan0: encryption failed: -90 [ 530.227829][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 530.238818][T20035] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 530.278059][T20035] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.724879][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3892'. [ 530.889995][ T5650] Bluetooth: hci3: command tx timeout [ 530.898821][T20059] tls_set_device_offload: netdev not found [ 530.907972][T20057] bond3: option lp_interval: invalid value (0) [ 530.914172][T20057] bond3: option lp_interval: allowed values 1 - 2147483647 [ 530.929121][T20061] netlink: 'syz.5.3894': attribute type 1 has an invalid length. [ 530.937082][T20062] netlink: 'syz.5.3894': attribute type 1 has an invalid length. [ 530.944105][T20057] bond3 (unregistering): Released all slaves [ 530.978214][T20065] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 531.397968][T20075] netlink: 'syz.3.3898': attribute type 1 has an invalid length. [ 531.424037][T20079] netlink: 'syz.1.3899': attribute type 11 has an invalid length. [ 531.431452][T20075] bond5: entered promiscuous mode [ 531.572951][T20075] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.592272][T20075] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.599448][T20075] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 531.609723][T20075] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 531.622129][T20075] bond5: (slave ip6gre1): making interface the new active one [ 531.629627][T20075] ip6gre1: entered promiscuous mode [ 531.636366][T20075] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 532.042903][T20091] __nla_validate_parse: 2 callbacks suppressed [ 532.042922][T20091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3901'. [ 532.500068][T20097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3904'. [ 532.706718][T20101] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3905'. [ 532.715984][T20101] openvswitch: netlink: Missing key (keys=40, expected=100) [ 532.891256][T20111] x_tables: unsorted entry at hook 3 [ 532.905768][T20115] netlink: 'syz.4.3910': attribute type 1 has an invalid length. [ 533.117264][T20122] netlink: 'syz.5.3912': attribute type 32 has an invalid length. [ 533.125126][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3912'. [ 533.137789][T20115] bond0: entered promiscuous mode [ 533.138863][T20123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3913'. [ 533.143510][T20115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.362592][T20122] bond2: Setting coupled_control to off (0) [ 533.377414][T20115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.385113][T20115] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 533.397093][T20115] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 533.528033][T20115] bond0: (slave ip6gre1): making interface the new active one [ 533.535551][T20115] ip6gre1: entered promiscuous mode [ 533.542187][T20115] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 533.557505][T20132] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 533.564823][T20132] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 533.837927][T20142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3918'. [ 533.847321][T20141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3918'. [ 534.276120][T20158] IPVS: length: 24 != 12312 [ 534.460222][T20160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.470690][T20160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.497465][T20164] Bluetooth: MGMT ver 1.23 [ 534.626068][T20167] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3927'. [ 534.686114][T20176] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3928'. [ 535.211473][T20182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3930'. [ 535.661207][T20160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.673936][T20160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.924532][T20196] openvswitch: netlink: IP tunnel dst address not specified [ 536.763727][T20209] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 537.047701][T20160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.058012][T20160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.339500][T20226] netlink: 'syz.1.3943': attribute type 1 has an invalid length. [ 537.367932][T20226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 537.539818][T20229] __nla_validate_parse: 1 callbacks suppressed [ 537.539835][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3942'. [ 537.548482][T20231] xt_CONNSECMARK: invalid mode: 0 [ 537.567759][T20233] bond7: (slave gretap1): making interface the new active one [ 537.569200][T20233] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 537.852146][T20243] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3947'. [ 537.959944][T20243] netlink: 'syz.5.3947': attribute type 1 has an invalid length. [ 538.247640][T20160] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.257911][T20160] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.502535][T20246] bond2: Unable to set down delay as MII monitoring is disabled [ 538.517456][T20246] bond2 (unregistering): Released all slaves [ 538.649561][T20249] netlink: 'syz.3.3948': attribute type 7 has an invalid length. [ 538.657333][T20249] netlink: 'syz.3.3948': attribute type 8 has an invalid length. [ 538.708498][T20250] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3949'. [ 538.724570][T20259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3951'. [ 538.734107][T20259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3951'. [ 538.762476][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3952'. [ 538.770087][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3952'. [ 538.901322][T20262] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3951'. [ 538.941926][T20264] team0: Cannot enslave team device to itself [ 539.117833][ T6812] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.126053][ T6812] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.139340][ T6812] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.149925][ T6812] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.199534][T13007] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.207764][T13007] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.350777][T13007] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.359092][T13007] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.367271][T20268] syz_tun: entered allmulticast mode [ 539.380904][T20268] pim6reg: entered allmulticast mode [ 539.434050][T20268] syz_tun (unregistering): left allmulticast mode [ 539.454166][T20274] netlink: 'syz.1.3956': attribute type 5 has an invalid length. [ 540.104674][T20277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.203808][T20294] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3964'. [ 540.367487][T20294] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 540.377145][T20294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3964'. [ 540.447410][T20300] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 540.678376][T20312] netlink: 'syz.1.3969': attribute type 58 has an invalid length. [ 540.920127][T20314] netlink: 'syz.5.3970': attribute type 1 has an invalid length. [ 540.927892][T20314] netlink: 'syz.5.3970': attribute type 4 has an invalid length. [ 541.057269][T20318] netlink: 'syz.3.3971': attribute type 3 has an invalid length. [ 541.065259][T20318] netlink: 'syz.3.3971': attribute type 3 has an invalid length. [ 541.801271][T20352] netlink: 'syz.3.3981': attribute type 39 has an invalid length. [ 542.687927][T20379] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 542.736801][T20379] bond3 (unregistering): Released all slaves [ 542.878727][T20381] __nla_validate_parse: 7 callbacks suppressed [ 542.878745][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3988'. [ 542.992294][T20395] pim6reg1: entered promiscuous mode [ 542.997633][T20395] pim6reg1: entered allmulticast mode [ 543.135714][T20391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3989'. [ 544.486212][T20409] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3995'. [ 545.171802][T20429] netlink: 'syz.3.3999': attribute type 62 has an invalid length. [ 545.206031][T20431] netlink: 'syz.3.4000': attribute type 1 has an invalid length. [ 545.213778][T20431] netlink: 'syz.3.4000': attribute type 4 has an invalid length. [ 545.221503][T20431] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4000'. [ 546.065945][T20388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.533928][T20469] netlink: 'syz.2.4007': attribute type 10 has an invalid length. [ 546.542018][T20469] tipc: Resetting bearer [ 546.562079][T20469] tipc: Resetting bearer [ 546.732845][T20469] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.743138][T20469] bond0: (slave team0): Enslaving as an active interface with an up link [ 546.761775][T20470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4009'. [ 546.874060][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4008'. [ 546.883076][T20474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.967376][T20474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.983214][T20482] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 547.004585][T20484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4013'. [ 547.039277][T20484] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4013'. [ 547.072670][T20486] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4014'. [ 547.072694][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4014'. [ 550.391415][T20491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.721214][T20538] netlink: 'syz.5.4027': attribute type 1 has an invalid length. [ 550.751200][T20538] bond3: entered promiscuous mode [ 550.756774][T20538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.015828][T20545] syzkaller0: entered promiscuous mode [ 551.021344][T20545] syzkaller0: entered allmulticast mode [ 551.335349][T20551] bond3: (slave bridge1): making interface the new active one [ 551.344460][T20551] bridge1: entered promiscuous mode [ 551.354433][T20551] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 551.517179][T20559] __nla_validate_parse: 3 callbacks suppressed [ 551.517196][T20559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4033'. [ 551.556559][T20554] syzkaller0: entered promiscuous mode [ 551.562081][T20554] syzkaller0: entered allmulticast mode [ 551.747143][T20563] bridge3: entered promiscuous mode [ 551.761213][T20562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4034'. [ 551.770675][T20563] bridge3: entered allmulticast mode [ 551.796654][T20571] sctp: [Deprecated]: syz.5.4035 (pid 20571) Use of int in maxseg socket option. [ 551.796654][T20571] Use struct sctp_assoc_value instead [ 552.251163][T20555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.252430][T20583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4037'. [ 552.497819][T20586] netlink: 'syz.4.4040': attribute type 6 has an invalid length. [ 552.655877][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 552.664795][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 552.828605][T20599] netlink: 'syz.4.4043': attribute type 142 has an invalid length. [ 552.869101][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 553.039730][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 553.065593][T20607] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4047'. [ 553.536117][T20628] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 553.925459][T20624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4050'. [ 554.223072][T20656] netlink: 'syz.3.4061': attribute type 1 has an invalid length. [ 554.538561][T20656] 8021q: adding VLAN 0 to HW filter on device bond6 [ 554.948252][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 554.955519][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 554.962625][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 554.969787][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 554.976855][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 554.983955][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 554.991036][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 554.998109][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 555.151168][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 555.158350][T20665] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 556.291602][T20615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.625469][T20684] netlink: 'syz.5.4066': attribute type 1 has an invalid length. [ 556.657633][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4066'. [ 556.666538][T20686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4066'. [ 557.106127][T20701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4070'. [ 557.155754][T20709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4070'. [ 557.391529][T20721] ip6gre1: entered allmulticast mode [ 558.067425][T20736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4078'. [ 558.285591][T20748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4082'. [ 558.355810][T20750] gre1: entered promiscuous mode [ 558.360806][T20750] gre1: entered allmulticast mode [ 558.522020][T20755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4086'. [ 558.718772][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4084'. [ 559.258408][T20782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4092'. [ 559.286939][T20784] netlink: 'syz.3.4093': attribute type 9 has an invalid length. [ 559.426701][ T809] IPVS: starting estimator thread 0... [ 559.758473][T20800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4097'. [ 560.128163][T20786] IPVS: using max 31 ests per chain, 74400 per kthread [ 561.556822][T20840] openvswitch: netlink: Missing valid actions attribute. [ 561.721741][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4105'. [ 561.732891][T20840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.019722][T20858] netlink: 'syz.3.4110': attribute type 1 has an invalid length. [ 562.027560][T20858] netlink: 'syz.3.4110': attribute type 2 has an invalid length. [ 562.035304][T20858] netlink: 'syz.3.4110': attribute type 1 has an invalid length. [ 562.043036][T20858] netlink: 'syz.3.4110': attribute type 3 has an invalid length. [ 562.050799][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'. [ 562.486321][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4115'. [ 562.518216][T20865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4113'. [ 562.717315][T20868] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 562.965878][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.161237][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.172923][T20898] netlink: 'syz.3.4120': attribute type 4 has an invalid length. [ 563.246222][T20903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4122'. [ 563.255786][T20903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4122'. [ 563.633816][T20910] netlink: 'syz.1.4125': attribute type 1 has an invalid length. [ 563.641595][T20910] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4125'. [ 563.650549][T20910] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4125'. [ 563.659417][T20910] netlink: 'syz.1.4125': attribute type 1 has an invalid length. [ 563.667146][T20910] netlink: 618 bytes leftover after parsing attributes in process `syz.1.4125'. [ 563.869633][T20917] netlink: 556 bytes leftover after parsing attributes in process `syz.2.4124'. [ 564.858667][T20950] netlink: 'syz.4.4135': attribute type 39 has an invalid length. [ 573.039223][T20977] netlink: set zone limit has 4 unknown bytes [ 573.045549][T20978] __nla_validate_parse: 5 callbacks suppressed [ 573.045580][T20978] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4139'. [ 574.173376][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4144'. [ 574.193885][T20994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4144'. [ 574.674031][T21009] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4149'. [ 574.737537][T21005] netlink: 'syz.2.4148': attribute type 1 has an invalid length. [ 574.861446][T21009] netlink: 'syz.5.4149': attribute type 7 has an invalid length. [ 574.869223][T21009] netlink: 'syz.5.4149': attribute type 8 has an invalid length. [ 574.876962][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4149'. [ 574.890322][T21005] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4148'. [ 575.287965][T21030] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4156'. [ 575.897128][ T809] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 60 sec [ 575.929124][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4162'. [ 575.973596][T21055] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4160'. [ 576.190123][T17852] IPVS: starting estimator thread 0... [ 576.394247][T21065] bond3 (unregistering): Released all slaves [ 576.664612][T21059] IPVS: using max 31 ests per chain, 74400 per kthread [ 576.904614][T21078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4170'. [ 578.340573][T21115] syzkaller0: entered promiscuous mode [ 578.351949][T21115] syzkaller0: entered allmulticast mode [ 579.319266][T21144] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4189'. [ 579.332309][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4191'. [ 579.564425][T21147] bridge5: entered promiscuous mode [ 579.569683][T21147] bridge5: entered allmulticast mode [ 579.804056][T21159] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 580.032694][T21173] tunl0: entered promiscuous mode [ 580.047287][T21173] netlink: 'syz.2.4199': attribute type 3 has an invalid length. [ 580.055094][T21173] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4199'. [ 580.102216][T21174] netlink: 'syz.1.4197': attribute type 39 has an invalid length. [ 580.284847][T21169] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4196'. [ 580.293840][T21169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4196'. [ 580.303005][T21174] hsr_slave_0: left promiscuous mode [ 580.311201][T21174] hsr_slave_1: left promiscuous mode [ 580.327398][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4201'. [ 580.366460][T21179] netem: unknown loss type 8 [ 580.371632][T21179] netem: change failed [ 580.815504][T21191] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4206'. [ 580.829338][T21191] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4206'. [ 581.033931][T21199] netlink: 'syz.3.4208': attribute type 4 has an invalid length. [ 581.041705][T21199] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4208'. [ 581.057021][T21199] .`: renamed from bond0 (while UP) [ 581.067349][T21200] netlink: 'syz.3.4208': attribute type 4 has an invalid length. [ 581.075117][T21200] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4208'. [ 581.283151][T21183] : renamed from veth0_to_bond (while UP) [ 581.491835][T21215] netlink: 'syz.1.4213': attribute type 10 has an invalid length. [ 581.499848][T21215] ipvlan0: entered allmulticast mode [ 581.505144][T21215] veth0_vlan: entered allmulticast mode [ 581.512642][T21215] team0: Device ipvlan0 failed to register rx_handler [ 581.514737][T21217] netlink: 'syz.1.4213': attribute type 10 has an invalid length. [ 581.937158][T21217] team0: Device ipvlan0 failed to register rx_handler [ 582.179845][T21234] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.187789][T21234] netlink: 'syz.2.4217': attribute type 1 has an invalid length. [ 582.414615][T21241] bond0: (slave bond_slave_0): Releasing backup interface [ 582.638828][T21250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.612797][ T4999] udevd[4999]: worker [19194] /devices/virtual/block/nbd1 is taking a long time [ 584.109263][T21291] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 584.257199][T21300] __nla_validate_parse: 7 callbacks suppressed [ 584.257219][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4232'. [ 584.508260][T21303] netlink: 'syz.5.4234': attribute type 1 has an invalid length. [ 584.544733][T21303] bond5: entered promiscuous mode [ 584.550263][T21303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.762686][T21303] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 584.775069][T21303] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 584.785334][T21303] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 584.840676][T21310] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4237'. [ 585.133229][T21314] lo: entered allmulticast mode [ 585.153089][T21314] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4239'. [ 585.611101][T21325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4242'. [ 586.708595][T21352] veth0: entered promiscuous mode [ 586.720766][T21345] veth0: left promiscuous mode [ 586.989943][T21354] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4251'. [ 588.431084][T21320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.477443][T21347] netlink: 'syz.2.4250': attribute type 1 has an invalid length. [ 588.689578][T21347] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4250'. [ 588.698659][T21347] NCSI netlink: No device for ifindex 0 [ 589.055348][T21368] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4256'. [ 589.117707][T21369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.246526][T21375] netlink: 'syz.5.4256': attribute type 4 has an invalid length. [ 589.498538][ T809] IPVS: starting estimator thread 0... [ 589.760981][T21383] IPVS: using max 33 ests per chain, 79200 per kthread [ 589.998361][T21386] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 590.006252][T21386] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4260'. [ 590.408197][T21377] ipvlan3: entered promiscuous mode [ 590.651243][T21386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.734367][T21391] vlan2: entered allmulticast mode [ 591.107513][T21405] syzkaller0: entered promiscuous mode [ 591.124886][T21406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4265'. [ 591.183622][T21405] syzkaller0: entered allmulticast mode [ 591.479633][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4268'. [ 591.513551][T21409] netlink: 'syz.3.4267': attribute type 1 has an invalid length. [ 591.790379][T21420] netlink: 'syz.4.4269': attribute type 13 has an invalid length. [ 592.025400][T21423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4270'. [ 592.332939][T21420] veth1_macvtap: left promiscuous mode [ 592.339932][T21420] macsec0: entered allmulticast mode [ 592.376436][T21428] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.405685][T21430] FAULT_INJECTION: forcing a failure. [ 592.405685][T21430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.558675][T21430] CPU: 0 UID: 0 PID: 21430 Comm: syz.4.4272 Not tainted syzkaller #0 PREEMPT(full) [ 592.558721][T21430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.558748][T21430] Call Trace: [ 592.558754][T21430] [ 592.558765][T21430] dump_stack_lvl+0xe8/0x150 [ 592.558791][T21430] should_fail_ex+0x412/0x560 [ 592.558814][T21430] _copy_from_user+0x2d/0xb0 [ 592.558834][T21430] do_ip_vs_set_ctl+0x353/0xb00 [ 592.558857][T21430] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 592.558889][T21430] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 592.558904][T21430] ? nf_setsockopt+0x3a/0x290 [ 592.558926][T21430] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 592.558948][T21430] ? __pfx_aa_sk_perm+0x10/0x10 [ 592.558975][T21430] nf_setsockopt+0x26f/0x290 [ 592.558994][T21430] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 592.559015][T21430] do_sock_setsockopt+0x17c/0x1b0 [ 592.559041][T21430] __x64_sys_setsockopt+0x13d/0x1b0 [ 592.559065][T21430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.559082][T21430] do_syscall_64+0x174/0xf80 [ 592.559103][T21430] ? trace_irq_disable+0x3b/0x140 [ 592.559125][T21430] ? clear_bhb_loop+0x40/0x90 [ 592.559144][T21430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.559159][T21430] RIP: 0033:0x7f637bb9ce59 [ 592.559175][T21430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.559188][T21430] RSP: 002b:00007f637cb09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 592.559205][T21430] RAX: ffffffffffffffda RBX: 00007f637be15fa0 RCX: 00007f637bb9ce59 [ 592.559215][T21430] RDX: 0000000000000489 RSI: 0000000000000000 RDI: 0000000000000003 [ 592.559223][T21430] RBP: 00007f637cb09090 R08: 0000000000000044 R09: 0000000000000000 [ 592.559232][T21430] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 592.559247][T21430] R13: 00007f637be16038 R14: 00007f637be15fa0 R15: 00007ffdb6554cf8 [ 592.559271][T21430] [ 594.268370][ T6812] pimreg3: left allmulticast mode [ 594.274610][ T6812] tipc: Resetting bearer [ 594.300830][T21465] x_tables: duplicate underflow at hook 1 [ 594.347094][T21469] FAULT_INJECTION: forcing a failure. [ 594.347094][T21469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.385686][T21469] CPU: 1 UID: 0 PID: 21469 Comm: syz.5.4284 Not tainted syzkaller #0 PREEMPT(full) [ 594.385707][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.385717][T21469] Call Trace: [ 594.385723][T21469] [ 594.385731][T21469] dump_stack_lvl+0xe8/0x150 [ 594.385755][T21469] should_fail_ex+0x412/0x560 [ 594.385778][T21469] _copy_to_user+0x31/0xb0 [ 594.385799][T21469] simple_read_from_buffer+0xe1/0x170 [ 594.385824][T21469] proc_fail_nth_read+0x1bb/0x230 [ 594.385848][T21469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.385871][T21469] ? rw_verify_area+0x2a6/0x4d0 [ 594.385891][T21469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.385913][T21469] vfs_read+0x20c/0xa70 [ 594.385938][T21469] ? __pfx___mutex_lock+0x10/0x10 [ 594.385956][T21469] ? __pfx_vfs_read+0x10/0x10 [ 594.385978][T21469] ? __fget_files+0x2a/0x420 [ 594.386001][T21469] ? __fget_files+0x3a0/0x420 [ 594.386018][T21469] ? __fget_files+0x2a/0x420 [ 594.386044][T21469] ksys_read+0x150/0x270 [ 594.386068][T21469] ? __pfx_ksys_read+0x10/0x10 [ 594.386095][T21469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.386113][T21469] do_syscall_64+0x174/0xf80 [ 594.386135][T21469] ? trace_irq_disable+0x3b/0x140 [ 594.386157][T21469] ? clear_bhb_loop+0x40/0x90 [ 594.386176][T21469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.386192][T21469] RIP: 0033:0x7fdc5b55d68e [ 594.386207][T21469] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 594.386220][T21469] RSP: 002b:00007fdc597f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.386237][T21469] RAX: ffffffffffffffda RBX: 00007fdc597f66c0 RCX: 00007fdc5b55d68e [ 594.386248][T21469] RDX: 000000000000000f RSI: 00007fdc597f60a0 RDI: 0000000000000004 [ 594.386257][T21469] RBP: 00007fdc597f6090 R08: 0000000000000000 R09: 0000000000000000 [ 594.386267][T21469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.386276][T21469] R13: 00007fdc5b816038 R14: 00007fdc5b815fa0 R15: 00007ffdf97959c8 [ 594.386305][T21469] [ 594.430074][T21472] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.840264][T21474] netlink: 'syz.5.4285': attribute type 1 has an invalid length. [ 595.061808][ T6812] bond5 (unregistering): (slave geneve2): Releasing active interface [ 595.303333][ T6812] tipc: Disabling bearer [ 596.720795][ T6812] team0: Port device bridge3 removed [ 598.850325][ T6812] bond0 (unregistering): Released all slaves [ 598.863500][ T6812] bond1 (unregistering): Released all slaves [ 598.881923][ T6812] bond2 (unregistering): Released all slaves [ 598.901118][ T6812] bond3 (unregistering): Released all slaves [ 598.919042][ T6812] bond4 (unregistering): Released all slaves [ 599.111917][ T6812] bond5 (unregistering): Released all slaves [ 599.144559][T21473] xfrm1: entered promiscuous mode [ 599.289830][T21478] netlink: 'syz.2.4286': attribute type 1 has an invalid length. [ 599.454908][T21478] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 599.757760][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4290'. [ 600.248319][ T6812] tipc: Left network mode [ 600.330822][T21518] netlink: 'syz.4.4297': attribute type 12 has an invalid length. [ 600.338675][T21518] netlink: 'syz.4.4297': attribute type 29 has an invalid length. [ 600.346604][T21518] netlink: 'syz.4.4297': attribute type 1 has an invalid length. [ 600.354408][T21518] netlink: 'syz.4.4297': attribute type 2 has an invalid length. [ 600.507771][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'. [ 600.518332][T21521] netlink: 'syz.1.4299': attribute type 58 has an invalid length. [ 600.526218][T21521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4299'. [ 600.702099][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 600.710580][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 600.718911][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 600.727263][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 600.735626][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 600.743969][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 600.752312][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 600.760657][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 600.769001][T21524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 602.380483][T21567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4316'. [ 602.566791][T21570] sctp: [Deprecated]: syz.5.4317 (pid 21570) Use of int in max_burst socket option. [ 602.566791][T21570] Use struct sctp_assoc_value instead [ 602.600224][T21576] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4312'. [ 602.602049][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4316'. [ 603.123137][T21584] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4316'. [ 603.148716][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 603.158693][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 603.470033][T21597] netlink: 'syz.3.4323': attribute type 1 has an invalid length. [ 603.542824][T21597] bond9: entered promiscuous mode [ 603.550091][T21597] 8021q: adding VLAN 0 to HW filter on device bond9 [ 603.581502][T21599] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 603.593877][T21599] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 603.604129][T21599] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 603.943024][T21603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.946309][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4324'. [ 604.883817][ T5637] block nbd2: Receive control failed (result -32) [ 604.883981][ T5633] block nbd2: Receive control failed (result -32) [ 605.527925][T21573] nbd2: detected capacity change from 0 to 63 [ 605.559032][T19828] block nbd2: Dead connection, failed to find a fallback [ 605.566122][T19828] block nbd2: shutting down sockets [ 605.572613][T19828] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.583303][T19828] Buffer I/O error on dev nbd2, logical block 0, async page read [ 605.592093][T19828] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.601153][T19828] Buffer I/O error on dev nbd2, logical block 1, async page read [ 605.884977][T19828] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.894141][T19828] Buffer I/O error on dev nbd2, logical block 2, async page read [ 605.902409][T19828] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.911469][T19828] Buffer I/O error on dev nbd2, logical block 3, async page read [ 605.919866][T19828] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.930109][T19828] Buffer I/O error on dev nbd2, logical block 0, async page read [ 605.938034][T19828] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.947209][T19828] Buffer I/O error on dev nbd2, logical block 1, async page read [ 605.956406][T19828] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 605.965465][T19828] Buffer I/O error on dev nbd2, logical block 2, async page read [ 605.973369][T19828] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.216609][T19828] Buffer I/O error on dev nbd2, logical block 3, async page read [ 606.224575][T19828] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.233630][T19828] Buffer I/O error on dev nbd2, logical block 0, async page read [ 606.241543][T19828] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.250857][T19828] Buffer I/O error on dev nbd2, logical block 1, async page read [ 606.263961][T19828] ldm_validate_partition_table(): Disk read failed. [ 606.273140][T19828] Dev nbd2: unable to read RDB block 0 [ 606.280706][T19828] nbd2: unable to read partition table [ 606.361207][T21613] __nla_validate_parse: 1 callbacks suppressed [ 606.361241][T21613] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4329'. [ 606.397897][T19828] ldm_validate_partition_table(): Disk read failed. [ 606.406693][T19828] Dev nbd2: unable to read RDB block 0 [ 606.414163][T19828] nbd2: unable to read partition table [ 606.516158][T21616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.525648][T21616] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 606.533490][T21616] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 606.541324][T21616] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4329'. [ 606.555796][T21613] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4329'. [ 606.740469][T21614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4328'. [ 606.787737][T21621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4331'. [ 607.231683][T21636] netlink: 'syz.4.4333': attribute type 2 has an invalid length. [ 607.285012][T21636] netlink: 'syz.4.4333': attribute type 2 has an invalid length. [ 607.494400][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4334'. [ 608.533925][ T6812] hsr_slave_0: left promiscuous mode [ 608.550129][ T6812] hsr_slave_1: left promiscuous mode [ 608.925927][ T6812] veth1_vlan: left allmulticast mode [ 608.931729][ T6812] veth0_macvtap: left promiscuous mode [ 608.937648][ T6812] veth1_vlan: left promiscuous mode [ 608.942990][ T6812] veth0_vlan: left promiscuous mode [ 609.145775][T21692] netlink: 'syz.4.4345': attribute type 1 has an invalid length. [ 609.156573][T21692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4345'. [ 609.378239][ T6812] pim6reg (unregistering): left allmulticast mode [ 610.919584][T21728] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 611.063894][T21729] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 611.314914][T21744] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4352'. [ 611.632488][T21759] netlink: 'syz.4.4355': attribute type 1 has an invalid length. [ 612.258101][T21779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4361'. [ 612.860809][T21799] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4369'. [ 612.920003][T21804] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4370'. [ 613.100739][T21809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4372'. [ 613.134793][T21811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4367'. [ 613.585892][T21823] netlink: 'syz.3.4371': attribute type 13 has an invalid length. [ 613.698615][T21830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4375'. [ 613.710051][T21823] veth1_macvtap: left promiscuous mode [ 613.715580][T21823] macsec0: entered allmulticast mode [ 613.759237][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4373'. [ 614.152160][ T5633] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 614.207084][T21850] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4382'. [ 614.750493][T21871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4385'. [ 614.752920][T21874] netlink: 'syz.1.4386': attribute type 1 has an invalid length. [ 614.808049][T21877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4387'. [ 614.809181][T21874] 8021q: adding VLAN 0 to HW filter on device bond8 [ 614.825998][T21877] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 614.842989][T21877] net_ratelimit: 1 callbacks suppressed [ 614.843006][T21877] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 614.982982][T21874] vlan3: entered allmulticast mode [ 614.990194][T21874] bond8: entered allmulticast mode [ 615.024347][T21874] bond8: (slave geneve3): making interface the new active one [ 615.033403][T21874] geneve3: entered allmulticast mode [ 615.042773][T21874] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 615.170556][T12524] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.179077][T12524] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.188547][T12524] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.238142][T12524] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.274112][ T6812] IPVS: stop unused estimator thread 0... [ 616.433766][T21918] kthread_run failed with err -4 [ 616.654651][T21937] netlink: 'syz.5.4405': attribute type 5 has an invalid length. [ 616.712991][T21937] geneve2: entered promiscuous mode [ 616.724352][T21937] geneve2: entered allmulticast mode [ 616.735053][ T6812] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 616.744098][ T6812] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 616.753454][ T6812] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 616.834743][ T6812] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 616.929300][T21950] bond0: entered allmulticast mode [ 617.064668][T21950] bond_slave_1: entered allmulticast mode [ 617.280157][T21956] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 617.534031][T21971] xt_hashlimit: size too large, truncated to 1048576 [ 617.633752][T21965] macvtap0: entered promiscuous mode [ 617.667989][T21965] macvtap0: entered allmulticast mode [ 617.681660][T21965] veth0_macvtap: entered allmulticast mode [ 618.500113][T21998] __nla_validate_parse: 7 callbacks suppressed [ 618.500131][T21998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4423'. [ 618.699063][T22003] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4425'. [ 618.709868][T21998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.217541][T22022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4431'. [ 619.233965][T22023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4431'. [ 619.253912][T22022] netlink: 'syz.4.4431': attribute type 11 has an invalid length. [ 619.362834][T22023] netlink: 'syz.4.4431': attribute type 11 has an invalid length. [ 619.442350][T22023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4431'. [ 619.918721][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4435'. [ 620.330059][T22043] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4439'. [ 620.451323][T22043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4439'. [ 620.548531][T22050] syzkaller1: entered promiscuous mode [ 620.554133][T22050] syzkaller1: entered allmulticast mode [ 621.181956][T22074] netlink: 'syz.5.4448': attribute type 1 has an invalid length. [ 621.215193][T22074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 621.242179][T22073] netlink: 'syz.2.4449': attribute type 1 has an invalid length. [ 621.250339][T22073] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4449'. [ 621.259872][T22073] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4449'. [ 621.270053][T22073] netlink: 'syz.2.4449': attribute type 1 has an invalid length. [ 621.278343][T22073] netlink: 'syz.2.4449': attribute type 8 has an invalid length. [ 622.341532][T22104] 8021q: adding VLAN 0 to HW filter on device bond7 [ 622.849234][T22121] bond9 (unregistering): Released all slaves [ 623.295551][T22137] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 623.306003][T22136] x_tables: duplicate underflow at hook 2 [ 623.333074][T22140] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 623.685029][T22147] netlink: 'syz.5.4465': attribute type 1 has an invalid length. [ 623.700411][T22148] netlink: 'syz.4.4467': attribute type 12 has an invalid length. [ 623.708275][T22148] netlink: 'syz.4.4467': attribute type 29 has an invalid length. [ 623.716155][T22148] __nla_validate_parse: 5 callbacks suppressed [ 623.716173][T22148] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4467'. [ 623.731415][T22148] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4467'. [ 624.152239][T22162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4470'. [ 624.175868][T22160] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4469'. [ 624.511455][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.725546][T22186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4477'. [ 625.734548][T22186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4477'. [ 625.744959][T22181] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4476'. [ 625.755608][T22181] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 627.654209][T22209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4483'. [ 627.673833][T22209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4483'. [ 627.684153][T22209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4483'. [ 629.142234][T22231] netlink: 'syz.5.4490': attribute type 39 has an invalid length. [ 629.548336][T22222] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4487'. [ 629.922079][T22222] netlink: Conntrack attr has 4 unknown bytes [ 629.935722][T22240] xt_ecn: cannot match TCP bits for non-tcp packets [ 632.371734][T22254] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4493'. [ 632.896062][T22260] netlink: 'syz.4.4495': attribute type 1 has an invalid length. [ 634.732974][T22274] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4496'. [ 634.742230][T22274] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 637.911056][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4505'. [ 640.380306][T22323] rdma_op ffff888035eb51f0 conn xmit_rdma 0000000000000000 [ 640.714360][T22326] x_tables: duplicate underflow at hook 1 [ 641.230198][T22326] : renamed from bond0 (while UP) [ 643.004780][T22347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.922303][T22351] geneve1: entered promiscuous mode [ 643.927549][T22351] geneve1: entered allmulticast mode [ 646.625355][T22353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.624351][T22382] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4528'. [ 647.646603][T22377] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4526'. [ 647.966278][T22386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4530'. [ 647.976311][T22386] netem: incorrect ge model size [ 647.981323][T22386] netem: change failed [ 648.447601][T22396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4532'. [ 648.828958][T22404] macvlan2: entered promiscuous mode [ 648.834304][T22404] macvlan2: entered allmulticast mode [ 648.843191][T22406] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 648.851530][T22406] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4532'. [ 648.860507][T22406] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4532'. [ 648.869357][T22406] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 648.877165][T22406] netlink: 'syz.1.4532': attribute type 8 has an invalid length. [ 649.273627][T22408] syzkaller0: entered promiscuous mode [ 649.279149][T22408] syzkaller0: entered allmulticast mode [ 649.853558][T22406] netlink: 606 bytes leftover after parsing attributes in process `syz.1.4532'. [ 651.524530][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4540'. [ 653.327914][T22443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4545'. [ 653.665465][T22453] openvswitch: netlink: IP tunnel dst address not specified [ 654.708133][T22473] team0: No ports can be present during mode change [ 655.127500][T22463] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 655.944247][T22487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.410798][T22489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4560'. [ 657.258134][T22498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4560'. [ 658.541792][T22512] x_tables: duplicate underflow at hook 2 [ 658.945296][T22518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4564'. [ 659.162189][T22494] nbd3: detected capacity change from 0 to 63 [ 660.033649][ T5633] block nbd3: Receive control failed (result -104) [ 660.436623][T22522] netlink: 'syz.4.4568': attribute type 11 has an invalid length. [ 660.444494][T22522] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4568'. [ 660.472389][T22522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4568'. [ 661.175628][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4571'. [ 662.470147][T22553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4577'. [ 662.849031][T22553] bond3: (slave ip6gre0): Device is not bonding slave [ 662.856332][T22553] bond3: option active_slave: invalid value (ip6gre0) [ 662.865434][T22553] bond3 (unregistering): Released all slaves [ 663.558634][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4580'. [ 663.783175][T22565] macvlan3: entered promiscuous mode [ 663.788525][T22565] macvlan3: entered allmulticast mode [ 663.794934][T22565] bond9: (slave macvlan3): Opening slave failed [ 664.984229][T22584] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 665.005655][T22584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4585'. [ 665.688762][T22596] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.277179][T22604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4589'. [ 668.891637][T22640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4601'. [ 668.900638][T22640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4601'. [ 673.355675][T22680] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 674.455919][T22684] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4614'. [ 675.278597][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4616'. [ 675.631643][T22695] veth0: entered promiscuous mode [ 675.635343][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4616'. [ 675.637559][T22695] veth0: left promiscuous mode [ 675.653325][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'. [ 675.662509][T22695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4617'. [ 676.155230][T22706] netlink: 'syz.3.4621': attribute type 1 has an invalid length. [ 676.163004][T22706] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4621'. [ 677.397131][T22716] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4623'. [ 677.422095][T22713] ipt_REJECT: TCP_RESET invalid for non-tcp [ 681.028844][ T31] INFO: task kworker/1:1H:1705 blocked for more than 143 seconds. [ 681.036689][ T31] Not tainted syzkaller #0 [ 681.041721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.050385][ T31] task:kworker/1:1H state:D stack:25448 pid:1705 tgid:1705 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 681.062392][ T31] Workqueue: kblockd blk_mq_requeue_work [ 681.068038][ T31] Call Trace: [ 681.071313][ T31] [ 681.074245][ T31] __schedule+0x1821/0x5740 [ 681.078779][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 681.083807][ T31] ? __pfx___schedule+0x10/0x10 [ 681.088669][ T31] ? schedule+0x90/0x360 [ 681.092918][ T31] schedule+0x164/0x360 [ 681.097103][ T31] schedule_timeout+0x158/0x2c0 [ 681.102063][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 681.107644][ T31] ? __pfx_process_timeout+0x10/0x10 [ 681.112947][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 681.118761][ T31] ? prepare_to_wait_event+0x436/0x480 [ 681.338788][ T31] nbd_queue_rq+0x857/0x1100 [ 681.343464][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 681.348521][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 681.354623][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 681.360204][ T31] ? sbitmap_get+0x229/0x390 [ 681.630503][T22747] sctp: [Deprecated]: syz.2.4634 (pid 22747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.630503][T22747] Use struct sctp_sack_info instead [ 681.630981][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 681.647496][T22747] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4634'. [ 681.652999][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 681.967397][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 681.973812][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 681.980599][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 682.293807][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 682.299251][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 682.304582][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 682.311265][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 682.316666][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 682.321803][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 682.327031][ T31] blk_mq_requeue_work+0x71c/0x780 [ 682.332169][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 682.338142][ T31] ? process_scheduled_works+0xa70/0x1860 [ 682.343963][ T31] ? process_scheduled_works+0xa70/0x1860 [ 682.349711][ T31] process_scheduled_works+0xb5d/0x1860 [ 682.355292][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 682.361279][ T31] ? assign_work+0x3d5/0x5e0 [ 682.365883][ T31] worker_thread+0xa53/0xfc0 [ 682.370508][ T31] kthread+0x389/0x470 [ 682.374584][ T31] ? __pfx_worker_thread+0x10/0x10 [ 682.379792][ T31] ? __pfx_kthread+0x10/0x10 [ 682.720207][ T31] ret_from_fork+0x514/0xb70 [ 682.724872][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 682.730011][ T31] ? __switch_to+0xc79/0x1410 [ 682.734708][ T31] ? __pfx_kthread+0x10/0x10 [ 682.739326][ T31] ret_from_fork_asm+0x1a/0x30 [ 682.744114][ T31] [ 682.747380][ T31] INFO: task udevd:19194 blocked for more than 145 seconds. [ 682.754740][ T31] Not tainted syzkaller #0 [ 682.759697][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 682.768418][ T31] task:udevd state:D stack:22856 pid:19194 tgid:19194 ppid:4999 task_flags:0x400140 flags:0x00080000 [ 682.780353][ T31] Call Trace: [ 683.119386][ T31] [ 683.122371][ T31] __schedule+0x1821/0x5740 [ 683.126913][ T31] ? irqentry_exit+0x218/0x8b0 [ 683.131688][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 683.137617][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 683.142767][ T31] ? __pfx___schedule+0x10/0x10 [ 683.147649][ T31] ? schedule+0x90/0x360 [ 683.152292][ T31] schedule+0x164/0x360 [ 683.156552][ T31] schedule_timeout+0x158/0x2c0 [ 683.161448][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 683.166884][ T31] ? __pfx_process_timeout+0x10/0x10 [ 683.172192][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 683.178012][ T31] ? prepare_to_wait_event+0x436/0x480 [ 683.183491][ T31] nbd_queue_rq+0x857/0x1100 [ 683.188115][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 683.193152][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 683.199259][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 683.204863][ T31] ? sbitmap_get+0x229/0x390 [ 683.209479][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 683.567303][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 683.573299][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 683.579675][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 683.586458][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 683.592205][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 683.597509][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 683.603588][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 683.608892][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 683.614197][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 683.619403][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 683.624711][ T31] ? blk_mq_dispatch_list+0x1e0/0xe10 [ 683.630097][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 683.983335][ T31] ? rcu_is_watching+0x15/0xb0 [ 683.988367][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 683.993885][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 683.999106][ T31] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 684.004415][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 684.010349][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 684.015220][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 684.020617][ T31] __submit_bio+0x28d/0x580 [ 684.025128][ T31] ? __pfx___submit_bio+0x10/0x10 [ 684.030467][ T31] ? bio_associate_blkg+0x6d/0x230 [ 684.035773][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 684.041584][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 684.047885][ T31] block_read_full_folio+0x599/0x830 [ 684.053184][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 684.058575][ T31] filemap_read_folio+0x137/0x3b0 [ 684.063684][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 684.069178][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 684.074795][ T31] ? filemap_add_folio+0x356/0x530 [ 684.079904][ T31] do_read_cache_folio+0x358/0x590 [ 684.412111][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 684.417674][ T31] read_part_sector+0xb6/0x2b0 [ 684.422468][ T31] adfspart_check_ICS+0xb1/0x960 [ 684.427561][ T31] ? seq_buf_printf+0x212/0x2d0 [ 684.432424][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 684.438737][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 684.444356][ T31] bdev_disk_changed+0x817/0x1770 [ 684.449380][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 684.454834][ T31] blkdev_get_whole+0x380/0x510 [ 684.459671][ T31] bdev_open+0x31e/0xd30 [ 684.463896][ T31] blkdev_open+0x470/0x610 [ 684.468297][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 684.473300][ T31] do_dentry_open+0x822/0x13a0 [ 684.478058][ T31] vfs_open+0x3b/0x340 [ 684.482132][ T31] ? path_openat+0x2df0/0x3860 [ 684.487078][ T31] path_openat+0x2e08/0x3860 [ 684.491695][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 684.497082][ T31] ? stack_depot_save_flags+0x33/0x810 [ 684.502988][ T31] ? __pfx_path_openat+0x10/0x10 [ 684.507925][ T31] ? __x64_sys_openat+0x138/0x170 [ 684.799600][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 684.804863][ T31] do_file_open+0x23e/0x4a0 [ 684.809367][ T31] ? __pfx_do_file_open+0x10/0x10 [ 684.814392][ T31] ? _raw_spin_unlock+0x28/0x50 [ 684.819314][ T31] ? alloc_fd+0x64b/0x6c0 [ 684.823651][ T31] do_sys_openat2+0x113/0x200 [ 684.828331][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 684.833786][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 684.839083][ T31] ? rcu_is_watching+0x15/0xb0 [ 684.843832][ T31] __x64_sys_openat+0x138/0x170 [ 685.097894][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.104016][ T31] do_syscall_64+0x174/0xf80 [ 685.108608][ T31] ? clear_bhb_loop+0x40/0x90 [ 685.113270][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.119144][ T31] RIP: 0033:0x7fa3266a7407 [ 685.123543][ T31] RSP: 002b:00007fffca21e910 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 685.132043][ T31] RAX: ffffffffffffffda RBX: 00007fa326e2f880 RCX: 00007fa3266a7407 [ 685.140031][ T31] RDX: 00000000000a0800 RSI: 000055a111981620 RDI: ffffffffffffff9c [ 685.148008][ T31] RBP: 000055a111980910 R08: 0000000000000000 R09: 0000000000000000 [ 685.156012][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a111994ba0 [ 685.164347][ T31] R13: 000055a11198e190 R14: 0000000000000000 R15: 000055a111994ba0 [ 685.172334][ T31] [ 685.175572][ T31] [ 685.175572][ T31] Showing all locks held in the system: [ 685.183283][ T31] 1 lock held by khungtaskd/31: [ 685.188132][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 685.419865][ T31] 2 locks held by kworker/u8:5/114: [ 685.425111][ T31] 3 locks held by kworker/u8:6/769: [ 685.430313][ T31] #0: ffff8880317ed140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 685.441916][ T31] #1: ffffc9000435fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 685.454732][ T31] #2: ffffffff8fdc7600 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 685.464231][ T31] 4 locks held by kworker/1:1H/1705: [ 685.469525][ T31] #0: ffff88801eae0140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 685.480601][ T31] #1: ffffc90006a5fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 685.493567][ T31] #2: ffff8880255f3618 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 685.503066][ T31] #3: ffff88802703e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 685.512061][ T31] 2 locks held by getty/5385: [ 685.753006][ T31] #0: ffff8880364d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 685.762881][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 685.772997][ T31] 3 locks held by udevd/19194: [ 685.777743][ T31] #0: ffff888026f45350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 685.786942][ T31] #1: ffff8880255f3618 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 685.796410][ T31] #2: ffff88802703e338 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 685.805403][ T31] 1 lock held by udevd/21622: [ 685.810172][ T31] #0: ffff888026fe5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 685.819937][ T31] 2 locks held by syz.2.4634/22750: [ 685.825125][ T31] #0: ffffffff8fdc7600 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 685.834538][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 685.845511][ T31] 2 locks held by syz.2.4634/22751: [ 686.089072][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.090388][ T31] #0: ffff8880290c20d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 686.106135][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 686.117294][ T31] 2 locks held by syz.5.4632/22739: [ 686.122501][ T31] #0: ffff8880659d52c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 686.132697][ T31] #1: ffffffff8fdc7600 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bc/0x9f0 [ 686.141588][ T31] 1 lock held by syz.4.4633/22743: [ 686.147314][ T31] #0: ffffffff8fdc7600 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 686.156887][ T31] [ 686.159948][ T31] ============================================= [ 686.159948][ T31] [ 686.168715][ T31] NMI backtrace for cpu 0 [ 686.168736][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 686.168754][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 686.168764][ T31] Call Trace: [ 686.168782][ T31] [ 686.168790][ T31] dump_stack_lvl+0xe8/0x150 [ 686.168814][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 686.168834][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 686.168854][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 686.168876][ T31] sys_info+0x135/0x170 [ 686.168892][ T31] watchdog+0xfd3/0x1030 [ 686.168921][ T31] ? watchdog+0x1c9/0x1030 [ 686.168947][ T31] kthread+0x389/0x470 [ 686.168968][ T31] ? __pfx_watchdog+0x10/0x10 [ 686.168986][ T31] ? __pfx_kthread+0x10/0x10 [ 686.169007][ T31] ret_from_fork+0x514/0xb70 [ 686.169027][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 686.169043][ T31] ? __switch_to+0xc79/0x1410 [ 686.169067][ T31] ? __pfx_kthread+0x10/0x10 [ 686.169087][ T31] ret_from_fork_asm+0x1a/0x30 [ 686.169120][ T31] [ 686.169126][ T31] Sending NMI from CPU 0 to CPUs 1: [ 686.508705][ C1] NMI backtrace for cpu 1 [ 686.508721][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 686.508739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 686.508749][ C1] RIP: 0010:do_raw_spin_unlock+0x5/0x210 [ 686.508778][ C1] Code: c1 03 38 c1 0f 8c 65 ff ff ff e8 e6 be 8e 00 e9 5b ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df [ 686.508793][ C1] RSP: 0018:ffffc90000a08db0 EFLAGS: 00000086 [ 686.508807][ C1] RAX: b6fadb16fa221b00 RBX: 0000000000000096 RCX: 0000000080010003 [ 686.508818][ C1] RDX: 0000000000000001 RSI: ffffffff8e215738 RDI: ffffffff9a645060 [ 686.508830][ C1] RBP: ffff88803992a300 R08: 0000000000000003 R09: 0000000000000004 [ 686.508840][ C1] R10: dffffc0000000000 R11: fffff5200014119c R12: ffff8880b8728280 [ 686.508851][ C1] R13: ffff8880b8728390 R14: ffffffff9a645060 R15: dffffc0000000000 [ 686.508863][ C1] FS: 0000000000000000(0000) GS:ffff8881253a1000(0000) knlGS:0000000000000000 [ 686.508876][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.508887][ C1] CR2: 00007f8c341ea2f8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 686.508901][ C1] Call Trace: [ 686.508909][ C1] [ 686.508916][ C1] _raw_spin_unlock_irqrestore+0x23/0x80 [ 686.508941][ C1] __hrtimer_run_queues+0x23a/0xa20 [ 686.508971][ C1] hrtimer_interrupt+0x44b/0x950 [ 686.509003][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 686.509024][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 686.509047][ C1] [ 686.509052][ C1] [ 686.509058][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 686.509075][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 686.509098][ C1] Code: fb 7e 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 41 22 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 686.509111][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 686.509124][ C1] RAX: 000000000210fcd9 RBX: ffffffff819a959a RCX: 0000000080000001 [ 686.509134][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa2d60 RDI: ffffffff8c28b5e0 [ 686.509145][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 686.509156][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 686.509167][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 686.509179][ C1] ? do_idle+0x36a/0x5f0 [ 686.509202][ C1] default_idle+0x9/0x20 [ 686.509216][ C1] default_idle_call+0x72/0xb0 [ 686.509232][ C1] do_idle+0x36a/0x5f0 [ 686.509248][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 686.509267][ C1] ? __pfx_do_idle+0x10/0x10 [ 686.509288][ C1] cpu_startup_entry+0x43/0x60 [ 686.509305][ C1] start_secondary+0x101/0x110 [ 686.509319][ C1] common_startup_64+0x13e/0x147 [ 686.509348][ C1] [ 687.524991][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 687.531862][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 687.540964][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 687.551054][ T31] Call Trace: [ 687.554345][ T31] [ 687.557293][ T31] vpanic+0x56c/0xa60 [ 687.561287][ T31] ? __pfx___schedule+0x10/0x10 [ 687.566592][ T31] ? __pfx_vpanic+0x10/0x10 [ 687.571099][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 687.577372][ T31] panic+0xc5/0xd0 [ 687.581102][ T31] ? __pfx_panic+0x10/0x10 [ 687.585517][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 687.590896][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 687.597054][ T31] watchdog+0x102c/0x1030 [ 687.601396][ T31] ? watchdog+0x1c9/0x1030 [ 687.605914][ T31] kthread+0x389/0x470 [ 687.609983][ T31] ? __pfx_watchdog+0x10/0x10 [ 687.614750][ T31] ? __pfx_kthread+0x10/0x10 [ 687.619340][ T31] ret_from_fork+0x514/0xb70 [ 687.623931][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 687.629039][ T31] ? __switch_to+0xc79/0x1410 [ 687.633724][ T31] ? __pfx_kthread+0x10/0x10 [ 687.638313][ T31] ret_from_fork_asm+0x1a/0x30 [ 687.643093][ T31] [ 687.715980][ T31] Kernel Offset: disabled [ 687.720359][ T31] Rebooting in 86400 seconds..