last executing test programs: 16m55.380923822s ago: executing program 0 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000040)="c021", 0x2}], 0x1, 0x7, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 16m54.848199468s ago: executing program 2 (id=139): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x100059, @private0, 0x6}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r3}, 0x8) 16m54.702699971s ago: executing program 0 (id=143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001580)={'batadv0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0xa0f, @remote, 0x8}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000200)="f2a4f37f2d71435cc8439908ee7b1a51d4b66e30219f54001d2ade7864f4edc16e8b118d7c20a151ce35ae9e46d87869df230e293ac6f346b88fb7c3f5656ef12091e53e5d387833953ba0a0756bf262e8cc44dc2c02b13ab69e560b3bf193b54a9e636c6db9a816a1ba7a14ec57789eb1f02f8ce9bbd524bfdf903dbfd0f2f160dcc7d116a85e224aad0afca03442e1b30c1157735392bc28538ec45278da5eed01554b64c42650399d4cab51ef9df5eb45936d37529590485c93fa51b1d72365ced7492ebc4e8c82b898e1104ec91b8e9d1c59aeac4c50632a201b3a0278342e6aaff666dea11a37e2968fc28224e4d32a1feff05136cf5e4f0ed5683a1b96524558fd00a7eecc64fe0cb420ff7a89d9526a637aa2a1844b49ef1a334645b0b649fa09e430a3bec916ccd980ef72ca9e621a29c5fb782222e57f48f215faa94a0d1353e3b7737a47961e7541f70ee407861418f3012376959e3f5ddd8ac0b7d27574caada0815724c27a0cfd0d239be3f1dd5309c8fa75905a62b6a57780e0aa2c92d99e638c245eeaaa1510df0d1f936856a0eadd4ff5b1061b286f49f104346358d6f22d65d90efb44fab6e255acaaaf4dcbf4f7c81462b30604f943b4d3c1672299a658aab02564eab09a7554bf510328f0ab29369da020644a9d38052f3771df07ffe795c017b25ec3bd3392fefb9c615bcdc7f78a73322162d48a12b8c04d54c0cdb8ac99c549deb1e3b1fcfd495591e4145453c3db5b008a11d411888f95ba1526ae7ef8c3170f876af3ffa59b7e36ee058e870d601b2deaaabca74208bb12d7241cb51472c3fb3d38663c320c3645cd4214dbdd09263b0ed07d8d0188fa06428a375eecb92ea72ed8f7db946d41a5966a02a09e82033adf00eace9126f47f5a73ab19c8aa3ff9a98f1de15f03b956cda091aa44b415aea07b7fd12eb078a6b3d86310e43152a6909462acd9d1783f85d9a4681c7765077feb4a989f4b0d1bbb859d0e69cfddc7f25b71e166c4f1f40c547c7d6a8fb5a2aa808d67b49b18d43e99094b814aaa1d057fdf19b83b48c8525a92a3bd14a577b13b98917f0051e7c620f4173028c0de7252717ffdfe54bb8c136349f4f558443063bbd562cb219ebfa063e0d67b743d10d9daef9f26acee68c172ffe223e3324a8ae2272e0f4b759dcda6a9bff0f7aaef6dcea17a6d28ab02285aeb14638099647754fc8f776533467431e03fdc15da5c0d4a066654f35e80e42bbba935a849db751ea792de684a8ac60ec06ab44edcbace73b56cf4411e4555eccd3cae2a87ebbe8ac62c6d160c3984130bf1dbd38bf0988a63d9b4c59099b5fcd9a58371af841b541a7e4f4543ed255bfb8ddef271048c0fe67c912960258380129fc432936c6adc528c9256ca926fe1a0db553acbb28a8eacfa1cf1b9be1ce8fffc8766d38c4e70e44d1c941fbb80c06bb2b9589f2e9491453b2e4e1cdcbee8087ae32ec4d7b50645416420ed61e5be136e59e008dea5b77a2665f31249e8d70081f6e0beda49de0a261105b4ee505732169482a7f07d1ce122ca70a74364c4311cf211597e7a7f8661c8c2e978bbd5f4b05d42327d15745146e4084a489ac8f4bb9bdca0eb301ed396fc0e08842f63247fc14530b3ce74c3431014564f184d1c2185e139867775b6be27061843610b003f00aa67c052fabcd362b3e44f4e60f1141816e15b6d258cecd4bb071ad014e992d42b9f887cf6e988c0f4dbaeefc6f97e9018d172ef5ba00c711183d4d09d48bddebedb228a4c3c5545e8236b23192555f003da47315bbc5d72c3a592222ccd304f2ef668effb4ab5c65c19f95fe8dce217c1d88b792d3091494a09a279cc52d857ab212048976d0933592c42dd6229a324fb8b896c0d6b163e3932ab5334584b2b14e53eba6397456ed9570f80f41446bb0c33e2880f9be173b237c7377cf459ddd084abf0fa7c85b6844ffcdb04c9e909a1729538ead61c6782c8ebab7b9e6f2fd8ed79c61fbef942eb76caf62e454763f48fba95f5a2d28e85b124f6c20c0c1830d1a65518f023e6d309419d4c2064c0990edf154e89333996f959802e9fcd2af272efa6738ce0df323beb468bbe1f3b1d0614a62389c7f00a7fa2bcaf30aecc6dd3a0e5a5c7954d8f56d9c19dd9f7e766aa99ac5078aa6c5222a87e2e0b00287cf472d195357122035c5b8ffbd251a1feb211bd097a99fb0a493e545b75bbd489c6659b5fa9c2baaa6f8d228b6b170aeb178bfd9b230060fdeb9c237e3d7eddefad151818078808f8f84e945231e0b1ffa034af9eb1b3da8e95d7cfeca6ce9f5b3ac873cd4bca2f908ef5b03ff6d888a1a739b2353be1a5a3e634bbef7322ca1280184cb3103b107accb0c2acfc9550eeb23658d045cffff7d9c7212844d9c90ae40dd777186d4335c816e827dffe1e72ae4c25dc7ab9e5cf4bc41692fd7da7f216235366956e3c83de942174ea3aa9cadea20e7a0989efe8b66b4e6a0b7f646cd1d589696799db475a98efd8d1b69005f44a169b63ef9b66d2b7e5c1dddaa24f27fc946824db5d51a171087043231709d761985e81092c291d2d6f788ea67c41872e08a6913a8ed7b839054ed906d4a6fcb5c03b6c1bd33e7f3f2a6b484ad5e60da1d83af068e984690eb649d32e82b837df71d4767a4cad8a1a7a6283800ea8678f2ffa537710f387f4c0accebe9077e7b3f5a45e9415383208c102184d83a9c1f0d1203f6f3ad2e6c497e493971d559bec25b8c94f75422520e51bf728a9352d6c9aef16b4a957065abb366f00e6fded6c1c73588b1f7afd0092dd81bccea21e9e46a161303e35cc27c9df7c071f1a884f0e2a83fdf0046e890fbfe41a139744a4c2cc744c7466b2ad9993b26e73f32767cb2b3cf61f8d6b515afce5e9e662ab496206bf49c2a5a8700405269e74b02e3c4a1d9c5d7156aa21a0a83d6d168af97ed5243e603b681564b92d97cac483562d52916d81440d7975e935fda573a746e15b88d1baab2a1840dd046230b07f7fbaf251e45dba0c2de73dc14afbaa772a0974a646987da80819164db3247fc1b92499a9944f815a32dc4f3568a34756dd82139e67193f85c554942d1922399b35bf8bf4209f6d266e0a42d4627187cb6bb3052d41d1486e90ba7216fba9274a6add0b4ba3f0423e2ed64661050e5c21c5603a673d871cae6fad4088b5095d76dcd0d4828307d4246987173d024619a033d4021f669377bdb531350c553409c5ce9c75079c73444e2dd4d6de6d7c785700fedee3997f2be8a4537839fb035c94aed026ddc0a5190e69be030283ce918bd482a2e08bd8e14feacb968ae3e738f42d07f8dfad2d48f2d363cfc4adfb369558df97ba2b48c99fa6694dbaeb8daa68f25c7dbe776c207de2fd02bbde057fd77b1323162c41ae5c7d355880e5620582d9c367f6b072c29bd67892a4f4306606f0c2ca2ae322263a93372a293c3c49430c9ebe7fba3b57bec5f0bfdd77ef09463d0df97c5d0923d63425541603e529beabdc887ba78d7ed2890b1cf5960a518eda99d75fc3b4e3ca32ef83151f958644d4bb0599fc53c04eb731af58d638b21f66adf013f1bed9bbe8006baad5209cb58c588dcb6edcd59cdd9a4d2d34fe6a3632688c8cbb45ca4ba9e80b45df547965c41c71366fb9f929e83631f9f6caa57a33f572870dfedae535339e7f0aa3e819dae3ac25dd7cdd50d9fa8b7ba4f67e7d99efd46c2c2293fb9f6df7813220ee5dfc240bd3b04bd634f0006533a4d2f055b255633d083a12c9eee703285952b5ad13c631c0749d97587e1dde95eefcecfe00aee7a557ecdad7ff8fa5296eb8b4bc33435337ac28309faf7c6d27ceb0e4902567269039656570fea3f4220d286f88012f5fddd9181551bd72e79e11ad5c54c72083ce14243687ec9f58cf1a15cc0bb373426bae440e15a68224ebb967eb64c7e85a6db23cd886a34b5fc97b0fd3e7dff2a111b35ee448c52bd5ce1c5ceb07689286ce9db64b665750b049d65c49d4133db3307dfe84f922f04a11543c753fc6fe84afbe8b6869d628bfe6035440814b0877f68ee223446c4c70a1c523431beedd0212b8543a92810f06e0b0aebc4d1a0ff771df7170c1d0754c65fdab78ef5bdb07a452dc337a88693a603600679e26d83223e221487b88f1e987f6ebde8a2fb6a6bd9955ed822314a7c27d27f11a06f88e95d3a0deae3bce545225a44e0d9ccafd7f8076c8d608fd3759b57918d6eca2259efd5ae3486e005ed3288cffea9c25468b1f8874928615f3cc00173035172e163440d6bf0cff7e444d00811cbccd7d9e268ed47ea14dd1ac612803aaf802866714a80afa9d766328d6b9845610f5d86efe1ad734196d1a41d9b3451b97e4f10e2d5b1c89d4727346475427eb236eeb9c76e461c9b7e8a5056aa6db814afacc9781027eda1f9a8681961fb573a72f3c1b68b4679d0c45d7f746c161d8d0747ba870ef8ef1182dcf3c3bdf1be4efb5a79cb3b7aabc1aaadcbb2bb977103d0ccc11775e4c051cb1b963302adc7b9a93985f4022bd067eaf2670f32adf04b86ddbdc833a76a5c77caf904cb9fca48b09db65bbb8679c7e1b3350877314024b31a89eaeca57aab9d76e30db2ba5cfca2c4fe02ed80f23d12f7129b826dd3a13b1cde5ba29b7e1f2af65abe1c9ed1531e4ffd46d201baebf9ca5a8b305b43e500021b54b4ebf742e1ebaf97b110d93cf5f2916a1790e7af9406b8636fe280c584054b648162f28f28b54b85386109ae3b768bf225292a37674cb43615d20339e96b0574abbf377703a0d91bed1923f483254394abddb047e6bf950fca6f39d5399d14dcec799b063371ba614a2ad694162fa4946273af54868de18139828eff82c69d719b13ba3de0af4ed0f682eb7d73b917bcf03c6b5dc4571a066846b5ec7a30b8eed22450173cb20c836176dfaf2956fee95d8740927d7838f40fb7649bf9a004c442c29296cf467984e32ec035d26394df08afed2332211cf66dc9244f5a25e73c24f218babc319f920a3046869ca588b7e101739050757282909ba071c297395a80dffcaea8ef1f8ce5854c1da1bfda035c116967d2b5613aef429e47f7285c713fb5c56e8fa9f3eaec3fe13a97d87e0d5d18bc2af087e21b96ab745b112cd9c00f9129fa3f5b91843e279dd001c35d6e51f3a95c441e66ebac17c8a41cf9969e254b8797be294d00980fd04932b08cf68a5fbb21d7d79f4595abe444e327028a562b10e68bbae256d3b834c5ee3c9dfbc7a7bf28c840f5f93eae978b1a3d3127e4edee55062c608bf1cf8128d04be734355bf51474bc3668998ef3d6f6e3ee0dd23ca8d37f613be6f5bdf65fe6637b303efe943d348af9352c643290f2a38b0ab3d901b83ec8642f942582dd88e019e957f559f3ad2340d23ffa8bdd645a6dcc5f5b5deb6b497a4e125ae4511f78e2e4d10a97ee51ddf786ce25aa0f282b9ac6b8d6ccf6deb5b313e54c3f410cf53b3a0221f2e865a2458658cfd11c4776242098cb27d7214b360eaa680e82ab0e63bbc1ca8d13b499d6c1ef720c9dd22d18025a59368b47e3a6180c7554cea6be53be2f0cfb2bae668cacf318d5544e7e150e698ceed3d7235cc7b69f4a1fbb6f1937a3706278333ff10828d6e22e30e3b149bb0f1ec2c9a16ce31262a32aa06dc1dd059535c5049b3c2afb2b94bab5e518d3adc05228862f1d709360130a069b78407181912f5150f2756974bd892683d50653e92c74dc835bffb817d1a64a1a508b371f26c60f58decc665a01fd0e41defc0db81", 0x1000}, {&(0x7f0000001200)="9a6b2491fa9a5245343bb43afedcb53944d89f576e6de01143d35b763916724db62dab58e5b7c62bd0aa366a5f9ff27fbac20ed199b9966e431502c1adcaf29f5344fc69f566dc1c02e15220c5b784ca3cdc69a5ae9c129d458f49", 0x5b}, {&(0x7f0000001280)="602d416cc473b8fae4dbc307423b3b11930a92e955a9abd5bf6f32f9363f47b8ad5924178dcd4537d3ccc8b721715a7df5bc93ef3632afa5b3c953f28c8cd7a91c3c4c42f2fb6b6e3e18e52033d545b52d1308d090adb06c02446fbe7289d2ce3fe51abc43acb74c76b42eba33368f239f01574a31c77a506310915de7b82781cea43a7c62dae3a9bc5b47facae1311f4c5d", 0x92}, {&(0x7f0000001340)="e5f92fbd38b42456925742cf27fe4c08be772e238f576045802cc9142dc1240314cf69099126125f7fc736d3c9f8b3337fbc6dd317c546c244b90c5f22e108f3ee81f5e2ffdb7be7c685e28c78c1b40466fe7147980dd9955861e89d26ac7744a426cbac82f9c8d608ff7b6b1c6f1e0217eabf93a1cb929ff33accaf3fa6ad4e1e13ab7d9e872e94ae0ba9fcee3bd03d199ebba41223d31c566dcd12d1b28aa38adf09ae360ed143d4ef", 0xaa}], 0x4, &(0x7f0000001440)=[@hoplimit={{0x14, 0x29, 0x34, 0x80000000}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@ra={0x5, 0x2, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x70}}, {{&(0x7f00000014c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xb60}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001500)="95ede0aab5cdb4bd0ad0fcc6", 0xc}], 0x1, &(0x7f00000015c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r4}}}, @rthdr={{0x78, 0x29, 0x39, {0x6, 0xc, 0x0, 0xa7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x14}, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @private1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hopopts_2292={{0xd0, 0x29, 0x36, {0x2c, 0x16, '\x00', [@generic={0x7f, 0x2, "d5e5"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x9, 0x10, [0x4, 0x2, 0x10001, 0x1, 0x5ed]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x5, 0x6d, "6616aef398f1bb26b01760f2098b7497cf86862343532d769b294eccf5c6bf4034266ddef20daa255418db4701d8d103c652ca3243bab90a0ae1b691f7fae9e6d9be3db63408d5c7fc0f2686ac7f198929c4050463cb1b3f594730996c97fce70210a7b8753f3bdf9e18a3b8f0"}, @pad1, @ra={0x5, 0x2, 0x81}, @pad1]}}}, @dstopts_2292={{0x270, 0x29, 0x4, {0x0, 0x4a, '\x00', [@generic={0x4, 0x59, "b60e81d7ba3050c9cc6e42b783503691d555a87f651efde651fa6062866052292f2915aa1d0c320cb6745864fc5e8cc283a0c71f4bac5d21441c020dd6666e4791d4aa5dadc5cd4ee1e036f9055c95e5d7a9480a36f21c2dca"}, @ra={0x5, 0x2, 0xe8}, @padn, @generic={0xec, 0xfb, "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"}, @enc_lim, @jumbo={0xc2, 0x4, 0x7fffffff}, @ra={0x5, 0x2, 0xde7}, @pad1, @generic={0xfa, 0xe0, "42b609b804aff2dc73865b376f9e7f550675d5a0c2f6f618ebe6999294747efbce7cc24ea73aa7851563fa23dad4bd436838a24cb3dbdb6c38e7a963cc74d9906b1ca0d651d48d718a3966b7052a47f35372c82d5e3274d04757fbb95164672337c05c86eb11e04a2ccc9d0f4db4bcdf93354b2bb7c0beddfe4b3cc828e4256353f0df44c8ed6cb6af7d0e5dba4622e42088000534c306947a466208327a40e903562fd007232edb8b5a6827168bb545530b2181c3e3b23ebefce06261d58125beb9a760d584efed4e5befa2f5127bbb3dde7a7f3e794fc424dd1c3fd28d1b50"}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x5e, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x400}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @flowinfo={{0x14}}], 0x470}}], 0x2, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000001c80)={&(0x7f0000001b40), 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xb8, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7a}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001d00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x48, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000050) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e80), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001ec0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001f00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001f40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001f80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001fc0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000020c0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x5c, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40040d0) ioctl$sock_ifreq(r3, 0x8921, &(0x7f0000002100)={'wlan1\x00', @ifru_mtu=0x7}) syz_genetlink_get_family_id$nl802154(&(0x7f0000002140), r0) sendmsg$inet(r3, &(0x7f0000003300)={&(0x7f0000002180)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000003240)=[{&(0x7f00000021c0)="0434d290e8c17d754de450f1543991f48670076ba9fea79f94141600217f5f6e8900ac7735ad07d40c9ce5debec8828a604b771da07303f5ebab9ad1d36c0fabcfc9558f5da7baa0013d3421b2f6629e9650c313163797e77c59f86031313c65d4b65a5a2fffc3c6fe633136f388e4e872c717fdf55121a93c8b", 0x7a}, {&(0x7f0000002240)="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", 0x1000}], 0x2, &(0x7f0000003280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x48}, 0x10000000) r13 = getpid() syz_open_procfs$namespace(r13, &(0x7f0000003340)='ns/user\x00') ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000033c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000003640)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003600)={&(0x7f0000003440)={0x18c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0xe0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0xbc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6ff}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xab29}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20080c1}, 0x8001) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000036c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x14, r16, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x18004}, 0x40) 16m54.613604495s ago: executing program 2 (id=144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00000000000000006d000000008a5d793e8c9c0df400000000000000"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="440000002000010026bd7000ffffffff0a142040030000070000000014000100ff02000000000000000000000000000114000200fc020000000000000000000000000000b70aeeb9964d0bcf3eb8038ea0af37d62e3274b35db1041d077ce16e15d833dfaa4ad66b265370c3e7431592ff5d8b599a9890266380bde27ab4a808662f41f9e5a3f124f4c5cfdcad2930fe0e8dadec7664aa430da9f8237f0d0db9c1b1e5c6e9dea59e4d6bf5b0cbb24f6fd8d083fb124b1ade37"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e21, 0x8000, 0x4e24, 0x9, 0xfcf8d278083eddec, 0xa0}, {0x5, 0x1000, 0x5, 0x8001, 0x7, 0x3, 0x98, 0x2}, {0x9, 0x0, 0x9, 0x73}, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xf701a192b5f05b74, 0x3, 0x40, 0x9, 0x10001, 0x2}}, 0xe8) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000018c0)={'virt_wifi0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r3, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(r12, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)=@newqdisc={0x134, 0x24, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xc, 0x5}, {0x3, 0xffff}, {0xfff1, 0x1}}, [@q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe91}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa61e}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd70}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2a}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8c9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r14, 0x0, 0xc8, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="040000000000000000000000ffdbdf2502180000ff03f60600000002080001005c6f67fb705daa48cd3c5854ac141400"], 0x69}}, 0x20040854) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r14, @ANYRES64=r10, @ANYBLOB='\x00'/12, @ANYRES32=r11, @ANYBLOB="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", @ANYRES64=r10, @ANYBLOB="9a7dc843f2868f0fafbbad0faae7f422d08c6c42d9bb7a68cfe5d684dcbd513e296ebac8ef4a83a71772b73d031117196cd11de2046ee64510a9c2883ac1f7c490195dd5ef5bce38b7134ef2897559efc07cbe54973e65785418c611c307bdb54097", @ANYRESOCT=r10], 0x40}}, 0x4048000) 16m54.279479133s ago: executing program 4 (id=146): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000380)=@isdn={0x22, 0x7, 0x6, 0x80, 0xf7}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000480)="b9ede4e387a466d3195b82ec4cf87310f60c09b72c56c5f4ff03d697be7c65ed43da62f767ed045f1298ad1f9a3a0a3499ad5553e5a3d1028c25238941cea9db4a9d8d13cb0f5897c27aa0d290822cffe8503840e6c26e4e555ec0829115154748807b71825ce7e5f788397c597836a3581b096d33ed46ae21d2fb104beb08f38c51c49c26f27587b35688f3fbc36ed2d145a1fde19dad0b166a4920494d63cc79ef06d7cb793cbb74203389796c32dc4b001518e28df5eb8eca55256d3d6d7d6c31baa3f77ab8c18ad200bdc2db7ee12530b97e2c410e8a86bfd47e072db493afe1c39997cee4daa08cd82f65d8e2483ef03344d1", 0xf5}, {&(0x7f0000000600)="a285657438a924999b44f27ac2ce81aa423da7838d666dd819504ecc1fa27a11da68bf413a535ec60e5c3f25310b2ca4676bf684c6df6609b121c7ef6b86c4ef417a36bc8084ee4ed6567e5fb927ddd790ff5b7af0db479dae6e456a9ff5d8c9a599d5084c058c3824f8415a48605d101efed3300a220c3b8ed6de198db72733a827aa780bcd749506930b94ecb3eae18616b0b9964ba99c9249fbcf730031bfd58f0dc097d9d349b0c5195de1eaa4e5a4cc08afe60d6f0856c6626df4bc762f8b86d7601714", 0xc6}, {&(0x7f0000000700)="d9d25d8f1637318dc5145205f27fc22c7f52dfff1a0e83f88ec712a569d35f362559ae601f4f840f14db01773f9787a26614364a58c4becded398567f10262f43a257c1b0844b47be9e427bdab67965b90ff123b2f32870d3d11459840ab56713d916313e23433b89f8a48f3833b9cf4ceb3a2d9f4bad6611f06d003378ee15401ae41dc449544c84a0ac9812c882f9c40aad5f9", 0x94}, {&(0x7f00000007c0)="9a7a1c8f4d17d0018b9352cd0e06c8f22428852101c01583452daf6eb10e545c14f59591ad700f5015f0ce460691163acb554745b316010e425be6f037beb67606a99ff1873f26f4391f5cc6dfcb98f43a76629d42c3d9bc99e80600205038f944654f99c5fc54b789d137e4c9dca16db7c40330d94db8d4d89d46054ad6c5580488d65f3e0ee60c14f01b78d175a1c2d98081c2d5143ca5a4d8223b4c0d2b66ee5835254eda0c1176a8", 0xaa}, {&(0x7f0000000880)="861438de0077b2f19acd4d630a52080911f4d37fd00e52642b28d3c81534f68df3f0bd5a0dfbd4211722d0862bbbbea5216dbbf38c1e9175a816eb7eb7674b70becf5b63394f6ca8e67fcdd1874680d98c0b37c92dbe4372a5c623738fba6da37aa612e841fda9f6bbf0e952d95f716f8917a35be469c075608623df8453e179deb3bcc80a7a5c71137ac172dddf3acdca8157b50212c7c9a264d764c1bb9f171496467561248fccceddd5637f8afcbc", 0xb0}, {&(0x7f0000000400)="8d0f7faea3cffcfeb4db434e607d6057f8179559bcd137e28e68eac59cf10f4a95623c0efe4ee2be67e43233b935b74c6eb4416caae8aa78550fc08f7903", 0x3e}, {&(0x7f00000009c0)="e741199ca95dec6bbe350425f0f3cf32f7081c33bee362d7d915329c26b69fbfb5618ec66d5761273568e21e4042819993231445e4ed54521bf434109b76e84c2120a13ef47659f5e0d91cdef5a57cd0cf", 0x51}, {&(0x7f0000000b40)="0d30b85192eeb2a3357d9c499dbeb65dab487407f70461891d408621ae557ceed93c21b472a2f59dd602b450f98796eaa1116127e33d7354a4bccf42e52c5d43b0fd7bf293262cd534b414dccfdb7e93fff5cec3201ebc7e630f49a2bfcb93f452d101180f96b49ce8bf30c191f071a79dd06868b64c980285aab9671231806fb853412b6449f45cb5d9754d8da843cacc224dd35caff057b22cdba0dca7f025005d241a4dd56af170abbdf60ea6c8acd1dde497b1d69f5a12f76feeb48583dd7565f7d571bf55545eea37358191cd1888", 0xd1}], 0x9, &(0x7f0000002d40)=[{0x1010, 0x103, 0x7fffffff, "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"}, {0x78, 0x119, 0x46e, "c2bca48f76a4440f4140225e2883e13adfa0ab59463baf706f54d982e624b3e2144484dccc87ab5b869765e2078fca356d58d19bf9c2463d86d67c4197d136ad2be8406e1b785b61d1df330ed2757334eb3dff9ae75bc41063939341a5ac6debf5f266366f7990a6"}, {0x38, 0x10c, 0x5, "09ef7522729e552c823e93ddd59259f9532f442fcc840f12a53a02fa2ea2dde1334ee6d675"}, {0x78, 0x84, 0x4b1, "2cb8d33698e6704a42ee8fc2b3d757d6d40c4d2c7736dfa5c2cd2c0ea7f16005f44358d06e6dca67e8d3b6516ef19e3e970a6ecfcf8e14b6293bf7ee996f21f714815f2740793f648ed709c7d0ed281ecb4f60d98bc59150be7fe0725796abcaa27bbad32755"}, {0x60, 0x10a, 0x94, "d582eab04d85544fb1db055809db4c73ea1efc18367f826622f56dbeb2472573791db1427a1c50f7b322d035f3797a504fc369292b30a704cfac31ae60fb7fd3f31ee4f48fe23075ae38b7acad"}], 0x1198}}], 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410028bd7000fcdbdf25210000001c002d800800020003e8ffff0400010009000054370004000100000008000300", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10) 16m54.197501928s ago: executing program 2 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500029001501010100004b000009795d27000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0000000000"], 0x50}}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000b7050000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r8, 0x25, 0x0, @void}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r10}, 0x5) close(r5) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r15 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r14, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r16, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) (async) recvmsg(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/169, 0xa9}], 0x1}, 0x40) (async) sendto$inet6(r11, &(0x7f0000000440)="a8c08e08891f73e5dab5ffaffb378d6a62dee9ec37f527a5db553cb6f948f80c71710766d996f3326c817ea9dfd8c6ae1281c53c6abd0a683de5f205d72932a2a886f6c8968b5c46dc9651306f12b82e28b91a9da4ce5fa554d969f32578b035b371d43ccd3c9df1a3f08146608e4acc72eca1c77d3fd8b03fbe8d37887ce8073ce32a961a8f9cbee9c3a07b922a62de115f2b9b1cca4e57373be9e3a811c02490b18ea792c7ce7c", 0xa8, 0x4000, &(0x7f0000000380)={0xa, 0x4e23, 0x401, @mcast2, 0x6}, 0x1c) 16m54.170259172s ago: executing program 0 (id=150): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x1, 0x2, 0x2, 0x6, 0xfffe, 0x4}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x6, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x9, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000004340)='netdevsim0\x00', 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r8) 16m54.000435605s ago: executing program 4 (id=151): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @mcast2, 0x5}, 0x1c) 16m53.91173371s ago: executing program 0 (id=153): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$MRT_TABLE(r0, 0x0, 0x31, 0x0, 0x0) 16m53.693600197s ago: executing program 4 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000480)=@req3={0x2, 0x0, 0x5e, 0x2, 0x3, 0x9, 0x7fff}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getnetconf={0x14, 0x52, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14, 0x0) (async) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000480)=@req3={0x2, 0x0, 0x5e, 0x2, 0x3, 0x9, 0x7fff}, 0x1c) (async) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getnetconf={0x14, 0x52, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) (async) 16m53.604474635s ago: executing program 2 (id=157): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xd) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 16m53.45613356s ago: executing program 4 (id=160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000055}, 0xc801) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0xffffffffffffff7f, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x39, 0xb, 0x70bd26, 0x4002, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xc}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xcf}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 16m53.281709083s ago: executing program 2 (id=161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) 16m53.053712654s ago: executing program 4 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 16m52.861802184s ago: executing program 0 (id=163): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$kcm(0x10, 0x100000000002, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000001fc0)={0x0, 0x0, 0x5}, 0xc) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 16m52.793414457s ago: executing program 4 (id=164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}}, 0x4008021) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r4, 0x20, 0x9, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004854}, 0x4040) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc3a8967e00861bef}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x428, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x230, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ca27f506e3c7382b8b5fc743ad99c519cf39a99bb4b72cb2783572f9c8f99745"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "33b9d680c52c993be951500f40178ffd6795b1b516adec5326270e544683be93"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x12c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa8ca}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4f4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x28}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8f100cd74c9d580bd52784d7d1fcaf77"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e1fd6a717d333f4eb0362fc1a4b731830f3ae4dd1e3620e69f8f7e843daf3ffb"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3198d1acd0f765442585da7a33030bcdcdcb56d8a1c72787dfba9fe9a2b1a476"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ab750f194109082a33fc21954ca409d4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3d2310c2c90f8f00cc18f24f714661a62d71864d64ee8a2173986fe695a8bd0c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b9ae036cf68cbc99f5958487cfd5e78eb79abf1f70827ca1ca3b34380b572166"}]}, @NL802154_ATTR_SEC_KEY={0xd4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "84ba4e82dcb0ccc96feff8f958efba96"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6df4bcb50a59c2d9b28ea9f9fd4f1ef2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0ffd72a1a67033c653b3f85b66fb4d75c0c73e937ac280af43594bd4b0439fdb"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x428}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000840)={'wg2\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0) (async) r5 = accept$inet(r3, &(0x7f00000008c0)={0x2, 0x0, @broadcast}, &(0x7f0000000900)=0x10) listen(r5, 0xffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000009c0)) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20001091}, 0x4000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x210c02, 0x0) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x75c38f371c9f7bd0}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r11, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000800}, 0x4008000) (async) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000001080)=0x0) syz_open_procfs$namespace(r13, &(0x7f00000010c0)='ns/pid\x00') (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f0000001140)={0x3c8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0xb9, 0x2a, [@mesh_id={0x72, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x1, @device_b, 0x2, @value=@device_b, 0x80000000, 0xe4d, @device_b, 0x7}}, @measure_req={0x26, 0x76, {0x2, 0x8, 0x3, "8c9cb47b36ac2300d97020fc124c41529cb23369d5ecd369d2196e626a30677985685fde785b82f685869ec8e27d94518ddac3e92061a450e8244e2e5ccefd228803c3e46b74d76d354b46bfc502fd40ac364a0bd9ab2f019d5f2563afefbb7d4fe9a80006f5642c39528f00e6762f660ca354"}}, @ibss={0x6, 0x2, 0x3}, @ssid={0x0, 0x8, @random="131cb78dca45efc8"}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@chsw_timing={0x68, 0x4, {0x6, 0x8}}, @dsss={0x3, 0x1, 0x74}, @dsss={0x3, 0x1, 0x38}, @link_id={0x65, 0x12, {@random="7b2aa5ff9283", @broadcast, @device_b}}, @supported_rates, @challenge={0x10, 0x1, 0x12}, @mesh_chsw={0x76, 0x6, {0x3e, 0x7, 0x4}}, @challenge={0x10, 0x1, 0x9d}, @random_vendor={0xdd, 0xab, "4ee8024da3b2195f5675b8e6e0f96b0d62ef1b14dbf7e273f4ead286b27849f1964bf36dfac989704e315aa50e87ef794e73a1a9adececbe544651fff7aa6af65db0da1d74879a2455c966d1803a1bc8a6b8ddf1c67aec00e8cefc917f67e7d64c9906cefa66146c611a5bb9788fe803889d49b47136e077b7b9030b5a5f58f7d9bc01a953c1094f03e1c4e8c6d7700576c5f054ed30dfd7440b20c3de30eba2aae604332de8f1ddce18a5"}, @mesh_chsw={0x76, 0x6, {0x1, 0x3, 0xa, 0x2c}}]}, @NL80211_ATTR_IE={0x1f0, 0x2a, [@challenge={0x10, 0x1, 0x39}, @perr={0x84, 0x82, {0x64, 0x8, [{{}, @device_b, 0x2, @void, 0x22}, {{}, @device_a, 0x3, @void, 0x2d}, {{}, @broadcast, 0x6, @void, 0x11}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x35}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0xd}, {{}, @device_a, 0x4, @void, 0x3d}, {{0x0, 0x1}, @broadcast, 0x1db73d79, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0x18}]}}, @perr={0x84, 0x4e, {0x8, 0x4, [{{0x0, 0x1}, @device_a, 0xd3, @value, 0x2b}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0xb}, {{0x0, 0x1}, @device_b, 0x3ff, @value=@broadcast, 0x3c}, {{0x0, 0x1}, @device_a, 0x3ff, @value=@device_b, 0x3a}]}}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x41, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x5, 0x6, @broadcast, 0x3000, @value, 0x8, 0x7, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x10}, {{0x1}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}]}}, @mesh_chsw={0x76, 0x6, {0xa, 0x7, 0x5, 0x4}}, @random={0x0, 0xb8, "75f6dabb5a3e37d2ce7a42aaee300c867dea3159699ebb4908f3ae8865c2b9d3377266ee011ee0b1414c2d0d038a66c11a464e6462046d13ea93c37ca97138db711df27037154662368f6622c0e89ccdf95cba0b952596a6c4530f323b495a70dbb8feb3656c2de42273bde243172d9b90b9696f6908ccd4f062e7fbfcd6eed5715592343d356900073873093018a94dc52e9a99134b79553242a1ae98999e1b2550f7c69f132f6b9458cdef0143556d5b78063dd65957fe"}]}, @NL80211_ATTR_IE={0x4}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 16m52.378100248s ago: executing program 32 (id=164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}}, 0x4008021) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r4, 0x20, 0x9, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004854}, 0x4040) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc3a8967e00861bef}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x428, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x230, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ca27f506e3c7382b8b5fc743ad99c519cf39a99bb4b72cb2783572f9c8f99745"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "33b9d680c52c993be951500f40178ffd6795b1b516adec5326270e544683be93"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x12c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa8ca}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4f4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x28}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8f100cd74c9d580bd52784d7d1fcaf77"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e1fd6a717d333f4eb0362fc1a4b731830f3ae4dd1e3620e69f8f7e843daf3ffb"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3198d1acd0f765442585da7a33030bcdcdcb56d8a1c72787dfba9fe9a2b1a476"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ab750f194109082a33fc21954ca409d4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3d2310c2c90f8f00cc18f24f714661a62d71864d64ee8a2173986fe695a8bd0c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b9ae036cf68cbc99f5958487cfd5e78eb79abf1f70827ca1ca3b34380b572166"}]}, @NL802154_ATTR_SEC_KEY={0xd4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "84ba4e82dcb0ccc96feff8f958efba96"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6df4bcb50a59c2d9b28ea9f9fd4f1ef2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0ffd72a1a67033c653b3f85b66fb4d75c0c73e937ac280af43594bd4b0439fdb"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x428}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000840)={'wg2\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0) (async) r5 = accept$inet(r3, &(0x7f00000008c0)={0x2, 0x0, @broadcast}, &(0x7f0000000900)=0x10) listen(r5, 0xffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000009c0)) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20001091}, 0x4000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x210c02, 0x0) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x75c38f371c9f7bd0}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r11, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000800}, 0x4008000) (async) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000001080)=0x0) syz_open_procfs$namespace(r13, &(0x7f00000010c0)='ns/pid\x00') (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f0000001140)={0x3c8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0xb9, 0x2a, [@mesh_id={0x72, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x1, @device_b, 0x2, @value=@device_b, 0x80000000, 0xe4d, @device_b, 0x7}}, @measure_req={0x26, 0x76, {0x2, 0x8, 0x3, "8c9cb47b36ac2300d97020fc124c41529cb23369d5ecd369d2196e626a30677985685fde785b82f685869ec8e27d94518ddac3e92061a450e8244e2e5ccefd228803c3e46b74d76d354b46bfc502fd40ac364a0bd9ab2f019d5f2563afefbb7d4fe9a80006f5642c39528f00e6762f660ca354"}}, @ibss={0x6, 0x2, 0x3}, @ssid={0x0, 0x8, @random="131cb78dca45efc8"}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@chsw_timing={0x68, 0x4, {0x6, 0x8}}, @dsss={0x3, 0x1, 0x74}, @dsss={0x3, 0x1, 0x38}, @link_id={0x65, 0x12, {@random="7b2aa5ff9283", @broadcast, @device_b}}, @supported_rates, @challenge={0x10, 0x1, 0x12}, @mesh_chsw={0x76, 0x6, {0x3e, 0x7, 0x4}}, @challenge={0x10, 0x1, 0x9d}, @random_vendor={0xdd, 0xab, "4ee8024da3b2195f5675b8e6e0f96b0d62ef1b14dbf7e273f4ead286b27849f1964bf36dfac989704e315aa50e87ef794e73a1a9adececbe544651fff7aa6af65db0da1d74879a2455c966d1803a1bc8a6b8ddf1c67aec00e8cefc917f67e7d64c9906cefa66146c611a5bb9788fe803889d49b47136e077b7b9030b5a5f58f7d9bc01a953c1094f03e1c4e8c6d7700576c5f054ed30dfd7440b20c3de30eba2aae604332de8f1ddce18a5"}, @mesh_chsw={0x76, 0x6, {0x1, 0x3, 0xa, 0x2c}}]}, @NL80211_ATTR_IE={0x1f0, 0x2a, [@challenge={0x10, 0x1, 0x39}, @perr={0x84, 0x82, {0x64, 0x8, [{{}, @device_b, 0x2, @void, 0x22}, {{}, @device_a, 0x3, @void, 0x2d}, {{}, @broadcast, 0x6, @void, 0x11}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x35}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0xd}, {{}, @device_a, 0x4, @void, 0x3d}, {{0x0, 0x1}, @broadcast, 0x1db73d79, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0x18}]}}, @perr={0x84, 0x4e, {0x8, 0x4, [{{0x0, 0x1}, @device_a, 0xd3, @value, 0x2b}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0xb}, {{0x0, 0x1}, @device_b, 0x3ff, @value=@broadcast, 0x3c}, {{0x0, 0x1}, @device_a, 0x3ff, @value=@device_b, 0x3a}]}}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x41, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x5, 0x6, @broadcast, 0x3000, @value, 0x8, 0x7, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x10}, {{0x1}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}]}}, @mesh_chsw={0x76, 0x6, {0xa, 0x7, 0x5, 0x4}}, @random={0x0, 0xb8, "75f6dabb5a3e37d2ce7a42aaee300c867dea3159699ebb4908f3ae8865c2b9d3377266ee011ee0b1414c2d0d038a66c11a464e6462046d13ea93c37ca97138db711df27037154662368f6622c0e89ccdf95cba0b952596a6c4530f323b495a70dbb8feb3656c2de42273bde243172d9b90b9696f6908ccd4f062e7fbfcd6eed5715592343d356900073873093018a94dc52e9a99134b79553242a1ae98999e1b2550f7c69f132f6b9458cdef0143556d5b78063dd65957fe"}]}, @NL80211_ATTR_IE={0x4}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 16m52.362747848s ago: executing program 0 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x60, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_MASK={0x30, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="6ebe3018046b2c626a05737446ffc208", 0x10) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x3, 0x0, 0x0, 0x10, 0x2}]}}, &(0x7f00000006c0)=""/184, 0x26, 0xb8, 0x1}, 0x28) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) r5 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r5, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 16m52.164526374s ago: executing program 33 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x60, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_MASK={0x30, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="6ebe3018046b2c626a05737446ffc208", 0x10) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x3, 0x0, 0x0, 0x10, 0x2}]}}, &(0x7f00000006c0)=""/184, 0x26, 0xb8, 0x1}, 0x28) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) r5 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r5, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 16m51.242754059s ago: executing program 2 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002700)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x3c, 0x11, 0x4, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x800}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}]}, 0x3c}}, 0x0) 16m50.858053408s ago: executing program 34 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002700)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x3c, 0x11, 0x4, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x800}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}]}, 0x3c}}, 0x0) 3.009543704s ago: executing program 7 (id=9431): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c80)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x7, 0xc40, 0xff, {0xb0, 0x0, 0x5, 0x0, 0xb81}, {0xe1, 0x2, 0xb700, 0x0, 0xe, 0x80000001}, 0x7e150704, 0x7, 0x10001}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2.80179945s ago: executing program 7 (id=9434): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.030027142s ago: executing program 3 (id=9447): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200000000940, 0x200000000970, 0x200000000af6], 0x0, 0x0, 0x0}, 0x562) 1.9135059s ago: executing program 3 (id=9451): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x3}, 0x12) 1.881375149s ago: executing program 7 (id=9453): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000640)="e8b770", 0x3, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.748739307s ago: executing program 3 (id=9455): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x10, 0x3fb, 0x210, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.682027334s ago: executing program 7 (id=9457): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x14, 0x3c, 0x0, @local, @mcast2, {[@routing={0x21, 0x0, 0x1, 0x5}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) 1.562131451s ago: executing program 3 (id=9460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}], 0x1, 0x608d850) 1.543496991s ago: executing program 1 (id=9461): socket$inet6(0xa, 0x80002, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r2 = socket(0xa, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.484905616s ago: executing program 7 (id=9464): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local}, 0x5a, {0x2, 0x0, @dev}}) 1.378948222s ago: executing program 1 (id=9465): syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x52, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900, [0x6, 0xb, 0x3e]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8a, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x89a0}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) 1.361696659s ago: executing program 6 (id=9466): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@call={0x85, 0x0, 0x0, 0xc9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 1.261759573s ago: executing program 7 (id=9467): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.261377619s ago: executing program 1 (id=9468): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x0, 0x4}, {0x4, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1.260776071s ago: executing program 5 (id=9469): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) 1.204708219s ago: executing program 6 (id=9470): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x140f, 0x60ceaae1ef55e4c3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x22}]}, 0x34}}, 0x200080a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xc53, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x4, 0x3ef4, 0x68}, 0x2c) 888.206974ms ago: executing program 5 (id=9472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x24040800) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r5, 0x1, 0x33, &(0x7f0000000000), 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000200)={'geneve0\x00', {0x2, 0x0, @multicast2}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @multicast2}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="af4aac76bf480cce460b376b0e04b485ed8d56d264836add63984400000010000507", @ANYRES32=r6, @ANYBLOB="000000000a0004002c0012800b00010062726964676500001c0002800c00210004000000000000800c0022000000000000000000"], 0x4c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) 887.442057ms ago: executing program 1 (id=9473): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) bind$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07", 0x2}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}], 0x20}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x200c0010) 887.176819ms ago: executing program 6 (id=9474): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r0, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000054) 886.217482ms ago: executing program 1 (id=9475): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'tunl0\x00', 0x610}) 750.925238ms ago: executing program 1 (id=9476): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x8, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 685.579572ms ago: executing program 6 (id=9477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006d00ffff00000000000042820b0100"/31, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 684.904834ms ago: executing program 5 (id=9478): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r6], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r8, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x2c, 0x4, 0x6) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x7, 0x3, 0x0, 0xfa, 0x5, 0x1, 0x9, 0x2, 0x8, 0x66, 0x9, 0x2, 0x1}, 0xe) (async) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500030012800b00010062726964676500000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 529.672884ms ago: executing program 3 (id=9479): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x20a, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x20a, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xac, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_TAGLST={0x5c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}]}, 0xac}}, 0xc000) 512.395541ms ago: executing program 6 (id=9480): r0 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x10) socket$inet6(0xa, 0x807, 0xc) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x2, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x850}, 0x40000) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x8, 0x801, 0x0, 0x0, {0xd, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x808, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FAMILY={0x5, 0xd, 0x11}]}, 0x54}, 0x1, 0x0, 0x0, 0x4090}, 0xc000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x1d, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x6, 0x1, 0x0, r4}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0xa, 0x0, 0x1, 0xb, 0x6, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000700)='GPL\x00', 0x6, 0x7f, &(0x7f0000000740)=""/127, 0x40f00, 0x50, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xb, 0x40, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000008c0)=[r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000900)=[{0x2, 0x2, 0x1, 0xc}, {0x3, 0x3, 0xc, 0xa}, {0x4, 0x3, 0x8, 0xc}, {0x4, 0x1, 0x6, 0x4}, {0x4, 0x3, 0x6, 0x3}, {0x1, 0x2, 0x8, 0x2}, {0x1, 0x3, 0xffff}, {0x0, 0x1, 0xf, 0x1}, {0x3, 0x2, 0x9}], 0x10, 0x7fffffff}, 0x94) (async) socket$kcm(0x29, 0x2, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c085}, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000c40)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000d00)={@nfc_llcp={0x27, r9, 0xffffffffffffffff, 0x0, 0x2, 0x3, "5a0af4bed849edab36fbee31189244049a23696bb2e0ceb554771407332534cb0dbf6fe3a31b55114d26d157db8b66f05ecc844b4bb90c3df49571bc34d7a2", 0x3a}, {&(0x7f0000000c80)=""/62, 0x3e}, &(0x7f0000000cc0), 0x2}, 0xa0) (async) connect(r0, &(0x7f0000000dc0)=@hci={0x1f, 0x3, 0x1}, 0x80) (async) r10 = openat$cgroup_ro(r2, &(0x7f0000000e40)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nfc_llcp(r10, &(0x7f0000001100)={&(0x7f0000000e80)={0x27, r9, 0xffffffffffffffff, 0x4, 0x3, 0x6, "915d89f74bf8034f3b16edbf76deb7b3de6189dc242ee766914eb24e1e35a1714403ca87fe6faafaec914fb1ac82b625e37bff77d6b81ae8cafb66c45737bd", 0x3a}, 0x60, &(0x7f0000001040)=[{&(0x7f0000000f00)="0f1de81db3aa97b3dbb8ab91eade3b1c31c0bbea217394249d095fe1d19d988d2fb868a6af24529d9b553d40b25f3c14e370f21f3f4dcd024ad7e1461940a8d10369d6c9253a7d85603b3e20abe9512f5de6f4d8f3f340b0d26ef656654a421c7a5e14ed7407eed6654d30baad481cfcdb0820de1a238348a7300b03bb", 0x7d}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="395132b96fe05a28a878fdf529fa22c0163371e962d52608ac2e1d6b9944b33de0a6746cb08bef9156556dadbed89a98df506115f51f9e28fc76a03a57b125882c07ad4d3861f2b63e05801c187ede0f66e9a36258b0a9625f36108b372feafe2319c4bb117e21", 0x67}], 0x3, &(0x7f0000001080)={0x68, 0x112, 0x2, "f6904f2cb5ee57b191c4e2f06fb51b70136736d7ba95a7c9a2c613ca2dcb462a92efb53be74d8ab6cba5d42c4860b6ddb04605977215a8bec8d73a419d26cedec1f5105592ba49103992128ee025f12ac71688357d"}, 0x68, 0x40}, 0x4044811) close(r7) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001140)) sendto(r2, &(0x7f0000001180)="865da3997bf5828e6280df413735b40e685bc1ad456d7a2370667fd3925bdf4f168841f861ce067ee4de7e4dc4406b18444dbbcd5d474a97", 0x38, 0x40011, &(0x7f00000011c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80) (async) r11 = accept4$inet6(r2, &(0x7f0000001240)={0xa, 0x0, 0x0, @local}, &(0x7f0000001280)=0x1c, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f00000012c0)={0xe, {{0xa, 0x4e24, 0x3, @mcast1, 0xfb}}, {{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20000000}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000001400)={0x6, {{0xa, 0x4e24, 0xfffffff7, @loopback, 0x8}}, {{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, 0x108) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001540)={{0x0, 0x0, 0x5, 0x120000000000, 0x1, 0xe, 0xb2a4, 0x7ff, 0x44, 0x4, 0x1ff, 0x3, 0x4, 0x8, 0xbfc2}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000118380)={0x3c, [{r12}], 0x3, "d6758c982a21dd"}) 337.377171ms ago: executing program 3 (id=9481): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xf, 0x0, &(0x7f0000000700)="a498812dcc59a7470a16d3e5158013", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a407800", @ANYRES32=r5, @ANYBLOB="1400000108000800440300"/28], 0x34}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfffb}, {0xfff1, 0x4}, {0xa06d1318dbb4eb2c}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x0, {0x28}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) 313.04812ms ago: executing program 5 (id=9482): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd00000010000100050c10000000000000000000", 0x58}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@enum={0x0, 0x200001c4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @func_proto]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x20) 256.50249ms ago: executing program 6 (id=9483): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0xd}, {0xfff3, 0xfff1}, {0x10}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc15}, 0x400884c) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}, {&(0x7f00000003c0)="3d7297eead7a83bf3712962f3b09000000000000003d1a9beeddf46a7b4f9c68de4baba887f5d867610d9aa19505f33b6a3438ee207d69b15e47899346fa68404e66376310fccbc36c3a9206c3d3554a69edcff46789f1906e16e42a470ec8f95951fbe668aac55929c05c897621d87fcb2edea7b3de61d7fff4f7469bfad0857e6d4587555d76e8e192166db48d1ad0e6234a65d14dd7ae76c2b0b271400a62158d1dad325a01b4041a874207d5f5947f9ff4de9dbd81875712", 0xba}], 0x2}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 81.602745ms ago: executing program 5 (id=9484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7000000, @ipv4={'\x00', '\xff\xff', @private=0xa010103}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x1, 0xc040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 0s ago: executing program 5 (id=9485): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) recvmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/145, 0x91}], 0x4, &(0x7f00000000c0)=""/53, 0x35}, 0x40002044) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r11, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) kernel console output (not intermixed with test programs): : adding VLAN 0 to HW filter on device bond0 [ 956.840834][T31183] 8021q: adding VLAN 0 to HW filter on device bond7 [ 956.883956][T31191] netlink: 'syz.6.7306': attribute type 10 has an invalid length. [ 956.907700][T31183] bond0: (slave bond7): Enslaving as an active interface with a down link [ 956.958585][T31189] 8021q: adding VLAN 0 to HW filter on device bond8 [ 956.969764][T31189] bond0: (slave bond8): Enslaving as an active interface with a down link [ 956.983500][T31191] bridge0: port 3(team0) entered blocking state [ 956.990102][T31191] bridge0: port 3(team0) entered disabled state [ 957.010264][T31191] team0: entered allmulticast mode [ 957.017046][T31191] team_slave_0: entered allmulticast mode [ 957.024841][T31191] team_slave_1: entered allmulticast mode [ 957.034643][T31191] team0: entered promiscuous mode [ 957.039925][T31191] team_slave_0: entered promiscuous mode [ 957.047691][T31191] team_slave_1: entered promiscuous mode [ 957.055919][T31191] bridge0: port 3(team0) entered blocking state [ 957.062528][T31191] bridge0: port 3(team0) entered forwarding state [ 957.728524][T31244] bond9: Removing last arp target with arp_interval on [ 957.930878][T31257] gre0: entered promiscuous mode [ 958.076449][T31266] bridge0: port 4(syz_tun) entered blocking state [ 958.114397][T31266] bridge0: port 4(syz_tun) entered disabled state [ 958.132468][T31266] syz_tun: entered allmulticast mode [ 958.152877][T31269] netlink: 'syz.6.7330': attribute type 1 has an invalid length. [ 958.162868][T31266] syz_tun: entered promiscuous mode [ 958.171196][T31266] bridge0: port 4(syz_tun) entered blocking state [ 958.178285][T31266] bridge0: port 4(syz_tun) entered forwarding state [ 958.474458][T31292] __nla_validate_parse: 81 callbacks suppressed [ 958.474482][T31292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7337'. [ 958.553382][T31298] bond5: (slave lo): Device is not bonding slave [ 958.559950][T31298] bond5: option active_slave: invalid value (lo) [ 958.598902][T31305] openvswitch: netlink: Multiple metadata blocks provided [ 958.612885][T31298] bond5 (unregistering): Released all slaves [ 958.718872][T31311] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 958.867635][T31320] geneve3: entered promiscuous mode [ 958.904570][T31322] veth0: entered promiscuous mode [ 958.920757][ T4343] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 958.955984][ T4343] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 958.991079][T31323] veth0: left promiscuous mode [ 958.998056][ T4343] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 959.030690][ T4343] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 959.088069][T31330] netlink: 'syz.3.7346': attribute type 1 has an invalid length. [ 959.117178][T31330] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7346'. [ 959.284520][T31338] sctp: [Deprecated]: syz.1.7349 (pid 31338) Use of int in max_burst socket option. [ 959.284520][T31338] Use struct sctp_assoc_value instead [ 959.373457][T31342] ip6t_srh: unknown srh invflags 4000 [ 959.757893][T31366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7359'. [ 959.787472][T31366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7359'. [ 959.922920][T31380] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7360'. [ 959.994010][T31369] netlink: 'syz.7.7359': attribute type 12 has an invalid length. [ 960.004413][T31377] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.7359'. [ 960.033247][T31373] syz_tun: entered promiscuous mode [ 960.105760][T31367] syz_tun: left promiscuous mode [ 960.113544][T31382] syzkaller0: entered promiscuous mode [ 960.119218][T31382] syzkaller0: entered allmulticast mode [ 960.226889][T31382] netlink: 'syz.3.7363': attribute type 11 has an invalid length. [ 960.245728][T31382] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.7363'. [ 960.300447][T31387] bond7: entered promiscuous mode [ 960.309316][T31387] bond7: entered allmulticast mode [ 960.316389][T31387] 8021q: adding VLAN 0 to HW filter on device bond7 [ 960.329681][T31392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7366'. [ 960.450758][T31390] bond8: entered promiscuous mode [ 960.469056][T31390] bond8: entered allmulticast mode [ 960.483640][T31390] 8021q: adding VLAN 0 to HW filter on device bond8 [ 960.520479][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.578918][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.611711][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.619961][T31403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7369'. [ 960.647887][T31396] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 960.733199][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.755680][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.775515][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.825536][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.839934][T31411] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7371'. [ 960.867653][T31409] netlink: 'syz.3.7372': attribute type 6 has an invalid length. [ 960.879258][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.893490][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.906338][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.917298][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.926684][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.936474][T31396] wg1 speed is unknown, defaulting to 1000 [ 960.945830][T31396] wg1 speed is unknown, defaulting to 1000 [ 961.529304][T31427] bond11 (unregistering): Released all slaves [ 962.305429][T31464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.311140][T31458] vlan0: entered allmulticast mode [ 962.360391][T31458] gretap0: entered allmulticast mode [ 962.971613][T31498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.254154][T31517] netlink: 'syz.6.7400': attribute type 1 has an invalid length. [ 963.314215][T31517] 8021q: adding VLAN 0 to HW filter on device bond11 [ 963.324327][T31522] netlink: 'syz.7.7402': attribute type 1 has an invalid length. [ 963.393003][T31530] macvlan2: entered promiscuous mode [ 963.398774][T31530] macvlan2: entered allmulticast mode [ 963.427711][T31530] bond2: entered promiscuous mode [ 963.452968][T31530] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 963.478270][T31530] bond2: left promiscuous mode [ 963.535275][T31534] __nla_validate_parse: 5 callbacks suppressed [ 963.535297][T31534] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7404'. [ 963.585953][T31538] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7405'. [ 963.603311][T31538] netlink: 'syz.6.7405': attribute type 7 has an invalid length. [ 963.611405][T31538] netlink: 'syz.6.7405': attribute type 8 has an invalid length. [ 963.620163][T31538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7405'. [ 963.673734][T31542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7406'. [ 963.684563][T31542] .: left allmulticast mode [ 963.689289][T31542] .: left promiscuous mode [ 963.696545][T31542] bridge0: port 2(.) entered disabled state [ 963.709802][T31542] bridge_slave_0: left allmulticast mode [ 963.723139][T31542] bridge_slave_0: left promiscuous mode [ 963.729306][T31542] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.919853][T31553] tipc: Enabling of bearer rejected, already enabled [ 964.249207][T31568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7411'. [ 964.764283][T31595] syzkaller0: entered promiscuous mode [ 964.770437][T31595] syzkaller0: entered allmulticast mode [ 964.891082][T31605] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7421'. [ 964.955988][T31607] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7422'. [ 965.028315][T31607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7422'. [ 965.057362][T31615] tipc: Enabling of bearer rejected, failed to enable media [ 965.114418][T31617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7422'. [ 965.500039][T31638] IPVS: dh: FWM 3 0x00000003 - no destination available [ 965.533699][T31641] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7433'. [ 966.581053][T31714] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 966.604728][T31709] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 966.760979][T31715] can: request_module (can-proto-5) failed. [ 966.850118][T31726] openvswitch: netlink: Flow key attr not present in new flow. [ 967.178457][T31750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.427743][T31792] netlink: 'syz.5.7472': attribute type 11 has an invalid length. [ 968.483677][T31789] netem: change failed [ 968.809732][T31816] __nla_validate_parse: 8 callbacks suppressed [ 968.809751][T31816] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7479'. [ 968.870222][T31815] netlink: 'syz.3.7480': attribute type 10 has an invalid length. [ 968.896919][T31815] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 968.909647][T31820] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.7482'. [ 968.939861][T31820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7482'. [ 968.990268][T31820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7482'. [ 968.996412][T31824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7483'. [ 969.107151][T31831] netlink: 'syz.1.7485': attribute type 29 has an invalid length. [ 969.117022][T31831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7485'. [ 969.315335][T31844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7489'. [ 969.641230][T31860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 970.131555][T31892] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7503'. [ 970.186451][T31892] SET target dimension over the limit! [ 970.714191][T31913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7509'. [ 970.728373][T31913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7509'. [ 970.936126][T31931] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 970.946680][T31931] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 971.293014][T31948] sctp: [Deprecated]: syz.7.7520 (pid 31948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 971.293014][T31948] Use struct sctp_sack_info instead [ 971.375849][T31951] netlink: 'syz.1.7521': attribute type 5 has an invalid length. [ 971.401291][T31951] netlink: 'syz.1.7521': attribute type 6 has an invalid length. [ 971.610769][T31967] netlink: 'syz.1.7526': attribute type 27 has an invalid length. [ 973.016885][T31971] netlink: 'syz.6.7527': attribute type 10 has an invalid length. [ 973.118992][T31971] bridge0: port 4(syz_tun) entered disabled state [ 973.146636][T31971] syz_tun: left allmulticast mode [ 973.151847][T31971] syz_tun: left promiscuous mode [ 973.160258][T31971] bridge0: port 4(syz_tun) entered disabled state [ 973.268465][T31971] `: (slave syz_tun): Enslaving as an active interface with an up link [ 973.688653][T32021] netlink: 'syz.6.7545': attribute type 13 has an invalid length. [ 973.731354][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.742548][T32021] netlink: 'syz.6.7545': attribute type 13 has an invalid length. [ 973.751013][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.775377][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.807384][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.912672][T32037] __nla_validate_parse: 31 callbacks suppressed [ 973.912695][T32037] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7548'. [ 973.985021][T32037] IPVS: length: 239 != 24 [ 974.354075][T32055] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7553'. [ 974.365796][T32055] netlink: 'syz.5.7553': attribute type 9 has an invalid length. [ 974.427254][T32057] netdevsim netdevsim6: Firmware load for './file0/../file0' refused, path contains '..' component [ 974.628002][T32066] netlink: 'syz.6.7557': attribute type 1 has an invalid length. [ 975.571632][T32062] bond0: (slave bond_slave_0): Releasing backup interface [ 975.610838][T32062] bond0: (slave bond_slave_1): Releasing backup interface [ 975.665557][T32062] team0: Port device team_slave_0 removed [ 975.720314][T32062] team0: Port device team_slave_1 removed [ 975.741736][T32062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.781054][T32062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.805333][T32062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.839401][T32062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.904876][T32062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 975.925061][T32072] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 975.929406][T32078] syzkaller1: entered promiscuous mode [ 975.979545][T32078] syzkaller1: entered allmulticast mode [ 976.044994][ T25] block nbd0: Possible stuck request ffff888085cf8000: control (read@0,4096B). Runtime 180 seconds [ 976.135540][T32099] netlink: 'syz.3.7565': attribute type 1 has an invalid length. [ 976.218845][T32099] 8021q: adding VLAN 0 to HW filter on device bond5 [ 976.327945][T32099] bond5: (slave veth0_to_bond): making interface the new active one [ 976.339664][T12108] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa1d error=-28 [ 976.389545][T32099] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 976.464638][T32118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7570'. [ 976.511656][T32118] netlink: 'syz.5.7570': attribute type 1 has an invalid length. [ 976.674442][T32126] 8021q: adding VLAN 0 to HW filter on device bond11 [ 976.700767][T32127] bond4: (slave geneve4): making interface the new active one [ 976.710660][T32127] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 976.721587][T12107] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 976.748626][T12107] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 976.764778][T12107] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 976.775438][T12107] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 976.957399][T32141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7576'. [ 976.968607][T32141] block nbd10: Unsupported socket: should be TCP or UNIX. [ 977.366110][T32154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7581'. [ 977.378230][T32154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7581'. [ 977.561406][T32147] netlink: 'syz.1.7578': attribute type 1 has an invalid length. [ 977.567003][ T5197] udevd[5197]: worker [30136] /devices/virtual/block/nbd0 timeout; kill it [ 977.644691][T32156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7575'. [ 977.675587][ T5197] udevd[5197]: seq 32849 '/devices/virtual/block/nbd0' killed [ 977.985638][ T3484] bridge_slave_1: left allmulticast mode [ 978.012988][ T3484] bridge_slave_1: left promiscuous mode [ 978.024681][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.065063][ T3484] bridge_slave_0: left allmulticast mode [ 978.076340][ T3484] bridge_slave_0: left promiscuous mode [ 978.093327][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.386000][ T3484] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 978.418369][T32188] netlink: 'syz.3.7589': attribute type 1 has an invalid length. [ 978.452879][T32188] netlink: 'syz.3.7589': attribute type 1 has an invalid length. [ 978.460683][T32188] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.7589'. [ 979.338120][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.349664][ T3484] bond0 (unregistering): Released all slaves [ 979.504382][ T3484] bond1 (unregistering): Released all slaves [ 979.667293][ T3484] bond2 (unregistering): Released all slaves [ 979.683529][ T3484] bond3 (unregistering): Released all slaves [ 979.698441][ T3484] bond4 (unregistering): Released all slaves [ 979.867238][ T3484] bond5 (unregistering): Released all slaves [ 979.887412][ T3484] bond6 (unregistering): Released all slaves [ 980.056663][ T3484] bond7 (unregistering): Released all slaves [ 980.228015][ T3484] bond8 (unregistering): Released all slaves [ 980.384768][ T3484] bond9 (unregistering): Released all slaves [ 980.399840][T32170] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 980.615887][T32220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7598'. [ 980.669691][ T3484] tipc: Disabling bearer [ 980.703417][ T3484] tipc: Left network mode [ 980.725748][T32222] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 980.746305][T32224] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 981.339269][T32254] netlink: 'syz.3.7609': attribute type 1 has an invalid length. [ 981.384465][T32254] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 981.543047][T32261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7611'. [ 981.630650][T32269] tipc: Enabled bearer , priority 0 [ 981.704230][T32262] syzkaller0: entered promiscuous mode [ 981.709874][T32262] syzkaller0: entered allmulticast mode [ 981.774293][T32258] tipc: Resetting bearer [ 981.794816][T32273] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7614'. [ 981.870117][T32258] tipc: Disabling bearer [ 981.933157][T32279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7614'. [ 981.979531][T32281] netlink: 'syz.5.7616': attribute type 39 has an invalid length. [ 982.229167][ T3484] hsr_slave_0: left promiscuous mode [ 982.249650][ T3484] hsr_slave_1: left promiscuous mode [ 982.266366][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.295705][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.324039][ T3484] batman_adv: batadv0: Removing interface: veth3 [ 982.435929][T32300] set match dimension is over the limit! [ 982.605645][T32308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7623'. [ 983.150937][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 983.224861][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 983.967599][T32313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7626'. [ 984.154071][T32323] batman_adv: batadv0: Adding interface: dummy0 [ 984.171015][T32323] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.248723][T32323] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 984.285233][T32330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7630'. [ 984.376188][T32336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7632'. [ 984.391066][T32337] netlink: 'syz.1.7631': attribute type 15 has an invalid length. [ 984.413043][T32336] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20003 [ 984.429809][T32337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7631'. [ 984.449696][T32337] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 984.473700][T32337] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 984.493185][ T3484] IPVS: stop unused estimator thread 0... [ 984.494233][T32336] 8021q: VLANs not supported on ipvlan1 [ 984.576929][T32341] netlink: 'syz.5.7634': attribute type 1 has an invalid length. [ 984.645679][T32341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 984.700810][T32349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7637'. [ 984.777864][T32353] sctp: [Deprecated]: syz.6.7636 (pid 32353) Use of int in max_burst socket option. [ 984.777864][T32353] Use struct sctp_assoc_value instead [ 984.891502][T32353] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 985.070283][T32372] x_tables: duplicate entry at hook 3 [ 985.134429][T32372] netlink: 'syz.3.7645': attribute type 1 has an invalid length. [ 985.175787][T32372] netlink: 'syz.3.7645': attribute type 2 has an invalid length. [ 985.209990][T32372] netlink: 'syz.3.7645': attribute type 1 has an invalid length. [ 985.341647][T32388] nft_compat: unsupported protocol 0 [ 985.437652][T32394] netlink: 'syz.7.7652': attribute type 2 has an invalid length. [ 985.558442][T32403] syzkaller1: entered promiscuous mode [ 985.576925][T32403] syzkaller1: entered allmulticast mode [ 985.696636][T32408] netlink: 'syz.6.7657': attribute type 1 has an invalid length. [ 985.720705][T32413] netlink: 'syz.5.7658': attribute type 24 has an invalid length. [ 985.738335][T32413] __nla_validate_parse: 2 callbacks suppressed [ 985.738355][T32413] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7658'. [ 985.955756][T32425] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7661'. [ 986.000116][T32432] ip6gre1: entered allmulticast mode [ 986.155064][T32438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7665'. [ 986.288781][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7667'. [ 986.396227][T32451] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7670'. [ 987.048713][T32448] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 987.088233][T32452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7667'. [ 987.184741][T32468] IPVS: Error connecting to the multicast addr [ 987.528786][T32486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7677'. [ 987.650048][T32491] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7679'. [ 987.679967][T32491] netlink: 21 bytes leftover after parsing attributes in process `syz.6.7679'. [ 987.695078][T32493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7680'. [ 987.724133][T32494] validate_nla: 2 callbacks suppressed [ 987.724158][T32494] netlink: 'syz.7.7680': attribute type 10 has an invalid length. [ 988.068292][T32515] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 988.304747][T32530] geneve4: entered promiscuous mode [ 988.499078][T32542] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 988.513529][T32542] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 988.608504][T32548] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 988.668483][T32551] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 988.911434][T32564] bond0: entered promiscuous mode [ 988.921108][T32564] batadv0: entered promiscuous mode [ 988.934044][T32564] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 988.946445][T32564] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 988.987928][T32564] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 989.564841][T32605] netlink: 'syz.6.7710': attribute type 1 has an invalid length. [ 989.812586][T32613] bond12: (slave bridge3): making interface the new active one [ 989.827736][T32613] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 990.196233][T32645] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.209047][T32645] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.291362][T32645] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.306815][T32645] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.393952][T32645] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.424781][T32645] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.520902][T32645] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.563901][T32645] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.749873][T12115] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.762651][T12115] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.798701][T32675] __nla_validate_parse: 6 callbacks suppressed [ 990.798725][T32675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7726'. [ 990.841832][T12112] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.870968][T12112] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.920036][T12112] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.952774][T12112] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.986597][T12112] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.013056][T12112] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.115626][T32686] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.299350][T32702] batadv2: entered allmulticast mode [ 991.533909][T32717] netlink: 13 bytes leftover after parsing attributes in process `syz.5.7740'. [ 991.698112][T32724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7741'. [ 991.727594][T32724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7741'. [ 991.904001][T32737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7746'. [ 992.005156][T32742] tipc: Enabling of bearer rejected, already enabled [ 992.291243][T32755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7752'. [ 992.303617][T32755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7752'. [ 992.347570][T32755] bond6: Invalid ad_actor_system MAC address. [ 992.358335][T32755] bond6: option ad_actor_system: invalid value (1) [ 992.383627][T32755] bond6 (unregistering): Released all slaves [ 992.435430][T32761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7753'. [ 992.787871][ T315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7760'. [ 992.958259][ T324] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7761'. [ 993.219161][ T339] netlink: 'syz.7.7765': attribute type 1 has an invalid length. [ 993.968755][ T389] netlink: 'syz.3.7782': attribute type 1 has an invalid length. [ 993.979406][ T387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.176109][ T403] netlink: 'syz.6.7786': attribute type 5 has an invalid length. [ 994.215493][ T388] bond6: (slave ip6gretap1): making interface the new active one [ 994.229929][ T388] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 994.248985][ T403] geneve2: entered promiscuous mode [ 994.301347][ T403] geneve2: entered allmulticast mode [ 994.329212][T12107] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 994.350243][T12107] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 994.382734][T12107] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 994.403359][T12107] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 994.465024][ T417] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 994.476518][ T417] x_tables: duplicate underflow at hook 1 [ 995.051826][ T457] netlink: 'syz.1.7801': attribute type 1 has an invalid length. [ 995.849509][ T507] batman_adv: batadv0: Removing interface: dummy0 [ 995.937833][ T507] batadv0 (unregistering): left promiscuous mode [ 995.964711][ T513] __nla_validate_parse: 13 callbacks suppressed [ 995.964735][ T513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7822'. [ 996.044139][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 996.055590][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 996.067587][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 996.078278][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 996.094084][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 996.104498][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 996.114910][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 996.127978][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 996.149392][ T507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7821'. [ 997.119957][ T576] syzkaller0: entered promiscuous mode [ 997.128491][ T576] syzkaller0: entered allmulticast mode [ 997.143707][ T580] bridge0: port 1(macsec0) entered blocking state [ 997.150397][ T580] bridge0: port 1(macsec0) entered disabled state [ 997.179103][ T580] macsec0: entered promiscuous mode [ 997.288574][ T587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1000.577374][ T636] netlink: 'syz.1.7861': attribute type 23 has an invalid length. [ 1000.884545][ T652] netlink: 'syz.5.7869': attribute type 1 has an invalid length. [ 1000.987104][ T659] __nla_validate_parse: 28 callbacks suppressed [ 1000.987136][ T659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7870'. [ 1001.045763][ T659] openvswitch: netlink: nsh attr 12336 is out of range max 3 [ 1001.078694][ T665] lo: entered promiscuous mode [ 1001.103391][ T665] tunl0: entered promiscuous mode [ 1001.110569][ T668] netlink: 'syz.6.7873': attribute type 1 has an invalid length. [ 1001.152855][ T665] gre0: entered promiscuous mode [ 1001.154344][ T671] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7872'. [ 1001.196915][ T671] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7872'. [ 1001.233873][ T665] gretap0: entered promiscuous mode [ 1001.248015][ T677] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7874'. [ 1001.273943][ T665] erspan0: entered promiscuous mode [ 1001.288354][ T665] ip_vti0: entered promiscuous mode [ 1001.470875][ T683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7876'. [ 1001.494958][ T675] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1001.507807][ T675] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 1001.537528][ T674] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7874'. [ 1001.582618][ T676] gretap3: entered promiscuous mode [ 1001.614114][ T676] bond13: (slave gretap3): making interface the new active one [ 1001.640482][ T676] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 1001.680207][ T692] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7878'. [ 1001.697337][ T692] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7878'. [ 1001.713009][ T692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7878'. [ 1001.804020][ T694] bond5: (slave veth0_to_bond): Releasing active interface [ 1001.893171][ T701] xt_hashlimit: size too large, truncated to 1048576 [ 1001.904013][ T699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7881'. [ 1001.966652][ T704] gre0: entered allmulticast mode [ 1002.187596][ T710] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1002.550531][ T741] syzkaller0: entered promiscuous mode [ 1002.587358][ T741] syzkaller0: entered allmulticast mode [ 1003.438907][ T792] tipc: Enabling of bearer rejected, failed to enable media [ 1003.775079][ T809] xt_policy: output policy not valid in PREROUTING and INPUT [ 1004.066393][ T825] netlink: 'syz.6.7913': attribute type 12 has an invalid length. [ 1004.839041][ T849] syzkaller0: entered promiscuous mode [ 1004.857236][ T849] syzkaller0: entered allmulticast mode [ 1004.955240][ T860] netlink: 'syz.7.7927': attribute type 2 has an invalid length. [ 1005.003376][ T852] xt_CT: No such helper "syz1" [ 1005.030870][ T864] veth1_vlan: left promiscuous mode [ 1005.053125][ T864] macvlan1: entered allmulticast mode [ 1005.417588][ T884] netlink: 'syz.6.7934': attribute type 1 has an invalid length. [ 1005.563512][ T899] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1005.726826][ T915] sctp: [Deprecated]: syz.3.7935 (pid 915) Use of int in max_burst socket option deprecated. [ 1005.726826][ T915] Use struct sctp_assoc_value instead [ 1005.755600][ T909] : entered promiscuous mode [ 1006.027862][ T933] __nla_validate_parse: 10 callbacks suppressed [ 1006.027886][ T933] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7944'. [ 1006.195618][ T25] block nbd0: Possible stuck request ffff888085cf8000: control (read@0,4096B). Runtime 210 seconds [ 1006.294167][ T905] bridge0: port 3(team0) entered disabled state [ 1006.301097][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.309001][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.029207][ T905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.068567][ T905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.418914][ T964] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7948'. [ 1008.060389][ T954] netlink: 14544 bytes leftover after parsing attributes in process `syz.7.7946'. [ 1008.071391][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7949'. [ 1008.083660][ T967] netlink: 'syz.6.7949': attribute type 5 has an invalid length. [ 1008.091749][ T967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7949'. [ 1008.121433][ T39] wg1 speed is unknown, defaulting to 1000 [ 1008.143972][T32689] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.154725][ T39] syz2: Port: 1 Link DOWN [ 1008.167527][T32689] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.194560][T32689] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1008.214118][T32689] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.228433][T32689] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.238355][T32689] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1008.386753][T32689] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.409253][T32689] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.420520][T32689] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1008.443363][T32689] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.463861][T32689] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.484025][T32689] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1008.668135][ T992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7957'. [ 1008.766954][ T993] bond14: ARP target 1.0.0.0 is already present [ 1008.775547][ T999] netlink: 'syz.3.7960': attribute type 39 has an invalid length. [ 1008.786825][ T993] bond14: option arp_ip_target: invalid value (1) [ 1008.795927][ T993] bond14 (unregistering): Released all slaves [ 1008.830380][ T1004] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1009.181528][ T1019] netlink: 'syz.1.7965': attribute type 13 has an invalid length. [ 1009.203051][ T1019] macvtap0: refused to change device tx_queue_len [ 1009.310937][ T1030] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7969'. [ 1009.496148][ T1039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7973'. [ 1009.512886][ T1038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7973'. [ 1012.017749][ T1057] ip6gre0: Master is either lo or non-ether device [ 1012.358993][ T1083] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7981'. [ 1012.406978][ T1082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7984'. [ 1012.480145][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.515107][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.556240][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.616466][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.676173][ T1098] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7987'. [ 1012.716659][ T1098] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7987'. [ 1012.964643][ T1109] netlink: 9 bytes leftover after parsing attributes in process `syz.7.7992'. [ 1012.988223][ T1113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7993'. [ 1013.029754][ T1120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7994'. [ 1013.157240][ T1127] netlink: 'syz.6.7997': attribute type 29 has an invalid length. [ 1013.416914][ T1140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.470050][ T1140] ip6gretap1: entered promiscuous mode [ 1013.477582][ T1140] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1013.593243][ T1147] netlink: 'syz.5.8005': attribute type 10 has an invalid length. [ 1013.663998][ T1147] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1013.824243][ T1157] netlink: 'syz.3.8008': attribute type 39 has an invalid length. [ 1014.103715][ T1170] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1014.427031][ T1196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8020'. [ 1014.658527][ T1203] netlink: 'syz.1.8022': attribute type 1 has an invalid length. [ 1014.774632][ T1205] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1015.618825][ T1231] infiniband syû: set down [ 1015.623996][ T1231] infiniband syû: added bond_slave_0 [ 1015.705295][ T1231] RDS/IB: syû: added [ 1015.709634][ T1231] smc: adding ib device syû with port count 1 [ 1015.717601][ T1231] smc: ib device syû port 1 has no pnetid [ 1016.376699][ T1275] syzkaller0: entered promiscuous mode [ 1016.386667][ T1275] syzkaller0: entered allmulticast mode [ 1016.599197][ T1279] IPv6: Can't replace route, no match found [ 1016.995331][ T1292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8047'. [ 1017.043655][ T1301] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8049'. [ 1017.363877][ T1316] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8053'. [ 1017.385106][ T1318] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8052'. [ 1017.704599][ T1330] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1018.262937][ T1355] netlink: 'syz.7.8068': attribute type 1 has an invalid length. [ 1018.277437][ T1355] netlink: 'syz.7.8068': attribute type 1 has an invalid length. [ 1018.289702][ T1356] team0: No ports can be present during mode change [ 1018.327272][ T1355] bridge3: entered promiscuous mode [ 1018.340845][ T1355] bridge3: entered allmulticast mode [ 1018.370374][ T1355] team0: Port device bridge3 added [ 1018.384856][ T1359] bridge0: port 3(team0) entered blocking state [ 1018.401106][ T1359] bridge0: port 3(team0) entered disabled state [ 1018.431695][ T1359] team0: entered allmulticast mode [ 1018.439492][ T1359] team_slave_0: entered allmulticast mode [ 1018.458041][ T1359] team_slave_1: entered allmulticast mode [ 1018.480158][ T1359] team0: entered promiscuous mode [ 1018.485909][ T1359] team_slave_0: entered promiscuous mode [ 1018.493046][ T1359] team_slave_1: entered promiscuous mode [ 1018.644263][ T1368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8073'. [ 1018.876116][ T1375] lo: MTU too low for tipc bearer [ 1018.881298][ T1375] tipc: Enabling of bearer rejected, failed to enable media [ 1019.045493][ T1382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8079'. [ 1019.159503][ T1387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.247359][ T1390] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8081'. [ 1019.503474][ T1403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8087'. [ 1019.804036][ T1419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8090'. [ 1019.823237][ T1419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8090'. [ 1020.020160][ T1433] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8091'. [ 1020.643856][ T1461] netlink: 'syz.7.8100': attribute type 10 has an invalid length. [ 1020.666457][ T1461] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1020.898368][ T1477] netlink: 'syz.1.8103': attribute type 20 has an invalid length. [ 1020.907561][ T1477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8103'. [ 1020.974929][ T1477] netlink: 'syz.1.8103': attribute type 20 has an invalid length. [ 1021.026010][ T1484] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1021.046492][ T1484] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 1021.828083][ T1526] netlink: 'syz.7.8121': attribute type 83 has an invalid length. [ 1021.846888][ T1526] netlink: 'syz.7.8121': attribute type 83 has an invalid length. [ 1021.856356][ T1526] netlink: 'syz.7.8121': attribute type 83 has an invalid length. [ 1021.866608][ T1526] netlink: 'syz.7.8121': attribute type 83 has an invalid length. [ 1021.876798][ T1526] netlink: 'syz.7.8121': attribute type 83 has an invalid length. [ 1022.373013][ T1556] IPVS: set_ctl: invalid protocol: 11612 255.255.255.255:21 [ 1022.645536][ T1567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.663124][ T1567] bridge_slave_1: left allmulticast mode [ 1022.668879][ T1567] bridge_slave_1: left promiscuous mode [ 1022.724406][ T1567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.751106][ T1567] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1022.773867][ T1576] __nla_validate_parse: 8 callbacks suppressed [ 1022.773891][ T1576] netlink: 212324 bytes leftover after parsing attributes in process `syz.7.8135'. [ 1022.813229][ T1571] tipc: Enabled bearer , priority 0 [ 1022.820904][ T1571] syzkaller0: entered promiscuous mode [ 1022.827837][ T1571] syzkaller0: entered allmulticast mode [ 1022.866092][ T1571] tipc: Resetting bearer [ 1022.896923][ T1568] tipc: Resetting bearer [ 1022.966124][ T1568] tipc: Disabling bearer [ 1023.226367][ T1598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8141'. [ 1023.373025][ T1608] validate_nla: 30 callbacks suppressed [ 1023.373047][ T1608] netlink: 'syz.5.8145': attribute type 1 has an invalid length. [ 1023.418436][ T1613] netlink: 'syz.6.8148': attribute type 4 has an invalid length. [ 1023.463159][ T1616] netlink: 'syz.6.8148': attribute type 4 has an invalid length. [ 1023.530469][ T1620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8149'. [ 1023.853092][ T1624] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1023.899110][ T1624] bond15 (unregistering): Released all slaves [ 1024.128679][ T1649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8156'. [ 1024.316772][ T1654] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8157'. [ 1024.493695][ T1664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8159'. [ 1024.531175][ T1666] x_tables: duplicate underflow at hook 2 [ 1024.947670][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8168'. [ 1024.966849][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8168'. [ 1025.144422][ T1705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8175'. [ 1025.175557][ T1701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8173'. [ 1025.217719][ T5836] block nbd10: Receive control failed (result -32) [ 1025.918251][ T1752] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1025.926938][ T1752] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 1026.004637][ T1761] ip6t_srh: unknown srh match flags 5F28 [ 1026.020032][ T1761] ip6t_srh: unknown srh match flags 5F28 [ 1026.189115][ T1772] netlink: 'syz.3.8194': attribute type 3 has an invalid length. [ 1027.358413][ T1843] bond12: option all_slaves_active: invalid value (222) [ 1027.371426][ T1843] bond12 (unregistering): Released all slaves [ 1027.869366][ T1874] netlink: 'syz.7.8227': attribute type 1 has an invalid length. [ 1027.893623][ T1877] sch_fq: defrate 0 ignored. [ 1027.933241][ T1874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1027.940729][ T1877] sch_fq: defrate 0 ignored. [ 1027.986357][ T1882] bond3: entered allmulticast mode [ 1028.048109][ T1874] bond3: (slave ip6gretap1): making interface the new active one [ 1028.062007][ T1874] ip6gretap1: entered allmulticast mode [ 1028.073163][ T1874] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1028.273375][ T1893] bond12 (unregistering): Released all slaves [ 1028.403487][ T1904] __nla_validate_parse: 18 callbacks suppressed [ 1028.403510][ T1904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8236'. [ 1028.550907][ T1904] hsr_slave_1 (unregistering): left promiscuous mode [ 1029.229824][ T1949] netlink: 300 bytes leftover after parsing attributes in process `syz.5.8248'. [ 1029.601119][ T1963] netlink: 'syz.3.8253': attribute type 12 has an invalid length. [ 1029.620452][ T1963] netlink: 'syz.3.8253': attribute type 29 has an invalid length. [ 1029.638560][ T1963] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1029.649963][ T1963] netlink: 59 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1029.864781][ T1977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8258'. [ 1030.007403][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8263'. [ 1030.022591][ T1989] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1030.062797][ T1995] netlink: 376 bytes leftover after parsing attributes in process `syz.7.8264'. [ 1030.197653][ T2005] netlink: 'syz.1.8265': attribute type 1 has an invalid length. [ 1030.312662][ T2018] netlink: 'syz.5.8271': attribute type 1 has an invalid length. [ 1030.472317][ T2029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8273'. [ 1030.484792][ T2018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8271'. [ 1030.496422][ T2035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8275'. [ 1030.520095][ T2035] bridge0: port 2(syz_tun) entered blocking state [ 1030.527972][ T2035] bridge0: port 2(syz_tun) entered disabled state [ 1030.537571][ T2035] syz_tun: entered promiscuous mode [ 1031.348352][ T2076] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1031.366708][ T2076] netlink: 'syz.3.8290': attribute type 10 has an invalid length. [ 1031.485800][ T2081] bond8: option xmit_hash_policy: invalid value (64) [ 1031.497669][ T2081] bond8 (unregistering): Released all slaves [ 1032.250180][ T2125] vlan0: entered allmulticast mode [ 1032.282798][ T2125] mac80211_hwsim hwsim74 wlan0: entered allmulticast mode [ 1032.617969][ T2140] netlink: 'syz.7.8307': attribute type 4 has an invalid length. [ 1032.634780][ T2140] netlink: 'syz.7.8307': attribute type 4 has an invalid length. [ 1032.870973][ T2151] netlink: 'syz.6.8310': attribute type 2 has an invalid length. [ 1032.891448][ T2151] netlink: 'syz.6.8310': attribute type 9 has an invalid length. [ 1033.028980][ T2160] netlink: 'syz.6.8313': attribute type 1 has an invalid length. [ 1033.151379][ T2160] bond15: entered promiscuous mode [ 1033.197930][ T2160] bond15: entered allmulticast mode [ 1033.212905][ T2160] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1033.254795][ T2166] macvlan2: entered promiscuous mode [ 1033.260415][ T2166] macvlan2: entered allmulticast mode [ 1033.271539][ T2166] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1033.540222][ T2195] __nla_validate_parse: 13 callbacks suppressed [ 1033.540246][ T2195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8317'. [ 1033.582940][ T2197] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8319'. [ 1033.590874][ T2195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8317'. [ 1033.700940][ T2203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8322'. [ 1034.167254][ T2230] veth0_to_bridge: entered promiscuous mode [ 1034.306592][ T2227] veth0_to_bridge: left promiscuous mode [ 1034.488425][ T2250] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1034.600688][ T2251] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1034.677462][ T2251] macvlan2: entered promiscuous mode [ 1034.684120][ T2251] macvlan2: entered allmulticast mode [ 1034.690139][ T2251] bond13: entered allmulticast mode [ 1034.696593][ T2251] bond13: entered promiscuous mode [ 1034.703458][ T2251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1034.713925][ T2251] team0: Port device macvlan2 added [ 1034.985369][ T2269] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8343'. [ 1034.998229][ T2269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8343'. [ 1035.436292][ T2284] lo: left promiscuous mode [ 1035.496935][ T2285] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8346'. [ 1035.575501][ T2292] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1035.671030][ T2284] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1035.729519][ T2284] geneve3: left promiscuous mode [ 1035.750689][ T2284] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1035.774385][ T2289] validate_nla: 2 callbacks suppressed [ 1035.774407][ T2289] netlink: 'syz.6.8349': attribute type 25 has an invalid length. [ 1035.791253][ T2292] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8350'. [ 1035.832955][ T3025] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.842872][ T3025] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.851804][ T3025] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1035.864875][ T3025] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.875080][ T3025] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.884565][ T3025] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1035.895008][ T3025] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.904865][ T3025] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.914264][ T3025] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1035.923581][ T3025] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.933633][ T3025] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.943463][ T3025] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1036.429542][ T2303] netlink: 'syz.7.8350': attribute type 1 has an invalid length. [ 1036.455844][ T2303] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8350'. [ 1036.466260][ T2303] netlink: 1 bytes leftover after parsing attributes in process `syz.7.8350'. [ 1036.787025][ T2340] x_tables: unsorted entry at hook 3 [ 1036.838558][ T25] block nbd0: Possible stuck request ffff888085cf8000: control (read@0,4096B). Runtime 240 seconds [ 1037.060142][ T2357] syzkaller0: entered allmulticast mode [ 1037.209474][ T30] audit: type=1107 audit(1767234386.864:15): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1037.231664][ T2362] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1037.380504][ T2370] bond0: entered promiscuous mode [ 1037.389397][ T2362] netlink: 'syz.5.8366': attribute type 10 has an invalid length. [ 1037.412349][ T2370] batadv0: entered promiscuous mode [ 1037.430929][ T2370] batadv0: left promiscuous mode [ 1037.443600][ T2370] bond0: left promiscuous mode [ 1037.474800][ T2362] veth1_macvtap: left promiscuous mode [ 1037.489359][ T2362] team0: Device veth1_macvtap failed to register rx_handler [ 1037.767930][ T2400] netlink: 'syz.7.8377': attribute type 1 has an invalid length. [ 1037.850911][ T2400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1037.953457][ T2407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1037.960766][ T2407] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1037.986434][ T2407] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1038.124367][ T2400] veth5: entered promiscuous mode [ 1038.154044][ T2400] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1038.470127][ T2453] IPVS: Error connecting to the multicast addr [ 1038.620938][ T2465] __nla_validate_parse: 8 callbacks suppressed [ 1038.620960][ T2465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8388'. [ 1038.673067][ T2469] C: renamed from lo [ 1038.691429][ T2469] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1038.961330][ T2487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8394'. [ 1038.980967][ T2494] pimreg: entered allmulticast mode [ 1039.035676][ T2497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8394'. [ 1039.045287][ T2497] netlink: 'syz.6.8394': attribute type 12 has an invalid length. [ 1039.081730][ T2497] netlink: 'syz.6.8394': attribute type 11 has an invalid length. [ 1039.096985][ T2504] netlink: 'syz.5.8399': attribute type 15 has an invalid length. [ 1039.122985][ T2504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8399'. [ 1039.651805][ T2546] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1039.719774][ T2548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1039.777426][ T2557] netlink: 'syz.5.8411': attribute type 1 has an invalid length. [ 1039.895448][ T2557] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1039.969410][ T2557] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1039.980991][ T2557] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1040.065521][ T2573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8411'. [ 1040.175853][ T2573] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1040.232779][ T2568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8414'. [ 1040.279044][ T2568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8414'. [ 1040.366265][ T2580] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1040.573069][ T2601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8419'. [ 1040.815157][ T2617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8424'. [ 1040.825105][ T2617] netlink: 'syz.1.8424': attribute type 7 has an invalid length. [ 1040.853072][ T2617] netlink: 'syz.1.8424': attribute type 8 has an invalid length. [ 1040.882809][ T2617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8424'. [ 1041.237961][ T2646] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1041.753600][ T2679] netlink: 'syz.1.8438': attribute type 1 has an invalid length. [ 1041.944245][ T2688] bond16: option mode: invalid value (133) [ 1041.973271][ T2688] bond16 (unregistering): Released all slaves [ 1042.146958][ T2720] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1042.194041][ T2720] team1: entered promiscuous mode [ 1042.199283][ T2720] team1: entered allmulticast mode [ 1042.657293][ T2761] netlink: 'syz.1.8456': attribute type 1 has an invalid length. [ 1042.668033][ T2761] netlink: 'syz.1.8456': attribute type 2 has an invalid length. [ 1042.748783][ T2761] netlink: 'syz.1.8456': attribute type 1 has an invalid length. [ 1042.761727][ T2761] netlink: 'syz.1.8456': attribute type 2 has an invalid length. [ 1042.926845][ T2773] bond8: entered promiscuous mode [ 1042.934224][ T2773] bond8: entered allmulticast mode [ 1042.940151][ T2773] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1042.954147][ T2777] netlink: 'syz.7.8461': attribute type 15 has an invalid length. [ 1042.964542][ T2776] bond8: (slave macvlan2): Opening slave failed [ 1043.183369][ T2798] netlink: 'syz.1.8466': attribute type 11 has an invalid length. [ 1043.204908][ T2798] netlink: 'syz.1.8466': attribute type 11 has an invalid length. [ 1043.278432][ T2804] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1043.677432][ T2848] __nla_validate_parse: 9 callbacks suppressed [ 1043.677462][ T2848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8474'. [ 1043.715265][ T2851] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8476'. [ 1043.746472][ T2831] macsec0 (unregistering): left promiscuous mode [ 1043.753924][ T2831] bridge0: port 1(macsec0) entered disabled state [ 1043.903242][ T2859] netlink: 'syz.3.8480': attribute type 1 has an invalid length. [ 1043.974473][ T2863] x_tables: duplicate underflow at hook 1 [ 1044.185790][ T2890] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8488'. [ 1044.240921][ T2894] mac80211_hwsim hwsim60 ÿ: renamed from wlan1 [ 1044.309875][ T2898] pim6reg527: entered allmulticast mode [ 1045.112475][ T2913] gre0: entered promiscuous mode [ 1045.142401][ T2913] gre0: left allmulticast mode [ 1045.161366][ T2917] delete_channel: no stack [ 1045.427436][ T2943] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8501'. [ 1045.501194][ T2945] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1045.623449][ T2956] tipc: Enabled bearer , priority 0 [ 1045.956380][ T2974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8513'. [ 1046.000650][ T2976] netlink: 'syz.1.8512': attribute type 2 has an invalid length. [ 1046.199284][ T2987] netlink: 'syz.3.8517': attribute type 12 has an invalid length. [ 1046.253603][ T2987] netlink: 'syz.3.8517': attribute type 1 has an invalid length. [ 1046.399642][ T3005] netlink: 'syz.6.8522': attribute type 39 has an invalid length. [ 1046.463142][ T3001] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1046.490874][ T3001] bond9 (unregistering): Released all slaves [ 1046.571379][ T3005] `: (slave syz_tun): Releasing backup interface [ 1046.938617][ T3028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1047.168916][ T3045] netlink: 'syz.7.8537': attribute type 1 has an invalid length. [ 1047.446347][ T3052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8539'. [ 1047.651493][ T3066] netem: change failed [ 1047.825500][ T3079] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1048.052725][ T3084] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1048.054644][ T3087] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1048.304829][ T3096] can: request_module (can-proto-0) failed. [ 1048.490215][ T3096] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1048.757379][ T3111] netlink: 'syz.7.8553': attribute type 1 has an invalid length. [ 1048.800150][ T3111] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8553'. [ 1048.829103][ T3111] NCSI netlink: No device for ifindex 0 [ 1048.836168][ T3121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8552'. [ 1048.857813][ T3119] netlink: 'syz.7.8553': attribute type 1 has an invalid length. [ 1048.868742][ T3120] netlink: 260 bytes leftover after parsing attributes in process `syz.3.8554'. [ 1048.887531][ T3119] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8553'. [ 1048.893184][ T3113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8552'. [ 1048.916112][ T3119] NCSI netlink: No device for ifindex 0 [ 1048.926852][ T3118] vcan0: entered promiscuous mode [ 1048.932469][ T3118] vcan0: entered allmulticast mode [ 1048.977403][ T3123] veth0_to_team: entered promiscuous mode [ 1049.331918][ T3141] netlink: 'syz.7.8559': attribute type 11 has an invalid length. [ 1049.352753][ T3141] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8559'. [ 1049.547656][ T3152] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8564'. [ 1049.610031][ T5836] block nbd11: Receive control failed (result -107) [ 1049.713563][ T3161] netlink: 'syz.3.8566': attribute type 21 has an invalid length. [ 1050.328838][ T3202] syzkaller1: entered promiscuous mode [ 1050.347688][ T3202] syzkaller1: entered allmulticast mode [ 1050.860236][ T3224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8582'. [ 1051.200244][ T3206] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1051.210368][ T3206] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1051.268211][ T3243] netlink: 'syz.1.8587': attribute type 1 has an invalid length. [ 1051.309725][ T3243] bond15: (slave gretap3): making interface the new active one [ 1051.318296][ T3243] bond15: (slave gretap3): Enslaving as an active interface with an up link [ 1051.330527][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8587'. [ 1051.804990][ T3260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8593'. [ 1052.095549][ T3279] openvswitch: netlink: Flow key attr not present in new flow. [ 1052.121808][ T3281] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1052.153382][ T3281] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 1052.161312][ T3281] tipc: Resetting bearer [ 1052.239865][ T3279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1052.316299][ T3299] team0: Device gtp2 is up. Set it down before adding it as a team port [ 1052.594496][ T3316] netlink: 'syz.5.8606': attribute type 14 has an invalid length. [ 1052.634446][ T3317] netlink: 'syz.3.8608': attribute type 21 has an invalid length. [ 1052.655561][ T3317] netlink: 'syz.3.8608': attribute type 21 has an invalid length. [ 1053.229313][ T3354] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1053.645781][ T3380] x_tables: duplicate underflow at hook 1 [ 1053.783696][ T3390] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1053.945794][ T3402] netlink: 'syz.1.8634': attribute type 24 has an invalid length. [ 1054.374794][ T3428] netlink: 'syz.5.8642': attribute type 1 has an invalid length. [ 1054.422756][ T3428] __nla_validate_parse: 12 callbacks suppressed [ 1054.422780][ T3428] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8642'. [ 1054.780126][ T3450] netlink: 'syz.1.8647': attribute type 13 has an invalid length. [ 1054.793770][ T3450] lo: left allmulticast mode [ 1054.805869][ T3450] tunl0: left allmulticast mode [ 1054.818093][ T3450] gre0: left promiscuous mode [ 1054.827775][ T3450] gre0: left allmulticast mode [ 1054.839904][ T3450] gretap0: left allmulticast mode [ 1054.858543][ T3455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8646'. [ 1054.880750][ T3450] erspan0: left allmulticast mode [ 1054.910522][ T3450] ip_vti0: left allmulticast mode [ 1054.923910][ T3450] ip6_vti0: left allmulticast mode [ 1054.934392][ T3450] sit0: left allmulticast mode [ 1054.939929][ T3450] ip6tnl0: left allmulticast mode [ 1054.946271][ T3450] ip6gre0: left allmulticast mode [ 1054.958013][ T3450] ip6gretap0: left allmulticast mode [ 1054.967909][ T3450] vcan0: left allmulticast mode [ 1054.974422][ T3450] bond0: left allmulticast mode [ 1054.983782][ T3450] team0: left allmulticast mode [ 1054.989287][ T3450] dummy0: left allmulticast mode [ 1055.000142][ T3450] nlmon0: left allmulticast mode [ 1055.008009][ T3450] caif0: left allmulticast mode [ 1055.014447][ T3450] batadv0: left allmulticast mode [ 1055.019961][ T3450] veth0: left allmulticast mode [ 1055.026603][ T3450] veth1: left allmulticast mode [ 1055.033092][ T3450] wg0: left allmulticast mode [ 1055.038466][ T3450] wg1: left allmulticast mode [ 1055.045393][ T3450] wg2: left allmulticast mode [ 1055.050936][ T3450] veth0_to_bridge: left allmulticast mode [ 1055.058647][ T3450] bridge_slave_0: left promiscuous mode [ 1055.065662][ T3450] veth1_to_bridge: left allmulticast mode [ 1055.072721][ T3450] bridge_slave_1: left allmulticast mode [ 1055.080100][ T3450] veth0_to_bond: left allmulticast mode [ 1055.086440][ T3450] bond_slave_0: left allmulticast mode [ 1055.108614][ T3450] veth1_to_bond: left allmulticast mode [ 1055.117170][ T3450] bond_slave_1: left allmulticast mode [ 1055.124151][ T3450] veth0_to_team: left allmulticast mode [ 1055.130439][ T3450] team_slave_0: left allmulticast mode [ 1055.137678][ T3450] veth1_to_team: left allmulticast mode [ 1055.144816][ T3450] team_slave_1: left allmulticast mode [ 1055.151005][ T3450] veth0_to_batadv: left allmulticast mode [ 1055.158308][ T3450] batadv_slave_0: left allmulticast mode [ 1055.165402][ T3450] veth1_to_batadv: left allmulticast mode [ 1055.171799][ T3450] batadv_slave_1: left allmulticast mode [ 1055.178906][ T3450] veth0_to_hsr: left allmulticast mode [ 1055.193599][ T3450] veth1_to_hsr: left allmulticast mode [ 1055.204049][ T3450] hsr0: left allmulticast mode [ 1055.209194][ T3450] hsr_slave_0: left allmulticast mode [ 1055.218827][ T3450] hsr_slave_1: left allmulticast mode [ 1055.229603][ T3450] veth1_virt_wifi: left allmulticast mode [ 1055.238999][ T3450] veth0_virt_wifi: left allmulticast mode [ 1055.247024][ T3450] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1055.255720][ T3450] veth1_vlan: left allmulticast mode [ 1055.263217][ T3450] vlan0: left allmulticast mode [ 1055.268663][ T3450] macvlan0: left allmulticast mode [ 1055.277428][ T3450] macvlan1: left allmulticast mode [ 1055.283903][ T3450] ipvlan0: left allmulticast mode [ 1055.289655][ T3450] ipvlan1: left allmulticast mode [ 1055.296097][ T3450] geneve0: left allmulticast mode [ 1055.302748][ T3450] geneve1: left allmulticast mode [ 1055.308487][ T3450] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1055.325651][ T3450] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 1055.342700][ T3450] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 1055.357197][ T3450] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 1055.371558][ T3450] mac80211_hwsim hwsim60 ÿ: left allmulticast mode [ 1055.379094][ T3450] gretap1: left promiscuous mode [ 1055.405448][ T3450] gretap2: left promiscuous mode [ 1055.410617][ T3450] gretap2: left allmulticast mode [ 1055.423673][ T3450] bridge3: left promiscuous mode [ 1055.428778][ T3450] bridge3: left allmulticast mode [ 1055.438752][ T3450] vlan1: left allmulticast mode [ 1055.445844][ T3450] mac80211_hwsim hwsim59 wlan0: left allmulticast mode [ 1055.457408][ T3450] bond7: left promiscuous mode [ 1055.463413][ T3450] bond7: left allmulticast mode [ 1055.470398][ T3450] bond8: left promiscuous mode [ 1055.476676][ T3450] bond8: left allmulticast mode [ 1055.488064][ T3450] ip6gre1: left allmulticast mode [ 1055.503639][ T3450] macvlan2: left promiscuous mode [ 1055.508906][ T3450] bond13: left promiscuous mode [ 1055.515364][ T3450] macvlan2: left allmulticast mode [ 1055.520691][ T3450] bond13: left allmulticast mode [ 1055.531289][ T3450] team1: left promiscuous mode [ 1055.537219][ T3450] team1: left allmulticast mode [ 1055.704440][ T3483] netlink: 'syz.3.8653': attribute type 8 has an invalid length. [ 1055.846048][ T3494] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8655'. [ 1056.204342][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8659'. [ 1056.359257][ T3536] netlink: 'syz.7.8665': attribute type 1 has an invalid length. [ 1056.482395][ T3536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1056.504058][ T3540] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1056.539552][ T3540] bond6: entered allmulticast mode [ 1056.655398][ T3545] netlink: 'syz.7.8666': attribute type 1 has an invalid length. [ 1056.664226][ T3545] netlink: 'syz.7.8666': attribute type 3 has an invalid length. [ 1056.673655][ T3545] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8666'. [ 1057.146438][ T3560] syzkaller0: entered promiscuous mode [ 1057.156479][ T3563] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8672'. [ 1057.172782][ T3560] syzkaller0: entered allmulticast mode [ 1057.268301][ T3575] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8673'. [ 1057.736822][ T3596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8679'. [ 1057.796840][ T3602] netlink: 'syz.5.8683': attribute type 10 has an invalid length. [ 1057.806459][ T3604] netlink: 'syz.5.8683': attribute type 10 has an invalid length. [ 1057.814607][ T3604] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8683'. [ 1057.839971][ T3602] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8683'. [ 1057.885524][ T3604] team0: Port device geneve0 added [ 1058.068242][ T3620] syzkaller0: entered promiscuous mode [ 1058.074793][ T3620] syzkaller0: entered allmulticast mode [ 1061.136299][ T3668] netlink: 'syz.3.8701': attribute type 1 has an invalid length. [ 1061.162036][ T3668] __nla_validate_parse: 2 callbacks suppressed [ 1061.162059][ T3668] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8701'. [ 1061.473970][ T3677] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 1061.699011][ T3699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1061.846485][ T3705] netlink: 'syz.6.8711': attribute type 62 has an invalid length. [ 1062.125642][ T3722] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8717'. [ 1062.176721][ T3728] netlink: 'syz.1.8719': attribute type 21 has an invalid length. [ 1062.187193][ T3728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8719'. [ 1062.287046][ T3734] netlink: 'syz.6.8720': attribute type 1 has an invalid length. [ 1062.303885][ T3734] netlink: 196 bytes leftover after parsing attributes in process `syz.6.8720'. [ 1062.380261][ T3742] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1062.533040][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8726'. [ 1062.560955][ T3760] dvmrp0: entered allmulticast mode [ 1062.568496][ T3759] syzkaller0: entered promiscuous mode [ 1062.574710][ T3759] syzkaller0: entered allmulticast mode [ 1062.817070][ T3772] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.8730'. [ 1062.826770][ T3772] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1063.299320][ T3777] netlink: 'syz.1.8731': attribute type 1 has an invalid length. [ 1063.327726][ T3777] netlink: 'syz.1.8731': attribute type 2 has an invalid length. [ 1063.353678][ T3781] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8732'. [ 1063.382537][ T3782] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8732'. [ 1063.394804][ T3785] x_tables: duplicate underflow at hook 2 [ 1063.736189][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1063.749032][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1063.758493][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1063.768320][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1063.794722][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1063.922762][ T3799] syzkaller0: entered promiscuous mode [ 1063.928846][ T3799] syzkaller0: entered allmulticast mode [ 1064.077445][ T3803] batadv_slave_1: entered promiscuous mode [ 1064.087046][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8737'. [ 1064.117686][ T3802] batadv_slave_1: left promiscuous mode [ 1064.345640][T32693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.355493][T32693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.544717][ T3821] netlink: 'syz.5.8744': attribute type 1 has an invalid length. [ 1064.626891][ T3796] wg1 speed is unknown, defaulting to 1000 [ 1064.914227][ T3840] netlink: 'syz.6.8749': attribute type 1 has an invalid length. [ 1065.096760][ T3840] bond16 (unregistering): Released all slaves [ 1065.677166][ T3869] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20003 [ 1065.817341][ T3796] chnl_net:caif_netlink_parms(): no params data found [ 1065.876238][ T5147] Bluetooth: hci0: command tx timeout [ 1066.166626][ T3896] __nla_validate_parse: 12 callbacks suppressed [ 1066.166647][ T3896] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8765'. [ 1066.228704][ T3898] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1066.243258][ T3898] bond16 (unregistering): Released all slaves [ 1066.285092][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.295892][ T3796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.309134][ T3796] bridge_slave_0: entered allmulticast mode [ 1066.320684][ T3796] bridge_slave_0: entered promiscuous mode [ 1066.359231][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.377415][ T3796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.397299][ T3796] bridge_slave_1: entered allmulticast mode [ 1066.414807][ T3796] bridge_slave_1: entered promiscuous mode [ 1066.563721][ T3913] netlink: 'syz.1.8768': attribute type 1 has an invalid length. [ 1066.587241][ T3913] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8768'. [ 1066.634097][ T3796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.683882][ T3796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.750657][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8773'. [ 1066.769094][ T3796] team0: Port device team_slave_0 added [ 1066.782705][ T3926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8773'. [ 1066.793966][ T3796] team0: Port device team_slave_1 added [ 1066.802245][ T3922] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8771'. [ 1066.825674][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8771'. [ 1066.853880][ T3922] netlink: 'syz.7.8771': attribute type 9 has an invalid length. [ 1066.916431][ T25] block nbd0: Possible stuck request ffff888085cf8000: control (read@0,4096B). Runtime 270 seconds [ 1066.996879][ T3796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.020812][ T3796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.057611][ T3796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.119342][ T3796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.137901][ T3796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.169858][ T3796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.408507][ T3796] hsr_slave_0: entered promiscuous mode [ 1067.418843][ T3796] hsr_slave_1: entered promiscuous mode [ 1067.427135][ T3796] debugfs: 'hsr0' already exists in 'hsr' [ 1067.433132][ T3796] Cannot create hsr debugfs directory [ 1067.581642][ T3962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8781'. [ 1067.705909][ T3969] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8782'. [ 1067.784747][ T3971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8783'. [ 1067.952919][ T5147] Bluetooth: hci0: command tx timeout [ 1067.963941][ T3976] netlink: 'syz.1.8785': attribute type 1 has an invalid length. [ 1067.983776][ T3796] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.988725][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8785'. [ 1068.011775][ T3796] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.101359][ T3796] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.125635][ T3796] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.191606][ T3796] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.237304][ T3796] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.281186][ T3995] Unsupported ieee802154 address type: 0 [ 1068.317923][ T3796] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.331665][ T3796] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.389409][ T3998] netlink: 'syz.5.8792': attribute type 1 has an invalid length. [ 1068.474779][ T3998] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1068.507591][ T4004] bond0: entered promiscuous mode [ 1068.515950][ T4004] bond_slave_0: entered promiscuous mode [ 1068.521987][ T4004] syz_tun: entered promiscuous mode [ 1068.600942][ T4006] tipc: Failed to obtain node identity [ 1068.606652][ T4006] tipc: Enabling of bearer rejected, failed to enable media [ 1068.809251][ T3796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1068.831797][ T3796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1068.859211][ T3796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1068.876365][ T3796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1069.039635][ T3796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.136265][ T3796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.184689][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.192040][ T7314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.246452][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.253705][ T7314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.757437][ T3796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.869308][ T4072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1069.904576][ T4078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1069.934202][ T3796] veth0_vlan: entered promiscuous mode [ 1069.963917][ T3796] veth1_vlan: entered promiscuous mode [ 1070.020885][ T3796] veth0_macvtap: entered promiscuous mode [ 1070.033969][ T5147] Bluetooth: hci0: command tx timeout [ 1070.055855][ T3796] veth1_macvtap: entered promiscuous mode [ 1070.095344][ T3796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.137831][ T3796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.168149][T12117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.204730][T12117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.220801][T12117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.241808][T12117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.423728][ T4099] netlink: 'syz.1.8821': attribute type 33 has an invalid length. [ 1070.548362][ T4105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.560600][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.576822][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.717029][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.725555][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.339802][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1071.353393][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1071.369482][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1071.378582][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1071.387386][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1071.834482][T25892] syz_tun (unregistering): left allmulticast mode [ 1071.841087][T25892] syz_tun (unregistering): left promiscuous mode [ 1071.884535][T25892] bridge0: port 2(syz_tun) entered disabled state [ 1072.113032][ T5147] Bluetooth: hci0: command tx timeout [ 1072.134410][ T2059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.163456][ T2059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.186738][ T4174] __nla_validate_parse: 9 callbacks suppressed [ 1072.186771][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8843'. [ 1072.288383][ T4134] wg1 speed is unknown, defaulting to 1000 [ 1072.390167][ T2059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.434900][ T2059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.457429][ T4174] xt_l2tp: v2 doesn't support IP mode [ 1072.489350][ T4182] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8845'. [ 1072.545506][ T4182] bond8 (unregistering): Released all slaves [ 1072.688170][ T2059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.722918][ T2059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.865448][ T2059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.891654][ T2059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.928151][ T4191] syzkaller0: entered promiscuous mode [ 1072.939619][ T4191] syzkaller0: entered allmulticast mode [ 1073.129200][T12120] netdevsim netdevsim1 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.146893][ T4195] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1073.155793][ T4195] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 1073.167699][ T4195] tipc: Resetting bearer [ 1073.173976][T12120] netdevsim netdevsim1 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.201580][T12120] netdevsim netdevsim1 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.295215][T12120] netdevsim netdevsim1 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.459211][ T4210] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004 [ 1073.473371][ T5147] Bluetooth: hci4: command tx timeout [ 1073.786689][ T2059] bond15 (unregistering): (slave gretap3): Releasing active interface [ 1073.857401][ T2059] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1073.986916][ T2059] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1074.038031][ T2059] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 1074.079686][ T2059] team0: Port device bridge3 removed [ 1074.465724][ T2059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.477201][ T2059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.489331][ T2059] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 1074.499587][ T2059] bond0 (unregistering): Released all slaves [ 1074.660249][ T2059] bond1 (unregistering): Released all slaves [ 1074.828853][ T2059] bond2 (unregistering): Released all slaves [ 1074.845820][ T2059] bond3 (unregistering): Released all slaves [ 1074.861134][ T2059] bond4 (unregistering): Released all slaves [ 1074.876958][ T2059] bond5 (unregistering): Released all slaves [ 1074.894166][ T2059] bond6 (unregistering): Released all slaves [ 1075.058152][ T2059] bond7 (unregistering): Released all slaves [ 1075.207588][ T2059] bond8 (unregistering): Released all slaves [ 1075.224855][ T2059] bond9 (unregistering): Released all slaves [ 1075.245019][ T2059] bond10 (unregistering): Released all slaves [ 1075.450396][ T2059] bond11 (unregistering): Released all slaves [ 1075.470881][ T2059] bond12 (unregistering): Released all slaves [ 1075.564411][ T5147] Bluetooth: hci4: command tx timeout [ 1075.681651][ T2059] team0: Port device macvlan2 removed [ 1075.693414][ T2059] bond13 (unregistering): Released all slaves [ 1075.711428][ T2059] bond14 (unregistering): Released all slaves [ 1075.730302][ T2059] bond15 (unregistering): Released all slaves [ 1076.029869][ T4231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8861'. [ 1076.039546][ T4236] atomic_op ffff8880294b5198 conn xmit_atomic 0000000000000000 [ 1076.056308][ T2059] tipc: Left network mode [ 1076.358954][ T4134] chnl_net:caif_netlink_parms(): no params data found [ 1076.609293][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8868'. [ 1076.677173][ T4242] tipc: Resetting bearer [ 1076.719847][ T4262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8868'. [ 1077.083942][ T4277] xt_ecn: cannot match TCP bits for non-tcp packets [ 1077.096550][ T4277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8875'. [ 1077.106473][ T4134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.126651][ T4134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.143975][ T4134] bridge_slave_0: entered allmulticast mode [ 1077.156494][ T4134] bridge_slave_0: entered promiscuous mode [ 1077.216849][ T4134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.224485][ T4134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.237522][ T4134] bridge_slave_1: entered allmulticast mode [ 1077.265101][ T4134] bridge_slave_1: entered promiscuous mode [ 1077.297567][ T4287] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8877'. [ 1077.399031][ T4294] netlink: 'syz.6.8877': attribute type 1 has an invalid length. [ 1077.420206][ T4134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.440841][ T4290] netlink: 'syz.6.8877': attribute type 1 has an invalid length. [ 1077.504948][ T4134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.516137][ T4303] netlink: 'syz.5.8879': attribute type 32 has an invalid length. [ 1077.576500][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8879'. [ 1077.633448][ T5147] Bluetooth: hci4: command tx timeout [ 1077.655304][ T4303] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1077.667805][ T4134] team0: Port device team_slave_0 added [ 1077.745568][ T4134] team0: Port device team_slave_1 added [ 1077.753348][ T4313] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8881'. [ 1077.763828][ T4313] netlink: 'syz.5.8881': attribute type 7 has an invalid length. [ 1077.772665][ T4313] netlink: 'syz.5.8881': attribute type 8 has an invalid length. [ 1077.780766][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8881'. [ 1077.979300][ T4134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.988512][ T4134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.016940][ T4134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.058156][ T4134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.065605][ T4134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.096108][ T4134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.475654][ T4334] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1078.487865][ T4334] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 1079.031387][ T4134] hsr_slave_0: entered promiscuous mode [ 1079.076553][ T4134] hsr_slave_1: entered promiscuous mode [ 1079.113403][ T4134] debugfs: 'hsr0' already exists in 'hsr' [ 1079.126469][ T4134] Cannot create hsr debugfs directory [ 1079.363244][ T2059] hsr_slave_0: left promiscuous mode [ 1079.394306][ T2059] hsr_slave_1: left promiscuous mode [ 1079.400591][ T2059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.423201][ T2059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.466925][ T4372] netlink: 'syz.3.8894': attribute type 3 has an invalid length. [ 1079.480648][ T2059] pim6reg527 (unregistering): left allmulticast mode [ 1079.723240][ T4391] netlink: 'syz.7.8899': attribute type 10 has an invalid length. [ 1079.732919][ T5147] Bluetooth: hci4: command tx timeout [ 1080.143582][ T2059] team0 (unregistering): Port device team_slave_1 removed [ 1080.203337][ T2059] team0 (unregistering): Port device team_slave_0 removed [ 1080.737739][ T4391] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1080.747216][ T4391] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1083.366022][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8907'. [ 1083.530680][ T4134] netdevsim netdevsim1 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.696870][ T4432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8912'. [ 1083.754920][ T4134] netdevsim netdevsim1 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.831244][ T2059] IPVS: stop unused estimator thread 0... [ 1083.874598][ T4134] netdevsim netdevsim1 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.016963][ T4444] bond8: Removing last arp target with arp_interval on [ 1084.035371][ T4134] netdevsim netdevsim1 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.083832][ T4450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8916'. [ 1084.315253][ T4459] netlink: 'syz.3.8920': attribute type 1 has an invalid length. [ 1084.394590][ T4459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1084.485640][ T4468] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1084.593985][ T4459] bond1: (slave veth0_to_bond): making interface the new active one [ 1084.605793][ T4459] veth0_to_bond: entered promiscuous mode [ 1084.614357][ T4459] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1084.635620][ T4473] bond1: entered promiscuous mode [ 1084.640911][ T4473] bond1: entered allmulticast mode [ 1084.647368][ T4473] veth0_to_bond: entered allmulticast mode [ 1084.662831][ T4469] policy can only be matched on NF_INET_PRE_ROUTING [ 1084.662853][ T4469] unable to load match [ 1084.727640][ T4134] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1084.793742][ T4134] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1084.807484][ T4134] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1084.826572][ T4134] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1085.141206][ T4134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.183125][ T4500] nbd5: detected capacity change from 0 to 63 [ 1085.197602][ T4134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.205878][ T4504] block nbd5: NBD_DISCONNECT [ 1085.219908][ T4504] block nbd5: Disconnected due to user request. [ 1085.234511][T12117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.241737][T12117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.251135][ T4504] block nbd5: shutting down sockets [ 1085.257515][T30343] blk_print_req_error: 138 callbacks suppressed [ 1085.257538][T30343] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.278850][T30343] buffer_io_error: 138 callbacks suppressed [ 1085.278872][T30343] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1085.294662][T30343] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.305156][T30343] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1085.314188][T30343] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.325059][T30343] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1085.334142][T12117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.341273][T12117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.364144][ T11] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.384592][ T11] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1085.431051][T30343] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.494001][T30343] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1085.506578][T30343] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.521042][T30343] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1085.530260][T30343] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.545889][T30343] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1085.573410][T30343] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.624012][T30343] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1085.656553][T30343] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.691736][T30343] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1085.738746][ T4490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1085.748158][T30343] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1085.773079][T30343] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1085.823387][T30343] ldm_validate_partition_table(): Disk read failed. [ 1085.830566][T30343] Dev nbd5: unable to read RDB block 0 [ 1085.858029][T30343] nbd5: unable to read partition table [ 1085.920221][T30343] ldm_validate_partition_table(): Disk read failed. [ 1085.941669][T30343] Dev nbd5: unable to read RDB block 0 [ 1085.966644][T30343] nbd5: unable to read partition table [ 1086.020288][ T4543] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8940'. [ 1086.083964][ T4543] xt_hashlimit: invalid rate [ 1086.247105][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8943'. [ 1086.288204][T32694] tipc: Subscription rejected, illegal request [ 1086.290407][ T4556] tipc: Enabled bearer , priority 0 [ 1086.311287][ T4554] netlink: 'syz.3.8945': attribute type 11 has an invalid length. [ 1086.323963][ T4554] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8945'. [ 1086.391766][ T4557] syzkaller0: entered promiscuous mode [ 1086.398527][ T4557] syzkaller0: entered allmulticast mode [ 1086.417725][ T4557] tipc: Resetting bearer [ 1086.447346][ T4134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.495584][ T4557] tipc: Resetting bearer [ 1086.535342][ T4565] can: request_module (can-proto-0) failed. [ 1086.596675][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8948'. [ 1086.654665][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8949'. [ 1087.003455][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 1089.030121][ T4557] tipc: Disabling bearer [ 1089.147488][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1089.307800][ T4609] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8957'. [ 1089.337621][ T4134] veth0_vlan: entered promiscuous mode [ 1089.347669][ T4609] openvswitch: netlink: IP tunnel dst address not specified [ 1089.370192][ T4134] veth1_vlan: entered promiscuous mode [ 1089.409602][ T4613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8959'. [ 1089.494915][ T4619] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8960'. [ 1089.520666][ T4616] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8960'. [ 1089.574390][ T4134] veth0_macvtap: entered promiscuous mode [ 1089.651734][ T4134] veth1_macvtap: entered promiscuous mode [ 1089.666267][ T4627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8962'. [ 1089.677155][ T4628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8962'. [ 1089.717484][ T4134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.755889][ T4134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.768000][ T4630] x_tables: duplicate underflow at hook 3 [ 1089.807778][ T7314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.818807][ T4632] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.8964'. [ 1089.854534][ T7314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.868955][ T7314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.896827][ T7314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.963873][ T4635] x_tables: duplicate underflow at hook 1 [ 1090.303727][ T7314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.327243][ T7314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.378551][ T4651] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8970'. [ 1090.497992][ T2059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.524330][ T2059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.604120][ T4662] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8973'. [ 1090.736686][ T4668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1090.982322][ T4685] smc: net device geneve0 applied user defined pnetid SYZ0 [ 1091.025999][ T4684] l2tp_ppp: sess 2/0: no socket in recv [ 1091.423430][ T4707] veth0: entered promiscuous mode [ 1091.495630][ T4715] netlink: 'syz.7.8988': attribute type 1 has an invalid length. [ 1091.505695][ T4707] veth0 (unregistering): left promiscuous mode [ 1091.721675][ T4715] bond7: entered promiscuous mode [ 1091.728709][ T4715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1091.844199][ T4732] bond7: (slave bridge5): making interface the new active one [ 1091.851904][ T4732] bridge5: entered promiscuous mode [ 1091.863895][ T4732] bridge5: left promiscuous mode [ 1092.068263][ T4730] netlink: 'syz.6.8993': attribute type 25 has an invalid length. [ 1092.097718][ T4743] netlink: 'syz.5.8996': attribute type 29 has an invalid length. [ 1092.328166][ T4760] sctp: [Deprecated]: syz.5.9000 (pid 4760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1092.328166][ T4760] Use struct sctp_sack_info instead [ 1092.844681][ T4782] netlink: 'syz.7.9006': attribute type 9 has an invalid length. [ 1092.895490][ T4782] netlink: 'syz.7.9006': attribute type 11 has an invalid length. [ 1092.909320][ T4782] netlink: 'syz.7.9006': attribute type 12 has an invalid length. [ 1093.301781][ T4813] netlink: 'syz.7.9017': attribute type 12 has an invalid length. [ 1093.314719][ T4813] netlink: 'syz.7.9017': attribute type 29 has an invalid length. [ 1093.421188][ T4816] : entered promiscuous mode [ 1093.567420][ T4822] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1093.617727][ T4821] atomic_op ffff888079687198 conn xmit_atomic 0000000000000000 [ 1094.061706][ T4834] "syz.1.9024" (4834) uses obsolete ecb(arc4) skcipher [ 1094.268254][ T4860] __nla_validate_parse: 20 callbacks suppressed [ 1094.268274][ T4860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9031'. [ 1094.428516][ T4866] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9034'. [ 1094.535610][ T4870] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1094.754697][ T4881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1094.858889][T12108] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.880027][T12108] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.885675][ T4891] netlink: 192 bytes leftover after parsing attributes in process `syz.6.9042'. [ 1094.910379][T12108] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.927154][T12108] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.061409][ T4901] syzkaller0: entered promiscuous mode [ 1095.077662][ T4901] syzkaller0: entered allmulticast mode [ 1095.917034][ T4953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9060'. [ 1096.063780][ T4963] netlink: 84 bytes leftover after parsing attributes in process `syz.7.9063'. [ 1096.084150][ T4968] netlink: 'syz.5.9064': attribute type 1 has an invalid length. [ 1096.103053][ T4969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9065'. [ 1096.119371][ T4968] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1096.239903][ T4981] netlink: 'syz.7.9068': attribute type 4 has an invalid length. [ 1096.435244][ T4988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9070'. [ 1096.500823][ T4994] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1096.719960][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9075'. [ 1096.719958][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9075'. [ 1096.971051][ T5027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9081'. [ 1097.021138][ T25] block nbd0: Possible stuck request ffff888085cf8000: control (read@0,4096B). Runtime 300 seconds [ 1097.135727][ T5033] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1097.199096][ T5039] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1097.369809][ T5044] sit1: entered promiscuous mode [ 1097.389177][ T5044] sit1: entered allmulticast mode [ 1098.267375][ T5096] validate_nla: 1 callbacks suppressed [ 1098.267416][ T5096] netlink: 'syz.6.9100': attribute type 1 has an invalid length. [ 1098.337840][ T5096] netlink: 'syz.6.9100': attribute type 1 has an invalid length. [ 1099.153678][ T5157] veth1_to_bond: entered allmulticast mode [ 1099.199759][ T5162] netlink: 'syz.6.9114': attribute type 1 has an invalid length. [ 1099.238277][ T5162] netlink: 'syz.6.9114': attribute type 11 has an invalid length. [ 1099.384960][ T5163] veth1_to_bond (unregistering): left allmulticast mode [ 1099.510233][ T5174] __nla_validate_parse: 12 callbacks suppressed [ 1099.510254][ T5174] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9117'. [ 1099.717265][ T5188] sctp: [Deprecated]: syz.6.9122 (pid 5188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.717265][ T5188] Use struct sctp_sack_info instead [ 1099.742106][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9121'. [ 1099.798990][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9122'. [ 1099.810443][ T5188] team0: left allmulticast mode [ 1099.816094][ T5188] team_slave_0: left allmulticast mode [ 1099.847141][ T5196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1099.856839][ T5188] team_slave_1: left allmulticast mode [ 1099.867435][ T5188] team0: left promiscuous mode [ 1099.872891][ T5188] team_slave_0: left promiscuous mode [ 1099.878695][ T5188] team_slave_1: left promiscuous mode [ 1099.886272][ T5188] bridge0: port 3(team0) entered disabled state [ 1099.899283][ T5188] bridge_slave_1: left allmulticast mode [ 1099.912148][ T5188] bridge_slave_1: left promiscuous mode [ 1099.923493][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.943548][ T5188] bridge_slave_0: left allmulticast mode [ 1099.974819][ T5188] bridge_slave_0: left promiscuous mode [ 1099.980715][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.487809][ T5238] netlink: 'syz.7.9132': attribute type 1 has an invalid length. [ 1100.495896][ T5238] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9132'. [ 1100.831229][ T5259] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9142'. [ 1100.845026][ T5257] netlink: 'syz.1.9141': attribute type 1 has an invalid length. [ 1101.095817][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9147'. [ 1101.251616][ T5279] netlink: 'syz.3.9150': attribute type 1 has an invalid length. [ 1101.353954][ T5283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1101.425360][ T5288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1101.522599][ T5289] netlink: 51 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1101.532409][ T5288] netlink: 51 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1101.618560][ T5297] x_tables: duplicate underflow at hook 2 [ 1101.694685][ T5299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1102.330682][ T5326] Bluetooth: MGMT ver 1.23 [ 1103.188687][ T5377] bond16: option lp_interval: invalid value (0) [ 1103.211966][ T5377] bond16: option lp_interval: allowed values 1 - 2147483647 [ 1103.245411][ T5377] bond16 (unregistering): Released all slaves [ 1103.644160][ T5404] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1103.870385][ T5413] tipc: Enabled bearer , priority 0 [ 1103.885308][ T5413] syzkaller0: entered promiscuous mode [ 1103.902696][ T5413] syzkaller0: entered allmulticast mode [ 1103.945198][ T5413] tipc: Resetting bearer [ 1103.993367][ T5412] tipc: Resetting bearer [ 1104.010302][ T5417] netlink: 'syz.3.9194': attribute type 18 has an invalid length. [ 1104.040326][ T5417] netlink: 'syz.3.9194': attribute type 18 has an invalid length. [ 1104.055480][ T5412] tipc: Disabling bearer [ 1104.465351][ T5446] netlink: 'syz.7.9202': attribute type 1 has an invalid length. [ 1104.528580][ T5453] __nla_validate_parse: 7 callbacks suppressed [ 1104.528600][ T5453] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9202'. [ 1104.580267][ T5446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1104.629470][ T5446] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1104.754124][ T5453] bond8: entered promiscuous mode [ 1104.760600][ T5453] bond8: entered allmulticast mode [ 1104.850137][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9206'. [ 1105.302796][ T5479] netlink: 'syz.3.9212': attribute type 1 has an invalid length. [ 1105.335613][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9212'. [ 1105.364388][ T5479] sctp: [Deprecated]: syz.3.9212 (pid 5479) Use of int in maxseg socket option. [ 1105.364388][ T5479] Use struct sctp_assoc_value instead [ 1105.437156][ T5481] syzkaller0: entered promiscuous mode [ 1105.442799][ T5481] syzkaller0: entered allmulticast mode [ 1105.506505][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1105.519168][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1105.528068][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1105.537864][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1105.548575][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1105.832699][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9218'. [ 1105.864346][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9218'. [ 1106.138299][ T5508] nft_compat: unsupported protocol 0 [ 1106.263294][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9221'. [ 1106.312210][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9221'. [ 1106.473813][ T5483] wg1 speed is unknown, defaulting to 1000 [ 1106.499172][ T5522] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 1106.533249][ T5522] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 1106.541808][ T5522] tipc: Resetting bearer [ 1106.728096][ T5530] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1107.199867][ T5547] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9231'. [ 1107.646699][ T5147] Bluetooth: hci3: command tx timeout [ 1107.698334][ T5483] chnl_net:caif_netlink_parms(): no params data found [ 1107.830122][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1107.879075][ T5584] openvswitch: netlink: Message has 8 unknown bytes. [ 1107.898058][ T5483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.907266][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.916125][ T5483] bridge_slave_0: entered allmulticast mode [ 1107.926482][ T5483] bridge_slave_0: entered promiscuous mode [ 1107.937348][ T5483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.945927][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.959962][ T5483] bridge_slave_1: entered allmulticast mode [ 1107.969525][ T5483] bridge_slave_1: entered promiscuous mode [ 1108.047834][ T5483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.062334][ T5483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.071605][ T5593] netlink: 'syz.3.9243': attribute type 12 has an invalid length. [ 1108.080033][ T5593] netlink: 'syz.3.9243': attribute type 29 has an invalid length. [ 1108.088412][ T5593] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9243'. [ 1108.102441][ T5593] netlink: 'syz.3.9243': attribute type 2 has an invalid length. [ 1108.178700][ T5483] team0: Port device team_slave_0 added [ 1108.189977][ T5483] team0: Port device team_slave_1 added [ 1108.298677][ T5483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.327396][ T5483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.370599][ T5483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.476755][ T5483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.493128][ T5483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.520603][ T5483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.544768][ T5607] tipc: Started in network mode [ 1108.549711][ T5607] tipc: Node identity ce85a8f1807c, cluster identity 4711 [ 1108.593424][ T5607] tipc: Enabled bearer , priority 0 [ 1108.670732][ T5608] syzkaller0: MTU too low for tipc bearer [ 1108.677549][ T5608] tipc: Disabling bearer [ 1108.711432][ T5610] netlink: 'syz.5.9247': attribute type 21 has an invalid length. [ 1108.743928][ T5610] netlink: 'syz.5.9247': attribute type 1 has an invalid length. [ 1108.766570][ T5615] netlink: 'syz.7.9249': attribute type 10 has an invalid length. [ 1108.801793][ T5615] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1108.815000][ T5615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1108.957994][ T5483] hsr_slave_0: entered promiscuous mode [ 1108.989099][ T5483] hsr_slave_1: entered promiscuous mode [ 1109.024411][ T5483] debugfs: 'hsr0' already exists in 'hsr' [ 1109.030223][ T5483] Cannot create hsr debugfs directory [ 1109.639703][ T5483] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.712658][ T5147] Bluetooth: hci3: command tx timeout [ 1109.751807][ T5483] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.796440][ T5675] __nla_validate_parse: 5 callbacks suppressed [ 1109.796460][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9267'. [ 1109.817476][ T5675] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1109.829832][ T5675] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9267'. [ 1109.871423][ T5483] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.899216][ T5682] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9268'. [ 1109.983307][ T5483] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.046098][ T5685] netlink: 'syz.3.9269': attribute type 17 has an invalid length. [ 1110.072870][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1110.098625][ T5685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9269'. [ 1110.350127][ T5483] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1110.394674][ T5483] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1110.444092][ T5483] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1110.489387][ T5483] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1110.545682][ T5712] netlink: 'syz.5.9278': attribute type 28 has an invalid length. [ 1110.573611][ T5712] netlink: 'syz.5.9278': attribute type 3 has an invalid length. [ 1110.603102][ T5712] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9278'. [ 1110.818519][ T5483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.835431][ T5725] IPVS: persistence engine module ip_vs_pe_À not found [ 1110.844111][ T5732] netlink: 192 bytes leftover after parsing attributes in process `syz.7.9282'. [ 1110.918097][ T5483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.974823][ T2170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.982182][ T2170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.035348][ T2170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.042672][ T2170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.106119][ T5741] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9284'. [ 1111.602902][ T5759] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1111.735813][ T5483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.793250][ T5147] Bluetooth: hci3: command tx timeout [ 1111.888526][ T5781] netlink: 'syz.7.9292': attribute type 3 has an invalid length. [ 1111.909158][ T5778] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.9294'. [ 1112.134193][ T5790] tun0: tun_chr_ioctl cmd 1074025675 [ 1112.139901][ T5790] tun0: persist enabled [ 1112.190528][ T5796] netlink: 'syz.7.9298': attribute type 1 has an invalid length. [ 1112.203767][ T5796] netlink: 236 bytes leftover after parsing attributes in process `syz.7.9298'. [ 1112.474639][ T5483] veth0_vlan: entered promiscuous mode [ 1112.504748][ T5483] veth1_vlan: entered promiscuous mode [ 1112.649586][ T5483] veth0_macvtap: entered promiscuous mode [ 1112.685635][ T5483] veth1_macvtap: entered promiscuous mode [ 1112.764056][ T5483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.790574][ T5483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.876059][ T6108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.901459][ T6108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.933907][ T6108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.970125][ T6108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.284160][T12109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.313622][T12109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.371147][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.380666][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.525905][ T5854] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1113.544477][ T5854] bond1: option arp_ip_target: invalid value (0) [ 1113.570725][ T5854] bond1 (unregistering): Released all slaves [ 1113.825124][ T5875] netlink: 'syz.6.9316': attribute type 1 has an invalid length. [ 1113.873758][ T5147] Bluetooth: hci3: command tx timeout [ 1114.101461][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1114.116938][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1114.141280][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1114.152695][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1114.160590][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.163035][ T5886] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1114.986777][ T5884] wg1 speed is unknown, defaulting to 1000 [ 1115.833184][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 1116.178951][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.197021][ T5836] Bluetooth: hci5: command tx timeout [ 1116.232191][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.248856][ T5884] bridge_slave_0: entered allmulticast mode [ 1116.266476][ T5884] bridge_slave_0: entered promiscuous mode [ 1116.287535][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.295822][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.303988][ T5884] bridge_slave_1: entered allmulticast mode [ 1116.313363][ T5884] bridge_slave_1: entered promiscuous mode [ 1116.410520][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.447769][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.600888][ T5884] team0: Port device team_slave_0 added [ 1116.614474][ T5884] team0: Port device team_slave_1 added [ 1116.714921][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.735778][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.777102][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.791054][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.798987][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.869262][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.064583][ T5884] hsr_slave_0: entered promiscuous mode [ 1117.085038][ T5884] hsr_slave_1: entered promiscuous mode [ 1117.093191][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 1117.098999][ T5884] Cannot create hsr debugfs directory [ 1118.275540][ T5836] Bluetooth: hci5: command tx timeout [ 1120.352033][ T5836] Bluetooth: hci5: command tx timeout [ 1120.688717][ T5884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1120.715078][ T6084] x_tables: duplicate entry at hook 2 [ 1120.726736][ T5884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1120.855191][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.865562][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.877703][ T6088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1120.906720][ T5884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1121.029350][ T5884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1121.283244][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.326080][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.349510][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.356797][T12120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.399154][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.406411][T12120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.914231][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.433107][ T5836] Bluetooth: hci5: command tx timeout [ 1122.606453][ T5884] veth0_vlan: entered promiscuous mode [ 1122.645358][ T5884] veth1_vlan: entered promiscuous mode [ 1122.731133][ T5884] veth0_macvtap: entered promiscuous mode [ 1122.758860][ T5884] veth1_macvtap: entered promiscuous mode [ 1122.811741][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.873319][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.917869][T32693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.949743][T32693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.975848][T32693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.995961][T32693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.178054][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.204033][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.263693][ T6201] __nla_validate_parse: 8 callbacks suppressed [ 1123.263716][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1123.334112][ T2168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.350373][ T2168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.615934][ T6010] IPVS: starting estimator thread 0... [ 1124.674762][ T6277] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1124.732824][ T6272] IPVS: using max 25 ests per chain, 60000 per kthread [ 1124.736574][ T6277] Cannot find del_set index 0 as target [ 1124.827538][ T6283] netlink: 112 bytes leftover after parsing attributes in process `syz.6.9474'. [ 1124.909244][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1124.921298][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1124.936593][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1124.946685][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1124.956498][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1125.176541][ T6289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9476'. [ 1125.488928][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1125.540396][ T6312] netlink: 'syz.6.9483': attribute type 33 has an invalid length. [ 1125.628011][T28567] bond0: (slave syz_tun): Releasing backup interface [ 1125.663738][T28567] syz_tun (unregistering): left promiscuous mode [ 1125.800527][ T6284] wg1 speed is unknown, defaulting to 1000 Connection to 10.128.0.117 closed by remote host. [ 1126.728426][T12131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.910977][T12131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.992683][ T5836] Bluetooth: hci1: command tx timeout [ 1127.035511][T12131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.089799][ T25] block nbd0: Possible stuck request ffff888085cf8000: control (read@0,4096B). Runtime 330 seconds [ 1127.134620][T12131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.258598][T12125] netdevsim netdevsim1 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.332852][T12110] netdevsim netdevsim1 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.425758][T12110] netdevsim netdevsim1 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.435115][T12110] netdevsim netdevsim1 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.445058][T12131] bridge_slave_1: left allmulticast mode [ 1127.450750][T12131] bridge_slave_1: left promiscuous mode [ 1127.457081][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.470349][T12131] bridge_slave_0: left allmulticast mode [ 1127.484722][T12131] bridge_slave_0: left promiscuous mode [ 1127.496133][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.717142][ T31] INFO: task udevd:30136 blocked for more than 143 seconds. [ 1127.734255][ T31] Not tainted syzkaller #0 [ 1127.739266][ T31] Blocked by coredump. [ 1127.744593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1127.753924][ T31] task:udevd state:D stack:23416 pid:30136 tgid:30136 ppid:5197 task_flags:0x40054c flags:0x00080003 [ 1127.766536][ T31] Call Trace: [ 1127.769847][ T31] [ 1127.773727][ T31] __schedule+0x149b/0x4fd0 [ 1127.778386][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1127.783861][ T31] ? __pfx___schedule+0x10/0x10 [ 1127.788741][ T31] ? schedule+0x91/0x360 [ 1127.796830][ T31] schedule+0x165/0x360 [ 1127.801068][ T31] io_schedule+0x80/0xd0 [ 1127.807740][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 1127.813199][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1127.819316][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1127.825426][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 1127.831088][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 1127.838776][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 1127.845902][ T31] truncate_inode_pages_range+0x3f0/0xd90 [ 1127.851710][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1127.858705][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1127.865904][ T31] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1127.873249][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1127.878349][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1127.884174][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 1127.889521][ T31] bdev_release+0x417/0x650 [ 1127.894824][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1127.900714][ T31] blkdev_release+0x15/0x20 [ 1127.905462][ T31] __fput+0x44c/0xa70 [ 1127.909497][ T31] task_work_run+0x1d4/0x260 [ 1127.914389][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1127.919572][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1127.924952][ T31] do_exit+0x694/0x22f0 [ 1127.929172][ T31] ? cgroup1_freezing+0x20/0x350 [ 1127.935033][ T31] ? __pfx_do_exit+0x10/0x10 [ 1127.939670][ T31] do_group_exit+0x21c/0x2d0 [ 1127.946698][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1127.954610][ T31] get_signal+0x1285/0x1340 [ 1127.959191][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 1127.965272][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1127.971451][ T31] ? ksys_read+0x1e1/0x250 [ 1127.976707][ T31] exit_to_user_mode_loop+0x87/0x4e0 [ 1127.982817][ T31] ? rcu_is_watching+0x15/0xb0 [ 1127.987642][ T31] do_syscall_64+0x2b7/0xf80 [ 1127.992939][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.999082][ T31] ? trace_irq_disable+0x37/0x100 [ 1128.005416][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1128.010163][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.016656][ T31] RIP: 0033:0x7fc3a6aa7407 [ 1128.021096][ T31] RSP: 002b:00007ffed3391040 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1128.030028][ T31] RAX: fffffffffffffffc RBX: 00007fc3a7142880 RCX: 00007fc3a6aa7407 [ 1128.038898][ T31] RDX: 0000000000000200 RSI: 00007fc3a7141000 RDI: 0000000000000009 [ 1128.047499][ T31] RBP: 00005622f8437050 R08: 0000000000000000 R09: 0000000000000000 [ 1128.056304][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1128.066649][ T31] R13: 0000000000000000 R14: 00005622f8447b68 R15: 00007fc3a726939c [ 1128.075290][ T31] [ 1128.078524][ T31] [ 1128.078524][ T31] Showing all locks held in the system: [ 1128.100598][ T31] 3 locks held by kworker/u8:1/13: [ 1128.107421][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1128.120137][ T31] #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1128.131687][ T31] #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1128.141502][ T31] 1 lock held by khungtaskd/31: [ 1128.146991][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1128.157784][ T31] 2 locks held by getty/5588: [ 1128.163151][ T31] #0: ffff88814d43f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1128.174005][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1128.186173][ T31] 5 locks held by kworker/1:8/6010: [ 1128.191436][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1128.203152][ T31] #1: ffffc90004cafbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1128.216863][ T31] #2: ffff88807c2d6240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 1128.227309][ T31] #3: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1128.237746][ T31] #4: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1128.247287][ T31] 5 locks held by kworker/u8:34/12131: [ 1128.253633][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1128.265169][ T31] #1: ffffc900051f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1128.277109][ T31] #2: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 1128.287143][ T31] #3: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1128.297158][ T31] #4: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 1128.309918][ T31] 3 locks held by kworker/1:10/27036: [ 1128.315873][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1128.327542][ T31] #1: ffffc9000c267bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1128.339170][ T31] #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1128.350503][ T31] 1 lock held by udevd/30136: [ 1128.356482][ T31] #0: ffff888025f06358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 1128.366961][ T31] 2 locks held by syz-executor/6284: [ 1128.373142][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1128.383430][ T31] #1: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 1128.393894][ T31] [ 1128.396263][ T31] ============================================= [ 1128.396263][ T31] [ 1128.407475][ T31] NMI backtrace for cpu 0 [ 1128.407500][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1128.407543][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.407567][ T31] Call Trace: [ 1128.407582][ T31] [ 1128.407600][ T31] dump_stack_lvl+0xe8/0x150 [ 1128.407653][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1128.407704][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1128.407768][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1128.407826][ T31] sys_info+0x135/0x170 [ 1128.407868][ T31] watchdog+0xf95/0xfe0 [ 1128.407931][ T31] ? watchdog+0x20a/0xfe0 [ 1128.407991][ T31] kthread+0x711/0x8a0 [ 1128.408024][ T31] ? __pfx_watchdog+0x10/0x10 [ 1128.408064][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.408097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1128.408130][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.408160][ T31] ret_from_fork+0x510/0xa50 [ 1128.408185][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.408205][ T31] ? __switch_to+0xc9e/0x1480 [ 1128.408241][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.408271][ T31] ret_from_fork_asm+0x1a/0x30 [ 1128.408321][ T31] [ 1128.408329][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1128.537312][ C1] NMI backtrace for cpu 1 [ 1128.537331][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1128.537353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.537366][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1128.537390][ C1] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1128.537407][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 1128.537424][ C1] RAX: 00000000003b64f9 RBX: ffffffff819713ee RCX: 0000000080000001 [ 1128.537438][ C1] RDX: 0000000000000001 RSI: ffffffff8d792055 RDI: ffffffff8bc083e0 [ 1128.537452][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1128.537466][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270 [ 1128.537481][ C1] R13: 1ffff110038d9b70 R14: 0000000000000001 R15: 0000000000000001 [ 1128.537494][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1128.537510][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1128.537523][ C1] CR2: 00007ffed3388a68 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1128.537541][ C1] Call Trace: [ 1128.537550][ C1] [ 1128.537558][ C1] default_idle+0x13/0x20 [ 1128.537580][ C1] default_idle_call+0x73/0xb0 [ 1128.537605][ C1] do_idle+0x1be/0x4d0 [ 1128.537626][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1128.537647][ C1] ? __pfx_do_idle+0x10/0x10 [ 1128.537674][ C1] cpu_startup_entry+0x44/0x60 [ 1128.537694][ C1] start_secondary+0x101/0x110 [ 1128.537723][ C1] common_startup_64+0x13e/0x147 [ 1128.537758][ C1] [ 1128.715914][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1128.722825][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1128.731982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.742180][ T31] Call Trace: [ 1128.745512][ T31] [ 1128.748584][ T31] vpanic+0x1e0/0x670 [ 1128.752616][ T31] panic+0xb9/0xc0 [ 1128.756390][ T31] ? __pfx_panic+0x10/0x10 [ 1128.760916][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1128.766341][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1128.772552][ T31] watchdog+0xfdf/0xfe0 [ 1128.776769][ T31] ? watchdog+0x20a/0xfe0 [ 1128.781161][ T31] kthread+0x711/0x8a0 [ 1128.785269][ T31] ? __pfx_watchdog+0x10/0x10 [ 1128.789988][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.794609][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1128.799902][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.804621][ T31] ret_from_fork+0x510/0xa50 [ 1128.809260][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.814414][ T31] ? __switch_to+0xc9e/0x1480 [ 1128.819163][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.823806][ T31] ret_from_fork_asm+0x1a/0x30 [ 1128.828631][ T31] [ 1128.832277][ T31] Kernel Offset: disabled [ 1128.836629][ T31] Rebooting in 86400 seconds..