last executing test programs: 4m57.977251428s ago: executing program 3 (id=1531): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000004b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004700)={0x3c4, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x13}}}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x65}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x350, 0x11d, 0x0, 0x1, [{0x34c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x67}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x328, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0xa}, {0x7, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x5, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x4}, {0x1, 0x4}, {0x3, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0x4}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x7}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x7}]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x30, 0x2, 0x2, 0x60, 0x48, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5000, 0x9, 0x401, 0x40, 0x9, 0x8001, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x9, 0x4, 0xc, 0x30, 0x1, 0x4e, 0xc, 0x36, 0x6c, 0x9, 0x3, 0x1b, 0x16, 0x68]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x8, 0x1, 0xc0, 0x6, 0xc231, 0x4d61]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x9}, {0x6, 0x1}, {0x4, 0x3}, {0x6, 0x4}, {0x0, 0x8}, {0x3}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x4}, {0x0, 0x17}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x9}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x3}, {0x4, 0xa}, {0x5, 0x4}, {0x6, 0x9}, {0x7, 0x4}, {0x3, 0x6}, {}, {0x0, 0x5}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0x7}, {0x2, 0x4}, {0x2, 0x9}, {0x0, 0x1}, {0x3}, {0x2, 0x7}, {0x6, 0x9}, {0x1}, {0x7, 0x6}, {0x4, 0x1}, {0x0, 0x6}, {0x1}, {0x1, 0x2}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x1}, {0x4, 0x8}, {0x0, 0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0x3}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x9}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x84, 0x101, 0x5, 0x1ff, 0xb26a, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x0, 0x2, 0x5, 0x3ff, 0x9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffc, 0xff80, 0x6, 0x1ff, 0xc, 0x922c, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x60, 0x0, 0x35, 0x6c, 0x9, 0x30, 0x24, 0x12, 0x18, 0x12, 0x48, 0xb, 0x6c, 0x1b, 0x48, 0x6c, 0x2, 0x2, 0x4, 0x6, 0x18, 0x2, 0x6, 0x18, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x1, 0x101, 0x9, 0x4, 0xa022, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x9, 0x16, 0x30, 0x0, 0x6c, 0x6c, 0x16, 0x6, 0x24, 0x12, 0x18, 0x12, 0x0, 0x6, 0x1, 0x24, 0x1b, 0x9, 0x1b, 0x9, 0x79, 0x9, 0x30, 0x16, 0x6c, 0x6c, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5c, 0xfffd, 0x6, 0x8, 0x80, 0x5, 0xcc97, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xffff, 0x2, 0x8, 0x3, 0x4, 0x2, 0xfff3]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0xa}, {0x2, 0x3}, {0x1, 0x9}, {0x7, 0x7}, {0x5, 0x6}, {0x7}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x3ff, 0x2, 0x854, 0x1, 0x4, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0xfffa, 0x8, 0xb0, 0x4, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x9, 0x2, 0x3, 0x1ff, 0x8, 0x4b2, 0x5954]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x0, 0x4, 0x5, 0x12, 0xc, 0x16, 0xc, 0x3, 0x8, 0x48, 0x9, 0x16, 0x47, 0x24, 0x6a3cd01081b60821, 0x18, 0x12, 0x60, 0x5f, 0xe, 0x30, 0x1, 0x9, 0x18, 0x18, 0x48, 0x1b, 0x18, 0x48, 0x0, 0xb]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0xc, 0x7, 0x3, 0x2, 0x9bbc]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x15, 0x7e]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7, 0x6, 0x81, 0x3, 0x0, 0x4, 0x800]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x6}, {0x4, 0x4}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x2}, {0x3, 0x2}, {0x2, 0x5}, {0x7, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x1}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x8}, {0x1, 0xa}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0xa}, {0x3}, {0x6, 0x4}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x6}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x6, 0x7}, {0x5, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x5, 0x7}, {0x4, 0x7}, {0x3}, {0x6, 0x8}, {0x7}, {0x3, 0x4}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x1b, 0x16, 0x2e, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xe, 0xfffa, 0x1, 0x2, 0x400, 0x9, 0x4000]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4040}, 0x890) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x3e, 0x107, 0x70bd27, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x117}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x440) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4086, 0xff6}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000026c0)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/4098, 0x1002}, {&(0x7f0000000040)=""/68, 0x44}], 0x6}, 0x32120) 4m57.749792706s ago: executing program 3 (id=1536): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122300000000009500ffff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) 4m57.364688741s ago: executing program 3 (id=1542): r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) listen(r0, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000640)=""/170, &(0x7f0000000700)=0xaa) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002000000000001190787f000001e00000014e224e31000c9078cefc7e1b6fcc213d00002ddb93d3be21ac033bfdbfcee268ff73ea7a0ef0ad5d2cca212f66fb02b6c90648877a9cb3232aa6a15f476d4563f27850517e0bae1748ef3c817d5d01ea7173b14230d34aa75d36466f241669b937480e9ac179eef8716077966b35f153a57cd7e47d26e759a80e0cb002c2c21bb76c865b9e35733d265328e77c"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) 4m57.200830186s ago: executing program 3 (id=1546): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f00000014c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001540)="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", 0x10f}, {&(0x7f0000000440)="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", 0x193}], 0x2}, 0x9cdc2384056b48b8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4m57.054356816s ago: executing program 3 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 4m56.822478382s ago: executing program 3 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x2080004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 4m41.776529379s ago: executing program 32 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x2080004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m28.545463797s ago: executing program 2 (id=3149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080010000800000000000c0015"], 0xe0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) 2m28.394194156s ago: executing program 2 (id=3151): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0xa0, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x34e6}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m28.180247906s ago: executing program 2 (id=3157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa1}, {0x6, 0x11, 0xffff}}]}, 0x44}}, 0x4040004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}}, 0xc010) (async) socket(0x23, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r1) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x43}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, 0x1403, 0x300, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4884}, 0x20000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) r9 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r9, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) shutdown(r9, 0x0) (async) ppoll(&(0x7f0000000140)=[{r9, 0x5}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0xe42e, @dev={0xfe, 0x80, '\x00', 0x25}, 0x10001}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @multicast2}], 0x78) 2m28.013537274s ago: executing program 2 (id=3160): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="61129900000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000170600000ee60000bf0500000000000063620000000000006507000000000000460700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc72be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035bc6a35a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa3e8ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c07935"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0x34, 0x0, "ca1d0e3e38ec2bb9b814e1418ae810013b5d9e21b8a97839ed8184598fa22082c2ed80a43c1f9051f8757fc2d7ce9a37c1143e67c907d142e1a639c4830f8e7d3f1ed39a0f2e055cb39b587ee38acf2a"}, 0xd8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m27.808125729s ago: executing program 2 (id=3165): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5}}}}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2m27.646070726s ago: executing program 2 (id=3170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r1, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x44010) syz_emit_ethernet(0x66, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@dstopts={0x1, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m12.570688098s ago: executing program 33 (id=3170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r1, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x44010) syz_emit_ethernet(0x66, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@dstopts={0x1, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 6.065776205s ago: executing program 0 (id=5018): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5.974469345s ago: executing program 0 (id=5021): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) 1.972131209s ago: executing program 5 (id=5032): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x10, 0x2, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) close(0x4) close(r2) getsockopt$nfc_llcp(r0, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.96771615s ago: executing program 0 (id=5034): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000003080101000000000000000000000000050003000600000006000240000000002400048008000440000000000800054000000000040007"], 0x48}}, 0x0) 1.804944377s ago: executing program 5 (id=5036): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x11, 0x484, 0x0, &(0x7f0000000040)) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async) read$nci(r0, 0x0, 0x0) (async) write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x5, @f_listen={0xe, 0x2, 0x4, 0x82, 0x9, 0x2, 0x8, {}, 0x3, 0xa, 0x7, 0x5, 0x35, "03a4ec9ed50555ccd451bc6d80769bff6ab24945951d98db6e049e7b9c828962354e4d888beaf65c34603d5e37f9a8896f1198066f"}}, 0x45) 1.709680468s ago: executing program 0 (id=5039): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=0x0], 0x50) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async, rerun: 64) bind$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x75}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.552671683s ago: executing program 0 (id=5042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x180c, 0x2c, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xf, 0xfff3}, {}, {0x8, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @filter_kind_options=@f_fw={{0x7}, {0x54c, 0x2, [@TCA_FW_POLICE={0x9c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2fa2d47e}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x7, 0x2, 0x8, {0xff, 0x0, 0x8d3, 0x1, 0xffff, 0x4}, {0x5, 0x1, 0xe124, 0x31c, 0x4, 0x10000}, 0xfffffffe, 0x4, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x292b, 0x2, 0x5, 0x2, 0x8, {0x8, 0x1, 0x1, 0x3, 0xb, 0x5}, {0x8, 0x1, 0x3, 0x1ff, 0x7, 0x1}, 0x7, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x3}}, @TCA_FW_MASK={0x8, 0x5, 0xf8}, @TCA_FW_POLICE={0x94, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x10001, 0x7, 0x80, {0x2, 0x1, 0xfff2, 0x3, 0x1, 0x5ddbb9ec}, {0x8, 0x2, 0x6, 0x3, 0xffff, 0x400}, 0x8, 0x9, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x7, 0x3, 0x1, 0x7, {0x5, 0x1, 0x6, 0xffff, 0x7, 0x7}, {0x8e, 0x1, 0x25c, 0xe7, 0x7, 0x3}, 0xc4, 0x7fff, 0x3}}]}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x6, 0x81, 0xc00000, 0x8, 0x3, 0x7fff, 0x40, 0x800, 0x6, 0x5, 0x2, 0x3, 0x4, 0x2, 0x9, 0x3, 0x3, 0x9, 0x4, 0x4e, 0x1, 0x7, 0x1, 0xb78c, 0x5, 0xe8f0, 0xb133, 0x4, 0x7e971091, 0x10, 0x82b6, 0xfffffff7, 0x755, 0xe5, 0x7f, 0x10000, 0x80000001, 0x8, 0x1, 0x8, 0xfffffffa, 0x2, 0x9, 0x9, 0x9, 0x3ff, 0x6, 0x9, 0xa65, 0x8, 0x7fffffff, 0xfffffffe, 0x7fff, 0x7, 0x3, 0x5, 0x6, 0xf77, 0x80, 0x6dd46d42, 0x2, 0x5, 0x9, 0x7, 0x81, 0x9, 0xfff, 0x3, 0x5, 0x7fff, 0x45, 0x8, 0x3, 0xfffffffa, 0x400, 0x8, 0x1, 0x1, 0xe50d, 0xbf2, 0x7, 0x6, 0x7, 0x2, 0x3c, 0x3, 0x1, 0x3, 0x200, 0x432, 0xfffffff8, 0xf0e, 0x1d20, 0x3, 0x3, 0x3, 0x1, 0x5, 0x5, 0x80000000, 0x1, 0x10, 0xff, 0x0, 0x80000000, 0xdf45, 0x1, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3d63, 0x72, 0x101, 0x1a, 0xfe2, 0x80000000, 0x1, 0x699, 0xfffffffb, 0x8, 0x7, 0x5, 0x4, 0x8, 0x3, 0xfffffffe, 0xf78, 0x5, 0x7ff, 0x100, 0x2, 0x2, 0x8, 0x3, 0x9, 0x4, 0x80000000, 0x5, 0x4, 0x5, 0x459, 0xb, 0x9, 0x8, 0x101, 0x8000, 0x7, 0x22, 0x856, 0x22b, 0x3, 0x3000000, 0x10000, 0x6, 0x2, 0x10000, 0xe8, 0xfffffffa, 0x1, 0x1e, 0x7, 0x9, 0x200, 0x9, 0x52c80000, 0x7, 0x0, 0x0, 0x1, 0x6a, 0x0, 0x0, 0x7, 0x0, 0x380000, 0x80000000, 0xd, 0xca2940c, 0x1, 0x1c3e80, 0x7, 0xfffffffc, 0xfffffffd, 0x3, 0xffffff98, 0x9, 0x6, 0x5, 0x6, 0x80, 0x8, 0x5, 0xe927, 0x5, 0x10000, 0xf, 0x1, 0x401, 0x4, 0x0, 0x0, 0x0, 0x58a, 0x2, 0x79, 0x9, 0x3ff, 0x2, 0x4, 0x7e, 0x25ad, 0x9, 0x5, 0x400, 0x61, 0x7, 0x175, 0x4, 0xca, 0x81, 0x101, 0x7fffffff, 0x6, 0x70, 0xce6, 0x9, 0x9, 0x0, 0x9, 0x2, 0x10, 0xe92, 0x2, 0x0, 0xfffffffe, 0xa, 0x8000, 0x7, 0x0, 0x5, 0x80, 0x196, 0x7, 0x9, 0x1, 0x9, 0x3, 0x7, 0x400, 0x8, 0xa371, 0x1]}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @filter_kind_options=@f_basic={{0xa}, {0x1a0, 0x2, [@TCA_BASIC_EMATCHES={0x194, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x9}, "4574225425414a6cbf69960cb7318f0914280b6b2710fe277f356ecea07ff38a9473d1f225a2f2b0161023f69fdd2104bdf61fbb2bff582ddc4f970206d6f5d3d6bde3bf3bd93d087351007516033f3d4ffa6541cad0d0509cd44cc5dc0cd666c6069f2c30c7299125ec4ba931e44a0ba3caf79870952d04437497f9524befc614f03dfae8dd"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xc, 0x7, 0x4}, {{0x3, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_META={0x88, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="2a9c5749", @TCF_META_TYPE_VAR='B']}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f2c3143c63", @TCF_META_TYPE_VAR="9d9ba23c667eb0536148", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9}, {0x747b, 0xfd, 0x2}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4, 0x1}, {0xe, 0x9, 0x2}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="09e3344e69c159"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9}, {0x1, 0x2, 0x158b000fae9fdcd2}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x9}, {0x101, 0xa3, 0x4, 0x0, 0xe, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0xa}, {0x200, 0x7, 0x1, "461e88b8799397"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0xa620}, {{0x2, 0x0, 0x1}, {0x2}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @filter_kind_options=@f_u32={{0x8}, {0x10b8, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_CLASSID={0x8, 0x1, {0xfffe, 0x8c9d726344c47ca}}, @TCA_U32_CLASSID={0x8, 0x1, {0xf, 0x7}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xe7}, @TCA_U32_POLICE={0x107c, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0x4, 0x2d, 0x2, 0x9, 0x9f3, 0x9e1, 0x0, 0x9e, 0x101, 0x0, 0x400, 0x8, 0x401, 0x5, 0x4, 0xffff, 0x9, 0x3, 0x4, 0x7fff, 0xd, 0x5, 0x9b9, 0x6, 0x80000001, 0x8, 0x8, 0x10, 0x448, 0x7, 0x8, 0x1ff, 0xfd, 0x4, 0x7e9, 0x5f07, 0x5, 0x1, 0x23, 0x7, 0x7, 0xc8, 0x7, 0xffffff91, 0x6, 0x5, 0x5, 0x200, 0xbc2, 0x8001, 0x4, 0x3, 0x2, 0x1, 0x280, 0x4, 0x1593, 0xff, 0xfffffff8, 0xfffffff7, 0x4, 0xdd01, 0x4, 0xb, 0x7, 0x7fffffff, 0xa, 0x400, 0xffffffff, 0x7, 0x10, 0x4, 0xfa32, 0x1000, 0x1ff, 0x36, 0x422c, 0x5, 0x7f, 0x9, 0xf5, 0x9, 0xfffffb1a, 0x2, 0x2dc, 0xd, 0x8, 0xab8d, 0x5, 0x80000000, 0xa2, 0x6, 0x10, 0xb078, 0x9, 0x6, 0x5, 0x2000000, 0x5, 0x1, 0x4, 0x5f, 0x2, 0x80000001, 0x7fffffff, 0x0, 0x8, 0x4, 0x0, 0x2, 0x7ff, 0x7ff, 0x6, 0x5, 0x6, 0x8000, 0x3, 0x0, 0x4a0, 0xc, 0x80000000, 0xfffffffb, 0x9, 0x2, 0xc, 0x80000000, 0x8, 0xcc, 0xc, 0x8, 0x3, 0x3, 0x3, 0x0, 0x6, 0xfffffff7, 0x8, 0x1, 0x7, 0x83, 0x63d, 0x12c, 0x4, 0x6, 0x8, 0xe9, 0x8, 0x7, 0xe, 0x0, 0x58e850ed, 0xfffffbff, 0x0, 0x1, 0x8, 0x7, 0x6, 0x0, 0x4, 0x4, 0x6, 0x4, 0x5, 0x2, 0x7, 0x5, 0x6, 0x1000, 0x1, 0x200, 0x74, 0x0, 0x200, 0xfffffffa, 0x3, 0xfffffc00, 0xb3, 0x8, 0xd, 0x6, 0xf, 0xc796, 0x3, 0x3, 0x4, 0xffffff10, 0x8d87, 0x1823, 0x81, 0x1, 0xe6, 0x200, 0x7fff, 0x3, 0x6, 0x3, 0x6, 0x10, 0x5, 0x7, 0xe0b3, 0x101, 0xd, 0x88, 0x9, 0x7, 0x1000, 0x8000, 0x2, 0x7fffffff, 0x5, 0x5, 0x100, 0x9, 0x4, 0x3, 0x7ff, 0x800, 0x10000, 0x6, 0x80000000, 0x5, 0xb, 0x5, 0x0, 0x4, 0x2, 0x7, 0x6, 0xe, 0x8001, 0x7, 0x30, 0x40, 0x400, 0x2061, 0x80000001, 0x8, 0x2e9, 0x723, 0x128, 0x8, 0xd73, 0xffff, 0x10001, 0xcf98, 0x1000, 0xff, 0x7ff, 0x7ff, 0x8, 0x8, 0x3, 0xb77, 0x800]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x4, 0x1, 0xb22, 0x7, {0x4, 0x2, 0x3, 0xf, 0x9, 0x4}, {0x4, 0x2, 0x6, 0xfffc, 0x8, 0x5}, 0x9, 0xd92, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x40, 0x1, 0x31, 0x1, 0x8, 0xfff, 0x5, 0x854, 0x4, 0x4, 0x10001, 0x8, 0x4, 0x2, 0x4, 0x7fff, 0x2, 0x1, 0x7350, 0x8, 0x1, 0x8, 0x5, 0x1, 0x5, 0xc, 0x800, 0x401, 0xf, 0x31d4bcce, 0x65e7, 0x400, 0x1, 0x1, 0x6, 0xfff, 0x8001, 0xd, 0x3, 0x3, 0x5, 0x3, 0x3, 0x4, 0x80, 0x1ff, 0x7fffffff, 0x7, 0x1, 0x1, 0xe3, 0x5, 0xa60, 0xca0, 0x4, 0xffffffff, 0x2, 0x4f, 0x1ff, 0x78ea211, 0x80, 0xd1d, 0x1, 0x7, 0x0, 0x3ff, 0x7, 0x6, 0x4, 0x4, 0xfffeffff, 0x6, 0x6, 0x9, 0x6, 0x5, 0x5, 0x10000, 0x7bf1, 0x4, 0xffffffff, 0x6c3, 0x2a, 0x2, 0x1, 0x3, 0x1, 0x5742, 0xb, 0x400, 0x3, 0x5, 0x4, 0x0, 0xfffffffc, 0x7, 0x9c8, 0x0, 0x8, 0xe0000000, 0xb, 0xeb4e, 0x10, 0x3, 0x4, 0x7f, 0xc03c, 0x0, 0x8, 0x6, 0x1ff, 0x0, 0xfffffffc, 0x4a, 0x4f0, 0x90, 0xb, 0x4, 0x8000, 0x0, 0x8c, 0x3, 0x1, 0xea, 0xffffffff, 0x1, 0x101, 0x7ff, 0xfffffffd, 0x3, 0x6, 0x400, 0x4, 0x8, 0x7, 0x2, 0xfffffff9, 0xfffffffd, 0x200, 0x8, 0xffffffff, 0xcc, 0x101, 0xffffffff, 0x0, 0x5, 0x5, 0x0, 0x10, 0x3ff, 0x80, 0x1, 0x7ff, 0x7, 0x3, 0x9, 0x2, 0x6f, 0x2, 0x6, 0xa, 0x4, 0x7, 0x5, 0x10000, 0x800, 0x9, 0x0, 0x7ff, 0x7, 0x3, 0x1d26000, 0x5f4, 0x7, 0x7, 0x10, 0x7, 0x5da, 0x1, 0x10001, 0x7, 0x8, 0x6, 0x0, 0x3, 0x5, 0x9, 0x7, 0x9, 0xc, 0x6, 0xfffffff8, 0xe6b, 0x40, 0x8001, 0x5953, 0xffffffd0, 0x4, 0x7, 0x2, 0x761c, 0x3, 0x8, 0x9, 0x200, 0x3, 0x7f, 0x24b54c41, 0x8, 0x4, 0x3, 0x411, 0x1cea, 0xfe, 0x780, 0xff, 0xffffffff, 0x5, 0xe, 0x0, 0x6, 0xade7, 0x4df6, 0x9, 0x1000, 0x5, 0x9, 0x7, 0x7, 0x6, 0xfffffffb, 0x8, 0x1, 0x200, 0x9, 0x5, 0xa0, 0x5, 0xed62, 0x1, 0x0, 0xfffffffe, 0x5, 0x69e3315d, 0x5, 0x8, 0xfff, 0x8, 0x3, 0xfffff800, 0x81, 0x3ff, 0x5, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xc670, 0xd4f, 0x8001, 0x6, 0xc10d, 0xfffff173, 0x18fe6f76, 0xc4000000, 0x5, 0x80, 0x10000000, 0x7, 0x8, 0x9, 0x9, 0x5, 0x8000, 0x5, 0x0, 0x2a, 0x100, 0x5, 0xa, 0x400, 0xcfe2, 0x9fe, 0x2, 0x204, 0x8001, 0x9, 0x9, 0xc, 0x80000001, 0x2, 0x7, 0x7, 0x1, 0xa, 0xfe, 0x40, 0x60ea, 0x20000, 0xf, 0xb, 0x3, 0x7f, 0xfffffffc, 0x8, 0x94, 0x6, 0x3, 0x100, 0xc4, 0x3, 0xb, 0x8, 0x9, 0x6, 0x2, 0x7, 0x7, 0xdf, 0x5, 0x7, 0x5, 0xc, 0xfffffff2, 0x9, 0x3ff, 0x7, 0xa2, 0xfffffffd, 0xfffffff9, 0x7, 0x4, 0x4, 0x3, 0xffff, 0x7ff, 0xa, 0x3, 0xe7ea, 0xaa17, 0x8, 0x7, 0x8, 0x0, 0x1, 0x4, 0xff, 0xff, 0x2, 0x5, 0x7, 0x4ce7, 0xda8, 0x2, 0x4, 0x1, 0x8, 0x1, 0x6, 0x101, 0x5, 0x0, 0x2, 0x10, 0x3, 0x0, 0x81, 0x8001, 0x7f, 0x7, 0x8001, 0x7, 0xffffff4a, 0x6, 0x8, 0x7ff, 0xb, 0xd, 0x9, 0xbe, 0x100000, 0xfffffffa, 0x4, 0x8, 0x8, 0x8, 0x80, 0x7, 0x14, 0x5, 0x1be, 0x2, 0xae3f, 0xff, 0x6072, 0x8, 0xf, 0x0, 0x8, 0x400, 0xff, 0xfffffff8, 0x0, 0x4, 0xb, 0x3, 0x9, 0xfffffffa, 0x7, 0x1, 0x48ee, 0x5, 0x7f, 0xffff, 0x8000, 0x5, 0x5, 0x0, 0x2, 0x5, 0x20000, 0x0, 0x341, 0x2, 0x1000, 0x8, 0x4, 0x1, 0x1, 0x9, 0x2, 0x4, 0xf1, 0xd, 0x7fff, 0x9, 0x1, 0x80000000, 0xfff, 0x5, 0x9ee, 0x7, 0xb7, 0x3, 0xfffc0000, 0x9, 0x380, 0x1, 0x6, 0x9, 0x4, 0x2, 0xb0, 0xd5, 0xfffffe01, 0x4, 0x800, 0x3c96dfce, 0x2, 0x8, 0x1, 0x5, 0x0, 0x80000001, 0xf, 0x2, 0x0, 0x1, 0x1, 0x543, 0x8000, 0x5, 0x2, 0x101, 0x3, 0xf7f9, 0x8, 0x5, 0x60, 0x81, 0xd, 0x2, 0xfff, 0x5, 0x6, 0x1, 0x401, 0x9, 0xffffffff, 0x515, 0x1, 0x5, 0x7f, 0x5, 0xbc, 0x3, 0x7fffffff, 0xee, 0x2, 0x6, 0x6, 0x7, 0x2, 0x6, 0x1c0, 0x8, 0x5, 0x2fd, 0xab, 0x7, 0x6, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x1, 0x4, 0x9, 0x3, 0x5, 0x1, 0x8, 0x7, 0x0, 0x5, 0x333, 0x320, 0x3, 0x0, 0xf4, 0xfff, 0x49, 0x400, 0x8, 0x7ff, 0x78ec, 0xfffffeff, 0xe9, 0x139, 0x2, 0x200, 0x9, 0xa3b, 0xffff, 0x8, 0x7, 0xffff8001, 0x5, 0x0, 0xfffffffd, 0x0, 0x4, 0xffffff36, 0xf738, 0x9, 0x8, 0x9, 0x7, 0x7, 0xffff, 0x98, 0x5, 0xb2, 0x3, 0x2, 0xa5, 0x562e618a, 0x1, 0x5, 0x7f1, 0x1, 0x17ed, 0x200, 0x4, 0x9, 0x3, 0x6, 0x4, 0x1, 0x4, 0x2, 0x7fffffff, 0x2, 0x4, 0xf, 0x6, 0x6, 0x10000, 0x7, 0x80000000, 0x3, 0x8000, 0x8, 0x8000, 0xd369, 0x3, 0x1, 0x9b, 0x400, 0xe2, 0x3, 0xfffff264, 0x6, 0x2, 0x10, 0x97, 0x10001, 0x8, 0x0, 0x9ad2, 0x9, 0x0, 0xffffffff, 0xffff, 0x7, 0x7fffffff, 0x5, 0x9, 0x3, 0x1, 0x4b3, 0x1, 0x5, 0x0, 0x4, 0x0, 0x7, 0x7, 0x6, 0x0, 0x8000, 0x80000000, 0x3, 0x5, 0xffffffff, 0x0, 0x6, 0xa, 0x4, 0x9, 0x7, 0xfffff6ff, 0xffffffd2, 0x7, 0x0, 0xea8, 0x3, 0x3, 0x2, 0x8000, 0x6, 0x100, 0x5, 0x7f, 0x6, 0x584e1ed, 0x4, 0x8, 0x100, 0x0, 0x2, 0x800, 0x3ef, 0xa, 0xdcf, 0x4aeae3f2, 0x6, 0x81, 0x6c, 0xf4, 0x5, 0x0, 0x1, 0x7, 0x3ff, 0x61f1, 0xffffffff, 0x6, 0xe, 0x6, 0x4, 0x10, 0xa3ea, 0x8, 0xffffffff, 0x8, 0xffffffff, 0x6f2a, 0x0, 0x7fffffff, 0x1, 0xd37, 0x3, 0x37c, 0x5, 0x100, 0x8, 0x18000000, 0x0, 0x3e6a, 0x80000001, 0x10001, 0x8001, 0x1, 0x4, 0x1000, 0x5, 0x160, 0x2, 0x10000, 0x4, 0x6, 0x3, 0x80000001, 0x4, 0x5ac6, 0x80, 0xff, 0x6, 0x6, 0xc278, 0x7f, 0x4, 0x8052, 0x4, 0x5, 0x10001, 0x7, 0x59d, 0x3, 0x7, 0x6, 0x10001, 0x7, 0xfffffffb, 0x80, 0x81, 0x1, 0x800, 0x3, 0x7, 0x7, 0xc7e861e9, 0x0, 0x3060, 0x401, 0x8001, 0x10000, 0x8, 0x8, 0x7, 0x9, 0x3, 0x1, 0x8, 0x8, 0x4, 0x7fffffff, 0x8001, 0x4, 0x3, 0x401, 0x1, 0x9, 0xc8, 0x13, 0x5, 0x200]}]}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0xb04}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}]}, 0x180c}}, 0x80) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000) ioctl$FITHAW(r7, 0xc0045878) 1.552121743s ago: executing program 1 (id=5043): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) syz_open_procfs$namespace(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x10}}], 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140004800802e8400000000408000140000000050b00070066696c746572"], 0xe8}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001800)={{0x0, 0x57000000000000, 0x10001, 0x7, 0xa4, 0x800, 0xff, 0x7, 0x4, 0x10000, 0x101, 0x0, 0x8000, 0xfffffffffffffffc, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x13, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, [@ldst={0x3, 0x3, 0x3, 0xb, 0x9, 0x1, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x12, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x2000000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) (async) syz_open_procfs$namespace(0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (async) socket$inet6(0xa, 0x802, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x10}}], 0x10}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140004800802e8400000000408000140000000050b00070066696c746572"], 0xe8}}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001800)={{0x0, 0x57000000000000, 0x10001, 0x7, 0xa4, 0x800, 0xff, 0x7, 0x4, 0x10000, 0x101, 0x0, 0x8000, 0xfffffffffffffffc, 0x9}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x13, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, [@ldst={0x3, 0x3, 0x3, 0xb, 0x9, 0x1, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x12, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) (async) 1.542147762s ago: executing program 5 (id=5044): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.289589575s ago: executing program 1 (id=5046): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x8800}}], 0x1, 0x0) r3 = accept(r0, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000122) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x0, 0xd07b, 0xfff, 0x9, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80400001, 0x79, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x9, 0x7b, 0x6, 0x100, 0x0, 0x5, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0x4, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xaa7a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x7ff, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0x7, 0x312, 0x4, 0x6, 0x10000, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0x0, 0x3, 0x5, 0x203, 0x2, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x9, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf2, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0x40b9c, 0xe0, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x10000, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x104, 0x400, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x1, 0x9, 0x3, 0xd, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006911750000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdea}, 0x90) 1.280262689s ago: executing program 5 (id=5048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbfb, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r0) 1.041831607s ago: executing program 5 (id=5050): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f0000000000)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$inet6(r1, 0x0, 0x0) accept(r0, 0x0, 0x0) 1.034339011s ago: executing program 1 (id=5051): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4f) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) 939.201992ms ago: executing program 4 (id=5052): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x1, 0x5, 0x0) socket$kcm(0x10, 0x4, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 889.742001ms ago: executing program 6 (id=5053): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="4031d897d69ccf97937517c3e133f4aa3687442da541f04542f6d09948c4524971872f2dcb83ab5361623f966e2481a6aa4bce87adcf4ddf9253b335439c78a82fe7dfa2fd900ad110dd37c55c57320e3da406a5f064d6f739ab1f3865894f66bcfdf37fb0e6056af512e19f24c8b2e9d3a31318c77106dc26b1c32c7432100f9821915d6cc74ff274359a28f9581a71a05dc69c49db9237bc9d63fd16efa999ceafd60df259b02fe7f9eac7cfe544c3be07dc05f3ef681f83db62b02d3518d027001bb9c1bd7f923e16357176bdff180042628fa8a2e3444518595f80a292912bc9e76625d645"], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x13, 0x0, &(0x7f00000001c0)) 846.131498ms ago: executing program 1 (id=5054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x483f, 0x200, 0x8, 0xfae5, 0x9, 0x9, 0x9, 0x43, 0x3, 0x1, 0x9de, 0x8de, 0x8000, 0x54, 0x81, 0xd80, 0x9, 0x8, 0x6, 0x8, 0x6e20, 0x2, 0x6, 0x0, 0x3, 0x3, 0x1, 0xc, 0x9, 0x5, 0x100, 0x3, 0x801, 0xfffffff9, 0x9, 0x8, 0x2, 0x7fff, 0x60000, 0x0, 0x5104, 0x3, 0xcb1, 0x9, 0x80000001, 0x5, 0x7932, 0x7, 0x2, 0x8, 0x401, 0x5, 0x800, 0x6, 0x1, 0x3, 0x80000008, 0x0, 0xf8000000, 0x40, 0xaa1, 0x4, 0x3, 0x4a, 0x1, 0x9, 0x8, 0x2, 0x8, 0xf8, 0x6, 0x2, 0x7, 0x10001, 0x5, 0x800, 0x0, 0x7, 0x2, 0x2, 0x8, 0x389, 0x100, 0x6, 0xdc, 0x10001, 0xff, 0x5b, 0x7, 0x406, 0x10000, 0x0, 0x4, 0x40, 0x58d7, 0x6, 0x3, 0x49c4, 0x0, 0x9, 0xa4c, 0xfffffffc, 0x3, 0x88f, 0x7, 0xfffffdd1, 0x3, 0xc, 0x81, 0x3ff, 0x5, 0x0, 0x7, 0xfd2, 0x0, 0x9, 0x3, 0xf0, 0x7, 0x800, 0x80000001, 0xf383, 0x47db4311, 0x9, 0x3, 0x1ff, 0x2]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a80180004801400040006"], 0x38}}, 0x2400c090) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x4) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) sendmsg$inet(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24000041) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6016044000140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00f54e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20000def5ec0ea6d7257ed6877be559e16bce8049b023ce61ab12b98b58e5c7"], 0x0) 800.411065ms ago: executing program 6 (id=5055): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000240)=[{0x200, 0x8, 0x6, {0x6, 0x6}, 0x7, 0x0, 0x4}, {0x3, 0x69d, 0xffffffffffffff80, {0x8000, 0x40}, 0x7fffffff, 0x4, 0x2}, {0x8, 0xf, 0x7, {0x3, 0x5}, 0x1ff, 0x80000000, 0x80000000}, {0x6, 0x0, 0x3, {0x7, 0x6}, 0x2, 0x7, 0x757e}, {0xfffffffffffffff2, 0x80, 0x3, {0xd, 0x1}, 0x0, 0x3, 0x4}, {0x5, 0xfffffff000000000, 0x10, {0xfffffffffffffffe, 0x7}, 0xfffffe0000000000, 0x6}, {0x5, 0x9, 0x101, {0xfff, 0x2}, 0x2, 0xb290, 0xc}, {0x0, 0x7, 0x76, {0x7, 0x93}, 0x314, 0x7, 0xe30}], 0x8, 0x40, 0x81, 0x9}, {&(0x7f0000000440)=[{0x0, 0xfb12}, {0x90, 0xe}], 0x2, 0x10, 0x3ff, 0x716d}, {&(0x7f0000000480)=[0x8, 0x94, 0x800000000, 0x15], 0x4, 0x8, 0xb0d3, 0x5}, {&(0x7f00000004c0)=[{0xd, 0x3, 0x3, 0x1, 0x2}, {0xdf, 0x9, 0x859, 0x4, 0x8000000}, {0x7, 0x80000001, 0x4, 0x76e5fe91, 0x800}, {0x1ff, 0x2, 0x800, 0x0, 0x4}, {0x8, 0x8000000000000000, 0x63, 0x5, 0x6}, {0x3, 0x1, 0x300, 0x10, 0x7f}, {0x1, 0x4, 0x6e8a, 0x8}], 0x7, 0x28, 0x1, 0x3}, {&(0x7f0000000600)=[0x7, 0xde, 0x91, 0xd3c5, 0x100000001, 0x2, 0x7f], 0x7, 0x8, 0x2, 0x1ff}}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x1a, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000500000000002066000000646c6c2518010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300008f7e000015000000060000001840000006000000000100000000000000000000000000003f93000000000000b5030000020000008500000076000000b700b801176186ce3c1a614a70c3dcac0000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="8a57e16189bb1e5d6fb3ef880e38db0d9753b1ac5aa2fe139c250d65b59b254ff59e85f0a2285b82a9e49f443625a5943c7e9a91df8754", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 713.6084ms ago: executing program 4 (id=5056): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x478, 0x1b0, 0x0, 0x1b0, 0x478, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], [0xc5a2f505a334aa82, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x800, 0xdd2, 0x401, 0x0, 0xb, 0x3a5f2568, 0xcc, 0x2]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'virt_wifi0\x00', 0x30, 0x3, 0x5, 0x1ff, 0x400, 0x2, {0xf666}, {0x4000000000000}}}]}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1412, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44040000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0x5}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 634.182112ms ago: executing program 6 (id=5057): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x418, 0x220, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="18b177f45cd4", @empty, @local, @rand_addr=0x64010101, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010102, 0xff, 0xffffff00, 0x8, 0xa, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x2, 0x24, 0x8, 0x62, 0x5, 0x5, 'vlan1\x00', 'wlan1\x00', {}, {}, 0x0, 0x82}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) syz_init_net_socket$ax25(0x3, 0x4, 0xcc) 534.352336ms ago: executing program 4 (id=5058): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000c40)=""/4096, 0x1000, 0x40000021, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10084}, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="140100003b00010000000000fbdbdf25030117800c00160006ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 453.123918ms ago: executing program 6 (id=5059): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) ioctl$int_in(r0, 0x5421, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000005050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x4000040) close(r0) 408.459963ms ago: executing program 1 (id=5060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3d0000001000f062edb46f4b3b79000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d0040000000"], 0x3c}}, 0x0) 353.135858ms ago: executing program 4 (id=5061): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x10, 0x3, 0x951, 0x5775, 0xa, 0x9, 0x52a, 0x346, 0x5}}) 281.748248ms ago: executing program 6 (id=5062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a003800", @ANYRES32=0x0, @ANYBLOB="00000000aaba5550cd0fba2fd4a431d1f5ccf4a812a58f9e7e34e8c576d309ccd820c4a40abfe0234636891f81812f983c6ca299b173c62d409148a319e6cc4e607735b9e0e04204f40a8a807fc1d11f3b0c0b0b55c2c9407b690eaeb5cb7d2d27a0abb4c39ab03389e3730a38d3a1ac9334f9d1a3a48a4d0bce96cd3f33e5024ded69634f78627ab7590cab311b0097c05af2e32e6d8c53e5f856b204acadbba41adb44f2943aa934b66c663e867e2744ebe2579e732342f2ac439ffe497c0392cf4c4e441054f11d427c6952cd8a"], 0x1c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}]}}]}, 0x44}}, 0x44094) 280.96583ms ago: executing program 0 (id=5063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x24048045) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8499}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x180000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x18850) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x4000010) r6 = socket$inet6(0xa, 0x4, 0x2) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r5, r7, 0x0, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x8, 0x1, 0x3, 0x4, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x72, 0x3, 0x9, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}, {@local, 0x7}]}, @ra={0x94, 0x4}]}}}}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0xe, &(0x7f0000000800)=@raw=[@generic={0xfc, 0x3, 0x2, 0x7, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x6, 0xb, 0x3, 0x2}], &(0x7f0000000880)='syzkaller\x00', 0x723, 0xb7, &(0x7f00000008c0)=""/183, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x6, 0x0, &(0x7f00000009c0)=[{0x0, 0x3, 0xe, 0xc}, {0x2, 0x4, 0x2, 0x7}, {0x1, 0x5, 0xe, 0x6}, {0x1, 0x1, 0x7, 0x1}, {0x4, 0x2, 0x9, 0x4}, {0x5, 0x3, 0x7, 0x5}], 0x10, 0x1}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3387, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0x16, &(0x7f0000000580)=@raw=[@ringbuf_query, @alu={0x7, 0x1, 0x3, 0x7, 0x0, 0x40, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @printk={@u}, @ldst={0x1, 0x3, 0x3, 0x6, 0x0, 0x2, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], &(0x7f0000000640)='GPL\x00', 0x12, 0x2b, &(0x7f0000000680)=""/43, 0x0, 0x20, '\x00', r9, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xa, 0x4, 0x3}, 0x10, 0x0, r10, 0x8, &(0x7f0000000c80)=[r11, 0xffffffffffffffff, r12, r13, 0x1, r14, 0x1], &(0x7f0000000cc0)=[{0x4, 0x3, 0x6, 0x6}, {0x3, 0x4, 0x8, 0xa}, {0x2, 0x5, 0x7, 0xa}, {0x4, 0x3, 0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3, 0x9, 0x9}, {0x5, 0x1, 0xa, 0x3}, {0x2, 0x2, 0x2, 0xa}]}, 0x94) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x11, &(0x7f0000000e00)=0x4, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000e40)={0x8}, 0x8) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f0000000e80), 0x4) pipe(&(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SET_TUNSRC(r16, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008841}, 0x8000) socket$netlink(0x10, 0x3, 0xa) syz_emit_ethernet(0xac, &(0x7f0000001000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0x1c, "7ea0d55ab2c1276a7de1e1167157801040ed004cba4ffdd9c2dd8738767e6a3346deb061da228ae286ebb84932372dd7ef8d2c815047b191c2e4921bae8d2951c311f0735abb7b8d6038d66aa89712a9884d18acc8dc72192346b083698ab7702e448599a471176ae490e19d1d3612d0a0766fc26d31b066101528c3364ad99d4a5bed831595fba0073a218e45efa1fd4eb42d00ffc464b18279"}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000010c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001100)={'tunl0\x00'}) 247.276969ms ago: executing program 1 (id=5064): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/268], 0x10c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xfff) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x55, 0x6}, 0xc) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000000400)=""/30, &(0x7f0000000500)=0x1e) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f00000006c0)=0x6, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="875692b2071cf4ff06a58ae1e3d03cb819d609108067ba3f7932655185fb4bb739c0e9bca02878e040ea7738846dd98a9f99d6011f32908ea9184c99038d8b84234dc10557cfac4a66b58fc24b289235fd16ec127770020c78b83e2848a869a87c9cc5556c02b1aa2a12457e5cba388d1f8c1a3997720c05ca3f9fe8d00355d51751cdd50065", 0x86}, {&(0x7f0000000100)="e35aa3d6076a42928928fd9e67877ae2780ac35f6e1d9e279cecbe3db83e9dad576f5a371e8a43a3f0320684ec7fbfab2c5714e838af13e20bb7f5478a61c6d00e521ed186b65f68178692de220f084262d54d693158980b", 0x58}, {&(0x7f0000000700)="a70f67600e84d36e1fef054310f7b38f552a869808b3112f99821c0ae0a7f031ab996ff3bb6ac2862c4fbb9e9527835439299776cfb32970b29f58358d6376a1930f0d709da1bc499313e8774798862dc60c0bde9b510b2fe73accc723149588ed75b560f226c6e3267ed10d391170d53ba36b6949ddf6a490f833d25206c7e16b978d903437b696103b389b7cb0c0e1e083337506cc9858", 0x98}, {&(0x7f0000000380)="3cbda25c60a04ce5438394a7bf7ebe20f8efcdfd13a28376979eab35cd1aaaff60eb467b06b63d4cab056e8591d170736a3cba8613e7b71a3045fccb3b8ac53ee7f1913c4b1b", 0x46}, {&(0x7f0000000440)="bd6f92af78f3447bcd7a66f8745f2cd9e43f1793e36209c16cc7339cfb79caa364beb627eccaa186ab9d34108b9b8391ad92a780b26de9", 0x37}, {&(0x7f00000004c0)="597dc2305dabef6d00db6a36e76a643dfcaf99610eb369a95f5418c9f8858998116f36a5ce", 0x25}], 0x6}}], 0x1, 0x4000000) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002740)=[{{&(0x7f0000000180)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001dc0)=[{&(0x7f00000007c0)="6923cdefb8b90891c4032a32f118855fbdc6441838ce184fd72c4e35b5c00f6d9d059faf17add5521e739ec458f73f336c63c35a80f87c4a57cb66ff69ae64e4292bd46945ee67c14f2b209950031f285ccbe61777022ea8911fdd2e2169ea7c79a091a6818caebc3a889686cb93a0588bddd3f67809ba0cb3c63771596ed8f28e3906df", 0x84}, {&(0x7f0000000880)="5f1bb2a442f752e6dad3405f0e181f7c64f09ea77b139e3c384490758a34c88b5a89d91e2ca2fdb81f6db9e2c346a4a1850f8d", 0x33}, {&(0x7f00000008c0)="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", 0xfe}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="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", 0xff}, {&(0x7f0000001d00)="d8125e4954d7e392aeb50b4c7062f7d57a2d9b3444885cd19cacc855620c1a40454d261f76afed6711158b33bde22656d2217ae610d93b7657470f15ec77f9b9f4323741db5773b4f513dd7624a08585e1c64480d433f8b00199f61fa05e47bb2b63a21c10be0b7637189c4fcb8e7222df4100ce9755c5fb70efebf3123222ef62e4d42fe676ecd90dc2d09621618b8b2b4c9733798da27323cc4f4c5beb56f2452c52", 0xa3}], 0x6}}, {{&(0x7f0000001e40)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000001e80)="3278db67f5a63154e89dd8c8a46d085ed8e37e86fe50eb8f0bd21d1999ebb8e213bee16514e284f8e8aa049a7349db58533e306dcec6e3b32dfa1942125b48ce00a19104c7d40979ff6d92141129946435f3790fca45568cf5b117494bd8314b2d89108ca684d2", 0x67}, {&(0x7f0000001f00)="01c1530b4d121bf9327373ac33acbc43789b4e2c467dcf742b030053ada237853b189ba2481d90e918afad1b9ba6dfe60add303dbf5243cc634eaffffa5695b67678a90bb5e4403239610355691b4d9c1dadd6de11a65e019d6e89f11de86492c99fb152c6f0267984e9d7b138ce6b370bc8af5fc1eac241ca5ffa6201078a9b6d6a029c9d6c4b42614dcbcab4adebf88de4106eb75116e468eb3d5f0b625204eb243e96996501cd3cb64704f51ddef251bd21a5b9c362915ce71c0b214b11ad3922d2ac4bef0c355f9f5cc3e796b71fbcaf701f3fbd293d4a140a5224d29e6b0c94123fa5537bfb4904e9aab06ee2a6dc41bc085f4e9928", 0xf8}, {&(0x7f0000002000)="a4290c47cfa66307fdbdcad65a07d2c593177c5ca0348fbac9b61be6150286c5c0cd888d4e9eabb5c8d481b5ea0a48b83e595a78134e2df0efbf6c0a38f61e1aefe55bdd14232f81094f1d9c97a447e15eb405a206186e4d2439511985ba9633a0013171b0a937ee1c2c37c6d4b18ad59a07a91b2275f0f5837440d63753c0602ff847e457af0582a392f82c9d983d14f075de7eaf3bf3efe462e1ec1f7559fecd64aacc8c56d59f3cd25a6d27a273627478a7b21e935d461dd89a34982202b2b8f4e011f12474ac83898ef3490749c029cdf2e1320ec5adfdf9e32285c20212808f36e2120b13a1b54c91d5d3154032675e371938e990222ca7d7", 0xfb}, {&(0x7f0000002100)="3fab1aff990cbb6f80aec566373218af970fe73435df65e93f4ec0dfd189b7c01cb4498cff26613ba8d8952109591682d04da974fb83a791b007fd96d52346eed21cc1b859c80b2760568454f55f8447c063717bdb0df45e6f08b2547da6ad244acc", 0x62}, {&(0x7f0000002180)="fea4c76c799b36554a4cf82e42664dbe75e94cf7643499fbabf1d8b2de823d3e2e573a10933ea0042aefe701dbfbd5d82eef", 0x32}], 0x5, &(0x7f0000002240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{&(0x7f0000002280)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002400)=[{&(0x7f00000022c0)="46ea392db3b1e2305c0b952c657f5cdd397cbd44b00d0dfe14b982fab3ea865f181cb9d3d36e6d4bcfbda902abc231588d4f9d11624a6a442583d38eccc62d7b2f6ff61c82590763753dbe529f3dcab03c045c2727bb92a8a4070da943a038de8b5d7990266889c9c98effcba2313245e21887bbec9aafec06e8561ddf9cdf431fe311abc817524a47a42a8c23727b12668f3ca3f0ac5012d06c4ad87dcc309a00a44de368b6d2ee1df84342658c7ec3aab3", 0xb2}, {&(0x7f0000002380)="c67d2ad8ae7fe9dde33040d23334823530b61c6a4cd2bdef0fefda0d139501c039b64ee5b63990f037ddb6517d842bff53abaa3d200d01f0c156b2ec511fb6e9925f936c6ad7cda7f115e911ad62750838f5e228cebcb41ab19a5a62ef212849e0e8a9050e966ac66c2878ff", 0x6c}], 0x2, &(0x7f0000002440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @private=0x34}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1f, 0x6f, [@empty, @empty, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xb0, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast1, 0x2}, {@remote, 0x7}]}, @cipso={0x86, 0x13, 0x2, [{0x4, 0xd, "1c6932acf5f37d653d566f"}]}, @cipso={0x86, 0x2e, 0x0, [{0x5, 0x7, "5d2894f3a6"}, {0x0, 0x8, "343369e256a2"}, {0x4, 0xd, "0a72829ec39cff570ed995"}, {0x6, 0x3, "c2"}, {0x1, 0x9, "2f84e071736c9c"}]}, @rr={0x7, 0x23, 0xbd, [@multicast2, @multicast1, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}], 0xd0}}, {{&(0x7f0000002540)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002580)="a6657d6e3b2d29d6b038cd3a2d35a42fad4131be68407de4158d3b45e3b8e541b3f8473b851080204416a024f51ef98c1313b052fe6a7fc3c1bdaae89798668983a69481fcc53abbd3838226c8b26315013f7f2329a2554557b730cce902314d46780c68781e65ddaf849abe32e699a777481a6240282376dcf0962c5bf19bcf004b633298b793059832855cdfa476af4fdf41d6389def39b6aad013ad023ab3b9a3246aa281b45d7a4093e2757102be41b4485069de46dfad0621834391490f5c45908242660472c746fef12f4717ffb02deee669e7b5c07b9286b1cbf746c25b4f0cc75cf88c01deec0f09", 0xec}, {&(0x7f0000002680)="d8b1a7bf1331c14ad36eb1accbbafcd45465bf529d136697e11f591734b171b27aa2", 0x22}], 0x2, &(0x7f0000002700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}], 0x4, 0x1) sendto$inet(r8, &(0x7f0000000b00)="e8", 0x1, 0x61, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xf3, @null, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xe, 0xffff}, {0xe}}}, 0x24}}, 0x0) 221.384381ms ago: executing program 4 (id=5065): r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x5}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r9) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 65.200583ms ago: executing program 6 (id=5066): r0 = socket(0x15, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="80"], 0x30}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 64.067215ms ago: executing program 5 (id=5067): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x4, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) syz_open_procfs$namespace(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x10}}], 0x10}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140004800802e8400000000408000140000000050b00070066696c746572"], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x13, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, [@ldst={0x3, 0x3, 0x3, 0xb, 0x9, 0x1, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x12, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) 0s ago: executing program 4 (id=5068): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x88000, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x3]}, {0x2, 0x0, 0x6, 0x80}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x80}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(r3) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) kernel console output (not intermixed with test programs): tributes in process `syz.1.3136'. [ 439.659102][T17413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.681335][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3136'. [ 439.743722][ T8688] IPVS: stop unused estimator thread 0... [ 439.753716][T17087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.836394][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'. [ 439.848639][T17087] veth0_vlan: entered promiscuous mode [ 439.899864][T17087] veth1_vlan: entered promiscuous mode [ 439.975047][T17087] veth0_macvtap: entered promiscuous mode [ 440.024794][T17432] netlink: 'syz.1.3140': attribute type 8 has an invalid length. [ 440.033034][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.033138][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.048465][T17087] veth1_macvtap: entered promiscuous mode [ 440.102860][T17087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.142260][T17087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.175648][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.192531][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'. [ 440.203391][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.221848][T17440] gtp0: entered promiscuous mode [ 440.229479][T17440] gtp0: entered allmulticast mode [ 440.236182][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.256087][T17440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3143'. [ 440.274712][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.421081][ T8688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.450466][ T8688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.506040][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.527722][T17451] netlink: 'syz.2.3147': attribute type 142 has an invalid length. [ 440.529092][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.654328][T17454] veth5: entered promiscuous mode [ 440.666812][T17454] veth5: entered allmulticast mode [ 440.965893][T17475] netlink: 'syz.4.3156': attribute type 83 has an invalid length. [ 440.999368][T17479] netlink: 'syz.2.3157': attribute type 1 has an invalid length. [ 441.026854][T17480] netlink: 'syz.5.3155': attribute type 4 has an invalid length. [ 441.109605][T17488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.582608][T17519] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 441.815335][T17525] lo speed is unknown, defaulting to 1000 [ 441.829469][T17525] lo speed is unknown, defaulting to 1000 [ 441.852727][T17525] lo speed is unknown, defaulting to 1000 [ 441.876183][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.893407][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.903586][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.912320][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.923265][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.936280][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 441.944372][ C1] lec:lec_tx_timeout: lec0 [ 441.950062][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 441.978601][T17525] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 442.024220][T17526] wlan1 speed is unknown, defaulting to 1000 [ 442.069019][T17526] wg1 speed is unknown, defaulting to 1000 [ 442.091869][T17525] lo speed is unknown, defaulting to 1000 [ 442.187716][T17525] lo speed is unknown, defaulting to 1000 [ 442.224884][T17525] lo speed is unknown, defaulting to 1000 [ 442.254076][T17525] lo speed is unknown, defaulting to 1000 [ 442.290593][T17525] lo speed is unknown, defaulting to 1000 [ 442.312571][T17525] lo speed is unknown, defaulting to 1000 [ 442.332579][T17525] lo speed is unknown, defaulting to 1000 [ 442.355976][T17525] lo speed is unknown, defaulting to 1000 [ 442.390437][T17535] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 442.495359][T17539] netlink: 'syz.4.3178': attribute type 4 has an invalid length. [ 442.640794][T17526] chnl_net:caif_netlink_parms(): no params data found [ 442.776816][T17526] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.784293][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.792317][T17526] bridge_slave_0: entered allmulticast mode [ 442.801258][T17526] bridge_slave_0: entered promiscuous mode [ 442.810486][T17526] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.818540][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.826587][T17526] bridge_slave_1: entered allmulticast mode [ 442.834665][T17526] bridge_slave_1: entered promiscuous mode [ 442.876199][T17526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.958350][T17526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.011138][T17526] team0: Port device team_slave_0 added [ 443.028831][T17526] team0: Port device team_slave_1 added [ 443.130777][T17526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.145675][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.174260][T17526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.189350][T17526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.197342][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.234358][T17526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.283835][T17565] Cannot find del_set index 49151 as target [ 443.316420][T17572] hsr_slave_1 (unregistering): left promiscuous mode [ 443.394414][T17526] hsr_slave_0: entered promiscuous mode [ 443.404777][T17526] hsr_slave_1: entered promiscuous mode [ 443.413355][T17526] debugfs: 'hsr0' already exists in 'hsr' [ 443.421435][T17526] Cannot create hsr debugfs directory [ 443.553769][T17582] __nla_validate_parse: 10 callbacks suppressed [ 443.553791][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 443.584508][T17582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3189'. [ 443.632274][T17582] geneve2: entered promiscuous mode [ 443.637872][T17582] geneve2: entered allmulticast mode [ 443.664951][ T8696] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 443.676084][ T8696] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 443.726551][ T8696] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 443.745748][ T8696] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 443.836014][T17591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3193'. [ 443.873210][T17592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3193'. [ 443.886165][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3193'. [ 444.021176][ T5839] Bluetooth: hci0: command tx timeout [ 444.045297][T17526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.057784][T17526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.069312][T17526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 444.142834][T17604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.238632][T17526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.264127][T17526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.288510][T17526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 444.322007][T17611] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 444.329882][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 444.379290][T17609] syzkaller0: entered promiscuous mode [ 444.384811][T17609] syzkaller0: entered allmulticast mode [ 444.431347][T17526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.442693][T17526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.453912][T17526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.106860][ T5839] Bluetooth: hci0: command tx timeout [ 446.162439][T17526] batman_adv: batadv0: Removing interface: netdevsim0 [ 446.189197][T17526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.207069][T17526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.227376][T17526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.253740][T17619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.419247][T17632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3205'. [ 446.461803][T17633] netdevsim netdevsim4: Direct firmware load for so failed with error -2 [ 446.475149][T17632] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3205'. [ 446.497739][T17633] netdevsim netdevsim4: Falling back to sysfs fallback for: so [ 446.532996][T17632] gretap4: entered promiscuous mode [ 446.541671][T17632] gretap4: entered allmulticast mode [ 446.604982][T17526] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.646377][T17526] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.660574][T17526] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.690737][T17526] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.956576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 446.964843][ C1] lec:lec_tx_timeout: lec0 [ 446.969939][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.035465][T17526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.096035][T17526] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.129786][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.137019][ T8696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.166721][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.173931][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.274084][T17526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.440063][T17671] IPv6: sit2: Disabled Multicast RS [ 447.628359][T17677] h: entered promiscuous mode [ 447.737349][T17526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.898078][T17526] veth0_vlan: entered promiscuous mode [ 447.921976][T17526] veth1_vlan: entered promiscuous mode [ 448.000342][T17526] veth0_macvtap: entered promiscuous mode [ 448.034016][T17526] veth1_macvtap: entered promiscuous mode [ 448.052373][T17699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3225'. [ 448.070346][T17699] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.3225'. [ 448.090713][T17526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.114306][T17526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.154974][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.179456][ T5839] Bluetooth: hci0: command tx timeout [ 448.195136][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.205085][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.239675][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.303072][T17708] validate_nla: 5 callbacks suppressed [ 448.303096][T17708] netlink: 'syz.0.3227': attribute type 6 has an invalid length. [ 448.391139][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.409190][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.520809][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.532206][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.909042][T17735] netlink: 'syz.0.3236': attribute type 1 has an invalid length. [ 448.928633][T17735] __nla_validate_parse: 2 callbacks suppressed [ 448.928653][T17735] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3236'. [ 448.979511][T17735] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3236'. [ 449.030895][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3238'. [ 449.044147][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3238'. [ 449.092495][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 449.119331][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3238'. [ 449.183556][T17744] bond1: entered promiscuous mode [ 449.199846][T17744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.231236][T17753] netlink: 'syz.1.3242': attribute type 7 has an invalid length. [ 449.243064][T17756] netlink: 'syz.1.3242': attribute type 7 has an invalid length. [ 449.389684][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3243'. [ 449.424880][T17760] openvswitch: netlink: Flow actions attr not present in new flow. [ 449.437818][T17765] Cannot find add_set index 0 as target [ 449.502368][T17767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3246'. [ 449.606738][T17774] xt_policy: output policy not valid in PREROUTING and INPUT [ 449.633730][T17774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.658073][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 449.693984][T17774] : entered promiscuous mode [ 449.722965][T17781] xt_policy: output policy not valid in PREROUTING and INPUT [ 449.836844][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3254'. [ 450.013671][T17805] netlink: 'syz.1.3256': attribute type 4 has an invalid length. [ 450.051809][T17805] netlink: 'syz.1.3256': attribute type 4 has an invalid length. [ 450.258665][ T5839] Bluetooth: hci0: command tx timeout [ 450.352658][T17824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.372269][T17824] Bluetooth: MGMT ver 1.23 [ 450.645866][T17849] netlink: 'syz.5.3271': attribute type 178 has an invalid length. [ 450.817428][T17863] tipc: Enabling of bearer rejected, failed to enable media [ 450.848253][T17863] netlink: 'syz.1.3274': attribute type 7 has an invalid length. [ 450.862834][T17863] netlink: 'syz.1.3274': attribute type 8 has an invalid length. [ 451.571738][T17895] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 451.960344][T17921] netlink: 'syz.1.3291': attribute type 4 has an invalid length. [ 451.976552][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 451.984621][ C1] lec:lec_tx_timeout: lec0 [ 451.997235][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 452.049473][T17921] tipc: Started in network mode [ 452.054502][T17921] tipc: Node identity , cluster identity 4711 [ 452.061037][T17921] tipc: Failed to obtain node identity [ 452.070657][T17921] tipc: Enabling of bearer rejected, failed to enable media [ 452.112834][T17924] bond2 (unregistering): Released all slaves [ 452.379147][T17943] syzkaller1: entered promiscuous mode [ 452.396061][T17943] syzkaller1: entered allmulticast mode [ 452.798461][T17966] sctp: [Deprecated]: syz.1.3305 (pid 17966) Use of int in maxseg socket option. [ 452.798461][T17966] Use struct sctp_assoc_value instead [ 452.964110][T17975] xt_TPROXY: Can be used only with -p tcp or -p udp [ 452.979287][T17976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.260262][ T8687] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.280813][ T8687] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.301384][ T8687] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.323598][ T8687] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.866606][T18005] validate_nla: 6 callbacks suppressed [ 453.866625][T18005] netlink: 'syz.4.3320': attribute type 4 has an invalid length. [ 454.031916][T18019] __nla_validate_parse: 28 callbacks suppressed [ 454.031939][T18019] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3325'. [ 454.125544][T18022] bond1: Unable to set up delay as MII monitoring is disabled [ 454.145404][T18022] bond1 (unregistering): Released all slaves [ 454.198099][ T7335] IPVS: starting estimator thread 0... [ 454.287052][T18032] IPVS: using max 27 ests per chain, 64800 per kthread [ 454.314213][T18034] pimreg: entered allmulticast mode [ 454.560901][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3336'. [ 454.922293][T18068] netlink: 'syz.5.3342': attribute type 6 has an invalid length. [ 455.061550][T18073] block nbd0: Unsupported socket: should be TCP or UNIX. [ 455.600452][T18093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3352'. [ 455.864423][T18109] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3356'. [ 455.928441][T18111] xt_ecn: cannot match TCP bits for non-tcp packets [ 455.998520][T18113] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.3358'. [ 456.019032][T18113] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 456.036392][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 456.060600][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3360'. [ 456.096643][T18117] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3360'. [ 456.221735][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3362'. [ 456.243101][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3362'. [ 456.375156][T18133] netlink: 'syz.0.3364': attribute type 8 has an invalid length. [ 456.389580][T18133] sch_fq: defrate 0 ignored. [ 456.412182][T18133] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 456.764561][T18158] netlink: 'syz.4.3373': attribute type 10 has an invalid length. [ 456.792900][T18158] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 456.807652][T18162] netlink: 'syz.0.3372': attribute type 18 has an invalid length. [ 456.939905][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.949886][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.963370][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.971782][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.980407][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.006613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 457.014687][ C1] lec:lec_tx_timeout: lec0 [ 457.019846][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 457.061518][T18167] wlan1 speed is unknown, defaulting to 1000 [ 457.076635][T18167] wg1 speed is unknown, defaulting to 1000 [ 457.084298][T18167] lo speed is unknown, defaulting to 1000 [ 457.138977][T18172] netlink: 'syz.0.3376': attribute type 1 has an invalid length. [ 457.183224][T18172] netlink: 'syz.0.3376': attribute type 1 has an invalid length. [ 457.403473][T18167] chnl_net:caif_netlink_parms(): no params data found [ 457.483074][T18188] vlan2: entered allmulticast mode [ 457.488661][T18188] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 457.713000][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.720436][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.728456][T18167] bridge_slave_0: entered allmulticast mode [ 457.737610][T18167] bridge_slave_0: entered promiscuous mode [ 457.749050][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.758699][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.766172][T18167] bridge_slave_1: entered allmulticast mode [ 457.774438][T18167] bridge_slave_1: entered promiscuous mode [ 457.822555][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.835866][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.865325][T18204] sctp: Trying to GSO but underlying device doesn't support it. [ 457.890093][T18167] team0: Port device team_slave_0 added [ 457.908071][T18167] team0: Port device team_slave_1 added [ 457.950781][T18213] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 457.979755][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.986950][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.014362][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.029318][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.040496][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.087487][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.192012][T18221] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 458.262175][T18167] hsr_slave_0: entered promiscuous mode [ 458.270831][T18167] hsr_slave_1: entered promiscuous mode [ 458.280375][T18167] debugfs: 'hsr0' already exists in 'hsr' [ 458.286205][T18167] Cannot create hsr debugfs directory [ 458.377452][T18231] ip6t_rpfilter: unknown options [ 458.730638][T18247] openvswitch: netlink: IPv4 tun info is not correct [ 459.034516][T18260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.042240][T18260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.050942][T18260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.061921][ T5844] Bluetooth: hci3: command tx timeout [ 459.081216][T18262] __nla_validate_parse: 11 callbacks suppressed [ 459.081236][T18262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3401'. [ 459.083828][T18260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.212243][T18167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 459.251262][T18167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 459.265715][T18167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.282125][T18167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.505565][T18167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.559700][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.638310][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.645849][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.722053][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.729298][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.898400][T18302] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 459.925471][T18302] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.933289][T18302] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.955790][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3411'. [ 460.165327][T18321] netlink: 'syz.4.3414': attribute type 12 has an invalid length. [ 460.174630][T18321] netlink: 'syz.4.3414': attribute type 29 has an invalid length. [ 460.191558][T18321] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3414'. [ 460.202235][T18321] netlink: 'syz.4.3414': attribute type 2 has an invalid length. [ 460.214612][T18321] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3414'. [ 460.440907][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3419'. [ 460.472087][T18341] block nbd2: Unsupported socket: should be TCP or UNIX. [ 460.549334][T18167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.654326][T18352] xt_hashlimit: size too large, truncated to 1048576 [ 460.757097][T18361] netlink: 'syz.0.3424': attribute type 4 has an invalid length. [ 460.770987][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3424'. [ 460.849718][T18364] x_tables: unsorted entry at hook 3 [ 461.022758][T18373] tipc: Started in network mode [ 461.031947][T18373] tipc: Node identity ac14140f, cluster identity 4711 [ 461.043760][T18373] tipc: New replicast peer: 255.255.255.255 [ 461.051336][T18373] tipc: Enabled bearer , priority 10 [ 461.136642][ T5844] Bluetooth: hci3: command tx timeout [ 461.155800][T18376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3428'. [ 461.306057][T18388] netlink: 'syz.4.3432': attribute type 1 has an invalid length. [ 461.315332][T18388] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3432'. [ 461.404704][T18167] veth0_vlan: entered promiscuous mode [ 461.439690][T18167] veth1_vlan: entered promiscuous mode [ 461.458145][T18395] syzkaller0: entered promiscuous mode [ 461.473939][T18395] syzkaller0: entered allmulticast mode [ 461.480300][T18399] netlink: 'syz.4.3436': attribute type 1 has an invalid length. [ 461.488593][T18399] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3436'. [ 461.576625][T18167] veth0_macvtap: entered promiscuous mode [ 461.592215][T18167] veth1_macvtap: entered promiscuous mode [ 461.629870][T18167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.662786][T18167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.681146][ T8695] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.691023][ T8695] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.732483][ T8695] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.743516][ T8695] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.872594][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.883352][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.964415][ T8695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.982505][ T8695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.026874][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 462.035124][ C1] lec:lec_tx_timeout: lec0 [ 462.041040][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 462.062830][T18417] IPv6: sit1: Disabled Multicast RS [ 462.147463][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'. [ 462.166402][ T7338] tipc: Node number set to 2886997007 [ 462.488682][T18435] delete_channel: no stack [ 462.630679][T18437] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 462.650414][T18441] netlink: 'syz.6.3449': attribute type 8 has an invalid length. [ 462.684793][T18437] bond2 (unregistering): Released all slaves [ 462.850709][T18436] bond2 (unregistering): Released all slaves [ 463.159610][T18456] lo: entered allmulticast mode [ 463.178251][T18457] lo: left allmulticast mode [ 463.216879][ T5839] Bluetooth: hci3: command tx timeout [ 463.423069][ T30] audit: type=1107 audit(1775489575.657:5): pid=18470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='r_1G{f#%bx,+%'| rejected, failed to enable media [ 466.538968][T18638] netlink: 'syz.1.3498': attribute type 1 has an invalid length. [ 466.547506][T18637] netlink: 'syz.4.3496': attribute type 27 has an invalid length. [ 466.747228][T18646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.826687][T18646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.949790][T18660] tipc: Enabling of bearer rejected, media not registered [ 467.190614][T18670] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 467.322866][T18677] siw: device registration error -23 [ 467.856270][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 467.864401][ C1] lec:lec_tx_timeout: lec0 [ 467.870353][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 467.878920][T18707] netlink: 'syz.1.3513': attribute type 2 has an invalid length. [ 468.157445][T18723] netlink: 'syz.6.3522': attribute type 11 has an invalid length. [ 468.276657][T18730] netlink: 'syz.5.3524': attribute type 4 has an invalid length. [ 468.311007][T18731] syzkaller0: entered promiscuous mode [ 468.316777][T18731] syzkaller0: entered allmulticast mode [ 468.421071][T18736] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.429757][T18736] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.851593][T18764] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 468.891691][T18766] netlink: 'syz.6.3537': attribute type 29 has an invalid length. [ 469.338902][T18790] bond1: Removing last ns target with arp_interval on [ 469.609337][T18805] __nla_validate_parse: 20 callbacks suppressed [ 469.609362][T18805] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3545'. [ 469.720675][T18814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3551'. [ 469.741579][T18814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3551'. [ 469.821643][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b2cb000: rx timeout, send abort [ 469.882412][T18826] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 469.908809][T18826] bond2 (unregistering): Released all slaves [ 469.935221][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3555'. [ 470.003038][T18829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.014157][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3556'. [ 470.055667][T18829] vxcan3: entered promiscuous mode [ 470.102732][T18841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3558'. [ 470.317607][ T7332] IPVS: starting estimator thread 0... [ 470.323182][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b2cb400: rx timeout, send abort [ 470.331479][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b2cb000: abort rx timeout. Force session deactivation [ 470.496506][T18855] IPVS: using max 27 ests per chain, 64800 per kthread [ 470.648458][T18868] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 470.749564][T18877] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 470.761304][T18871] netlink: 'syz.0.3567': attribute type 3 has an invalid length. [ 470.783023][T18871] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3567'. [ 470.823237][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b2cb400: abort rx timeout. Force session deactivation [ 470.923119][T18877] bond2: entered promiscuous mode [ 470.929525][T18877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.985105][T18873] netlink: 'syz.1.3569': attribute type 7 has an invalid length. [ 471.078132][ T49] bond0: (slave bond_slave_0): interface is now down [ 471.087822][T18891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.099390][ T49] bond0: (slave bond_slave_1): interface is now down [ 471.116500][ T49] bond0: (slave bridge_slave_1): interface is now down [ 471.144761][ T49] bond0: now running without any active interface! [ 471.187439][T18891] netlink: 'syz.5.3573': attribute type 58 has an invalid length. [ 471.222567][T18891] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3573'. [ 471.252866][T18905] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3576'. [ 471.941551][T18933] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3583'. [ 471.962039][T18930] wlan1 speed is unknown, defaulting to 1000 [ 471.971225][T18930] wg1 speed is unknown, defaulting to 1000 [ 471.988289][T18930] lo speed is unknown, defaulting to 1000 [ 472.108492][T18938] netlink: 'syz.6.3585': attribute type 1 has an invalid length. [ 472.191456][T18938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.237942][T18941] bond2: (slave geneve2): making interface the new active one [ 472.251489][T18941] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 472.285460][T18942] syzkaller0: entered promiscuous mode [ 472.312393][T18942] syzkaller0: entered allmulticast mode [ 472.625425][T18951] wlan1 speed is unknown, defaulting to 1000 [ 472.667527][T18951] wg1 speed is unknown, defaulting to 1000 [ 472.752996][T18951] lo speed is unknown, defaulting to 1000 [ 472.809101][T18967] netlink: 'syz.1.3592': attribute type 12 has an invalid length. [ 472.819742][T18976] sctp: [Deprecated]: syz.0.3595 (pid 18976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.819742][T18976] Use struct sctp_sack_info instead [ 472.836534][T18967] netlink: 'syz.1.3592': attribute type 29 has an invalid length. [ 472.861387][T18976] ieee802154 phy0 wpan0: encryption failed: -22 [ 472.886537][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 472.894642][ C1] lec:lec_tx_timeout: lec0 [ 472.900404][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 473.418001][T19004] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.534222][T19015] netlink: 'syz.4.3602': attribute type 9 has an invalid length. [ 473.548313][T19019] syz_tun: entered allmulticast mode [ 473.586611][T19015] netlink: 'syz.4.3602': attribute type 6 has an invalid length. [ 473.639586][T19020] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 474.033692][T19040] IPv6: sit2: Disabled Multicast RS [ 474.040253][T19040] sit2: entered allmulticast mode [ 474.681213][T19082] __nla_validate_parse: 11 callbacks suppressed [ 474.681234][T19082] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3621'. [ 475.605131][T19126] netlink: 'syz.0.3633': attribute type 8 has an invalid length. [ 475.614384][T19128] sctp: [Deprecated]: syz.6.3634 (pid 19128) Use of int in max_burst socket option. [ 475.614384][T19128] Use struct sctp_assoc_value instead [ 475.663138][T19130] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3635'. [ 475.906392][T19099] lec:lec_atm_close: lec0: Shut down! [ 475.931453][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3637'. [ 475.947635][T19140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.054354][T19145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3639'. [ 476.137370][T19154] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3641'. [ 476.678496][T19186] netlink: 'syz.5.3651': attribute type 21 has an invalid length. [ 476.783450][T19191] netlink: 'syz.1.3654': attribute type 2 has an invalid length. [ 476.810791][T19191] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3654'. [ 476.829362][T19198] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3657'. [ 476.839490][T19196] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3651'. [ 477.213816][T19209] veth0_macvtap: left promiscuous mode [ 477.439242][T19224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3663'. [ 478.174403][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.208675][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.257931][T19225] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 478.719314][T19208] geneve2: left promiscuous mode [ 478.724514][T19208] geneve2: left allmulticast mode [ 478.739683][T19208] bond1: left promiscuous mode [ 478.886656][ T8687] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.910922][ T8687] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.924919][ T8687] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 478.957527][ T8687] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.981990][ T8687] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.009003][ T8687] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 479.041576][ T8687] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.073592][ T8687] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.089864][ T8687] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 479.103644][ T8687] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.133339][ T8687] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.163105][ T8687] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 479.259142][T19244] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3668'. [ 479.321578][T19244] vlan2: entered promiscuous mode [ 479.388703][T19244] ip6gretap0: entered promiscuous mode [ 479.539108][ T5839] Bluetooth: hci0: command 0x0c20 tx timeout [ 480.212964][T19295] netlink: 'syz.5.3678': attribute type 11 has an invalid length. [ 480.278716][T19297] netlink: 'syz.0.3681': attribute type 11 has an invalid length. [ 480.289142][T19292] bond2: Unable to set up delay as MII monitoring is disabled [ 480.298438][T19306] netlink: 'syz.1.3679': attribute type 2 has an invalid length. [ 480.315694][T19292] bond2 (unregistering): Released all slaves [ 480.331986][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 480.457422][T19311] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3682'. [ 480.517325][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 480.526470][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 480.739643][T19331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.916575][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 480.932890][ C1] lec:lec_tx_timeout: lec0 [ 480.938673][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 481.151321][T19351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3692'. [ 481.187479][T19351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3692'. [ 481.280240][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3695'. [ 481.322249][T19369] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3696'. [ 481.368545][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'. [ 481.389348][T19373] bond0: entered promiscuous mode [ 481.416547][T19373] bond_slave_0: entered promiscuous mode [ 481.422715][T19373] bond_slave_1: entered promiscuous mode [ 481.436303][T19373] bond0: left promiscuous mode [ 481.441193][T19373] bond_slave_0: left promiscuous mode [ 481.451158][T19373] bond_slave_1: left promiscuous mode [ 481.633303][T19390] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3701'. [ 481.904358][T19411] syzkaller0: entered promiscuous mode [ 481.910688][T19411] syzkaller0: entered allmulticast mode [ 482.380812][T19441] veth1_macvtap: left promiscuous mode [ 482.670652][T19455] netlink: 'syz.6.3713': attribute type 2 has an invalid length. [ 482.971621][T19468] netlink: 'syz.6.3718': attribute type 10 has an invalid length. [ 483.014989][T19468] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 483.035482][T19468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.055260][T19468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.063245][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 484.028500][T19512] netlink: 'syz.6.3732': attribute type 10 has an invalid length. [ 485.402194][T19512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 485.718222][T19536] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 485.774115][T19536] __nla_validate_parse: 2 callbacks suppressed [ 485.774140][T19536] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3738'. [ 485.946617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 485.954716][ C1] lec:lec_tx_timeout: lec0 [ 485.959781][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 485.994028][T19548] netlink: 'syz.1.3743': attribute type 9 has an invalid length. [ 486.007228][T19548] netlink: 'syz.1.3743': attribute type 11 has an invalid length. [ 486.018214][T19548] netlink: 'syz.1.3743': attribute type 12 has an invalid length. [ 486.026101][T19548] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3743'. [ 486.054251][T19548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3743'. [ 486.061129][T19550] ip6t_REJECT: ECHOREPLY is not supported [ 486.589207][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3754'. [ 486.615857][T19587] syzkaller0: entered promiscuous mode [ 486.790829][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3756'. [ 488.439326][T19598] netlink: 'syz.5.3756': attribute type 4 has an invalid length. [ 488.469236][T19614] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3761'. [ 488.496649][T19614] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3761'. [ 488.536723][T19616] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3762'. [ 488.616778][T19618] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3765'. [ 488.761946][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3764'. [ 489.292883][T19662] syzkaller0: entered promiscuous mode [ 489.301432][T19662] syzkaller0: entered allmulticast mode [ 489.323519][T19662] tap0: tun_chr_ioctl cmd 1074025672 [ 489.329273][T19662] tap0: ignored: set checksum disabled [ 489.451496][T19668] netlink: 'syz.6.3779': attribute type 1 has an invalid length. [ 489.573194][T19672] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 489.596621][T19672] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 489.614175][T19672] bond3: (slave ip6gre1): making interface the new active one [ 489.633195][T19672] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 490.728514][T19748] netlink: 'syz.0.3805': attribute type 18 has an invalid length. [ 490.793382][T19748] __nla_validate_parse: 9 callbacks suppressed [ 490.793405][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'. [ 490.800382][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.811704][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.839876][T19748] netlink: 'syz.0.3805': attribute type 18 has an invalid length. [ 490.848384][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'. [ 490.866762][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.875950][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.966652][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 490.974774][ C1] lec:lec_tx_timeout: lec0 [ 490.976422][T19762] netlink: 'syz.1.3809': attribute type 1 has an invalid length. [ 490.981060][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 491.028212][T19762] netlink: 'syz.1.3809': attribute type 1 has an invalid length. [ 491.066971][T19762] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.3809'. [ 491.173606][T19774] netlink: 'syz.4.3814': attribute type 1 has an invalid length. [ 491.221584][T19774] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3814'. [ 491.522262][T19795] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3819'. [ 491.549667][T19801] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 491.679923][T19808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3822'. [ 491.704159][T19795] syzkaller0: entered promiscuous mode [ 491.717099][T19795] syzkaller0: entered allmulticast mode [ 491.958663][T19827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3825'. [ 492.009751][T19827] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 492.084049][T19830] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3826'. [ 492.272129][T19848] netlink: 'syz.5.3828': attribute type 1 has an invalid length. [ 492.309484][T19842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3828'. [ 492.438654][T19863] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3830'. [ 492.531426][T19863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.589893][T19863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.619469][T19863] bond0 (unregistering): Released all slaves [ 492.638990][T19872] netlink: 'syz.6.3834': attribute type 6 has an invalid length. [ 493.462569][T19930] team0: No ports can be present during mode change [ 493.599056][ T5940] IPVS: starting estimator thread 0... [ 493.610244][T19938] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 493.697906][T19940] IPVS: using max 25 ests per chain, 60000 per kthread [ 494.085670][T19959] netlink: 'syz.1.3857': attribute type 1 has an invalid length. [ 494.107703][T19959] netlink: 'syz.1.3857': attribute type 2 has an invalid length. [ 494.135478][T19959] netlink: 'syz.1.3857': attribute type 1 has an invalid length. [ 494.556909][T19999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.730830][ T5910] IPVS: starting estimator thread 0... [ 494.742604][T20009] netlink: 'syz.6.3871': attribute type 15 has an invalid length. [ 494.783001][ T8687] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 494.793186][T20009] netlink: 'syz.6.3871': attribute type 15 has an invalid length. [ 494.804605][ T8687] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 494.836954][ T8687] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 494.851496][ T8687] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 494.861327][T20010] IPVS: using max 29 ests per chain, 69600 per kthread [ 495.061663][ T1809] block nbd0: Possible stuck request ffff888026ee0000: control (read@0,1024B). Runtime 150 seconds [ 495.075516][ T1809] block nbd0: Possible stuck request ffff888026ee0200: control (read@1024,1024B). Runtime 150 seconds [ 495.087563][ T1809] block nbd0: Possible stuck request ffff888026ee0400: control (read@2048,1024B). Runtime 150 seconds [ 495.099062][ T1809] block nbd0: Possible stuck request ffff888026ee0600: control (read@3072,1024B). Runtime 150 seconds [ 495.157645][T20038] xt_policy: output policy not valid in PREROUTING and INPUT [ 495.225467][T20031] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 495.553721][T20055] netlink: 'syz.5.3882': attribute type 8 has an invalid length. [ 495.611867][T20057] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 495.641384][T20057] bond4 (unregistering): Released all slaves [ 495.725665][T20024] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 495.736954][T20024] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 495.770307][T20024] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 495.808458][T20024] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 495.975339][T20024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 495.989725][T20024] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 495.997376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 496.005680][ C1] lec:lec_tx_timeout: lec0 [ 496.011606][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 496.050412][T20034] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 496.084401][T20024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.106716][T20024] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 496.226806][T20083] __nla_validate_parse: 18 callbacks suppressed [ 496.226826][T20083] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3887'. [ 496.244673][T20084] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3887'. [ 496.278903][T20083] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3887'. [ 496.412271][T20090] xt_hashlimit: size too large, truncated to 1048576 [ 496.514735][T20095] : renamed from vxcan1 (while UP) [ 496.544673][T20067] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 496.551937][T20024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.567238][T20024] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 496.576904][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 496.842438][T20024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.857584][T20024] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 497.066069][T20117] syzkaller0: entered promiscuous mode [ 497.778604][T20164] syzkaller1: entered promiscuous mode [ 497.789126][T20162] sctp: [Deprecated]: syz.5.3908 (pid 20162) Use of int in max_burst socket option. [ 497.789126][T20162] Use struct sctp_assoc_value instead [ 497.818914][T20164] syzkaller1: entered allmulticast mode [ 497.827906][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 497.848593][T20162] netlink: 'syz.5.3908': attribute type 32 has an invalid length. [ 498.061152][T20181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.128009][T20183] syzkaller1: entered promiscuous mode [ 498.150003][T20183] syzkaller1: entered allmulticast mode [ 498.180304][T20190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3916'. [ 498.655143][T20213] syzkaller0: entered promiscuous mode [ 498.661224][T20213] syzkaller0: entered allmulticast mode [ 498.671127][T20213] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3923'. [ 499.076040][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3930'. [ 499.359785][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3933'. [ 499.580796][T20248] macvtap1: entered promiscuous mode [ 499.626730][T20248] vlan0: entered promiscuous mode [ 499.639853][T20248] macvtap1: entered allmulticast mode [ 499.659247][T20248] vlan0: entered allmulticast mode [ 499.664463][T20248] veth0_vlan: entered allmulticast mode [ 499.742136][T20277] netlink: 'syz.5.3937': attribute type 12 has an invalid length. [ 499.763419][T20262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3935'. [ 500.107363][T20287] syzkaller0: entered promiscuous mode [ 500.112938][T20287] syzkaller0: entered allmulticast mode [ 500.227600][T20292] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 500.250659][T20292] bond2 (unregistering): Released all slaves [ 500.719738][T20327] netlink: 'syz.0.3947': attribute type 10 has an invalid length. [ 500.845531][T20338] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 501.026617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 501.034721][ C1] lec:lec_tx_timeout: lec0 [ 501.039975][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 501.345012][T20364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.464125][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.476372][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.540111][T20366] __nla_validate_parse: 4 callbacks suppressed [ 501.540131][T20366] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3958'. [ 501.593768][T20366] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3958'. [ 501.824210][T20380] IPVS: Unknown mcast interface: vcan0 [ 501.870076][T20382] Bluetooth: MGMT ver 1.23 [ 501.980081][T20386] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3965'. [ 502.193159][T20399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.217360][T20400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.439194][T20413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3974'. [ 502.457635][T20413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3974'. [ 502.637945][T20427] openvswitch: netlink: IPv4 tunnel dst address is zero [ 502.658617][T20427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3976'. [ 502.785057][T20433] netlink: 'syz.4.3979': attribute type 10 has an invalid length. [ 502.800245][T20433] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3979'. [ 502.903770][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3980'. [ 503.223360][T20454] netlink: 'syz.0.3986': attribute type 4 has an invalid length. [ 503.290404][T20454] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3986'. [ 503.531258][T20467] netlink: 'syz.5.3990': attribute type 1 has an invalid length. [ 503.544616][T20466] netlink: 'syz.5.3990': attribute type 1 has an invalid length. [ 503.629518][T20480] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3993'. [ 503.702224][T20462] "syz.4.3989" (20462) uses obsolete ecb(arc4) skcipher [ 503.730213][T20485] netlink: zone id is out of range [ 503.735431][T20485] netlink: zone id is out of range [ 503.792452][T20485] netlink: zone id is out of range [ 503.815140][T20485] netlink: zone id is out of range [ 503.836423][T20485] netlink: zone id is out of range [ 503.841626][T20485] netlink: zone id is out of range [ 504.075557][T20496] ipt_REJECT: ECHOREPLY no longer supported. [ 504.583356][T20536] IPVS: length: 4096 != 24 [ 504.595957][T20519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.713223][T20543] xt_policy: neither incoming nor outgoing policy selected [ 504.880430][T20554] netlink: 'syz.6.4013': attribute type 12 has an invalid length. [ 504.916506][T20554] netlink: 'syz.6.4013': attribute type 29 has an invalid length. [ 504.946519][T20554] netlink: 'syz.6.4013': attribute type 2 has an invalid length. [ 504.978912][T20554] netlink: 'syz.6.4013': attribute type 3 has an invalid length. [ 505.455092][T20583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.741932][T20583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.961242][T20583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.021654][T20621] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.029223][T20621] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.137647][T20583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.355989][ T8695] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.391883][ T8695] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.436701][T20643] ip6gre1: entered promiscuous mode [ 506.443041][T20643] ip6gre1: entered allmulticast mode [ 506.450896][ T8695] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.494468][ T8695] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.816251][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 506.824341][ C1] lec:lec_tx_timeout: lec0 [ 506.831058][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 507.020548][T20675] syz_tun: entered allmulticast mode [ 507.273937][T20685] mac80211_hwsim hwsim42 : renamed from wlan1 [ 507.340841][T20683] syzkaller0: entered promiscuous mode [ 507.346765][T20683] syzkaller0: entered allmulticast mode [ 507.661378][T20703] __nla_validate_parse: 12 callbacks suppressed [ 507.661402][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4048'. [ 509.051465][T20697] netlink: 'syz.1.4050': attribute type 1 has an invalid length. [ 509.230272][T20710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4052'. [ 509.248652][ T8688] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.278055][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.286128][ T8688] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.306973][T20713] xt_hashlimit: max too large, truncated to 1048576 [ 509.483710][T20725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4059'. [ 509.641603][T20736] netlink: 512 bytes leftover after parsing attributes in process `syz.4.4063'. [ 509.675311][T20734] wlan1 speed is unknown, defaulting to 1000 [ 509.755194][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.953149][T20734] wg1 speed is unknown, defaulting to 1000 [ 509.962048][T20734] lo speed is unknown, defaulting to 1000 [ 510.032855][T20756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4067'. [ 510.110770][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 510.184635][T20766] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4069'. [ 510.414990][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4074'. [ 510.479344][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4074'. [ 510.498216][T20783] netlink: 'syz.4.4075': attribute type 1 has an invalid length. [ 510.511920][T20783] netlink: 'syz.4.4075': attribute type 1 has an invalid length. [ 510.536617][T20783] netlink: 'syz.4.4075': attribute type 1 has an invalid length. [ 510.544522][T20783] netlink: 'syz.4.4075': attribute type 2 has an invalid length. [ 510.553661][T20783] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4075'. [ 510.579635][T20777] vxcan0: entered allmulticast mode [ 510.671875][T20781] vxcan2: entered allmulticast mode [ 510.913398][T20804] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4083'. [ 511.174234][T20821] netlink: 'syz.6.4089': attribute type 1 has an invalid length. [ 511.230576][T20817] syzkaller0: entered promiscuous mode [ 511.236456][T20817] syzkaller0: entered allmulticast mode [ 511.324052][T20831] netlink: 'syz.4.4092': attribute type 1 has an invalid length. [ 511.334558][T20828] bond4: (slave geneve3): making interface the new active one [ 511.343980][T20828] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 511.353639][ T58] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 511.372378][ T58] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 511.382932][T20831] netlink: 'syz.4.4092': attribute type 1 has an invalid length. [ 511.412471][ T58] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 511.431902][T20831] netlink: 'syz.4.4092': attribute type 2 has an invalid length. [ 511.860004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 511.868123][ C1] lec:lec_tx_timeout: lec0 [ 511.873498][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 512.559313][T20863] netlink: 'syz.4.4100': attribute type 2 has an invalid length. [ 513.137801][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.459913][ T58] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 513.470530][T20843] __nla_validate_parse: 11 callbacks suppressed [ 513.470549][T20843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4094'. [ 513.546023][T20854] wlan1 speed is unknown, defaulting to 1000 [ 513.588647][T20854] wg1 speed is unknown, defaulting to 1000 [ 513.605445][T20854] lo speed is unknown, defaulting to 1000 [ 513.645550][T20869] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4102'. [ 513.929187][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4108'. [ 514.046116][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4111'. [ 514.093152][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4111'. [ 514.152398][T20906] netlink: 'syz.0.4112': attribute type 2 has an invalid length. [ 514.829048][T20943] syzkaller1: entered promiscuous mode [ 514.834865][T20943] syzkaller1: entered allmulticast mode [ 514.934914][T20947] ipvlan2: entered allmulticast mode [ 514.948041][T20947] batadv_slave_1: entered allmulticast mode [ 514.955690][T20947] batman_adv: batadv0: Adding interface: ipvlan2 [ 514.965740][T20947] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.997186][T20947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.008479][T20947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.019442][T20947] batman_adv: batadv0: Interface activated: ipvlan2 [ 515.030643][T20951] syzkaller0: entered promiscuous mode [ 515.264820][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4134'. [ 515.478835][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4136'. [ 515.692763][T20958] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.700743][T20958] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.826031][T20991] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4140'. [ 515.838910][T20991] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4140'. [ 515.850963][T20991] validate_nla: 65 callbacks suppressed [ 515.850984][T20991] netlink: 'syz.5.4140': attribute type 5 has an invalid length. [ 515.869824][T20991] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4140'. [ 516.226879][T20958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.274808][T20958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.565712][T20958] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 516.646522][T20958] vlan2: left allmulticast mode [ 516.651533][T20958] mac80211_hwsim hwsim41 wlan0: left allmulticast mode [ 516.689407][T20968] lo: entered allmulticast mode [ 516.695008][T20968] tunl0: entered allmulticast mode [ 516.707043][T20968] gre0: entered allmulticast mode [ 516.727182][T20968] gretap0: entered allmulticast mode [ 516.733490][T20968] erspan0: entered allmulticast mode [ 516.739413][T20968] ip_vti0: entered allmulticast mode [ 516.745164][T20968] ip6_vti0: entered allmulticast mode [ 516.751957][T20968] sit0: entered allmulticast mode [ 516.759477][T20968] ip6tnl0: entered allmulticast mode [ 516.765056][T20968] ip6gre0: entered allmulticast mode [ 516.771793][T20968] ip6gretap0: entered allmulticast mode [ 516.781106][T20968] bridge0: entered allmulticast mode [ 516.787591][T20968] vcan0: entered allmulticast mode [ 516.793144][T20968] bond0: entered allmulticast mode [ 516.800002][T20968] bond_slave_0: entered allmulticast mode [ 516.813620][T20968] bond_slave_1: entered allmulticast mode [ 516.824770][T20968] team0: entered allmulticast mode [ 516.830956][T20968] team_slave_0: entered allmulticast mode [ 516.837265][T20968] team_slave_1: entered allmulticast mode [ 516.843218][T20968] dummy0: entered allmulticast mode [ 516.849889][T20968] nlmon0: entered allmulticast mode [ 516.855332][T20968] caif0: entered allmulticast mode [ 516.862470][T20968] batadv0: entered allmulticast mode [ 516.868536][T20968] vxcan0: entered allmulticast mode [ 516.874164][T20968] vxcan1: entered allmulticast mode [ 516.882464][T20968] veth0: entered allmulticast mode [ 516.886617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 516.893210][T20968] veth1: entered allmulticast mode [ 516.895764][ C1] lec:lec_tx_timeout: lec0 [ 516.905535][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 516.909427][T20968] wg0: entered allmulticast mode [ 516.929048][T20968] wg1: entered allmulticast mode [ 516.947387][T20968] wg2: entered allmulticast mode [ 516.956570][T20968] veth0_to_bridge: entered allmulticast mode [ 516.968224][T20968] veth1_to_bridge: entered allmulticast mode [ 516.985265][T20968] veth0_to_bond: entered allmulticast mode [ 516.994137][T20968] veth1_to_bond: entered allmulticast mode [ 517.001201][T20968] veth0_to_team: entered allmulticast mode [ 517.008320][T20968] veth1_to_team: entered allmulticast mode [ 517.014781][T20968] veth0_to_batadv: entered allmulticast mode [ 517.021509][T20968] batadv_slave_0: entered allmulticast mode [ 517.031500][T20968] veth1_to_batadv: entered allmulticast mode [ 517.039208][T20968] xfrm0: entered allmulticast mode [ 517.044779][T20968] veth0_to_hsr: entered allmulticast mode [ 517.051761][T20968] hsr_slave_0: entered allmulticast mode [ 517.058574][T20968] veth1_to_hsr: entered allmulticast mode [ 517.064524][T20968] hsr_slave_1: entered allmulticast mode [ 517.071704][T20968] hsr0: entered allmulticast mode [ 517.077375][T20968] veth1_virt_wifi: entered allmulticast mode [ 517.083924][T20968] veth0_virt_wifi: entered allmulticast mode [ 517.090800][T20968] veth1_vlan: entered allmulticast mode [ 517.097728][T20968] veth0_vlan: entered allmulticast mode [ 517.103491][T20968] vlan0: entered allmulticast mode [ 517.110331][T20968] vlan1: entered allmulticast mode [ 517.115753][T20968] macvlan0: entered allmulticast mode [ 517.122016][T20968] macvlan1: entered allmulticast mode [ 517.128633][T20968] ipvlan0: entered allmulticast mode [ 517.134442][T20968] ipvlan1: entered allmulticast mode [ 517.145097][T20968] veth1_macvtap: entered allmulticast mode [ 517.152722][T20968] veth0_macvtap: entered allmulticast mode [ 517.160778][T20968] macvtap0: entered allmulticast mode [ 517.166679][T20968] macsec0: entered allmulticast mode [ 517.172499][T20968] geneve0: entered allmulticast mode [ 517.178511][T20968] geneve1: entered allmulticast mode [ 517.184249][T20968] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 517.200066][T20968] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 517.208424][T20968] geneve2: entered allmulticast mode [ 517.214038][T20968] bond1: entered allmulticast mode [ 517.220774][T20968] veth2: entered allmulticast mode [ 517.226610][T20968] veth3: entered allmulticast mode [ 517.232107][T20968] @: entered allmulticast mode [ 517.240233][T20968] mac80211_hwsim hwsim48 wlan2: entered allmulticast mode [ 517.248653][T20968] veth4: entered allmulticast mode [ 517.254049][T20968] veth5: entered allmulticast mode [ 517.260302][T20968] erspan1: entered allmulticast mode [ 517.267175][T20968] mac80211_hwsim hwsim43 pim6reg0: entered allmulticast mode [ 517.276063][T20968] vxlan0: entered allmulticast mode [ 517.284986][T20968] gre1: entered allmulticast mode [ 517.291441][T20968] netdevsim netdevsim0 eth0: entered allmulticast mode [ 517.300709][T20968] netdevsim netdevsim0 eth1: entered allmulticast mode [ 517.309165][T20968] netdevsim netdevsim0 eth2: entered allmulticast mode [ 517.317108][T20968] netdevsim netdevsim0 eth3: entered allmulticast mode [ 517.324367][T20968] bridge1: entered allmulticast mode [ 517.331577][T20968] bond2: entered allmulticast mode [ 517.338248][T20968] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 517.363879][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.405710][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.457382][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.491748][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.549753][ T49] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.594034][ T49] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.625387][ T49] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.663799][ T49] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.804672][T21015] netlink: 'syz.4.4146': attribute type 1 has an invalid length. [ 518.716017][T21075] __nla_validate_parse: 5 callbacks suppressed [ 518.716040][T21075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4156'. [ 518.793683][T21084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4159'. [ 518.827896][T21084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4159'. [ 518.859044][T21084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4159'. [ 518.900886][T21092] netlink: 'syz.4.4160': attribute type 1 has an invalid length. [ 519.080360][T21092] bond2: entered promiscuous mode [ 519.085474][T21092] bond2: entered allmulticast mode [ 519.091739][T21092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.233917][T21106] veth0: entered promiscuous mode [ 519.275367][T21105] veth0: left promiscuous mode [ 519.372368][T21114] netlink: 'syz.5.4166': attribute type 63 has an invalid length. [ 519.416510][T21114] netlink: 'syz.5.4166': attribute type 63 has an invalid length. [ 519.563146][T21128] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4167'. [ 519.598493][T21128] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4167'. [ 519.860791][T21141] netlink: 'syz.6.4171': attribute type 11 has an invalid length. [ 519.870582][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4171'. [ 519.922286][T21145] netlink: 'syz.6.4171': attribute type 4 has an invalid length. [ 519.951795][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4172'. [ 520.024041][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4172'. [ 520.289558][T21163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4176'. [ 520.621994][T21185] sctp: [Deprecated]: syz.4.4181 (pid 21185) Use of int in max_burst socket option deprecated. [ 520.621994][T21185] Use struct sctp_assoc_value instead [ 520.763434][T21193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 520.770918][T21188] batman_adv: batadv0: Removing interface: ipvlan2 [ 520.810592][T21188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.296388][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.487457][T21237] syzkaller0: entered promiscuous mode [ 521.493849][T21237] syzkaller0: entered allmulticast mode [ 521.678873][T21245] netlink: 'syz.4.4194': attribute type 3 has an invalid length. [ 521.916332][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 521.924450][ C1] lec:lec_tx_timeout: lec0 [ 521.930223][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 522.125709][T21273] syzkaller1: entered promiscuous mode [ 522.138634][T21273] syzkaller1: entered allmulticast mode [ 522.252139][T21277] bond0: (slave bridge_slave_1): Releasing backup interface [ 522.300300][T21277] bond0: (slave bond_slave_0): Releasing backup interface [ 522.325581][T21277] bond0: (slave bond_slave_1): Releasing backup interface [ 522.342465][T21277] team0: Port device team_slave_0 removed [ 522.351586][T21277] team0: Port device team_slave_1 removed [ 522.358591][T21277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.387986][T21277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.414859][T21277] net_ratelimit: 2 callbacks suppressed [ 522.414879][T21277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.629214][T21304] netlink: 'syz.4.4210': attribute type 10 has an invalid length. [ 522.666466][T21299] netlink: 'syz.4.4210': attribute type 10 has an invalid length. [ 522.675136][T21311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 522.734613][T21311] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 522.743767][T21311] gretap1: entered promiscuous mode [ 522.751000][T21311] gretap1: entered allmulticast mode [ 522.761828][T21299] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 523.267091][ T8695] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 523.316379][ T8695] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 523.325395][ T8695] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 523.345171][ T8695] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 523.684640][T21367] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 523.705059][T21367] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 523.889199][T21373] bridge_slave_0: left allmulticast mode [ 523.912557][T21373] bridge_slave_0: left promiscuous mode [ 523.941034][T21373] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.049200][T21373] bridge_slave_1: left allmulticast mode [ 524.054931][T21373] bridge_slave_1: left promiscuous mode [ 524.075494][T21387] __nla_validate_parse: 7 callbacks suppressed [ 524.075519][T21387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4239'. [ 524.108438][T21373] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.131001][T21373] bond0: (slave bond_slave_0): Releasing backup interface [ 524.141641][T21373] bond0: (slave bond_slave_1): Releasing backup interface [ 524.162244][T21373] team0: Port device team_slave_0 removed [ 524.170686][T21373] team0: Port device team_slave_1 removed [ 524.178753][T21373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.198446][T21373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.209671][T21373] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.237925][T21376] team0: Mode changed to "random" [ 524.260696][T21387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4239'. [ 524.294195][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4239'. [ 524.385397][T21394] IPVS: set_ctl: invalid protocol: 92 172.30.0.1:20001 [ 524.451621][T21399] netlink: 'syz.4.4242': attribute type 5 has an invalid length. [ 524.491261][T21399] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4242'. [ 524.672432][T21403] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 524.699609][T21411] syzkaller1: entered promiscuous mode [ 524.728229][T21411] syzkaller1: entered allmulticast mode [ 524.911341][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4248'. [ 525.033799][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4247'. [ 525.142454][ T1809] block nbd0: Possible stuck request ffff888026ee0000: control (read@0,1024B). Runtime 180 seconds [ 525.153485][ T1809] block nbd0: Possible stuck request ffff888026ee0200: control (read@1024,1024B). Runtime 180 seconds [ 525.165630][ T1809] block nbd0: Possible stuck request ffff888026ee0400: control (read@2048,1024B). Runtime 180 seconds [ 525.178659][ T1809] block nbd0: Possible stuck request ffff888026ee0600: control (read@3072,1024B). Runtime 180 seconds [ 525.395574][T21442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4252'. [ 525.430834][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4253'. [ 525.601155][T21445] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 525.632027][T21445] batadv1: entered allmulticast mode [ 525.654023][T21452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4255'. [ 525.684971][T21445] team0: Port device batadv1 added [ 526.227700][T21485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4266'. [ 526.243987][T21484] netlink: 'syz.1.4265': attribute type 10 has an invalid length. [ 526.947170][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 526.955311][ C1] lec:lec_tx_timeout: lec0 [ 526.963800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.309437][T21529] nbd: socks must be embedded in a SOCK_ITEM attr [ 527.339821][T21528] syzkaller1: entered allmulticast mode [ 527.425003][T21532] x_tables: duplicate underflow at hook 3 [ 527.799860][T21551] syzkaller1: entered promiscuous mode [ 527.844611][T21551] syzkaller1: entered allmulticast mode [ 528.066562][T21572] bridge0: port 3(gretap0) entered blocking state [ 528.093776][T21572] bridge0: port 3(gretap0) entered disabled state [ 528.101797][T21572] gretap0: entered allmulticast mode [ 528.112642][T21572] gretap0: entered promiscuous mode [ 528.535431][T21607] ipvlan2: entered allmulticast mode [ 528.617228][T21607] batadv_slave_1: entered allmulticast mode [ 528.658754][T21597] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 528.737923][T21621] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 528.921428][T21631] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.315477][T21637] netlink: 'syz.0.4310': attribute type 9 has an invalid length. [ 529.323926][T21637] __nla_validate_parse: 6 callbacks suppressed [ 529.323947][T21637] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4310'. [ 529.591179][T21640] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0 [ 529.622259][T21640] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 529.745358][T21653] syzkaller0: entered promiscuous mode [ 529.781708][T21653] syzkaller0: entered allmulticast mode [ 531.246447][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4331'. [ 531.496136][T21720] netlink: 'syz.5.4334': attribute type 1 has an invalid length. [ 531.583677][T21720] 8021q: adding VLAN 0 to HW filter on device bond9 [ 531.651528][T21727] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4338'. [ 531.651541][T21728] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4338'. [ 531.976372][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 531.984499][ C1] lec:lec_tx_timeout: lec0 [ 531.990161][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 532.360405][T21752] netlink: 'syz.5.4342': attribute type 10 has an invalid length. [ 532.462676][T21756] netlink: 'syz.6.4344': attribute type 1 has an invalid length. [ 532.485931][T21756] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4344'. [ 532.700356][T21774] x_tables: duplicate underflow at hook 2 [ 532.868218][T21778] wlan1 speed is unknown, defaulting to 1000 [ 532.895126][T21786] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4352'. [ 532.906083][T21778] wg1 speed is unknown, defaulting to 1000 [ 532.938194][T21778] lo speed is unknown, defaulting to 1000 [ 532.996555][T21789] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4353'. [ 533.064077][T21791] netlink: 'syz.6.4354': attribute type 1 has an invalid length. [ 533.078080][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4354'. [ 533.299641][T21802] netlink: 'syz.5.4357': attribute type 1 has an invalid length. [ 533.322100][T21803] netlink: 'syz.1.4359': attribute type 32 has an invalid length. [ 533.450570][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4358'. [ 533.489173][T21802] bond10: entered promiscuous mode [ 533.505073][T21802] bond10: entered allmulticast mode [ 533.530376][T21802] 8021q: adding VLAN 0 to HW filter on device bond10 [ 533.596851][T21807] macvlan3: entered promiscuous mode [ 533.602510][T21807] macvlan3: entered allmulticast mode [ 533.612459][T21807] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 533.712376][T21820] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4358'. [ 534.289462][T21854] wlan1 speed is unknown, defaulting to 1000 [ 534.444568][T21867] netlink: 'syz.4.4369': attribute type 21 has an invalid length. [ 534.458017][T21865] netlink: 'syz.1.4370': attribute type 11 has an invalid length. [ 534.466384][T21865] __nla_validate_parse: 3 callbacks suppressed [ 534.466403][T21865] netlink: 173856 bytes leftover after parsing attributes in process `syz.1.4370'. [ 534.539324][T21870] netlink: 'syz.4.4369': attribute type 21 has an invalid length. [ 534.623653][T21879] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4371'. [ 534.662575][T21879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4371'. [ 534.872139][T21889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4374'. [ 535.004032][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4378'. [ 535.026117][T21898] netlink: 'syz.6.4378': attribute type 5 has an invalid length. [ 535.065060][T21898] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4378'. [ 535.101605][T21898] geneve4: entered promiscuous mode [ 535.108825][T21898] geneve4: entered allmulticast mode [ 535.241803][T21910] openvswitch: netlink: IP tunnel dst address not specified [ 535.261408][T21912] openvswitch: netlink: IP tunnel dst address not specified [ 535.453984][T21924] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4385'. [ 535.612193][T21938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.703570][T21946] netlink: 'syz.1.4391': attribute type 13 has an invalid length. [ 535.747093][T21946] veth0_macvtap: left promiscuous mode [ 535.753605][T21946] macvtap0: entered allmulticast mode [ 535.787496][T21946] macvtap0: refused to change device tx_queue_len [ 536.000453][T21958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4396'. [ 536.020811][T21958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4396'. [ 536.128730][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4399'. [ 536.269743][T21973] sctp: [Deprecated]: syz.6.4402 (pid 21973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.269743][T21973] Use struct sctp_sack_info instead [ 536.661051][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.007233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 537.015432][ C1] lec:lec_tx_timeout: lec0 [ 537.020232][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 538.023184][T21988] netlink: 'syz.1.4403': attribute type 1 has an invalid length. [ 538.313954][T22008] erspan0: entered promiscuous mode [ 538.711022][T22028] syzkaller1: entered promiscuous mode [ 538.716785][T22028] syzkaller1: entered allmulticast mode [ 538.741680][T22030] netlink: 'syz.4.4419': attribute type 21 has an invalid length. [ 538.781891][T22028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.786027][T22030] netlink: 'syz.4.4419': attribute type 15 has an invalid length. [ 538.900518][T22032] syzkaller0: entered promiscuous mode [ 538.906123][T22032] syzkaller0: entered allmulticast mode [ 539.116053][T22047] batman_adv: batadv0: Adding interface: dummy0 [ 539.143347][T22047] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.224374][T22047] batman_adv: batadv0: Interface activated: dummy0 [ 539.313845][T22051] batadv0: mtu less than device minimum [ 539.328254][T22051] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 539.340188][T22051] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 539.352083][T22051] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 539.363976][T22051] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 539.375834][T22051] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 539.881780][T22078] __nla_validate_parse: 5 callbacks suppressed [ 539.881802][T22078] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4432'. [ 539.898368][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4432'. [ 540.391949][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4443'. [ 540.402757][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4443'. [ 540.793596][T22148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4452'. [ 540.850272][T22147] xt_CT: No such helper "snmp_trap" [ 540.885511][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'. [ 540.906913][T22153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'. [ 541.034643][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4455'. [ 541.254210][T22174] bond6: Unable to set down delay as MII monitoring is disabled [ 541.289900][T22174] bond6 (unregistering): Released all slaves [ 541.340870][T22178] net_ratelimit: 14 callbacks suppressed [ 541.340890][T22178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.390504][T22179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.433792][T22184] wg1: entered promiscuous mode [ 541.565022][T22190] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4463'. [ 541.621845][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4465'. [ 541.649545][T22197] nbd: socks must be embedded in a SOCK_ITEM attr [ 541.756775][T22204] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20004 [ 541.888422][T22220] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 542.036760][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 542.044865][ C1] lec:lec_tx_timeout: lec0 [ 542.056602][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 542.135184][T22229] pim6reg1: entered promiscuous mode [ 542.141752][T22229] pim6reg1: entered allmulticast mode [ 542.744103][T22272] netlink: 'syz.4.4488': attribute type 29 has an invalid length. [ 542.803302][T22276] netlink: 'syz.4.4488': attribute type 29 has an invalid length. [ 543.230200][T22302] netlink: 'syz.0.4499': attribute type 14 has an invalid length. [ 543.252161][T22302] netlink: 'syz.0.4499': attribute type 13 has an invalid length. [ 543.353487][T22312] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 543.683631][T22337] openvswitch: netlink: EtherType 50a is less than min 600 [ 543.983419][T22356] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 544.550333][T22382] netlink: 'syz.6.4520': attribute type 1 has an invalid length. [ 544.668362][T22387] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 545.007683][T22405] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 545.162492][T22410] __nla_validate_parse: 20 callbacks suppressed [ 545.162516][T22410] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4529'. [ 545.257632][T22414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4530'. [ 545.606015][T22436] bond0: option ad_select: unable to set because the bond device is up [ 545.894980][T22454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 545.967067][T22454] openvswitch: netlink: Flow actions attr not present in new flow. [ 546.103897][T22465] IPVS: set_ctl: invalid protocol: 108 172.30.0.5:20002 [ 546.134251][T22469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4547'. [ 546.374396][T22477] netlink: 'syz.5.4549': attribute type 9 has an invalid length. [ 546.394021][T22477] netlink: 'syz.5.4549': attribute type 6 has an invalid length. [ 546.465541][T22477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.882480][T22509] netlink: 'syz.1.4557': attribute type 1 has an invalid length. [ 546.902004][T22510] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 548.176312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6120 ms [ 548.184451][ C1] lec:lec_tx_timeout: lec0 [ 548.191045][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 549.395870][T22478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.632560][T22535] netlink: 'syz.6.4563': attribute type 61 has an invalid length. [ 549.787212][T22539] bond0: entered promiscuous mode [ 549.792419][T22539] bond_slave_0: entered promiscuous mode [ 549.806586][T22539] bond_slave_1: entered promiscuous mode [ 549.812664][T22539] bond0: left allmulticast mode [ 550.014734][T22547] tun0: tun_chr_ioctl cmd 1074025675 [ 550.046911][T22547] tun0: persist disabled [ 550.070540][T22547] tun0: tun_chr_ioctl cmd 35092 [ 550.244670][T22564] openvswitch: netlink: IP tunnel dst address not specified [ 550.261058][T22565] openvswitch: netlink: IP tunnel dst address not specified [ 550.470226][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 550.533633][T22576] xt_ecn: cannot match TCP bits for non-tcp packets [ 550.550551][T22576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4578'. [ 550.679482][T22581] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4579'. [ 550.710783][T22587] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4579'. [ 550.748566][T22588] mac80211_hwsim hwsim46 : renamed from wlan1 [ 550.894641][T22590] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 550.948950][T22595] netlink: 'syz.1.4584': attribute type 1 has an invalid length. [ 551.088937][T22595] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 551.098906][T22601] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 551.144183][T22609] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4587'. [ 551.645223][T22638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4592'. [ 551.754388][T22638] team1: entered promiscuous mode [ 551.765634][T22638] team1: entered allmulticast mode [ 551.812302][T22647] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4594'. [ 552.451348][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4607'. [ 552.478164][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4606'. [ 552.539718][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4606'. [ 552.636836][T22702] syzkaller0: entered promiscuous mode [ 552.642471][T22702] syzkaller0: entered allmulticast mode [ 552.652975][T22702] simple: basic_1 [ 552.657089][T22702] simple: basic_2 [ 552.660775][T22702] simple: basic_3 [ 552.664481][T22702] simple: basic_4 [ 552.668190][T22702] simple: basic_5 [ 552.671862][T22702] simple: basic_6 [ 552.675522][T22702] simple: basic_7 [ 552.679415][T22702] simple: basic_8 [ 552.683090][T22702] simple: basic_9 [ 552.686957][T22702] simple: basic_10 [ 552.690749][T22702] simple: basic_11 [ 552.694512][T22702] simple: basic_12 [ 552.698304][T22702] simple: basic_13 [ 552.702047][T22702] simple: basic_14 [ 552.705801][T22702] simple: basic_15 [ 552.709599][T22702] simple: basic_16 [ 552.713347][T22702] simple: basic_17 [ 552.717133][T22702] simple: basic_18 [ 552.720881][T22702] simple: basic_19 [ 552.724644][T22702] simple: basic_20 [ 552.728448][T22702] simple: basic_21 [ 552.732203][T22702] simple: basic_22 [ 552.735967][T22702] simple: basic_23 [ 552.739775][T22702] simple: basic_24 [ 552.743542][T22702] simple: basic_25 [ 552.747353][T22702] simple: basic_26 [ 552.751118][T22702] simple: basic_27 [ 552.754922][T22702] simple: basic_28 [ 552.758729][T22702] simple: basic_29 [ 552.762485][T22702] simple: basic_30 [ 552.766272][T22702] simple: basic_31 [ 552.770119][T22702] simple: basic_32 [ 552.773915][T22702] TC_ACT_REPEAT abuse ? [ 553.435604][T22745] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 553.936223][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 553.944330][ C1] lec:lec_tx_timeout: lec0 [ 553.950490][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 554.122860][T22790] Cannot find add_set index 46338 as target [ 554.578539][T22819] bond11: option lp_interval: invalid value (0) [ 554.584896][T22819] bond11: option lp_interval: allowed values 1 - 2147483647 [ 554.604111][T22819] bond11 (unregistering): Released all slaves [ 554.725194][T22824] bond11: Invalid ad_actor_system MAC address. [ 554.745953][T22824] bond11: option ad_actor_system: invalid value (1) [ 554.760032][T22824] bond11 (unregistering): Released all slaves [ 554.838817][T22827] syzkaller1: entered promiscuous mode [ 554.944647][T22837] netlink: 'syz.0.4646': attribute type 1 has an invalid length. [ 554.967658][T22837] netlink: 'syz.0.4646': attribute type 1 has an invalid length. [ 554.993119][T22837] netlink: 'syz.0.4646': attribute type 8 has an invalid length. [ 555.063859][T22841] netlink: 'syz.4.4648': attribute type 12 has an invalid length. [ 555.218194][ T1809] block nbd0: Possible stuck request ffff888026ee0000: control (read@0,1024B). Runtime 210 seconds [ 555.229162][ T1809] block nbd0: Possible stuck request ffff888026ee0200: control (read@1024,1024B). Runtime 210 seconds [ 555.241315][ T1809] block nbd0: Possible stuck request ffff888026ee0400: control (read@2048,1024B). Runtime 210 seconds [ 555.252535][ T1809] block nbd0: Possible stuck request ffff888026ee0600: control (read@3072,1024B). Runtime 210 seconds [ 555.341943][T22860] netlink: 'syz.6.4651': attribute type 32 has an invalid length. [ 555.440452][T22860] bond6: option coupled_control: invalid value (115) [ 555.470247][T22860] bond6 (unregistering): Released all slaves [ 555.561946][T22872] pimreg: entered allmulticast mode [ 555.639291][T22860] xt_ecn: cannot match TCP bits for non-tcp packets [ 555.692050][T22886] __nla_validate_parse: 14 callbacks suppressed [ 555.692073][T22886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4660'. [ 555.739795][ T8679] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 555.756677][ T8679] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 555.767907][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 555.808373][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4661'. [ 556.088724][T22911] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4666'. [ 556.201720][T22916] set match dimension is over the limit! [ 556.374486][T22927] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 556.500023][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 556.512042][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 556.569159][T22932] netlink: 'syz.6.4674': attribute type 37 has an invalid length. [ 556.620142][T22898] lec:lec_atm_close: lec0: Shut down! [ 556.893642][T22945] netlink: 'syz.1.4677': attribute type 11 has an invalid length. [ 556.927324][T22945] netlink: 173856 bytes leftover after parsing attributes in process `syz.1.4677'. [ 557.253729][T22973] macvtap1: entered promiscuous mode [ 557.267308][T22973] macvtap1: entered allmulticast mode [ 557.302403][T22973] macvtap2: entered promiscuous mode [ 557.317246][T22973] macvtap2: entered allmulticast mode [ 557.526087][T22986] veth0: entered promiscuous mode [ 557.537024][T22985] veth0: left promiscuous mode [ 557.635975][T22995] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4692'. [ 557.643050][T22993] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4691'. [ 557.657574][T22995] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4692'. [ 557.687393][T22995] netlink: 'syz.5.4692': attribute type 1 has an invalid length. [ 557.709251][T22995] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4692'. [ 557.750322][T22995] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4692'. [ 557.794281][T22995] netlink: 'syz.5.4692': attribute type 1 has an invalid length. [ 557.847631][ T8696] x9: left allmulticast mode [ 557.866364][ T8696] x9: left promiscuous mode [ 557.871386][ T8696] bridge0: port 1(1x9) entered disabled state [ 557.891892][T22995] netlink: 618 bytes leftover after parsing attributes in process `syz.5.4692'. [ 557.975839][T23014] siw: device registration error -23 [ 558.154542][T23027] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20000 [ 558.330416][ T8696] bond2 (unregistering): (slave gretap1): Releasing active interface [ 558.781251][ T8696] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 558.790131][ T8696] bridge7 (unregistering): left promiscuous mode [ 558.921782][ T8696] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.934777][ T8696] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.945884][ T8696] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 558.959607][ T8696] .` (unregistering): Released all slaves [ 558.970656][ T8696] bond1 (unregistering): Released all slaves [ 558.984922][ T8696] bond2 (unregistering): Released all slaves [ 559.000684][ T8696] bond3 (unregistering): Released all slaves [ 559.024065][ T8696] bond4 (unregistering): Released all slaves [ 559.040288][ T8696] bond5 (unregistering): Released all slaves [ 559.054868][ T8696] bond6 (unregistering): Released all slaves [ 559.073078][ T8696] bond7 (unregistering): (slave veth3): Releasing active interface [ 559.088301][ T8696] bond7 (unregistering): Released all slaves [ 559.113329][ T8696] bond8 (unregistering): Released all slaves [ 559.131239][ T8696] bond9 (unregistering): Released all slaves [ 559.149538][ T8696] bond10 (unregistering): Released all slaves [ 559.164681][ T8696] bond11 (unregistering): Released all slaves [ 559.195332][ T8696] bond0 (unregistering): Released all slaves [ 559.222363][T23020] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 559.231517][T23020] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 559.301811][ T5940] wg1 speed is unknown, defaulting to 1000 [ 559.325559][ T5940] syz2: Port: 1 Link DOWN [ 559.391222][ T8696] 9: left promiscuous mode [ 559.478282][T23044] netlink: 'syz.5.4702': attribute type 1 has an invalid length. [ 559.623326][T23044] 8021q: adding VLAN 0 to HW filter on device bond11 [ 559.638405][ T8696] tipc: Left network mode [ 559.834004][T23051] bond11: (slave veth5): Enslaving as an active interface with a down link [ 559.866522][T23042] syzkaller0: entered promiscuous mode [ 559.879395][T23042] syzkaller0: entered allmulticast mode [ 560.142231][T23072] lo: entered promiscuous mode [ 560.150601][T23072] netlink: 'syz.1.4708': attribute type 2 has an invalid length. [ 560.159588][T23072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.176450][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.207206][T23075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.416091][ T8696] hsr_slave_0: left promiscuous mode [ 560.425440][ T8696] hsr_slave_1: left promiscuous mode [ 560.436506][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.444024][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.476069][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.494825][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.510994][ T8696] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 560.527746][ T8696] batman_adv: batadv0: Removing interface: ipvlan2 [ 560.557904][ T8696] veth1_macvtap: left promiscuous mode [ 560.563723][ T8696] veth1_vlan: left promiscuous mode [ 560.583074][ T8696] veth0_vlan: left promiscuous mode [ 560.740257][T23102] netlink: 'syz.0.4717': attribute type 1 has an invalid length. [ 560.762808][T23102] netlink: 'syz.0.4717': attribute type 1 has an invalid length. [ 561.100727][ T8696] team0 (unregistering): Port device team_slave_1 removed [ 561.175627][T23107] sctp: [Deprecated]: syz.4.4719 (pid 23107) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.175627][T23107] Use struct sctp_sack_info instead [ 561.306743][T23094] netlink: 'syz.1.4715': attribute type 29 has an invalid length. [ 561.628821][T23126] wlan1 speed is unknown, defaulting to 1000 [ 561.638178][T23126] lo speed is unknown, defaulting to 1000 [ 561.856233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 561.864313][ C1] lec:lec_tx_timeout: lec0 [ 561.870821][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 561.942066][ T8696] IPVS: stop unused estimator thread 0... [ 561.991438][T23143] sctp: [Deprecated]: syz.5.4728 (pid 23143) Use of int in max_burst socket option. [ 561.991438][T23143] Use struct sctp_assoc_value instead [ 562.224869][T23159] netlink: 'syz.6.4736': attribute type 20 has an invalid length. [ 562.234632][T23159] IPv6: NLM_F_CREATE should be specified when creating new route [ 562.325642][T23167] __nla_validate_parse: 7 callbacks suppressed [ 562.325662][T23167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4735'. [ 562.432825][T23161] syzkaller0: entered promiscuous mode [ 562.458135][T23161] syzkaller0: entered allmulticast mode [ 562.529053][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4735'. [ 562.845011][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4742'. [ 562.904059][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.910598][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.055923][T23199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4743'. [ 563.382014][T23215] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 563.583193][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4755'. [ 563.618652][T23231] bond3: entered promiscuous mode [ 563.624193][T23231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.644445][T23231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.652068][T23231] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 563.664503][T23231] bond3: (slave sit1): Error -95 calling set_mac_address [ 563.859762][T23238] can: request_module (can-proto-0) failed. [ 564.145751][T23252] xt_policy: output policy not valid in PREROUTING and INPUT [ 564.163052][T23252] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4762'. [ 564.173978][T23252] openvswitch: netlink: Missing key (keys=40, expected=100) [ 564.263824][T23256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4765'. [ 564.371529][T23264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4766'. [ 564.405799][T23263] veth9: entered allmulticast mode [ 564.484026][T23268] IPv6: NLM_F_REPLACE set, but no existing node found! [ 564.498355][T23267] IPv6: NLM_F_REPLACE set, but no existing node found! [ 564.660595][T23278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4771'. [ 564.670057][T23278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4771'. [ 564.695945][T23281] sch_fq: defrate 5 ignored. [ 564.779515][T23285] netlink: 'syz.4.4774': attribute type 5 has an invalid length. [ 565.048320][T23300] netlink: 'syz.4.4779': attribute type 3 has an invalid length. [ 565.068874][T23300] netlink: 'syz.4.4779': attribute type 3 has an invalid length. [ 565.332442][T23316] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.476526][T23338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.564655][T23340] netlink: 'syz.4.4790': attribute type 10 has an invalid length. [ 565.575549][T23340] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 565.703732][T23348] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 565.719179][T23348] netlink: 'syz.4.4792': attribute type 2 has an invalid length. [ 566.553833][T23401] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20000 [ 566.853408][T23415] netlink: 'syz.4.4810': attribute type 5 has an invalid length. [ 566.886278][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 566.894495][ C1] lec:lec_tx_timeout: lec0 [ 566.899752][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 566.941901][T23415] geneve2: entered promiscuous mode [ 566.947544][T23415] geneve2: entered allmulticast mode [ 566.954445][ T8696] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 566.964729][ T8696] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 566.995925][ T8696] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 567.050868][ T8696] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 567.082389][T23422] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 567.095593][T23422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 567.104561][T23422] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 567.114620][T23422] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 567.123578][T23422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 567.181793][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 567.191482][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 567.200135][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 567.250140][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 567.258963][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 567.375318][T23427] bond4: option xmit_hash_policy: invalid value (64) [ 567.386488][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.437694][T23427] bond4 (unregistering): Released all slaves [ 567.678467][T12471] syz_tun (unregistering): left allmulticast mode [ 567.735221][T23421] wlan1 speed is unknown, defaulting to 1000 [ 567.839104][T23439] syzkaller0: entered promiscuous mode [ 567.844657][T23439] syzkaller0: entered allmulticast mode [ 567.869493][T23421] lo speed is unknown, defaulting to 1000 [ 568.114537][T23455] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.392505][T23421] chnl_net:caif_netlink_parms(): no params data found [ 568.656401][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.723495][T23496] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 568.759965][T23496] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 568.900500][T23505] netlink: 'syz.6.4832': attribute type 83 has an invalid length. [ 569.310145][ T5844] Bluetooth: hci7: command tx timeout [ 570.377931][T23512] tipc: Started in network mode [ 570.383264][T23512] tipc: Node identity 0e232a565ad2, cluster identity 4711 [ 570.392083][T23512] tipc: Enabled bearer , priority 0 [ 570.444603][T23513] tipc: Disabling bearer [ 570.514291][T23421] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.526125][T23517] __nla_validate_parse: 147 callbacks suppressed [ 570.526148][T23517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4835'. [ 570.554002][T23421] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.564503][T23421] bridge_slave_0: entered allmulticast mode [ 570.574156][T23421] bridge_slave_0: entered promiscuous mode [ 570.584317][T23517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4835'. [ 570.697965][T23421] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.707998][T23524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.716897][T23421] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.725871][T23421] bridge_slave_1: entered allmulticast mode [ 570.767951][T23421] bridge_slave_1: entered promiscuous mode [ 570.903241][T23421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.920200][T23421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.944323][T23538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4839'. [ 570.997551][T23538] netlink: 'syz.0.4839': attribute type 11 has an invalid length. [ 571.005684][T23538] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.4839'. [ 571.168675][T23421] team0: Port device team_slave_0 added [ 571.210312][T23421] team0: Port device team_slave_1 added [ 571.344130][T23421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.352266][T23421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.379784][ T5844] Bluetooth: hci7: command tx timeout [ 571.381398][T23421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.422025][T23421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.429798][T23421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.457451][T23421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.621211][T23421] hsr_slave_0: entered promiscuous mode [ 571.628441][T23421] hsr_slave_1: entered promiscuous mode [ 571.798060][T23568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.880370][T23567] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4848'. [ 571.897101][T23567] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 571.907132][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 571.915231][ C1] lec:lec_tx_timeout: lec0 [ 571.920326][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 571.974040][T23567] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 572.049158][T23567] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 572.159058][T23567] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 572.260322][T23567] bond0: (slave netdevsim0): Releasing backup interface [ 572.275710][T23567] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 572.413872][ T8679] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 572.467172][ T8679] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 572.533401][ T7611] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 572.564514][ T7611] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 572.600701][T23586] IPVS: Error connecting to the multicast addr [ 572.686155][T23421] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 572.715218][T23421] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 572.739741][T23421] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 572.761468][T23421] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 572.769619][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4853'. [ 572.902765][T23605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4856'. [ 572.954759][T23421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.989984][T23421] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.021867][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.029091][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.079646][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.086899][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.232315][T23619] netlink: 'syz.0.4861': attribute type 1 has an invalid length. [ 573.289763][T23619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.299900][T23619] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4861'. [ 573.456966][ T5844] Bluetooth: hci7: command tx timeout [ 573.703419][T23421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.771281][T23648] wlan1 speed is unknown, defaulting to 1000 [ 573.800161][T23648] lo speed is unknown, defaulting to 1000 [ 574.171888][T23670] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4873'. [ 574.302488][T23421] veth0_vlan: entered promiscuous mode [ 574.323621][T23421] veth1_vlan: entered promiscuous mode [ 574.535548][T23421] veth0_macvtap: entered promiscuous mode [ 574.548655][T23421] veth1_macvtap: entered promiscuous mode [ 574.588565][T23421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.609138][T23691] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4879'. [ 574.615375][T23421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.639781][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.660348][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.709485][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.728035][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.855231][ T7611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.887556][ T7611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.965904][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.994139][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.165934][T23709] netlink: 'syz.0.4887': attribute type 1 has an invalid length. [ 575.538170][ T5844] Bluetooth: hci7: command tx timeout [ 575.623570][T23723] macvlan4: entered promiscuous mode [ 575.659465][T23723] macvlan4: entered allmulticast mode [ 575.666054][T23723] bond3: (slave macvlan4): Opening slave failed [ 575.728733][T23734] __nla_validate_parse: 4 callbacks suppressed [ 575.728752][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4893'. [ 576.028048][T23750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4897'. [ 576.205981][T23758] sock: sock_set_timeout: `syz.5.4899' (pid 23758) tries to set negative timeout [ 576.438038][T23772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4905'. [ 576.532788][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4908'. [ 576.577303][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4908'. [ 576.598050][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4908'. [ 576.647249][T23784] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 576.810697][T23798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4915'. [ 576.926153][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4916'. [ 576.936267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 576.944338][ C1] lec:lec_tx_timeout: lec0 [ 576.949893][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 576.987205][T23804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4918'. [ 576.998318][T23803] xt_hashlimit: size too large, truncated to 1048576 [ 577.435972][T23829] netlink: 'syz.6.4925': attribute type 1 has an invalid length. [ 577.560481][T23837] : renamed from team_slave_1 [ 578.072827][T23875] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 578.319557][T23893] netlink: 'syz.1.4938': attribute type 2 has an invalid length. [ 578.346546][T23893] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4938'. [ 578.825788][T23917] veth0: entered promiscuous mode [ 578.854822][T23917] veth0: left promiscuous mode [ 578.860418][T23925] sctp: [Deprecated]: syz.4.4948 (pid 23925) Use of int in max_burst socket option. [ 578.860418][T23925] Use struct sctp_assoc_value instead [ 578.861067][T23925] sctp: [Deprecated]: syz.4.4948 (pid 23925) Use of int in maxseg socket option. [ 578.861067][T23925] Use struct sctp_assoc_value instead [ 579.020150][T23925] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 579.040319][T23925] bond4 (unregistering): Released all slaves [ 579.524108][T23956] Cannot find set identified by id 0 to match [ 579.739429][T23974] netlink: 'syz.1.4962': attribute type 1 has an invalid length. [ 579.750351][T23974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.940386][T23982] xt_socket: unknown flags 0x50 [ 580.759023][T24028] Cannot find del_set index 4 as target [ 580.790934][T24029] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 580.917696][T24032] syzkaller0: entered promiscuous mode [ 580.935843][T24032] syzkaller0: entered allmulticast mode [ 581.030180][T24045] netlink: 'syz.1.4985': attribute type 13 has an invalid length. [ 581.050030][T24043] netlink: 'syz.1.4985': attribute type 13 has an invalid length. [ 581.097095][T24043] gretap0: refused to change device tx_queue_len [ 581.117956][T24043] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 581.148974][T24052] __nla_validate_parse: 13 callbacks suppressed [ 581.148995][T24052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4987'. [ 581.177496][T24045] gretap0: refused to change device tx_queue_len [ 581.184633][T24045] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 581.483869][T24046] wlan1 speed is unknown, defaulting to 1000 [ 581.501355][T24046] lo speed is unknown, defaulting to 1000 [ 581.781791][T24075] syzkaller0: entered promiscuous mode [ 581.802222][T24075] syzkaller0: entered allmulticast mode [ 581.957121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 581.965294][ C1] lec:lec_tx_timeout: lec0 [ 581.969990][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.197913][T24100] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5000'. [ 582.380859][T24111] syzkaller0: entered promiscuous mode [ 582.400165][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5004'. [ 582.411493][T24111] syzkaller0: entered allmulticast mode [ 582.461043][T24119] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5002'. [ 582.859908][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5012'. [ 582.904549][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5014'. [ 582.934832][T24148] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.5015'. [ 583.031944][T24153] xt_hashlimit: invalid rate [ 583.138433][T24157] syzkaller0: tun_chr_ioctl cmd 2164298801 [ 583.338345][T24172] tipc: Enabling of bearer rejected, failed to enable media [ 583.347718][ T8696] syzkaller0: tun_net_xmit 76 [ 583.353183][ T8696] syzkaller0: tun_net_xmit 48 [ 583.529032][T24190] netlink: 'syz.6.5026': attribute type 23 has an invalid length. [ 583.555270][T24191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'. [ 583.576032][T24191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.172973][T24170] syzkaller0: entered promiscuous mode [ 585.178988][T24170] syzkaller0: entered allmulticast mode [ 585.297526][ T1809] block nbd0: Possible stuck request ffff888026ee0000: control (read@0,1024B). Runtime 240 seconds [ 585.317607][ T1809] block nbd0: Possible stuck request ffff888026ee0200: control (read@1024,1024B). Runtime 240 seconds [ 585.328976][ T1809] block nbd0: Possible stuck request ffff888026ee0400: control (read@2048,1024B). Runtime 240 seconds [ 585.340705][ T1809] block nbd0: Possible stuck request ffff888026ee0600: control (read@3072,1024B). Runtime 240 seconds [ 586.580043][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 586.981522][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 586.989652][ C1] lec:lec_tx_timeout: lec0 [ 586.994464][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 587.203843][T24216] openvswitch: netlink: Flow actions attr not present in new flow. [ 587.264411][T24221] netlink: 'syz.0.5034': attribute type 7 has an invalid length. [ 587.432284][T24225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.573204][T24243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5043'. [ 587.657802][T24256] netlink: 'syz.5.5044': attribute type 10 has an invalid length. [ 587.692689][T24255] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5042'. [ 587.715238][T24256] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 587.851070][T24263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5047'. [ 587.886522][T24262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5047'. [ 587.903531][T24265] IPv6: sit1: Disabled Multicast RS [ 587.935938][T24267] vlan0: entered promiscuous mode [ 587.942888][T24267] team_slave_0: entered promiscuous mode [ 587.952433][T24267] vlan0: entered allmulticast mode [ 587.959534][T24267] team_slave_0: entered allmulticast mode [ 588.419983][T24289] netlink: 'syz.1.5054': attribute type 3 has an invalid length. [ 588.436986][T24289] netlink: 'syz.1.5054': attribute type 1 has an invalid length. [ 588.454552][T24289] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5054'. [ 588.475228][T24291] netlink: 'syz.4.5056': attribute type 21 has an invalid length. [ 588.522086][T24291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5056'. [ 588.923318][T24312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5064'. [ 588.952155][T24314] syzkaller0: entered promiscuous mode [ 588.958155][T24314] syzkaller0: entered allmulticast mode [ 589.140097][ T31] INFO: task syz.2.3170:17516 blocked for more than 143 seconds. [ 589.152304][ T31] Not tainted syzkaller #0 [ 589.174684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.198783][ T31] task:syz.2.3170 state:D stack:25480 pid:17516 tgid:17513 ppid:15989 task_flags:0x400140 flags:0x00080002 [ 589.232982][ T31] Call Trace: [ 589.238398][ T31] [ 589.243672][ T31] __schedule+0x15dd/0x52d0 [ 589.252423][ T31] ? __pfx___schedule+0x10/0x10 [ 589.260823][ T31] ? schedule+0x90/0x360 [ 589.269139][T24323] bond4: option lp_interval: invalid value (0) [ 589.275492][ T31] schedule+0x164/0x360 [ 589.280393][ T31] schedule_preempt_disabled+0x13/0x30 [ 589.286040][ T31] __mutex_lock+0x7fe/0x1300 [ 589.290899][T24323] bond4: option lp_interval: allowed values 1 - 2147483647 [ 589.298443][ T31] ? __mutex_lock+0x5ac/0x1300 [ 589.303553][ T31] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 589.310273][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 589.315472][ T31] ? __asan_memset+0x22/0x50 [ 589.320364][ T31] nfsd_nl_listener_set_doit+0x141/0x1670 [ 589.327667][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 589.333914][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 589.340892][ T31] ? __nla_parse+0x40/0x60 [ 589.345491][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 589.352023][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 589.357774][ T31] ? __asan_memcpy+0x40/0x70 [ 589.362492][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.369404][ T31] ? bpf_lsm_capable+0x9/0x20 [ 589.374215][ T31] ? security_capable+0x7e/0x2c0 [ 589.379363][ T31] genl_rcv_msg+0x61c/0x7a0 [ 589.384082][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.389269][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 589.395561][T24329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5067'. [ 589.395630][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 589.406701][ T31] netlink_rcv_skb+0x232/0x4b0 [ 589.414581][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.437111][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.442587][ T31] ? down_read+0x272/0x2e0 [ 589.447230][ T31] ? genl_rcv+0xd/0x40 [ 589.452566][ T31] genl_rcv+0x28/0x40 [ 589.458944][ T31] netlink_unicast+0x80f/0x9b0 [ 589.470468][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 589.475845][ T31] ? netlink_sendmsg+0x650/0xb40 [ 589.481477][ T31] ? skb_put+0x11b/0x210 [ 589.485787][ T31] netlink_sendmsg+0x813/0xb40 [ 589.490711][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.496100][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 589.501200][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.512985][ T31] ____sys_sendmsg+0x972/0x9f0 [ 589.522723][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.532822][ T31] ? import_iovec+0x73/0xa0 [ 589.548249][ T31] ___sys_sendmsg+0x2a5/0x360 [ 589.556437][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.576307][ T31] ? futex_wake+0x4ac/0x580 [ 589.581271][ T31] ? __fget_files+0x2a/0x420 [ 589.586111][ T31] ? __fget_files+0x3a0/0x420 [ 589.593249][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 589.599461][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.605293][ T31] ? rcu_is_watching+0x15/0xb0 [ 589.610919][ T31] do_syscall_64+0x14d/0xf80 [ 589.615871][ T31] ? trace_irq_disable+0x3b/0x150 [ 589.624003][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.631119][ T31] ? clear_bhb_loop+0x40/0x90 [ 589.636065][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.647300][ T31] RIP: 0033:0x7f9ffc59c819 [ 589.651881][ T31] RSP: 002b:00007f9ffd4b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.660813][ T31] RAX: ffffffffffffffda RBX: 00007f9ffc815fa0 RCX: 00007f9ffc59c819 [ 589.670058][ T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 589.679473][ T31] RBP: 00007f9ffc632c91 R08: 0000000000000000 R09: 0000000000000000 [ 589.687787][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.696086][ T31] R13: 00007f9ffc816038 R14: 00007f9ffc815fa0 R15: 00007ffeff430978 [ 589.705640][ T31] [ 589.712394][T24323] bond4 (unregistering): Released all slaves [ 589.723078][ T31] [ 589.723078][ T31] Showing all locks held in the system: [ 589.731469][ T31] 1 lock held by khungtaskd/31: [ 589.740433][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 589.752112][ T31] 2 locks held by getty/5582: [ 589.758016][ T31] #0: ffff8880379c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 589.768709][ T31] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 589.781938][ T31] 3 locks held by kworker/u9:9/5844: [ 589.787568][ T31] #0: ffff88807b9e1148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 589.799202][ T31] #1: ffffc9000400fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 589.812873][ T31] #2: ffff88805aaf0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 589.824145][ T31] 1 lock held by udevd/8514: [ 589.829399][ T31] #0: ffff888026e06358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 589.839797][ T31] 2 locks held by syz.3.1553/11646: [ 589.845697][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 589.863144][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 589.874897][ T31] 2 locks held by syz.2.3170/17516: [ 589.880468][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 589.889841][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 589.923856][ T31] 2 locks held by syz.1.5064/24310: [ 589.930135][ T31] #0: ffff888038c82a48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 589.940874][ T31] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 589.952299][ T31] 1 lock held by syz.5.5067/24321: [ 589.958026][ T31] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xefa/0x2ea0 [ 589.968597][ T31] 1 lock held by syz.5.5067/24328: [ 589.973750][ T31] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xefa/0x2ea0 [ 589.983345][ T31] 3 locks held by syz.4.5068/24323: [ 589.989255][ T31] #0: ffffffff90120980 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 589.999042][ T31] #1: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 590.008234][ T31] #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 590.054025][ T31] [ 590.056480][ T31] ============================================= [ 590.056480][ T31] [ 590.064946][ T31] NMI backtrace for cpu 0 [ 590.064975][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 590.064998][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 590.065011][ T31] Call Trace: [ 590.065020][ T31] [ 590.065030][ T31] dump_stack_lvl+0xe8/0x150 [ 590.065064][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 590.065086][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 590.065115][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 590.065139][ T31] sys_info+0x135/0x170 [ 590.065168][ T31] watchdog+0xfd9/0x1030 [ 590.065193][ T31] ? watchdog+0x21a/0x1030 [ 590.065220][ T31] kthread+0x388/0x470 [ 590.065241][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.065257][ T31] ? __pfx_kthread+0x10/0x10 [ 590.065279][ T31] ret_from_fork+0x51e/0xb90 [ 590.065309][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 590.065334][ T31] ? __switch_to+0xc7d/0x1450 [ 590.065362][ T31] ? __pfx_kthread+0x10/0x10 [ 590.065383][ T31] ret_from_fork_asm+0x1a/0x30 [ 590.065431][ T31] [ 590.065438][ T31] Sending NMI from CPU 0 to CPUs 1: [ 590.178892][ C1] NMI backtrace for cpu 1 [ 590.178910][ C1] CPU: 1 UID: 0 PID: 8696 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 590.178932][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 590.178944][ C1] Workqueue: krds_cp_wq#19/0 rds_connect_worker [ 590.178972][ C1] RIP: 0010:lock_acquire+0x95/0x2e0 [ 590.178997][ C1] Code: 00 48 8b 74 24 68 4c 89 ef e8 97 4a 8e 00 83 3d 20 76 70 0e 00 0f 84 c1 00 00 00 65 8b 05 03 49 7b 11 85 c0 0f 85 b2 00 00 00 <65> 48 8b 05 4b 03 7b 11 83 b8 54 0b 00 00 00 0f 85 9d 00 00 00 9c [ 590.179013][ C1] RSP: 0018:ffffc900101df588 EFLAGS: 00000246 [ 590.179027][ C1] RAX: 0000000000000000 RBX: 00000000000000a0 RCX: 0000000080000001 [ 590.179038][ C1] RDX: 0000000000000000 RSI: ffffffff8a28b0a5 RDI: 1ffffffff1cebcbc [ 590.179051][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.179061][ C1] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000002 [ 590.179072][ C1] R13: ffffffff8e75e5e0 R14: 0000000000000000 R15: 0000000000000000 [ 590.179083][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 590.179098][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.179109][ C1] CR2: 00007f53819e8c38 CR3: 0000000054f32000 CR4: 00000000003526f0 [ 590.179132][ C1] Call Trace: [ 590.179139][ C1] [ 590.179151][ C1] __inet_dev_addr_type+0x175/0x500 [ 590.179180][ C1] ? __inet_dev_addr_type+0x154/0x500 [ 590.179201][ C1] ? __inet_dev_addr_type+0x154/0x500 [ 590.179221][ C1] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 590.179248][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 590.179265][ C1] ? ref_tracker_free+0x522/0x840 [ 590.179281][ C1] ? get_net_track+0x16e/0x230 [ 590.179301][ C1] ? sk_net_refcnt_upgrade+0xb2/0x130 [ 590.179320][ C1] ? rds_tcp_tune+0x458/0x930 [ 590.179342][ C1] ? rds_tcp_conn_path_connect+0x2f9/0x930 [ 590.179366][ C1] ? process_scheduled_works+0xb6e/0x18c0 [ 590.179388][ C1] ? worker_thread+0xa53/0xfc0 [ 590.179409][ C1] ? kthread+0x388/0x470 [ 590.179423][ C1] ? ret_from_fork+0x51e/0xb90 [ 590.179445][ C1] ? l3mdev_fib_table_by_index+0x7f/0x2d0 [ 590.179471][ C1] __inet_bind+0x135/0xa90 [ 590.179496][ C1] kernel_bind+0x13e/0x1c0 [ 590.179521][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 590.179556][ C1] rds_tcp_conn_path_connect+0x53e/0x930 [ 590.179587][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 590.179613][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 590.179639][ C1] rds_connect_worker+0x1d8/0x290 [ 590.179658][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 590.179682][ C1] process_scheduled_works+0xb6e/0x18c0 [ 590.179720][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 590.179746][ C1] ? assign_work+0x3d5/0x5e0 [ 590.179770][ C1] worker_thread+0xa53/0xfc0 [ 590.179807][ C1] kthread+0x388/0x470 [ 590.179823][ C1] ? __pfx_worker_thread+0x10/0x10 [ 590.179845][ C1] ? __pfx_kthread+0x10/0x10 [ 590.179861][ C1] ret_from_fork+0x51e/0xb90 [ 590.179885][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 590.179906][ C1] ? __switch_to+0xc7d/0x1450 [ 590.179928][ C1] ? __pfx_kthread+0x10/0x10 [ 590.179945][ C1] ret_from_fork_asm+0x1a/0x30 [ 590.179980][ C1] [ 590.505023][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 590.511926][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 590.521070][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 590.531153][ T31] Call Trace: [ 590.534487][ T31] [ 590.537446][ T31] vpanic+0x56c/0xa60 [ 590.541482][ T31] ? __pfx___schedule+0x10/0x10 [ 590.546365][ T31] ? __pfx_vpanic+0x10/0x10 [ 590.550930][ T31] ? __pfx_console_unlock+0x10/0x10 [ 590.556163][ T31] panic+0xc5/0xd0 [ 590.559922][ T31] ? __pfx_panic+0x10/0x10 [ 590.564369][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 590.569774][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 590.575958][ T31] watchdog+0x1023/0x1030 [ 590.580358][ T31] ? watchdog+0x21a/0x1030 [ 590.584812][ T31] kthread+0x388/0x470 [ 590.588988][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.593683][ T31] ? __pfx_kthread+0x10/0x10 [ 590.598318][ T31] ret_from_fork+0x51e/0xb90 [ 590.602945][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 590.608081][ T31] ? __switch_to+0xc7d/0x1450 [ 590.612791][ T31] ? __pfx_kthread+0x10/0x10 [ 590.617401][ T31] ret_from_fork_asm+0x1a/0x30 [ 590.622206][ T31] [ 590.625412][ T31] Kernel Offset: disabled [ 590.629741][ T31] Rebooting in 86400 seconds..