last executing test programs: 7.304628715s ago: executing program 2 (id=7372): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000c0003006861"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000003010102000000000000000002000009100001800c0002800500010001000000140019800800010088000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40004) socket$pppl2tp(0x18, 0x1, 0x1) 4.867787412s ago: executing program 2 (id=7377): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.744505223s ago: executing program 2 (id=7382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0xb15, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10041}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="dddd040010fc0004f024c2e3555b9c4fa3d0625ae52c82000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000a00fdffffff"], 0x3c}}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000000000)={0x84, @empty, 0x4e20, 0x3, 'sed\x00', 0x3, 0x1, 0x5f}, 0x2c) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1c, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x1c}, 0x4, 0x700000000000000}, 0x40014) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2509000000050007000b0000000500080003000000080001000100000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="05000a6d72c6db9c37e1c1c6", @ANYRES32=r11, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80000d0}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000040), 0x8000, 0x4) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/159, 0x9f}], 0x1}, 0xfbfffffe}], 0x1, 0x40000002, 0x0) (async) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/92, 0x5c}, {0x0}, {&(0x7f0000002080)=""/4108, 0x100c}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000000)=""/193, 0xc1}}], 0x1, 0x0, &(0x7f0000003700)) 4.43279413s ago: executing program 4 (id=7387): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x4b}, @nested={0x28, 0x1, 0x0, 0x1, [@nested={0x22, 0x10, 0x0, 0x1, [@generic="2fecb5d76df447f1be5ad45b24006f7babe531e6303e5561e1701cf17899"]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0x80, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0x10001, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x6, 0x80000, 0xfffffff1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd5, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@deltclass={0x30, 0x29, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x4, 0xf}, {0xf}, {0x6, 0xfff2}}, [@tclass_kind_options=@c_prio={0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8) 4.352527377s ago: executing program 2 (id=7388): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @local}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe30d, 0x101}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000022c0)=ANY=[@ANYBLOB="dc040000", @ANYRES16=r2, @ANYBLOB="20002abdec84a45eb6e798693011aaefc81267752c9a8830fbffffff000000000000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="a40013805c000080080001006e6264000a0001002c2621247d2a0000080001006e62640005000100000000000e00010073797a6b616c6c657200000005000100000000000700010023237b00040001000e00010073797a6b616c6c65720000003000008005000100000000000e00010073797a6b616c6c657200000006000100247d0000050001000000000004000100140000800e00010073797a6b616c6c657200000008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x113, &(0x7f0000001dc0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0xdd, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}, {"a3d2b1c460a30d24d409232bfcce00c39e39f2ca7fcb8f59cdfc292bc85b39514246ca9e4e0e9df85cea5dcf5b4acc6342b6262ee5988f58e78cc3a122cb6c5e647c0ce145f821d81fea0dd625e5798b97f4b8bf3217cc6af46f59e59a468c744a273d67e10922cab5bad64a1834f53e9acfee66a4b4c4a74ebfbe5262e3d37e95ed17b631a1d5e7af6510d40814372d723478a8bb233a219b6bf6d7cfd3c2a9b4dbdaeb5f38861a11cd4faff7d2be7b2e65e4a4d4a41aed9e5447c4991aa4014e35d19555d537f7bb"}}}}}}}, 0x0) 2.62503338s ago: executing program 4 (id=7391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) getsockname$l2tp(r6, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@generic={&(0x7f0000000540)='./file0\x00', r0}, 0x18) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.300714574s ago: executing program 4 (id=7399): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x305, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback}, 0x2, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="ab54c14e91fb4334f5934651520db4b26f04d4efa167a934720a58476dfcf54943012d53b7ebe685879b00e49adefc", 0x2f}, {&(0x7f0000000140)="57eded878adc4f0af423e75186a5cb95705b9c534a660d168ddbd48a0c6d59c38990ad500bace570e4e16e91273564c10593b01137298d8998a68ea9cbc8962d18b16af3f60ba1b0bde3bec3314d2757", 0x50}, {&(0x7f00000001c0)="2b410b0e83fff4c44c42559d378573562e1807225909c3d7ba6ccc6cb2085ab84f12fafd48b8818723a588", 0x2b}, {&(0x7f0000000200)="d5", 0x1}], 0x4, &(0x7f00000007c0)=[{0x1010, 0x29, 0x0, "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"}, {0x90, 0x101, 0x100, "4087ad132494add7829f095381204fb95db2a21e8e609698e0608f3e23bd15bfe71975366a11da6cfdddf377bb7df368e8a236b64a0c99bd8f9c99474f27c2a6ba3c4f64e79950a402b377db50bd2b77a030ad28f43ea3b68e84622bd1d60ca715e9182e119513b8dfc058eb9dd3ab26ee177776a17459a643a88bb349"}], 0x10a0}}, {{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x2, 0x1, {0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x3}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="06f483e97efa28b239b091b543e23d5f4f4e9d535ef5bae1dce428102e54cc5b452c03a1cbb72c70ce175133ea601f003b503fff88845432651e378da8a9a23a7015b706b47fc2ea0c039d069ea9fb8edbe7c91567196861b8725408899f9d62f69a13cfe91dfb1dd246d70291725707fe9ae1b1492bd5c907b141227ef59c4db2a2275d524461d429af6d25087801eb515eadbecb7f717110b3bb7cc805242de471f126afc010035fa44f513cd8539c1be1c0", 0xb3}, {&(0x7f0000000400)="861a7bfde8825f0953cdee23f53521e9", 0x10}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="40000000000000001801000005000000f738a317b62c72e9b6827c48d8de7c8dab0503ed2420463dc43cef70ac7bc2204c2f03734294ab736600000000000000002cdb91aa5921a91253bfb5f0a7ee82c2f6f1fe9375c9e28076fc5ed74a62835ea40e874ca0c24f09940005b60295b36a83481bf6190a4ff8929ef8403c026de6ce27eab069f54e34282df455a714848a8893523580f7bd90bab2a1d64d23a712dd86c32bba86719c5a8150cac9368c5d16526d2288841d4824229985793b85fb0465f6de8475e964b4fbd963f990d8cfb9e639748df34219db29b9dabcf3912f03423053190101f35a67b333"], 0x40}}], 0x2, 0x24000800) socket$nl_generic(0x10, 0x3, 0x10) 1.259973035s ago: executing program 2 (id=7402): r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="b5a1d47aacc62bfcdd791de7422d228910f17a3376e327c122a0eaaf2380077d1861a69b6b12c8dcdf41e62032f6ec8c7633ce8945b21f326072b1f4bcf5453122989db340c6835971880dd537d6ff9d0f3d46d2ed9876c6503fcd78e7830d9aaf5a365cfc8bd76dacbfde6fb6486c9d067014a82d770cbe3333c8fa3e532fc49b8f72f9fd7ac5788c5d4c294115376b3924cf1cff687880d84eea3384e9604cd412590c1cab217dfa04f983962a073589c88cdafc6a924ae8ed45785ccc740bce8a2b56800d536f55a048885fd3fb485cbdd700ed8f12246239", 0xda) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}}, 0xfffffffffffffd46}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'batadv_slave_0\x00', @remote}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800e000100696d6d65646961746500000024000280180002801400028008000340ebffffff07000180fffffffd08000140000000000900010073797a30000000000900020073797a32000000"], 0x90}}, 0x0) 1.02137246s ago: executing program 4 (id=7406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c0001"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x8855) 900.661709ms ago: executing program 2 (id=7408): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x6328, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002063, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000200)="7d3a3c0ad486a9b1e0541c9409f2f98cea95ba691b537fde5b585ce7a61f349231bff2b1e0dfdf172d3285c31b14a85769e0ea7dd5b4fdd3315ce7933791528ab557f2361bb7c08726f7bce44044752626fb7d46725a3ce5bbc2397da54cd80d6669a90ee6", &(0x7f0000000300)=""/164, &(0x7f0000000040)="04356503b19ba615dab00a8e58c2a320051f07d08e105537a5d12660c5a6b2ff1cd755664da8e2a4823cebac37d0a3555a1b52", &(0x7f0000000480)="7b2aa603598c4613b4ad2a95974eda317c72f6b6f61562aa339806e11e43cb619d3f2afca0e9f5a6c2df9094d37787585b311926ee9b26af7738a337b74df5ed61a271b9330fa098be5ef06bd4c1e52de4e163e9ffa00a8b47faaf6c17211ac0adb388362a3c464d61ed1ac85b9aae52e8fcab07d69dca242c744212ad017a01d8c92c05dbde", 0x5, r3}, 0x38) 796.2169ms ago: executing program 1 (id=7410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x2a, 0x300, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x140, 0x0, 0x1, [@typed={0x0, 0xc4, 0x0, 0x0, @str='\x00'}, @typed={0x0, 0x3, 0x0, 0x0, @binary="1eba4829000627e1d01655095c7df69031ddc637bec7806ec2aff53ca30ae2de57d2fc7e1b89a14645f4237a8be1cfc73bce3d5e79fde6f092d0abdbc4"}]}, @nested={0xc, 0xd2}, @nested={0x24, 0x2, 0x0, 0x1, [@nested={0x20, 0x17, 0x0, 0x1, [@typed={0x14, 0x84, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0xfb}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4004015) 740.934012ms ago: executing program 1 (id=7411): r0 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0xe) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x858f, 0x1, 0x5}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) (async) socket$netlink(0x10, 0x3, 0xe) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x858f, 0x1, 0x5}, 0x10) (async) 661.34216ms ago: executing program 0 (id=7412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000001480)=0x2, 0x12) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 631.918529ms ago: executing program 0 (id=7413): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) 501.383119ms ago: executing program 0 (id=7415): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x3, 0x3}, {}, {}, {0x60}, {0x6}]}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x49, 0x0, &(0x7f00000001c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000190001fe000001a800000000000000000000004671d1891a38087286c9ef83ac90d7fd66679806d6adcbb3489e6137a84336526edbcbc523941b69b22cfa7ee9ef078cdb4cc16ae07f9da49e85dc5257f63eeb1c6f5eb1609d22c20d68252f479fd20e83b47a7ca90df470c75ff17b5f9bb0986d94338c7031c8f324e361aad230dae9890b55fccaa273978f575cc82fa7994b2269bdb57f27a21daa7376a6c5a802ae4843e9a3342b8f702ba5b9010ce6feb2a6ac5cdd42ed5a4ff4d5e0e2aa09ff4258209c7a1c541dc3bc6fdd654e915cd5", @ANYRESHEX=r3, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000200)) 500.830031ms ago: executing program 1 (id=7416): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x7, 0x78, "c01edf218bb3d1bcf639b7f9e81f39971f08fd952f75a344792c4de94ece9d310d2aa7d1c25451874ac6e92befb4f5fd46edeee4852c4728b544e24f007848", 0x2b}, 0x60) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x7ea8, 0x8, 0x101, 0x2}}}, 0xb) socketpair(0x31, 0x9, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xb9127245bbfc1360}, 0x20000000) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000280)='TIPCv2\x00', 0x7) sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, 0x36, 0x300, 0x70bd2b, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x36, 0x0, 0x0, @ipv4=@remote}, @generic="6c47a8ab9b87dfca5a4f9b2f35ae667a9f96ee0d80629dddabed09f66cd63f4df1c42c01c0208cdf04f25a1e49a1e41fad65ba2f488f70b29bfe4f830b20f7d82b64d46ffe53df5c6a72b013fcd3b103c7a9cc80811cabe3f92a43cff53ae5deb4c9b8f7a522a652233fadd3511de592b216725bad6b3e0150b52eb440ef1644f3bfa9f0d89497519662e48241e6c54b281aa15640e824bea55d79380e989d38d8eded16bb47fbf9e0a52c835d3ae12923aca0769a805360172e8412d3e804af7d9c48688d4510baef6aefda5de8c863bc1c0c9002415f"]}, 0xf4}, 0x1, 0x0, 0x0, 0x890}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r5, 0x25, 0x3, @void}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000600)={r3, &(0x7f0000000500)='team0\x00', 0x420100, &(0x7f0000000540)={@_ha_fsid={[0x7, 0xb3]}, {0x0, 0x7, 0xfe, 0x401}}, 0x7, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x6}) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000740)={r6, &(0x7f0000000640)='\x00', 0x109000, &(0x7f0000000680)={@align=0x800, {0x7, 0x2, 0x1}}, 0x5, &(0x7f00000006c0), &(0x7f0000000700)=0x4c9}) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x2, 0x6, 0x10, 0x3, 0x5, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2a, 0x3507}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x28}}, 0x2000c041) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000840)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r7, 0xffffffffffffffff}, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18}, 0x18) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x601e, '\x00', 0x0, r7, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x8008, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x23, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, [@exit, @map_idx={0x18, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x324}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd={0x18, 0x5, 0x1, 0x0, r10}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}]}, &(0x7f0000000a80)='GPL\x00', 0x4de8f6d3, 0x97, &(0x7f0000000ac0)=""/151, 0x0, 0x0, '\x00', r5, 0x0, r11, 0x8, &(0x7f0000000bc0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d00)=[r8, r12, r13, r8, r8], &(0x7f0000000d40)=[{0x2, 0x3, 0x3, 0x4}, {0x1, 0x5, 0x8, 0x2}, {0x0, 0x5, 0x0, 0xc}, {0x4, 0x4, 0x9, 0xf}], 0x10, 0x9}, 0x94) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000e40)=0x65, 0x2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000e80)=r13, 0x4) ioctl$XFS_IOC_FSGROWFSDATA(r12, 0x4010586e, &(0x7f0000000ec0)={0x8000000000000001, 0x851b}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f00)={'veth1_virt_wifi\x00'}) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000014c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000000f80)={0x4dc, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x539b}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "b36c91bdafc392df4ac671c03126662f55e01e8ca5966a2e02d4f1"}}, @TIPC_NLA_NODE_ID={0x43, 0x3, "9735e78c2aa6a4c69a78c1d82e87b2d83e262787f2c0c4b8394385020c8753274ede2571ac674b55b25873d92930a236b71aad125337b24a6185df7eaf4d8b"}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x345}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "19f0b18d2915073f8a912e70311ebb1da3c94a5327eda68d9e72516cc932"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x4b, 0x3, "13654b4fd8ff351ce9bdf569ee1b5292a9631055722efcdfdf1903f3c96a611b0d9b23cb2b18f6073e3803beb6ea3a939db9fb01f2fba0b326f35b8b364718a9463536124aa284"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "47f2715c8bcebf936568ed3fe4fef3b6dfc7f35a5030e766fa"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "32199c2d2f710aa16e6c42b38237cba2d762582ff58e0b7d8adac682584506dd7f39fb69e79681b90b3556d5c4318b1a4d06986b831902d8ce93dbc96c50ecaafe8bf90d8d5d33ad2234547b5de9514fa99873ebef1cca1c2b480ad16baba3244e8faee79ab965ccdfdba3d83fdcba479d42dac5431c71a87af807d364784712db670a82afa2675d35fab2cbf88d289af9781c94bf801e5472c1a43c286df91bd51f9f7952db453bab920adf87ba530100d38e0887c3e9f74790c3"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "39c6b633422f6b5839046b8ec9dd7c0f9272b7839775de5da05f60c00d9c0f4e59"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5fd80d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @empty, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x59, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1bc0000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @private2, 0x4}}}}]}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x2}, 0x20000080) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000001500)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r14, &(0x7f0000001580)={0x40000000}) sendmsg$nl_generic(r3, &(0x7f0000001880)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xc4, 0x24, 0x100, 0x70bd29, 0x25dfdbfb, {0x4}, [@typed={0x8, 0xe9, 0x0, 0x0, @fd}, @generic="392e55b6b02e041e2651dfd55c7d1af143b165d85d67f8edf7a1cb99a819806a455d0fecb711c85e8d41d5e84bd6d7088bebd827062cb008c57d9084cb12326266451014424b4b26", @typed={0x4, 0xc7}, @generic="ee4eca7108752ad3cac480b68e1458ef92c9b5e818be0eedb7f79e3e2b853366ad37ecff75834938fe3ace9c5a7ab6086e799c185f98c277dcc44771c1eda903e9530d8ad2ae9edb58758d3639d811e86f9196bcf31a442b1c"]}, 0xc4}, 0x1, 0x0, 0x0, 0x480c0}, 0x24008001) 339.323761ms ago: executing program 1 (id=7417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x110, 0xffffffffffffffff, 0x215eb000) (async) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$netlink(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x52e) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYBLOB="abf532013254cefe915327b5a933d338de776019f80d1201161e58741631575d263e8bd00bec9ce1f96f1491de72108828fe2ca1d02e5a537797eab409ac5d1d091327ade2d92c1091f2c4a445ef4535f74597ba7fcd764f23", @ANYBLOB="06002900071b7dbf7700168008000100", @ANYRES64=r3], 0x38}}, 0x810) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) socket(0x28, 0x4, 0x81) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 338.901886ms ago: executing program 3 (id=7418): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x8, 0x87a4, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x66, 0x0, 0xa, 0x29, 0x0, @remote, @multicast2, {[@generic={0x44, 0xe, "db6bb842ba88194424717f2f"}, @lsrr={0x83, 0xf, 0xa9, [@rand_addr=0x64010102, @local, @remote]}, @noop, @lsrr={0x83, 0x23, 0x5, [@multicast2, @multicast2, @local, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, @loopback, @broadcast]}, @timestamp={0x44, 0x1c, 0x9c, 0x0, 0x5, [0xe, 0x5, 0x3, 0x829, 0x7fffffff, 0xffffffa5]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x8, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffe01}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], 0xfffffffffffffffd, 0x6, 0x7e, &(0x7f0000000100)=""/126, 0x75e516715b33cefd, 0x0, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[r5, r6], &(0x7f0000000440)=[{0x5, 0x5, 0xb, 0x9}, {0x5, 0x1, 0x1, 0xa}, {0x1, 0x3, 0x9, 0x8}, {0x3, 0x2, 0x6, 0x4}, {0x5, 0x3, 0x4, 0x7}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0xf}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x35, 0xffffffffffffffff}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000540)={0x2c, 0x3, r3, 0xb}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000700)="cc58498f9e8864fd432cb15f0bf2b3989d79032ffd2b7616212dfad86a42d2c5d4a204b88387e04dd8e380a5033f9aa62a0d470fddfc6eaa7606827332a1630a57c57fecd74155a78a57637673b10eb200c7851dfa3731e88a8fbb4f4ff68e05cafd196032ac4fda2d07db2205c50f569e7c75069fd2ab3c65433b4b75559a0d10ce7a49ed9e4584e106dc04241c99b9eb1ff1597fac021b2e2886709b489bd5f24b75abb6f317dc5c4b93558817eb3198abd8a94c40d82939a6ffdebc112b00311e8b3d88901c7237", 0xc9}, {&(0x7f0000000800)="dd1299399cb46a9ca4e36b0669e478aee50e444e654859e74956e302c351a44ae58eec5f554f44543995446aee1f5ddc2dccd9f5a41fc2fe1b8f4dd55b954ccbd63d5ca096ab785b69a65c1fe39ae6f6dbed39fbc8463762077f0d0fb259dd87275c9775722ae20f65c635ea2fb5135c610813d1206f2a45939cb276e66a66ea107ad231cacbd739e452adf903f71f8636e552f52a1ce55d7122ee50621bb3b99354984c23fdd859451d4cfdd6844a62ca32227b1129300185a2b87aa927540edf8f5a31c0d78d07cefae7ed73a4460f116560bfa6b1f7b444c71ab29c93879a0d", 0xe1}, {&(0x7f0000000900)="7f3633306e760bdebf52098f0de38ad9e8f731959de2b90214ed6cc7a71b8b387a809c29a293eef6a20929bbb33146cc882654f7ff444fa73adf06ebd698644d33a1c0c50612d25834bcfe507dd46c", 0x4f}, {&(0x7f0000000980)="7714ae33da59ba80fb37f10482b40da9874df28fee1603f837553be1de582b4024b3ec61f45d0709b3acad1cec341e88bd8f487f215d40abc93ebeb66083e875efd9ad8813c6077c7bb9495cd9e5dfc8378b9e5b9e68be0b4ae335a9449f89135b76c14850f025b5572b79e97df06f2d4be389e8380f7e5cf41dfb651a6def28b55be1266a25e0572a4da165d94d8859380dfef34d2e802b9a87af429ab2f63fc4644924a17245d61abac01f1861872ccff2eb75b0a44257e2d6", 0xba}, {&(0x7f0000000a40)="7a4c999666dcbe5139e69a750f551d3929565efdd167491e1e464f38e11c41299c07f5ca8ac7e717cffd7e0d4dd74ceb31eb797fd3a4015f7ecfc04fa233726d5798a94d77b81eee2ea4c8118767690605bcf763c355875c13ffba5fb8481d05b4d399e610de0e0225048fda1567d41a7a0d95dcc99658685d4280b898bbf26b517c786f07e62c81e4afe4f6afcdab16b5d32dca296ef1f201e66558a98522527d04a2c7521beb31fafd0ad72020914ada4a026ec51c1e67348a0c", 0xbb}, {&(0x7f0000000580)="b2e44637a790536396f7eb695ce41c7a93da8c97d2371b2216", 0x19}, {0xffffffffffffffff}, {&(0x7f0000000b00)="8b56b536f9bcb29ecca9b06a3399e716ab018273647ece78a8b6f61da56a655d509f1315437d6d894014dac613c0f511762a29e8df7724f2dc8329bb28bd31fc3f4277984b52865f837420c3c7459a5d18717772e97494fd9884afd58b73438d1fb3380b91e3e32ec39bbeb4fb11565b5c58e3c1ed8dccd9bcedc4fdad81ae581e6af243effded8d01a50f8970006c8206d3d45580346fc289a3cc05a42f2e4b8d47aea0a2a0618ddb0de6ffa33c486b8f301f3f", 0xb4}, {&(0x7f0000000bc0)="3d7619b885b5a0ae3474833abb356f4a41785c494aad82e19c4aad07d760268cefb9e2090234f235601202feea751a6fb55b27107c6f3d3eb85a5005e6", 0x3d}, {&(0x7f0000000c00)="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", 0x1000}], 0xa, 0x0, 0x0, 0x890}, 0x4840) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) 338.777147ms ago: executing program 3 (id=7419): sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0001094ce49b85cabab3218cca2cf9664b61ed3246c0e0286e3cc606998796d8b55b84239c885dcf376c4941b32094", @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250800000008000c0002000000080004000300000008000700ac141440"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140c, 0x800, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000080) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 337.153591ms ago: executing program 0 (id=7420): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000100)={0x400, 0xfffffffc, 0x4, 0x0, 0x6, 0x5, 0x0, &(0x7f0000000200)=[{0x9, 0x1ff, 0x1000}, {0xa, 0xfe, 0xc}, {0xe, 0x1ff, 0x101}, {0x2a, 0x1ff, 0x4}, {0x11, 0x101, 0x1}]}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000a00)={{r1}, "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"}) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@multicast1}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write(r0, &(0x7f0000000080)="240000001a00590214f9f407000904101f0000000000000800040a01953ee1ec0200f7bc", 0x24) 336.425007ms ago: executing program 3 (id=7421): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 322.186439ms ago: executing program 1 (id=7422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$FIBMAP(r1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="0600ed00d90000050029000c00"/24], 0x34}, 0x1, 0x0, 0x0, 0x24050800}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) 217.310655ms ago: executing program 3 (id=7423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0xfffffffd, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000000080500000000000000000000000000840004800900010073797a310000000005000300000000000600024000020000e90bb89aeddce9b0356852b97718628bb0529e1ad16347a2d6dd2c1aa881c4110a008df42d33f2eb9552daf5a48bb77a89440c3ba883df0076588ae57a2d6d48ad4b4c25821530a67aeb6d922e0d0b1c79133a4a5af68fbae5a411d2a8b92fd4ca318c9bda55d1697d6c4dfba42a13ce3f33e528be"], 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"/1090], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0xfffffff2}, 0x10}, 0x94) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x7c, 0x1, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xa1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) (rerun: 32) 216.540099ms ago: executing program 0 (id=7424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) syz_genetlink_get_family_id$nfc(&(0x7f00000012c0), r0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000064000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61147c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x23) 167.949928ms ago: executing program 3 (id=7425): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008"], 0x60}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 157.559ms ago: executing program 1 (id=7426): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x81, 0x7f7, 0x30, @empty, @loopback, 0x10, 0x7, 0x1000200, 0x9}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000d00)={"c4d94279b44655519bb2d7875fe918a9", r10, r11, {0x7fffffff, 0x5}, {0x1, 0x9}, 0x9, [0x2, 0x0, 0x3ff, 0xf, 0x8, 0x100000001, 0x7f, 0x6, 0x6, 0x6, 0x3, 0x5, 0x2, 0x8000000000000000, 0x6, 0x7ff]}) writev(r7, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x65, 0xbe, "f2bdb36c7ac5cb27db579a78ae357acb601abdc2863be2d2987fd67eef839f324b2b4c018561e2dbe112aea9977ef6cd020be48fa290ee204659f149687b96adeefa66a0c037cc0183ecd4cfd33117067b61531bb430c89f5cbe94b7653c1d7a54"}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ebc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0x0) unshare(0x6a040000) sendmmsg(r0, &(0x7f0000003700)=[{{&(0x7f0000000240)=@hci={0x1f, 0x2, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x10}}], 0x1, 0x80) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x1f8, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x44820}, 0x20800) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000700)={r7, &(0x7f00000005c0)='syzkaller1\x00', 0x101502, &(0x7f0000000600)={@align=0x80, {0xfffc, 0xbb43, 0x2, 0x6}}, 0xb58c, &(0x7f0000000640), &(0x7f0000000680)}) write$6lowpan_enable(r12, &(0x7f0000000740)='0', 0x1) 89.536672ms ago: executing program 0 (id=7427): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$unix(r0, &(0x7f00000001c0)="46a0f7cb197a688c67d0138944962844c07f03d9e8e75f3d74398b53aed5868db7aab74949dff7fe234449393823ca5a36006add537727c087b0c37a6f2fccfd76b7106d9231b7280c4ae8866703763ae88ddc636b4dc10b6ed27e26d2d895fc866fa08b928a4e8918f3b3be2cceaa248bd1355108f13fafe083a945d4a918cd2a8fb0e794", 0x85, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 89.33272ms ago: executing program 4 (id=7428): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x4c, 0x0, &(0x7f0000000300)) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 54.590235ms ago: executing program 3 (id=7429): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x82) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x4814) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'wg2\x00'}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000500)={{r5}, r6, 0xe, @inherit={0x68, &(0x7f0000000480)={0x0, 0x4, 0x7c0, 0xdf, {0xa, 0x8, 0x5, 0x8000000000000001, 0x9}, [0xdc0, 0x4, 0x4, 0x0]}}, @subvolid=0x8}) (async, rerun: 64) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000001500)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x7, 0x5, 0x9, 0x4, "cbbe16814ec1ee55dbe69fde23d7c22ed6c898fdbaaaeec38426813910cd7d6d83627b05ab9228eeae5a6f82909c1ec0cd2694479e3c06e53e19738e82fb305901bc5cb478c203831f32ac0161966e2eacf80e195169b721ec5c4ea73f03aaf2b731e95250412126636651940624e84b44a7d8a5938175f540b2ae8361edee3b"}) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x54, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x58}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x240008c0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x46}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008881) (async) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000001840)="6d3a4169712caa128b5a061efd8d7fbf8213192e43a45be5d59df5b6b61f8ca331b313ee6bfb569d2ebd62abd97c923328230dcacaeadf7f40d340b94e43c17dacc81760c635e2f639fc6da8bf6ff2cb0d740239c1465184e20267094fc37c8f586c26e80ab13b46bbbc08a25012a00c1a3e8a4820345e9f363350c76a54486203734fc5c4b00c179fc2f234b6aadb03a677710247819cd8cee049db894ffaa81200edf3269fa350723b5d0e09e966b87f7acc5c37523530c8bb98538a64f5fa928981f78796479c7f87dc600cc997842ea4616596356923e0839abd4e44327755de6e3119a29e7620e7ad471c71e25bca088d5d432179bbe7b460830fe54362125f94310ce603cf34722bbde652e3905c91d7297b4fd5decb3440eec1814fbc79c0957aa8366032952c904aedf9cfb80fa129a04cbede691cecb4a92c696dd04da6f7c0e6e45edc04362028a524476827f43668434395d1c8ec79d2357418917bf6141ca7eb96c37f0ae5c55402196e5ed8f55c2fd56b3ec9e2041cb69b58b4ce5f01ccf9a57651ccfc355190b1c02e7500a60e9aab611b60ba854c1342fb858ae5b9b9cc6627beb43936bb3aef19ebd37241e8efa4558db5677af66c837166154a2cf2cc7196b2c7adccef76085a84bb4f20aa93d377f30d667b97e734896e170c1420d3983bb16e0163fbf47330b12c38379066e5b15fce835f6ec02596eda496a3c1d2a7c4a00c9c02be93cc5e585487ebfa1fa7a92ef71cbcf0d14a4edcf061919e65f1384a5f3719ccff4c7bdf836bd68c2568255e8d8c07e006e45d86b165c062cfc3ffb9240c7b24f74ec91ee01ec5f08978b7e53e4425f11917c7b4a3685ea794ee56212ccf0b765fb5349aa4952458c102d16c6075c09ce5e1a54a2171c6605885739afc2b8ddd9949ce81d8dc29ccb7d824b7250db68494512f6cf68c616d437da29a18ce6344bb060d08f98c1e7b001eeb09c11c42857eb77f7258f95b4b992aea1049be0aca080c908ca5a0924d272a11cde617743643be6a5df80b14e55b9fea16b6009b3142c23730e6880f5ca170710991b8dced4aee1b43b21a2b5d300935239b2c92695726de156870f3da1307d78c5ca5f08d2289c6f1e1d57e7390664429b5d47dc9b968ce7c8052c628d4ce1418cefaf5681032c4d0bdf29def2ec4de46463bd42352e83f288f3fc20384497fe76d85908b093ab0dc7e744fd1d78c48eb5769010b43fda824467a92d9f76acc21556cbdcdf8af72ad5b3a0fcd8f21356698f0bfae95b599b5eb4b12131f36ef8f86b1d5ba47061a1c27cf9d10b015b429ed46355ca9dcba56612df5a5b1d84e6a8691a098b9d49789fe0ea9c56696e16a13a7e196879725dd4a4d558b210569b4f34ddac16561c15feba76c8bf29d7cdec91c6905e803eddf5e9f19ae91bcbb4ad13b4cae743d48c215a041dbc2c92f2642c77317dd64daefb6f4021a018597eb8b1522ffedc88df3609563bf4caaba9f3a289566957c0d824002801146085a5290306c64fd43d7e689957299c00f80831931f5e9db40e4f009f48204d4e024adcaa5a99449e9d6e4be320095aa48e98c847043245768930563696f6f7980ba4007145ad35691da9885d719f8cb30b52c596f38bd1a738ef51931c63535b580c3f39fd0c592f33b4b1aacade1d71fef149c02d5cc091125fa3aecbf268967fbf36d12374f7470915dbfbfd58a9307f97a399108004dee6f3c1f23676bc8380341e0d443c7782de2474f11aead11949f66e0802b730b34e2993b157423641754a1eb80a1fd571770e46cc00c5d2c3356d318348008b48246414f341b42f9add2f042854df2cf5cd632e8113f9b45ec96e0a996df2a0b7d553393f2e28ae95d77a1b6ae5fd825ffda058e55e7dbb1301f11522b62ae273473bd6e98f1140a3219113cf61f40d8f783970a3451b20e0a04bfd95c0e00ba27ff3e55b10c149c82d4453274fd66ad1e5975dbe2dc00d6bdaa701584dd133c250e5aeb4bffedc7e04883264ed749efde444be7b621f5fa14fbc6fec7c323aed21bca8addaf312b56065d9a2d8ddf07b9eda36f8abe97b2d153525c6f1e7a4d1d94d7d85299cdf45f284fe6f75f01b0bf9cca762ef1f68dfd9f9b329f82d97c12e2ce926224cde300242617b63b727a25500a69d8252439184042e721dc4ada116ed1116165bd357a9edd65b9cc3add4c0c4550f9fa82d9db18e697241cd58af43a21803e9d61a1aea0892e8358458ccddc40db007ed528653b41bd20b447dc13df39a4a80479976d7bf04d9ed9d6ec6ff6895db074b4dd39585bd9b00efca5b3e7398b0d4f5338a5f590d4fb5cfcc9481b5fd4b87158bf57210f6ec7db92e3bba09a775bf42309310f3aa181e9da57130b97f05de5c0fd476362b51b38b38ad4cf4d3f6abbf6d51ec1c56ca85b0c0c85b7dafd8b725a7914e38acdde51e5479abf510ddff938176d125a66b642740c27b61aaff24b64fda98b82bf1fb479743eb5b5fc3d6426ac0dc1923b036515cdb85dfd7a4044fcedd314c128ed8344839f208bf729feaf8c340cae541e7151ba6b6f2e90e6ebf8c52ff5d86f6eba1a284c882b69b764c2badc1cf8badbeb94036c3c89322eecaef64115810a59f663796e6617564f24e2ec7c0726c15e1e0b5e4df74bf9b10530adee409424cda78e5933b045bd79f36e62b0299be127a2dd587be5d04bcba9943fce869e26b42667791e7caf52b6435ab637f8d8becda00192bdc02fef5f36a553284262650330100ecad17a30e172eff316599f58d45b10ab0e6bda82911cc900d9dd9b227ba816340bc40c8c09a00fdc4e5a15ffca44ff03a00f9a33eadfd0f5c2dd27df44ca7e9a1a82a165afe01244452db2d09668a457b98a9d6c1e325e3aa8d4bf5aff2614e8e983e8da2a726f52f330afeeb6cc8afe71438f15b5c0b080df87681d7399be6e4f4347802ab3e058ee7fdccfce6f6adac417fe595aaef2c059784e983db468a6e63aceeb57fccfae1a672c3746cb7189ca78d0ef7b745dfb2dbfef489ea9f81ccc1e09ac5f6f3bab4bcca64df10784da6578013eb7fbcc497a96c0bffdfd2dd2939d660ee92c4a43e057b4227efab235555f57b0d08c6bc0f278b6f872147d1471f765d7f3d8ce12cf198f013fda1c7f05542f2ba49650284c72334f66d100c39248f7e7d2e5546ef669b2967e77725f506a98c5fd625f66fe5ec8dddb5d27baa43b87f6270de80105fd7ea8c81e2292a6b172ff4b70dd59a8a7e2cd094af3782707ca072714087cfc6d4167b60b329a9fc380744d84ec84367efd8d409b1325bdc2516f0fedd81e933aee1f60e8a5e62469f23acc8eb08ae4703efb8347e4a88f79133bbe805a0081ecb351fe53812003e3b40f3053e9a3c3dc9019ba8a4f11a9556ff9ed2a009207db130db9f063638cfaafef9857346aa0233c15080c2fd06290e2b8a37ab5a86573519bab9100990e1ccf95fa97228b5862620e19e274219c6db6a7d4b379e8c7193a15167d73ca0bbcf116dc2485bd53633e5da8ce3350304b11a91e12f80052e7535af2442a7ca96293c291662423f5959067bde6f091dbffbc4f085819965ed71c967ddcefe57bd32ae62ccd611143686382d9d82ded6420e254713b63f4b34800b7291af601e402895b24f115e15a9790bc10cd403e5eac508a145c613bde4b7ec8d1409eb43458f53b4edfe39bfbba1932eadf82c069c5cfa11aded3f6b79641d564279f9d332de6326e1cbb02d44046b278133b6aa3ecbede819fa6ddd372ca46e54589c054396a25ba9eabe01970f986a7775eb3a6d47bd9a379af22ea7cf20a8472e6f4e761ea3c67953a0f20b40c8e501337e7d4dd082791ca453df38599a8da8a6b3e996c5d321b32afa6a7b661d9be0f9a3fe91568508617cfd18afab12f642da999c83189c9a4ea5b739712a751581f16bd1a10717defdbaa057ba9b70f61701b46f132b08ddb74190b0f15cf8eabfbf060dce0ab1ebffbdf302ad369a35cf5573241944c86ebc264af66e69866882ade8949dbe95b40795f0c4b0c2e0f33832c90a9f7714eec74c25f99a7285926f9fa43efbc4e1d4937e0e9987a63e2500c722871dcc41a11f8387c9d9a634a2057a0c7a4fd340e467699b87015a8fcbeabaddb2e23600b636d23dc5cd1000be2f96a4682a6a87a1292bd3f1a0890596f4d5e831c990e47685403939228787652681b766efb9da8bdc296bbfbd4050ae2d1333bca88ec387a7b6d0919839f5432299b149409664b5d1cc4b682bbc41ac92272273a980401a7ba8270f5c60fb93b94fd0b29abea2d435a92c1e7e8ae52e259b924daeaa56c1412670367ddb8d0f1d691b7b3a7d98441555ce124492ae60c1ec5fc1ccef7874345b93393693012719045887d523d6a98e3c2b697ba418aabb3a788ecdd9e7bc2659c54a1dc73ecf52414079066467aa7060a2137b53ea63515de75161aa27beaaa492451fbfc3cba7df9d6495431365675ecebc49d528d64165884c92e5858ff5c58f35001d2b9c9fee90b877ead7568c4a90228db99d14b80ad9f9e78e2f759f62db8f9343a7b39f10dc749ec3b28253c4abb29d4fedc9ef2064ea3542e0bc578c56afc41867d1e1d3cd72789676ed82059417ce4ca8599bceaf04eff2e20e909fcde277c426c9228d519fbb572a87b57dd6cece8d1942b2288e56d14e751c37d69b375f377fe6519408d02e21137375a4f5a890185925b5d152b2410d9f5b7f0fb04988523e9f5a75dae11851e7d9f1216432e4498953f1a290eb9071be255f4575ac93e0b99aac170c1985d5a8e576c6b17fe59ebd55c116b053a40f322eec01119360643e9a12575bb56c2386276cadb74f7bb9e583212b03a6b95da1cf8ba2453d25d04dbb7429fa160b38999d25f68a3ff7e10063cf58e9202f8cd9ae92b2442aa5135bfca46c49c5bed952b2f3ae0c6335c168b87ab197fa40e074c215eb8e8568d1e1e343fb9aa4bd86374815e313680a53e4528cbf96bfa8895cbdcfcfdb6127cefac7f03026c97f67941b3a64817e6b8d5b1b9f0acf2b209fddbfc7fea7095645e23fc4698f6e10abda413593964877bfe5ad099550a16ef1b8bb3a46369de2955b8bcf771a9348a5b36117ba77ebf5da0ed0b68ce98471587c53822820b0a3dfed4293d2652b9a3345f3ce8b53e437890eef263e64aab3eca6ea0be70d2f4b62addabeec91fad14c534774ba2366361ed5007672292894e4a7ba730fe6fdd28cd10e9789a2d8da9ff7300bb71bb0e13e8af8e5eca8b7eff2e4cff6eb4097f736b062b51fd1ef9497374a0f44c5bf7e8f86ad5a9bcdbb7fe687fd6785e32c22f99d109818263d3d5445dc20d497d86a81a83358cc482d8a43162d1d9518137535f074312d780e9a8fefd8f85fe2692ac4e3b2d2ca2a1e579edd337e05f414c20330fa2c7b8f6deee322317463a14449441fd1602953c4b0f15821dd9c435a60ef81c770d707d947e5df4ac0de5e04da8aeee74a6e8c0a962aa453f0e59cefa01ca3215e182c94dbabe021d158f6ff3dbd129f7b1229367a1f5f8dda59b2a32ba76f60732f1e82dbc7601c8ef19f9d37949853ac01aee30860a7c24734f3abc864ae3f765163317a7cce98ebe732cb476bd0c2a12875435a98b556757153bfa1aad9271fe2063e9d88d85b96a85b3626b49c8189656385fec6b6135b20e83623bd19a904b65129df060df4ab2ec56ed6088cbe4b9bbedf8adf13d18e6611bda8b83d2c5d42e2435623e03c2397d510048599bfdd2a5d979b743", 0x1000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002840)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000002a40)={r9, 0x4}) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003a80), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x82009100}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x1c, r10, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004811}, 0x20008000) (async) connect$qrtr(0xffffffffffffffff, &(0x7f0000003b80)={0x2a, 0x3, 0x4001}, 0xc) (async, rerun: 32) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000003bc0)={'veth0\x00', {0x2, 0x4e22, @private=0xa010102}}) (async, rerun: 32) r11 = accept4$x25(0xffffffffffffffff, &(0x7f0000003c00)={0x9, @remote}, &(0x7f0000003c40)=0x12, 0x80800) ioctl$SIOCX25GFACILITIES(r11, 0x89e2, &(0x7f0000003c80)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003d00)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000003cc0), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x9, 0xa, [0x3e, 0x20, 0x6, 0x3a, 0x2d, 0x5, 0x19, 0x3c, 0x19, 0x12, 0x22, 0x26, 0x1d, 0x33, 0xf, 0x24], 0x0, 0x9a34, 0x9}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x2, 0x6, 0x2, 0x5, 0x3], 0x4, 0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xb09, 0x5, 0xff, 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000004040)={0x0, 0x1}, &(0x7f0000004080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000040c0)={r12, 0x5a, "3c7654463a26b88f2f201f487147749812470bab016c857e483c762f940432dd0b9101de888b2311ece90bca86fbe98aa4df677827927c4b04591d95fdcde02c91e5719333b103ea4ad0478174ac71fb39805cdec2853b0b756a"}, &(0x7f0000004140)=0x62) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004380)={&(0x7f0000004300)={0x70, 0x1405, 0x902, 0x70bd2c, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20040800) 0s ago: executing program 4 (id=7430): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000681c0000060a010400000000000000000100000008000b4000000000401c0480441701800e000100696d6d65646961746500000030170280080001400000000000020280da000100eacc8759c940812b39f267d0d50d0499c80ced83ec4e58ded054b8c4a69ce3e9988eede7727e27e3dbff7e874cb1b05d587c253d495a053c719492db971f200e5bcf9a3bc095a26b61c9223f919be897ec511a8f508c6a5c8b12302d7734616c27da2316dd53a73312d3b378520796a6e349b06f99806394ad060919c8e6ec0702663f3c0ab0d9ed5f5944b8c19374ca21c2d2af8a899321e4549923584914221e95e35a16e33def4b5fbd5a78387388356f070ebdf992da0d227e98833e7d1ac7b846b257489164571ad67de3a54982f48f6538870e0000280002800800018000000000080003400000000008000340000000000900020073797a32000000005400028008000180000000000900020073797a31000000000900020073797a31000000000800034000000000080003400000000008000340000000000900020073797a30000000000900020073797a3000000000100002800900020073797a320000000094000100a601cb73261b6882237a065ff363762d4e1f15598e444ff364754c34b4528543748c9b79c430aa603175a7e3b5b9d190a2c2c4188b7c26120148c094d265a74365a97767ab9cbb31397039ab3f063f96a0d751f68f1af1a4f74a3f5d1cd4c3f29834815f07d702f399b124dfd3b860402c6998b9ad7d6cab6628759fc92df931a9e7e7bb6acbcb7ef909c15a79d6479a0800014000000000b41102806000010065fe9bb27826716fe37215876f3fdda74da914f0fe731980c3a4996a301da00f85e6a0d1e57217beef5c385d81f53cda9f47f7a3be67cf71ac8f58d16c169cfd9eba864d0d4d18181c1553667bc0f38b5d57f6db4617cf5aaee197826b000100f04fae3424364745390144ae9195c1d849951647176fbdd72c494fc2c8de4c3944c44516d2102eb25df75495a12cc963f6a65ea08d592069903d9ee593f218fb2d283c99fd01863a445de39926371b52a915a28c9fb94599947edf821d946b401a8b5693727aad002400028008000340000000000900020073797a32000000000900020073797a32000000000400028020000100a1d1361784d5d07d33e06b7ce747466cd48ee5496c948e573baa0d077c0001007cec8b0057578ebd97c694cb01a31ef11e6f6f569023457553731f08213dcee163ae01b55a7a5fd908b8b74bfb5976c6b37dc1869e7383660478b5ff689033897f8792462855aef9e6222e794a93f8e9e1f6908c646c7b0bc78eb6bfa6fd829658a286d8b211229ec22252f93aa88bb87d05a35cf8e88d2c0c0002800800018000000000040002800c000280080003400000000004100100a50dccc20bdba1839e7e75a6bd58dac9063761500001c99a5a3edac0be788c5e3a0bd46472e7f5b6e49c7d9a9bec4b199c37e72b6e37497d9a7ff6911f9e588b3f5973c3bb9d22d90fede8ff634ed65fd5e4c0aa24a8f81e7ffc690221569c425c0e98c4c76a0b2fcc283328eee6e7fbb9348622add94e22229754b31f66b336bf5fa31b7d628a9024383408755f9d90e9050cb637524ca1b83f22b2009944656cec2b6696b528571e10fd82b0526b9dd7c128953863376e0bb9931b085db2572561e67b227763010f1f41dd5eb52b076900354c6c39279e0ee4d9d42f002b923518d13a0e5c092ce532d9f4b74fa8039549eaee57f6db389b0fa08604caa4edadef0cc3825133d26a4db36770cc2384822cb67efcb1fda960bb9b30b43f0f480bb38f9695d244153d411d407180c42f0b7edbc2a67dc0127442be628e5923eb9ede3579666fe9054afae87fc70928a7f65acf020628ef352f0e536a73d0cad686607d8958ffa02caa38305c0d6c5757569479c7d24f2f77828d029c6caf99bd9ebe723187521c9a90860a71bcb2756eda673f05138112c46cf01452d493ca5c7169fdd9b072f249f465e06e98c4e14fe87eebe28712ef7ff84c6501cb708ad2a8a256a2a6996bd449a62e6f08ec4338be46d84c129fb555ffb8857a9662098cb0123f82cb348dff614cb0d5fd9bd88b0052981dae9375edc65939f6a372dd26b9fd6da8e7aa60d2b77870a388477575683e4b071f8df923b38dadafff09eae68dbad4932d70a9a76cff3bb7c2deb3efe1c311ab212380cc51986cd9eacad9ef77b0e3d7212fdacc25707ac72518ee9b9ac136fb3297fb3197ef04e489aef2cdb5c21ddadea7ac8eb4a5b411c24e9ad00de7b07e8b2299fa6b85f8eed59aca91622bf9ebafc8051413ff279e88b8c835f486e9e169d0d0b71a86182a0f153db5c74e2bfba3355b21b155ef77a1aaf39f4031132281a99171455d6801c435073d5d8143b24d9241bba82b7553e7b36c44062fc4047bf4bc8d6c9d594dd6bb220297616256ae9d30d98d33c1fad934f2f392bcc977d417d6463f84feb16f410045772bb92ed2d7eb93fec3dbe9490f10b4e7e293a50c1e196b8c4b9479013b9f9ad74eb96d7e828e0843f56a0c652b1054e7c20740cd540eb78c45d46ab7ee71e908b2fe1f072b5066ff2b8c232992ce6e38629f3acdfc6876dbc6f67e91ca069b8aa785b94d6569667f4a5675b1ad3274f96c411a8cdb500c4a50d56951d196a5849d7d4651cf38d73b88c66a6e9ac9d6103ded9f686fda7a56d262b5f7aca3661329ff505152d61bb10306e03338bc331096513123926b8b3005bf63486b8179ffbeba6c2122d53caa76ba756e1b8c5dd2d64915017d0ac348aac7e20280700b0379604c57988f4d13760e16ff4c29fd6ad76775d8c1619cc9a286958ea390635c90957aeac760caab20f297765091e8c4620e4041c256e3e063c4a75ad4e1b8563e84393f77f36212baba9c6644735de1b09acc0c33d88ec1c86f016e6fb8c0662645d2755a5470043c1bd2059079723ca0d0acb27c1916bf3821309606b8876ca60b87e52dce1fee4c697fc606406ed9d5aea44646891df32dfa567e9b93c02fcdff6e8a3583bd0c8507974805c0786895489f69d19c8970a762b03448894187f3150fcf433b00ead09987cee6473e28492532e74c846d0ab6e7908e260571f62e712fd8d0212030e41681b1e23c8f60af3c458eba1d41c1a365901039adee88ccc1f8dd06911ec37048509acbb56491ed5bc91d274faad42ca11e2b3d02f14c95d20aab34e313f1b91928408142d19570b217237b39a6281322b7cc7d8dee6a07145cd3827dff0e55b7ac5ac618e8e81b42002efb045fff6c08915888470bbe430749693c0d65c182c3483561624b7c309e19e94ba194f403ee8a1406d5f09df5cfa3839e1017d99b226b40a6baa06aff4b17a6fe995a6a83c56bba65a118bd93432d27d44fcc125e395f818fef7b82360eccc399ed0f03e1f0be86baeec92b67b54fcab9389bb5fdcb8b4303b6c2a4262ee30b37b917c6e14f2b52d481d2e5ad02739851b203b8602b983dc19bffdd3748fd0b29dc6b70054e68534888c02cdef58d15c79258c9880dd32ad90fbd2c766b2a68b880e7f0262640fc3e32c88e913dac1cf34201adda0cd457e87013889dc6f69d17bf1318b11c6293c1fb429050dcd33af8b7e31ce38990d358da60c5b31d16dadd46c6aad637b92ccad11b6249679998be4918d50e8208dd8286b1e325b8e023cbd9d707481752ecc6c5bfdb12aa88e14a154db4e79a64daa5ee9a53ac35b42c0000f07a9e427c3f215f11deef388b8f9960ac15251f2bb02ec282c858605061006211958260a8ce394f55a1c70883271709f24c1eb3f64eff2c2b69fb1368cce3d0f8d3d62e6192fc8b2368b0ae1311da57a8633060153293435ba8945249b9226ea630b2b6aa33d181cacddda6d3338fe6e9f1779d966d14c1f156757d5f5fb15102002c39421cb41b97b142853b6da4b86bb88aadf526447c5a12b4c324f9a1604cb7956b9afb5c596641f9cd9fc6be37eff82f32ce45d0515bf1cc966b8e57397986817399c98047622c87acfb1c6bfb0a37f326d285e22f6308bd1384c1e8681d44762dae45e073d246b52f6414eedecb90217057d42f985a2f8e2acd041af03e61d69e67e1689459a267090993e3d98f45314b9d43570a482c21ef678793f85f181eb677b4f73981c5d0a1ca8c6e65249359ca95093185cc8640e1f1cec8abfef53ba9c7fc24f0ca20389e9606dcfbaa93f5426e084d9cf522b3c75411aa34c22b289b1a7bd3ab01efebc27a1e09ee81056a113839234c0400dba9696c219eeacae13623505cdded580bc54819974c06ffcbb87c45d377c0bedf25907327bb7f4d07b600c9a816620815275c75aca418ade32ea85c965b379e8af6d8c8a32aa7f546978617cd907d39e75aab3221bb030194559e73d93e74d897b114b39d53ec305d332310b7abbef44569307703e916f7514b8497b6f3fb6f0daccd7bd301f67cad840419cf7128aa0b6264c6bbfd0c21eb6771bfbcc8590cbf7de3e6d9aa83667deb776715736c9194bb8825d0abce6d9b2693f93aa81ca67eb0ac9566456d6dababb75ccef060df30c8c23be41560e58f9f846debbf43765649047187cc7549d6728190675e7be45b3f56ed71564ae74b544b493e567459503b237a811a84036512e0728879eecc085ed1807613eb097ed784237c8746e96b73912be98f20dd2e2d4a79d0f6df706cf2366acbd01eafad1de8930d04bef65a5ee17ee453d5cb648d6279dd602814445d2967af8c1b1e92dc049ad9bee6f3b746ba5d8323b02f3ad671538f71efb65dd31fb86c090b77de525a678c12be72b86a62d1d850a1ab62ec46e0f11d34f43dac738bb2c2f925af7cc9d46a2b63f54077f0bc0035848da6f4ffff071ef4e1b8ba9a4fe2e4e1778c4f715a97787c29a4187c718dedf0459a4a6c736d0cefd2d6e2c49b7332d68ede037fe6f4281fee0afeccdd2c22763783f681ed014461aa805fdce74a1712a79473b5d99ab08b9dd4c3c6eae5d16f689ec2084382bf1b44fb1ac891e0a5adddcefb1b11f755ff2eadfa2d992c740826b246d3a91346a87f8802796e269323151f9c359715c6199338c003e19f8dfc474bc898bc3f0ef4a9b8d47cea6c655840dc9cc685c6e16104beadca4b069957fd54b62c6077c717f1b8ff6052aa89237ce8b71c44ca4f2fcedcee464774eb56132ddf1c037def1ad39a14e00f76f1fe84d90b48dd3c28bbbfeb157416b659b740bc35949765e8644a50eca9116c043718e233f80a307cf78c93cd6e38a2cf143faaaf602806556dc293d4907f5aa4e541901ee12267697cfc7fa35d979d6aaf8312e21c4f571dd32b506fc488da3843629ff5b63db55a5021286346b691ce7d8f930cdbcb4d07411f585de89696b33e0a8f32bc42ec9f6699f4a8af2fd74d1359898558ea0158342ff7703611af8d5a98c537b3bf6856bdfec88c73013b9cdcf987a12c9df591aa75d28ead7537e975479b9712d713b36744e5dc4ffd05f168be52bd0f4ffeb4ae6a638f2e415ef1a2d5d4d9d9a9e8bdb08265492b49e2ca6651a93230ed3ba9c09bc112591117939b043016732a083be675327b92c4624cbc62113c85253e653d001c157d23a3d1784a1cc1cf6d564bdb1c910a492d351c3471ee5486887c1f32555fb286da41ae46f3910516ed3bc4c8262cf6a668d0fb4f472dd7ffd23f9c5dbaa9f22f0f5a97905effdcb7877aba1213a2412bc5bd5fc6d8e7d0e7be5baa3c09dcc2b2299a72450adf04667244c930e638d4ce768386f8d954fba62a4fdc723c7cb8432361addbf15c086b4c1321463f2ec34d623426c4de8f4724b403ca013d5ea473be184d44716c3d7bc74d802e7f3898799346a752130aa3db94962ef7625fad6d2fa3b3ce37ba6ece06a4fde35b6490285bb66718551ca883edef903d3885deb852dd05df86eedec946b3543cf85cc5f3f89f13dae6cdc9d3b238fce59f4aae66ff2aba8c99ffd7c14b07a069fbade76084bdfbcecc00492147356d3d931bf15cf4b759981c290b9951d7abee0e43a6f9fac598c174d2ae0894dc5697633a0d051c5ace7f295376b53cfbfb5b49d01d09e56912d74d9494741c6fde0562004c5397c9f477a80be0db173a5336cfd74afa55f8afb1f0b93f2d6cc8b18cc3bbc954291a69c889f8361d0d93ccd9f1e0d950e08e1030eed47957c369e64c97aef34c289a778863d34684d90f54ec29a1a45b058d96dcd77d4708c8ce8fa087dc212f0f4785b1e145c7e6c734fcc8ec0a0fdc457cb60c57bc1259d05ed92ddacc9ba2d8e810ffde8ccf67ec43ac8f05c5f9dff3efbafe67271a7cbfd85dc90f870a3a2be2145b767edfa0e666a041ca7b99ac6cf09379df560e27bf00b60acc8bdc28bf765fd1a3a6daf20905e5f0a2dd473b3fbe1eaa414e5af8d4fa9847af219db7118d609cf28a45d810cfc2cbc9dfcdd1676816309165d89cf3a138fb785f4e41adb7e15cf40e6401ca684bfb976d4a7989b4fe6666fd926857366da896815d243c033fa243f6d02c683091d8b9ba613225246ab1f661f8085da9f18682e410e9aa771e6f30cb8b00d17e7cfaefd9d9b80a8760506f34ba04e0844b5dc8ec53cdf578d2a0bbdbe3ba4c92ff75d85caa97b396405f06dcecf136a3a73944a44e333df258a86960285f6cf2a5185b9e1afdd6feadef8f25b0836ab644eaedaa39b7f840332b6ba4a2e2ca4007dc02a8009e81d23428651a597437155d03a177e9c8501fbfca334d2515cbbde3116e5db438de268eb4ed4c29c7e19a421e7581969919449ea4982018a0ab283790a3741495572568476abc5ef7110db461167846cdfb21f5af30692724a3930b34a95fbfd2fea886ae5c3d30ab3737a5df1689ca3e30e24c1a907196e34002247bec3c7b58ead4c5b374f2ff6408bfc8f513c6bf7e8cf3a493046c16340459053a569fedf652bd4f6b04c43fa770b084defa3b2d7182feff095c4f0fd23e33ba1a3513e7a9c6a42ac35afa085083fe1ec331a1b1d4b11c5fc9573cfaf984027c98191ef52ec14e23477ce2b8ebc8523f3dc74fea42984d8711c2d5a98a92bfa26e8b92053e448f1d0aa9b3ad6bb159e08eb923d710e50784166e2d0021a933de490eb0542e45072c178646a6f674a5eabdde0aff8c20ef266c41bcb3150a8e2948e46e618988d44305ccb39dd77909f24704000280b80002809c000100875ba50afb7c4103b226f60ec3155234e3877c38dfdddca157704e58f963af3fd3ab9cddf625c2c3b44632f25af3de897f9aef70806700bc24c712677751fe844e94e44aa78410a88d4d32cc8fc592535e47a2045b6b13fec2acff1c57ec2e44789220c6ad86cde3262c0e29767d0793beb652eaa9ef1c9befb0a0641870d88c46e54141d2d8882c844b51249f0528a3413711f0c9b13a3b170001004310bc2a4e2de1f78da171e70703a65b8066da0004000280e0010280490001003342d233e05edebf6453ad40ffb8fdc32e50e78270ec9bdf6e7643df95e8d153f0fc5e15f615da4801b0fdb192177422b143dbbe14ee95b9f90e9d8797ca929c8a7ca57574000000e40001006aa6eaac6f4b461864c9dbab56133eaaa9f50b6770a119a9d89fec6e4376b5b2c32f661be94a4fe7c0755fd642f4b8d4752b9660d5b61226062d8871599bbcfa7c8206e27495557f57bc4647d209c70145e88dfe8b23aab7743c420ca8d3bffa2d96d91374fa565ac88aba12fb8163ec8d485eda1ff86f398f947db05a51b74abee278e6add982c178c4e08fb5aa9ef689629f74947a06d3b2d653216aaba7124ab6cf2a2bb2662834fc66fa32961f2065450b967516aaa8bed092ee58639c4fa0afe229c4a5e5c6f0d899360b0a26467db5b4f43fb3228fab59ae84be114ba08800010000000001290ad3eb30b6f62075fa7597f1fd84d9549fb819d48dc0632c14e96918cc653ec6718691516a727a180f8cd727f98394328b476bd4496f31fbdbecac89913ab041d49d9083286f1919c157b091587e87ec3ece2bfeb2c64400e7f8d1919215eb96d3f0919ae61554cf4911b5c2b6e2332e869e337ab23d2de9544ec2b5304dc52400028008000340000000000800018000000000080003400000000008000180000000004800028044000280080003400000000008000180000000000900020073797a3100000000080003400000000008000180000000000900020073797a3000000000080001800000000048000280340002800900020073797a300000000008000340000000000900020073797a300000000008000340000000000800018000000000100002800900020073797a32000000003800028034000280080001800000000008000340000000000800034000000000080001800000000008000180fffffffd0800034000000000b40401800c0001006269747769736500a4040280080003400000000008000240000000000800064000000000080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340000000000800034000000000080003400000000008000180000000006200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034000000000080003400000000008000180000000000800014000000000600004804000028008000180000000000900020073797a3000000000080001800000000008000180000000000900020073797a31000000000900020073797a31000000001c0002800900020073797a31000000000900020073797a32000000000800024000000000ac010480b200010006687351802453c1b314541f275193ac658985478517d01198c7d90f63dbcb74fce872904af6593131bccce0ef918bcbf359a0d8aa2801d0f31fc8aae73107413f6112724ccec7e130fb84435e63fed1d71f589f8b071b95bb38e0532478f6d3592922c17c635ea7a8f7ad3260e620447bf7f845e6017d17014e26504fe91922a2b5e10b8511169b2a9ac673e340506a052cea05d8a429d989757a396fe43535df4fe926987ed7fc41dd6acfdf2600000b0001000bca99f460f4b0002800028008000180000000000900020073797a30000000000800034000000000080003400000000004000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d6574610000000024000280080002400000000008000340000000000800035000000000080003400000003cd43137800a0001006c696d69740000000900010073797a30"], 0x1cdc}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x9, 0x1, 0xc}, 0xb, 0x40000000, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffd, 0x6e6bb5}}, 0xb8}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099", @ANYBLOB="6401e8b279921be3c637378b8bb2d5"], 0x38}], 0x1}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048080}, 0x40000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x54, r10, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x4090}, 0x40810) kernel console output (not intermixed with test programs): 161273][T27124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5899'. [ 642.293956][T27132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5902'. [ 642.299977][T26988] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 642.321616][T27132] vxcan2: entered promiscuous mode [ 642.327158][T27132] vxcan2: entered allmulticast mode [ 642.346006][T26988] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 642.365424][T26988] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.387818][T26988] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 642.537861][T26988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.557061][T26988] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.570205][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.577346][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.591219][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.598456][T10784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.811251][T27168] netlink: 'syz.2.5909': attribute type 11 has an invalid length. [ 642.862643][T26988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.927357][T26988] veth0_vlan: entered promiscuous mode [ 642.941494][T26988] veth1_vlan: entered promiscuous mode [ 642.987485][T26988] veth0_macvtap: entered promiscuous mode [ 643.000686][T26988] veth1_macvtap: entered promiscuous mode [ 643.030728][T26988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.047121][T26988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.070329][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.080846][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.094813][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.128587][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.286676][ T753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.297040][ T753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.372667][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.411671][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.661062][T27189] netlink: 'syz.1.5915': attribute type 1 has an invalid length. [ 643.781277][T27194] bond0: entered promiscuous mode [ 643.813482][T27194] bond_slave_0: entered promiscuous mode [ 643.822929][T27194] bond_slave_1: entered promiscuous mode [ 643.884465][ T5838] Bluetooth: hci3: command tx timeout [ 643.942535][T26991] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.957002][T26991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.969379][T26991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 644.002189][T26991] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 644.016815][T26991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 644.080110][T27202] ip6_vti0 speed is unknown, defaulting to 1000 [ 644.265866][T27209] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.339700][T27209] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.513122][T27224] x_tables: unsorted underflow at hook 1 [ 644.948760][T27242] syzkaller1: entered promiscuous mode [ 644.976473][T27242] syzkaller1: entered allmulticast mode [ 644.997452][ T5838] block nbd9: Receive control failed (result -32) [ 645.124926][T27202] chnl_net:caif_netlink_parms(): no params data found [ 645.415864][T27202] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.424001][T27202] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.431272][T27202] bridge_slave_0: entered allmulticast mode [ 645.461251][T27202] bridge_slave_0: entered promiscuous mode [ 645.487677][T27283] bridge5: entered promiscuous mode [ 645.496381][T27283] bridge5: entered allmulticast mode [ 645.505562][T27202] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.515095][T27202] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.522635][T27202] bridge_slave_1: entered allmulticast mode [ 645.523661][T27288] __nla_validate_parse: 11 callbacks suppressed [ 645.523675][T27288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5940'. [ 645.531329][T27202] bridge_slave_1: entered promiscuous mode [ 645.552833][T27285] netlink: 'syz.2.5939': attribute type 11 has an invalid length. [ 645.638276][T27283] bridge6: entered promiscuous mode [ 645.643828][T27283] bridge6: entered allmulticast mode [ 645.686471][T27202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.713984][T27202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.765867][T27304] netlink: 'syz.0.5944': attribute type 64 has an invalid length. [ 645.780056][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5943'. [ 645.791651][T27202] team0: Port device team_slave_0 added [ 645.834402][T27202] team0: Port device team_slave_1 added [ 645.889542][T27202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.898069][T27202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.902749][T27310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5945'. [ 645.925173][T27202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.954347][T27202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.964469][ T5838] Bluetooth: hci3: command tx timeout [ 645.969959][ T2298] block nbd6: Possible stuck request ffff888026d90000: control (read@0,1024B). Runtime 150 seconds [ 645.981230][ T2298] block nbd6: Possible stuck request ffff888026d90200: control (read@1024,1024B). Runtime 150 seconds [ 645.981434][T27202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.993369][ T2298] block nbd6: Possible stuck request ffff888026d90400: control (read@2048,1024B). Runtime 150 seconds [ 646.025076][T27202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.030908][ T2298] block nbd6: Possible stuck request ffff888026d90600: control (read@3072,1024B). Runtime 150 seconds [ 646.049765][T27316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5948'. [ 646.052212][ T5838] Bluetooth: hci4: command tx timeout [ 646.092932][T27319] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5946'. [ 646.213409][T27323] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5950'. [ 646.243188][T27202] hsr_slave_0: entered promiscuous mode [ 646.255955][T27202] hsr_slave_1: entered promiscuous mode [ 646.262622][T27202] debugfs: 'hsr0' already exists in 'hsr' [ 646.269386][T27202] Cannot create hsr debugfs directory [ 646.278869][T27321] Unsupported ieee802154 address type: 0 [ 646.309453][T27333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5951'. [ 646.479222][T27338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.506611][T27202] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.539842][T27202] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.579603][T27202] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.629862][T27202] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.765058][T27202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 646.777054][T27202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 646.787495][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5955'. [ 646.797675][T27202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 646.811999][T27202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 646.891942][T27202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.912873][T27356] netlink: 'syz.0.5956': attribute type 4 has an invalid length. [ 646.917206][T27202] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.937635][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.944858][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.963879][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.971025][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.207064][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5960'. [ 647.222860][T27373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5960'. [ 647.352252][T27202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.482558][T27394] netlink: 'syz.2.5963': attribute type 13 has an invalid length. [ 647.503636][T27394] netlink: 'syz.2.5963': attribute type 17 has an invalid length. [ 647.512668][T27202] veth0_vlan: entered promiscuous mode [ 647.536571][T27394] lo: left promiscuous mode [ 647.557434][T27394] gre0: left promiscuous mode [ 647.562503][T27394] gre0: left allmulticast mode [ 647.574413][T27400] IPVS: set_ctl: invalid protocol: 137 172.20.20.37:20003 [ 647.608311][T27394] bridge0: port 1(1x9) entered blocking state [ 647.614828][T27394] bridge0: port 1(1x9) entered listening state [ 647.636808][T27394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.694737][T27202] veth1_vlan: entered promiscuous mode [ 647.759013][T27202] veth0_macvtap: entered promiscuous mode [ 647.797964][T27202] veth1_macvtap: entered promiscuous mode [ 647.845577][T27202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.878769][T27202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.968735][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.016123][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.053605][ T5838] Bluetooth: hci3: command tx timeout [ 648.083726][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.092482][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.128068][ T5838] Bluetooth: hci4: command tx timeout [ 648.371660][ T9441] IPVS: starting estimator thread 0... [ 648.382243][T10784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.411704][T10784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.469378][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.485066][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.493136][T27452] IPVS: using max 36 ests per chain, 86400 per kthread [ 649.082194][T26991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 649.096687][T26991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 649.105316][T26991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 649.124200][T26991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 649.135078][T26991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.189333][T27496] Cannot find del_set index 4 as target [ 649.210555][T27489] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.335495][T27502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.654535][T27511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.699120][T27512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.717718][T27519] netlink: 'syz.1.6000': attribute type 7 has an invalid length. [ 649.778760][T27523] netlink: 'syz.0.6002': attribute type 10 has an invalid length. [ 649.798667][T27523] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 650.044096][T27538] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.078424][T27489] chnl_net:caif_netlink_parms(): no params data found [ 650.215613][ T5838] Bluetooth: hci4: command tx timeout [ 650.339386][T27489] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.359440][T27489] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.371566][T27489] bridge_slave_0: entered allmulticast mode [ 650.408717][T27489] bridge_slave_0: entered promiscuous mode [ 650.418873][T27561] netlink: 'syz.0.6010': attribute type 1 has an invalid length. [ 650.430076][T27561] netlink: 'syz.0.6010': attribute type 1 has an invalid length. [ 650.467717][T27489] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.475660][T27489] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.483920][T27489] bridge_slave_1: entered allmulticast mode [ 650.492384][T27489] bridge_slave_1: entered promiscuous mode [ 650.526244][T27571] __nla_validate_parse: 13 callbacks suppressed [ 650.526264][T27571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6013'. [ 650.685143][T27577] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 650.738138][T27577] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 650.773686][T27579] netlink: 'syz.1.6016': attribute type 13 has an invalid length. [ 650.841843][T27489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.873523][T27579] macvtap0: refused to change device tx_queue_len [ 650.901767][T27489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.024221][T27586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6018'. [ 651.055086][T27489] team0: Port device team_slave_0 added [ 651.080085][T27489] team0: Port device team_slave_1 added [ 651.164983][ T5838] Bluetooth: hci2: command tx timeout [ 651.381845][T27489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.389221][T27489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.425452][T27489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.452299][T27489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.459881][T27489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.489129][T27489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.534089][T27489] hsr_slave_0: entered promiscuous mode [ 651.540391][T27489] hsr_slave_1: entered promiscuous mode [ 651.546791][T27489] debugfs: 'hsr0' already exists in 'hsr' [ 651.552527][T27489] Cannot create hsr debugfs directory [ 651.683245][T27584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.727196][T27608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.744095][T27586] delete_channel: no stack [ 651.927759][T27631] tipc: Enabling of bearer rejected, already enabled [ 651.950893][T27631] netlink: 'syz.4.6026': attribute type 1 has an invalid length. [ 651.972599][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6027'. [ 651.973587][T27631] syzkaller0: entered promiscuous mode [ 651.988630][T27631] syzkaller0: entered allmulticast mode [ 651.995159][T27631] tipc: Resetting bearer [ 652.133733][T27489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.145229][T27489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.155820][T27489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 652.285539][ T5838] Bluetooth: hci4: command tx timeout [ 652.306763][T27489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.329630][T27489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.342870][T27489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 652.359802][T27663] tipc: Enabling of bearer rejected, failed to enable media [ 652.421543][T27669] netlink: 'syz.3.6037': attribute type 1 has an invalid length. [ 652.448235][T27489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.459733][T27489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.470186][T27489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 652.526012][T27670] vlan2: entered promiscuous mode [ 652.535363][T27670] vlan1: entered promiscuous mode [ 652.541273][T27670] vlan2: entered allmulticast mode [ 652.549748][T27670] vlan1: entered allmulticast mode [ 652.561085][T27672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6038'. [ 652.563117][T27670] veth0_vlan: entered allmulticast mode [ 652.644359][T27489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.661710][T27489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.675642][T27489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 652.725013][T27685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6041'. [ 652.797592][T27687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6043'. [ 652.811462][T27690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6044'. [ 652.975295][T27489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 652.995442][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 653.009078][T27489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 653.028705][T27489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 653.056227][T27489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 653.117136][T27706] syzkaller0: entered promiscuous mode [ 653.122655][T27706] syzkaller0: entered allmulticast mode [ 653.243513][ T5838] Bluetooth: hci2: command tx timeout [ 653.265817][T27725] netlink: 892 bytes leftover after parsing attributes in process `syz.0.6054'. [ 653.277729][T27489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.311334][T27489] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.354733][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.361844][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.396711][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.398619][T27731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6056'. [ 653.403945][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.436762][T27733] netlink: 'syz.3.6057': attribute type 12 has an invalid length. [ 653.516617][T27735] netlink: 'syz.0.6058': attribute type 1 has an invalid length. [ 653.630963][T27742] bond1: (slave gretap1): making interface the new active one [ 653.667878][T27742] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 653.921863][T27489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.050653][T27489] veth0_vlan: entered promiscuous mode [ 654.085539][T27489] veth1_vlan: entered promiscuous mode [ 654.168441][T27489] veth0_macvtap: entered promiscuous mode [ 654.196814][T27489] veth1_macvtap: entered promiscuous mode [ 654.262370][T27489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.292549][T27778] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20003 [ 654.307650][T27489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.354077][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.364517][ T151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.385268][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.430233][ T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.647998][T27793] netlink: 'syz.3.6075': attribute type 33 has an invalid length. [ 654.685668][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.703885][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.754935][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.768014][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.777011][T27802] bond0: (slave gre0): Error: Device type is different from other slaves [ 655.000552][T27818] netlink: 'syz.2.6081': attribute type 7 has an invalid length. [ 655.106608][T27825] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 655.124336][T27828] xt_HMARK: spi-set and port-set can't be combined [ 655.324086][ T5838] Bluetooth: hci2: command tx timeout [ 655.362445][T27852] netlink: 'syz.4.6091': attribute type 4 has an invalid length. [ 655.449582][T27859] netlink: 'syz.4.6094': attribute type 9 has an invalid length. [ 655.551651][T27861] tipc: Started in network mode [ 655.557145][T27861] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 655.594676][T27861] tipc: Enabled bearer , priority 14 [ 655.661251][T27870] netlink: 'syz.1.6097': attribute type 1 has an invalid length. [ 655.816792][T27886] veth0_to_bond: entered allmulticast mode [ 655.855281][T27886] netlink: 'syz.0.6101': attribute type 1 has an invalid length. [ 655.877889][T27886] netlink: 'syz.0.6101': attribute type 1 has an invalid length. [ 656.326341][T27928] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 656.431254][T27928] tap0: tun_chr_ioctl cmd 1074025672 [ 656.437981][T27928] tap0: ignored: set checksum disabled [ 656.459345][T27940] sit0: entered promiscuous mode [ 656.467559][T27940] netlink: 'syz.0.6114': attribute type 1 has an invalid length. [ 656.475742][T27940] __nla_validate_parse: 5 callbacks suppressed [ 656.475757][T27940] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6114'. [ 656.548399][T27944] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6115'. [ 656.563226][T27944] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6115'. [ 656.606234][T27946] veth0: entered promiscuous mode [ 656.624087][T27948] veth0: left promiscuous mode [ 656.713111][ T9441] tipc: Node number set to 10005162 [ 656.721421][T27960] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6119'. [ 656.758873][T27960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6119'. [ 656.794751][T27960] 8021q: adding VLAN 0 to HW filter on device bond11 [ 656.882513][T27957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6120'. [ 656.906441][T27959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6120'. [ 657.106987][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6125'. [ 657.121528][T27978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6125'. [ 657.160096][T27978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6125'. [ 657.291951][T27994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.317457][T27994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.404805][ T5838] Bluetooth: hci2: command tx timeout [ 657.492329][T28003] syzkaller0: entered promiscuous mode [ 657.509727][T28003] syzkaller0: entered allmulticast mode [ 657.858317][T28032] syzkaller0: entered promiscuous mode [ 657.877081][T28032] syzkaller0: entered allmulticast mode [ 658.044815][T28044] syzkaller0: entered promiscuous mode [ 658.053854][T28044] syzkaller0: entered allmulticast mode [ 658.111364][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.134651][ T9443] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.142515][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.469710][T28072] xt_l2tp: invalid flags combination: 8 [ 658.521154][T28076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.557790][T28073] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 658.579168][T28073] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 658.589620][T28073] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 658.845048][ T9443] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.925226][T28104] netlink: 'syz.2.6161': attribute type 33 has an invalid length. [ 658.928841][ T9443] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 659.009558][T28108] openvswitch: netlink: IP tunnel dst address not specified [ 659.363053][T28126] netlink: 'syz.2.6169': attribute type 10 has an invalid length. [ 659.382091][T28126] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 659.457724][T28131] geneve2: entered promiscuous mode [ 659.669565][T28152] veth0_to_team: entered allmulticast mode [ 659.694819][T28152] openvswitch: netlink: Missing valid actions attribute. [ 659.712241][T28152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.750514][ T6415] lec:lec_start_xmit: lec0:No lecd attached [ 660.111875][T28178] netlink: 'syz.4.6186': attribute type 1 has an invalid length. [ 660.138212][T28180] lo: entered promiscuous mode [ 660.149424][T28182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.161779][T28180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.216630][T28178] 8021q: adding VLAN 0 to HW filter on device bond9 [ 660.235360][T28183] vlan2: entered promiscuous mode [ 660.240426][T28183] bond9: entered promiscuous mode [ 660.246731][T28183] vlan2: entered allmulticast mode [ 660.251870][T28183] bond9: entered allmulticast mode [ 660.291815][T28178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.301503][T28178] bond9: (slave batadv0): making interface the new active one [ 660.310113][T28178] batadv0: entered promiscuous mode [ 660.318993][T28178] batadv0: entered allmulticast mode [ 660.328734][T28178] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 660.337932][T28185] netlink: 'syz.2.6187': attribute type 12 has an invalid length. [ 660.346613][T28185] netlink: 'syz.2.6187': attribute type 29 has an invalid length. [ 660.364487][T28185] netlink: 'syz.2.6187': attribute type 1 has an invalid length. [ 660.858369][T28210] netlink: 'syz.1.6197': attribute type 1 has an invalid length. [ 660.927573][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 661.147411][T28221] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 661.251588][T28226] gre2: entered promiscuous mode [ 661.259540][T28226] gre2: entered allmulticast mode [ 661.280392][T28228] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 662.217247][T28282] syzkaller0: Caught tx_queue_len zero misconfig [ 662.287855][T28299] __nla_validate_parse: 16 callbacks suppressed [ 662.287875][T28299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6217'. [ 662.309910][T28298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6221'. [ 662.336101][T28301] netlink: 'syz.3.6222': attribute type 1 has an invalid length. [ 662.337502][T28299] netlink: 13 bytes leftover after parsing attributes in process `syz.0.6217'. [ 662.346961][T28298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6221'. [ 662.363495][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.500712][T28308] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 662.529851][T28310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.096269][T28303] tipc: Resetting bearer [ 663.118457][T28303] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 663.150293][T28315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.243057][ C1] bridge0: port 1(1x9) entered learning state [ 663.347210][T28347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6232'. [ 663.483264][T26991] Bluetooth: hci2: command 0x0405 tx timeout [ 663.615625][T28365] veth0: entered promiscuous mode [ 663.629557][T28365] veth0: left promiscuous mode [ 663.901278][ T11] block nbd3: Possible stuck request ffff888026cd0000: control (read@0,1024B). Runtime 240 seconds [ 663.912191][ T11] block nbd3: Possible stuck request ffff888026cd0200: control (read@1024,1024B). Runtime 240 seconds [ 663.924066][ T11] block nbd3: Possible stuck request ffff888026cd0400: control (read@2048,1024B). Runtime 240 seconds [ 663.935218][ T11] block nbd3: Possible stuck request ffff888026cd0600: control (read@3072,1024B). Runtime 240 seconds [ 664.225326][T28390] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6240'. [ 664.378073][T28395] bond0: entered promiscuous mode [ 664.397969][T28395] bond_slave_0: entered promiscuous mode [ 664.434741][T28395] bond_slave_1: entered promiscuous mode [ 664.451288][T28395] batadv0: entered promiscuous mode [ 664.474552][T28395] hsr1: entered promiscuous mode [ 664.489288][T28395] hsr1: entered allmulticast mode [ 664.508316][T28395] bond0: entered allmulticast mode [ 664.526381][T28395] bond_slave_0: entered allmulticast mode [ 664.545517][T28395] bond_slave_1: entered allmulticast mode [ 664.565868][T28395] batadv0: entered allmulticast mode [ 664.591477][T28395] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 664.637022][T28395] bond0: left promiscuous mode [ 664.651550][T28395] bond_slave_0: left promiscuous mode [ 664.709341][T28395] bond_slave_1: left promiscuous mode [ 664.740552][T28395] batadv0: left promiscuous mode [ 664.763233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 664.771280][ C1] lec:lec_tx_timeout: lec0 [ 665.157837][T28456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6250'. [ 665.254936][T28459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6252'. [ 665.406612][T28472] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 665.508998][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6257'. [ 665.581271][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6257'. [ 665.867091][T28502] bridge1: entered promiscuous mode [ 665.905110][T28502] bridge1: entered allmulticast mode [ 666.278896][T28505] geneve3: entered promiscuous mode [ 666.293724][T28505] geneve3: entered allmulticast mode [ 666.821452][T28565] netlink: 'syz.2.6279': attribute type 2 has an invalid length. [ 666.841965][T28565] : entered promiscuous mode [ 666.864419][T28565] netlink: 'syz.2.6279': attribute type 2 has an invalid length. [ 667.328871][T28600] veth1_macvtap: left promiscuous mode [ 667.343653][T28320] IPVS: starting estimator thread 0... [ 667.433073][T28603] IPVS: using max 38 ests per chain, 91200 per kthread [ 668.206771][ T753] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.233784][ T753] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 668.252901][ T753] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 668.265598][ T753] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.295916][ T753] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 668.323674][ T753] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 668.332586][ T753] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.370454][ T753] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 668.390615][ T753] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 668.443229][ T49] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.447944][T28634] __nla_validate_parse: 6 callbacks suppressed [ 668.447961][T28634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6299'. [ 668.467732][ T49] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 668.467767][ T49] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 668.550761][T28645] xt_TCPMSS: Only works on TCP SYN packets [ 668.653895][T28649] netlink: 'syz.2.6305': attribute type 15 has an invalid length. [ 668.957115][T28655] IPVS: persistence engine module ip_vs_pe_ not found [ 668.971472][T28664] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6311'. [ 669.188486][T28671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6313'. [ 669.205955][T28671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6313'. [ 669.252105][T28671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6313'. [ 669.559860][T28696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.587318][T28696] netlink: 'syz.3.6318': attribute type 1 has an invalid length. [ 669.595873][T28696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.748477][T28709] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.757077][T28709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.827013][T28711] netlink: 'syz.1.6324': attribute type 4 has an invalid length. [ 670.135851][T28739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6334'. [ 670.238570][T28744] : entered promiscuous mode [ 670.274593][T28747] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 670.370756][T28753] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6339'. [ 670.403864][T28753] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6339'. [ 670.430004][T28753] netlink: 'syz.3.6339': attribute type 6 has an invalid length. [ 670.449269][T28753] netlink: 'syz.3.6339': attribute type 5 has an invalid length. [ 670.459778][T28753] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6339'. [ 670.531455][T28759] bond12: ARP target 1.0.0.0 is already present [ 670.538208][T28759] bond12: option arp_ip_target: invalid value (1) [ 670.555101][T28759] bond12 (unregistering): Released all slaves [ 670.704246][T28770] netlink: 'syz.2.6347': attribute type 1 has an invalid length. [ 670.772445][T28783] xt_CT: No such helper "syz1" [ 670.783546][T28781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6349'. [ 670.859682][T28789] erspan0: entered promiscuous mode [ 670.946365][T28791] netlink: 'syz.4.6352': attribute type 7 has an invalid length. [ 670.985461][T28803] netlink: 'syz.4.6352': attribute type 7 has an invalid length. [ 671.544514][T28833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.628450][T28830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.680515][T28834] team_slave_1: Caught tx_queue_len zero misconfig [ 671.745484][T28830] bond1: (slave gretap1): making interface the new active one [ 671.769877][T26991] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 671.771153][T28830] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 671.788207][T26991] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 671.796807][T26991] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 671.810304][T26991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 671.814621][T28829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.828658][T26991] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 671.902266][T28841] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.605303][T28867] xt_l2tp: invalid flags combination: 8 [ 672.633630][T28869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.788120][T28867] syzkaller0: entered promiscuous mode [ 672.794545][T28867] syzkaller0: entered allmulticast mode [ 673.895039][ T5838] Bluetooth: hci5: command tx timeout [ 674.442731][T28841] chnl_net:caif_netlink_parms(): no params data found [ 674.497315][T28903] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 674.687402][T28920] veth0_to_team: left allmulticast mode [ 674.818470][T28914] __nla_validate_parse: 8 callbacks suppressed [ 674.818488][T28914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6389'. [ 674.854731][T28841] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.861902][T28841] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.918301][T28841] bridge_slave_0: entered allmulticast mode [ 674.935552][T28841] bridge_slave_0: entered promiscuous mode [ 675.033617][T28841] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.041174][T28841] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.050356][T28841] bridge_slave_1: entered allmulticast mode [ 675.071189][T28841] bridge_slave_1: entered promiscuous mode [ 675.211968][T28948] validate_nla: 2 callbacks suppressed [ 675.211986][T28948] netlink: 'syz.4.6398': attribute type 1 has an invalid length. [ 675.282704][T28948] netlink: 476 bytes leftover after parsing attributes in process `syz.4.6398'. [ 675.301481][T28948] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6398'. [ 675.381103][ T35] bond4 (unregistering): (slave ip6erspan1): Releasing active interface [ 675.555871][T28980] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6403'. [ 675.627486][ T35] bond5 (unregistering): (slave gretap2): Releasing active interface [ 675.678827][ T35] dvmrp0 (unregistering): left allmulticast mode [ 675.746938][ T35] bond6 (unregistering): (slave geneve3): Releasing active interface [ 675.963351][ T5838] Bluetooth: hci5: command tx timeout [ 676.006963][ T35] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 676.046587][ T2298] block nbd6: Possible stuck request ffff888026d90000: control (read@0,1024B). Runtime 180 seconds [ 676.058331][ T2298] block nbd6: Possible stuck request ffff888026d90200: control (read@1024,1024B). Runtime 180 seconds [ 676.069450][ T2298] block nbd6: Possible stuck request ffff888026d90400: control (read@2048,1024B). Runtime 180 seconds [ 676.094256][ T2298] block nbd6: Possible stuck request ffff888026d90600: control (read@3072,1024B). Runtime 180 seconds [ 676.187288][ T35] bond1 (unregistering): Released all slaves [ 676.200437][ T35] bond0 (unregistering): Released all slaves [ 676.214569][ T35] bond2 (unregistering): Released all slaves [ 676.227278][ T35] bond3 (unregistering): Released all slaves [ 676.241217][ T35] bond4 (unregistering): Released all slaves [ 676.272877][ T35] bond5 (unregistering): Released all slaves [ 676.303363][ T35] bond6 (unregistering): Released all slaves [ 676.316347][ T35] bond7 (unregistering): Released all slaves [ 676.328795][ T35] bond8 (unregistering): Released all slaves [ 676.341440][ T35] bond9 (unregistering): Released all slaves [ 676.356421][ T35] bond10 (unregistering): Released all slaves [ 676.371826][ T35] bond11 (unregistering): Released all slaves [ 676.414240][T28841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.475683][T28841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.554824][ T35] v: left promiscuous mode [ 676.625581][T29000] netlink: 'syz.2.6407': attribute type 1 has an invalid length. [ 676.686791][T29000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 676.704593][T28841] team0: Port device team_slave_0 added [ 676.711944][ T35] tipc: Disabling bearer [ 676.734062][ T35] tipc: Left network mode [ 676.863507][ T35] IPVS: stopping master sync thread 26540 ... [ 677.021263][T29008] bond2: (slave veth3): Enslaving as an active interface with a down link [ 677.055512][T28841] team0: Port device team_slave_1 added [ 677.069601][T29000] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 677.104659][T29000] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 677.147997][T29020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6411'. [ 677.394781][T28841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.401767][T28841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.431319][T29040] netlink: 'syz.0.6414': attribute type 1 has an invalid length. [ 677.503700][T29050] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 677.511511][T29050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.537328][T28841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.621070][T28841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.653297][T28841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.662530][T29062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6420'. [ 677.760227][T28841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.054378][ T5838] Bluetooth: hci5: command tx timeout [ 678.081216][T29082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6422'. [ 678.163794][T28841] hsr_slave_0: entered promiscuous mode [ 678.179094][T28841] hsr_slave_1: entered promiscuous mode [ 678.195591][T28841] debugfs: 'hsr0' already exists in 'hsr' [ 678.202652][T28841] Cannot create hsr debugfs directory [ 678.268925][T29091] netlink: 'syz.0.6425': attribute type 26 has an invalid length. [ 678.335554][ T35] hsr_slave_0: left promiscuous mode [ 678.341750][ T35] hsr_slave_1: left promiscuous mode [ 678.603156][ C1] bridge0: port 1(1x9) entered forwarding state [ 678.609778][ C1] bridge0: topology change detected, propagating [ 678.701590][T29096] syzkaller1: entered promiscuous mode [ 678.724291][T29096] syzkaller1: entered allmulticast mode [ 678.852401][T29108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6431'. [ 678.979200][T29112] tipc: Started in network mode [ 678.995639][T29112] tipc: Node identity ac14140f, cluster identity 4711 [ 679.023548][T29112] tipc: New replicast peer: 255.255.255.255 [ 679.030118][T29112] tipc: Enabled bearer , priority 10 [ 679.056826][T29117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6433'. [ 679.520198][T29152] netlink: 'syz.0.6438': attribute type 2 has an invalid length. [ 679.536570][T29152] netlink: 'syz.0.6438': attribute type 1 has an invalid length. [ 680.123090][ T5838] Bluetooth: hci5: command tx timeout [ 680.143930][ T5830] tipc: Node number set to 2886997007 [ 681.979956][T29120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.031735][T28841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 682.116486][T28841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 682.144550][T28841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 682.174821][T28841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 682.257870][T29274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6444'. [ 682.366634][T29292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6446'. [ 682.442070][T29297] geneve2: entered promiscuous mode [ 682.450797][T10784] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 44380 - 0 [ 682.473830][T10784] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 44380 - 0 [ 682.482770][T10784] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 44380 - 0 [ 682.503967][T10784] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 44380 - 0 [ 682.532205][T29301] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6450'. [ 682.546546][T28841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.572055][T28841] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.596654][T10784] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.604080][T10784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.686973][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.694168][T10784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.848986][T29313] ip6_vti0 speed is unknown, defaulting to 1000 [ 682.939599][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6457'. [ 683.019015][T29345] Unsupported ieee802154 address type: 0 [ 683.155722][T28841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.207298][T29350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6459'. [ 683.279781][T28841] veth0_vlan: entered promiscuous mode [ 683.332595][T29352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6460'. [ 683.359100][T28841] veth1_vlan: entered promiscuous mode [ 683.424942][T28841] veth0_macvtap: entered promiscuous mode [ 683.436965][T28841] veth1_macvtap: entered promiscuous mode [ 683.471571][T28841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.495424][T28841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.516399][T10784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.542218][T10784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.572786][T10784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.590445][T10784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.697041][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.708695][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.742668][T29365] netlink: 'syz.3.6463': attribute type 11 has an invalid length. [ 683.759168][T29365] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6463'. [ 683.764474][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.792397][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.966771][T29373] vlan3: entered allmulticast mode [ 684.012317][T29373] geneve1: entered allmulticast mode [ 684.354841][T26991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 684.367103][T26991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 684.390726][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 684.407808][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 684.416082][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 684.648524][T29401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6471'. [ 684.769333][T29388] bond3: option arp_interval: invalid value (18446744073709551615) [ 684.785462][T29388] bond3: option arp_interval: allowed values 0 - 2147483647 [ 684.799713][T29388] bond3 (unregistering): Released all slaves [ 684.844301][T29394] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6469'. [ 684.867712][T29394] bridge_slave_1: default FDB implementation only supports local addresses [ 685.018997][T29386] ip6_vti0 speed is unknown, defaulting to 1000 [ 685.078517][T29419] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6475'. [ 685.207602][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.234378][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.283469][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.311799][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.362187][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.400391][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.443688][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.466472][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.522706][T29442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 685.530773][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.540234][T29431] netlink: 'syz.2.6478': attribute type 9 has an invalid length. [ 685.541588][T29442] bridge0: port 3(gretap0) entered blocking state [ 685.555233][T29442] bridge0: port 3(gretap0) entered disabled state [ 685.561861][T29442] gretap0: entered allmulticast mode [ 685.570608][T29442] gretap0: entered promiscuous mode [ 685.576479][T29442] bridge0: port 3(gretap0) entered blocking state [ 685.583003][T29442] bridge0: port 3(gretap0) entered listening state [ 685.655466][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 685.685790][T29451] IPVS: length: 185 != 8 [ 685.917140][T29463] xt_TCPMSS: Only works on TCP SYN packets [ 686.063482][T29474] tipc: Failed to remove unknown binding: 66,0,0/0:1033470514/1033470515 [ 686.108766][T29386] chnl_net:caif_netlink_parms(): no params data found [ 686.238481][T29487] tipc: Failed to remove unknown binding: 66,0,0/0:1033470514/1033470515 [ 686.435522][T29386] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.442698][T29386] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.443843][ T5845] Bluetooth: hci1: command tx timeout [ 686.467500][T29386] bridge_slave_0: entered allmulticast mode [ 686.475962][T29386] bridge_slave_0: entered promiscuous mode [ 686.492427][T29386] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.514415][T29386] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.535267][T29386] bridge_slave_1: entered allmulticast mode [ 686.555490][T29386] bridge_slave_1: entered promiscuous mode [ 686.623823][T29386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.637984][T29386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.692895][T29386] team0: Port device team_slave_0 added [ 686.702184][T29386] team0: Port device team_slave_1 added [ 686.770871][T29386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.782836][T29386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.809935][T29386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.880835][T29386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.895749][T29386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.983420][T29386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.041283][T29515] tipc: Enabling of bearer rejected, already enabled [ 687.147428][T29386] hsr_slave_0: entered promiscuous mode [ 687.154231][T29386] hsr_slave_1: entered promiscuous mode [ 687.160639][T29386] debugfs: 'hsr0' already exists in 'hsr' [ 687.168181][T29386] Cannot create hsr debugfs directory [ 687.439561][T27202] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 687.566157][T27202] CPU: 0 UID: 0 PID: 27202 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 687.566188][T27202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.566198][T27202] Call Trace: [ 687.566205][T27202] [ 687.566216][T27202] dump_stack_lvl+0xe8/0x150 [ 687.566250][T27202] dump_header+0xd3/0x4c0 [ 687.566304][T27202] oom_kill_process+0x3ab/0x970 [ 687.566324][T27202] out_of_memory+0x106c/0x1410 [ 687.566340][T27202] ? percpu_ref_put+0x19/0x180 [ 687.566360][T27202] ? __pfx___mutex_lock+0x10/0x10 [ 687.566396][T27202] ? __pfx_out_of_memory+0x10/0x10 [ 687.566407][T27202] ? do_raw_spin_unlock+0xf5/0x210 [ 687.566432][T27202] try_charge_memcg+0xc53/0x1560 [ 687.566451][T27202] ? __lock_acquire+0x6b5/0x2cf0 [ 687.566483][T27202] ? __pfx_try_charge_memcg+0x10/0x10 [ 687.566497][T27202] ? xa_load+0x60/0x210 [ 687.566593][T27202] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 687.566615][T27202] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 687.566634][T27202] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 687.566655][T27202] __swap_cache_prepare_and_add+0x52a/0x700 [ 687.566700][T27202] swap_cache_alloc_folio+0xf1/0x240 [ 687.566733][T27202] swap_cluster_readahead+0x369/0x690 [ 687.566765][T27202] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 687.566807][T27202] ? get_vma_policy+0x27b/0x3c0 [ 687.566839][T27202] swapin_readahead+0x196/0xc50 [ 687.566867][T27202] ? filemap_map_pages+0x185/0x2050 [ 687.566891][T27202] ? __pfx_swapin_readahead+0x10/0x10 [ 687.566917][T27202] ? swap_table_get+0x1e/0x260 [ 687.566938][T27202] ? swap_table_get+0x1e/0x260 [ 687.566975][T27202] ? swap_table_get+0x1e/0x260 [ 687.566998][T27202] ? swap_table_get+0x216/0x260 [ 687.567021][T27202] ? swap_cache_get_folio+0x513/0x520 [ 687.567050][T27202] do_swap_page+0x54f/0x58d0 [ 687.567074][T27202] ? __lock_acquire+0x6b5/0x2cf0 [ 687.567111][T27202] ? do_swap_page+0x12c/0x58d0 [ 687.567131][T27202] ? __pfx_do_swap_page+0x10/0x10 [ 687.567151][T27202] ? __pte_offset_map+0x1ae/0x240 [ 687.567180][T27202] ? pte_offset_map_rw_nolock+0xea/0x160 [ 687.567208][T27202] handle_mm_fault+0x12d2/0x3310 [ 687.567246][T27202] ? handle_mm_fault+0xee/0x3310 [ 687.567278][T27202] ? __pfx_handle_mm_fault+0x10/0x10 [ 687.567300][T27202] ? lock_vma_under_rcu+0x45a/0x500 [ 687.567335][T27202] do_user_addr_fault+0xa73/0x1340 [ 687.567380][T27202] ? rcu_is_watching+0x15/0xb0 [ 687.567403][T27202] ? trace_page_fault_user+0x84/0x210 [ 687.567426][T27202] exc_page_fault+0x6a/0xc0 [ 687.567452][T27202] asm_exc_page_fault+0x26/0x30 [ 687.567469][T27202] RIP: 0033:0x7fb9c206a7b7 [ 687.567487][T27202] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 687.567500][T27202] RSP: 002b:00007ffdef42fe10 EFLAGS: 00010202 [ 687.567514][T27202] RAX: 0000001b2fe24000 RBX: 0000000000000162 RCX: 00000000000a7b98 [ 687.567525][T27202] RDX: 0000000002f2786f RSI: 00007ffdef42fea0 RDI: 000000000000001d [ 687.567534][T27202] RBP: 00007ffdef42fe4c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 687.567544][T27202] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 687.567553][T27202] R13: 00000000000927c0 R14: 00000000000a7b0c R15: 00007ffdef42fea0 [ 687.567578][T27202] [ 687.567586][T27202] memory: usage 307200kB, limit 307200kB, failcnt 600 [ 687.834173][T29548] __nla_validate_parse: 5 callbacks suppressed [ 687.834190][T29548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6512'. [ 687.933670][T27202] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 687.959534][T27202] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 687.971127][T29551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6510'. [ 687.987811][ T5191] udevd[5191]: worker [19352] /devices/virtual/block/nbd6 timeout; kill it [ 688.001120][T27202] Memory cgroup stats for /syz3: [ 688.001563][T27202] cache 0 [ 688.011716][T27202] rss 0 [ 688.019317][ T5191] udevd[5191]: seq 26009 '/devices/virtual/block/nbd6' killed [ 688.019678][T27202] rss_huge 0 [ 688.103078][T27202] shmem 0 [ 688.113263][T27202] mapped_file 0 [ 688.125352][T27202] dirty 0 [ 688.135059][T27202] writeback 0 [ 688.142871][T27202] workingset_refault_anon 15 [ 688.159077][T29541] bridge1: port 1(veth5) entered blocking state [ 688.187130][T27202] workingset_refault_file 0 [ 688.205422][T29541] bridge1: port 1(veth5) entered disabled state [ 688.211970][T29541] veth5: entered allmulticast mode [ 688.214759][T27202] swap 192512 [ 688.232478][T27202] swapcached 225280 [ 688.261068][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6514'. [ 688.263905][T29541] veth5: entered promiscuous mode [ 688.272386][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6514'. [ 688.301377][T27202] pgpgin 131261 [ 688.326866][T27202] pgpgout 131255 [ 688.369715][T27202] pgfault 239689 [ 688.391495][T27202] pgmajfault 6 [ 688.401943][T29549] bridge1: port 2(veth0_to_bond) entered blocking state [ 688.419309][T29549] bridge1: port 2(veth0_to_bond) entered disabled state [ 688.433299][T27202] inactive_anon 0 [ 688.437465][T29549] veth0_to_bond: entered allmulticast mode [ 688.447289][T27202] active_anon 24576 [ 688.451118][T27202] inactive_file 0 [ 688.457622][T29549] veth0_to_bond: entered promiscuous mode [ 688.470404][T27202] active_file 0 [ 688.489386][T27202] unevictable 0 [ 688.527075][ T5845] Bluetooth: hci1: command tx timeout [ 688.533403][T27202] hierarchical_memory_limit 314572800 [ 688.538791][T27202] hierarchical_memsw_limit 9223372036854771712 [ 688.562613][T27202] total_cache 0 [ 688.566307][T27202] total_rss 0 [ 688.569604][T27202] total_rss_huge 0 [ 688.576995][T27202] total_shmem 0 [ 688.580480][T27202] total_mapped_file 0 [ 688.584547][T27202] total_dirty 0 [ 688.588085][T27202] total_writeback 0 [ 688.591984][T27202] total_workingset_refault_anon 15 [ 688.597172][T27202] total_workingset_refault_file 0 [ 688.602265][T27202] total_swap 192512 [ 688.606772][T27202] total_swapcached 225280 [ 688.611109][T27202] total_pgpgin 131262 [ 688.615474][T27202] total_pgpgout 131256 [ 688.619551][T27202] total_pgfault 239695 [ 688.646399][T27202] total_pgmajfault 6 [ 688.650326][T27202] total_inactive_anon 0 [ 688.730644][T27202] total_active_anon 24576 [ 688.759440][T29571] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 688.764767][T27202] total_inactive_file 0 [ 688.800035][T27202] total_active_file 0 [ 688.815960][T27202] total_unevictable 0 [ 688.819978][T27202] anon_cost 0 [ 688.824093][T29571] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 688.831797][T27202] file_cost 0 [ 688.835771][T27202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6490,pid=29469,uid=0 [ 688.862208][T27202] Memory cgroup out of memory: OOM victim 29469 (syz.3.6490) is already exiting. Skip killing the task [ 688.873660][T29571] gretap2: entered promiscuous mode [ 688.873685][T29571] gretap2: entered allmulticast mode [ 689.050702][T29576] syzkaller0: entered promiscuous mode [ 689.073160][T29576] syzkaller0: entered allmulticast mode [ 689.588920][T29599] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6526'. [ 689.590401][T29386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 689.643553][T29386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 689.688197][T29386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 689.717107][T29386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 689.855723][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6529'. [ 689.873115][T29611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6529'. [ 690.038099][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.104901][ T1003] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.129556][T29626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.133901][ T1003] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.149376][T29626] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6534'. [ 690.210609][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.275374][T29386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.346452][T29386] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.379451][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.386640][T10660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.461938][T10663] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.469142][T10663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.555151][T29643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6540'. [ 690.603582][ T5845] Bluetooth: hci1: command tx timeout [ 690.680688][T29643] vlan2: entered allmulticast mode [ 690.685914][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 690.685944][ C1] lec:lec_tx_timeout: lec0 [ 690.725735][T29648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6540'. [ 690.735164][T29643] bridge2: entered allmulticast mode [ 690.763200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 690.934959][T29655] validate_nla: 24 callbacks suppressed [ 690.934981][T29655] netlink: 'syz.1.6543': attribute type 2 has an invalid length. [ 691.060880][T29386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.094589][T29665] netlink: 'syz.1.6545': attribute type 5 has an invalid length. [ 691.139792][T29665] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 691.156634][T29665] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 691.185258][T29665] team0: Failed to send options change via netlink (err -105) [ 691.195161][T29665] team0: Port device batadv1 added [ 691.435700][T29678] netlink: 'syz.3.6549': attribute type 2 has an invalid length. [ 691.440382][T29680] netlink: 'syz.0.6550': attribute type 1 has an invalid length. [ 691.444358][T29678] netlink: 'syz.3.6549': attribute type 2 has an invalid length. [ 691.467782][T29678] netlink: 'syz.3.6549': attribute type 2 has an invalid length. [ 691.623499][T29684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 691.631379][T29684] bond2: (slave bond3): making interface the new active one [ 691.648331][T29684] bond2: (slave bond3): Enslaving as an active interface with an up link [ 691.675062][T29699] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 691.731170][T29386] veth0_vlan: entered promiscuous mode [ 691.756078][T29686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.789259][T29386] veth1_vlan: entered promiscuous mode [ 691.939902][T29386] veth0_macvtap: entered promiscuous mode [ 691.984439][T29386] veth1_macvtap: entered promiscuous mode [ 692.029658][T29386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.126485][T29386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.258011][ T29] audit: type=1107 audit(1772621060.704:5): pid=29722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 692.459689][T29733] bond3 (unregistering): Released all slaves [ 692.490149][ T753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.507952][ T753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.531024][ T753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.554305][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.684575][ T5845] Bluetooth: hci1: command tx timeout [ 693.015718][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.044187][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.157749][T10663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.194421][T10663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.408568][T29783] netlink: 'syz.4.6468': attribute type 1 has an invalid length. [ 693.461868][T29788] __nla_validate_parse: 7 callbacks suppressed [ 693.461888][T29788] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6578'. [ 693.503070][T29788] openvswitch: netlink: Missing key (keys=40, expected=100) [ 693.531364][T29795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6575'. [ 693.540920][T29795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6575'. [ 693.637246][T29799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6580'. [ 693.670396][T29799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6580'. [ 693.713310][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6578'. [ 693.969668][ T11] block nbd3: Possible stuck request ffff888026cd0000: control (read@0,1024B). Runtime 270 seconds [ 693.984672][ T11] block nbd3: Possible stuck request ffff888026cd0200: control (read@1024,1024B). Runtime 270 seconds [ 693.996182][ T11] block nbd3: Possible stuck request ffff888026cd0400: control (read@2048,1024B). Runtime 270 seconds [ 694.009349][ T11] block nbd3: Possible stuck request ffff888026cd0600: control (read@3072,1024B). Runtime 270 seconds [ 694.182611][T29775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.233716][T29775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.804249][T29783] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 694.832725][T29809] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 694.851127][ T753] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.874527][ T753] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 44380 - 0 [ 694.918542][ T753] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.940375][ T753] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 44380 - 0 [ 695.008436][ T753] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.032082][ T753] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 44380 - 0 [ 695.063081][ T753] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.074139][ T753] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 44380 - 0 [ 695.940495][T29880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6598'. [ 696.269953][T29899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6601'. [ 696.295693][T29902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6602'. [ 696.312761][T29902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.331439][T29902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.358892][T29902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.371852][T29902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.646267][T29914] netlink: 'syz.4.6607': attribute type 21 has an invalid length. [ 696.675860][T29914] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6607'. [ 697.053455][T29943] netlink: 'syz.1.6615': attribute type 1 has an invalid length. [ 697.297740][T29958] IPv6: NLM_F_CREATE should be specified when creating new route [ 697.305836][T29959] IPv6: NLM_F_CREATE should be specified when creating new route [ 697.364713][T29962] syzkaller0: entered promiscuous mode [ 697.382189][T29962] syzkaller0: entered allmulticast mode [ 697.421020][T29962] 0: reclassify loop, rule prio 0, protocol 800 [ 697.485561][T29975] syzkaller0: entered promiscuous mode [ 697.491070][T29975] syzkaller0: entered allmulticast mode [ 697.727655][T29999] netlink: 'syz.0.6634': attribute type 6 has an invalid length. [ 697.739433][T29999] veth0_to_bridge: entered promiscuous mode [ 697.747805][T30000] netlink: 'syz.2.6635': attribute type 3 has an invalid length. [ 697.756214][T30000] netlink: 'syz.2.6635': attribute type 1 has an invalid length. [ 697.819129][T29993] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 697.954031][T29997] veth0_to_bridge: left promiscuous mode [ 698.358815][T30042] netlink: 'syz.4.6649': attribute type 1 has an invalid length. [ 698.367772][T30042] netlink: 'syz.4.6649': attribute type 1 has an invalid length. [ 698.384106][T30042] netlink: 'syz.4.6649': attribute type 1 has an invalid length. [ 698.396421][T30042] netlink: 'syz.4.6649': attribute type 2 has an invalid length. [ 698.451909][T30042] netlink: 'syz.4.6649': attribute type 2 has an invalid length. [ 698.471542][T30042] __nla_validate_parse: 7 callbacks suppressed [ 698.471559][T30042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6649'. [ 698.515274][T30054] bond4 (unregistering): Released all slaves [ 698.699987][T30066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6660'. [ 698.718527][T30067] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6659'. [ 698.890200][T30086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6663'. [ 698.964373][T30081] bond4: entered promiscuous mode [ 699.008184][T30081] bond4: entered allmulticast mode [ 699.015751][T30081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 699.030762][T30086] macvlan2: entered promiscuous mode [ 699.036529][T30086] macvlan2: entered allmulticast mode [ 699.145415][T30107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6667'. [ 699.156733][T30105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.213841][T30113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.266303][T30116] tipc: Started in network mode [ 699.281617][T30116] tipc: Node identity c0000000, cluster identity 5 [ 699.293618][T30116] tipc: Node number set to 3221225472 [ 699.307214][T30123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6672'. [ 699.327671][T30116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6671'. [ 699.440109][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6676'. [ 699.450221][T30134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6676'. [ 699.467854][T30134] geneve2: entered promiscuous mode [ 699.473344][T30134] geneve2: entered allmulticast mode [ 699.480020][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 699.491524][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 699.502374][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 699.511563][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 699.593398][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6674'. [ 699.829260][T30160] macvlan1: entered promiscuous mode [ 699.836122][T30160] macvlan1: entered allmulticast mode [ 699.841550][T30160] veth1_vlan: entered allmulticast mode [ 700.791236][T30173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.851487][T30176] veth0_virt_wifi: entered promiscuous mode [ 701.003191][ C1] bridge0: port 3(gretap0) entered learning state [ 702.248998][T30117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.842023][T30231] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 703.190908][T30257] tipc: Enabled bearer , priority 0 [ 703.198265][T30258] syzkaller0: entered promiscuous mode [ 703.204356][T30258] syzkaller0: entered allmulticast mode [ 703.221848][T30258] tipc: Resetting bearer [ 703.238263][T30258] tipc: Disabling bearer [ 703.583869][T30281] validate_nla: 8 callbacks suppressed [ 703.583889][T30281] netlink: 'syz.0.6718': attribute type 9 has an invalid length. [ 703.873991][T30300] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 703.917218][T30302] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 703.928608][T30274] infiniband : set down [ 703.928644][T30274] infiniband : added ipvlan0 [ 703.956162][T30302] CPU: 1 UID: 0 PID: 30302 Comm: syz.0.6725 Not tainted syzkaller #0 PREEMPT(full) [ 703.956187][T30302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 703.956198][T30302] Call Trace: [ 703.956206][T30302] [ 703.956214][T30302] dump_stack_lvl+0xe8/0x150 [ 703.956249][T30302] sysfs_warn_dup+0x8e/0xa0 [ 703.956278][T30302] sysfs_do_create_link_sd+0xc0/0x110 [ 703.956308][T30302] device_add_class_symlinks+0x1cf/0x240 [ 703.956471][T30302] device_add+0x475/0xb70 [ 703.956509][T30302] wiphy_register+0x1d73/0x2d50 [ 703.956600][T30302] ? __pfx_wiphy_register+0x10/0x10 [ 703.956624][T30302] ? __pfx_netdev_run_todo+0x10/0x10 [ 703.956689][T30302] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 703.956762][T30302] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 703.956858][T30302] ieee80211_register_hw+0x3571/0x4220 [ 703.956920][T30302] ? ieee80211_register_hw+0x1411/0x4220 [ 703.956949][T30302] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 703.956985][T30302] ? __hrtimer_setup+0x181/0x200 [ 703.957024][T30302] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 703.957118][T30302] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 703.957208][T30302] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 703.957238][T30302] ? kstrndup+0xbf/0x160 [ 703.957282][T30302] hwsim_new_radio_nl+0xf35/0x1bd0 [ 703.957340][T30302] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 703.957383][T30302] ? rcu_is_watching+0x15/0xb0 [ 703.957412][T30302] ? trace_kmalloc+0x2a/0x110 [ 703.957438][T30302] ? __nla_parse+0x40/0x60 [ 703.957472][T30302] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 703.957580][T30302] genl_family_rcv_msg_doit+0x22a/0x330 [ 703.957620][T30302] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 703.957667][T30302] ? bpf_lsm_capable+0x9/0x20 [ 703.957740][T30302] ? security_capable+0x7e/0x2c0 [ 703.957771][T30302] genl_rcv_msg+0x61c/0x7a0 [ 703.957810][T30302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.957841][T30302] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 703.957874][T30302] ? __lock_acquire+0x6b5/0x2cf0 [ 703.957914][T30302] netlink_rcv_skb+0x232/0x4b0 [ 703.957940][T30302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.957974][T30302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 703.958019][T30302] ? down_read+0x272/0x2e0 [ 703.958036][T30302] ? genl_rcv+0xd/0x40 [ 703.958068][T30302] genl_rcv+0x28/0x40 [ 703.958097][T30302] netlink_unicast+0x80f/0x9b0 [ 703.958128][T30302] ? __pfx_netlink_unicast+0x10/0x10 [ 703.958147][T30302] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 703.958171][T30302] ? netlink_sendmsg+0x650/0xb40 [ 703.958193][T30302] ? skb_put+0x11b/0x210 [ 703.958253][T30302] netlink_sendmsg+0x813/0xb40 [ 703.958289][T30302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.958319][T30302] ? aa_sock_msg_perm+0xf1/0x1b0 [ 703.958346][T30302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 703.958370][T30302] ____sys_sendmsg+0x972/0x9f0 [ 703.958399][T30302] ? finish_task_switch+0x240/0x920 [ 703.958442][T30302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.958484][T30302] ? import_iovec+0x73/0xa0 [ 703.958556][T30302] ___sys_sendmsg+0x2a5/0x360 [ 703.958593][T30302] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.958632][T30302] ? futex_wait+0x29a/0x380 [ 703.958682][T30302] ? irqentry_exit+0x59e/0x620 [ 703.958712][T30302] ? lockdep_hardirqs_on+0x7a/0x110 [ 703.958772][T30302] __x64_sys_sendmsg+0x1bd/0x2a0 [ 703.958806][T30302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 703.958847][T30302] ? rcu_is_watching+0x15/0xb0 [ 703.958890][T30302] do_syscall_64+0x14d/0xf80 [ 703.958920][T30302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.958939][T30302] ? clear_bhb_loop+0x40/0x90 [ 703.958964][T30302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.958982][T30302] RIP: 0033:0x7fe81839c799 [ 703.959000][T30302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.959015][T30302] RSP: 002b:00007fe8192ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.959035][T30302] RAX: ffffffffffffffda RBX: 00007fe818616090 RCX: 00007fe81839c799 [ 703.959048][T30302] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 703.959059][T30302] RBP: 00007fe818432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 703.959070][T30302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.959081][T30302] R13: 00007fe818616128 R14: 00007fe818616090 R15: 00007ffe46f8fc38 [ 703.959114][T30302] [ 704.459012][T30274] RDS/IB: : added [ 704.462816][T30274] smc: adding ib device  with port count 1 [ 704.476420][T30274] smc: ib device  port 1 has no pnetid [ 704.541235][T30308] __nla_validate_parse: 6 callbacks suppressed [ 704.541255][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6728'. [ 704.655688][T30317] ip6_vti0 speed is unknown, defaulting to 1000 [ 704.689584][T30317] netlink: 'syz.0.6731': attribute type 39 has an invalid length. [ 705.088767][T30341] netlink: 'syz.0.6737': attribute type 1 has an invalid length. [ 705.116371][T30341] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6737'. [ 705.143704][T30341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6737'. [ 705.201750][T30346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6740'. [ 705.216376][T30348] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6741'. [ 705.234800][T30345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6740'. [ 705.275110][T30346] bond2: entered promiscuous mode [ 705.288594][T30346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 705.329730][T30345] bridge1: entered promiscuous mode [ 705.335861][T30345] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 705.394866][T30346] bridge2: entered promiscuous mode [ 705.400702][T30346] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 705.440873][T30345] macvlan3: entered promiscuous mode [ 705.446592][T30345] macvlan3: entered allmulticast mode [ 705.459753][T30345] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 705.635432][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6747'. [ 705.875391][T30388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6752'. [ 706.020556][T30397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6755'. [ 706.054277][T30399] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6756'. [ 706.065474][T30397] netlink: 'syz.1.6755': attribute type 2 has an invalid length. [ 706.163830][ T2298] block nbd6: Possible stuck request ffff888026d90000: control (read@0,1024B). Runtime 210 seconds [ 706.174677][ T2298] block nbd6: Possible stuck request ffff888026d90200: control (read@1024,1024B). Runtime 210 seconds [ 706.186592][ T2298] block nbd6: Possible stuck request ffff888026d90400: control (read@2048,1024B). Runtime 210 seconds [ 706.198280][ T2298] block nbd6: Possible stuck request ffff888026d90600: control (read@3072,1024B). Runtime 210 seconds [ 706.307140][T30407] nftables ruleset with unbound chain [ 706.358909][T30409] atomic_op ffff88805c6c7998 conn xmit_atomic 0000000000000000 [ 706.545756][T30422] netlink: 'syz.0.6764': attribute type 10 has an invalid length. [ 706.576968][T30422] batman_adv: batadv0: Adding interface: netdevsim0 [ 706.593171][T30422] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.666058][T30422] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 706.852934][T30427] syzkaller0: entered promiscuous mode [ 706.873266][T30427] syzkaller0: entered allmulticast mode [ 706.881997][T30436] IPv6: NLM_F_CREATE should be specified when creating new route [ 708.665241][T30465] team1: entered promiscuous mode [ 708.675586][T30465] team1: entered allmulticast mode [ 708.887967][T30476] sctp: [Deprecated]: syz.2.6783 (pid 30476) Use of int in maxseg socket option. [ 708.887967][T30476] Use struct sctp_assoc_value instead [ 708.949256][T30474] netlink: 'syz.1.6782': attribute type 39 has an invalid length. [ 709.293526][T30494] netlink: 'syz.0.6789': attribute type 4 has an invalid length. [ 709.325354][T30496] macvtap1: entered promiscuous mode [ 709.330854][T30496] macvtap1: entered allmulticast mode [ 709.337465][T30496] veth1_vlan: entered allmulticast mode [ 709.413953][T30492] netlink: 'syz.1.6790': attribute type 1 has an invalid length. [ 709.421737][T30492] netlink: 'syz.1.6790': attribute type 2 has an invalid length. [ 709.432323][T30492] netlink: 'syz.1.6790': attribute type 1 has an invalid length. [ 709.523170][T30507] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 709.534331][T30507] tipc: Enabled bearer , priority 0 [ 709.541852][T30507] syzkaller0: entered promiscuous mode [ 709.570602][T30507] syzkaller0: entered allmulticast mode [ 709.617470][T30514] __nla_validate_parse: 11 callbacks suppressed [ 709.617488][T30514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6795'. [ 709.618446][T30507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6794'. [ 709.649523][T30515] netlink: 'syz.1.6795': attribute type 1 has an invalid length. [ 709.664801][T30515] netlink: 'syz.1.6795': attribute type 2 has an invalid length. [ 709.696529][T30507] tipc: Resetting bearer [ 709.784144][T30506] tipc: Resetting bearer [ 709.813894][T30506] tipc: Disabling bearer [ 709.842249][T30522] lo: entered allmulticast mode [ 710.089191][T30521] lo: left allmulticast mode [ 710.156756][T30540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.314059][T30551] netlink: 'syz.1.6808': attribute type 4 has an invalid length. [ 710.516784][T30572] team_slave_1: mtu less than device minimum [ 710.881010][T30604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6826'. [ 710.895358][T30604] netlink: 'syz.1.6826': attribute type 1 has an invalid length. [ 710.976256][T30604] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 710.995172][T30604] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 711.055213][T30618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6826'. [ 711.063065][T30604] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 711.065025][T30618] openvswitch: netlink: Missing key (keys=40, expected=80) [ 711.137863][T30620] tipc: Enabling of bearer rejected, failed to enable media [ 711.181073][T30617] syzkaller0: entered promiscuous mode [ 711.190880][T30617] syzkaller0: entered allmulticast mode [ 711.209060][T30628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6831'. [ 711.368358][T30639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6833'. [ 711.534135][T30645] netlink: 'syz.0.6834': attribute type 9 has an invalid length. [ 711.646227][T30652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6836'. [ 711.656014][T30652] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6836'. [ 711.668191][T30652] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6836'. [ 712.384759][T30698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6852'. [ 712.477356][ T5838] block nbd10: Receive control failed (result -32) [ 712.581469][T30710] syz_tun: entered allmulticast mode [ 712.589176][T30709] syz_tun: left allmulticast mode [ 712.990648][T30722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.007043][T30722] bond3: (slave bond4): making interface the new active one [ 713.046164][T30722] bond3: (slave bond4): Enslaving as an active interface with an up link [ 713.110028][T30728] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 713.159010][T30731] 9: entered promiscuous mode [ 713.215101][T30722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 713.334267][T30739] syzkaller0: entered promiscuous mode [ 713.352404][T30739] syzkaller0: entered allmulticast mode [ 713.401004][T30746] xt_TCPMSS: Only works on TCP SYN packets [ 713.409077][T30738] tipc: Started in network mode [ 713.417850][T30738] tipc: Node identity 02791b24f05d, cluster identity 4711 [ 713.425845][T30738] tipc: Enabled bearer , priority 0 [ 713.454670][T30745] tipc: Enabled bearer , priority 0 [ 713.604770][T30745] syzkaller0: entered promiscuous mode [ 713.610297][T30745] syzkaller0: entered allmulticast mode [ 713.622071][T30745] tipc: Resetting bearer [ 713.644317][T30743] tipc: Resetting bearer [ 714.121722][T30780] validate_nla: 6 callbacks suppressed [ 714.121740][T30780] netlink: 'syz.2.6872': attribute type 1 has an invalid length. [ 715.326899][T30743] tipc: Disabling bearer [ 715.335721][T30738] tipc: Resetting bearer [ 715.351485][T30738] tipc: Disabling bearer [ 715.363965][T30764] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 715.445563][T30785] __nla_validate_parse: 5 callbacks suppressed [ 715.445583][T30785] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6875'. [ 715.480352][T30780] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 715.480712][T30786] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6875'. [ 715.505205][ T5830] tipc: Node number set to 4062452516 [ 715.623839][T30801] netlink: 'syz.3.6881': attribute type 28 has an invalid length. [ 715.631694][T30801] netlink: 'syz.3.6881': attribute type 3 has an invalid length. [ 715.663613][T30805] netlink: 'syz.2.6880': attribute type 21 has an invalid length. [ 715.677505][T30805] netlink: 'syz.2.6880': attribute type 6 has an invalid length. [ 715.678446][T30801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6881'. [ 715.687317][T30809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6883'. [ 715.703617][T30805] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6880'. [ 715.826807][T30823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6885'. [ 715.926321][T30845] netlink: 'syz.4.6889': attribute type 3 has an invalid length. [ 716.363205][ C1] bridge0: port 3(gretap0) entered forwarding state [ 716.369887][ C1] bridge0: topology change detected, propagating [ 718.657771][T30805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.845293][T30862] sctp: [Deprecated]: syz.4.6894 (pid 30862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.845293][T30862] Use struct sctp_sack_info instead [ 718.866481][T30855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6892'. [ 718.882555][T10663] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.913081][T10663] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.921749][T30869] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6892'. [ 718.956740][T10663] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.986450][T30870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6892'. [ 718.995639][T10663] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.051017][T30872] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6897'. [ 719.329051][T30903] bond3: Unable to set up delay as MII monitoring is disabled [ 719.345024][T30908] netlink: 'syz.3.6907': attribute type 2 has an invalid length. [ 719.350973][T30903] bond3 (unregistering): Released all slaves [ 720.207872][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.235736][T30970] xt_cgroup: xt_cgroup: no path or classid specified [ 720.417077][T30989] macvtap1: entered promiscuous mode [ 720.422731][T30989] macvtap1: entered allmulticast mode [ 720.428676][T30989] veth1_vlan: entered allmulticast mode [ 720.446222][T30989] macvtap2: entered promiscuous mode [ 720.451772][T30989] macvtap2: entered allmulticast mode [ 720.694419][T31008] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 720.759027][T31011] tipc: Resetting bearer [ 720.795432][T31011] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 720.801823][T31011] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 720.817821][T31011] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 720.824673][T31011] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 720.859435][T31011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 720.867982][T31011] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 720.896733][T31011] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 720.903493][T31011] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 720.935893][T31011] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 720.942273][T31011] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 721.253355][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.293325][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.443637][ T9444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.323696][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.342540][T30981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.586399][ T6415] lec:lec_start_xmit: lec0:No lecd attached [ 723.608527][T31031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.691805][T31034] __nla_validate_parse: 3 callbacks suppressed [ 723.691823][T31034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6947'. [ 723.740857][T31034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6947'. [ 723.750194][T31038] Bluetooth: MGMT ver 1.23 [ 723.782024][T10784] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.801626][T31034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6947'. [ 723.818442][T10784] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.830803][T31048] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6948'. [ 723.840701][T31048] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6948'. [ 723.858921][T31050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6951'. [ 723.879657][T10784] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.893368][T31048] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6948'. [ 723.934032][T10784] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.945331][T31047] netlink: set zone limit has 4 unknown bytes [ 724.043693][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.058517][ T11] block nbd3: Possible stuck request ffff888026cd0000: control (read@0,1024B). Runtime 300 seconds [ 724.069357][ T11] block nbd3: Possible stuck request ffff888026cd0200: control (read@1024,1024B). Runtime 300 seconds [ 724.080415][ T11] block nbd3: Possible stuck request ffff888026cd0400: control (read@2048,1024B). Runtime 300 seconds [ 724.092268][ T11] block nbd3: Possible stuck request ffff888026cd0600: control (read@3072,1024B). Runtime 300 seconds [ 724.232916][T31073] openvswitch: netlink: Message has 155 unknown bytes. [ 724.324305][T31082] netlink: 'syz.1.6960': attribute type 1 has an invalid length. [ 724.363257][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.368456][T31082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 724.508160][T31098] bond4: (slave ip6erspan0): making interface the new active one [ 724.526453][T31098] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 724.589056][T31104] syz_tun: entered allmulticast mode [ 724.692196][T31112] syzkaller0: entered promiscuous mode [ 724.700522][T31112] syzkaller0: entered allmulticast mode [ 724.986685][T31141] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6974'. [ 725.012556][T31140] bond5: entered allmulticast mode [ 725.038306][T31140] bridge4: entered promiscuous mode [ 725.044052][T31140] bridge4: entered allmulticast mode [ 725.056663][T31140] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 725.173483][T31154] sctp: [Deprecated]: syz.2.6978 (pid 31154) Use of int in max_burst socket option. [ 725.173483][T31154] Use struct sctp_assoc_value instead [ 725.215844][T31140] nbd11: detected capacity change from 0 to 127 [ 725.227844][ T5838] block nbd11: Receive control failed (result -32) [ 725.253849][T26236] block nbd11: Dead connection, failed to find a fallback [ 725.292596][T26236] block nbd11: shutting down sockets [ 725.316873][T31161] netlink: 'syz.4.6979': attribute type 83 has an invalid length. [ 725.326778][T26236] blk_print_req_error: 138 callbacks suppressed [ 725.326797][T26236] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.353196][T26236] buffer_io_error: 138 callbacks suppressed [ 725.353213][T26236] Buffer I/O error on dev nbd11, logical block 0, async page read [ 725.369075][T31163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6980'. [ 725.386090][T31166] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 725.406239][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.414694][T26236] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.434029][T26236] Buffer I/O error on dev nbd11, logical block 1, async page read [ 725.445460][T26236] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.456323][T26236] Buffer I/O error on dev nbd11, logical block 2, async page read [ 725.464527][T26236] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.485624][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.491012][T26236] Buffer I/O error on dev nbd11, logical block 3, async page read [ 725.510086][T31167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6981'. [ 725.524357][T26236] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.560014][T26236] Buffer I/O error on dev nbd11, logical block 0, async page read [ 725.570298][T26236] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.580452][T26236] Buffer I/O error on dev nbd11, logical block 1, async page read [ 725.622194][T26236] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.642149][T26236] Buffer I/O error on dev nbd11, logical block 2, async page read [ 725.663438][T26236] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.683835][T26236] Buffer I/O error on dev nbd11, logical block 3, async page read [ 725.711450][T31185] netlink: 'syz.4.6989': attribute type 10 has an invalid length. [ 725.725413][T31185] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.733922][T31185] bridge_slave_1: left allmulticast mode [ 725.739790][T31185] bridge_slave_1: left promiscuous mode [ 725.746330][T26236] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.756851][T31185] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.764504][T26236] Buffer I/O error on dev nbd11, logical block 0, async page read [ 725.772509][T26236] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.793114][T26236] Buffer I/O error on dev nbd11, logical block 1, async page read [ 725.803542][T26236] ldm_validate_partition_table(): Disk read failed. [ 725.814954][T31185] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 725.825264][T26236] Dev nbd11: unable to read RDB block 0 [ 725.835233][T26236] nbd11: unable to read partition table [ 725.870161][T26236] ldm_validate_partition_table(): Disk read failed. [ 725.878487][T26236] Dev nbd11: unable to read RDB block 0 [ 725.885086][T26236] nbd11: unable to read partition table [ 726.157982][T31212] xfrm1: entered allmulticast mode [ 726.173512][T31209] syzkaller0: entered promiscuous mode [ 726.179013][T31209] syzkaller0: entered allmulticast mode [ 726.206504][ T1003] 0: reclassify loop, rule prio 0, protocol 800 [ 726.447353][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.542844][T31236] syzkaller0: entered promiscuous mode [ 726.552730][T31236] syzkaller0: entered allmulticast mode [ 726.592490][T31236] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 726.610823][T31236] bond5 (unregistering): Released all slaves [ 726.632193][T31240] netlink: 'syz.0.7008': attribute type 1 has an invalid length. [ 726.829534][T31265] netlink: 'syz.0.7013': attribute type 1 has an invalid length. [ 727.164406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.173171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.265621][T31300] netlink: 'syz.0.7024': attribute type 11 has an invalid length. [ 727.288351][T31303] netlink: 'syz.0.7024': attribute type 11 has an invalid length. [ 727.336437][T31306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.483609][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.490100][T31312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.525638][T31312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.538190][T31312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.548696][T31312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.835086][T31330] sctp: [Deprecated]: syz.0.7033 (pid 31330) Use of int in maxseg socket option. [ 727.835086][T31330] Use struct sctp_assoc_value instead [ 728.061442][T31346] netlink: 'syz.2.7037': attribute type 5 has an invalid length. [ 728.431415][ T29] audit: type=1107 audit(1772621096.874:6): pid=31371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 728.432728][T31372] netlink: 'syz.4.7046': attribute type 2 has an invalid length. [ 728.538424][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.563174][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.616091][T31374] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 728.683066][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 728.691123][ C1] lec:lec_tx_timeout: lec0 [ 728.985851][T31396] : entered promiscuous mode [ 729.098545][T31405] ip6tnl0: entered promiscuous mode [ 729.110084][T31410] netlink: 'syz.0.7058': attribute type 83 has an invalid length. [ 729.118933][ T5830] IPVS: starting estimator thread 0... [ 729.217180][T31411] IPVS: using max 41 ests per chain, 98400 per kthread [ 729.292671][T31420] syzkaller0: entered promiscuous mode [ 729.303306][T31420] syzkaller0: entered allmulticast mode [ 729.328642][T31420] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 729.589016][T31443] netlink: 'syz.2.7068': attribute type 1 has an invalid length. [ 729.615918][T31443] __nla_validate_parse: 15 callbacks suppressed [ 729.615935][T31443] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7068'. [ 729.766259][T31468] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7072'. [ 729.875961][T31484] C: renamed from lo [ 729.935206][T31491] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7076'. [ 730.089258][T31507] syzkaller0: entered promiscuous mode [ 730.105210][T31507] syzkaller0: entered allmulticast mode [ 730.152063][T31511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7079'. [ 730.244126][T31516] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7084'. [ 730.325965][T31519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7086'. [ 730.356858][T31519] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.364587][T31519] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.433868][T31524] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 730.442418][T31529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7089'. [ 730.465538][T31524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7087'. [ 730.475517][T31524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7087'. [ 730.606751][T20867] net_ratelimit: 4 callbacks suppressed [ 730.606769][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.951740][T31565] bridge1: entered promiscuous mode [ 730.969168][T31565] bridge1: entered allmulticast mode [ 731.013658][T31565] team0: Port device bridge1 added [ 731.154439][T31582] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7100'. [ 731.191757][T31582] validate_nla: 2 callbacks suppressed [ 731.191776][T31582] netlink: 'syz.0.7100': attribute type 4 has an invalid length. [ 731.217781][T31582] netlink: 'syz.0.7100': attribute type 1 has an invalid length. [ 731.365283][T31598] netlink: 'syz.0.7104': attribute type 13 has an invalid length. [ 731.439856][T31467] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.439949][T31598] netlink: 'syz.0.7104': attribute type 13 has an invalid length. [ 731.457777][T31467] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.497114][T31467] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.561048][T31467] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.645033][ T9444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.653291][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.951752][T31617] netlink: 'syz.3.7108': attribute type 5 has an invalid length. [ 732.258605][T31646] netlink: 'syz.1.7118': attribute type 39 has an invalid length. [ 732.687967][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.708196][T31688] netlink: 'syz.0.7129': attribute type 4 has an invalid length. [ 732.757844][T31689] syzkaller0: entered promiscuous mode [ 732.766247][T31689] syzkaller0: entered allmulticast mode [ 732.870305][T31697] netlink: 'syz.1.7135': attribute type 1 has an invalid length. [ 733.168372][T31726] openvswitch: netlink: EtherType 0 is less than min 600 [ 733.198570][T31728] netlink: 'syz.0.7145': attribute type 1 has an invalid length. [ 733.207157][T31728] netlink: 'syz.0.7145': attribute type 1 has an invalid length. [ 733.221766][T31728] syzkaller0: entered promiscuous mode [ 733.263085][T31728] syzkaller0: entered allmulticast mode [ 733.321108][T31738] syzkaller0: entered promiscuous mode [ 733.328939][T31738] syzkaller0: entered allmulticast mode [ 733.365678][T31740] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 733.395915][T31740] team2: entered promiscuous mode [ 733.400997][T31740] team2: entered allmulticast mode [ 733.493326][T31742] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.648668][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.727512][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.753636][T31761] bond5: option mode: invalid value (133) [ 733.760858][T31761] bond5 (unregistering): Released all slaves [ 733.904164][T31773] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 734.541493][T31813] dummy0: entered promiscuous mode [ 734.553958][T31813] bridge0: port 2(dummy0) entered blocking state [ 734.563647][T31813] bridge0: port 2(dummy0) entered disabled state [ 734.572662][T31813] dummy0: entered allmulticast mode [ 734.584220][T31813] bridge0: port 2(dummy0) entered blocking state [ 734.590723][T31813] bridge0: port 2(dummy0) entered forwarding state [ 734.651514][T31825] __nla_validate_parse: 25 callbacks suppressed [ 734.651537][T31825] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7177'. [ 734.676030][T31827] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 734.703821][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.729362][T31829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7179'. [ 734.763339][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.788576][T31476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 734.797396][T31476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 734.813934][ T5830] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 734.960227][T31857] netlink: 408 bytes leftover after parsing attributes in process `syz.1.7186'. [ 735.001910][T31857] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.7186'. [ 735.024755][T31861] sctp: [Deprecated]: syz.3.7188 (pid 31861) Use of int in max_burst socket option deprecated. [ 735.024755][T31861] Use struct sctp_assoc_value instead [ 735.040839][T31859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.042806][T31859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.083449][T31863] sctp: [Deprecated]: syz.2.7189 (pid 31863) Use of int in maxseg socket option. [ 735.083449][T31863] Use struct sctp_assoc_value instead [ 735.103226][ T9444] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 735.255542][T31872] syzkaller0: entered promiscuous mode [ 735.261062][T31872] syzkaller0: entered allmulticast mode [ 735.271498][T31872] tipc: Enabled bearer , priority 0 [ 735.296340][T31871] tipc: Resetting bearer [ 735.316978][T31871] tipc: Disabling bearer [ 735.383221][ T9444] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 735.427511][T31887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7195'. [ 735.483925][T31891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7197'. [ 735.651297][T31904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7198'. [ 735.806742][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.822244][T31914] x_tables: duplicate underflow at hook 3 [ 735.916587][T31916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7202'. [ 736.123273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.157603][T31926] syzkaller0: entered promiscuous mode [ 736.177410][T31926] syzkaller0: entered allmulticast mode [ 736.188579][T31935] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ1 [ 736.207979][T31935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7209'. [ 736.218136][ T2298] block nbd6: Possible stuck request ffff888026d90000: control (read@0,1024B). Runtime 240 seconds [ 736.220564][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7205'. [ 736.229304][ T2298] block nbd6: Possible stuck request ffff888026d90200: control (read@1024,1024B). Runtime 240 seconds [ 736.253084][ T2298] block nbd6: Possible stuck request ffff888026d90400: control (read@2048,1024B). Runtime 240 seconds [ 736.262178][T31940] validate_nla: 5 callbacks suppressed [ 736.262195][T31940] netlink: 'syz.2.7211': attribute type 4 has an invalid length. [ 736.264735][ T2298] block nbd6: Possible stuck request ffff888026d90600: control (read@3072,1024B). Runtime 240 seconds [ 736.349819][T31943] netlink: 'syz.2.7211': attribute type 16 has an invalid length. [ 736.393253][T31943] netlink: 'syz.2.7211': attribute type 17 has an invalid length. [ 736.412315][T31945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.461365][T31943] C: left promiscuous mode [ 736.500642][T31943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 736.709317][T31967] bond0: entered promiscuous mode [ 736.715165][T31967] bond_slave_0: entered promiscuous mode [ 736.721707][T31967] bond_slave_1: entered promiscuous mode [ 736.753824][T31967] bridge_slave_1: entered promiscuous mode [ 736.766559][T31967] bond0: left promiscuous mode [ 736.771374][T31967] bond_slave_0: left promiscuous mode [ 736.793974][T31967] bond_slave_1: left promiscuous mode [ 736.805462][T31967] bridge_slave_1: left promiscuous mode [ 736.843972][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.858799][T31972] openvswitch: netlink: Missing key (keys=40, expected=80) [ 736.942864][T31980] xfrm1: entered allmulticast mode [ 737.200428][T31998] netlink: 'syz.4.7230': attribute type 32 has an invalid length. [ 737.232906][T31998] bond1: option coupled_control: invalid value (52) [ 737.386283][T31998] bond1 (unregistering): Released all slaves [ 737.595719][T32007] syzkaller0: entered promiscuous mode [ 737.601296][T32007] syzkaller0: entered allmulticast mode [ 737.724188][ T9444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.810114][T32037] netlink: 'syz.2.7240': attribute type 1 has an invalid length. [ 737.893298][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.764168][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 738.929361][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.271018][T32027] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 739.304970][T32037] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 739.416906][T32045] netlink: 'syz.1.7242': attribute type 18 has an invalid length. [ 739.464041][T32045] netlink: 'syz.1.7242': attribute type 18 has an invalid length. [ 739.525852][T32054] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 739.664068][T32062] bridge0: port 4(syz_tun) entered blocking state [ 739.675105][T32062] bridge0: port 4(syz_tun) entered disabled state [ 739.684694][T32062] syz_tun: entered promiscuous mode [ 739.690480][T32062] bridge0: port 4(syz_tun) entered blocking state [ 739.697063][T32062] bridge0: port 4(syz_tun) entered listening state [ 739.749088][T32066] netlink: 'syz.2.7249': attribute type 1 has an invalid length. [ 739.812812][T32066] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 739.862054][T32071] IPv6: sit1: Disabled Multicast RS [ 739.914330][T32071] sit1: entered allmulticast mode [ 740.087900][T32084] netlink: 'syz.0.7255': attribute type 32 has an invalid length. [ 740.123254][T32084] __nla_validate_parse: 15 callbacks suppressed [ 740.123277][T32084] netlink: 776 bytes leftover after parsing attributes in process `syz.0.7255'. [ 740.260580][T32098] syzkaller1: entered promiscuous mode [ 740.273099][T32098] syzkaller1: entered allmulticast mode [ 740.304561][T32098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7258'. [ 740.490955][T32115] sctp: [Deprecated]: syz.2.7264 (pid 32115) Use of int in maxseg socket option. [ 740.490955][T32115] Use struct sctp_assoc_value instead [ 740.647032][T32125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7268'. [ 741.048086][T32135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 741.087458][T32135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7271'. [ 741.102797][T20868] net_ratelimit: 4 callbacks suppressed [ 741.102813][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.374744][T32162] netlink: 'syz.2.7276': attribute type 21 has an invalid length. [ 741.392829][T32162] IPv6: NLM_F_CREATE should be specified when creating new route [ 741.569167][T32171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7278'. [ 741.659921][T32171] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7278'. [ 741.672319][T32179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.681666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.703844][T32171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7278'. [ 741.879891][T32189] netlink: 'syz.2.7283': attribute type 1 has an invalid length. [ 741.906731][T32191] ipt_REJECT: TCP_RESET invalid for non-tcp [ 741.975721][T32198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7286'. [ 742.126597][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.361578][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7289'. [ 742.386467][T32217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7289'. [ 742.425115][T32210] bond7: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 742.437504][T32210] bond7: (slave ip6gre0): Error -95 calling set_mac_address [ 742.446202][T32210] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 742.640771][T32235] sctp: [Deprecated]: syz.0.7294 (pid 32235) Use of int in max_burst socket option deprecated. [ 742.640771][T32235] Use struct sctp_assoc_value instead [ 743.164423][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.247204][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.803660][ T9444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.203660][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.245627][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.324059][T32213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.449022][T32255] netlink: 'syz.1.7298': attribute type 10 has an invalid length. [ 745.505051][T32255] team0: Device vxcan1 is of different type [ 745.556466][T32265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7302'. [ 745.784706][T32289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7308'. [ 745.872703][T32293] xt_SECMARK: invalid mode: 9 [ 746.101643][T32288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7309'. [ 746.179712][T32311] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 746.225836][T32313] netlink: 'syz.0.7317': attribute type 6 has an invalid length. [ 746.228241][T32314] netlink: 'syz.0.7317': attribute type 6 has an invalid length. [ 746.242705][T32314] netlink: 'syz.0.7317': attribute type 6 has an invalid length. [ 746.249892][T32313] netlink: 'syz.0.7317': attribute type 1 has an invalid length. [ 746.259342][T32313] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7317'. [ 746.273761][T32315] netlink: 'syz.2.7316': attribute type 8 has an invalid length. [ 746.285666][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.843469][ T9444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.087635][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.089594][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 747.324479][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.365863][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.682084][T32280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.868990][T32336] netlink: 'syz.1.7322': attribute type 6 has an invalid length. [ 748.937309][T32340] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7325'. [ 748.963672][T32342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 748.970906][T32342] IPv6: NLM_F_CREATE should be set when creating new route [ 749.444484][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.915994][T32394] bridge0: port 3(gretap0) entered disabled state [ 749.937824][T32394] bridge0: port 4(syz_tun) entered disabled state [ 749.954627][T32394] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.963867][T32394] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.113748][T31467] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.125959][T31467] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.143714][T31467] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.163392][T31467] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.182200][T31467] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.199962][T31467] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.211399][T31467] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.220870][T31467] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.282728][T32398] can: request_module (can-proto-4) failed. [ 750.306589][T32404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7341'. [ 750.548554][T32409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7342'. [ 752.475557][T32376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.503255][T32406] netlink: 'syz.3.7342': attribute type 1 has an invalid length. [ 752.514241][T32406] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7342'. [ 752.535647][T32406] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7342'. [ 752.578307][T32406] netlink: 658 bytes leftover after parsing attributes in process `syz.3.7342'. [ 752.659494][T32415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7345'. [ 752.683018][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.691041][ C1] lec:lec_tx_timeout: lec0 [ 752.821004][T32426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 752.837651][T32422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7348'. [ 752.856798][T32426] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 752.868873][T32422] netlink: 'syz.0.7348': attribute type 7 has an invalid length. [ 752.876826][T32426] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 752.885364][T32422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7348'. [ 752.896324][T32426] gretap2: entered promiscuous mode [ 752.901651][T32426] gretap2: entered allmulticast mode [ 752.918455][T32422] gretap0: entered promiscuous mode [ 752.943130][T32422] gretap0: left promiscuous mode [ 753.004157][T32439] : entered promiscuous mode [ 753.306885][T32463] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 753.325459][T32459] netlink: 'syz.2.7356': attribute type 1 has an invalid length. [ 753.360018][T32467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7359'. [ 753.416462][T32471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.425986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.452184][T32471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.463332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.472705][ T753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.481825][T32467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7359'. [ 753.501029][T32472] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 753.513730][T32471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.527136][T32466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7359'. [ 753.576403][T32483] openvswitch: netlink: IP tunnel dst address not specified [ 753.607176][T32486] openvswitch: netlink: IP tunnel dst address not specified [ 753.982646][T32527] netlink: 'syz.3.7376': attribute type 2 has an invalid length. [ 753.991912][T32527] netlink: 'syz.3.7376': attribute type 2 has an invalid length. [ 754.123775][ T11] block nbd3: Possible stuck request ffff888026cd0000: control (read@0,1024B). Runtime 330 seconds [ 754.134702][ T11] block nbd3: Possible stuck request ffff888026cd0200: control (read@1024,1024B). Runtime 330 seconds [ 754.140979][T31467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.146062][ T11] block nbd3: Possible stuck request ffff888026cd0400: control (read@2048,1024B). Runtime 330 seconds [ 754.167269][ T11] block nbd3: Possible stuck request ffff888026cd0600: control (read@3072,1024B). Runtime 330 seconds [ 756.178623][T32453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.313509][T32536] netlink: 'syz.2.7377': attribute type 29 has an invalid length. [ 756.462002][T32544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 756.592876][T32543] syzkaller0: entered promiscuous mode [ 756.600140][T32543] syzkaller0: entered allmulticast mode [ 757.627776][T32589] __nla_validate_parse: 40 callbacks suppressed [ 757.627799][T32589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7389'. [ 758.381416][T32570] erspan0: entered promiscuous mode [ 758.388182][T32570] gretap0: entered promiscuous mode [ 758.466692][T32594] syzkaller0: entered promiscuous mode [ 758.472203][T32594] syzkaller0: entered allmulticast mode [ 758.573765][T32599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7393'. [ 758.592526][T32601] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.7390'. [ 758.657448][T32608] netlink: 'syz.1.7395': attribute type 1 has an invalid length. [ 758.708748][T32608] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 758.719528][T32608] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 758.732023][T32608] bond6: (slave vxcan3): making interface the new active one [ 758.740775][T32608] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 758.778820][T32611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7396'. [ 759.747237][T32578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.764431][T32616] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7398'. [ 759.887300][T31467] net_ratelimit: 6 callbacks suppressed [ 759.887317][T31467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.902425][ T9443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.914166][ T9444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.928436][T32625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.937741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.992050][T32629] netlink: 'syz.2.7402': attribute type 1 has an invalid length. [ 760.145511][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7405'. [ 760.187813][T32642] netlink: 'syz.4.7406': attribute type 1 has an invalid length. [ 760.215601][T32642] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.7406'. [ 760.265883][T32645] openvswitch: netlink: Message has 592 unknown bytes. [ 760.272795][T32645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.303881][T32647] pim6reg1: entered promiscuous mode [ 760.309363][T32647] pim6reg1: entered allmulticast mode [ 760.389872][T31467] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 760.428882][T32662] xt_ipcomp: unknown flags 1D [ 760.460665][T32649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 760.608898][T32673] netlink: 'syz.3.7414': attribute type 1 has an invalid length. [ 760.734519][T32685] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7419'. [ 760.807044][T32691] netlink: 'syz.3.7421': attribute type 11 has an invalid length. [ 760.815218][T32691] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7421'. [ 760.872412][T32693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7423'. [ 761.055280][T32707] netlink: 'syz.4.7428': attribute type 10 has an invalid length. [ 761.074347][T32707] veth0_macvtap: left promiscuous mode [ 761.165809][ T30] INFO: task udevd:19308 blocked for more than 143 seconds. [ 761.176766][ T30] Not tainted syzkaller #0 [ 761.183624][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 761.196049][ T30] task:udevd state:D stack:21152 pid:19308 tgid:19308 ppid:5191 task_flags:0x400140 flags:0x00080002 [ 761.208651][ T30] Call Trace: [ 761.209114][T32714] x_tables: duplicate underflow at hook 3 [ 761.212013][ T30] [ 761.221304][ T30] __schedule+0x1585/0x5340 [ 761.225939][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 761.231024][ T30] ? __pfx___schedule+0x10/0x10 [ 761.236104][ T30] ? schedule+0x90/0x360 [ 761.240753][ T30] schedule+0x164/0x360 [ 761.245151][ T30] io_schedule+0x7f/0xd0 [ 761.249442][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 761.254893][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 761.260750][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 761.266618][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 761.272345][ T30] do_read_cache_folio+0x1ad/0x590 [ 761.277653][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 761.283286][ T30] read_part_sector+0xb6/0x2b0 [ 761.288147][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 761.293755][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 761.299329][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 761.305399][ T30] bdev_disk_changed+0x7ba/0x1550 [ 761.310447][ T30] ? bdev_open+0xe0/0xd30 [ 761.315014][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 761.320503][ T30] blkdev_get_whole+0x380/0x510 [ 761.325442][ T30] bdev_open+0x31e/0xd30 [ 761.329712][ T30] blkdev_open+0x470/0x610 [ 761.334282][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 761.339228][ T30] do_dentry_open+0x785/0x14e0 [ 761.344125][ T30] vfs_open+0x3b/0x340 [ 761.348219][ T30] ? path_openat+0x2df0/0x3860 [ 761.353144][ T30] path_openat+0x2e08/0x3860 [ 761.357762][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 761.364005][ T30] ? stack_depot_save_flags+0x33/0x810 [ 761.369569][ T30] ? __pfx_path_openat+0x10/0x10 [ 761.375116][ T30] ? __x64_sys_openat+0x138/0x170 [ 761.380171][ T30] ? do_syscall_64+0x14d/0xf80 [ 761.385345][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.391443][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 761.396730][ T30] do_file_open+0x23e/0x4a0 [ 761.401261][ T30] ? __pfx_do_file_open+0x10/0x10 [ 761.406745][ T30] ? _raw_spin_unlock+0x28/0x50 [ 761.411702][ T30] ? alloc_fd+0x64b/0x6c0 [ 761.417041][ T30] do_sys_openat2+0x113/0x200 [ 761.421752][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 761.443050][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 761.448312][ T30] ? rcu_is_watching+0x15/0xb0 [ 761.463036][ T30] __x64_sys_openat+0x138/0x170 [ 761.467948][ T30] do_syscall_64+0x14d/0xf80 [ 761.479286][ T30] ? trace_irq_disable+0x3b/0x150 [ 761.486219][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.492312][ T30] ? clear_bhb_loop+0x40/0x90 [ 761.497519][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.503483][ T30] RIP: 0033:0x7ff762ea7407 [ 761.507901][ T30] RSP: 002b:00007ffc715d31a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 761.516439][ T30] RAX: ffffffffffffffda RBX: 00007ff763584880 RCX: 00007ff762ea7407 [ 761.524454][ T30] RDX: 00000000000a0800 RSI: 000055958da2cc80 RDI: ffffffffffffff9c [ 761.532417][ T30] RBP: 000055958da25910 R08: 0000000000000000 R09: 0000000000000000 [ 761.540511][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055958da81de0 [ 761.548540][ T30] R13: 000055958da33190 R14: 0000000000000000 R15: 000055958da81de0 [ 761.556669][ T30] [ 761.562808][T32703] ip6_vti0 speed is unknown, defaulting to 1000 [ 761.571042][ T30] [ 761.571042][ T30] Showing all locks held in the system: [ 761.578910][ T30] 1 lock held by khungtaskd/30: [ 761.603063][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 761.613157][ T30] 2 locks held by getty/5585: [ 761.618548][T32720] syzkaller0: entered promiscuous mode [ 761.633111][ T30] #0: ffff8880323920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 761.648387][T32720] syzkaller0: entered allmulticast mode [ 761.663859][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 761.678482][ T30] 1 lock held by syz-executor/5811: [ 761.691263][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 761.701538][ T30] 1 lock held by udevd/19308: [ 761.706454][ T30] #0: ffff888026543358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 761.716163][ T30] 1 lock held by udevd/19352: [ 761.720850][ T30] #0: ffff888026caf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 761.730689][ T30] 5 locks held by kworker/u8:24/31467: [ 761.736852][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 761.747086][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 761.756314][ T30] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 761.765551][ T30] #3: ffffffff9a4a8318 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 761.776609][ T30] #4: ffffffff8e604ca8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 761.787381][ T30] 1 lock held by syz.2.7408/32646: [ 761.792495][ T30] #0: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 761.802854][ T30] 5 locks held by syz.1.7426/32703: [ 761.808680][T20867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.818080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.827020][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.836631][ T30] 2 locks held by syz.4.7430/32715: [ 761.842610][ T30] #0: ffffffff8fbcc908 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 761.852040][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 761.867347][ T30] [ 761.869748][ T30] ============================================= [ 761.869748][ T30] [ 761.903120][ T30] NMI backtrace for cpu 1 [ 761.903143][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 761.903163][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 761.903174][ T30] Call Trace: [ 761.903181][ T30] [ 761.903189][ T30] dump_stack_lvl+0xe8/0x150 [ 761.903223][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 761.903247][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 761.903274][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 761.903311][ T30] sys_info+0x135/0x170 [ 761.903329][ T30] watchdog+0xfd9/0x1030 [ 761.903383][ T30] ? watchdog+0x21a/0x1030 [ 761.903417][ T30] kthread+0x388/0x470 [ 761.903434][ T30] ? __pfx_watchdog+0x10/0x10 [ 761.903461][ T30] ? __pfx_kthread+0x10/0x10 [ 761.903478][ T30] ret_from_fork+0x51e/0xb90 [ 761.903505][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 761.903529][ T30] ? __switch_to+0xc7d/0x1450 [ 761.903568][ T30] ? __pfx_kthread+0x10/0x10 [ 761.903586][ T30] ret_from_fork_asm+0x1a/0x30 [ 761.903632][ T30] [ 761.903640][ T30] Sending NMI from CPU 1 to CPUs 0: [ 762.014306][ C0] NMI backtrace for cpu 0 [ 762.014323][ C0] CPU: 0 UID: 0 PID: 753 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 762.014346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.014357][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 762.014504][ C0] RIP: 0010:chacha_permute+0x3f4/0xf00 [ 762.014562][ C0] Code: 07 44 01 e9 41 31 cf 41 c1 c7 07 45 01 e2 45 31 d5 41 c1 c5 10 44 01 f2 31 d0 c1 c0 10 44 01 fe 31 f5 c1 c5 10 44 01 df 31 fb c3 10 45 01 e8 45 31 c4 41 c1 c4 0c 01 c1 41 31 ce 41 c1 c6 0c [ 762.014577][ C0] RSP: 0018:ffffc900039f7570 EFLAGS: 00000006 [ 762.014590][ C0] RAX: 000000005ac2d208 RBX: 000000002bf7908e RCX: 00000000f2463334 [ 762.014601][ C0] RDX: 00000000a2ce2304 RSI: 00000000a311ba92 RDI: 00000000f9833967 [ 762.014611][ C0] RBP: 00000000e8d2f020 R08: 000000002c55a967 R09: 00000000d236fce4 [ 762.014621][ C0] R10: 00000000bc39bd2e R11: 00000000a2908c5c R12: 000000006fb30a8a [ 762.014632][ C0] R13: 00000000d6bb97e3 R14: 0000000031aac1ff R15: 00000000a35e16aa [ 762.014642][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 762.014655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.014666][ C0] CR2: 00007f59d59e82f8 CR3: 000000007e682000 CR4: 00000000003526f0 [ 762.014680][ C0] Call Trace: [ 762.014687][ C0] [ 762.014712][ C0] chacha_block_generic+0x53/0xc80 [ 762.014744][ C0] crng_fast_key_erasure+0x164/0x270 [ 762.014800][ C0] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 762.014821][ C0] ? rcu_is_watching+0x15/0xb0 [ 762.014847][ C0] crng_make_state+0x1ce/0x600 [ 762.014862][ C0] ? crng_make_state+0xb6/0x600 [ 762.014877][ C0] _get_random_bytes+0xff/0x260 [ 762.014926][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 762.014961][ C0] ? __alloc_skb+0x4e5/0x7d0 [ 762.014982][ C0] ? skb_put+0x11b/0x210 [ 762.015005][ C0] nsim_dev_trap_report_work+0x38d/0xb80 [ 762.015032][ C0] ? process_scheduled_works+0xa25/0x1830 [ 762.015060][ C0] process_scheduled_works+0xb02/0x1830 [ 762.015095][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 762.015120][ C0] ? assign_work+0x3d5/0x5e0 [ 762.015142][ C0] worker_thread+0xa50/0xfc0 [ 762.015179][ C0] kthread+0x388/0x470 [ 762.015194][ C0] ? __pfx_worker_thread+0x10/0x10 [ 762.015214][ C0] ? __pfx_kthread+0x10/0x10 [ 762.015229][ C0] ret_from_fork+0x51e/0xb90 [ 762.015253][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 762.015272][ C0] ? __switch_to+0xc7d/0x1450 [ 762.015292][ C0] ? __pfx_kthread+0x10/0x10 [ 762.015307][ C0] ret_from_fork_asm+0x1a/0x30 [ 762.015348][ C0] [ 762.270725][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 762.277600][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 762.286694][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.296737][ T30] Call Trace: [ 762.300002][ T30] [ 762.302921][ T30] vpanic+0x56c/0xa60 [ 762.306912][ T30] ? __pfx___schedule+0x10/0x10 [ 762.311755][ T30] ? __pfx_vpanic+0x10/0x10 [ 762.316255][ T30] ? __pfx_console_unlock+0x10/0x10 [ 762.321452][ T30] panic+0xc5/0xd0 [ 762.325171][ T30] ? __pfx_panic+0x10/0x10 [ 762.329589][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 762.334986][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 762.341139][ T30] watchdog+0x1023/0x1030 [ 762.345474][ T30] ? watchdog+0x21a/0x1030 [ 762.349902][ T30] kthread+0x388/0x470 [ 762.353959][ T30] ? __pfx_watchdog+0x10/0x10 [ 762.358632][ T30] ? __pfx_kthread+0x10/0x10 [ 762.363300][ T30] ret_from_fork+0x51e/0xb90 [ 762.367897][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 762.373005][ T30] ? __switch_to+0xc7d/0x1450 [ 762.377678][ T30] ? __pfx_kthread+0x10/0x10 [ 762.382255][ T30] ret_from_fork_asm+0x1a/0x30 [ 762.387031][ T30] [ 762.390309][ T30] Kernel Offset: disabled [ 762.394619][ T30] Rebooting in 86400 seconds..