last executing test programs: 3m50.658474271s ago: executing program 2 (id=2182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r4, r2}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x900, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x8e8, 0x1, [@m_ipt={0x8e4, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x8ba, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x900}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r6, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005340)=@newtfilter={0x12ec, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x9}, {0xa, 0x1}, {0xb, 0x5}}, [@filter_kind_options=@f_matchall={{0x3}, {0x12b8, 0x2, [@TCA_MATCHALL_ACT={0x12b4, 0x2, [@m_xt={0x134, 0x1a, 0x0, 0x0, {{0x7}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xb7, 0x6, {0xfffc, 'mangle\x00', 0x9, 0x3ff, "a0a18e8c390535791893b36d268ec9e6dc77465a4c892c94cc15762987feaf3728fce9638dab83ddab5bd81a31e2c3966a7b415fded27e8a2195ff331ef7c2eb84da02dbbdc7edaf1db8f3d86d9c35f7da23c189b5423b38431a4636020f94dfabecedca0aae11a671cbfff54510590b05227cc199072079c8d930bef960225b31dfe738f4bbdd59ed9dfa1b1e"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_vlan={0x1064, 0xc, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x3, 0x0, 0x2, 0x10000}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa99}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x118, 0x1a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x401}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0xbc, 0x6, "111bef52a60ac7e99bfbe9693fcbef6cec35fbe619a97dcad2230cdf3b2e95d952ea1e7cf568b2d22c271ef0f2c61fb711718fb6d873227a501375f26d6ef9ab8630dd15c31a2b40d9e29079417f8ba9a3337c3f322df9f8743887e8643ea0f817b7c9cad4295b2b27c68699fed2b899cc325106fac725a49c0d77d27ab7141cc3559726dd0eea4c1f3d9ef1f66228009ab97e762696ae9542fbb915210727a1628e5869e3cac220a02f2793bcc01e0e40e329b83fe922bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x0, 0x3, 0x4}]}}]}, 0x12ec}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) close(r0) 3m49.72496775s ago: executing program 2 (id=2195): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x63}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x8, 0x70bd25, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x13, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000800)={0x2, 0x6e1b, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000060, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000060, 0x0, 0x0) 3m49.574022492s ago: executing program 2 (id=2199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000004211002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e00"], 0x4c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000b4c7c5682e9f3f6e5f7ae0d6e96ab42a5e66a8e7beac1109332d7600217623d7b256034cae04b79d14252ed16dff3931fc387e6c6c023bd483c302dda4210bb0d73a36dbf460d0f18a14489908fbaa9a1b7f29c932d549c95de12cf30a0726e7e83cb00c41321f7430b3b55d1c03ec051d63504d44316876c541e43d5462b03b98174cc928eafebd000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r4], 0xe) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="0a000000010001", 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 3m49.376491985s ago: executing program 2 (id=2202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x2c, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r4, 0x9e2}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) sendto$inet6(r1, &(0x7f00000001c0)='J', 0x1, 0x20000000, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3}, 0x1c) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="01000000000080001c2312808005000100fcff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000006c0000042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="480800000100008008000a00", @ANYRES32=0x0, @ANYBLOB="05001000bc00000008002e000200000008000a00", @ANYRES32=r10, @ANYBLOB="0a000200aaaaaaaaaa320000"], 0x4c}}, 0x0) vmsplice(r7, &(0x7f0000000500)=[{&(0x7f0000000080)="0186", 0x2}], 0x1, 0xc) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r13, &(0x7f0000000000)="38000000010003", 0x7) openat$cgroup_ro(r7, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) shutdown(r1, 0x1) 3m48.447654824s ago: executing program 2 (id=2218): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001e80)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3m48.247438464s ago: executing program 2 (id=2222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@ah={{0x30}, {[0x9, 0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x4, 0x0, 0x0, 0x2, 0x4], 0x3, 0x3}, {0x2, [0x5, 0x1, 0x2, 0x2, 0x0, 0x1], 0x2, 0x4}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3ff, 0x3, 0x8, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000000), &(0x7f00000000c0)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @multicast2}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x2e, 0x0, 0x2, [0x630, 0x7]}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x1b, 0x23, [@private=0xa010102, @multicast2, @loopback, @loopback, @multicast2, @broadcast]}, @end, @cipso={0x86, 0x1a, 0x3, [{0x0, 0x5, "4687df"}, {0x0, 0xf, "43dfae633fc1a693fbadb8b4a9"}]}, @lsrr={0x83, 0x7, 0x64, [@remote]}]}}}], 0x80}, 0x0) 3m47.98046262s ago: executing program 32 (id=2222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@ah={{0x30}, {[0x9, 0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x4, 0x0, 0x0, 0x2, 0x4], 0x3, 0x3}, {0x2, [0x5, 0x1, 0x2, 0x2, 0x0, 0x1], 0x2, 0x4}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3ff, 0x3, 0x8, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000000), &(0x7f00000000c0)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @multicast2}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x2e, 0x0, 0x2, [0x630, 0x7]}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x1b, 0x23, [@private=0xa010102, @multicast2, @loopback, @loopback, @multicast2, @broadcast]}, @end, @cipso={0x86, 0x1a, 0x3, [{0x0, 0x5, "4687df"}, {0x0, 0xf, "43dfae633fc1a693fbadb8b4a9"}]}, @lsrr={0x83, 0x7, 0x64, [@remote]}]}}}], 0x80}, 0x0) 42.608925589s ago: executing program 1 (id=4191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x2, {0x0, 0xff}}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r3, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) connect$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x2, {0x0, 0xff}}, 0x18) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r3, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) (async) 42.488672182s ago: executing program 1 (id=4194): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = socket(0xf, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x20040040) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000000}}, 0x8001, 0x1}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={r8, 0x4}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r7, 0x99}, &(0x7f0000000300)=0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd28, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x4, 0x1}, {0xffff}, {0xfff3, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100c0}, 0x400c000) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0xfffffffffffffe29, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000012100000900010073797a300000000040000000070000000000000027c6db4300000900010073797a3000000000090001000000000000001ee4f0c43d57a0c70140056f0000010008000240000000006c000000160a0101000b000000000000010000000900020073797a30f8ffffff09000100737900300003802c000380140001007465616d3000000000000000000000001400019ead6f39c32f25dea43c870f7714872ca520beda2d46f8c29dbbd721dc03240a54ee644f50bc5b9d2bb8c99cdac5167fd4160b76be"], 0xf4}}, 0x0) close(r0) 41.504865629s ago: executing program 1 (id=4213): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000280)={@broadcast, @loopback, 0x0, "9e6032a78048da7b3bbf9bb4af283760e7cd53b0536da370c8febb9a279c2571", 0x8000, 0x9, 0x80000000, 0x5}, 0x3c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000007a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x338}}], 0x1, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000072c000000180a05000000000000000000010000000900010073797a30000000000c0005"], 0xc8}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fd5bdf256600000008000300", @ANYRES32=r8, @ANYBLOB="08002623a6a7be7f11616400af"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 41.456274389s ago: executing program 1 (id=4215): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 40.5430645s ago: executing program 1 (id=4235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x30, 0x61, 0x18, 0x0, 0x5f, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/101, 0x2f, 0x65, 0x0, 0x6, 0x10000}, 0x28) syz_emit_ethernet(0x11dc0, &(0x7f0000000080)=ANY=[], 0x0) 40.024711446s ago: executing program 1 (id=4240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4c426f62}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "2270696dc4d53e0bad7ca9e5b4b459ba1344cf453f00db31922989388ac2eff07da50f66655d2ebda47c0a19567af743bd788e7c0e1c8492990dca8e12101f0a524fa68448866eb48dae58f801d0468c0e04b911fa99c9c197a0b4a349"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x138}}, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000080)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0x2f, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x2f, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "ba66523bc5dea26a1ca732c6535999ae3164ec5ef5b99e18d31261edd793d61d8464a0"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x0) 39.814210058s ago: executing program 33 (id=4240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4c426f62}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "2270696dc4d53e0bad7ca9e5b4b459ba1344cf453f00db31922989388ac2eff07da50f66655d2ebda47c0a19567af743bd788e7c0e1c8492990dca8e12101f0a524fa68448866eb48dae58f801d0468c0e04b911fa99c9c197a0b4a349"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x138}}, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000080)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0x2f, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x2f, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "ba66523bc5dea26a1ca732c6535999ae3164ec5ef5b99e18d31261edd793d61d8464a0"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x0) 2.852531769s ago: executing program 0 (id=4818): unshare(0x2000400) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x112c, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x800, 0x24}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x62}, @NL80211_ATTR_VENDOR_DATA={0x45, 0xc5, "e07eeb534b23e6cd99e2f2f4652d0b2051a1d2886ff026aa8128ba7a739bac8660dc808b95fd9493434e5761a5a1416b0341e87aa1a67f09a0bf600d71113fa0ba"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8000}, @NL80211_ATTR_VENDOR_DATA={0xa6, 0xc5, "676b73b5a9dc5cc880792c8ca67b824d35130b0ec0ec63a258618a36099eee8ca18464e577f2183b3509ed0d318a19f16330cd446592cc27d56478ba055d89a6a1b52ac046aab11d9ca71a7e01f801ab9fd2fbf54a068c4bce61ca49a50356ed19650aa746a62bb1c916aff9ef2669a57ca21b4cc64eccc8aac008eee37bd7a5698352b17637dec43f31d0d0b939554d44898154dd2cd4e7cea7fb1c2c2090767d73"}]}, 0x112c}, 0x1, 0x0, 0x0, 0x24040001}, 0x20000844) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x66, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x48}}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async, rerun: 32) r8 = socket$inet(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r12, 0xfffffffc}, &(0x7f0000000180)=0x8) (async, rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8000000000000001}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x6}]}}]}, 0x5c}}, 0x0) (rerun: 32) 2.560384027s ago: executing program 0 (id=4823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x6, 0xde9, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a32000000001400000011", @ANYRES8], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a32000000001400000011", @ANYRES8], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r4, 0x2f, 0x1d, 0x6, 0x1, 0x4, @local, @remote, 0x10, 0x7, 0x9, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r4, 0x2f, 0x1d, 0x6, 0x1, 0x4, @local, @remote, 0x10, 0x7, 0x9, 0x1}}) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r8, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'pim6reg\x00'}) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'pim6reg\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="400000001e002400000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfc6, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c890f902c00fe800000000000000000000000000024ff0200000000000000000000000000018400"], 0x0) 2.089635752s ago: executing program 5 (id=4833): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r0, 0xb01}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8, 0x3000000000002}, 0x805) 1.971845646s ago: executing program 5 (id=4837): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, 0x1407, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000640)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e349359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0491121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bfb3d32b0181ff3d726a7dc6432a336a42b50b2c6877cb63b410d746b35fc721e5992ba47c3a2bc2d3679abe0794d226b7b0c333c3000fee7adaafb6efd57382eb2a86d71acaae52a154477a5b66757a886f4ad5446607520c17fb81ede0473cd897a34c7c9f41b660260699fb02c4f643a320812a36a2fdb8552682757bbe1bc4c5acf96541539dff8ff3a68049d4e5aa0327697c3654aa155b156ed826e0589d5de6bf83cb2406ba077125aa8bfc32c7cd22baa6d933bb1978905acc4099a192af1203d8c8ee2f07d6183b9480b3fe420ae5a59004b57cae5e6038f834123eb984e4ad0b3a6b0a30", 0x2c7}, {&(0x7f0000000300)="2e0fd87d8d84b93c7803a87df5acd511ee50b0a0d0d9e3fc8345949042d5449c61a2b530aeea469c70772df880777d6e1744da498487c553359a7dce5cad9e69bd2bd62e1a81d61f05700503d4aa5debf98ffa041d397d5dc8", 0x59}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="ffbcf4974a4a645c6d8cd8ef2dde80a53f40daf5ec8c7b36eb6b4d4d5286a436a562f1656469c511aaadc7389df3d15187940450e3b35c63d66f24df397537c747612c3e38daf2f2336c6de65eb8048c4860fc269b96a50098a9485f692d75ecdfa39b03f216a5d5043db8b86a74ca734a3481", 0x73}, {&(0x7f0000000d00)="7e93ddb16d6dded2586d9a83d6d79a26d8e5f8c7fc7279fe5fe209663600f76ffd8db76b41b6d87176d3d81c389026c02d2d9636e7267b8a8c6174215780c2df56dad99f5b9154655f610732b786f822c05cb9c98a414f61dd3435793e43df0eea078cc20e", 0x65}, {&(0x7f0000000b80)="de12a02b8d1f1f1dce2f9257c8ddf7bf4ccfaa79e06de7f1c316c60d11cb578a2f13dd726f37fd7cc1e7588c8f857a1eb868e237ff915cd16242a08227018fe4376e75dff7d22210566c12", 0x4b}], 0x3}}], 0x2, 0x40408e0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x7, 0x8, 0xe48, 0x100, {{0x18, 0x4, 0x3, 0x2, 0x60, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @timestamp_prespec={0x44, 0x24, 0x40, 0x3, 0xa, [{@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@empty, 0xb7be}, {@broadcast, 0x2}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x36, [@broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @local]}]}}}}}) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100"], 0x38}, 0x1, 0x0, 0x0, 0x64000800}, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', r4, r2, 0x0, 0x2, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x3, 0x2, 0xf, 0x9, 0x22b, r7, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x4, 0x0, 0xff, 0x0, 0x1, 0x9}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r9, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb, 0x144811, r0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) 1.568551359s ago: executing program 4 (id=4843): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="1400040070696d3672656730000000000000000008000500060000001c00e70031329eae55132605a1df0ef9cc9415b343831f26fe0c0017800400030004000400000000"], 0x60}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000011c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x5, 0x6, 0x800, 0x9, 0x6], 0x2, &(0x7f0000001080)=[{}, {}], 0x0, [{}, {}]}, 0x98) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYRESDEC], 0x54}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r4) (async) r7 = socket$inet6(0xa, 0x805, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000001280)={r9, 0x7, 0xc, 0xffffffff0000}) read$nci(r10, &(0x7f00000012c0)=""/75, 0x4b) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r11, &(0x7f0000000080)="29000300010003", 0x7) (async) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) getsockopt$bt_hci(r7, 0x84, 0x71, &(0x7f0000000080)=""/4059, &(0x7f0000000040)=0xffed) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x940) 1.568060202s ago: executing program 0 (id=4844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) 1.499971858s ago: executing program 3 (id=4846): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x7, 0xab, 0x3, {{0xc, 0x4, 0x0, 0x25, 0x30, 0x64, 0x0, 0x7, 0x2f, 0x0, @empty, @remote, {[@timestamp={0x44, 0x8, 0x44, 0x0, 0xa, [0x5]}, @timestamp_addr={0x44, 0x14, 0x99, 0x1, 0x7, [{@empty, 0x6}, {@local, 0xb2}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r5, 0x25, 0x1, @void}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@typed={0x8, 0x12a, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.396469406s ago: executing program 4 (id=4847): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd2, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x8}, @struct={0x7, 0x3, 0x0, 0x4, 0x0, 0x1, [{0x2, 0x2, 0xf7}, {0xc, 0x2}, {0x2, 0x0, 0x58}]}, @func={0x8, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0xe]}}, &(0x7f0000000740)=""/88, 0x67, 0x58, 0x1, 0x2}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f0000000c40)=""/85, 0x55, 0x0, &(0x7f0000000cc0)=""/183, 0xb7}}, 0x10) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xa, 0x3, 0x4, 0x9, 0x11011, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)='%pK \x00'}, 0x20) socket(0x200000000000011, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r13], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001000)={r1, 0xb, 0x3, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x24, 0x25, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', r4, @fallback=0x23, r5, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x4, 0x800, 0x98}, 0x10, r6, r1, 0x1, &(0x7f0000001040)=[r7, r9, 0xffffffffffffffff, r10, r11, 0x1, r12, r16], &(0x7f0000001080)=[{0x2, 0x1, 0x10, 0x4}], 0x10, 0x21}, 0x94) 1.362828897s ago: executing program 0 (id=4848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.323476724s ago: executing program 3 (id=4850): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x6b2f1000) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f00000000000000200300000004"], 0x18}}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'syz_tun\x00', @random="50fc1720c126"}) r4 = socket(0x10, 0x80002, 0x0) sendto$unix(r4, &(0x7f0000000080)="e57dc9f5b65dae1247e215148682744d0db1618e02623e881c89447f9eddc0d579dc787cbf93ef7f469608dc465aa04eabe7d7b918c69300acd815db25abe30b6ce5e846d02db51097fee4cba6466bbadd224a6e7201637f200aebd735ad0e56e242a8cd16c25b33f2b8c0a474", 0x6d, 0x20000000, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000800)='sock_rcvqueue_full\x00'}, 0x18) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c}}], 0x20, 0x1}, 0x4000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) (async, rerun: 32) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1}, 0x4) 1.259385794s ago: executing program 4 (id=4851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f3e}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FICLONE(r1, 0x40049409, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x2c, 0x48, 0x1, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r4, 0xcee}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 1.180250725s ago: executing program 4 (id=4853): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x36, 0x36, 0x3, [@datasec={0x7, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x7, 0x800100}, {0x4, 0x1, 0x6}], "e0a0"}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/157, 0x53, 0x9d, 0x1, 0xc38}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffff3500000000000000002e"], 0x0, 0x46}, 0x28) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r4, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.163258735s ago: executing program 0 (id=4854): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x8, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000240)="add644301ea8d942597e08f73c8d77f24067f12e87ec1d9b43f96bf9ca9bd68942ffbe4d3c0e00d467dee89141ba07b8aeb32a5763c4c4d23e1851f6ed67744afee1c1b8fbec649514de", 0x4a, 0x51}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000040000701b4ffffff0024e2d523d540d85f004280"], 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@dstopts={0x1, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005780)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x3}, 0x6}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000000740)=""/190, 0xbe}], 0x3}, 0x401}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/184, 0xb8}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001a00)=""/62, 0x3e}], 0x4, &(0x7f0000001a80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002a80)=@l2, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002b00)=""/197, 0xc5}, {&(0x7f0000002c00)=""/70, 0x46}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x3, &(0x7f0000003cc0)=""/212, 0xd4}}, {{&(0x7f0000003dc0)=@ax25={{0x3, @null}, [@netrom, @rose, @null, @remote, @netrom, @default, @netrom]}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003e40)=""/116, 0x74}, {&(0x7f0000003ec0)=""/147, 0x93}, {&(0x7f0000003f80)=""/194, 0xc2}], 0x3}, 0x7}, {{&(0x7f00000040c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000004140)}, 0x6}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000004180)=""/55, 0x37}, {&(0x7f00000041c0)=""/254, 0xfe}, {&(0x7f00000042c0)=""/201, 0xc9}, {&(0x7f00000043c0)=""/87, 0x57}, {&(0x7f0000004440)=""/197, 0xc5}, {&(0x7f0000004540)=""/120, 0x78}, {&(0x7f00000045c0)=""/112, 0x70}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/42, 0x2a}], 0x9, &(0x7f0000005740)=""/20, 0x14}, 0x400}], 0x7, 0x0, &(0x7f0000005940)={0x77359400}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r10, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100008e1716de168985680000053abc2b14", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 1.048336286s ago: executing program 3 (id=4855): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'vlan0\x00', 0x6}) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000003300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0xc, 0xff, 0xaf3, 0x8, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x2}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000100), 0x0) r7 = socket(0x1, 0x3, 0xc) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x2c, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xa, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xae}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x0, 0x4, 0xf4}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a00)={'team_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001c80)={'ip6tnl0\x00', &(0x7f0000001c00)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x7, 0x3, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x700, 0x700, 0x6, 0x1}}) socket$packet(0x11, 0x1eb12b22e1021725, 0x300) sendmmsg$inet(r1, &(0x7f0000003180)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="914664e39ceb27a24030ddfa1405fda9f029ba719defd0208fd718f91be1945927437651d85e28d6165871c9882778e975cd906c388c3009b972ca253f599a67ece2e4d9937b96d692a8e2a187be1d42c55870af96c80b441b573bb694fb00a52331752c6604f91552d0941a2a1e4a82022a4b6bbb0d01fe729763ecd7eb1c0080751960e5e9ae9a3d82a8e1ea7e14c2d3f49286f056c4a9d04da1d90c60c97e3922df4bbcc252bf", 0xa8}, {&(0x7f0000000180)="c3232f0f2ed24b756e723a5cc01926440ee7d0be3bc151e2226bdf00ab596f2ec1e24b10c23910339a4258534fb74d72e90261b750c4e9e8281ffde61ec33064504edaaae973d3faea6ecaf2b557759bc7783923ac0203543cda3ad0f8f1d83667bb2cbbd1b60207f45fb62243accf1d3d9d393affa6dc5af5c10d9733248b2f173e4024975232a7a3cf01ec5f10c85a099a4de3ae3f8a8fb6c145110355f079ecf28268c1e5770793ce90c7bc9f747546c55bc4f38de00012999d2bf737ee71ad495e487aa94cd2d093c843047df7e3063df6a42f8222942d3025e85040d995a1e20d791e71f434c0c95e11c643ed1c2a06e6e45e4bb78418", 0xf9}, {&(0x7f0000000280)="1ebe35d3e39e9ca00f032e8ca5ace926714b901b89470f937ce2e1600608ed93069141f7ea84280c9597288e6cae70646c14d7559288407f6588c01ff9fcefd6331b8d9a99faf79dc2b482d8181c", 0x4e}], 0x4, &(0x7f0000000400)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x1e, 0x0, 0xc, [0x4, 0x1, 0x1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_int={{0x14}}], 0xa8}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000500)="44eb8063cc664b045603a24257f0df990ac8d197bc5643cd798ca98f068a888c5aca6756ff6811214437321eb5b2c7c705abc7492b99a6a0303b91913eb7da65e922d09cfc90eb8e4704fff38dfd9dd6d3af767c72d2734af81eaf15e2dfc393162785d4906ffdf9c876b8fc726eb97778de3f62eb7501afdd164dfcb37e260c0809760bab5fe20ecf1d2941ffecdb40b61b02b7da9399898ac3758ebd191e8ca83427e37040dedac48052030ee111cd5615e21e13fef969b0f5b1a02c7d0763ef878fdaee39d2ad485d04f09c73b5c8534ea866e7769875fff6f1e622994ae1b33ce90f2d91dc3d9e6486a24641e626eb32b8603003e36459708fa0452866b3d747ce15d601bd9b9dbd1d716c302a9a9afa3a0915e49f102672effed518d0bb25dfb3490cdd788849f357022afb5443c177ebfd277e5a165ac98bdc308216f24f7ef29c8e359afd250da1f5344233eee41a2c03c4fe4add1fe646c994d8980aaba011e624dff7c508f98ab62297bdd37d443893252b6dba2bae55a63c9d6e787d9258450b38e09697e76687d93bef97f32e025731d891f2c91f0f23a5f6b64b8e84ba36111ab885a98d8a3ee18ae98fb6e1e5f55ec907d1937b0f9141fa0e5d3a185689b3d51fee52f547fecac5a86e7245023b890307c588dca4b780a0f69775b18d087df0a533e4dfea898b98cf4151e884eb57f440cf46540f4d780c6f0615de011929b7f1016a88272fac113ebd84c401c95261ac1c10be6a584d730928688c64f75062228cb26edc67e6e52137dbb3f69d4de96273748f3fa7b1abe6bd2e39592068569e5c972b38d7450b609adeafa74e7f623f68e4d839e0fbcf2e78d9657ef9691003a0e1c2289db97472a2d37d38ce3d68ad7151b1889041aa23189de59a37fb374cb2f15dcc0b590464732444dc84dfb1d911d12879a43fb3a0d9b9c3cbffe71c67d8f6c8129c2042cd89fb04002c098564b0a358a26c1ea41effb63bb675645cc3cf484c7882fffa71863b7a7a41ffb484fd059ff2fa7df0d2b077e850ad9b6b11d6e2b21da3a35be0adb27769689b177a30f75a6ea8a2a924787579ccf42c35cf045099581e2e8ad9c51bf7fd14182320a2f61c2954adb3752e44139fef03240ff57914ae06cc033b5d7611f24c6ee9d82182a454ff0030c6d473c4c2242f292601d7fb3186e897d2d2f0e69a89234bbaf8cc27cc7dffabbe37e1adc57d503dfedc25024aa6112569c972136f94dd09202913d0c1feb68a2f978287c745abb5f0f764a9b4b28b95ede58f89e3c1b5554ea77b7c39fd8d6ff6b4f216e16ab979affe1f731dade773a185f4e6c790fe31fa86be3d92a775b84d792a0ceb240c004a6da92d0fc504db789b43eecfdba1d117ee7e9df2b41f6e73ee1994c0867adf4b1ce56c27cc366c88c5df7a4082862d5edaf5f2d5c29a5aa66e316dae7a82549c23bd819850338c39da595b6e2abe330662805f2a9a183ce714de7181b0ea371273973e1af31a5521e773474f28f20ae997d11ecc2ea7c29ab10e041a703c131dbc016d2de097d07118bdf8af19196ff86c55e748aa92589de7b1f100c440144c2580f457788f3e6942fce37717dffc590e9a905b98191a4ed255d70bbff7ff96d397ef38a7e3d7c10a4b7924142e0d286587a450655e72531c1fe8a94b1854b2e6d2b3547f09ed0ad5649a6560cdf8e294d75953197c16eb7bea72df31a002d2db49e7db4c1ce75b21f663da288cba719c1e32be506f28f41681de26ca12ed83084b4ba94cb883e19733f5189f3853f11d445e11667fd6464189ab79289fed0555a3088ff50567e4a173319ab7ffe705407c60eeb7f4518bef160fd1d28781034eaef8e12a948ac3238e58b380656e3417128a3997e3ec0699d0c3f4eb9404e0cc4aeec1708a876f4d28786cb687b74314166f15d089bc48e79189eddc4fe8744806ae0577346c1eb9dfaf0618e861b74341a949042c046cae569bd27a3beef1d3234997279b5578c5e3482379a9cf211877ecee39d8aaac35cf0e9e543d540e0060b92a39fc31454303b972cd97d34c7e0d9e31532bc725eb822918b69ecbd5079622ff653ee6e05e8f5907bd3ac12ce6ac0ae691d64b7fdea8bda886de7db1d645d3e54ae65d0d839f65a0dc206095ff85854837bbaf38d4ae145fd119e8511090620cf9da215c3a28503b78599973c49235af05ae52e00eae5f56a6b84a54ae6e8c25f2926deccfdee5ea72a49e7081eca1ad00980879dcb74edf2d60b08b1a843a566f046bb2e51310467a18f2dfd6bf1fb15cca30f5a1bad6f2ef0a24da0196afbf485cc296a143ffb4ac0f564bf5a730481db41c80fc2a605ff04ffad44e815c9c635a4decdff5a6c4c5842586c2f1ef783eea360687c9fdb8608dc68b2286a5cc86094ac2692e7f28b7c336c164e7a863bd929a18f734037eb3e1e3f8cc736417c191940a21cffa40f7b2f8d97097f2ba18808db835359a19febdd094c4d5e4b2c9689856cb57cdd2d79407e2387b963843bd39792c6c49b0b930d24667b2d9045125c5859c6e14752ccafb7c286ae47c890fc59d47ad0881dc7a2c75bdac6d82cced0a74d7728987e36129e672e12cdd951a87836eae04b0fd6028a7bbcc96ed66847aa0acd1cfee178051cdcf7895a1d6464aad3b908d38e5671e4782df4e15b6c3aed268d3558ef2d60f6457628466b499e8b2adb114d23b2e13a4faee895adda7773f0f55dee0c55f8412e7d9bbf3805060e7bda3ea9158ca65f1d0b1b35f02c55a832eff36b33f18d1daa2929c765642523253f31c5b77a0387ec712ed209829b053f8a63a1b661498273a76bd6843c6fe4361bda2747ce6a4ccfcb92f1a556ef8529b7d5914c2cddee90cb0c41d8a7315cd26d9f6210f2ba30743f2a5cf3574027c7ce6de16478c7d515406e42d2f194ab107c586ca13f7a003134a6949ba6fef232ca1b4c5bc9da61221c792ff58176ce81c951b0f666113002c46c677c3f2270b22d34ee1d15ef5272d4015cda916bc4e4ec131a107ffd1625e32848e7bf8a284d58ccc05927edbe3dab88f54c309a3bd81c72afc463c2abed3e38877f92186b790929b8776d99e95919c9b89f3e52054f75d340b4175ea9e96222f2af8ec0345facee965aa4aa93bb1ef620f2a33bafb3e05f125be64f2d2705152e5d219d9f37552a7c86bcdec2d26f85b0ad4b4a9ac7e58062b6b60e9e7a8961221c391b3de39078167f8a16c66beec316d048c747f1c9936baa28959016fb17d4a26d4367ffca501ade545ed07efec556361d08dfab1806491f82b8549c5b81da6bfc3236c8002067e7c0cd1109b050582ca48272559c7bab2838c326ae805795c68f06e3740e967f2a46d434c7bc27e0934fc6b54776b840712a4a55dda074567f26e9b58bc63375e6c037cfacc43ae0d9e4095ea32dd0ea880bff4988f483a5b41cd7d7a2f0b4f0d5d70239d9f00c01d9280a4f565954399e89f805a622889020e6d85cd25c64b4c8b9343ba172cc3067142993ed68807cfcdc8922c1aff0519d3d80623ce9394e4fccdc84a35f5b8067fbbcb86a48a24e3f67e72e61baf5338b14bf3b8015c39cb8af073d1c164899371237870812399d9325d933d18714c33325f0fa37e524d75d27363fc930c27d48c78078a721801784e1dc4b51add0ced8c122385a0ec9bcaa69052bfbf8221616cbd07842a2276826421d8cec9ca1f5bf0c29ac3a3b2dc7d8061763e1bad2203d07dbe9511360b761e4775873e2192b47e3779e83a5681cc948ff5f963bf3474813d20a31e432d4b550c068f45368d697c8e64c18be6a3ca4626d2156022479372adb69a104b1bb56f70704fe36677830fba8bc7c8b47614f7dec6ad9b78f53218cbbbd48e5768534b5df5a2ed9bbb3efe13c76fcba28e9a4ea9ab6ce5a954c823779587eaf88fda20268c9c2dbd6cb12805725c1940129bbc95130483b739461dd29fea1635677a41758f0af3f08e827f7469733e6b894424db99442d7b817667ed5a4ea970780bd9c546d44ee5f1faed656c7ddc1ae06c463a4bebad75e7e0a136bea2dea617072b8f78fb55d2a3e4f21f9b408cab8a6f24d18896bafb3724e76541b65cd96c7e06da63e6ef98f749d806fcba3a13e4f0bc0c4f65739384f4840b312a689ee779f719d8bbb28165f338a5a9a1a524c1aa57271ca1954bb857b1a3b3bd89459926577890bb1ad97eaf84e1e5f783773dbf23b3bcec116270ab807b0e03324dbc88b89c3ba1b4e0dfe8a1b3247837c5b5d556c858c2e69ca95a7f93fdfa4dd94b0e5942423bb420049596a0f2c5923a06ed4a44c32c9ceddbfe32cdfbd8f15cd9fa3a3df0752c0cb948b3a29fc5b16282f30d8530a636b6f6ffc519b33ffc463b560cb608b4443294554f6d1129e13d5474d9a20f7bc906ec70b5b9ec110701fdd7ebb821679a00ad992c95efc0ff1771a2f79f60395fdf6615086b8f1d642685bdcdb80ea008072f6a83f708c009aa4f3ff16ad6f6f2176d84c2e0906fd23c8b320e81c16a427f811106a890d11604698e0a49d8983ed4e2d1b13f2ad4c41ba726cb30f5e66bb5a6a91a4c66576f65c31a88cdb6ac683ddd4e2c4276f72e8fee5c06983afa0da317eee2fa644859b4195017ae969f60e9556125c25642bc64100be15c589df8730625e8e35589e0f1a391352c57a25dfcb377434d3a0210adf0755ebb93a7921371eab8be94c48c6771d1d901eb8bee213fd2136f772e1d1ab5cd5103271d42f2f5f5138c897ee28ae08900b823ee5e98fab8cce4f4fb217117759a653e3c3936b81576281505521a9dba6dfebca41ed447cb6bcb8006f66792b21787a9532aee61e58a71dfce89ed6aa99966fc3b1b8a7e9658dd45b13081b52904383e25dce3115aea2f5d6d89b3a8d26d5a6c6edf295f2248c54b6e772e0b951d83452d6be2b9d5f14d7fb67f4e8acbf853c6b0e1a2d98e0e5b02c330dce3caf4ebb3a6446087b65529fdb10a1280aa6856fdad8e92989cf91324cce7412e1069f06a4820c6dd8d06cf63fc677d0f6832fefdede8b1cbb7c99ca1decf7a17fa0ac6e7727cdcab37592844be794e6d13281aa7a50902bff266c7c1c71149f02a6e14a3a06ccd0ae18537e8aef4d2ef0c96a9c50eb9eb4c74891186d7572e9939cb42f3d80e632e9158beaa8736285e62b95e91db2a1434ebe2710007622c15d8f85d74e9b1d81cfb6e0b913268785a9f37472de00a21ee26fe3eb1db14c4447760a11b416db0dfcd03690627ef85f58fcb13b3082bc954c714d741646f878b938a8ec1076f8dc28cb837854a86e9d003347ebda40dd1f7c140816be4dd050b588306f4cfb8110d5c85171c0c6d7f1bd535cbe2a6bdb2e54a96e599cfed96458f2c2ac03f2c0fa39e448ae53bd050cf395a4189a81d03978ecd30a327170fa4da9828e469a28f5be50430f311449294a0c8c07250af5a2ad87acf1f724e67ab73ab6215b44920f0a1ecca0f1a7c2b9908d904b30489c12f2fa3dc7aa41304ded168ee46be82bf103558de9a67c8fbbfce6623e551d4c1da71de93c0ba35269dbd1d4d0524ee9cffeda976368d6fd4fdeed9e3e8620bf1aa306ae539ae4c1e46aba35f656fd3ff1601b388bc9366f54d442f848f79da6868abb2f865289806fa90f50a50ed3ee4decaef2adc937f0c41f8924733dfdbb6592e58393d7bb1189ce88aded2e8926fb782321f4ff4d147afa5be8042105a36a7653acac84c8d23a8200e74f0be8acf0dcf79f35322839668b2e99898a0698c32eb6390f95c69", 0x1000}, {&(0x7f0000001500)="bc9f6ff58ad6d889dc4de72376a2da9c2e5fd8c60c7c1d694106f324ee285d898b7c66b7b137107f0177812a84ce1213c9a910a446e1bceab51197f75caa3b02f8434dd4ca674e35ff07d8e222226d11cf66dc2f704d77dad2f9bd69e1e0f6c9954e95622d7ff9349922523909a239c6d8c5f20f27ad8f66b56a3e47d65ffe6b027d83543015d32f6753942d813c2adc54696e1f5b1f739f133a5f14c1ff2f1987235c9edc08f9c1695c7f9b50f769b4ef87e67b0173cfc03cf0323fbf94e439550731e5b7f8b1c739e96ba6f40cb8d42fb7bfdc098096b6c0e4fa64b916be1046dac2b0c13903abce41f1b7d1", 0xed}], 0x2, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_retopts={{0x78, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x2c, 0x2e, 0x3, 0xf, [{@rand_addr=0x64010101, 0x2}, {@rand_addr=0x64010101, 0x8}, {@rand_addr=0x64010101, 0x5}, {@loopback, 0x4}, {@private=0xa010102, 0x10}]}, @generic={0x86, 0x7, "c51115b22c"}, @end, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x36, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x23, 0xb0, [@loopback, @empty, @multicast2, @empty, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x88, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x2c, 0x0, 0x5, [0xb, 0x9, 0x6, 0x9, 0xfae, 0xe, 0x0]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0x2}, {0x2, 0xc, "74128c9e4bf63ca57ad7"}, {0x1, 0xd, "1f6787e78c576fe89ff156"}, {0x2, 0x4, "c6d2"}]}, @lsrr={0x83, 0x2b, 0x41, [@multicast2, @empty, @private=0xa010102, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @rand_addr=0x64010100, @multicast2]}]}}}], 0x168}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)="7468a6ad0090a41f58f4587aa5337d1dc0ed598efcb350aea18f01bc8e20b7dc338d34aaaec340d2423ce1441a4001b6cd2693fbd1aa56b0d3064a2c344d696c8fcaf07f80363b2875c5cdbe7a7913531c", 0x51}, {&(0x7f0000001840)="778810467470dcbd8fcbe17b4e752b382247c3716cadf5e2c917e71727481cc21ef47be32352ad06592e04bc5ad24ab54aaa811f1025a4", 0x37}, {&(0x7f0000001880)="be060a29166b86eeb9953ae04914e6ac393b3f51ed04baf87ed68b7314a74cd423c97353ec9c9bbf057163f523177ebabfbc736735a7d7fe522178755eb1f290107d7cb3877318e8836fc1db7569fb29045b7dfbb9d56be4a7de15c7bac31d7fc2ef555ee78bda0dcb698d9af6cd1d261c3520e6aadd1c588573256cce0b6b1547b4", 0x82}, {&(0x7f0000001940)="b67c0b477fd88114f8b97477bf8792b700de40471afe0bd0c65ebe5a3d417372cecbfce152cbebd047f15fa67b70bbfac20cf13f4599ee2193f8877539012195a03f7f37c441cb", 0x47}], 0x4, &(0x7f0000001a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xd9, 0x3, 0x4, [{@remote, 0x9}]}, @generic={0x82, 0xc, "d39895e0d55b060a4bc9"}, @timestamp={0x44, 0x20, 0xd1, 0x0, 0x2, [0xb, 0x3d3, 0x100, 0x800, 0x101, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x1c, 0xe8, 0x3, 0x1, [{@local, 0x4}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x101}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x29}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @private=0xa010102}}}], 0xd8}}, {{&(0x7f0000001b40)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001b80)="f308def175d4b76ba3e49552349bf62b476836a26d76c33d76", 0x19}], 0x1, &(0x7f0000001cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @local, @multicast1}}}], 0x20}}, {{&(0x7f0000001d00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001d40)="da7eba7f0628dfe355b79646201f3a8f0a91bf0209d56355e84c1948f20ec4a914c09099cd24ba8eeee59019bb216005781a6a0771cbc7309258f17f9c956cd7377fb1", 0x43}, {&(0x7f0000001dc0)="7ca3a6cd7622cb6f2e4e547662c9909d563fbf53db5419ae8e912bafe58bed7e98f28787163a6444351b546361da8a2f4590bc9540e271c9b6ea1b0a903e873e210177779fcceb3eb294a73f124eed71610fef464c6a2839e0bd3938ad3d8c2009602e346c13ecd8cf", 0x69}, {&(0x7f0000001e40)="649d0a16de884e1cb590f603825d36a4d02ce95e4ba078647711cd92ffd469b9f74b6179bd1a58cd11bb2faa7d0a4278be8794aa249a0d5fdea29da2e4bea39d46bc6bf7ace68eaea2934468c48f5b384e86bb96ca4a37597217b517bbd03b969c0a5d638a43f2259af904e7a3da709e386df272a2a3ca79c4c88caf2fe3dd5f6135bc733713600b7030ed54b741dad42175523a24d107c7e47383675c9674a34ba2e074adecc57c11d8cd8f9845bfe154ff0a9ec130ec5950074fabdb37f97d", 0xc0}, {&(0x7f0000001f00)="88f09a5f4e9531413bb9932c8a8a7657103f7e71168eced6c6422f916a0d8e343c2a593dbafafa", 0x27}], 0x4}}, {{&(0x7f0000001f80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000001fc0)="8f3abfa12013747499ca4e6c7575a815ec0c9b80534fbc2fcd54500e0f71c1a49c350252537f6ada4bc93835e469bcee93418cc12551fa3b88", 0x39}, {&(0x7f0000002000)="c662211c53b7e70eef788655e95300bb70025afc7f7e9ac05576b2d69aaa8c57b5", 0x21}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="1ca334de9bc359d3836dc9270731c27e6d4d1aca5c7763f4b0ad2fe2f3bc399e50ee30e1d156965598426ad55c63b5aebcfb23e0ea1849d1564737a533d3095c29ae354c578f768c", 0x48}], 0x4, &(0x7f0000003100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x48}}], 0x6, 0x4) 950.924557ms ago: executing program 5 (id=4857): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000000114242"], 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f0300000400003a000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 872.908077ms ago: executing program 6 (id=4858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) 866.062784ms ago: executing program 4 (id=4859): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 795.24936ms ago: executing program 4 (id=4860): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) listen(r1, 0x3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) r7 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 684.814077ms ago: executing program 5 (id=4861): r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'pim6reg0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x5, 0x4b0c, 0x0, 0x8, 0x69, 0x4, 0x0, 0xffff}}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) 683.24736ms ago: executing program 3 (id=4862): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 641.969143ms ago: executing program 6 (id=4863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x8000) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_ringparam={0x1f, 0x0, 0x2, 0x37d7, 0x9, 0x6, 0x7, 0x1, 0x10}}) 453.277257ms ago: executing program 6 (id=4864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 357.053697ms ago: executing program 5 (id=4865): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe000000008500000087000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050001000000515661b5a6d17165c93df915cb69cd08c469965a93238988fff0141837b30d6d6376322f9b5efa43176c3759fc3302815f37d0df2c"], 0x38}}, 0x4000) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050001000000515661b5a6d17165c93df915cb69cd08c469965a93238988fff0141837b30d6d6376322f9b5efa43176c3759fc3302815f37d0df2c"], 0x38}}, 0x4000) 355.711417ms ago: executing program 6 (id=4866): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x20000400) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r4, &(0x7f0000000300)="79cda3e6b1dc2adbc4e70e7318fe9b54df8c0639fc7a5bead0606ea40dc0f6c3d90c45", 0x23) write(r3, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)='&', 0x1}, {0x0, 0x4000}], 0x2}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="04"], 0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xfa, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r1, 0x4, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x28, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x8, 0x4, 0x1, 0xffffffffffffffc0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0xd5a2, 0x0, 0x0, 0x41000, 0x5a, '\x00', r12, @flow_dissector=0x11, r0, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xd, 0x101, 0x8}, 0x10, r13, 0xffffffffffffffff, 0x6, &(0x7f0000000840)=[r0, r6, r0, r14, r0, r0], &(0x7f0000000880)=[{0x2, 0x4, 0x6, 0xa}, {0x4, 0x4, 0xb, 0x4}, {0x2, 0x2, 0xe, 0xa}, {0x3, 0x1, 0x9, 0xb}, {0x5, 0x3, 0x10, 0x7}, {0x0, 0x1, 0x2}], 0x10, 0x3}, 0x94) write(0xffffffffffffffff, &(0x7f0000000280)="2c0000001d005f80004000000000000002000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) 346.333817ms ago: executing program 3 (id=4867): r0 = epoll_create1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000005bc0)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/177, 0xb1}], 0x1, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000480)=""/21, 0x15}], 0x2, &(0x7f0000000780)}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000840)=""/89, 0x59}, {&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x4, &(0x7f0000001a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001b00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000001b80)=""/160, 0xa0}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}, {&(0x7f0000002d40)=""/206, 0xce}, {&(0x7f0000002e40)=""/152, 0x98}], 0x5, &(0x7f0000002f80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000005100)=[{&(0x7f00000030c0)=""/49, 0x31}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x3, &(0x7f0000005140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f0000005240)=""/117, 0x75}, {&(0x7f00000052c0)=""/76, 0x4c}, {&(0x7f0000005340)=""/251, 0xfb}, {&(0x7f0000005440)=""/57, 0x39}, {&(0x7f0000005480)=""/116, 0x74}, {&(0x7f0000005500)=""/52, 0x34}, {&(0x7f0000005540)=""/76, 0x4c}, {&(0x7f00000055c0)=""/20, 0x14}, {&(0x7f0000005600)=""/247, 0xf7}, {&(0x7f0000005700)}], 0xa, &(0x7f0000005800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000058c0), 0x6e, &(0x7f0000005b40)=[{&(0x7f0000005940)=""/47, 0x2f}, {&(0x7f0000005980)=""/80, 0x50}, {&(0x7f0000005a00)=""/102, 0x66}, {&(0x7f0000005a80)=""/139, 0x8b}], 0x4, &(0x7f0000005b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x7, 0x1, &(0x7f0000005d80)={0x0, 0x989680}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)) ioctl$FITHAW(r3, 0xc0045878) 208.699266ms ago: executing program 3 (id=4868): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004002b"], 0x24}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x28, &(0x7f0000000280)=""/20, &(0x7f00000002c0)=0x14) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8000000000000002900000004000000"], 0x100}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x8, 0xff, 0x5, 0x9, 0xa, 0x1, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x33315b43, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x6}}, 0x8, 0x800, 0x3fcc, 0x3ff, 0x4}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={r4, 0x20, &(0x7f0000000540)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f00000005c0)=0x10) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x48300) 3.431658ms ago: executing program 6 (id=4869): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa000}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 3.079794ms ago: executing program 5 (id=4870): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061104000000000009500000012a6500f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x511, 0x1000000, 0x0, {0x5}}, 0x14}}, 0x20004010) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x8010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061104000000000009500000012a6500f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x511, 0x1000000, 0x0, {0x5}}, 0x14}}, 0x20004010) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x8010) (async) 2.206248ms ago: executing program 0 (id=4871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206050000000000000000000000000014000780080013400000000108000640000000000500010006000000050005000200000405000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x238, r2, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd0, 0x2a, [@tim={0x5, 0xffffffffffffffb3, {0xb5, 0xde, 0x4, "da48751c3e13b1fee891016e43365d5ab7fba6821cccc1af885c6c15b2a6da80c5e520791e34c2794acbf15f915835a961530830bdc389f51fadf001685d3d4708d70592dcac636881de34110fb1178dc110406e4476bf9b1bd69789315a6c87d4b2467aa6ebbbc54f6cfab20e4fa61a4352c17610a540584f63e549b50cf55df6678aeaa5d933e6cf401abee6821b9e208458c5a8089c592c"}}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x0, 0x0, {0x4, 0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x0, 0x7f}}, @mic={0x8c, 0x10, {0x6b0, "0e40bf46c66b", @short="56f7f9f60fcc8878"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x4a, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @device_a, @device_b}}, @link_id={0x65, 0x12}, @random={0xe, 0x1c, "e0cc9cb215a7ee34aae1a1c285f45b430fa848c6835eee226e1d38d6"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x15d}]}, 0x238}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 0s ago: executing program 6 (id=4872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) kernel console output (not intermixed with test programs): [ 244.869683][T15000] vxcan2: left allmulticast mode [ 244.876512][T15000] gretap1: left promiscuous mode [ 244.881600][T15000] gretap1: left allmulticast mode [ 244.945720][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 4a:f2:a5:e6:71:9c [ 244.949713][T15000] macvlan0: left promiscuous mode [ 244.973403][T15000] macvlan0: left allmulticast mode [ 245.070630][T15026] bond1: Invalid ad_actor_system MAC address. [ 245.082369][T15026] bond1: option ad_actor_system: invalid value (1) [ 245.099988][T15026] bond1 (unregistering): Released all slaves [ 245.174902][T15031] batadv0: mtu less than device minimum [ 245.183281][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 245.195231][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 245.207044][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 245.218940][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 245.261599][T11371] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.288135][T11371] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.443005][T11371] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.763317][T15083] netlink: 'syz.3.2640': attribute type 1 has an invalid length. [ 245.774380][T15083] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2640'. [ 247.130095][T11371] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.955308][T15148] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2658'. [ 248.086892][T15161] netlink: 'syz.4.2663': attribute type 1 has an invalid length. [ 248.130839][T15167] xt_HMARK: spi-set and port-set can't be combined [ 248.177234][T15167] netlink: 'syz.0.2664': attribute type 83 has an invalid length. [ 248.204196][T15166] netlink: 'syz.0.2664': attribute type 83 has an invalid length. [ 248.472050][T15195] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 248.597424][T15203] netlink: 'syz.4.2674': attribute type 11 has an invalid length. [ 248.614332][T15203] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2674'. [ 248.903266][T15227] net_ratelimit: 16 callbacks suppressed [ 248.903286][T15227] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 249.032610][T15237] tipc: Enabling of bearer rejected, already enabled [ 249.059741][T15233] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2682'. [ 249.079574][T15234] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2682'. [ 249.105781][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-224); Ignoring new local tt entry: 4a:f2:a5:e6:71:9c [ 249.319511][T15252] C: renamed from lo [ 249.451362][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 249.484215][T15266] syzkaller0: entered promiscuous mode [ 249.489975][T15266] syzkaller0: entered allmulticast mode [ 249.490143][T15263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2689'. [ 249.513038][T15263] netlink: 'syz.1.2689': attribute type 10 has an invalid length. [ 249.541123][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 249.550873][T15263] hsr0: mtu greater than device maximum [ 249.588044][T15268] batman_adv: batadv0: Interface deactivated: dummy0 [ 249.613365][T15268] batman_adv: batadv0: Removing interface: dummy0 [ 250.056155][T15302] nftables ruleset with unbound chain [ 250.091557][T15303] netlink: 'syz.4.2703': attribute type 4 has an invalid length. [ 250.099962][T15303] __nla_validate_parse: 1 callbacks suppressed [ 250.099980][T15303] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2703'. [ 250.717326][T15313] netlink: 408 bytes leftover after parsing attributes in process `syz.1.2706'. [ 251.462637][T15302] lo speed is unknown, defaulting to 1000 [ 251.478954][T15302] lo speed is unknown, defaulting to 1000 [ 251.496519][T15302] lo speed is unknown, defaulting to 1000 [ 251.648249][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'. [ 251.684907][T15326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.712885][T15332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.756538][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 252.041989][T15302] infiniband syz0: set down [ 252.048076][ T5840] lo speed is unknown, defaulting to 1000 [ 252.078231][T15302] infiniband syz0: added lo [ 252.083912][T15302] syz0: rxe_create_cq: returned err = -12 [ 252.121013][T15302] infiniband syz0: Couldn't create ib_mad CQ [ 252.143551][T15302] infiniband syz0: Couldn't open port 1 [ 252.172575][T15302] RDS/IB: syz0: added [ 252.177607][T15302] smc: adding ib device syz0 with port count 1 [ 252.184003][T15302] smc: ib device syz0 port 1 has no pnetid [ 252.195225][ T5840] lo speed is unknown, defaulting to 1000 [ 252.214407][T15302] lo speed is unknown, defaulting to 1000 [ 252.341803][T15362] netlink: 'syz.0.2719': attribute type 29 has an invalid length. [ 252.350530][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 252.360039][T15362] netlink: 'syz.0.2719': attribute type 29 has an invalid length. [ 252.373647][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 252.423563][T15366] netlink: 'syz.4.2720': attribute type 16 has an invalid length. [ 252.452395][T15366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2720'. [ 252.664565][T15382] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2723'. [ 252.730558][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 252.751825][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 252.781899][T15302] lo speed is unknown, defaulting to 1000 [ 252.906606][T15389] netlink: 'syz.0.2726': attribute type 10 has an invalid length. [ 252.926057][T15389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.411259][T15302] lo speed is unknown, defaulting to 1000 [ 253.430686][T15414] xt_TCPMSS: Only works on TCP SYN packets [ 253.884815][T15302] lo speed is unknown, defaulting to 1000 [ 253.892699][T15433] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 253.952015][T15437] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 254.084807][T15442] netlink: 'syz.1.2742': attribute type 2 has an invalid length. [ 254.338888][T15460] openvswitch: netlink: Message has 2688 unknown bytes. [ 254.386939][T15465] nft_compat: unsupported protocol 0 [ 254.524433][T15302] lo speed is unknown, defaulting to 1000 [ 254.695935][T15477] netlink: 'syz.0.2754': attribute type 10 has an invalid length. [ 254.715016][T15482] lo: Caught tx_queue_len zero misconfig [ 255.238680][T15515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.419263][T15526] netlink: 'syz.3.2768': attribute type 3 has an invalid length. [ 255.460248][T15534] ip6tnl0: Caught tx_queue_len zero misconfig [ 255.479920][T15534] x_tables: duplicate underflow at hook 2 [ 255.641431][T15540] __nla_validate_parse: 9 callbacks suppressed [ 255.641450][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2773'. [ 256.039663][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 256.059900][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.070271][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.083075][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.092516][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.102528][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.230315][T15561] delete_channel: no stack [ 256.236617][T15556] vxcan1 speed is unknown, defaulting to 1000 [ 256.493248][T15573] netlink: 'syz.1.2781': attribute type 1 has an invalid length. [ 256.560868][T15573] bond10 (unregistering): Released all slaves [ 256.640676][T15556] lo speed is unknown, defaulting to 1000 [ 256.675420][ T7336] IPVS: starting estimator thread 0... [ 256.707957][T15580] pim6reg1: entered promiscuous mode [ 256.713376][T15580] pim6reg1: entered allmulticast mode [ 256.805605][T15586] IPVS: using max 39 ests per chain, 93600 per kthread [ 256.850484][T15593] netlink: 'syz.4.2787': attribute type 2 has an invalid length. [ 256.865793][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2787'. [ 257.238110][T15615] tipc: Enabled bearer , priority 0 [ 257.246297][T15615] syzkaller0: entered promiscuous mode [ 257.251878][T15615] syzkaller0: entered allmulticast mode [ 257.272408][T15556] chnl_net:caif_netlink_parms(): no params data found [ 257.306080][T15615] tipc: Resetting bearer [ 257.365374][T15615] tipc: Resetting bearer [ 257.384946][T15615] tipc: Disabling bearer [ 257.405256][T15556] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.412570][T15556] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.419928][T15556] bridge_slave_0: entered allmulticast mode [ 257.429512][T15556] bridge_slave_0: entered promiscuous mode [ 257.439843][T15556] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.447368][T15556] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.454700][T15556] bridge_slave_1: entered allmulticast mode [ 257.463395][T15556] bridge_slave_1: entered promiscuous mode [ 257.533432][T15556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.549933][T15556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.614053][T15556] team0: Port device team_slave_0 added [ 257.623497][T15556] team0: Port device team_slave_1 added [ 257.686164][T15556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.695581][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.740159][T15556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.762996][T15556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.771012][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.797933][T15556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.947783][T15556] hsr_slave_0: entered promiscuous mode [ 257.962218][T15556] hsr_slave_1: entered promiscuous mode [ 257.979536][T15556] debugfs: 'hsr0' already exists in 'hsr' [ 257.998093][T15648] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2804'. [ 258.014756][T15556] Cannot create hsr debugfs directory [ 258.108265][T15648] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 258.120936][T15648] bond10 (unregistering): Released all slaves [ 258.146259][ T5845] Bluetooth: hci2: command tx timeout [ 258.337053][T15662] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 258.589922][T15675] vxcan1 speed is unknown, defaulting to 1000 [ 258.833703][T15675] lo speed is unknown, defaulting to 1000 [ 258.849543][T15556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.869951][T15556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.885310][T15556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.918543][T15556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.092340][T15556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.138007][T15556] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.152263][T11371] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.159505][T11371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.177645][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.184872][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.396714][T15703] tc_dump_action: action bad kind [ 259.440339][T15703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2818'. [ 259.639141][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 259.681872][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'. [ 259.768609][T15716] vlan2: entered promiscuous mode [ 259.847207][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 259.877258][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 259.906450][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 260.032745][T15732] netlink: 'syz.5.2824': attribute type 1 has an invalid length. [ 260.212261][T15556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.226006][ T5845] Bluetooth: hci2: command tx timeout [ 260.343421][T15556] veth0_vlan: entered promiscuous mode [ 260.403578][T15556] veth1_vlan: entered promiscuous mode [ 260.415159][T15750] nbd: must specify at least one socket [ 260.633971][T15764] netlink: 'syz.3.2831': attribute type 30 has an invalid length. [ 260.709648][T15767] __nla_validate_parse: 3 callbacks suppressed [ 260.709661][T15767] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2833'. [ 262.231884][T15764] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 262.293266][T15556] veth0_macvtap: entered promiscuous mode [ 262.313652][ T5845] Bluetooth: hci2: command tx timeout [ 262.381351][T15556] veth1_macvtap: entered promiscuous mode [ 262.419119][T15556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.431109][T15556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.444986][T15708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.469232][T15708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.522742][T15708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.542080][T15708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.561384][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2836'. [ 262.609264][T15783] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2838'. [ 262.619216][T15783] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2838'. [ 262.632951][T15788] netlink: 'syz.1.2838': attribute type 21 has an invalid length. [ 262.646939][T15788] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.655973][T15788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.663478][T15788] IPv6: NLM_F_CREATE should be set when creating new route [ 262.670835][T15788] IPv6: NLM_F_CREATE should be set when creating new route [ 262.678110][T15788] IPv6: NLM_F_CREATE should be set when creating new route [ 262.699474][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 262.718337][T15786] syzkaller1: entered promiscuous mode [ 262.723855][T15786] syzkaller1: entered allmulticast mode [ 262.801177][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.817323][T15786] netlink: 'syz.4.2839': attribute type 10 has an invalid length. [ 262.837087][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.976749][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.984605][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.129599][T15813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2845'. [ 263.142695][T15813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2845'. [ 263.157866][T15813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2845'. [ 263.162942][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'. [ 263.273029][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'. [ 263.294500][T15822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.342137][T15822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.497937][T15835] tipc: Started in network mode [ 263.515860][T15835] tipc: Node identity 9ed6f23f46b8, cluster identity 4711 [ 263.543590][T15835] tipc: Enabled bearer , priority 0 [ 263.599612][T15839] syzkaller0: entered promiscuous mode [ 263.632008][T15839] syzkaller0: entered allmulticast mode [ 263.668998][T15835] block nbd0: reconnected socket [ 263.680265][T15835] tipc: Resetting bearer [ 263.688117][ T5845] block nbd0: Receive control failed (result -32) [ 263.701760][T15833] tipc: Resetting bearer [ 263.729671][T15833] tipc: Disabling bearer [ 263.758544][T15847] netlink: 'syz.3.2856': attribute type 30 has an invalid length. [ 263.782484][T15843] netlink: 'syz.0.2854': attribute type 83 has an invalid length. [ 263.904585][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.928835][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.938036][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.962469][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.990140][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.044861][T15851] vxcan1 speed is unknown, defaulting to 1000 [ 264.386903][ T5838] Bluetooth: hci2: command tx timeout [ 264.531509][T15890] vlan3: entered promiscuous mode [ 264.551580][T15890] gretap0: entered promiscuous mode [ 264.748672][T15851] lo speed is unknown, defaulting to 1000 [ 264.823477][T15904] ipt_REJECT: TCP_RESET invalid for non-tcp [ 264.868403][T15907] bond0: (slave macvlan3): Error -22 calling dev_set_mtu [ 265.410628][T15935] bond10: Removing last arp target with arp_interval on [ 266.067248][ T5838] Bluetooth: hci5: command tx timeout [ 266.188823][T15851] chnl_net:caif_netlink_parms(): no params data found [ 266.234327][T15968] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 266.934316][T15851] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.942321][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.957923][T15851] bridge_slave_0: entered allmulticast mode [ 266.970352][T15851] bridge_slave_0: entered promiscuous mode [ 266.992128][T15998] __nla_validate_parse: 11 callbacks suppressed [ 266.992147][T15998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2895'. [ 267.008331][T15851] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.016058][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.023513][T15851] bridge_slave_1: entered allmulticast mode [ 267.032386][T15851] bridge_slave_1: entered promiscuous mode [ 267.159802][T16009] IPv6: addrconf: prefix option has invalid lifetime [ 267.168006][T15851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.194074][T15851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.268792][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2899'. [ 267.296987][T16015] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 267.320592][T15851] team0: Port device team_slave_0 added [ 267.330130][T15851] team0: Port device team_slave_1 added [ 267.516535][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.524282][T16025] netlink: 'syz.3.2902': attribute type 5 has an invalid length. [ 267.528886][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.535903][T16025] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2902'. [ 267.559154][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.579081][T16023] tipc: Enabled bearer , priority 0 [ 267.587458][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.594454][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.621490][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.640420][T16022] tipc: Resetting bearer [ 267.659653][T16022] tipc: Disabling bearer [ 267.828756][T16031] netlink: 'syz.5.2905': attribute type 10 has an invalid length. [ 267.834465][T15851] hsr_slave_0: entered promiscuous mode [ 267.849173][T15851] hsr_slave_1: entered promiscuous mode [ 267.874852][T15851] debugfs: 'hsr0' already exists in 'hsr' [ 267.881334][T15851] Cannot create hsr debugfs directory [ 268.002877][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2908'. [ 268.038203][T16036] netlink: 'syz.1.2908': attribute type 39 has an invalid length. [ 268.146213][ T5838] Bluetooth: hci5: command tx timeout [ 268.244259][T16049] syzkaller0: entered promiscuous mode [ 268.250928][T16049] syzkaller0: entered allmulticast mode [ 268.257772][T16044] vxcan1 speed is unknown, defaulting to 1000 [ 268.279294][T16055] syzkaller1: entered promiscuous mode [ 268.284798][T16055] syzkaller1: entered allmulticast mode [ 268.356644][T16054] netlink: 'syz.5.2912': attribute type 32 has an invalid length. [ 268.364499][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'. [ 268.455364][T16054] bond1: option coupled_control: invalid value (17) [ 268.477503][T16054] bond1 (unregistering): Released all slaves [ 268.574901][T15851] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.592314][T15851] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 268.623179][T16072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2913'. [ 268.624488][T15851] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 268.665059][T15851] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 268.702275][T16060] tipc: Enabling of bearer rejected, failed to enable media [ 268.713369][T16068] syzkaller1: left promiscuous mode [ 268.720534][T16068] syzkaller1: left allmulticast mode [ 268.759746][T16044] lo speed is unknown, defaulting to 1000 [ 268.770436][T15851] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.781775][T15851] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 268.795208][T15851] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 268.808681][T15851] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 268.873038][T15851] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.905863][T15851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 268.940610][T15851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 268.958054][T15851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 269.038175][T15851] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.077218][T15851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 269.105644][T15851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 269.123216][T15851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 269.441507][T16104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2923'. [ 269.476593][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2923'. [ 269.599435][T15851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.674962][T15851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.743114][T15851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.786529][T16116] netlink: 'syz.1.2925': attribute type 2 has an invalid length. [ 269.812158][T15851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.834258][T16116] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 270.002048][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2927'. [ 270.081167][T16131] tipc: Enabled bearer , priority 0 [ 270.111677][T16131] bond0: Caught tx_queue_len zero misconfig [ 270.132377][T16133] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2929'. [ 270.232670][ T5838] Bluetooth: hci5: command tx timeout [ 270.330839][T16140] tipc: Enabled bearer , priority 0 [ 270.361983][T16129] tipc: Disabling bearer [ 270.379559][T16140] tipc: Disabling bearer [ 270.509075][T15851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.623786][T15851] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.726898][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.734114][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.829900][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.837095][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.233558][T16190] pimreg: entered allmulticast mode [ 271.263524][T16187] pimreg: left allmulticast mode [ 271.336681][T16197] siw: device registration error -23 [ 271.581182][T15851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.086415][T15851] veth0_vlan: entered promiscuous mode [ 272.113890][T15851] veth1_vlan: entered promiscuous mode [ 272.181638][T16258] netlink: 'syz.3.2961': attribute type 2 has an invalid length. [ 272.183601][T15851] veth0_macvtap: entered promiscuous mode [ 272.200764][T16258] netlink: 'syz.3.2961': attribute type 1 has an invalid length. [ 272.207537][T15851] veth1_macvtap: entered promiscuous mode [ 272.247099][T15851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.280437][T15851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.307024][ T5838] Bluetooth: hci5: command tx timeout [ 272.331537][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.342191][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.353184][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.378116][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.642572][T15709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.677994][T15709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.819946][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.845796][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.986181][T16299] __nla_validate_parse: 2 callbacks suppressed [ 272.986200][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2973'. [ 273.042999][T16303] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2974'. [ 273.164265][T16313] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 273.324719][T16324] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 274.038395][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2986'. [ 274.255841][T16352] xt_socket: unknown flags 0xe4 [ 274.274739][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.286567][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.295642][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.308549][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.316642][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.376531][T16353] vxcan1 speed is unknown, defaulting to 1000 [ 274.560975][T16362] tipc: Enabled bearer , priority 0 [ 274.576824][T16362] syzkaller0: entered promiscuous mode [ 274.590408][T16362] syzkaller0: entered allmulticast mode [ 274.681191][T16372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2992'. [ 274.683840][T16362] tipc: Resetting bearer [ 274.745809][T16358] tipc: Resetting bearer [ 274.810185][T16358] tipc: Disabling bearer [ 274.964050][T16353] lo speed is unknown, defaulting to 1000 [ 275.016220][T16390] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2997'. [ 275.026592][T16390] netlink: 'syz.0.2997': attribute type 10 has an invalid length. [ 275.095744][T16390] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 275.568733][T16353] chnl_net:caif_netlink_parms(): no params data found [ 275.644401][T16353] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.651670][T16353] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.659711][T16353] bridge_slave_0: entered allmulticast mode [ 275.667946][T16353] bridge_slave_0: entered promiscuous mode [ 275.676295][T16353] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.683525][T16353] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.691813][T16353] bridge_slave_1: entered allmulticast mode [ 275.699379][T16353] bridge_slave_1: entered promiscuous mode [ 275.730872][T16353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.742951][T16353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.776750][T16353] team0: Port device team_slave_0 added [ 275.785138][T16353] team0: Port device team_slave_1 added [ 275.848679][T16353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.856381][T16353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.884750][T16353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.899334][T16353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.923824][T16353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.951524][T16353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.073537][T16353] hsr_slave_0: entered promiscuous mode [ 276.097860][T16353] hsr_slave_1: entered promiscuous mode [ 276.111318][T16353] debugfs: 'hsr0' already exists in 'hsr' [ 276.121975][T16353] Cannot create hsr debugfs directory [ 276.387393][ T5845] Bluetooth: hci1: command tx timeout [ 276.405232][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3014'. [ 276.425392][T16449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3013'. [ 276.488077][T16456] syzkaller1: entered promiscuous mode [ 276.493589][T16456] syzkaller1: entered allmulticast mode [ 277.004171][T16497] tunl0: Caught tx_queue_len zero misconfig [ 277.031172][T16495] syzkaller1: entered promiscuous mode [ 277.037043][T16495] syzkaller1: entered allmulticast mode [ 277.176414][T16511] x_tables: duplicate underflow at hook 2 [ 277.182629][T16511] x_tables: duplicate underflow at hook 1 [ 277.289235][T16517] xt_hashlimit: overflow, rate too high: 0 [ 277.759996][T16535] tipc: Enabling of bearer rejected, failed to enable media [ 277.777050][T16536] netlink: 'syz.0.3037': attribute type 8 has an invalid length. [ 277.807729][T16532] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 277.889787][T16540] block nbd1: Unsupported socket: should be TCP or UNIX. [ 277.902671][T16535] syzkaller0: entered promiscuous mode [ 277.909438][T16535] syzkaller0: entered allmulticast mode [ 278.050880][T16353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.057210][T16541] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 278.067412][T16541] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3039'. [ 278.085304][T16541] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 278.095851][T16353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.108954][T16541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3039'. [ 278.119697][T16353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.142443][T16353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.349709][T16566] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 278.372538][T16567] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 278.374212][T16353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.445113][T16353] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.468370][ T5845] Bluetooth: hci1: command tx timeout [ 278.487537][T15708] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.494742][T15708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.527480][T15708] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.534676][T15708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.637233][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3052'. [ 278.654642][T16353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.672769][T16580] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3051'. [ 278.705319][T16582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3053'. [ 278.728854][T16583] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3051'. [ 278.741721][T16586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3053'. [ 279.064273][T16602] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 279.104375][T16353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.123864][T16606] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 279.128319][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3059'. [ 279.194052][T16603] IPVS: set_ctl: invalid protocol: 29 172.30.0.6:20001 [ 279.228572][T16353] veth0_vlan: entered promiscuous mode [ 279.274632][T16353] veth1_vlan: entered promiscuous mode [ 279.340203][T16353] veth0_macvtap: entered promiscuous mode [ 279.360398][T16353] veth1_macvtap: entered promiscuous mode [ 279.399222][T16353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.424573][T16353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.475280][T16621] sctp: [Deprecated]: syz.4.3064 (pid 16621) Use of int in max_burst socket option deprecated. [ 279.475280][T16621] Use struct sctp_assoc_value instead [ 279.491401][T15708] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.491491][T15708] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.491536][T15708] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.491569][T15708] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.538983][T16623] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3064'. [ 279.557888][T16623] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 279.804120][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.814930][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.893454][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.901964][T16647] Unsupported ieee802154 address type: 0 [ 279.902420][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.935659][T16644] Unsupported ieee802154 address type: 0 [ 279.980827][T16651] x_tables: duplicate underflow at hook 3 [ 280.054014][T16654] ip6gre1: entered allmulticast mode [ 280.273335][T16663] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3076'. [ 280.312903][T16663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.333845][T16663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.366881][T16663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.376865][T16663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.420648][T16669] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 280.545879][ T5845] Bluetooth: hci1: command tx timeout [ 280.584462][T16681] netlink: 'syz.4.3080': attribute type 83 has an invalid length. [ 281.234151][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.244166][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.254070][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.262776][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.273704][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.738599][T16706] vxcan1 speed is unknown, defaulting to 1000 [ 281.920893][T16725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.983370][T16726] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 282.003649][T16732] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 282.151339][T16706] lo speed is unknown, defaulting to 1000 [ 282.166134][T16723] tipc: Enabled bearer , priority 0 [ 282.186390][T16720] tipc: Resetting bearer [ 282.627248][ T5845] Bluetooth: hci1: command tx timeout [ 283.167054][ T5894] tipc: Node number set to 3631149631 [ 283.350053][ T5845] Bluetooth: hci3: command tx timeout [ 283.805010][T16720] tipc: Disabling bearer [ 283.880178][T16753] __nla_validate_parse: 2 callbacks suppressed [ 283.880206][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 284.028416][T16761] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 284.031420][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 284.149216][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 284.170340][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 284.220810][T16770] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3105'. [ 284.320634][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 284.559347][T16706] chnl_net:caif_netlink_parms(): no params data found [ 284.746778][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3110'. [ 284.757656][T16788] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3110'. [ 284.762326][T16800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3114'. [ 284.781114][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3110'. [ 284.800836][ T3510] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.811940][ T3510] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.851074][ T3510] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.862299][ T1113] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.023420][T16706] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.023772][T16808] xt_cluster: node mask cannot exceed total number of nodes [ 285.031250][T16706] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.046662][T16706] bridge_slave_0: entered allmulticast mode [ 285.054450][T16706] bridge_slave_0: entered promiscuous mode [ 285.069043][T16706] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.076571][T16706] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.083848][T16706] bridge_slave_1: entered allmulticast mode [ 285.097958][T16706] bridge_slave_1: entered promiscuous mode [ 285.213865][T16706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.227454][T16821] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 213 [ 285.259122][T16706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.301556][T16818] : renamed from hsr0 (while UP) [ 285.414718][T16706] team0: Port device team_slave_0 added [ 285.426012][ T5845] Bluetooth: hci3: command tx timeout [ 285.454125][T16706] team0: Port device team_slave_1 added [ 285.590584][T16706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.602744][T16706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.634543][T16706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.767618][T16706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.775035][T16706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.829625][T16706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.182504][T16706] hsr_slave_0: entered promiscuous mode [ 286.195355][T16706] hsr_slave_1: entered promiscuous mode [ 286.202929][T16706] debugfs: 'hsr0' already exists in 'hsr' [ 286.209363][T16706] Cannot create hsr debugfs directory [ 286.225121][T15708] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 286.274490][T16873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.537557][T16890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.816621][T16899] netlink: 'syz.0.3139': attribute type 29 has an invalid length. [ 286.845378][T16899] netlink: 'syz.0.3139': attribute type 29 has an invalid length. [ 286.880857][T16899] netlink: 'syz.0.3139': attribute type 1 has an invalid length. [ 286.967719][T16706] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.017121][T16706] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.101737][T16706] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.149411][T16706] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.508234][ T5845] Bluetooth: hci3: command tx timeout [ 287.672844][T16706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.749801][T16706] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.781448][T16941] gre0: entered promiscuous mode [ 287.835837][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.843038][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.874101][T16952] netlink: 'syz.5.3153': attribute type 83 has an invalid length. [ 287.927977][T16952] netlink: 'syz.5.3153': attribute type 1 has an invalid length. [ 287.942565][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.949765][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.496388][T16969] tipc: Started in network mode [ 288.505900][T16969] tipc: Node identity eaccd66196c4, cluster identity 4711 [ 288.533612][T16969] tipc: Enabled bearer , priority 0 [ 288.554829][T16971] syzkaller0: entered promiscuous mode [ 288.560561][T16971] syzkaller0: entered allmulticast mode [ 288.602230][T16969] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 288.645363][T16975] netlink: 'syz.0.3160': attribute type 27 has an invalid length. [ 288.651849][T16706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.665056][T16969] tipc: Resetting bearer [ 288.673966][T16969] IPVS: set_ctl: invalid protocol: 201 224.0.0.1:20004 [ 288.688271][T16968] tipc: Resetting bearer [ 288.713058][T16968] tipc: Disabling bearer [ 288.747628][ T5845] block nbd1: Receive control failed (result -32) [ 288.778106][T16983] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 288.846171][T16982] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 288.894702][T16706] veth0_vlan: entered promiscuous mode [ 288.942560][T16706] veth1_vlan: entered promiscuous mode [ 289.058119][T16992] __nla_validate_parse: 17 callbacks suppressed [ 289.058138][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 289.123457][T16706] veth0_macvtap: entered promiscuous mode [ 289.142019][T16998] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3169'. [ 289.162673][T16706] veth1_macvtap: entered promiscuous mode [ 289.256642][T16706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.280671][T16706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.367129][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.399369][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.454564][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.482740][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3176'. [ 289.496159][T17019] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 289.559562][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.601845][ T5845] Bluetooth: hci3: command tx timeout [ 289.619293][T17019] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3174'. [ 289.727568][T17019] IPv6: sit3: Disabled Multicast RS [ 289.755373][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.777497][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.860770][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.875137][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.927167][T17042] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 289.942531][T17042] bond1 (unregistering): Released all slaves [ 290.126748][T17054] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3185'. [ 290.185311][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'. [ 290.286629][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3188'. [ 290.420609][T17075] tipc: Resetting bearer [ 290.907289][T17105] tipc: Enabling of bearer rejected, failed to enable media [ 290.971977][T17105] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3198'. [ 291.099189][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 291.201129][T17075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.217046][T17075] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 291.254689][T17075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.285710][T17075] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 291.319096][T17127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.456813][T17075] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 291.481634][T17137] dvmrp0: entered allmulticast mode [ 291.487225][T17137] dvmrp0: left allmulticast mode [ 291.564044][T17075] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 291.701544][T17148] x_tables: duplicate underflow at hook 2 [ 291.760974][T17075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.769901][T17075] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 291.790593][T17155] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3212'. [ 291.892390][T17075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.903363][T17075] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 292.289270][T17182] netlink: 'syz.3.3220': attribute type 1 has an invalid length. [ 292.800683][T17223] netlink: 'syz.1.3234': attribute type 7 has an invalid length. [ 292.823026][T17223] netlink: 'syz.1.3234': attribute type 8 has an invalid length. [ 292.886785][T17226] syzkaller0: entered promiscuous mode [ 292.892371][T17226] syzkaller0: entered allmulticast mode [ 293.044990][T17233] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 293.168030][T17243] netlink: 'syz.5.3240': attribute type 10 has an invalid length. [ 293.198272][T17243] batman_adv: batadv0: Adding interface: netdevsim0 [ 293.204898][T17243] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 293.241469][T17243] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 293.340886][T17252] tipc: Enabled bearer , priority 0 [ 293.350118][T17252] syzkaller0: entered promiscuous mode [ 293.356677][T17252] syzkaller0: entered allmulticast mode [ 293.418863][T17252] tipc: Resetting bearer [ 293.446936][T17250] tipc: Resetting bearer [ 293.478100][T17250] tipc: Disabling bearer [ 294.014604][T17277] bond1 (unregistering): Released all slaves [ 294.438594][T17290] __nla_validate_parse: 10 callbacks suppressed [ 294.438612][T17290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3254'. [ 294.462110][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 294.476688][T17290] netlink: 'syz.0.3254': attribute type 49 has an invalid length. [ 294.528189][T17298] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3256'. [ 294.556480][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'. [ 294.660008][T17304] xt_hashlimit: size too large, truncated to 1048576 [ 294.675848][T17303] xt_hashlimit: size too large, truncated to 1048576 [ 294.819778][T17310] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3262'. [ 294.877290][T17316] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3264'. [ 294.893978][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 294.910959][T17318] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3265'. [ 294.980904][T17318] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3265'. [ 295.012944][T17325] gre1: entered promiscuous mode [ 295.021116][T17325] gre1: entered allmulticast mode [ 295.025275][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3267'. [ 295.051573][T17329] netlink: 'syz.4.3268': attribute type 10 has an invalid length. [ 295.082250][T17329] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 295.102874][T17326] gre1: entered promiscuous mode [ 295.109504][T17326] gre1: entered allmulticast mode [ 295.118755][T17327] veth0_to_bridge: entered promiscuous mode [ 295.136899][T17329] bond2: option resend_igmp: invalid value (32767) [ 295.143416][T17329] bond2: option resend_igmp: allowed values 0 - 255 [ 295.153302][T17329] bond2 (unregistering): Released all slaves [ 295.173337][T17323] veth0_to_bridge: left promiscuous mode [ 295.391128][T17343] netlink: 'syz.1.3274': attribute type 2 has an invalid length. [ 295.446711][T17343] : entered promiscuous mode [ 295.642247][T17357] netlink: 'syz.4.3278': attribute type 30 has an invalid length. [ 295.684547][ T44] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.685103][T17359] netlink: 'syz.1.3277': attribute type 8 has an invalid length. [ 295.713680][ T44] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.732002][ T44] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.752362][ T44] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.819901][T17363] netlink: 'syz.0.3280': attribute type 1 has an invalid length. [ 295.955045][T17362] syzkaller0: entered promiscuous mode [ 295.975406][T17362] syzkaller0: entered allmulticast mode [ 298.090740][T17376] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 298.107004][T17377] IPVS: Error connecting to the multicast addr [ 298.149117][T17383] bond2: (slave bridge1): making interface the new active one [ 298.183641][T17383] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 298.242560][T17385] vlan2: entered allmulticast mode [ 298.268028][T17385] bond2: entered allmulticast mode [ 298.285902][T17385] bridge1: entered allmulticast mode [ 298.543315][T17417] team1: entered promiscuous mode [ 298.556008][T17417] team1: entered allmulticast mode [ 298.778771][T17430] bond1: option min_links: invalid value (18446744073709551614) [ 298.792360][T17430] bond1: option min_links: allowed values 0 - 2147483647 [ 298.818033][T17430] bond1 (unregistering): Released all slaves [ 298.927894][T17445] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 299.002764][T17455] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 299.450572][T17487] __nla_validate_parse: 12 callbacks suppressed [ 299.450588][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 299.492306][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 299.521966][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3318'. [ 299.545924][T17490] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 299.915317][T17521] xt_l2tp: wrong L2TP version: 0 [ 300.214701][T17538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3335'. [ 300.215216][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3337'. [ 300.267894][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3337'. [ 300.405379][T17553] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 300.724796][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 300.734468][T17567] nbd3: detected capacity change from 0 to 127 [ 300.772785][T17571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'. [ 300.818473][T17584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3345'. [ 301.252964][T17602] dvmrp0: entered allmulticast mode [ 301.265463][T17605] : renamed from hsr0 [ 301.378123][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 301.401500][ T5845] block nbd3: Receive control failed (result -104) [ 301.402019][T17618] openvswitch: netlink: Flow actions attr not present in new flow. [ 301.623798][T17632] sctp: [Deprecated]: syz.1.3363 (pid 17632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.623798][T17632] Use struct sctp_sack_info instead [ 301.657260][T17632] sctp: [Deprecated]: syz.1.3363 (pid 17632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.657260][T17632] Use struct sctp_sack_info instead [ 301.857264][T17624] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.864807][T17624] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.092538][T17624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.149442][T17624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.298048][T17630] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 302.325069][T17630] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 302.351034][T17630] gretap1: entered promiscuous mode [ 302.365435][T17630] gretap1: entered allmulticast mode [ 302.380258][T17652] validate_nla: 1 callbacks suppressed [ 302.380275][T17652] netlink: 'syz.0.3365': attribute type 6 has an invalid length. [ 302.406539][T17652] netlink: 'syz.0.3365': attribute type 6 has an invalid length. [ 302.417214][ T44] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.428250][ T44] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.442821][ T44] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.467413][ T44] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.500065][T17652] tipc: Invalid UDP bearer configuration [ 302.500120][T17652] tipc: Enabling of bearer rejected, failed to enable media [ 302.538089][T17653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.555860][ T44] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.566853][ T44] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.610522][ T44] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.626504][ T44] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.773905][T17665] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.989121][T17674] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 303.242160][T17701] netlink: 'syz.0.3381': attribute type 5 has an invalid length. [ 303.254327][T17686] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 303.268276][T17686] bond2 (unregistering): Released all slaves [ 303.700437][T17731] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 303.782688][T17731] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 304.063241][T17740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.100866][T17749] bond3: entered allmulticast mode [ 304.120174][T17752] tipc: Started in network mode [ 304.125071][T17752] tipc: Node identity 8e77d03beab4, cluster identity 4711 [ 304.132746][T17752] tipc: Enabled bearer , priority 0 [ 304.243447][T17744] syzkaller0: entered promiscuous mode [ 304.250182][T17744] syzkaller0: entered allmulticast mode [ 304.257227][T17744] tipc: Resetting bearer [ 304.277928][T17741] tipc: Resetting bearer [ 305.258427][ T5839] tipc: Node number set to 1690554427 [ 305.500962][T17774] x_tables: unsorted entry at hook 2 [ 305.623016][T17778] __nla_validate_parse: 14 callbacks suppressed [ 305.623035][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3405'. [ 305.830304][T17741] tipc: Disabling bearer [ 305.848397][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3401'. [ 305.898568][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3406'. [ 305.908433][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3406'. [ 305.936173][T17783] netlink: 'syz.4.3406': attribute type 15 has an invalid length. [ 306.120111][T17790] netlink: zone id is out of range [ 306.128442][T17792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3410'. [ 306.142932][T17792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.224708][T17796] !: renamed from dummy0 (while UP) [ 306.367097][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3417'. [ 306.497857][T17816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 306.855596][T17838] netlink: 'syz.4.3429': attribute type 1 has an invalid length. [ 306.914661][T17839] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3429'. [ 306.939249][T17838] netlink: 16118 bytes leftover after parsing attributes in process `syz.4.3429'. [ 306.995978][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3431'. [ 307.101842][T17849] netlink: 'syz.1.3433': attribute type 10 has an invalid length. [ 307.220276][T17843] vlan1: entered allmulticast mode [ 307.226044][T17843] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 307.234417][T17849] bridge0: port 3(team0) entered blocking state [ 307.266049][T17849] bridge0: port 3(team0) entered disabled state [ 307.272651][T17849] team0: entered allmulticast mode [ 307.299036][T17849] team_slave_0: entered allmulticast mode [ 307.315084][T17849] team_slave_1: entered allmulticast mode [ 307.346819][T17849] team0: entered promiscuous mode [ 307.375633][T17849] team_slave_0: entered promiscuous mode [ 307.387019][T17849] team_slave_1: entered promiscuous mode [ 307.413878][T17849] bridge0: port 3(team0) entered blocking state [ 307.420341][T17849] bridge0: port 3(team0) entered forwarding state [ 307.433198][ T7334] IPVS: starting estimator thread 0... [ 307.549769][T17863] IPVS: using max 29 ests per chain, 69600 per kthread [ 307.609166][T17867] vxcan1 speed is unknown, defaulting to 1000 [ 307.642766][T17869] syzkaller1: entered promiscuous mode [ 307.648525][T17869] syzkaller1: entered allmulticast mode [ 307.700622][T17871] xt_l2tp: v2 doesn't support IP mode [ 308.724192][T17911] netlink: 'syz.1.3451': attribute type 8 has an invalid length. [ 308.858032][T17867] lo speed is unknown, defaulting to 1000 [ 308.994353][T17925] openvswitch: netlink: Missing key (keys=40, expected=80) [ 309.061901][T17872] netlink: 'syz.0.3439': attribute type 16 has an invalid length. [ 309.087348][T17872] netlink: 'syz.0.3439': attribute type 17 has an invalid length. [ 309.116058][T17933] netlink: 'syz.3.3459': attribute type 4 has an invalid length. [ 309.166112][T17934] netlink: 'syz.3.3459': attribute type 4 has an invalid length. [ 309.215120][T17872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.225334][T17872] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.435094][T17872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.905771][T17957] tipc: Enabled bearer , priority 0 [ 309.923301][T17955] tipc: Resetting bearer [ 311.677944][T17955] tipc: Disabling bearer [ 311.890877][T17997] vxcan1 speed is unknown, defaulting to 1000 [ 311.971783][T18001] __nla_validate_parse: 3 callbacks suppressed [ 311.971803][T18001] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3477'. [ 312.400599][T18020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3483'. [ 312.590723][T18029] tipc: Enabled bearer , priority 0 [ 312.593955][T18031] IPVS: set_ctl: invalid protocol: 18 127.0.0.1:20001 [ 312.632430][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3487'. [ 312.656090][T18034] syzkaller0: entered promiscuous mode [ 312.661592][T18034] syzkaller0: entered allmulticast mode [ 312.667987][T18031] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3488'. [ 312.725163][T18029] tipc: Resetting bearer [ 312.740029][T18031] Bluetooth: MGMT ver 1.23 [ 312.760247][T17997] lo speed is unknown, defaulting to 1000 [ 312.806046][T18028] tipc: Resetting bearer [ 312.849104][T18043] netlink: 'syz.4.3491': attribute type 21 has an invalid length. [ 312.859280][T18028] tipc: Disabling bearer [ 312.891916][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3491'. [ 313.218869][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3498'. [ 313.289193][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3498'. [ 313.370066][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'. [ 313.626312][T18065] syzkaller1: entered promiscuous mode [ 313.634607][T18065] syzkaller1: entered allmulticast mode [ 313.889189][T18085] netlink: 'syz.0.3504': attribute type 21 has an invalid length. [ 313.910972][T18085] netlink: 'syz.0.3504': attribute type 1 has an invalid length. [ 313.957739][T18087] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3505'. [ 314.033961][T18089] IPVS: persistence engine module ip_vs_pe_À not found [ 314.253555][T18105] netlink: 'syz.4.3510': attribute type 9 has an invalid length. [ 314.677333][T18136] xt_cluster: node mask cannot exceed total number of nodes [ 314.748619][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3519'. [ 314.771609][T18140] bridge_slave_1: left allmulticast mode [ 314.786887][T18140] bridge_slave_1: left promiscuous mode [ 314.811374][T18140] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.846395][T18140] bridge_slave_0: left allmulticast mode [ 314.852268][T18140] bridge_slave_0: left promiscuous mode [ 314.858978][T18140] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.845398][T18276] netlink: 'syz.3.3559': attribute type 21 has an invalid length. [ 316.893701][T18276] netlink: 'syz.3.3559': attribute type 1 has an invalid length. [ 316.903490][T18276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.183985][T18286] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 317.197357][T18286] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 317.330103][T18302] __nla_validate_parse: 6 callbacks suppressed [ 317.330121][T18302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3568'. [ 317.423630][ T5845] block nbd4: Receive control failed (result -32) [ 317.602501][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 317.704096][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 317.771802][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'. [ 317.799215][T18318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.825307][T18325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3571'. [ 318.082489][T18344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 318.258825][T18355] veth1_macvtap: left promiscuous mode [ 318.406936][T18367] SET target dimension over the limit! [ 318.421679][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'. [ 318.577665][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3591'. [ 318.700675][T18387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.792928][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'. [ 318.932873][T18397] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 318.947938][T18397] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 319.038034][T18390] macvlan3: entered promiscuous mode [ 319.043510][T18390] macvlan3: entered allmulticast mode [ 319.049979][T18390] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 320.153502][T18456] netlink: 'syz.3.3618': attribute type 21 has an invalid length. [ 320.301234][T18463] syzkaller1: entered promiscuous mode [ 320.325693][T18463] syzkaller1: entered allmulticast mode [ 320.403834][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 320.728412][T18499] vxcan1 speed is unknown, defaulting to 1000 [ 320.743047][T18507] netlink: 'syz.3.3632': attribute type 28 has an invalid length. [ 320.751334][T18507] netlink: 'syz.3.3632': attribute type 3 has an invalid length. [ 320.770951][T18492] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 321.066364][T18499] lo speed is unknown, defaulting to 1000 [ 321.974509][T18560] netlink: 'syz.3.3646': attribute type 1 has an invalid length. [ 322.157480][T18561] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 322.246994][T18560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.254029][ T1154] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.321314][T18561] veth3: entered promiscuous mode [ 322.354517][T18561] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 322.396125][ T44] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.875252][T18599] IPv6: NLM_F_REPLACE set, but no existing node found! [ 323.045436][T18612] netlink: 'syz.3.3661': attribute type 27 has an invalid length. [ 323.061409][T18612] netlink: 'syz.3.3661': attribute type 4 has an invalid length. [ 323.093368][T18612] __nla_validate_parse: 6 callbacks suppressed [ 323.093385][T18612] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3661'. [ 323.128045][T18614] blkio.reset_stats is deprecated [ 323.302386][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3667'. [ 323.404843][T18636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3668'. [ 323.448602][T18638] xt_recent: Unsupported userspace flags (000000b1) [ 323.474347][T18640] sctp: [Deprecated]: syz.3.3671 (pid 18640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.474347][T18640] Use struct sctp_sack_info instead [ 323.492738][T18641] sctp: [Deprecated]: syz.3.3671 (pid 18641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.492738][T18641] Use struct sctp_sack_info instead [ 323.541571][T18646] macvtap1: entered allmulticast mode [ 323.552751][T18646] veth0_macvtap: entered allmulticast mode [ 323.810800][T18666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.177146][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3692'. [ 326.290058][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3693'. [ 326.367410][T18734] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 326.501264][T18749] x_tables: duplicate underflow at hook 3 [ 326.642798][T18756] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3700'. [ 326.804987][T18766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3704'. [ 326.833511][T18770] netlink: 'syz.0.3707': attribute type 1 has an invalid length. [ 326.869413][T18770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.164702][T18799] xt_TCPMSS: Only works on TCP SYN packets [ 327.176297][T18799] netlink: 'syz.3.3715': attribute type 25 has an invalid length. [ 327.190508][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'. [ 327.226229][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3717'. [ 327.454401][T18821] netlink: 'syz.0.3721': attribute type 1 has an invalid length. [ 327.511580][T18823] netlink: 'syz.5.3724': attribute type 1 has an invalid length. [ 327.611456][T18823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.743668][T18829] bond3: (slave veth7): Enslaving as an active interface with a down link [ 327.767666][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 327.804837][T18823] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 327.868001][T18840] netlink: 'syz.4.3727': attribute type 1 has an invalid length. [ 328.350924][T18875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.438406][T18881] __nla_validate_parse: 3 callbacks suppressed [ 328.438424][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3743'. [ 328.470764][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 328.491092][T18881] netlink: 'syz.1.3743': attribute type 6 has an invalid length. [ 328.512408][T18886] block nbd5: Unsupported socket: should be TCP or UNIX. [ 328.543090][T11371] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.543219][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3743'. [ 328.555633][T11371] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.578071][T18888] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3746'. [ 328.596142][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 328.613496][T18881] netlink: 'syz.1.3743': attribute type 6 has an invalid length. [ 328.630883][T18889] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3746'. [ 328.630883][T18888] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3746'. [ 328.632867][T11371] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.640010][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3747'. [ 328.651306][T11371] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.696150][T18892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.704333][T18892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.733811][T18892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.744591][T18892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.890835][T18902] 8021q: VLANs not supported on ip6tnl0 [ 329.134761][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3755'. [ 329.140152][T18911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3754'. [ 329.246216][T18918] xt_addrtype: ipv6 does not support BROADCAST matching [ 329.290255][T18923] openvswitch: netlink: Duplicate key (type 1). [ 329.358359][T18926] netlink: 'syz.5.3760': attribute type 1 has an invalid length. [ 329.378895][T18927] netlink: 'syz.0.3761': attribute type 1 has an invalid length. [ 329.394230][T18929] bridge0: port 3(batadv0) entered blocking state [ 329.401871][T18929] bridge0: port 3(batadv0) entered disabled state [ 329.411316][T18929] batadv0: entered allmulticast mode [ 329.420596][T18929] batadv0: entered promiscuous mode [ 329.491388][T18926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.538940][T18927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.580026][T18931] veth9: entered promiscuous mode [ 329.609659][T18931] bond4: (slave veth9): Enslaving as an active interface with an up link [ 329.630972][T18936] tipc: Started in network mode [ 329.660893][T18936] tipc: Node identity , cluster identity 4711 [ 329.711513][T18936] tipc: Failed to obtain node identity [ 329.737004][T18936] tipc: Enabling of bearer rejected, failed to enable media [ 329.895709][T11371] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 329.906555][T11371] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 330.191973][T18975] tc_dump_action: action bad kind [ 330.265436][T18975] bond2: entered allmulticast mode [ 330.821358][T19017] x_tables: unsorted underflow at hook 3 [ 330.946006][T19026] --map-set only usable from mangle table [ 330.974278][T19029] IPVS: length: 243 != 24 [ 331.127080][T19038] netlink: 'syz.5.3796': attribute type 21 has an invalid length. [ 331.190063][ T25] block nbd3: Possible stuck request ffff888024a6e000: control (read@0,1024B). Runtime 30 seconds [ 331.197931][T19038] vlan3: entered allmulticast mode [ 331.203015][ T25] block nbd3: Possible stuck request ffff888024a6e1c0: control (read@1024,1024B). Runtime 30 seconds [ 331.208518][T19038] bridge_slave_0: entered allmulticast mode [ 331.217903][ T25] block nbd3: Possible stuck request ffff888024a6e380: control (read@2048,1024B). Runtime 30 seconds [ 331.235198][ T25] block nbd3: Possible stuck request ffff888024a6e540: control (read@3072,1024B). Runtime 30 seconds [ 331.493935][T19056] geneve3: entered promiscuous mode [ 331.508615][T19056] geneve3: entered allmulticast mode [ 331.517832][T11371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.541629][T11371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.551941][T11371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.562927][T11371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.576893][T19056] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 331.589208][T19056] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 331.726750][T19077] netlink: zone id is out of range [ 331.828863][T19085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.978777][T19101] validate_nla: 2 callbacks suppressed [ 331.978795][T19101] netlink: 'syz.5.3814': attribute type 1 has an invalid length. [ 331.978949][T19102] netlink: 'syz.5.3814': attribute type 1 has an invalid length. [ 332.034353][T19096] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 332.105105][T19105] ip6gre1: entered promiscuous mode [ 332.178689][T19116] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 332.216551][T19119] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 332.224859][T19122] netlink: 'syz.5.3819': attribute type 1 has an invalid length. [ 332.269216][T19121] netlink: 'syz.5.3819': attribute type 8 has an invalid length. [ 332.273312][T19119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.321744][T19127] vlan0: entered promiscuous mode [ 332.327587][T19127] bond3: entered promiscuous mode [ 332.332990][T19127] vlan0: entered allmulticast mode [ 332.348492][T19127] bond3: entered allmulticast mode [ 332.417426][T19119] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 332.437607][T19119] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 332.486733][T19119] bond3: (slave macvlan0): making interface the new active one [ 332.504657][T19119] macvlan0: entered promiscuous mode [ 332.516031][T19119] bond0: entered promiscuous mode [ 332.521300][T19119] bond_slave_0: entered promiscuous mode [ 332.528142][T19119] bond_slave_1: entered promiscuous mode [ 332.534240][T19119] geneve1: entered promiscuous mode [ 332.542994][T19119] macvlan0: entered allmulticast mode [ 332.550562][T19119] bond0: entered allmulticast mode [ 332.566884][T19119] bond_slave_0: entered allmulticast mode [ 332.582865][T19119] bond_slave_1: entered allmulticast mode [ 332.593557][T19119] geneve1: entered allmulticast mode [ 332.599700][T19119] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 332.617373][T19119] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 333.038748][ T5839] IPVS: starting estimator thread 0... [ 333.126299][T19169] IPVS: using max 28 ests per chain, 67200 per kthread [ 333.287334][T19149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.301443][T19149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.318339][T19149] bond0 (unregistering): Released all slaves [ 333.380935][T19154] vxcan1 speed is unknown, defaulting to 1000 [ 333.559527][T19183] tc_dump_action: action bad kind [ 333.595758][T19190] tipc: Enabling of bearer rejected, failed to enable media [ 333.766536][T19200] tap0: tun_chr_ioctl cmd 1074025672 [ 333.778562][T19200] tap0: ignored: set checksum disabled [ 333.789469][T19198] tap0: tun_chr_ioctl cmd 2149094457 [ 333.834105][T19201] __nla_validate_parse: 28 callbacks suppressed [ 333.834123][T19201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3838'. [ 333.845091][T19154] lo speed is unknown, defaulting to 1000 [ 334.077792][T19216] macvlan0: entered promiscuous mode [ 334.089880][T19216] batadv0: entered promiscuous mode [ 334.107175][T19216] debugfs: 'hsr1' already exists in 'hsr' [ 334.120306][T19216] Cannot create hsr debugfs directory [ 334.130566][T19216] hsr1: entered allmulticast mode [ 334.135713][T19216] macvlan0: entered allmulticast mode [ 334.141327][T19216] veth1_vlan: entered allmulticast mode [ 334.154403][T19216] batadv0: entered allmulticast mode [ 334.161755][T19216] macvlan0: left promiscuous mode [ 334.168569][T19216] batadv0: left promiscuous mode [ 334.177278][T19220] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3840'. [ 334.210029][T19217] macvlan0: entered promiscuous mode [ 334.216958][T19217] batadv0: entered promiscuous mode [ 334.222653][T19217] debugfs: 'hsr1' already exists in 'hsr' [ 334.229537][T19217] Cannot create hsr debugfs directory [ 334.236940][T19217] hsr1: entered allmulticast mode [ 334.245033][T19217] macvlan0: left promiscuous mode [ 334.253721][T19217] batadv0: left promiscuous mode [ 334.716806][T19231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.734962][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 334.821856][T19238] erspan0: entered promiscuous mode [ 334.996776][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3854'. [ 335.036082][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3854'. [ 335.055744][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3854'. [ 335.117001][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3854'. [ 335.161055][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3854'. [ 335.197958][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3854'. [ 335.213892][T19257] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3855'. [ 335.223105][T19257] block nbd0: reconnected socket [ 335.231978][ T5845] block nbd0: Receive control failed (result -32) [ 335.455054][T19265] netlink: 'syz.5.3858': attribute type 25 has an invalid length. [ 335.567350][T19279] batadv_slave_0: entered promiscuous mode [ 335.602432][T19276] netlink: 'syz.0.3865': attribute type 1 has an invalid length. [ 335.739833][T19278] batadv_slave_0: left promiscuous mode [ 336.094111][T19313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.138862][T19319] netlink: 'syz.0.3877': attribute type 21 has an invalid length. [ 336.233302][T19324] tipc: Enabled bearer , priority 10 [ 361.268106][ T25] block nbd3: Possible stuck request ffff888024a6e000: control (read@0,1024B). Runtime 60 seconds [ 361.278843][ T25] block nbd3: Possible stuck request ffff888024a6e1c0: control (read@1024,1024B). Runtime 60 seconds [ 361.290580][ T25] block nbd3: Possible stuck request ffff888024a6e380: control (read@2048,1024B). Runtime 60 seconds [ 361.301750][ T25] block nbd3: Possible stuck request ffff888024a6e540: control (read@3072,1024B). Runtime 60 seconds [ 362.016158][T19357] __nla_validate_parse: 35 callbacks suppressed [ 362.016179][T19357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3886'. [ 362.108640][T19357] bond5 (unregistering): Released all slaves [ 362.179641][T19372] netlink: 'syz.0.3889': attribute type 1 has an invalid length. [ 362.217833][T19367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3891'. [ 362.436163][T19379] bond4: (slave gretap1): making interface the new active one [ 362.458940][T19379] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 362.622629][T19401] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3897'. [ 362.658870][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3897'. [ 362.660615][T19400] netlink: 'syz.5.3899': attribute type 1 has an invalid length. [ 362.676401][ T5201] udevd[5201]: worker [5836] /devices/virtual/block/nbd3 is taking a long time [ 362.690181][T19400] netlink: 'syz.5.3899': attribute type 1 has an invalid length. [ 362.885714][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3903'. [ 362.949069][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3903'. [ 362.974354][T19418] vxcan1 speed is unknown, defaulting to 1000 [ 363.437861][T19453] netlink: 'syz.0.3915': attribute type 23 has an invalid length. [ 363.674444][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 363.701823][T19466] netlink: zone id is out of range [ 363.741195][T19466] netlink: zone id is out of range [ 363.799651][T19460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3917'. [ 363.810484][T19460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3917'. [ 363.822068][T19427] netlink: 'syz.1.3904': attribute type 16 has an invalid length. [ 363.831558][T19427] netlink: 'syz.1.3904': attribute type 17 has an invalid length. [ 363.893540][T19427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.914156][T19418] lo speed is unknown, defaulting to 1000 [ 364.164563][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3923'. [ 364.192410][T19490] netlink: 'syz.5.3923': attribute type 3 has an invalid length. [ 364.438616][T19505] netlink: 'syz.5.3927': attribute type 1 has an invalid length. [ 364.810358][T19531] x_tables: duplicate underflow at hook 3 [ 364.957908][T19522] vxcan1 speed is unknown, defaulting to 1000 [ 365.072387][T19537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.084399][T19537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.094791][T19537] bond0 (unregistering): Released all slaves [ 365.135112][T19541] tc_dump_action: action bad kind [ 365.341293][T19522] lo speed is unknown, defaulting to 1000 [ 365.352655][T19550] netlink: 'syz.3.3938': attribute type 3 has an invalid length. [ 365.603037][T19561] netlink: 'syz.1.3943': attribute type 16 has an invalid length. [ 365.654770][T19561] team0: left allmulticast mode [ 365.687065][T19561] team_slave_0: left allmulticast mode [ 365.704042][T19561] team_slave_1: left allmulticast mode [ 365.711094][T19561] team0: left promiscuous mode [ 365.723650][T19561] team_slave_0: left promiscuous mode [ 365.729622][T19561] team_slave_1: left promiscuous mode [ 365.736328][T19561] bridge0: port 3(team0) entered disabled state [ 365.745883][T19561] bridge_slave_1: left allmulticast mode [ 365.752711][T19561] bridge_slave_1: left promiscuous mode [ 365.787336][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.832060][T19561] bridge_slave_0: left allmulticast mode [ 365.844828][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.982002][T19571] bond0: (slave gre0): Error: Device type is different from other slaves [ 366.373919][ T7336] IPVS: starting estimator thread 0... [ 366.487365][T19593] IPVS: using max 32 ests per chain, 76800 per kthread [ 366.497635][T19602] SET target dimension over the limit! [ 366.750348][T19607] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 366.761879][T19607] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 366.821655][T19609] bond0: (slave gretap1): making interface the new active one [ 366.832007][T19609] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 366.860766][T19599] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 366.871674][T19614] veth1_macvtap: left promiscuous mode [ 366.879089][T19614] macsec0: entered promiscuous mode [ 366.894689][T19614] macsec0: entered allmulticast mode [ 366.909377][T19615] veth1_macvtap: entered promiscuous mode [ 366.918156][T19615] veth1_macvtap: entered allmulticast mode [ 366.934626][T19615] macsec0: left promiscuous mode [ 366.950955][T19615] macsec0: left allmulticast mode [ 366.960935][T19615] veth1_macvtap: left allmulticast mode [ 367.014450][T18442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.044648][T18442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.066482][T18442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.092321][T18442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.250977][T19638] sctp: [Deprecated]: syz.5.3964 (pid 19638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.250977][T19638] Use struct sctp_sack_info instead [ 367.316224][T19646] __nla_validate_parse: 14 callbacks suppressed [ 367.316242][T19646] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3965'. [ 367.548758][T19667] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 367.632451][T19673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3975'. [ 367.881847][T19693] syzkaller1: entered promiscuous mode [ 367.887704][T19693] syzkaller1: entered allmulticast mode [ 367.899982][T19693] validate_nla: 6 callbacks suppressed [ 367.899998][T19693] netlink: 'syz.3.3981': attribute type 1 has an invalid length. [ 367.917641][T19694] netlink: 'syz.4.3982': attribute type 11 has an invalid length. [ 367.923687][T19693] netlink: 'syz.3.3981': attribute type 2 has an invalid length. [ 391.349587][ T25] block nbd3: Possible stuck request ffff888024a6e000: control (read@0,1024B). Runtime 90 seconds [ 391.360400][ T25] block nbd3: Possible stuck request ffff888024a6e1c0: control (read@1024,1024B). Runtime 90 seconds [ 391.371908][ T25] block nbd3: Possible stuck request ffff888024a6e380: control (read@2048,1024B). Runtime 90 seconds [ 391.382947][ T25] block nbd3: Possible stuck request ffff888024a6e540: control (read@3072,1024B). Runtime 90 seconds [ 391.777874][T19712] syzkaller0: entered promiscuous mode [ 391.783392][T19712] syzkaller0: entered allmulticast mode [ 392.020850][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3990'. [ 392.974692][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3995'. [ 393.929422][T19767] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 393.964715][T19769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4001'. [ 394.006224][T19772] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4001'. [ 394.090811][T19781] sctp: [Deprecated]: syz.5.4009 (pid 19781) Use of int in maxseg socket option. [ 394.090811][T19781] Use struct sctp_assoc_value instead [ 394.175028][T19785] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4010'. [ 394.179921][T19786] tipc: Started in network mode [ 394.191559][T19786] tipc: Node identity , cluster identity 4711 [ 394.200002][T19786] tipc: Failed to obtain node identity [ 394.206000][T19786] tipc: Enabling of bearer rejected, failed to enable media [ 394.237362][T19790] netlink: 'syz.4.4012': attribute type 9 has an invalid length. [ 394.245121][T19790] netlink: 'syz.4.4012': attribute type 6 has an invalid length. [ 394.543310][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4018'. [ 394.579276][T19816] veth1_to_bond: entered allmulticast mode [ 394.587774][T19816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4020'. [ 394.655032][T19816] bond0: (slave bond_slave_1): Releasing backup interface [ 394.716040][T19816] veth1_to_bond (unregistering): left allmulticast mode [ 394.887838][T19847] netlink: 'syz.0.4027': attribute type 5 has an invalid length. [ 394.898460][T19847] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4027'. [ 394.931816][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'. [ 395.460170][T19871] "syz.0.4035" (19871) uses obsolete ecb(arc4) skcipher [ 395.753151][T19911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4044'. [ 395.779878][T19910] macvtap1: entered promiscuous mode [ 395.792501][T19910] vlan0: entered promiscuous mode [ 395.801781][T19910] macvtap1: entered allmulticast mode [ 395.805462][T19916] openvswitch: netlink: IP tunnel dst address not specified [ 395.809192][T19910] vlan0: entered allmulticast mode [ 395.821137][T19910] veth0_vlan: entered allmulticast mode [ 395.933778][T19917] tipc: Started in network mode [ 395.961098][T19917] tipc: Node identity 165c8a80ef09, cluster identity 4711 [ 395.975036][T19917] tipc: Enabled bearer , priority 0 [ 395.982342][T19916] tipc: Enabling of bearer rejected, already enabled [ 396.003390][T19917] syzkaller0: entered promiscuous mode [ 396.019443][T19917] syzkaller0: entered allmulticast mode [ 396.058253][T19929] 8021q: VLANs not supported on sit0 [ 396.064673][T19912] tipc: Resetting bearer [ 396.132131][T19912] tipc: Disabling bearer [ 396.411979][T19942] xt_CT: No such helper "syz1" [ 396.640444][T19962] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 396.813942][T19967] bond5: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 396.928688][T19984] x_tables: duplicate underflow at hook 4 [ 397.032113][T19989] __nla_validate_parse: 12 callbacks suppressed [ 397.032133][T19989] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4070'. [ 397.124009][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4073'. [ 397.137778][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 397.148168][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4073'. [ 397.182027][T19998] xt_TCPMSS: Only works on TCP SYN packets [ 397.322608][T20015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4078'. [ 397.553216][T20024] syzkaller0: entered promiscuous mode [ 397.560539][T20024] syzkaller0: entered allmulticast mode [ 397.793055][T20055] syz_tun: entered allmulticast mode [ 397.803359][T20053] sctp: [Deprecated]: syz.4.4089 (pid 20053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.803359][T20053] Use struct sctp_sack_info instead [ 397.832707][T20055] pimreg: entered allmulticast mode [ 397.919178][T20055] syz_tun: left allmulticast mode [ 397.925416][T20055] pimreg: left allmulticast mode [ 398.160915][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4097'. [ 398.170145][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4097'. [ 398.308368][T20103] syzkaller1: entered allmulticast mode [ 398.368140][T20106] tipc: Enabling of bearer rejected, failed to enable media [ 398.585077][T20119] delete_channel: no stack [ 398.679173][T20126] syzkaller0: entered promiscuous mode [ 398.682292][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4106'. [ 398.698157][T20126] syzkaller0: entered allmulticast mode [ 398.764581][T20134] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4110'. [ 398.803431][T20134] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 398.945138][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4111'. [ 398.965675][T20141] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 399.118884][T20151] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 399.354959][T20174] tipc: Enabled bearer , priority 0 [ 399.438189][T20174] tipc: Disabling bearer [ 399.490637][T20181] syzkaller0: entered promiscuous mode [ 399.499626][T20181] syzkaller0: entered allmulticast mode [ 399.678883][T20192] tipc: Enabling of bearer rejected, failed to enable media [ 399.963826][T20211] Unsupported ieee802154 address type: 0 [ 400.175280][T20239] netlink: 'syz.3.4138': attribute type 4 has an invalid length. [ 400.197688][T20239] `: renamed from bond0 (while UP) [ 400.279641][T20244] syzkaller0: entered promiscuous mode [ 400.285306][T20244] syzkaller0: entered allmulticast mode [ 400.323721][T20249] netlink: 'syz.3.4142': attribute type 1 has an invalid length. [ 401.463738][T20322] netlink: 'syz.4.4165': attribute type 32 has an invalid length. [ 401.555212][T20322] bond5: option coupled_control: invalid value (52) [ 401.577551][T20322] bond5 (unregistering): Released all slaves [ 401.821523][T20352] netlink: 'syz.4.4172': attribute type 24 has an invalid length. [ 401.933251][T20369] netlink: 'syz.5.4177': attribute type 10 has an invalid length. [ 401.969928][T20369] team0: Port device geneve0 added [ 402.070944][T20376] __nla_validate_parse: 17 callbacks suppressed [ 402.070961][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4180'. [ 402.203166][T20381] veth1_to_bond: entered allmulticast mode [ 402.269072][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4181'. [ 402.331787][T20390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4183'. [ 402.371030][T20381] veth1_to_bond (unregistering): left allmulticast mode [ 402.571808][T20407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4189'. [ 402.581382][T20409] dvmrp0: left allmulticast mode [ 402.736378][T20415] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 402.749442][T20415] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 402.793387][T20421] syzkaller1: entered promiscuous mode [ 402.801419][T20421] syzkaller1: entered allmulticast mode [ 402.967253][T20435] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4194'. [ 403.128543][T20447] veth0_to_team: entered allmulticast mode [ 403.354077][T20463] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 403.432467][T20447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.829700][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4213'. [ 403.971406][T20501] IPVS: Error connecting to the multicast addr [ 403.972887][T20502] netlink: 'syz.0.4217': attribute type 10 has an invalid length. [ 403.990398][T20502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4217'. [ 404.001161][T20502] batadv0: entered promiscuous mode [ 404.006945][T20502] batadv0: entered allmulticast mode [ 404.012740][T20502] bridge0: port 3(batadv0) entered blocking state [ 404.020159][T20502] bridge0: port 3(batadv0) entered disabled state [ 404.031698][T20502] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 404.166597][T20515] syzkaller0: entered promiscuous mode [ 404.187708][T20515] syzkaller0: entered allmulticast mode [ 404.452577][T20532] netlink: 'syz.5.4230': attribute type 7 has an invalid length. [ 404.513885][T20532] wg1: entered promiscuous mode [ 404.519856][T20532] wg1: entered allmulticast mode [ 405.172288][T20564] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 405.219138][T20562] syzkaller1: entered promiscuous mode [ 405.224648][T20562] syzkaller1: entered allmulticast mode [ 405.862750][T20594] syzkaller0: entered promiscuous mode [ 405.870684][T20594] syzkaller0: entered allmulticast mode [ 405.930133][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.940874][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.953899][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.965214][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.973420][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.017247][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.025088][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.032862][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.045895][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.056241][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.631526][ T1154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.648780][ T1154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.681226][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4252'. [ 407.688068][T20623] netlink: 'syz.4.4255': attribute type 1 has an invalid length. [ 407.695760][T20599] vxcan1 speed is unknown, defaulting to 1000 [ 407.701008][T20623] netlink: 'syz.4.4255': attribute type 2 has an invalid length. [ 407.723447][T20615] dvmrp0: entered allmulticast mode [ 407.817554][ T1154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.829011][ T1154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.125035][ T1154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.148129][ T1154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.158824][T20602] Bluetooth: hci0: command tx timeout [ 408.232241][T20599] lo speed is unknown, defaulting to 1000 [ 408.360248][ T1154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.394360][ T1154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.459099][T20655] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 408.733309][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4270'. [ 408.735289][T20674] xt_NFQUEUE: number of queues (257) out of range (got 65790) [ 409.000815][T20701] netlink: 'syz.3.4273': attribute type 2 has an invalid length. [ 409.355990][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.368270][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.379548][ T1154] bond0 (unregistering): Released all slaves [ 409.514010][ T1154] : left promiscuous mode [ 409.580616][T20599] chnl_net:caif_netlink_parms(): no params data found [ 409.591671][T20710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4278'. [ 409.747216][ T1154] tipc: Left network mode [ 409.846403][T20732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4283'. [ 409.907345][T20735] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4284'. [ 410.074906][T20747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4288'. [ 410.089264][T20747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4288'. [ 410.101295][T20747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4288'. [ 410.118047][T20750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4287'. [ 410.128362][T20747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4288'. [ 410.170756][T20599] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.180237][T20599] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.188260][T20599] bridge_slave_0: entered allmulticast mode [ 410.197104][T20599] bridge_slave_0: entered promiscuous mode [ 410.205001][T20599] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.212603][T20599] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.220556][T20599] bridge_slave_1: entered allmulticast mode [ 410.226000][T20602] Bluetooth: hci0: command tx timeout [ 410.229550][T20599] bridge_slave_1: entered promiscuous mode [ 410.777532][T20599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.799971][T20599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.957411][ T1154] hsr_slave_0: left promiscuous mode [ 410.968822][ T1154] hsr_slave_1: left promiscuous mode [ 410.975042][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.983304][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.992375][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.001953][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.045855][ T1154] veth1_macvtap: left promiscuous mode [ 411.051487][ T1154] veth0_macvtap: left promiscuous mode [ 411.057604][ T1154] veth1_vlan: left allmulticast mode [ 411.063020][ T1154] veth1_vlan: left promiscuous mode [ 411.069093][ T1154] veth0_vlan: left promiscuous mode [ 411.621477][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 411.664593][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 412.084051][T20778] syzkaller0: entered promiscuous mode [ 412.091186][T20778] syzkaller0: entered allmulticast mode [ 412.106499][T20599] team0: Port device team_slave_0 added [ 412.210007][T20599] team0: Port device team_slave_1 added [ 412.308449][T20602] Bluetooth: hci0: command tx timeout [ 412.397359][T20599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.411844][T20599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.456305][T20599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.507479][T20599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.528688][T20599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.559780][T20599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.561436][T20823] IPv6: addrconf: prefix option has invalid lifetime [ 412.757034][T20818] vxcan1 speed is unknown, defaulting to 1000 [ 412.772572][T20599] hsr_slave_0: entered promiscuous mode [ 412.792995][T20599] hsr_slave_1: entered promiscuous mode [ 412.809423][T20599] debugfs: 'hsr0' already exists in 'hsr' [ 412.822689][T20599] Cannot create hsr debugfs directory [ 412.934019][ T1154] IPVS: stop unused estimator thread 0... [ 413.301682][T20818] lo speed is unknown, defaulting to 1000 [ 413.504847][T20599] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 413.530166][T20599] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 413.577118][T20599] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 413.619200][T20599] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 413.882470][T20599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.102020][T20599] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.148443][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.155642][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.214503][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.221741][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.388468][T20602] Bluetooth: hci0: command tx timeout [ 414.792926][T20599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.204165][T20599] veth0_vlan: entered promiscuous mode [ 415.221725][T20599] veth1_vlan: entered promiscuous mode [ 415.301754][T20599] veth0_macvtap: entered promiscuous mode [ 415.319298][T20939] __nla_validate_parse: 30 callbacks suppressed [ 415.319314][T20939] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4356'. [ 415.329445][T20599] veth1_macvtap: entered promiscuous mode [ 415.382216][T20599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.408051][T20599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.437513][ T1154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.447247][ T1154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.471141][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.480225][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.624170][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'. [ 415.638837][T20950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4361'. [ 415.655644][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.673748][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.742371][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.751924][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.973021][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4242'. [ 417.888454][T20995] netlink: 'syz.5.4378': attribute type 12 has an invalid length. [ 419.039436][T21064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.060095][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4409'. [ 419.756840][T21095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 419.830161][T21094] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.368790][T21125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4437'. [ 420.406915][T21125] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.463117][T21125] bridge_slave_0 (unregistering): left allmulticast mode [ 420.484032][T21125] bridge_slave_0 (unregistering): left promiscuous mode [ 420.500403][T21125] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.020432][T21161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4455'. [ 421.341325][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4466'. [ 421.428503][ T25] block nbd3: Possible stuck request ffff888024a6e000: control (read@0,1024B). Runtime 120 seconds [ 421.439357][ T25] block nbd3: Possible stuck request ffff888024a6e1c0: control (read@1024,1024B). Runtime 120 seconds [ 421.452005][ T25] block nbd3: Possible stuck request ffff888024a6e380: control (read@2048,1024B). Runtime 120 seconds [ 421.464150][ T25] block nbd3: Possible stuck request ffff888024a6e540: control (read@3072,1024B). Runtime 120 seconds [ 422.886083][T21248] syzkaller0: entered promiscuous mode [ 422.891594][T21248] syzkaller0: entered allmulticast mode [ 423.355425][T21281] netlink: 'syz.6.4508': attribute type 1 has an invalid length. [ 424.017654][T21302] lo: MTU too low for tipc bearer [ 424.028898][T21302] tipc: Enabling of bearer rejected, failed to enable media [ 424.133044][T21299] bond6 (unregistering): Released all slaves [ 424.137133][T21316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4519'. [ 424.215230][T21318] netlink: 'syz.0.4521': attribute type 1 has an invalid length. [ 424.233568][T21318] netlink: 'syz.0.4521': attribute type 3 has an invalid length. [ 424.249022][T21318] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4521'. [ 424.452256][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4526'. [ 424.478773][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4526'. [ 424.645281][T21350] pim6reg: entered allmulticast mode [ 424.689455][T21350] pim6reg: left allmulticast mode [ 424.760308][T21359] xt_l2tp: unknown flags: 10 [ 424.777130][T21361] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4533'. [ 424.924958][T21379] netlink: 'syz.5.4532': attribute type 10 has an invalid length. [ 425.057209][T21386] 8021q: VLANs not supported on wg2 [ 425.968217][T21425] netlink: 'syz.3.4548': attribute type 4 has an invalid length. [ 425.977732][T21425] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4548'. [ 426.093888][T21433] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4551'. [ 426.164582][T21433] bond0 (unregistering): left allmulticast mode [ 426.181343][T21433] bond_slave_0: left allmulticast mode [ 426.206193][T21433] bond_slave_1: left allmulticast mode [ 426.235348][T21433] geneve1: left allmulticast mode [ 426.266695][T21433] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 426.278732][T21433] bond0 (unregistering): left promiscuous mode [ 426.295342][T21433] bond_slave_0: left promiscuous mode [ 426.302040][T21433] bond_slave_1: left promiscuous mode [ 426.308658][T21433] geneve1: left promiscuous mode [ 426.313957][T21433] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 426.363317][T21433] bond3: (slave macvlan0): Releasing active interface [ 426.374631][T21433] macvlan0 (unregistering): left promiscuous mode [ 426.406359][T21433] macvlan0 (unregistering): left allmulticast mode [ 426.462851][T21433] tipc: Resetting bearer [ 426.544509][T21433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.556832][T21433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.573783][T21433] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 426.586686][T21433] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 426.634177][T21433] bond0 (unregistering): Released all slaves [ 426.770935][T18441] tipc: Resetting bearer [ 426.884843][T21459] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4560'. [ 426.982497][T21469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4563'. [ 427.351259][T21498] netlink: 'syz.5.4571': attribute type 7 has an invalid length. [ 427.382646][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4571'. [ 427.398878][T21501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4572'. [ 427.415156][T21498] netlink: 'syz.5.4571': attribute type 7 has an invalid length. [ 427.428703][T21501] netlink: 'syz.4.4572': attribute type 3 has an invalid length. [ 427.437802][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4571'. [ 427.445092][T21501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4572'. [ 427.554668][T21506] netlink: 'syz.3.4574': attribute type 1 has an invalid length. [ 427.593803][T21506] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4574'. [ 427.782720][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'. [ 427.827837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.026439][T21530] netlink: 'syz.5.4582': attribute type 1 has an invalid length. [ 428.645281][T21560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.662904][T21570] netlink: 'syz.6.4593': attribute type 9 has an invalid length. [ 428.673119][T21570] netlink: 'syz.6.4593': attribute type 6 has an invalid length. [ 429.123565][T21594] netlink: zone id is out of range [ 429.168466][T21594] netlink: zone id is out of range [ 429.181103][T21600] netlink: 'syz.6.4603': attribute type 1 has an invalid length. [ 429.236043][T21600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.345341][T21600] bond1: (slave veth0_to_bond): making interface the new active one [ 429.387964][T21600] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 429.424161][T21614] netlink: 'syz.3.4608': attribute type 2 has an invalid length. [ 429.436508][T21607] vcan0: entered allmulticast mode [ 429.582409][T21614] : entered promiscuous mode [ 429.780847][T21627] gretap0: entered promiscuous mode [ 429.797359][T21627] vlan2: entered promiscuous mode [ 429.801519][T21631] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 429.964715][T21640] netlink: 'syz.6.4615': attribute type 21 has an invalid length. [ 429.977063][T21640] netlink: 'syz.6.4615': attribute type 6 has an invalid length. [ 430.238193][T21660] netlink: 'syz.0.4624': attribute type 9 has an invalid length. [ 430.513963][T21672] netem: unknown loss type 0 [ 430.521145][T21672] netlink: 'syz.3.4627': attribute type 1 has an invalid length. [ 430.811402][T21699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 430.831465][T21697] veth0: entered promiscuous mode [ 430.904383][T21702] tipc: Enabled bearer , priority 0 [ 430.912430][T21702] syzkaller0: entered promiscuous mode [ 430.924410][T21702] syzkaller0: entered allmulticast mode [ 430.952364][T21702] tipc: Resetting bearer [ 430.984774][T21701] tipc: Resetting bearer [ 431.086961][T21701] tipc: Disabling bearer [ 431.280665][T21719] __nla_validate_parse: 19 callbacks suppressed [ 431.280682][T21719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4641'. [ 431.314170][T21721] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4642'. [ 431.367760][T21719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4641'. [ 431.528054][T21730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4645'. [ 431.854991][T21697] veth0: left promiscuous mode [ 432.017426][T21755] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4652'. [ 432.168888][T21765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4653'. [ 432.422010][T21769] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 432.445457][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4655'. [ 432.484702][T21769] bond2 (unregistering): Released all slaves [ 432.511196][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4655'. [ 432.690605][T21770] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 432.717061][T21770] bond2 (unregistering): Released all slaves [ 433.055070][T21797] netlink: 'syz.4.4660': attribute type 5 has an invalid length. [ 433.070800][T21798] netlink: 'syz.0.4663': attribute type 13 has an invalid length. [ 433.097462][T21800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4664'. [ 433.152394][T21798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.207582][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 433.210931][T21802] IPv6: sit3: Disabled Multicast RS [ 433.240580][T21802] sit3: entered allmulticast mode [ 433.336787][T20368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.403694][T21819] netlink: 'syz.4.4669': attribute type 11 has an invalid length. [ 433.515452][T21826] tipc: Enabling of bearer rejected, failed to enable media [ 433.841729][T21842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.879517][T21841] Bluetooth: MGMT ver 1.23 [ 433.973712][T21850] validate_nla: 1 callbacks suppressed [ 433.973730][T21850] netlink: 'syz.5.4679': attribute type 7 has an invalid length. [ 434.039840][T21855] netlink: 'syz.3.4682': attribute type 1 has an invalid length. [ 434.226773][T20368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.256131][T21871] syzkaller0: entered promiscuous mode [ 434.263866][T21871] syzkaller0: entered allmulticast mode [ 434.369949][T21878] netlink: 'syz.6.4684': attribute type 21 has an invalid length. [ 434.394300][T21884] syzkaller0: mtu less than device minimum [ 434.679114][T21905] netlink: 'syz.3.4693': attribute type 6 has an invalid length. [ 434.940214][T21923] tipc: Enabled bearer , priority 0 [ 434.992338][T21923] syzkaller0: entered promiscuous mode [ 435.009349][T21931] netlink: zone id is out of range [ 435.017185][T21923] syzkaller0: entered allmulticast mode [ 435.039244][T21918] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 435.052917][T21918] 0ªî{X¹¦: entered allmulticast mode [ 435.063712][T21918] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 435.097677][T21923] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 435.274395][T21936] team0 (unregistering): Port device team_slave_0 removed [ 435.288365][T21936] team0 (unregistering): Port device team_slave_1 removed [ 435.312690][T21941] tipc: Resetting bearer [ 435.326480][T21919] tipc: Resetting bearer [ 435.360404][T21919] tipc: Disabling bearer [ 435.526409][T21955] netlink: 'syz.5.4707': attribute type 1 has an invalid length. [ 435.569600][T21955] bond7 (unregistering): Released all slaves [ 435.625197][T21961] ip6tnl1: entered promiscuous mode [ 435.631024][T21961] ip6tnl1: entered allmulticast mode [ 435.977758][T21982] sctp: [Deprecated]: syz.3.4715 (pid 21982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.977758][T21982] Use struct sctp_sack_info instead [ 436.321704][T22014] __nla_validate_parse: 17 callbacks suppressed [ 436.321722][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4723'. [ 436.559442][T22035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4731'. [ 436.929457][T22055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4737'. [ 436.944812][T22048] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4735'. [ 437.034714][T22060] gtp1: entered promiscuous mode [ 437.048732][T22060] gtp1: entered allmulticast mode [ 437.371065][T22076] vxcan1 speed is unknown, defaulting to 1000 [ 437.605073][T22099] netlink: 'syz.4.4747': attribute type 24 has an invalid length. [ 437.605133][T22098] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 437.986200][T20602] Bluetooth: hci0: command tx timeout [ 438.277334][T22076] lo speed is unknown, defaulting to 1000 [ 438.452671][T22128] IPVS: set_ctl: invalid protocol: 12 172.30.0.6:0 [ 439.170449][T22168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4766'. [ 439.181942][T22168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4766'. [ 439.229454][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4768'. [ 439.350226][T22162] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 439.376570][T22162] bond5 (unregistering): Released all slaves [ 439.909084][T22200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4778'. [ 440.235888][T22214] bond7: entered promiscuous mode [ 440.264101][T22214] bond7: entered allmulticast mode [ 440.283988][T22214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.674060][T22237] tipc: Enabled bearer , priority 0 [ 440.682026][T22237] syzkaller0: entered promiscuous mode [ 440.689414][T22237] syzkaller0: entered allmulticast mode [ 440.720290][T22241] syzkaller0: entered promiscuous mode [ 440.726597][T22241] syzkaller0: entered allmulticast mode [ 440.745288][T22236] tipc: Resetting bearer [ 440.779098][T22236] tipc: Disabling bearer [ 440.968989][T22247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4794'. [ 441.039313][T22255] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4796'. [ 441.190533][T22251] sctp: [Deprecated]: syz.4.4797 (pid 22251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.190533][T22251] Use struct sctp_sack_info instead [ 441.306420][T22269] "syz.0.4801" (22269) uses obsolete ecb(arc4) skcipher [ 441.387616][T22269] IPv6: Can't replace route, no match found [ 441.653359][T22303] netlink: 'syz.4.4811': attribute type 4 has an invalid length. [ 441.679877][T22305] __nla_validate_parse: 3 callbacks suppressed [ 441.679888][T22305] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4808'. [ 441.699162][T22301] vlan3: entered allmulticast mode [ 441.726544][T22307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4811'. [ 442.391866][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4813'. [ 442.426937][T22313] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4813'. [ 442.508668][T22321] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4814'. [ 442.682575][T22335] xt_cgroup: xt_cgroup: no path or classid specified [ 442.977451][T22356] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4827'. [ 442.998086][T22360] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4827'. [ 443.352269][T22383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4834'. [ 443.573451][T22399] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 443.739207][T22406] netlink: 'syz.3.4841': attribute type 6 has an invalid length. [ 443.760563][T22412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4843'. [ 443.903974][T22423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4846'. [ 443.974177][T22425] netlink: 'syz.4.4847': attribute type 12 has an invalid length. [ 444.303070][ T30] audit: type=1800 audit(1761290516.126:2): pid=22453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4854" name="memory.events" dev="tmpfs" ino=2074 res=0 errno=0 [ 444.332456][ T30] audit: type=1804 audit(1761290516.156:3): pid=22453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4854" name="/newroot/405/memory.events" dev="tmpfs" ino=2074 res=1 errno=0 [ 444.410909][T22452] netlink: 'syz.3.4855': attribute type 2 has an invalid length. [ 444.716891][T22479] netlink: 'syz.3.4862': attribute type 1 has an invalid length. [ 444.811168][T22479] 8021q: adding VLAN 0 to HW filter on device bond5 [ 444.865158][T22486] veth7: entered promiscuous mode [ 444.882096][T22486] bond5: (slave veth7): Enslaving as an active interface with an up link [ 445.264417][T22509] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 445.418842][T22474] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.424896][T22474] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 445.446128][T22474] ------------[ cut here ]------------ [ 445.451922][T22474] refcount_t: underflow; use-after-free. [ 445.458378][T22474] WARNING: CPU: 0 PID: 22474 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 445.468859][T22474] Modules linked in: [ 445.473209][T22474] CPU: 0 UID: 0 PID: 22474 Comm: syz.4.4860 Not tainted syzkaller #0 PREEMPT(full) [ 445.483208][T22474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.493350][T22474] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 445.500375][T22474] Code: 20 55 be 8b e8 77 b9 f9 fc 90 0f 0b 90 90 eb d7 e8 db 9c 36 fd c6 05 8e 85 dd 0a 01 90 48 c7 c7 80 55 be 8b e8 57 b9 f9 fc 90 <0f> 0b 90 90 eb b7 e8 bb 9c 36 fd c6 05 6b 85 dd 0a 01 90 48 c7 c7 [ 445.520850][T22474] RSP: 0018:ffffc9000c7df798 EFLAGS: 00010246 [ 445.527476][T22474] RAX: 21bf3c1185688300 RBX: 0000000000000003 RCX: 0000000000080000 [ 445.535465][T22474] RDX: ffffc900133aa000 RSI: 00000000000173f1 RDI: 00000000000173f2 [ 445.543490][T22474] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 445.551543][T22474] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff8880574aa400 [ 445.559847][T22474] R13: ffff88804f94d860 R14: ffff88804f94d878 R15: dffffc0000000000 [ 445.568067][T22474] FS: 00007f973dc3c6c0(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 445.577206][T22474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.583805][T22474] CR2: 00007fd5c0026f98 CR3: 000000007b05c000 CR4: 00000000003526f0 [ 445.592559][T22474] Call Trace: [ 445.595926][T22474] [ 445.598876][T22474] klist_dec_and_del+0x3c7/0x3d0 [ 445.603836][T22474] klist_remove+0x1bd/0x340 [ 445.608420][T22474] ? __pfx_klist_children_put+0x10/0x10 [ 445.613994][T22474] ? __pfx_klist_remove+0x10/0x10 [ 445.619554][T22474] ? __pfx_kobject_move+0x10/0x10 [ 445.624589][T22474] ? do_raw_spin_unlock+0x122/0x240 [ 445.629868][T22474] ? get_device_parent+0x366/0x3a0 [ 445.635002][T22474] device_move+0x193/0x700 [ 445.639490][T22474] hci_conn_del_sysfs+0xb8/0x170 [ 445.644453][T22474] hci_conn_del+0xc33/0x11b0 [ 445.649622][T22474] hci_conn_hash_flush+0x191/0x230 [ 445.654766][T22474] hci_dev_close_sync+0xaef/0x1330 [ 445.659950][T22474] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 445.665612][T22474] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 445.671687][T22474] hci_dev_do_close+0x2f/0x90 [ 445.677080][T22474] hci_rfkill_set_block+0x21d/0x2e0 [ 445.682305][T22474] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 445.688098][T22474] rfkill_set_block+0x1d2/0x440 [ 445.692968][T22474] rfkill_fop_write+0x44b/0x570 [ 445.698275][T22474] ? __pfx_rfkill_fop_write+0x10/0x10 [ 445.703661][T22474] ? security_file_permission+0x20/0x290 [ 445.709805][T22474] ? rw_verify_area+0x255/0x4d0 [ 445.714662][T22474] ? __lock_acquire+0xab9/0xd20 [ 445.719582][T22474] ? __pfx_rfkill_fop_write+0x10/0x10 [ 445.724975][T22474] vfs_write+0x27e/0xb30 [ 445.729340][T22474] ? __pfx_vfs_write+0x10/0x10 [ 445.734125][T22474] ? __fget_files+0x2a/0x420 [ 445.739217][T22474] ? __fget_files+0x2a/0x420 [ 445.743813][T22474] ? __fget_files+0x3a0/0x420 [ 445.749358][T22474] ? __fget_files+0x2a/0x420 [ 445.753985][T22474] ksys_write+0x145/0x250 [ 445.758391][T22474] ? __pfx_ksys_write+0x10/0x10 [ 445.763276][T22474] ? do_syscall_64+0xbe/0xfa0 [ 445.768545][T22474] do_syscall_64+0xfa/0xfa0 [ 445.773224][T22474] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.778780][T22474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.784866][T22474] ? clear_bhb_loop+0x60/0xb0 [ 445.789660][T22474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.796119][T22474] RIP: 0033:0x7f973cd8efc9 [ 445.800561][T22474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.820286][T22474] RSP: 002b:00007f973dc3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.829416][T22474] RAX: ffffffffffffffda RBX: 00007f973cfe5fa0 RCX: 00007f973cd8efc9 [ 445.837474][T22474] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 445.845465][T22474] RBP: 00007f973ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 445.853547][T22474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.862071][T22474] R13: 00007f973cfe6038 R14: 00007f973cfe5fa0 R15: 00007ffd68a844e8 [ 445.870124][T22474] [ 445.873363][T22474] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 445.880652][T22474] CPU: 0 UID: 0 PID: 22474 Comm: syz.4.4860 Not tainted syzkaller #0 PREEMPT(full) [ 445.890013][T22474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.900058][T22474] Call Trace: [ 445.903332][T22474] [ 445.906250][T22474] dump_stack_lvl+0x99/0x250 [ 445.910839][T22474] ? __asan_memcpy+0x40/0x70 [ 445.915418][T22474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.920608][T22474] ? __pfx__printk+0x10/0x10 [ 445.925196][T22474] vpanic+0x237/0x6d0 [ 445.929173][T22474] ? __pfx_vpanic+0x10/0x10 [ 445.933680][T22474] panic+0xb9/0xc0 [ 445.937390][T22474] ? __pfx_panic+0x10/0x10 [ 445.941812][T22474] __warn+0x31b/0x4b0 [ 445.945791][T22474] ? refcount_warn_saturate+0x11a/0x1d0 [ 445.951336][T22474] ? refcount_warn_saturate+0x11a/0x1d0 [ 445.956878][T22474] report_bug+0x2be/0x4f0 [ 445.961204][T22474] ? refcount_warn_saturate+0x11a/0x1d0 [ 445.966742][T22474] ? refcount_warn_saturate+0x11a/0x1d0 [ 445.972278][T22474] ? refcount_warn_saturate+0x11c/0x1d0 [ 445.977814][T22474] handle_bug+0x84/0x160 [ 445.982054][T22474] exc_invalid_op+0x1a/0x50 [ 445.986554][T22474] asm_exc_invalid_op+0x1a/0x20 [ 445.991399][T22474] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 445.997547][T22474] Code: 20 55 be 8b e8 77 b9 f9 fc 90 0f 0b 90 90 eb d7 e8 db 9c 36 fd c6 05 8e 85 dd 0a 01 90 48 c7 c7 80 55 be 8b e8 57 b9 f9 fc 90 <0f> 0b 90 90 eb b7 e8 bb 9c 36 fd c6 05 6b 85 dd 0a 01 90 48 c7 c7 [ 446.017145][T22474] RSP: 0018:ffffc9000c7df798 EFLAGS: 00010246 [ 446.023206][T22474] RAX: 21bf3c1185688300 RBX: 0000000000000003 RCX: 0000000000080000 [ 446.031170][T22474] RDX: ffffc900133aa000 RSI: 00000000000173f1 RDI: 00000000000173f2 [ 446.039128][T22474] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 446.047105][T22474] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff8880574aa400 [ 446.055066][T22474] R13: ffff88804f94d860 R14: ffff88804f94d878 R15: dffffc0000000000 [ 446.063063][T22474] ? refcount_warn_saturate+0x119/0x1d0 [ 446.068604][T22474] klist_dec_and_del+0x3c7/0x3d0 [ 446.073538][T22474] klist_remove+0x1bd/0x340 [ 446.078033][T22474] ? __pfx_klist_children_put+0x10/0x10 [ 446.083623][T22474] ? __pfx_klist_remove+0x10/0x10 [ 446.088646][T22474] ? __pfx_kobject_move+0x10/0x10 [ 446.093666][T22474] ? do_raw_spin_unlock+0x122/0x240 [ 446.098861][T22474] ? get_device_parent+0x366/0x3a0 [ 446.103970][T22474] device_move+0x193/0x700 [ 446.108388][T22474] hci_conn_del_sysfs+0xb8/0x170 [ 446.113327][T22474] hci_conn_del+0xc33/0x11b0 [ 446.117913][T22474] hci_conn_hash_flush+0x191/0x230 [ 446.123024][T22474] hci_dev_close_sync+0xaef/0x1330 [ 446.128135][T22474] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 446.133678][T22474] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 446.139571][T22474] hci_dev_do_close+0x2f/0x90 [ 446.144244][T22474] hci_rfkill_set_block+0x21d/0x2e0 [ 446.149435][T22474] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 446.155152][T22474] rfkill_set_block+0x1d2/0x440 [ 446.159998][T22474] rfkill_fop_write+0x44b/0x570 [ 446.164842][T22474] ? __pfx_rfkill_fop_write+0x10/0x10 [ 446.170215][T22474] ? security_file_permission+0x20/0x290 [ 446.175843][T22474] ? rw_verify_area+0x255/0x4d0 [ 446.180683][T22474] ? __lock_acquire+0xab9/0xd20 [ 446.185520][T22474] ? __pfx_rfkill_fop_write+0x10/0x10 [ 446.190911][T22474] vfs_write+0x27e/0xb30 [ 446.195157][T22474] ? __pfx_vfs_write+0x10/0x10 [ 446.199915][T22474] ? __fget_files+0x2a/0x420 [ 446.204511][T22474] ? __fget_files+0x2a/0x420 [ 446.209083][T22474] ? __fget_files+0x3a0/0x420 [ 446.213741][T22474] ? __fget_files+0x2a/0x420 [ 446.218322][T22474] ksys_write+0x145/0x250 [ 446.222647][T22474] ? __pfx_ksys_write+0x10/0x10 [ 446.227489][T22474] ? do_syscall_64+0xbe/0xfa0 [ 446.232163][T22474] do_syscall_64+0xfa/0xfa0 [ 446.236656][T22474] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.241849][T22474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.247904][T22474] ? clear_bhb_loop+0x60/0xb0 [ 446.252571][T22474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.258449][T22474] RIP: 0033:0x7f973cd8efc9 [ 446.262855][T22474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.282446][T22474] RSP: 002b:00007f973dc3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.290860][T22474] RAX: ffffffffffffffda RBX: 00007f973cfe5fa0 RCX: 00007f973cd8efc9 [ 446.298831][T22474] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 446.306789][T22474] RBP: 00007f973ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 446.314743][T22474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.322701][T22474] R13: 00007f973cfe6038 R14: 00007f973cfe5fa0 R15: 00007ffd68a844e8 [ 446.330676][T22474] [ 446.333948][T22474] Kernel Offset: disabled [ 446.338259][T22474] Rebooting in 86400 seconds..