last executing test programs: 4m29.171351688s ago: executing program 3 (id=1121): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 4m28.980380113s ago: executing program 3 (id=1125): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) accept4$llc(r0, 0x0, 0x0, 0x80000) 4m28.759010742s ago: executing program 3 (id=1126): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r2, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000), 0x4) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000b40)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000000)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)="04", 0x1}, {&(0x7f0000000080)="cb", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000340)='G', 0x1}, {&(0x7f0000000180)="a2", 0x1}, {&(0x7f0000000780)="d563", 0x2}, {&(0x7f0000000640)="c0", 0x1}, {&(0x7f0000000700)="ad", 0x1}, {&(0x7f0000000380)="97", 0x1}, {&(0x7f0000000200)="c5", 0x1}, {&(0x7f0000000880)="e5", 0x1}, {&(0x7f0000000500)="c5a6", 0x2}, {&(0x7f0000000a40)="94", 0x1}], 0x10, 0x3) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48c8}, 0x4011) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040c0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xed}, 0x50) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x9, 0x36, 0x251, 0xb, 0x3, 0x1, 0xfffffff9, 0x7, 0x8, 0x7, 0x1, 0x7fffffffffffffff, 0x8}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 4m27.761950733s ago: executing program 3 (id=1141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20402}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) socket$inet6(0xa, 0x5, 0xc6) 4m27.519334414s ago: executing program 3 (id=1145): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0) unshare(0x8000200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x99}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote}, &(0x7f00000000c0)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="83739603754b14089d896717044103712c86ec633d5d54782945ba98e1d5437babc31530f26f8f464b672615652fdbc6486094c90a3f373241c8574925a7266cc45c54d9cf104c74bffbd55a60ec7afe85388bf0f76ec11ad32e28cac5c1bdfffac0ce70529cabea02c90ac8115515f948cb44cbd493d05095c879454fb2e9d1d6418d2a1485fcc3401f0d48ba03d7fdd89aa8a4b2c2a294678065c6eced9b8319ae05430466f192", 0xa8}, {&(0x7f0000000400)="8c611a80097fa3172cd9db1bce37ecfb2a81509fd1cd302a6fbbfddacbe54c74d29324a37f9dd02d56e5d4637211073176396fc6b120fd532cac841b2b70e33af48700ba7f4ca303d5a36e5e6509e4a57fdedda7b64584f37573a6830d5fc29f34aa25af86168df2ca256cd4c1d85f5bd5bf927d20bd45d7017d61286751d689893990ca9f039dd5569ee13364b9b0aebf99a87765cda2dc200d27c4", 0x9c}, {&(0x7f00000004c0)="c4ed295bc00963b4f7229f81ba532cc3a7099c60cf4297422fd5db274922a6c15bb6f8583948e341b1a365bf83c83bd895ee2e6b25bb36c297a4e3508f59c9658101262359c24c4b65974137d3", 0x4d}], 0x3}}, {{&(0x7f0000000580)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000005c0)="a6e7a1", 0x3}], 0x1, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast2}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5c}}], 0xb8}}, {{&(0x7f00000007c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="74cd14fd0c53cd62757db379ded76005ee0406b010698ff8fc477ac5db5927d6b92bb8f86c3e76fed6b2a1de05ad03e1adfac2460cb3a63a484b47b5d6ee007a3dc26cc5ed011b74d84319731524dca0c66cd49377c1ee5519afce0b0dda40d3d7863e1e29a8ce53149c19156b7ba603447df9b76d6db48957dd93dbac4b9fd1fbc983a56c322f9f7268605a3c8c3cd4e50bf971a313f506ce3062eefb1d", 0x9e}, {&(0x7f0000000900)="1bca8ba1e31a82d02121afa6a84d901e1ea12534a78eab9260340b11d3ede83583b52b5b271f0ed7d50f6b3ea8d6dd331066091bff38e3d97dbb337ca146a9e3122be806a703e4a4c79866f968eb861c6182537a68c0d19476892406abf83e7f810f3a07b57266463bc148397dad", 0x6e}, {&(0x7f0000000980)="d2570272445f19521a40dbf9586a85911b3289eb855d30e942a4462bf8f8a4ea5527", 0x22}], 0x4}}], 0x3, 0x4000011) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@empty, 0x0, 0x1}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 4m27.11441648s ago: executing program 3 (id=1149): socketpair(0xf, 0x5, 0x1, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x222f, 0x178260d7, 0xc}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) (rerun: 64) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="d2c9a97946edd89edc1ce74c110505e75d94f19d65c9cef33ddef83deb83f294f412f7f433c145445aa581a34a62a43caf5ff59437ebed04b001bb1e8654b61c5685fca5ba14804b350201677f7f8e379c0b8160808df8d699e7b8749dbf61240719575b8bc4cca6a1830e5e3a53265cb8bcdd04ebd52d7bc9e9aed108b39ac33ab39c87067190ae0773ebbcca87a60cea25ddf2fa7eaeae1d64732779ced40c50c6f2a25c392888", &(0x7f0000000100)=@udp=r1, 0x2}, 0x20) (rerun: 64) 4m11.993988109s ago: executing program 32 (id=1149): socketpair(0xf, 0x5, 0x1, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x222f, 0x178260d7, 0xc}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) (rerun: 64) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="d2c9a97946edd89edc1ce74c110505e75d94f19d65c9cef33ddef83deb83f294f412f7f433c145445aa581a34a62a43caf5ff59437ebed04b001bb1e8654b61c5685fca5ba14804b350201677f7f8e379c0b8160808df8d699e7b8749dbf61240719575b8bc4cca6a1830e5e3a53265cb8bcdd04ebd52d7bc9e9aed108b39ac33ab39c87067190ae0773ebbcca87a60cea25ddf2fa7eaeae1d64732779ced40c50c6f2a25c392888", &(0x7f0000000100)=@udp=r1, 0x2}, 0x20) (rerun: 64) 33.139663473s ago: executing program 4 (id=3117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x0, 0x150, 0x310, 0x0, 0x240, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [0x0, 0xffffffff], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2b, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff000000, 0xff000000, 0x0, 0xffffff00], 'veth1_to_bond\x00', 'bond_slave_0\x00', {}, {}, 0x29}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf, 0x5}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@mcast2, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffffba) 32.789413152s ago: executing program 4 (id=3120): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000007c0)={r2, 0x5}, &(0x7f0000001800)=0x8) (async) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r3 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) connect$nfc_llcp(r1, &(0x7f0000000180)={0x27, r4, 0x1, 0x4, 0x6, 0x56, "b04c0a3ca2d3339ae3f50083b56a9adf67e715abe177eddda59bd968fb5533d2af7db634d50d6ad463a1c175842bf6fc966cbc74e47e9fcb729d6b1c891e57", 0x20}, 0x60) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$alg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0x5, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x8, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff8, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x7f, 0x2, 0x7b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x3, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x3, 0x4, 0x4, 0x100, 0x1}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x2, 0x61e9, 0x2}, {0x8, 0xffff, 0x8, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x7, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0x2, 0x6, 0x3, 0xd5}, {0x8, 0x75, 0x7ff, 0x7398, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x5, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xfffffffc, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x0, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x1176a235, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x7f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x3, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0x0, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0xfffffdaa, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x400, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0x7, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x8, 0x6, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x800, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0xe, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) 32.639594898s ago: executing program 4 (id=3123): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000700)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @from_mac=@broadcast, {0x3, 0x5}}, 0x7, @random=0x6, 0x0, @void, @val={0x1, 0x3, [{0x5}, {0x36, 0x1}, {0x4, 0x1}]}, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6, {0x4, 0x66, 0x0, 0x1}}, @val={0x6, 0x2, 0xffff}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0x1}}, [{0xdd, 0x6, '2G|$Ju'}, {0xdd, 0x94, "c7c176b03a5322e440f93f675ac0084b848cb0a8d6c3a359ec8b8ee6f297a505ffc12ae87806c9ef0a1accb8c5786f667a384d520d73828bae858ac6b6711f71972300810980eeb88cde287848fdbeb67fea06651bd274f7143a06067fff8ba29cc9bc4e9a63fcc04456d778e8a623dd7e85be1d62ccca13f62a14561aa64b2f396a43bed8318f6e26a93578020e29ceea7bcbba"}, {0xdd, 0xa3, "d0cb6a37afaf8bcb0b28a9b2a9ffba12d617838005588356545fc50f08443d12d56cc90e92ca01e3bd31eedc840ed62198e0decd4b37a11a52583e18e3a1e7b4c2619ef0daea6948e719f0095e32159517fd65045195d305fa5acb642d1059cf29f67336ab47cba38c8a478b72a3b779668a14ccd691802717b6de9c674e4b3bc970d1e9ff6419b0203af9dd13e170bb1c4b539f5dbd5c32eb48bec0d130d7fd956780"}, {0xdd, 0x6, "5f6ecaabff9d"}, {0xdd, 0xc1, "a16061db679dda7d4e31dfed8d21b30934710c84f9e1d660bf43651be4c2362e64031e0d84569e1055aa789c578eab835ccb513d0f4b788b2b2790246f037c8557e8716810a98e35e9820d6d4c0d23c685f27403f490677396df436e8012a627048ebfe5646eda7338be44aec99d8d35b6b1485b3b05568a2339b8a4805c457755443a2d3d59f3e4dbf7f19c1f68b95b45a231f8740937103d2209dbbde42f9bf3f5e462b490a3923cc741718658780e076f02947cb70a23a14df852fd70e99b66"}]}, 0x257) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 31.062032652s ago: executing program 4 (id=3126): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000240)="c48f86382be0671b05d3bcdec58f52cb0d81bff1c10f74e2b6cba802ff45fcc848168aa8901f3aef06b9e337cf06c834e9b39c7f18054709710b91fa2e40d367e943c280ede26d77a540b2a87b970d7e48d5dfc9d1650c2f3590f53d468995181360dbe213919ef04b560bc253e786329e2df91e3faf96f17dab51c40081dead3ac547f6e8c4dd2c540ce7", 0x8b}], 0x2}}], 0x1, 0x4004c8c0) sendto$inet6(r3, &(0x7f0000000700)="cedca7", 0x3, 0x3b00, 0x0, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) 6.914769037s ago: executing program 4 (id=3130): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x78}}, 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/146, 0x92}, {&(0x7f00000005c0)=""/96, 0x60}], 0x4}, 0x2003) 6.912817898s ago: executing program 4 (id=3133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)={0x118, r2, 0x7, 0x70bd28, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18}, @ETHTOOL_A_LINKMODES_DUPLEX={0x0, 0x6, 0x6}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="1c0000f500000000000000000000000000006000000000393a00ff020000000000000000000000000001fc01000000000000cf000000000000008900907800000000fe880000000000000000000000000001fc0000000000000000000000000000000002b0dcc4a3616748a1997ab015342f47e3d3613a6c253f744f62ba710f4c768a22835d5588558fcf43a049d3a224669d7a9275139eea3efdfff8028709c3a00a97247b87b2"], 0x73) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r8, @ANYBLOB="080002007f00000108000400ac1e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x200040d1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @multicast2}, &(0x7f0000000080)=0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000026d1000000000000000000001e0000001903001c6f4ab323c7c912345500000000001400"], 0x48) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x6, 0x0, 0x0, 0xb, 0x9}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x90) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r13, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x2001c895}, 0x1000c810) socketpair(0x1e, 0x800, 0x5, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r14, 0x6, 0x13, &(0x7f0000000400), 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @dev, 0x0}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="a356b91958c2868c2fc03f580a91bb481730ee6e43772b85e79d51896799334ede92df2606445ee9918a0a0b0557b15302e3429918405722e0c21a0d8d7661dc6286cc19e9db13e1a5adf3e748bb55e8bd22288b61ac5f4fcb1a589f3da0ca2a8b3e9c54d76d8f8af3456a8ca84c5c68e73bce306504ba5706178618e5f28bbe29ee8da831e9d055df07f0415e85a8d294806535428bcdf9c11f054ab13860f0262f97a81c5fad6b8b8672db6c9da047ba184d71006a638815f6926c94478d68a099e362bb8a21aa6a964a94891b0780985f", @ANYBLOB="00032cbd7000fcdbdf2511000000040001800400018054000180140002006970766c616e3100000000000000000008000300010000000800030028e6da4aafbe1a8e020000001400020004000000000000005f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000440001801400020070696d72656730000000000000000000140002006970365f76746930000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYRES16=r5, @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r3, @ANYRESOCT=r14], 0xd0}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) socket$inet6(0xa, 0x3, 0x87) 3.975364276s ago: executing program 5 (id=3164): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x997, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_getneigh={0x48, 0x1e, 0x1, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20030, 0x1080}, [@IFLA_PHYS_SWITCH_ID={0xa, 0x24, "22d714052992"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netpci0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x42ea}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x48084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 3.677991702s ago: executing program 5 (id=3168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="085d7a2d7ed171ef9e17f48e0192fa5bd5a357f8abcf759b0bffb537f54d1de5ea10227d1181fee1f9994ed89f8bcd", 0x2f) 3.55594201s ago: executing program 5 (id=3170): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4c080) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f5, 0x20, 0x70bd25, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, 0x1, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004a00003c00000000000000000000000007141411441405030000000000000000000000050000000700000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000090780000"], 0x0) 3.381494707s ago: executing program 5 (id=3173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x5d) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="080029bd7000fddbdf253400000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x20050044) 3.100534926s ago: executing program 0 (id=3176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x7c2}) r1 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0xf8, 0x4) 1.958316758s ago: executing program 5 (id=3177): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a00)={{0xffffffffffffffff, &(0x7f0000000000)='-}#\x00', 0x2c01, &(0x7f0000000040)={@align=0x7, {0x8, 0x5, 0x200, 0x1000}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}, 0xa, &(0x7f00000018c0)=[{0x3, 0xdf, &(0x7f0000000100)='--!|\'*\x00', &(0x7f0000000140)="a28926a5ab8c70eba5d2788606ebcc5b4b3ff5ec5dac82ea1d571daa240966684c3e43ae317e720dbca7f859efe50a4ed2450f43782fa3dd6e7bafb1e98c009dd78af0f2df5f3c839a965fe54981a52e77fd23c584bd0dd8fe9d5ba2af694f696d459909a8195c83d717280ca66d7d4730", 0x71, 0x3a}, {0x2, 0x4c, &(0x7f00000001c0)='{]\x00', &(0x7f0000000200)="999819519d87ca55925709bc807b62510acaa27f6876bf6b26c867b4117ec5d81bf67d974089386e09931fddbbbfff5b7d22f8c951f0ff158b90c82bf122aa409a27019cc00734bf39ba20c36d1fa636c520520bf92e3b50e955873ebb73bb0cc3cfc73c1ebdc9a380ddc67884a038ed285b40601d8e04e8e43e5595ac6de7f0325979f62435d2eb5b0ee8f999abfa645439154a65a93f168379df0de63b099f672f4e51a21c", 0xa6, 0x2}, {0x2, 0xb5e5, &(0x7f00000002c0)='/*]\x00', &(0x7f0000000300)="e26372f66fb1997d17611f7af6b721c4597fd6f47da3b8accafcf4352f9792552db4a07cf63aa16eca58d7b0b3ffa285a797313ce5f52ac42a95a48aa1f8c1b0853d904756ab10fa2a3f894648a1b9d6b4db8ad1cd46233132d2dfa8df3ed2ac9fc39ba2f42d5c505a7c53d08fd483e66dd21bea6965e066b9e0a5a3e088dabb55b64b0ef9deee9586aa4cb16f0fae85b8b8d20445751d9678e9e7dc3585927740b49794c5fa07f3255fbfbb53e68a889aa0deec8ae3c79769ad7bc95251", 0xbe}, {0x1, 0x6, &(0x7f00000003c0)='-\x00', &(0x7f0000000400), 0x0, 0x22}, {0x0, 0x7ff, &(0x7f0000000440)='\x00', &(0x7f0000000480)="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", 0x1000, 0x20}, {0x1, 0xad4, &(0x7f0000001480)='\'.[\xe0$!!-*\x00', &(0x7f00000014c0)="c51feda1ce66ad9e518daf4b7feb92edfbe3ea247ce8d0cec865457a7f6b4fb95ab6f462aee655a2fdfca6f0", 0x2c, 0x30}, {0x3, 0x8, &(0x7f0000001500)='+)\x00', &(0x7f0000001540)="6eb991b20b704e3f2f99028e96e396786020a682551e8ec1f38126fcf0b95ae080716f3beeea263437ceb546f89bd5a2a2b212d1ff031528f3b267beea008f22", 0x40, 0xa}, {0x1, 0x7, &(0x7f0000001580)='^$$\'--\x00', &(0x7f00000015c0)="1204685c1d953a5ac98e8a172885be66efe0d60641c07486d2947c869869c4473b93cb25b030b057d7623a033dd4167ef4e5a24f2fd46bf2ea28d2dfb1400bc6a828003e5da8582e0ed771eb3686cdcf1758fbc0a3570cabb560e7af6c4c15319c6c4caa016d6e89acb32fec7e1b97f8d30943ca3d56dffc2bb81f24742b29700f5fbe19afaa19284337c584f81c2a3ba494fe1f048ae816862d0194379d1a", 0x9f, 0x8}, {0x2, 0x60, &(0x7f0000001680)='-\xe1-\\\xaa}[\x00', &(0x7f00000016c0)="faeaf96eb2e2ae41a325fce7a3aafe813b937a920e872b903be1698efbbb08dab02c68ef872f1f02eac62cb023922d77a3f0b1b4762e12ae52cda050db52f03cd7cc473af7215aa200a956831abdbc82d2b45ff75e10cc27f6bfd10dedd8ce36fa16dfefb95d05149ec1ff421b446e63a17e65de2c0a614b7c887a795ad65257349edad4d3cd32053a6338f8c6088416ae1b7f0adfdc00b40cea2208f9c6cbe7f8f362c9e2c9a76f89500004756d1fded183aa8d3617ea7b2bde3cdf22c492579712703fd627cbdd313b41ffc61c94", 0xcf, 0x19}, {0x2, 0x80, &(0x7f00000017c0)='\x00', &(0x7f0000001800)="f65ea756df6a19b2b03a16c5fd88709678c1586771f7e79f5f3b1170581e0da020e25fed56c5f7b1ef22d42560a498ecb154ff484869be1afbf77d5e3284c8bb470728a6d7c397330a95bcd3a1d4f39c4095acd1bc493c8228e1488fd9ce5f9c7bb6925f2584c631f76226f51ba9268ff8ed68f03932519b4f8b434464a38da328e1", 0x82, 0x1a}]}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x4e21, 0x82, @private2, 0x5}, {0xa, 0x4e20, 0x7, @remote, 0xfc}, 0x1, {[0x4, 0x3, 0x369, 0x3ff, 0x69, 0x9, 0xee, 0x2]}}, 0x5c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001b00)=""/60, 0x3c}, {&(0x7f0000001b40)=""/254, 0xfe}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000001d40)=""/100, 0x64}, {&(0x7f0000001dc0)=""/129, 0x81}], 0x5, &(0x7f0000001f00)=""/217, 0xd9}, 0x40000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000002180)=0x3, 0x4) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x64, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:vhost_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000004) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x34, r2, 0x124, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4040040) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000002440)={'bond_slave_1\x00', 0x200}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x7c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000810}, 0x400000c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x20, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x9}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8ee}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002a00)={'gretap0\x00', &(0x7f00000028c0)={'sit0\x00', 0x0, 0x8000, 0x80, 0x3, 0x7, {{0x3d, 0x4, 0x3, 0x0, 0xf4, 0x65, 0x0, 0x9, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @empty, {[@timestamp_addr={0x44, 0x3c, 0x74, 0x1, 0x5, [{@broadcast, 0x100}, {@empty, 0x9}, {@rand_addr=0x64010102, 0x3ff}, {@broadcast, 0x4}, {@remote, 0x3}, {@empty, 0x6b32}, {@multicast2, 0x4}]}, @timestamp={0x44, 0xc, 0x4e, 0x0, 0xc, [0x4, 0x7f]}, @timestamp_prespec={0x44, 0x24, 0xfc, 0x3, 0x1, [{@multicast1, 0x1ff}, {@multicast2, 0x1000}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x1}]}, @cipso={0x86, 0xd, 0x3, [{0x2, 0x7, "a400f6fadb"}]}, @timestamp={0x44, 0x28, 0x6a, 0x0, 0xf, [0xda, 0x4, 0xfa2, 0x0, 0x1, 0x0, 0x268000, 0x2, 0x0]}, @timestamp={0x44, 0x1c, 0x67, 0x0, 0x6, [0x9, 0x20200000, 0x9, 0x100, 0x0, 0x6]}, @lsrr={0x83, 0xb, 0x9c, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0xf1, [@empty]}, @generic={0x94, 0xf, "1d8b65547d21d7f2fb7b0e50f5"}]}}}}}) getpeername$packet(r0, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002a80)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000004e40)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004e00)={&(0x7f0000002ac0)={0x2308, r6, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf107}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-}#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "6859bd013034e2f07e07474ce367a41e92f85a748042bf609d"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "b714a1a9c95e843dd57426b57b12855c969f8d55da139d224849ad7d51eb2e3f9a2ec70f76fa90c73ab271f74e7fc5979e830b29ef777b53860951ebac380e4104b757352b784a8152c955ab5c0c53323fd11c76542599a654e63991d06f9a0dcbf9e671d95aa73934c535df50faa715604f88bfdc066145c6fd4a6381ba79b2970fbe61c1b77b3227cbcf52a17d836c9985183fc5316a92a0c3b04383553f91a6eae0a3e55a65b45679fdbc6c75f6b993f32cf56d92cf9b9f063e331bc48337f0bf80c21503889f90edd38da2226e958c87b1aeadda503d098d5e6bf6575d96b671a4e50c85fbb9d2a18f6074e717d0276275e6742c61fe45f20fb6298ed1d0c6b11e894bd1354f5512c46793771911f268f1045ea00854b584f6d6c865e0a54d4e78493dc85e9962fdff014729f70b7c3ff18a0e004d0ac5e862c5eec2d56293c0dbdfdbf258e27440f6c458f7d7fe6a63b17bfa130595a7407792136c1fa45029c8d269c37138765abf14071335bc3d0b5a3f6f514081f8f5e90024a985ae4f3dc2a54a425bdf679df045df900a6eff540202aa69caf13867c1708e89f8600869d43f64e703de9b306f2b413b3508c5406fb66592c6cb1fc8f5a477b18ce642e25f90dbeb8ff46e991948e4ce71e888a8b70254c3d24be847b7ba937a81ab14f249738b0ad4d66b115806a297efcb1d5d13630eade020d6cc536252a5c1ac744b60ffca12e4adb719119475bcf8891d3a341dc33ef329dacc286fd9d305f8f907a2668b122167e9acfd038f5f25566ee6d06e464748fc5ed45772c02af71173d6fcf2bb42e23d89cd30aea85566f4f48c1b4f601db2b8808794fdc475788f130c0d7ad97f50db0acef6f3a499c9b544dd7ea2e506e6b98124d811003552cfeb051bd139ff187b346aed3780e94123315a67b21dc595e1e8b8899d7dedd20e2656892e7bf4eb1cbb8e131d7de1bb383225df2964fd8d58c5d5c23f9bdc490002acb149100dcbfb9054a8459e1ec6ed35cba13c973c3155f2b8fd9a025d8109f8470a79b9cff5f916b799583816e71b312c320fa5f59c759a1b54dc5ce12996b5fd00f9bd73623799d389c0d7485f54a0a140ce929aad83b3f54d2d58f9f4e9489dfd49214bde8417ae5acb914868917fabb54f41dc4f2af54818f35aecf5dbc813cbdcf442001a9ded34cb59d8fb1f73e9bd711f1d41273099835a3c7a262ca513166620956c08cb44ee2875de876bf804106b1ae2d4066000a4bf58853e1604bc26bc6a44a049b781251f3af841cf0fdc8f29d1870ade64962fdbf9564cd5e40d3a42a575a70a21de7ce19455ec3c72d8d18441818a925d3220278a9c860c61faf749ecd53504b384eaca52d099860c5ceb209a518ec4f17954ccef23cd162af871eb7ef21c98f3e3fedc2b0dcc805dfa49b4e284c12e61d72827e13176f085056b96f6a9d438a60946961792eaefd624b4668c843e81008e770072632fa136ff311cb9218e1c1ccc3d31fbc9e27c9200a0510df396c6cbce69ed4613f47c84c91f415a15b2bb3c4d4ebb8b4ab71238db76d98ad562d7e7f14f87711a846f6bd3e9888303caf841422df91635034367d930d9a514bf47d4f4b3c8fb7ad780729b6b9c7e3b49bdb35d03341e7ddbadfdd42b6d03b241fe1d0ef3e64a3209b5a60bcf4a6cb4c494ac9445d8315f4a4061005c9b5f572e2791b6db41570ce5ff487f52ab04915d94615325c5c05352cae9e09ddd50d38fb7288b95eaffa5a0848c272e2420b3ccc22edeb1d4b63047ff7191aa8eb014d404517c807bcafe1cf3d7e728c5a9cda07cbc75f5a6099d69a915652ed0948401990d6848e1726193ec9b876dc573577fcfd5a8d4161f3950656cd73cc958ea7681d41a67408f7dd2dac39c795a2103edac7e6526a1032e2f25a9b6d9c536f68a4cd69029ab9cb4e06d1039d5344dec0cfbab71b226d0d06f2410aca17b2231867eed8f6f86f20a1e4ce1642252248498d6f62fbf4510640c572c28ebac78ce663f05cb515e201359a4c0c8b120af04cddeeb51da4cbe45517c9f637dee67addbf52d2fee8252578cef5477677d30cc5ff96c80de5020de78dd0459ea6d8ed897bd9505137e4aff6a5787109d0822f01c47384eabd0e34174af601b50ffab2a9230595ebaab2b02052c0cacd35004581ef6e2ce5e14d1b63a8ecba96c69463360feaedd9c7f428faacaa30dae1ba5c988b41df8329bb20be89f4987a80817011c70482a74c439ec507b5dddc3babc74836a64d3f6934d5cfe30d50d515cdee2314f84a68d08d27a1eb42a154cd06e0a2e30551c27413d86a3b691c5a061b88c6d0c8a2271248aff72a52442c85b9cb14da34b2bc06b50d587b04d82b62f46bb4a64a55f1c055804e190204b6945c22a89a28c5486dca8d826927f37a23bf512dcb5d03ad94c6743b4bd5088eb01f232a51d375a2905b7569bf3c985500d92f01434ed1f48dacbf75fea7970f568a9d8964a1a983a31fc26ac672bb27da0bb63ee39562c34f502ecf61abb2f66bdb370be3ec59f36eb0b7543672c684732a73280b0acbe0fb521b6b5830d1e5470fba3c8c151d4a35dd2955993ab41ebfeee3581b140b3e23241538f74c677abc8bbe4c44a4efaff2bf481ecc20c086c73ce9079d4e6e44ec091694fd518fdd2fa2a7f5eeec4794d96a63c23341959e5e05470a33c999efe9aa2d1733f3eff8a13b9375c43b55e39915edb64de7d600c2145133222bdb36b50e822af4a4dc7dcd7333367c9cacb01203388298b46f910a03c4d775f33b6002391884536cc556cef28020d87268261a91cd767c569f1040d3379b093aca7e11c10d6a27d58ecd775912bc70a63ac65593fd74f8b13641c6d360f179c166bf75b4556ca6d2fddd32da58842da8b3079f33a5369967e391ece6a8f66ec6eb4218843976597df94e678ff072bec308b0f30949a94badcf78be24992605dc76553ed5c3cece0a448490def0b7dbaffeb83c574b503f08f177657f34d141ea809a52a2dfaadf86fe05870cced865ba244f91f77ccf81b7e8467182e8b7d0ccb60f990265007c742c8758baadc25c134cc3ab1a68a70bcc6e607a115d6a8a46d2a23737dae56c2bc401bc895c87e97f5b446b9ace65384589e23baba6482ec7057d4d49a523c54a093c97fab6b7ecd7c5bf73daa353fd7fb6cb7247c950f97aa98a7eca98e7c8c08314da1be811dfbbe6d1231f19786efff0f1c1d30dc8f6c6a80b2be5e20686fd77daadf98c0b2a3f09d489f336be84aa5d119c840813e1215647ce136ef10b91f693b100010ad9e4797b9d8dfde8b2e1c30a17869133c190c7966db28f4850d2ad26034badfdd7af602964f1309a4189322e90471dd44d3e634e085b26bd0bf1ff6d42ac8b28bdabddff5b09f7062da61b71200a24c9d331ab2fa1bd62c4f0539d3f462bcf64ccfe16ebecc2580e4b2082dc663c12c8e657517ff7b0436fe363372afc285da20f79f6c5518f46a7163ca29b4ea580e9d647b4475d823fcbc6b822a984e3918524766bdee7a10be8656ae86731def4fa8186b7bf59a0e1d757dd6867f705cd8d9c4f6e32905c80d6dfaed145292b4f1a3dbae2abdfb54a0e2d3b7dbe74f5198a659386ba0e64687abaf69e71de62c0f1fe659f0c1d92879a2b49f11c141cb4d086495770e99b89eb57aab23776e8ab0a35a4528b3c9ae815be41bf4a533a3311e9fc672d2a5b377809872473f9744d27cf4e6ed5ddba6de76d3f666508f8db3b8cf0460281bd91b014ef83dc43fba2e9efa8edf6838480508416e47301208ce39cebf2ae28fb56ae72cfdc4b63ef51c541434345c1a09126088fb513bb66f3ee68d50f9dd733107268e4eaac9a2109af8c90044968212a262e043239981d7de6a3fa97564eca41b173befea43c7d9b6251ea85f4d15cb1785c91e23111efa1510dce4a62c9b257fda3b63dd289546047d46ee1956a7b41ecf2a3b09dce85b3288998ff4e36ae2a7253a72da95a1b3d48416b10d403b3883dc4c423266c852aadc9c41512e6b0f68509d2156363ed7dae5b3fd3d63b728352bbdabf8c436efa7ac61c75859a46135715af33712d610339e8820783031c61be657151c26d857f7756d922e8d91468e281ca50f2f9010cbc6cd3481415f0bead520b8334ec54f67cde59147b74717d334257210c0992544e8464725050a843a7811fe5ef9711dd3974a16ca847023ad2bf4aae456ac93b312cdc2317f8fdf02c6458522d592549c74b6a9f5f536f3757cc49756243cce751285f1a4913a19f421510ee44dffbe2686078d662b7395afca8df6e587d34a887a86f3e42231d123b60eae13a0ae6f67fb1cb343314a1125819a53f0f334f7f89704de05cd06679f13a8650a28cfb9061bebd3a08751f9bfd98ad2b6505617fac3481737ec3d8984e52724a1c79316b09fdc9627432bc5952f19d1fe8b792793835a8c8554ad4543092836da86646eb68dd7f4c05f76b871ca503f330353e877ddcf5e5307b60ae843c82e6650fbde19305c44431af9fdc06480432fa1d976f3c1120e451166c973b84f1a174363ca44e4aeb81acbb88104d3ea583ef63d439ac87d3874a62a4e9a80215bfa73e3604c83172dea4c58abe051bf834a628fc1f3960395112e3d3cfbb7eb0cc7682c0b0843d1afd43346a500211f15c522421c133aba3be9813485f537c5df319bf6123116cb7fd1585439f8b204b978b5b1496731fc6149c644ec7405c5beed71cb136138417942f171227fda0292a8d20185df25c34a20b553697e88f8aee4d44b6c28d7a8ef44d311bc64c049054c360e9894f78ef6eccef74a95bf6b22ade7e6abaf2d134f6ff037556b7e7b03cb7b3a38f3cc3ee435fb97f995be0c83a6fc56fec5141f218dbe171e5b86651e64a528d6c4cd2e99a8fb422e297e1079086590812255896b67ea729c3aceab872cee539669cc0427e94b91d3685ce9077f164d34b9075aabc605ecb977b725308b8b84af2719b8986f495743800109f2d20fb1f78ed9284a4d584611702129fbcc618e71f34e8bf7b4deb7811d111f7d0f364016b35e5185c05aa4e2b1eae2aa35de2fa924fed9fcfe603756003e38278e0a0a4ebe1edaf25780b9ba69389d1be2293f4025e629e50a7d0a6644d0e9e7dfa891270ce6b22a76934a02330c7fde35b71fd4e7afca8c1275a43573726e5ca6fba57693b1aad12837e01dcc2f135b16e2dedf43b30b181c7657d66813e3862c9a354154de9fdf6c86f557d32090c2d3fd1450c10e2b560dca489b0483ab06e6f8bcd875a06355dcd4c0d85e424f0f04818d24047ce10ec01530b6a56304860e905c092340c1c5875f04039eb89c1c0ad2ffc5128865adb37c10d5fd3fe58c8186699ee0835efcb3684718a701453994ab85a5b9a1e76d5cb321b9cac03b413f2f2cd256a207a5c26c5fbc54076a5e734c7adade3196c52beba83f62d245dd1d193f7c2d3b2cc349570c18a7bfc282891ecbfee4c1b3ec2095bdb571554464830f354784f696fd1951220b8763e6ae0922c4a462c6229cabab19403af8ecb17a2bc950ebb22e9ce566ae9de7772ce61257440da79012f3986d24542391ed00cce1f53f17842d4e098e99d6b06ba68c592e2015661829c094bfef73dfccce74971f693d2769fd6f291e87ac5b4d88f83cf49050cf03965023d41e5698c964fdf6eb2c3c5117cb50fff76a9b342167d00248c850d66224f6c11e599ac2aa3b421960d0c4d931aaf26cca9b6c5c625e4a31a95c2d6b0e1d06f7f6977096b87a"}, @ETHTOOL_A_BITSET_VALUE={0xfe, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "1c43ffa5fd7df05f95906a11ab86300074c741159d2dea03e2fe7396ade3dffc8d73ddb4902898c42f2fe92a25ca049fa9c1955c5614f6b3749f1af0b4549348dc05a0f1c955507b315b42bdf7a14ab52a5e996e6fea7829fb004ef1a3fec8513fc9cdad30cae2c8334ef39dd8f5d84decd4cdf499ff1a88c163f547e10d1d7f5ae99378a1f00f49700d"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2308}, 0x1, 0x0, 0x0, 0x20004000}, 0x4840) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000004f40)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004f00)={&(0x7f0000004ec0)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) r9 = accept4(r0, &(0x7f0000004f80)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000005000)=0x80, 0x100800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000005100)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000050c0)={&(0x7f0000005080)={0x28, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x61}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000800) r10 = accept4$unix(r9, 0x0, &(0x7f0000005140), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000005340)={'syztnl1\x00', &(0x7f00000052c0)={'ip6tnl0\x00', r8, 0x58, 0x9, 0x5, 0x7f, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x10, 0x40, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000005380)={'wg1\x00', 0x0}) sendmmsg$inet(r10, &(0x7f0000006e80)=[{{&(0x7f0000005180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000005280)=[{&(0x7f00000051c0)="30fd2053fbf37928f20b54dd23d6bcb76b591833064a9b36d28f908bf7f3eb6901accb9dc2633414eb055a202f6cf5497d58b9ebca9cc1ceccfc178fca68f4f7f959933cbd65bd", 0x47}, {&(0x7f0000005240)="a220bbdd077b92e068d406f388b1e81c20c7611ce5e7c088347a3020e32b9ac5ab4c91dce01b711e1fb42fcd8e005faa7bb0317de938d2dac6b53c", 0x3b}], 0x2, &(0x7f00000053c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xed}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x8d, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x6}, {@rand_addr=0x64010100}, {@empty, 0x3}, {@private=0xa010102, 0x7}, {@loopback, 0x5}, {@local, 0x7}]}, @timestamp={0x44, 0x20, 0x53, 0x0, 0x4, [0x0, 0x8, 0x3, 0x6, 0x9, 0xb, 0x8]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x69, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @multicast1, @private=0xa010102, @empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xed, 0x1, 0x2, [{@local, 0x4}]}, @lsrr={0x83, 0x7, 0xcb, [@broadcast]}, @ra={0x94, 0x4}]}}}], 0x180}}, {{&(0x7f0000005540)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f00000055c0)=[{&(0x7f0000005580)="5dd699c24dbb5c2b7287fd2e2a8cd7f1b82ddc61bd3c5aaa169012fc739825021ab3ba61192a265a02117c8bddf95011bc856b1a3019", 0x36}], 0x1, &(0x7f0000005600)}}, {{&(0x7f0000005640)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000068c0)=[{&(0x7f0000005680)="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", 0x1000}, {&(0x7f0000006680)="fd1b4df5db307f5a24dae3c6b11e10926a03632cc09c0478758910fc4a4a4320b5f8b272556eef1f6f0b585423fbe8c5d236bab1f7592b34cbde723d02aaab0020c40b6527cf52899532d12e723bbaf2c8ec536e1cff50de26692807ce62ad63efd9815e16463c5818eb779b7ae2116cf127dc30a485f96a2d9d552bc5148e6da3a1bb803538866cd22daa06a2e1ecd3ee453ba888566acee503488a4d7d8d24e62dbf423a9956f9222a55c07a5817bd", 0xb0}, {&(0x7f0000006740)="468249aa99116603f5d90f8fa84a0814561352bf5c69a51f1b601e8e36050e34b034128696deda27c6747e6811aec8a1bf8a2cf23b47789bc8d47fc148b49aaa7c6359336c3dafe08f6e1fd971a458b58b1538100cdb29120c94d3d59739d3313b565f863c353e72d0dd5e64ff", 0x6d}, {&(0x7f00000067c0)="9761b34654f7f48fdc868960f5d04c16fcf2d8fc9f20281334d6e7cd801fd928d770222f9167958fb257d8b994fd9ae75aad0bbaf863ad3f4b2043fee206a23c141b3d80fefabc406bae771bfd4fc0de1718580b844d2aa98fc16eb4279b88f20aaa744f3d483780f8e6a4d6c003fcf7413f99b4f7a2517e8fba28911e569352f736cb19de27a0595c9eec84115f53a43f6483c997c219ebf455199561cf4e43738ddab877d1a44eaf13da93412b8c4e8eafd8b8a31f1ec6841059c3bcfd5a37b911", 0xc2}], 0x4, &(0x7f0000006900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc000000}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x1c, 0x3, 0x7, [{@empty, 0xffffff80}, {@empty, 0x7f}, {@multicast1, 0x7}, {@remote, 0x6}, {@empty, 0x9}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x19, 0x3, 0x9, [{@multicast1, 0x34ae411b}, {@loopback, 0x3}, {@multicast2, 0x8}, {@local, 0x8}]}, @lsrr={0x83, 0x2b, 0x5e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @private=0xa010102, @multicast1, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_addr={0x44, 0x54, 0x85, 0x1, 0x1, [{@loopback, 0x4}, {@empty, 0x7f}, {@private=0xa010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x5}, {@private=0xa010102, 0x3}, {@multicast1, 0xbf}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0x7}, {@broadcast, 0xa877}]}]}}}], 0x168}}, {{&(0x7f0000006a80)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000006bc0)=[{&(0x7f0000006ac0)="29f05c01aa8f1edefbc5a63fa968b9aca0f2047e652606adec041afa3711a026d86beb29f76b21128dbf26afa347c70abe56d15f9ce1b934ab748147f1938d872227d766edb0f194bf8c566b2b578765f83fae8da1ec9dc289e186e72211689b1d4418514fce301a54a80231aff774adea17e73f1417e7681d0bfe250c81a699a2a3da55b459295360872caa0b936610b0ab6dcc5b5c26a2916d6a0f2acc8b86f769bfa034c85721fc46bf1dac7785a4fc89bc569fda499e34c9f8cb1391", 0xbe}, {&(0x7f0000006b80)="2dca76d48b8d220f7bb6295c", 0xc}], 0x2}}, {{&(0x7f0000006c00)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000006c80)=[{&(0x7f0000006c40)}], 0x1, &(0x7f0000006cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x91, 0xfffffffffffffffe, [{0x0, 0x11, "17620cd8cb667615d829e2030724bd"}, {0x5, 0x3, "18"}, {0x7, 0x10, "4b58849c98b499ed4149fa5d8e8a"}, {0x6, 0x10, "7bed49c2d7dd81a3a2e4ebe2ffc9"}, {0x0, 0x10, "5d48ca6d2d500611f16a0facc0d3"}, {0x5, 0x12, "792057bc723e2eb6753507b19428b16d"}, {0x7, 0x11, "e19b71b2d4a4c0001db77a74259662"}, {0x6, 0x11, "13d7ee2230f53c90ab5dce6b5a29d1"}, {0x3, 0xf, "9f67fd7dd28c0bb5cf8bfa551f"}, {0x5, 0x4, "fe05"}]}, @timestamp={0x44, 0x1c, 0x60, 0x0, 0x6, [0xab, 0xffff5ac6, 0x9, 0xf3d, 0x1, 0x2]}, @timestamp_addr={0x44, 0xc, 0x46, 0x1, 0x3, [{@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x65, 0x3, 0xb, [{@multicast2}]}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb1, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1]}, @end, @lsrr={0x83, 0xf, 0x57, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ssrr={0x89, 0xf, 0x7d, [@remote, @dev={0xac, 0x14, 0x14, 0x35}, @empty]}, @ssrr={0x89, 0xf, 0x2c, [@dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @local]}, @rr={0x7, 0x1f, 0x14, [@loopback, @loopback, @empty, @rand_addr=0x64010100, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}], 0x1a0}}], 0x5, 0x4004) r13 = accept4$x25(r1, &(0x7f0000006fc0)={0x9, @remote}, &(0x7f0000007000)=0x12, 0x800) listen(r13, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000007180)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000007140)={&(0x7f0000007080)={0xbc, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x8d, 0x5b, "21376d4371f502814b33fc5fabf1b6747a5d06cfec6000e5ec7a2b8f595dc87b30077a88e396ed51c0f70bba26a93746cae9bce042ee755ce559c2686e144e67fedc2f73db0274ace22e2fcb0724985c747a5901ad60373817eac6d1ce2f76f4649e8ca63d344750ca60d891dee007681d6a7074ec141e074a725aa694623bdcd4eebf86fcbd1750ec"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffe}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x4) 1.957925319s ago: executing program 0 (id=3178): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x138}}, 0x4000000) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x3, 0x6, 0x9) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0xe) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x141bfd1cde6a807, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048881}, 0x20000000) 1.844453392s ago: executing program 5 (id=3179): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_getnexthop={0x28, 0x6a, 0x201, 0x70bd29, 0x25dfdbfd, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.69545075s ago: executing program 1 (id=3180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000240)="c9829986a2faf54d697b82f588eff635a67f2f50a37521b067907fa55497c08f57f93ae5ed195dd1f2f5add0af9fe09eb39a0486531251a125b5ec8e1726679804baed5531a7c5f80d3db5ce90e349f09fb054eba9d12e2517bae613f49afcac971410ac3d5eee8127540232f949f03ec5e064e76f82a7c9cecb54d9a21ea3695b818b760e5e96112cf75500000002000000000000", 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xc4, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x1c}, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID]}]}]}, 0xc4}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 1.539325829s ago: executing program 0 (id=3181): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e19, 0x0, @empty, 0x61}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000100)=0x9, 0x4) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @broadcast}, 0x3, 0x3, 0x3, 0x1}}, 0x2e) (async) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) (async, rerun: 32) r7 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e010100000000000000000100"], 0x70}, 0x1, 0x7}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0xffa9, 0x7fffffff, 0x80000000, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@noop, @timestamp_addr={0x44, 0xc, 0xcd, 0x1, 0x0, [{@loopback, 0x390eb7b4}]}, @timestamp={0x44, 0x28, 0x76, 0x0, 0x2, [0x9, 0x2, 0x3, 0x45ee, 0x886, 0x9, 0x8, 0x0, 0x8]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x0, 0x5, "aca57e"}, {0x6, 0x6, "e35e5264"}, {0x1, 0xa, "120801046df8e324"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe8, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf39b5809ab180bfa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r7, @ANYRES16=r6, @ANYRES64=r12], 0x50}}, 0x0) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r13, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_REASON={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r14, &(0x7f0000000280)='ns/pid_for_children\x00') 1.538897348s ago: executing program 2 (id=3182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000000080), 0x0, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x0, 0x0) 1.382114265s ago: executing program 1 (id=3183): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000080)="f0bb7c9de4985845dc3b0445ebd42a3c5f94b03a1e7971f7c583598dff36e9694621c374bfd7eb5560d0554b66abecdde0f2489d15ac0b5ea772d2dd74972d256b8bf0c28747b93cf82d15af904453bb7e4670a3b5122f6a2d6d14574222ba2069bea18277ea842e8d52d13f5e19d96b89bb0e99a0dbc917f9dafece79d6305da4c054312c5dd9b3e6564800f1d9a8a66d18263c9f1f3f8f36ae140ef005941a271f2a68297c23ae091a54796b52dbc652", 0xb1, 0x20000000, &(0x7f0000000140)={0xa, 0x0, 0x9, @private2, 0x8a, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='.\x00', &(0x7f0000000300)=[0x0], 0x0, 0x1, 0x1}}, 0x40) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRESHEX=r4, @ANYRES8=r2], 0x38}}, 0x60004010) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendto$l2tp6(r0, &(0x7f0000000080)="f0bb7c9de4985845dc3b0445ebd42a3c5f94b03a1e7971f7c583598dff36e9694621c374bfd7eb5560d0554b66abecdde0f2489d15ac0b5ea772d2dd74972d256b8bf0c28747b93cf82d15af904453bb7e4670a3b5122f6a2d6d14574222ba2069bea18277ea842e8d52d13f5e19d96b89bb0e99a0dbc917f9dafece79d6305da4c054312c5dd9b3e6564800f1d9a8a66d18263c9f1f3f8f36ae140ef005941a271f2a68297c23ae091a54796b52dbc652", 0xb1, 0x20000000, &(0x7f0000000140)={0xa, 0x0, 0x9, @private2, 0x8a, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='.\x00', &(0x7f0000000300)=[0x0], 0x0, 0x1, 0x1}}, 0x40) (async) socket(0x10, 0x803, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRESHEX=r4, @ANYRES8=r2], 0x38}}, 0x60004010) (async) 1.332748192s ago: executing program 2 (id=3184): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0}, &(0x7f00000001c0)=0x60, 0x80800) accept$nfc_llcp(r1, &(0x7f0000000280), &(0x7f0000000300)=0x60) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x1d, 0xa7, &(0x7f0000000080)="f23d623691ca2e17d1ea87d082b300cbcbba6cd75891b5dfd9811e15f6", &(0x7f0000000340)=""/167, 0x5, 0x0, 0xdb, 0x1e, &(0x7f0000000400)="2e68abdaed23b2b60c102fbe2bc180bc9367414c78138ecf444a5526d76dee6f2361897b89313470f52f7551e801adfe4c3f01fdf1a0f0f5d57a091bd31763bbc8e87f5674cc76d43f198c1b97a31149fac51f85711874d4a8a515adf31ee9e53d1cda739e64ddb6e42131761ef6e7b94ed1e1efe04396a5bc3fdd3683ef7ff6377e0ecc691a0e2175602d5e565f53d96097ec35a8ae6ea42e9c6281a2094deceaff2f5fcb17fb534adeb132fa49ca9c4e18149b9f27990acc9bc683807b5c681b96dee3778a7412742f4ef196cfb53a7a3c0a60395378a4e80fc6", &(0x7f0000000500)="96c7d10250ed45f6971157af441f41b0dbff32676904eefa578e44709bcf", 0x2, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x1d, 0xa7, &(0x7f0000000080)="f23d623691ca2e17d1ea87d082b300cbcbba6cd75891b5dfd9811e15f6", &(0x7f0000000340)=""/167, 0x5, 0x0, 0xdb, 0x1e, &(0x7f0000000400)="2e68abdaed23b2b60c102fbe2bc180bc9367414c78138ecf444a5526d76dee6f2361897b89313470f52f7551e801adfe4c3f01fdf1a0f0f5d57a091bd31763bbc8e87f5674cc76d43f198c1b97a31149fac51f85711874d4a8a515adf31ee9e53d1cda739e64ddb6e42131761ef6e7b94ed1e1efe04396a5bc3fdd3683ef7ff6377e0ecc691a0e2175602d5e565f53d96097ec35a8ae6ea42e9c6281a2094deceaff2f5fcb17fb534adeb132fa49ca9c4e18149b9f27990acc9bc683807b5c681b96dee3778a7412742f4ef196cfb53a7a3c0a60395378a4e80fc6", &(0x7f0000000500)="96c7d10250ed45f6971157af441f41b0dbff32676904eefa578e44709bcf", 0x2, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="421b020000000000140012800b0001006d616373656300003b00028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="421b020000000000140012800b0001006d616373656300003b00028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="20002abd70003ea1c93ad6c2b349dfbf5b0508fbdbdf25120000000820dc9627000100", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 963.000673ms ago: executing program 2 (id=3185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000000a200200000000000000000000000000000706000009f0000073797a300000000014"], 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 962.412015ms ago: executing program 1 (id=3186): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000240)="00214717a7070000000003060000000000000000aaa6729043098c737d317c447bd55c0b041d5874f72cf86d73d3b92ef9d7", 0x32}], 0x1, 0x7, 0x58) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) pwrite64(r1, &(0x7f0000001680)="26b31652df3bba5ee8cc064346032ffa0f43c8791fb2cb55eb84535db9d5bf093189504f632fa4f9bba2abacc609e6a808eac6c6b6bfacfec10993dc478ff303c3ddfcb67d52932d5df9f3bb6f99049e470374fec6b848c4cabe010620c1edba30e22288fb2f4e80b085211afe32cc0f58d4382f569c48e5824351853c49f517bb3b4147ad57dec3cd05300acfb4406e6faa5b4f61b40806424e549e8a3738c3a5a6c22bdb1ca7a4ee44036c4eebe40f4986994cced487b0e51b4fb5932656cdc1bf6e59fcc8e722dcd47f67bd3e98c2309a44cc131ebbc4c2020212afdbdcff292036768679a86f430defc20692fed083ce79056d536f11d217a02764b33b20b446e0051e329e08e4fae58524f1bdb53c61f70b87db0d8b6ad60f3a83ad02cc5d30bb02a2abcbf184d1a4f74273cf041dfa9143d699fbed07c251764b02a81b7c7b2a726a558762e395df2dcbafc6ea93d1aed6139344e2a198050b8ff6bf7939dec64abb16ab85736d5b5fbb78902ac71f0ece37223192c50731b5dc99496fc03347202724617113071a3d558517d99ae5eabc0dd955ee933388e16e8ae6000fb923dd7d22afaa268e237a4aeee9e382a0cb762816c9235ca8b71d536ebd7a6c688f2ec3c2cea58dec8ae7b435b8533b337c82c291b4cd4d84df287014c39aee85782270aa208e03f7d84f1f3ab813205411fd920f87aa630f48b4112310203583a19c9522bc651a1511e78e0716e91ae40fa7b88436826d09dec972e076ff57cef0af5f48823740a4dbdca8e165c886aa65310b5346797b7f3a0e3e49e2f9158f275f4ec2dd47fd5ccb05efccb5797869aa271e206217ff4322dd1f6e38ec9da9248d12cdf22cafa8db4b0fbef0cfbd0158e6fd866c960ac6ca15357b81c1b4176f71fedb1ced3470b3f8bec341525a87fafde0d423237ba7e461cd4889dbb7969b680fa107b2e886eef87a72292e0483b7e995c6e779682895433c37a919c5a529c6a576967aa97ec2b6501f7d154ea498e6ca0ba750e9de72c730aa4d738e7d7b2adaa15582d27e8faedcb183324449d5d9d678b063dd5895638757fd5dbae37fed1939b476ef677b979ff63359a7cfcf6f701cd2a2806acaa50ee5d5d8a9883e0b6fa0a71357ec719b080ba2a7999c9a04ce1a0c443942b68bb884e18ee8bd21ecaab4c289876b4241a13c1966c78e9495b3bdd3b05f9e8430b92bec6abf596ec95abc284612e4c946cfdd24754d94b4ab691f585c02bee25ef9118a4eff7804fa91c878f167aebe0d89047f9ebc455b450af9c923b086e6fffa67dfbecd84f96553673607b85ad5af1093321cac666daffb5483a84bed917def3aec630ccace7300404b5ae7c48851bccc627039d37360e9d7095b81db339f50998f3e4996c5bf0b2c7dbb58031bc74c4884e759793a88033090e8b55a60fd39c3b193ec682652fc8522d7f100d3e051703a7ffe8559a804e35d101ea785ce055c719fc237fd92313ec2608e0b517fdac638100c260b019d246df5973615e1b0cba5902c12be0aaeeea9103c1292d5c5709802e3fabbb3fb325f2698d01f5364b15d4fe9682a2ab86f22edc570861237d014074fcf00264e903e9650f0ae3c2645dd7c433d4414f3ec579801de9b8a405ed911f865aa0f4dd742f470a1bdfc576cfd942ee4a5aa08e841c6807c8bd6cbafe0582778ab1885b57f354bda38f51e497fcfc5d1f37f7ced8033512739a13be009a96465b1cbf96dd75521b2dabdcc3e8e1688a844713c05c53ecc35d3f26392ebe9c54393a6932f4ff8623c65e80fd6233b7ef5e149290ae3786fa353da6f62f1b517a452bc19e3ff8b0087440f18fb8a0025274cff1e9a5e078ee05ed5ee8272bf445a1dc89ed98fac3e00d28229283ac68e8750e6a2f3a73f7326e5f29234feead901eb94835f528669d276192dc3ce52e563e7d5edafa94e8d1367bf4a980b051fb8d79b468b12a3588f1594f70da8be908ddb70c6f5a39683c18cb747c9ec7618de41122e003191dbb769530f22edc2cf195154c41061c95fb3e25e3970d2c523c2795868db98a06504ac4501b81aa0b1954106d4aefc911a152007d342becd647a7c5d9fd54983f2348633b3c62e0822695f4294725e3e04dfbf63c24cdc4a5ce3ee4f6b062975c4b334cd594350b96ebfa8e60dc937075337eb767c41f3d0a1eca4dd9dadb32e66012142155bc5fe80e51752fc643ee65089d800db7a6bc4d3988736d728f6dfe2c280ae6e7ec1bc550a1929f51b94e7af59c71fcaad0f9340c80f531732dc5c9ad3231eb544c8ea520054e81aa63744863cb2c78a6843ccd83f0bebb84bc0c7f612e26c1cbb38cd3c1c4b09da09eba0afa90ff05b2f1eb5e49b8e789433ea3bcc98a33d82ed591988d6e9f001d7116da36d8d2ec4a724d1bc8acd4d872336f99a7f06471097c0bb2d4eed32c88ac95e10eb16e41516bf6970b2bb8f9713454c82c951474db0bf020ba88e7049f66d4b618dbec6928cd7276dcc78ad1ad666cfe0c2dc16cfc0e10b2e018ef638accda9f25089007d3a9b77311ad72e9c8dff82e28b2d09bffc11b9a1956c21ca1ee10455a0a25c231e052a6331b111bfd3ba5f982a46a43f6a91f36c180ac43b9c66c315b5b4e3405a6786ffe9b0ad584414f7231542d7f5eee98e882211395dfaaa4b00edae9381a7f9df8fa5bc6dcc1a3237cbcb4ccac2146868f4243f2a8616524fa854e7d1ef8f7b7c2859e5eae269b529a1812c381895f6ac3c3482316c3b725e61b28a357181d8331a746b6c4f535e7b401987bbf193f90a35a45fbbfd3072c40d013e51df1b9cdf7404e933bddb2e21ee267f0ef1bed44ff64b2382853ba9c80e0e8099103926d7e04dbabd717a874902cbe1cee9804fa741bf213dbe7ba0c582c3211587a28504cea85af6d1d04c32ad9e958ab897db4d0c7320acdd981e1a970393004c7ec975331ef20bf614a2d338dbd4552351272793c27446831e12bf3f588d09f01bb4edd75b6875ca64122a774a820e279013d545a8d0be778f4c672f0f8bbf19e9bf8b7a2dffafe71028114c2130c3ee47a57ac5a6f7b9d20a0083c0a4cc28452ed93c007c5b16527df634122802564fb04bd1874283da057750658369a1f6e6282937744c88996348980c3285d140793a6b2b346f5c85138697e5b7f2e111243560d249418f1806bdf868d6ef6e5b0d17e9d9fcc00ec33da97bddcbfd17da3e0f73b8eb85c4b8b670767660b14b02866a52afaec93dbc9582e82bb790f9a6750e520b320e0ca960f5743a44890b31ad485db253bbdb23819b2f5d1dc482aba177004b00c803b7bf22e5a0e3e94ae0b00b80d41ec28e3c02645f0360f7a266e2fb7895f30c708e1de9edf2811b6f5dcad127e3ee6551a022970e047b004a0048c20744ef1dd66c4b76122ef35c184bbb2ba26021e74ecacdc8157db1ef7e53e2f47109ab77b7b78d8d6999ad07480b92d62245550b4096b3b9400ceac60c42b0b7374aba37efdb1f1a6f747ac64096e5d0b6b2598686e5940e9399fae11852e77319fbd0f0dc299f46be63b004bda4268d9d54f7896b162f580da0bcbdc15eea88941233e2abf12df2d21d5ff736307034bcb0ed6eb630f429cfd829ebe6bd835e9d6d2319368c0ff3fd28443f4beb396f1887af91c909d9d2b9823c83daeb4d4928d2b73dee98feafbc1d849dd3746975c7f797234b88f369eaf3af63825a19d7e26021d97fffb689ad62ce41c58be731a2ba5414492e0abeae6fb6a230f7ff50d6f58c495c23716ec9bba3118b0297231014b710c9b3056a90aa31865c64c984a1d67f13f244de6f9b4e598545a1a5091b05cb1fbd3ad69f4ca9f23b11392747c3f9a1bd810afbc5e4b7566dd433d3c38c7cf38bf5666a6b819f8305855980a45b31df59356df6bc1fe0ba2aa507998deddfa1c8aaaf33a0c97e077d2c02d2ffc99dd0529fbe93268d1fc9bf13100f35591b54b6bdb1687d57568600ed1c58996c30fc75071a788c36015dfa2c60f7ef8ad2dc809f4913a7d8b51b26507020994262c93faad0c7d23b8f72aadee70337232493c6002b417a8d881b9b771184dd2eb27d5bdb01f969e04ba4fb6609c56c86902a5f9514829eb465f3c8e83b9a393dd4c860bdaa237ff9f3f9c1d4de405d0329b0676cddbea0cce68025bc2c7a986f10ddbbc888d6eb0b73937c660d6f4a59bf980d4ff5a83e73fc45fbec289d1e9e0f123caedb23c392cec46198db0b4e2ab25ff25da3a209ca5fb8a06d1df6db087c9ac9f741dd7d9a74fb9b51408522057c182e2303350c3ad0d0397e87fb0b969956597f373d9d3a76865088bed8f5451ea910e95278d33277e6d602c4c7468014534491dccbd8f2d21cc797d3ec0f4bc5b7825b9b280c2530e3754c14d411eb5ac3b9aa3f8fd10a89b9d8ca77fdbdee39eb3555da28d473f84d3309c870974a56073eb72e1e1497ed7f51cce846408d1b20348ccf2ac84109378bb8ea6863daaaaa60eba40780c7f9a43fb421abb3c1ed66926a977ddc013577d3ac2228682fba669f006a8c7bbe5083539925a2429006332843bbf2c1debad616d780e452ab7b98170c067e56a0423e0b87d45a3fd8f3245b6bb999d2334871f559982be243b7fbbb16cf126bc56d7043a3054006f0bf8d637dfdab6d27ccfb58001ac526f984900b730273d15a935615db2391161062b9149356d789462cb29789af069ceee6db2a1be4185c8b88e4ba09d58754c3739f49abfc484c7775d7a221177748412b1fecf0525847ede05b887ce6a1c2f08c226d69dddf58501206e6da9d77c65bbe8b8bf3e900b6f43cb7614418fec9b39f0cc4ef20ac756b1ded6d6e2581b2718a91284e055b60ca9f0363ecb0daf235b72b49a9fe4ce035e220f4afd5bbed168a2d1162316ab86c73e055bbaf594b8dc38167cb42e41a03daecfb651e02d0f40e620e2a3d24d20c83b53d1f9ced6ae3d5da2d2c8fa533bb940a2647210d9714a054e2068e3892c62c0a45d399f52f0bf41f6798d46fde5246932c701e9db017cd7b55ec53e8b7e1bb48616570651ee59191e0001b40e7cda08e423d78413026229f67efb7196a580b8e4b7395fd314f4ed939cdbeeee3bb442951d700b18fd15d3d978a8979e2c1731128e2a63a7cc55a5942f0265e9218bd1ad91078f1385b47e5a2a5a67b1acfd6628ea5b392bce505cf74de6cbc322dda12b9250c5e7fde06e39ea0baf89e4788e585405a35cd78280cedc477118191ad145077c0c1c54cf871d58839d0576aefbaeb6cac93a92602bf82eb8b06ddb1baa7e91e2b47a3a194013895e9577b07822bb8e3ab5e90ec1542eedd540566db440f6e2787ffc7148d35c5d2340f6c2d5fd3bf47f2d4cf857b33be7a846b3ac83d00b667fb0125ea72931fd225502e2ed69a2c5212602eb74af6be10de14c771b8d11fe249c2109a7ea99ee77f72e1290bab151698b819244a7e0a21898a4db3c900e7e39f7741e84b09f008df2ab4502c87cd561807a14f5ec0ba9536f6a1afbccb1143a8cc33015565cc4463f7b8256ed3f6fca18f029b145c79f87d30c146816eec3eab5081a3c12feb59f7c848bb12951c8fad6021f27d4f8f9ae8076f141f2a069cb8a376f89714fd3f1cbeff62ec3591361983b2516e65dab26892206970d69588e373ee68b28db36beb41fa19681beb011df5fa43ae58f058425fc299f5f099dd655ecf1a7e3d91f339b5cf05dfa7fb1e0179347f40d7dfc41f14454f4d54829403dfea5ab28c96efe43dd8ada893bc65c1468ee86b", 0x1000, 0x9) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 733.520748ms ago: executing program 2 (id=3187): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x2c}}, 0x2400c880) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x38716000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r5, @in={{0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r5, 0x8, 0x30}, &(0x7f0000000040)=0xc) 597.465492ms ago: executing program 0 (id=3188): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000100007000000000000000000fe880000000000000000000000000000000000000100"/53, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r2, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 495.441554ms ago: executing program 2 (id=3189): r0 = socket(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x5ddc, 0xffffffff, 0x2dfe}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3bbd}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4c805) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) 494.356604ms ago: executing program 1 (id=3190): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2100080000000000082c0442f774e9f3cb0400001de696c1a9a7ae462edfac02000000911780e5564963f6e87739f0dffe8c6e19b3b64df5cab2f1b788ecc88a4ec15d9e48d4194d9f9ddb685510c28e5ca25e3ad991b4b02384c834ab6de4431916d5876b44e6c327feffb72f03976c9425c9183566e584b9c00f1780c9e9ac99b347dfd9c1fb142289ccab0563ad4866f8173fd95e2b04a76f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001800"/28], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x56, "5fe8549ebac9f1fb19996d9717f528358b3ae2dd1b645df2b0bfb7aae83d39fede4b12cac009752d4edd0f02e0f052d44512da736f2e403e7b9828149d3e8f42216b3a8bc1a02ee351ef4f3489e688ea007014ab4fda"}, &(0x7f0000000200)=0x5e) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r1, 0x1, 0x30, 0xe9, 0x100000000}, &(0x7f0000000280)=0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r2, r0, 0x0, 0xf03a0005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 474.902413ms ago: executing program 2 (id=3191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10}, {0x6, 0x0, 0x0, 0x8007}]}) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)={0x3, 'wg2\x00', {0x8001}, 0x1ff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TUNSETOWNER(r0, 0x400454d4, 0x0) 223.798224ms ago: executing program 1 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf3b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x800) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) 168.332489ms ago: executing program 0 (id=3193): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}]}}, 0x0, 0x2a, 0x0, 0x1, 0x7}, 0x28) 66.089058ms ago: executing program 1 (id=3194): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r12, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) 0s ago: executing program 0 (id=3195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000003000000000000aa080001"], 0x34}}, 0x2004c000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000003000000000000aa080001"], 0x34}}, 0x2004c000) (async) kernel console output (not intermixed with test programs): ond7: entered allmulticast mode [ 289.203892][T11823] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.304780][T11823] bond8: entered promiscuous mode [ 289.324350][T11823] bond8: entered allmulticast mode [ 289.342552][T11823] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.423041][T11823] bond9: entered promiscuous mode [ 289.428315][T11823] bond9: entered allmulticast mode [ 289.434919][T11823] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.538736][T11844] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 289.643123][T11823] bond10: entered promiscuous mode [ 289.667689][T11823] bond10: entered allmulticast mode [ 289.682367][T11823] 8021q: adding VLAN 0 to HW filter on device bond10 [ 289.807368][T11823] bond11: entered promiscuous mode [ 289.851404][T11823] bond11: entered allmulticast mode [ 289.887627][T11823] 8021q: adding VLAN 0 to HW filter on device bond11 [ 290.109560][T11844] 8021q: adding VLAN 0 to HW filter on device bond11 [ 290.253816][T11845] bond11: (slave veth5): Enslaving as an active interface with a down link [ 290.299714][T11849] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 290.327441][T11849] bond11: (slave batadv1): making interface the new active one [ 290.354015][T11849] batadv1: entered promiscuous mode [ 290.370599][T11849] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 290.414624][T11853] netlink: 'syz.1.1634': attribute type 12 has an invalid length. [ 290.449121][T11854] netlink: 'syz.1.1634': attribute type 12 has an invalid length. [ 291.196725][T11895] __nla_validate_parse: 2 callbacks suppressed [ 291.196746][T11895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1647'. [ 291.445388][T11903] netlink: 'syz.5.1649': attribute type 2 has an invalid length. [ 291.750273][T11920] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 292.283589][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 292.388240][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 292.617966][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 292.662368][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 292.762874][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 292.803072][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 292.856111][T11964] pimreg: entered allmulticast mode [ 293.074243][T11974] IPv4: Oversized IP packet from 127.202.26.0 [ 293.240495][T11978] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 293.319337][T11978] bond2 (unregistering): Released all slaves [ 293.476746][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 293.933450][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.973684][T12019] bridge_slave_0 (unregistering): left allmulticast mode [ 294.015329][T12019] bridge_slave_0 (unregistering): left promiscuous mode [ 294.049573][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.446615][T12033] bond12: invalid ARP target 0.0.0.0 specified for addition [ 294.463879][T12033] bond12: option arp_ip_target: invalid value (0) [ 294.499294][T12033] bond12 (unregistering): Released all slaves [ 294.673465][T12032] bond12: invalid ARP target 0.0.0.0 specified for addition [ 294.692658][T12032] bond12: option arp_ip_target: invalid value (0) [ 294.710497][T12032] bond12 (unregistering): Released all slaves [ 295.141707][T12055] netlink: Unknown conntrack attr (type=1030, max=9) [ 295.152028][T12055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.541791][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 295.555493][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 295.644330][T12078] netlink: 'syz.2.1703': attribute type 21 has an invalid length. [ 295.655495][T12078] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.727818][T12083] xt_hashlimit: size too large, truncated to 1048576 [ 296.292660][T12105] syzkaller0: entered promiscuous mode [ 296.333303][T12105] syzkaller0: entered allmulticast mode [ 296.379127][T12109] __nla_validate_parse: 1 callbacks suppressed [ 296.379145][T12109] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1714'. [ 296.421900][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 296.447571][T12116] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1716'. [ 296.528781][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 296.702686][T12122] xt_connbytes: Forcing CT accounting to be enabled [ 296.718165][T12119] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 296.743345][T12122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.228655][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1725'. [ 297.247247][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1725'. [ 297.274153][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 297.385624][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'. [ 297.423709][T12147] netlink: 'syz.5.1727': attribute type 11 has an invalid length. [ 297.424664][T12144] openvswitch: netlink: Missing key (keys=40, expected=100) [ 297.452484][T12147] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1727'. [ 297.551660][T12133] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 297.658239][T12134] xt_hashlimit: size too large, truncated to 1048576 [ 297.690281][T12157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1730'. [ 297.815234][T12157] gretap2: entered promiscuous mode [ 297.856894][T12157] gretap2: entered allmulticast mode [ 298.329538][T12177] netlink: 'syz.0.1738': attribute type 10 has an invalid length. [ 298.368786][T12177] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.413378][T12177] bond0: (slave team0): Enslaving as an active interface with an up link [ 299.312614][T12180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.361112][T12180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.717040][T12180] geneve0: left allmulticast mode [ 299.877277][T12180] bond6: left allmulticast mode [ 299.886545][T12180] erspan1: left allmulticast mode [ 299.894545][T12180] syzkaller0: left allmulticast mode [ 299.920240][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.003637][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.027813][ T10] syz2: Port: 1 Link DOWN [ 300.047913][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.099983][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.210262][T12218] netlink: 'syz.0.1747': attribute type 11 has an invalid length. [ 300.506623][T12233] xt_hashlimit: size too large, truncated to 1048576 [ 300.577654][T12230] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 301.645066][T12288] __nla_validate_parse: 5 callbacks suppressed [ 301.645085][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'. [ 301.863781][ T92] batadv1: left promiscuous mode [ 301.933877][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 301.956660][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 302.050554][T12307] veth0: entered promiscuous mode [ 302.098369][T12304] veth0: left promiscuous mode [ 302.340375][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 302.489353][T12328] gretap0: left allmulticast mode [ 302.505001][T12328] gretap0: left promiscuous mode [ 302.519940][T12328] bridge0: port 3(gretap0) entered disabled state [ 302.562959][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 302.593821][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 302.626765][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 302.668493][T12328] bond0: (slave team0): Releasing backup interface [ 302.819385][T12328] bridge_slave_0: left promiscuous mode [ 302.827147][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.863023][T12328] bridge_slave_1: left allmulticast mode [ 302.881524][T12328] bridge_slave_1: left promiscuous mode [ 302.897711][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.948320][T12328] bond0: (slave bond_slave_0): Releasing backup interface [ 303.009252][T12328] bond0: (slave bond_slave_1): Releasing backup interface [ 303.076621][T12328] team0: Port device team_slave_0 removed [ 303.107026][T12328] team0: Port device team_slave_1 removed [ 303.139936][T12337] vlan0: entered promiscuous mode [ 305.914042][T12362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.178809][T12399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.358589][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 306.386592][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 306.466094][T12408] 8021q: adding VLAN 0 to HW filter on device bond12 [ 306.545257][T12419] macvlan4: entered promiscuous mode [ 306.572208][T12419] macvlan4: entered allmulticast mode [ 306.599986][T12419] bond12: entered promiscuous mode [ 306.613168][T12421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.645324][T12419] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 306.686217][T12419] bond12: left promiscuous mode [ 306.724654][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 306.751203][T12426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1803'. [ 306.791632][ T9] IPVS: starting estimator thread 0... [ 306.827368][T12425] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 306.835847][T12425] tipc: Enabled bearer , priority 10 [ 306.849722][T12429] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1805'. [ 306.891568][T12431] IPVS: using max 27 ests per chain, 64800 per kthread [ 306.961774][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.101661][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.241497][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.381383][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.424254][T12456] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1813'. [ 307.521069][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.550528][T12460] netlink: 'syz.2.1814': attribute type 3 has an invalid length. [ 307.571539][T12460] netlink: 'syz.2.1814': attribute type 1 has an invalid length. [ 307.579355][T12460] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1814'. [ 307.661460][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.802928][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.945746][T12204] tipc: Node number set to 247079944 [ 308.221273][T12484] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1823'. [ 308.317807][T12487] team0: No ports can be present during mode change [ 308.404141][T12496] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1827'. [ 308.652280][T12510] netlink: 81 bytes leftover after parsing attributes in process `syz.5.1832'. [ 308.675460][T12510] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1832'. [ 308.756335][T12498] ip6t_srh: unknown srh match flags 5F28 [ 309.024938][T12526] lo speed is unknown, defaulting to 1000 [ 309.046899][T12526] lo speed is unknown, defaulting to 1000 [ 309.082950][T12526] lo speed is unknown, defaulting to 1000 [ 309.104248][T12531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1837'. [ 309.122940][T12526] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 309.153455][T12526] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 309.171739][T12526] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 309.245171][T12526] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 309.273137][T12526] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 309.334533][T12526] lo speed is unknown, defaulting to 1000 [ 309.373221][T12526] lo speed is unknown, defaulting to 1000 [ 309.383461][T12526] lo speed is unknown, defaulting to 1000 [ 309.398196][T12526] lo speed is unknown, defaulting to 1000 [ 309.408730][T12526] lo speed is unknown, defaulting to 1000 [ 309.417924][T12526] lo speed is unknown, defaulting to 1000 [ 309.748267][T12552] netlink: 'syz.0.1843': attribute type 2 has an invalid length. [ 310.178537][T12572] xfrm1: entered promiscuous mode [ 310.192777][T12573] Cannot find add_set index 0 as target [ 310.199222][T12572] xfrm1: entered allmulticast mode [ 310.556794][T12596] syzkaller0: entered promiscuous mode [ 310.567536][T12596] syzkaller0: entered allmulticast mode [ 310.919115][T12607] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 310.927778][T12607] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.975889][T12613] tipc: Started in network mode [ 310.990500][T12613] tipc: Node identity 7f000001, cluster identity 4711 [ 310.998606][T12613] tipc: New replicast peer: 127.0.0.2 [ 311.017927][T12613] tipc: Enabled bearer , priority 10 [ 311.624071][T12663] bridge0: port 3(gretap0) entered blocking state [ 311.635719][T12663] bridge0: port 3(gretap0) entered disabled state [ 311.657452][T12663] gretap0: entered allmulticast mode [ 311.736712][T12663] gretap0: entered promiscuous mode [ 311.990354][T12670] __nla_validate_parse: 18 callbacks suppressed [ 311.990373][T12670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1877'. [ 312.012836][T10838] tipc: Node number set to 2130706433 [ 312.040943][ C1] net_ratelimit: 9 callbacks suppressed [ 312.040961][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.115746][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'. [ 312.169978][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 312.188283][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 312.785706][T12716] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 313.024267][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'. [ 313.080844][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.129467][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'. [ 313.247616][T12750] 8021q: VLANs not supported on gre0 [ 313.404457][T12755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1906'. [ 313.424130][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1904'. [ 313.557144][T12759] bond13: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 313.567800][T12763] netlink: 'syz.5.1907': attribute type 2 has an invalid length. [ 313.772522][T12775] netlink: del zone limit has 4 unknown bytes [ 313.894792][T12783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1913'. [ 313.939047][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 314.120961][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.270185][T12796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.913314][T12837] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 315.160998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.200922][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.820617][T12864] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 316.828572][T12864] netlink: 'syz.4.1936': attribute type 7 has an invalid length. [ 316.837965][T12864] netlink: 'syz.4.1936': attribute type 8 has an invalid length. [ 316.847083][T12864] NCSI netlink: No device for ifindex 65584 [ 317.090166][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241026][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.465065][ T29] audit: type=1804 audit(1787187946.228:4): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1946" name="/newroot/409/cgroup.controllers" dev="tmpfs" ino=2105 res=1 errno=0 [ 317.516866][ T29] audit: type=1800 audit(1787187946.228:5): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1946" name="cgroup.controllers" dev="tmpfs" ino=2105 res=0 errno=0 [ 317.665010][T12905] netlink: 'syz.1.1948': attribute type 29 has an invalid length. [ 317.677057][T12905] __nla_validate_parse: 6 callbacks suppressed [ 317.677074][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 317.693909][T12907] netlink: 'syz.1.1948': attribute type 29 has an invalid length. [ 317.702190][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 317.812809][T12917] x_tables: duplicate entry at hook 3 [ 317.906319][T12922] xt_hashlimit: size too large, truncated to 1048576 [ 317.926483][T12922] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 317.949327][T12922] netlink: 'syz.0.1953': attribute type 2 has an invalid length. [ 318.020284][T12922] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 318.038139][T12922] bond4 (unregistering): Released all slaves [ 318.068004][T12927] tipc: Enabling of bearer rejected, failed to enable media [ 318.146434][T12932] 8021q: adding VLAN 0 to HW filter on device bond12 [ 318.162860][T12932] bond0: (slave bond12): Enslaving as an active interface with a down link [ 318.196611][T12938] x_tables: duplicate entry at hook 3 [ 318.280937][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.310685][T12941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1959'. [ 319.161986][T12990] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 319.189862][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1971'. [ 319.320963][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.457799][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 319.765315][T13015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1981'. [ 319.847245][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 319.882470][T13016] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1981'. [ 319.910453][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 319.921802][T13023] netlink: 'syz.1.1983': attribute type 1 has an invalid length. [ 319.949609][T13018] syzkaller1: entered promiscuous mode [ 319.977048][T13018] syzkaller1: entered allmulticast mode [ 320.362461][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.401944][T13046] sctp: [Deprecated]: syz.5.1990 (pid 13046) Use of int in maxseg socket option. [ 320.401944][T13046] Use struct sctp_assoc_value instead [ 320.582749][T13057] xt_CT: No such helper "netbios-ns" [ 320.715511][T13065] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1994'. [ 321.400944][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.440920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.126737][T13031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.139186][T13050] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 323.151880][T13050] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1991'. [ 323.168748][T13050] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 323.335225][T13094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2004'. [ 323.381977][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 323.403881][T13098] netlink: 'syz.5.2006': attribute type 10 has an invalid length. [ 323.418239][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 323.452242][T13098] syz_tun: entered promiscuous mode [ 323.480886][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.602139][T13106] syzkaller1: entered promiscuous mode [ 323.628398][T13106] syzkaller1: entered allmulticast mode [ 323.694531][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 323.808486][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 323.825371][T13113] ip6t_rpfilter: unknown options [ 323.842751][T13115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.226207][T13127] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 324.244575][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 324.254786][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 324.346873][T13127] bond14 (unregistering): Released all slaves [ 324.520843][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.664611][T13154] netlink: 'syz.2.2022': attribute type 28 has an invalid length. [ 324.676291][T13154] netlink: 'syz.2.2022': attribute type 3 has an invalid length. [ 324.689128][T13154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2022'. [ 325.560974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.760685][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 325.797363][T13192] tunl0: entered promiscuous mode [ 325.804151][T13195] sctp: [Deprecated]: syz.1.2034 (pid 13195) Use of int in maxseg socket option. [ 325.804151][T13195] Use struct sctp_assoc_value instead [ 325.866736][T13192] netlink: 'syz.4.2033': attribute type 3 has an invalid length. [ 325.989811][T13200] sock: sock_timestamping_bind_phc: sock not bind to device [ 326.042323][T13202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.073560][T13202] sctp: [Deprecated]: syz.1.2036 (pid 13202) Use of int in max_burst socket option. [ 326.073560][T13202] Use struct sctp_assoc_value instead [ 326.348747][T13215] netlink: 'syz.0.2041': attribute type 8 has an invalid length. [ 326.403356][T13215] Bluetooth: ISO socket layer initialized [ 326.505386][T13217] block nbd0: server does not support multiple connections per device. [ 326.522354][T13225] pimreg: left allmulticast mode [ 326.559155][T13217] block nbd0: shutting down sockets [ 326.588329][T13226] bridge4: entered promiscuous mode [ 326.596397][T13226] bridge4: entered allmulticast mode [ 326.601928][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.631974][T13235] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 326.654174][T13233] bond13: option mode: invalid value (10) [ 326.663375][T13233] bond13 (unregistering): Released all slaves [ 326.889561][T13248] syzkaller0: entered promiscuous mode [ 326.905157][T13248] syzkaller0: entered allmulticast mode [ 327.021906][T13253] veth1_macvtap: left promiscuous mode [ 327.127117][T13259] netlink: 'syz.4.2053': attribute type 3 has an invalid length. [ 327.156046][T13259] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 327.597533][T13282] Cannot find add_set index 65532 as target [ 327.643289][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.990269][T13301] netlink: 'syz.5.2065': attribute type 2 has an invalid length. [ 328.368540][T13317] __nla_validate_parse: 4 callbacks suppressed [ 328.368558][T13317] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2069'. [ 328.453402][T13317] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2069'. [ 328.493722][T13317] 0{X: renamed from gretap0 [ 328.531707][T13317] 0{X: entered allmulticast mode [ 328.577677][T13317] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 328.681099][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.708792][T13348] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2073'. [ 328.860164][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'. [ 329.015988][T13337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.086416][T13337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.152942][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 329.205957][ T5273] veth1_macvtap: entered promiscuous mode [ 329.293948][T13356] ip6erspan0: entered allmulticast mode [ 329.303578][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 329.359269][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 329.392449][T13368] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2076'. [ 329.412453][T13368] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2076'. [ 329.461600][ T68] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 329.479898][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 329.500363][ T5750] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 329.515708][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 329.550955][T13370] syzkaller0: entered promiscuous mode [ 329.567821][T13370] syzkaller0: entered allmulticast mode [ 329.604064][ T1016] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 329.621917][ T5750] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 329.721082][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.752071][ T201] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 330.048922][T13399] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2083'. [ 330.155055][T13406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.339853][T13417] xt_hashlimit: size too large, truncated to 1048576 [ 330.742028][T13435] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 330.760885][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.812144][ T1016] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 330.848217][ T1016] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 330.875376][T13435] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 331.211800][T12205] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 331.360706][T13460] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 331.416372][T13467] xt_ecn: cannot match TCP bits for non-tcp packets [ 331.800976][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.950208][T13492] netlink: 'syz.5.2107': attribute type 2 has an invalid length. [ 332.136442][T13505] netlink: 'syz.1.2112': attribute type 21 has an invalid length. [ 332.149412][T13495] veth1_to_bond: entered allmulticast mode [ 332.188594][T13508] netlink: 'syz.0.2113': attribute type 83 has an invalid length. [ 332.266316][T13494] veth1_to_bond: left allmulticast mode [ 332.488838][T13518] tipc: Enabling of bearer rejected, failed to enable media [ 332.698570][T13527] 0: reclassify loop, rule prio 0, protocol 800 [ 332.716252][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.753831][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.784640][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.818893][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.840979][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.079424][T13538] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 333.137409][T13538] bond3 (unregistering): Released all slaves [ 333.345812][T13554] vlan0: mtu less than device minimum [ 333.577988][T13565] __nla_validate_parse: 12 callbacks suppressed [ 333.578004][T13565] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2132'. [ 333.880974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.979348][T13577] syz_tun: entered allmulticast mode [ 333.985682][T13577] netlink: 'syz.1.2133': attribute type 29 has an invalid length. [ 333.993952][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 334.004192][T13577] netlink: 'syz.1.2133': attribute type 29 has an invalid length. [ 334.012743][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 334.075937][T13583] netlink: 'syz.1.2133': attribute type 2 has an invalid length. [ 334.139071][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 334.148591][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 334.343510][T13562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 334.920850][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.081128][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 335.960867][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.117668][T13547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.133402][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2130'. [ 336.411899][T13594] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 336.435398][T13590] batadv0: entered promiscuous mode [ 336.458808][T13590] macsec0: entered promiscuous mode [ 336.479564][T13590] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 336.507783][T13590] batadv0: left promiscuous mode [ 337.001035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.066233][T13625] Bluetooth: hci0: unsupported parameter 5135 [ 337.079068][T13625] Bluetooth: hci0: unsupported parameter 8192 [ 337.098188][T13625] Bluetooth: hci0: unsupported parameter 5135 [ 337.132835][T13625] Bluetooth: hci0: unsupported parameter 8192 [ 337.377022][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2150'. [ 337.454037][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 337.554669][T13649] openvswitch: netlink: Key type 31 is not supported [ 338.040885][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.050682][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'. [ 338.126529][T13677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.435160][T13700] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2168'. [ 338.445393][T13700] 0: renamed from hsr0 (while UP) [ 338.481705][T13700] 0: entered allmulticast mode [ 338.487457][ T6805] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 338.500028][T13700] hsr_slave_0: entered allmulticast mode [ 338.514050][T13700] hsr_slave_1: entered allmulticast mode [ 338.526355][T13700] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 338.607889][T13695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.647000][T13695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.672918][T13695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.689669][T13695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.839220][T13712] hsr0: entered allmulticast mode [ 338.864038][T13712] hsr_slave_0: entered allmulticast mode [ 338.871748][T13712] hsr_slave_1: entered allmulticast mode [ 339.080973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.314229][T13730] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2176'. [ 339.346411][T13731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2177'. [ 339.422191][T13738] syzkaller1: entered promiscuous mode [ 339.439446][T13738] syzkaller1: entered allmulticast mode [ 339.501007][T13740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.828599][T13748] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2181'. [ 340.120898][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.295682][T13777] bridge_slave_0: left allmulticast mode [ 340.314124][T13777] bridge_slave_0: left promiscuous mode [ 340.336724][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.387959][T13777] bridge_slave_1: left allmulticast mode [ 340.417673][T13777] bridge_slave_1: left promiscuous mode [ 340.442179][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.505058][T13777] .`: (slave bond_slave_0): Releasing backup interface [ 340.559275][T13777] .`: (slave bond_slave_1): Releasing backup interface [ 340.629217][T13797] xt_CT: No such helper "snmp" [ 340.665405][T13796] xt_CT: No such helper "snmp" [ 340.689918][T13777] team0: Port device team_slave_1 removed [ 340.732189][T13777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.749977][T13777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.770290][T13807] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 340.787182][T13777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.797743][T13777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.819318][T13777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.944132][T13818] netlink: 'syz.2.2201': attribute type 10 has an invalid length. [ 341.161304][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.265221][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'. [ 341.275034][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'. [ 341.295460][T13834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2206'. [ 341.413982][T13841] veth0: entered promiscuous mode [ 341.523587][T13841] veth0: left promiscuous mode [ 341.814357][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2212'. [ 341.824065][T13858] netlink: 'syz.5.2212': attribute type 8 has an invalid length. [ 341.836344][T13858] x_tables: duplicate underflow at hook 1 [ 342.201027][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.943676][T13922] netlink: 'syz.5.2221': attribute type 1 has an invalid length. [ 343.126874][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 343.188617][T13934] netlink: 'syz.4.2223': attribute type 49 has an invalid length. [ 343.234357][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2223'. [ 343.241486][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.327251][T13940] tipc: Enabling of bearer rejected, media not registered [ 343.568292][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 343.960938][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 344.003638][T13972] sock: sock_timestamping_bind_phc: sock not bind to device [ 344.050622][T13967] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 344.280994][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.337673][T13994] __nla_validate_parse: 6 callbacks suppressed [ 344.337693][T13994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2238'. [ 345.005190][T14038] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2248'. [ 345.041779][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 345.177691][T14044] vlan2: entered allmulticast mode [ 345.320916][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.443421][T14059] lo: entered allmulticast mode [ 345.478764][T14056] lo: left allmulticast mode [ 345.836650][T14081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2258'. [ 345.927050][T14084] bond0: invalid NS target ff00:: specified for addition [ 345.940402][T14086] xt_cluster: node mask cannot exceed total number of nodes [ 345.952240][T14084] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 346.360990][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.427775][T14105] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2265'. [ 346.492220][T14105] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 346.546483][T14105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.587156][T14113] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2267'. [ 347.037443][T14133] netlink: 'syz.4.2275': attribute type 3 has an invalid length. [ 347.081240][T14133] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 347.316007][T14148] syzkaller0: left promiscuous mode [ 347.349180][T14151] IPVS: set_ctl: invalid protocol: 98 100.1.1.2:20004 [ 347.400910][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.663767][T14163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.942062][T14174] bridge_slave_1: entered allmulticast mode [ 348.298893][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'. [ 348.366344][T14189] syzkaller0: entered promiscuous mode [ 348.377353][T14189] syzkaller0: entered allmulticast mode [ 348.384040][T14194] openvswitch: netlink: Duplicate or invalid key (type 0). [ 348.414049][T14194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.440850][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.766695][T14210] block nbd0: not configured, cannot reconfigure [ 348.913081][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 348.972102][T14215] netlink: 'syz.2.2296': attribute type 1 has an invalid length. [ 349.000307][T14215] netlink: 'syz.2.2296': attribute type 2 has an invalid length. [ 349.228545][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'. [ 349.272609][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'. [ 349.409007][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2306'. [ 349.480983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.638762][T14263] netlink: 'syz.2.2308': attribute type 83 has an invalid length. [ 349.852294][T14269] netlink: 'syz.0.2309': attribute type 1 has an invalid length. [ 350.118104][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 350.143177][T14274] netlink: 'syz.2.2311': attribute type 15 has an invalid length. [ 350.243202][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 350.521048][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.977144][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 351.030012][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 351.069994][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 351.079464][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2316'. [ 351.454147][T14333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2321'. [ 351.510699][T14333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2321'. [ 351.560980][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.776120][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 352.099929][T14360] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 352.350032][T14378] tc_dump_action: action bad kind [ 352.415676][T14377] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.600830][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.774490][T14387] bond15 (unregistering): Released all slaves [ 353.552052][T14416] netlink: 'syz.0.2341': attribute type 21 has an invalid length. [ 353.571623][T14412] syzkaller0: entered promiscuous mode [ 353.605319][T14412] syzkaller0: entered allmulticast mode [ 353.640997][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.680943][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.720905][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.996356][T14478] __nla_validate_parse: 10 callbacks suppressed [ 355.996377][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2355'. [ 356.031441][T14478] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2355'. [ 356.078121][T14487] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 356.138508][T14478] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2355'. [ 356.287456][T14493] tipc: Started in network mode [ 356.318793][T14493] tipc: Node identity ac14142f, cluster identity 4711 [ 356.342607][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2361'. [ 356.358336][T14493] tipc: Enabling of bearer rejected, failed to enable media [ 356.391969][T14512] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2359'. [ 356.415252][T14504] netlink: 'syz.5.2359': attribute type 5 has an invalid length. [ 356.648258][T14507] bond13: entered promiscuous mode [ 356.669793][T14507] 8021q: adding VLAN 0 to HW filter on device bond13 [ 356.690040][T14525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2363'. [ 356.706727][T14525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2363'. [ 356.761059][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.810091][T14513] bridge4: entered promiscuous mode [ 356.842127][T14513] bond13: (slave bridge4): Enslaving as an active interface with an up link [ 356.989321][T14531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.065838][T14537] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 357.085047][T14537] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2365'. [ 357.103193][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 357.367082][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 357.748313][T14585] netlink: 'syz.5.2376': attribute type 23 has an invalid length. [ 357.800992][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.955136][T14588] netlink: 'syz.0.2378': attribute type 12 has an invalid length. [ 358.688618][T14621] xt_hashlimit: size too large, truncated to 1048576 [ 358.841124][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.836862][T14662] syzkaller1: entered promiscuous mode [ 359.852973][T14662] syzkaller1: entered allmulticast mode [ 359.880906][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.046907][T14677] gretap0: left allmulticast mode [ 360.075359][T14677] bridge0: port 3(gretap0) entered disabled state [ 360.133844][ T5616] Bluetooth: hci5: command 0x0405 tx timeout [ 360.152229][T14677] x9: left allmulticast mode [ 360.168509][T14677] x9: left promiscuous mode [ 360.177426][T14677] bridge0: port 1(1x9) entered disabled state [ 360.214675][T14677] bridge_slave_1: left allmulticast mode [ 360.229665][T14677] bridge_slave_1: left promiscuous mode [ 360.247528][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.302942][T14677] : (slave bond_slave_0): Releasing backup interface [ 360.353360][T14677] : (slave bond_slave_1): Releasing backup interface [ 360.368128][T14677] team0: Port device team_slave_0 removed [ 360.377111][T14677] team0: Port device team_slave_1 removed [ 360.385223][T14677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.394495][T14677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.404582][T14677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.422672][T14683] vlan0: entered promiscuous mode [ 360.468678][T14686] vcan1: entered promiscuous mode [ 360.474405][T14686] vcan1: entered allmulticast mode [ 360.920945][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.952686][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.224788][T14732] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.265332][T14735] netlink: 'syz.0.2414': attribute type 1 has an invalid length. [ 361.276212][T14735] netlink: 'syz.0.2414': attribute type 2 has an invalid length. [ 361.278757][T14728] netlink: 'syz.2.2411': attribute type 2 has an invalid length. [ 361.286607][T14736] netlink: 'syz.0.2414': attribute type 1 has an invalid length. [ 361.303410][T14736] netlink: 'syz.0.2414': attribute type 2 has an invalid length. [ 361.550389][T14742] bond0: (slave bond_slave_0): Releasing backup interface [ 361.631977][T14753] __nla_validate_parse: 3 callbacks suppressed [ 361.631997][T14753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2418'. [ 361.678910][T14742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.698684][T14742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.735434][T14742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.753375][T14742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.774741][T14742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.881127][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 361.960892][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.996528][T14766] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 362.075949][T14768] netlink: Invalid conntrack timeout [ 362.092683][T14768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.115228][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2420'. [ 362.146628][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 362.173091][T14775] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2420'. [ 362.196395][T14776] netlink: 'syz.0.2421': attribute type 1 has an invalid length. [ 362.217900][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2422'. [ 362.329256][T14788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2423'. [ 362.559139][T14773] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2422'. [ 362.894736][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2426'. [ 363.245027][T14829] lo: entered promiscuous mode [ 363.288213][T14829] netlink: 'syz.4.2433': attribute type 2 has an invalid length. [ 363.663235][T14848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2438'. [ 363.672586][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2438'. [ 363.975961][T14862] net_ratelimit: 4 callbacks suppressed [ 363.975980][T14862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.040894][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.278283][T14875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.363044][T14875] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 364.522558][T14888] netlink: 'syz.1.2449': attribute type 1 has an invalid length. [ 364.578777][T14888] netlink: 'syz.1.2449': attribute type 3 has an invalid length. [ 364.784880][T14900] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 365.080880][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.858908][T14948] vlan3: entered promiscuous mode [ 365.880724][T14948] bridge0: entered promiscuous mode [ 365.901780][T14948] vlan3: entered allmulticast mode [ 365.923081][T14948] bridge0: entered allmulticast mode [ 365.969041][T14952] pim6reg: entered allmulticast mode [ 365.984476][T14952] pim6reg: left allmulticast mode [ 366.120935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.557370][T14972] batadv_slave_0: entered promiscuous mode [ 366.579326][T14976] validate_nla: 2 callbacks suppressed [ 366.579346][T14976] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 366.669890][T14972] __nla_validate_parse: 5 callbacks suppressed [ 366.669926][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 367.160851][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.569276][T15004] netlink: 'syz.0.2483': attribute type 11 has an invalid length. [ 367.590451][T15004] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2483'. [ 367.616882][T15004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2483'. [ 367.649964][T15008] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.748544][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 367.774376][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 368.200944][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.229387][T15029] ip6gre3: entered promiscuous mode [ 368.254799][T15029] ip6gre3: entered allmulticast mode [ 368.298507][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2491'. [ 368.420684][T15042] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2492'. [ 368.829437][T15063] syzkaller0: entered promiscuous mode [ 368.841890][T15063] syzkaller0: entered allmulticast mode [ 368.861003][T15063] tipc: Enabled bearer , priority 0 [ 368.868211][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 368.957028][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 368.970537][T15070] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2500'. [ 369.130558][T15062] tipc: Resetting bearer [ 369.190474][T15062] tipc: Disabling bearer [ 369.240938][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.412365][T15089] ip_tables: iptables: counters copy to user failed while replacing table [ 369.552997][T15094] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 369.627213][T15103] netlink: 'syz.0.2510': attribute type 10 has an invalid length. [ 369.705339][T15103] team0: Device veth0_macvtap failed to register rx_handler [ 370.280839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.845357][T15161] bridge8: entered promiscuous mode [ 370.860184][T15161] bridge8: entered allmulticast mode [ 370.880113][T15161] team0: Port device bridge8 added [ 370.890216][T15164] bridge0: port 1(team0) entered blocking state [ 370.905891][T15164] bridge0: port 1(team0) entered disabled state [ 370.934873][T15164] team0: entered allmulticast mode [ 370.959041][T15164] team0: entered promiscuous mode [ 371.320881][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.401772][T15189] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 371.470140][T15192] bridge0: port 1(veth0) entered blocking state [ 371.502375][T15192] bridge0: port 1(veth0) entered disabled state [ 371.542910][T15192] veth0: entered allmulticast mode [ 371.590578][T15192] veth0: entered promiscuous mode [ 371.637179][T15192] bridge0: port 1(veth0) entered blocking state [ 371.643651][T15192] bridge0: port 1(veth0) entered forwarding state [ 371.715648][T15194] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 371.818351][T15208] __nla_validate_parse: 7 callbacks suppressed [ 371.818379][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 371.898038][T15208] hsr_slave_0: left promiscuous mode [ 371.928076][T15208] hsr_slave_1: left promiscuous mode [ 372.092074][T15220] ip6t_srh: unknown srh match flags 4000 [ 372.360923][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.404551][T15230] tipc: Enabled bearer , priority 0 [ 372.446963][T15230] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2542'. [ 372.484010][T15230] syzkaller0: mtu less than device minimum [ 372.779910][T15245] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2545'. [ 373.106729][T15251] netlink: 'syz.1.2546': attribute type 61 has an invalid length. [ 373.403838][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.753788][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.797826][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.107408][T15308] netlink: 'syz.2.2558': attribute type 1 has an invalid length. [ 374.323781][T15274] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 374.413151][T15320] x_tables: duplicate entry at hook 3 [ 374.421327][T15308] bond14: entered promiscuous mode [ 374.440972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.467156][T15308] 8021q: adding VLAN 0 to HW filter on device bond14 [ 374.549885][T15317] vlan1: entered allmulticast mode [ 374.576137][T15317] bond14: entered allmulticast mode [ 374.726434][T15318] bond14: (slave bridge5): making interface the new active one [ 374.755014][T15318] bridge5: entered promiscuous mode [ 374.779622][T15318] bridge5: entered allmulticast mode [ 374.812287][T15318] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 375.103735][T15351] rdma_op ffff8880771c09f0 conn xmit_rdma 0000000000000000 [ 375.440004][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 375.480919][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.510625][T15375] netlink: 'syz.1.2570': attribute type 1 has an invalid length. [ 375.552842][T15368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.896071][T15388] veth5: entered promiscuous mode [ 376.177112][T15407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2577'. [ 376.232726][T15407] netlink: 'syz.4.2577': attribute type 7 has an invalid length. [ 376.520891][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.673660][T15423] bridge0: port 1(vlan2) entered blocking state [ 376.710942][T15431] netlink: 'syz.1.2585': attribute type 10 has an invalid length. [ 376.729638][T15423] bridge0: port 1(vlan2) entered disabled state [ 376.736777][T15431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2585'. [ 376.752408][T15423] vlan2: entered allmulticast mode [ 376.770379][T15423] geneve0: entered allmulticast mode [ 376.844129][T15428] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 376.896688][T15428] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 376.983772][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2587'. [ 377.070166][T15437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2587'. [ 377.227165][T15452] xt_hashlimit: size too large, truncated to 1048576 [ 377.246717][T15451] nbd: must specify an index to disconnect [ 377.560869][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.666944][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2596'. [ 377.896195][T15479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2598'. [ 378.328994][T15491] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 378.398695][T15496] sock: sock_timestamping_bind_phc: sock not bind to device [ 378.528122][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.600907][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.049171][T15524] x_tables: duplicate underflow at hook 3 [ 379.425545][T15542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2614'. [ 379.496949][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'. [ 379.564697][T15548] netlink: 'syz.2.2617': attribute type 10 has an invalid length. [ 379.640943][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.718623][T15548] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.764179][T15548] .`: (slave team0): Enslaving as an active interface with a down link [ 380.114621][T15578] netlink: 'syz.1.2623': attribute type 9 has an invalid length. [ 380.118663][T15565] xt_CT: No such helper "snmp" [ 380.277466][T15565] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 380.326228][T15583] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2624'. [ 380.368907][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'. [ 380.680931][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.737843][T15609] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 381.270047][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2633'. [ 381.280683][T15633] sock: sock_set_timeout: `syz.5.2635' (pid 15633) tries to set negative timeout [ 381.334247][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2633'. [ 381.722008][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.876026][T15647] macsec1: entered promiscuous mode [ 381.885682][T15647] bridge0: entered promiscuous mode [ 381.892165][T15647] macsec1: entered allmulticast mode [ 381.897895][T15647] bridge0: entered allmulticast mode [ 381.906128][T15647] bridge0: port 2(macsec1) entered blocking state [ 381.918322][T15647] bridge0: port 2(macsec1) entered disabled state [ 381.933061][T15647] bridge0: left allmulticast mode [ 381.974889][T12204] bridge0: left promiscuous mode [ 382.297777][T15674] netlink: 'syz.5.2646': attribute type 3 has an invalid length. [ 382.387498][T15680] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 382.490714][T15680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.642067][T15696] __nla_validate_parse: 4 callbacks suppressed [ 382.642084][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 382.660221][T15697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2651'. [ 382.672894][T15697] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 382.695336][T15697] syzkaller0: entered promiscuous mode [ 382.701544][T15697] syzkaller0: entered allmulticast mode [ 382.760980][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.888150][T15702] ipt_ECN: cannot use operation on non-tcp rule [ 382.980789][T15667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.773811][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 383.800824][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.819807][T15733] netlink: 'syz.2.2664': attribute type 5 has an invalid length. [ 383.850250][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2664'. [ 383.877991][T15737] tipc: Enabling of bearer rejected, failed to enable media [ 384.096761][T15748] netlink: 'syz.1.2669': attribute type 9 has an invalid length. [ 384.119832][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'. [ 384.235253][T15748] netlink: 'syz.1.2669': attribute type 9 has an invalid length. [ 384.245968][ T201] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.291192][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'. [ 384.311947][ T201] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.326052][T15764] netlink: 'syz.5.2672': attribute type 1 has an invalid length. [ 384.348947][ T201] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.403133][T15768] netlink: 'syz.5.2672': attribute type 2 has an invalid length. [ 384.530367][T15764] bond3: entered promiscuous mode [ 384.545109][T15764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.585094][ T6801] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.671650][T15784] validate_nla: 1 callbacks suppressed [ 384.671669][T15784] netlink: 'syz.2.2674': attribute type 10 has an invalid length. [ 384.692653][T15768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.716086][T15768] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 384.748396][T15768] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 384.812498][T15768] bond3: (slave ip6gre1): making interface the new active one [ 384.820319][T15768] ip6gre1: entered promiscuous mode [ 384.840822][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.853591][T15768] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 384.984882][T15776] bond17: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 384.997992][T15776] bond17 (unregistering): Released all slaves [ 385.027196][T15793] netlink: 'syz.0.2680': attribute type 1 has an invalid length. [ 385.082551][T15782] bond16: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 385.095547][T15784] syz_tun: entered promiscuous mode [ 385.128497][T15784] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 385.173372][T15785] pim6reg: entered allmulticast mode [ 385.224606][T15786] bridge7: entered promiscuous mode [ 385.282452][T15786] bond16: (slave bridge7): making interface the new active one [ 385.297109][T15786] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 385.378415][T15793] bond5: entered promiscuous mode [ 385.397650][T15793] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.489543][T15795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.513094][T15795] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 385.524208][T15795] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 385.545774][T15795] bond5: (slave ip6gre1): making interface the new active one [ 385.554521][T15795] ip6gre1: entered promiscuous mode [ 385.562984][T15795] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 385.580127][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 385.601184][T15810] xt_l2tp: invalid flags combination: 0 [ 385.758639][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2687'. [ 385.822947][T15824] netlink: Conntrack attr has 12 unknown bytes [ 385.829362][T15824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.842284][T15824] netlink: 868 bytes leftover after parsing attributes in process `syz.2.2691'. [ 385.880942][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.055826][T15836] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2694'. [ 386.467572][T15855] syzkaller1: entered promiscuous mode [ 386.493821][T15855] syzkaller1: entered allmulticast mode [ 386.513475][T15859] xt_hashlimit: size too large, truncated to 1048576 [ 386.920822][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.305659][T15899] netlink: Unknown conntrack attr (0) [ 387.779227][T15923] __nla_validate_parse: 6 callbacks suppressed [ 387.779247][T15923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2719'. [ 387.827267][T15925] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2718'. [ 387.960940][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.026661][T15936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2722'. [ 388.443061][T15969] netlink: 14463 bytes leftover after parsing attributes in process `syz.5.2726'. [ 388.728422][T15985] Can't find ip_set type [ 388.766157][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2735'. [ 388.863224][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 389.001130][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.019725][T15991] hsr_slave_1 (unregistering): left promiscuous mode [ 389.110481][T16007] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 389.351726][T16023] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2748'. [ 389.363490][T16019] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2743'. [ 389.379519][T16023] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2748'. [ 389.878391][T16053] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2752'. [ 390.041178][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.100643][T16060] bond6: (slave vlan1): Device is not bonding slave [ 390.108938][T16060] bond6: option active_slave: invalid value (vlan1) [ 390.119799][T16060] bond6 (unregistering): Released all slaves [ 390.477922][T16088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.622585][T16092] netlink: 'syz.2.2766': attribute type 4 has an invalid length. [ 390.668727][T16092] netlink: 'syz.2.2766': attribute type 4 has an invalid length. [ 390.863138][T16112] netlink: 'syz.4.2767': attribute type 1 has an invalid length. [ 391.080813][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.392459][T16144] team_slave_0: entered allmulticast mode [ 391.528096][T16151] netlink: 'syz.1.2781': attribute type 83 has an invalid length. [ 392.010280][T16182] dvmrp8: entered allmulticast mode [ 392.106356][T16188] netlink: 'syz.1.2791': attribute type 10 has an invalid length. [ 392.120926][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.132934][T16188] syz_tun: entered promiscuous mode [ 392.149421][T16188] : (slave syz_tun): Enslaving as an active interface with an up link [ 392.179948][T16188] netlink: 'syz.1.2791': attribute type 6 has an invalid length. [ 392.305125][T16204] netlink: 'syz.5.2794': attribute type 29 has an invalid length. [ 392.433367][T16208] Bluetooth: MGMT ver 1.23 [ 392.549836][T16218] netlink: 'syz.2.2799': attribute type 4 has an invalid length. [ 392.682905][T16223] xt_hashlimit: size too large, truncated to 1048576 [ 392.904680][T16241] openvswitch: netlink: IPv4 tun info is not correct [ 393.168120][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.206572][T16247] __nla_validate_parse: 59 callbacks suppressed [ 393.206592][T16247] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2807'. [ 393.274647][T16247] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2807'. [ 393.571736][T16276] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 393.663810][T16281] sch_fq: defrate 0 ignored. [ 393.893506][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 394.023965][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.036167][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.049385][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.058131][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.067572][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.200815][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.550498][T16323] netlink: 'syz.0.2827': attribute type 3 has an invalid length. [ 394.926484][ T5617] syz_tun (unregistering): left allmulticast mode [ 394.969526][ T5617] : (slave syz_tun): Releasing backup interface [ 395.240822][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.280630][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2835'. [ 395.525498][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'. [ 395.570313][ T1016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.616230][T16355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2836'. [ 395.717394][T16361] netlink: 'syz.0.2838': attribute type 1 has an invalid length. [ 395.762760][T16361] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2838'. [ 395.808094][T16361] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.2838'. [ 395.842372][T16376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2839'. [ 395.853843][ T1016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.876177][T16376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2839'. [ 395.975670][T16376] erspan0: entered promiscuous mode [ 395.997671][T16376] erspan0: left promiscuous mode [ 396.121457][ T5616] Bluetooth: hci2: command tx timeout [ 396.133220][ T1016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.273330][ T1016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.284091][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.339352][T16397] netlink: 'syz.2.2847': attribute type 24 has an invalid length. [ 396.347996][T16301] lo speed is unknown, defaulting to 1000 [ 396.723686][T16417] netlink: 'syz.5.2852': attribute type 8 has an invalid length. [ 396.741375][ T92] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.791818][ T6799] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.922712][ T48] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.984883][ T1016] team0: left allmulticast mode [ 397.006842][ T1016] team0: left promiscuous mode [ 397.032699][ T1016] bridge0: port 1(team0) entered disabled state [ 397.064013][T16429] netlink: 'syz.5.2855': attribute type 1 has an invalid length. [ 397.080971][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 397.134693][ T1016] pim6reg: left allmulticast mode [ 397.227267][T16438] netlink: 'syz.0.2856': attribute type 32 has an invalid length. [ 397.320834][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.555946][ T1016] bond6 (unregistering): (slave erspan1): Releasing active interface [ 397.564919][ T1016] erspan1 (unregistering): left promiscuous mode [ 397.603746][ T1016] bond4 (unregistering): (slave gretap1): Releasing active interface [ 397.738632][ T1016] team0: Port device bridge8 removed [ 397.749401][ T1016]  (unregistering): Released all slaves [ 397.765627][ T1016] bond1 (unregistering): Released all slaves [ 397.785861][ T1016] bond2 (unregistering): Released all slaves [ 397.807526][ T1016] bond3 (unregistering): Released all slaves [ 397.827693][ T1016] bond4 (unregistering): Released all slaves [ 397.849789][ T1016] bond0 (unregistering): Released all slaves [ 397.868336][ T1016] bond5 (unregistering): Released all slaves [ 397.890608][ T1016] bond6 (unregistering): Released all slaves [ 397.920690][ T1016] bond7 (unregistering): Released all slaves [ 397.937974][ T1016] bond8 (unregistering): Released all slaves [ 397.954910][ T1016] bond9 (unregistering): Released all slaves [ 397.986012][T16429] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 398.021204][ T201] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.201110][ T5616] Bluetooth: hci2: command tx timeout [ 398.361008][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 398.374499][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.421192][T16435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.500501][ T1016] tipc: Disabling bearer [ 398.517687][ T1016] tipc: Disabling bearer [ 398.541156][ T1016] tipc: Left network mode [ 398.802825][T16435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.997088][T16435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.297068][T16435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.330417][T16505] __nla_validate_parse: 2 callbacks suppressed [ 399.330438][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 399.400830][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.669302][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 399.707228][T16301] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.715448][T16301] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.727061][T16522] sock: sock_timestamping_bind_phc: sock not bind to device [ 399.735350][T16301] bridge_slave_0: entered allmulticast mode [ 399.748123][T16301] bridge_slave_0: entered promiscuous mode [ 399.760247][T16301] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.778128][T16301] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.785945][T16301] bridge_slave_1: entered allmulticast mode [ 399.794373][T16301] bridge_slave_1: entered promiscuous mode [ 400.030403][T16535] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2873'. [ 400.042566][T16301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.070267][T16535] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2873'. [ 400.084289][T16301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.173327][ T201] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.244245][T16544] openvswitch: netlink: Multiple metadata blocks provided [ 400.282684][ T5616] Bluetooth: hci2: command tx timeout [ 400.292092][ T6805] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.333080][ T6805] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.356871][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2878'. [ 400.399569][T16301] team0: Port device team_slave_0 added [ 400.440809][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.505542][T16301] team0: Port device team_slave_1 added [ 400.913079][T16571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.214825][ T6799] smc: removing ib device syz2 [ 401.436693][T16301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.444656][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.474165][T16301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.481007][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.514678][T16301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.523387][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.591903][T16301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.684191][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 401.757357][T16593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2888'. [ 401.768997][ T6805] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.868978][ T6799] smbdirect: ib_dev[syz2] removed [ 402.109495][T16301] hsr_slave_0: entered promiscuous mode [ 402.139708][T16301] hsr_slave_1: entered promiscuous mode [ 402.174787][T16604] : renamed from dummy0 (while UP) [ 402.297011][T16616] netlink: 'syz.2.2896': attribute type 22 has an invalid length. [ 402.314966][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 402.361225][ T5616] Bluetooth: hci2: command tx timeout [ 402.393387][T16619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2895'. [ 402.520972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.560814][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.704541][T16666] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2906'. [ 403.739387][T16658] batadv0: entered promiscuous mode [ 403.767271][T16658] macsec2: entered promiscuous mode [ 403.784839][T16658] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 403.814783][T16658] batadv0: left promiscuous mode [ 403.885443][T16671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2907'. [ 403.926429][T16671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2907'. [ 404.337647][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2911'. [ 404.393453][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 404.558681][T16301] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.599703][T16699] netlink: 'syz.4.2912': attribute type 2 has an invalid length. [ 404.607714][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.984185][T16301] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.063209][T16717] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2917'. [ 405.063434][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 405.209682][T16301] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.274673][T16717] netlink: 'syz.5.2917': attribute type 2 has an invalid length. [ 405.458246][T16301] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.640911][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.994436][ T1016] IPVS: stop unused estimator thread 0... [ 406.133090][T16763] netlink: 'syz.0.2925': attribute type 23 has an invalid length. [ 406.539098][T16774] netlink: 'syz.5.2930': attribute type 1 has an invalid length. [ 406.565945][T16774] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2930'. [ 406.588137][T16773] netlink: 'syz.4.2929': attribute type 1 has an invalid length. [ 406.673346][T16773] bond17: option mode: invalid value (9) [ 406.680921][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.692536][T16773] bond17 (unregistering): Released all slaves [ 406.971687][T16301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.023343][T16301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.044530][T16301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.094516][T16301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.128910][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2933'. [ 407.191092][T16301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.237005][T16301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.255816][T16804] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2934'. [ 407.295915][T16804] netlink: 'syz.5.2934': attribute type 1 has an invalid length. [ 407.305498][T16301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.369401][T16301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.687612][T16827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.721041][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.747085][T16824] bond17: entered promiscuous mode [ 407.765358][T16824] bond17: entered allmulticast mode [ 407.789209][T16824] 8021q: adding VLAN 0 to HW filter on device bond17 [ 407.844502][T16301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.907106][T16301] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.945030][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.952273][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.058997][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.066299][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.082290][T16845] FAULT_INJECTION: forcing a failure. [ 408.082290][T16845] name failslab, interval 1, probability 0, space 0, times 1 [ 408.112797][T16845] CPU: 0 UID: 0 PID: 16845 Comm: syz.5.2943 Not tainted syzkaller #0 PREEMPT(full) [ 408.112824][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.112843][T16845] Call Trace: [ 408.112851][T16845] [ 408.112859][T16845] dump_stack_lvl+0xe8/0x150 [ 408.112893][T16845] should_fail_ex+0x40c/0x560 [ 408.112922][T16845] should_failslab+0xa8/0x100 [ 408.112953][T16845] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 408.112978][T16845] ? skb_clone+0x212/0x3a0 [ 408.113000][T16845] ? skb_clone+0x212/0x3a0 [ 408.113029][T16845] skb_clone+0x212/0x3a0 [ 408.113055][T16845] __netlink_deliver_tap+0x413/0x860 [ 408.113091][T16845] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.113116][T16845] netlink_deliver_tap+0x19c/0x1b0 [ 408.113160][T16845] netlink_unicast+0x77f/0x940 [ 408.113191][T16845] netlink_sendmsg+0x813/0xb40 [ 408.113222][T16845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.113250][T16845] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.113274][T16845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.113295][T16845] sock_sendmsg_nosec+0x13a/0x180 [ 408.113324][T16845] ____sys_sendmsg+0x54e/0x850 [ 408.113350][T16845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.113380][T16845] ? import_iovec+0x73/0xa0 [ 408.113412][T16845] ___sys_sendmsg+0x2a5/0x360 [ 408.113432][T16845] ? __lock_acquire+0x683/0x2cf0 [ 408.113460][T16845] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.113511][T16845] ? __fget_files+0x2a/0x420 [ 408.113550][T16845] ? __fget_files+0x3a2/0x420 [ 408.113582][T16845] __x64_sys_sendmsg+0x1b1/0x290 [ 408.113607][T16845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.113648][T16845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.113667][T16845] do_syscall_64+0x174/0x580 [ 408.113689][T16845] ? trace_irq_disable+0x3b/0x140 [ 408.113713][T16845] ? clear_bhb_loop+0x70/0xc0 [ 408.113738][T16845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.113757][T16845] RIP: 0033:0x7f516a19e0d9 [ 408.113784][T16845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.113801][T16845] RSP: 002b:00007f516afd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.113823][T16845] RAX: ffffffffffffffda RBX: 00007f516a425fa0 RCX: 00007f516a19e0d9 [ 408.113836][T16845] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 408.113848][T16845] RBP: 00007f516afd7090 R08: 0000000000000000 R09: 0000000000000000 [ 408.113859][T16845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.113870][T16845] R13: 00007f516a426038 R14: 00007f516a425fa0 R15: 00007ffe57901d38 [ 408.113897][T16845] [ 408.617648][T16855] netlink: 'syz.5.2945': attribute type 12 has an invalid length. [ 408.760864][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.818544][T16855] bond5: option primary_reselect: invalid value (114) [ 408.877503][T16855] bond5 (unregistering): Released all slaves [ 409.179404][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 409.463952][T16913] netlink: 'syz.5.2954': attribute type 23 has an invalid length. [ 409.525118][T16900] dvmrp8: entered allmulticast mode [ 409.607969][T16918] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2958'. [ 409.800860][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.885143][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.956147][T16301] veth0_vlan: entered promiscuous mode [ 409.986331][T16301] veth1_vlan: entered promiscuous mode [ 410.028711][T16301] veth0_macvtap: entered promiscuous mode [ 410.045984][T16301] veth1_macvtap: entered promiscuous mode [ 410.076997][T16301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.098235][T16301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.131236][ T201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.202438][ T6801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.276228][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.288985][ T6805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.305377][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.317781][ T6805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.362549][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.375402][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.840955][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.881012][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.920948][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.961003][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.000867][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.040906][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.080832][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.120832][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.160833][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.200887][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.240954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.280854][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.321660][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.360917][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.400845][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.440848][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.480841][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.520885][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.560851][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.361071][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 430.600812][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.640909][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.680923][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.720916][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.760965][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.800844][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.840828][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.880835][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.920902][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.224448][T16981] 8021q: VLANs not supported on syzkaller1 [ 439.576707][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.586554][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.596012][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.607932][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.619662][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.657885][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.962551][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.966676][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.106861][T17019] netlink: 'syz.2.2967': attribute type 11 has an invalid length. [ 440.438280][T17027] x_tables: duplicate underflow at hook 3 [ 440.454748][T17027] x_tables: duplicate underflow at hook 1 [ 440.530559][T16999] lo speed is unknown, defaulting to 1000 [ 440.644089][T17038] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2975'. [ 440.673892][T17038] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2975'. [ 440.684168][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.741846][T17040] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2976'. [ 441.000793][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.011635][T17059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2980'. [ 441.028356][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 441.090276][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2978'. [ 441.127324][T17062] netlink: 'syz.5.2978': attribute type 16 has an invalid length. [ 441.204519][T17065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.297853][T17081] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 441.592712][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.609788][T16999] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.642701][T16999] bridge_slave_0: entered allmulticast mode [ 441.660031][T16999] bridge_slave_0: entered promiscuous mode [ 441.722345][ T5616] Bluetooth: hci3: command tx timeout [ 441.737753][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.776890][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.785796][T16999] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.793971][T16999] bridge_slave_1: entered allmulticast mode [ 441.802472][T16999] bridge_slave_1: entered promiscuous mode [ 441.822270][T17113] netlink: 'syz.5.2990': attribute type 1 has an invalid length. [ 441.851997][T17113] netlink: 'syz.5.2990': attribute type 7 has an invalid length. [ 441.868755][T17113] netlink: 'syz.5.2990': attribute type 8 has an invalid length. [ 441.899974][T17113] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2990'. [ 441.925051][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.942418][T17113] NCSI netlink: No device for ifindex 65584 [ 441.989532][T17115] veth9: entered allmulticast mode [ 442.012635][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.041881][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.110539][T16999] team0: Port device team_slave_0 added [ 442.122805][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.145130][T16999] team0: Port device team_slave_1 added [ 442.207169][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.235276][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.281150][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.334216][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.366350][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.442513][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.616304][T16999] hsr_slave_0: entered promiscuous mode [ 442.645650][T16999] hsr_slave_1: entered promiscuous mode [ 442.666576][T16999] debugfs: 'hsr0' already exists in 'hsr' [ 442.689303][T16999] Cannot create hsr debugfs directory [ 442.752060][T17148] netlink: 'syz.5.3000': attribute type 10 has an invalid length. [ 442.777546][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.781318][T17148] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3000'. [ 442.801679][T12203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.813471][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.861901][T17148] team0: entered allmulticast mode [ 442.880687][T17148] team_slave_0: entered allmulticast mode [ 442.901597][T17148] team_slave_1: entered allmulticast mode [ 442.920125][T17148] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 443.080803][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.172830][T12203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.248279][T16999] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.395663][T16999] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.522330][T16999] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.592593][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3015'. [ 443.615884][T17185] hsr_slave_0: left promiscuous mode [ 443.700235][T16999] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.748192][T17192] batman_adv: batadv0: Adding interface: veth0 [ 443.762627][T17192] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.814226][ T5616] Bluetooth: hci3: command tx timeout [ 443.832125][T17192] batman_adv: batadv0: Interface activated: veth0 [ 443.882042][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.886779][T17192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.921426][T17192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.939100][T17192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.951319][T17192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.973008][T17192] batman_adv: batadv0: Interface deactivated: veth0 [ 443.989140][T17192] batman_adv: batadv0: Removing interface: veth0 [ 444.122136][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.330070][T17216] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 444.348174][T17217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3026'. [ 444.438693][T17217] 8021q: adding VLAN 0 to HW filter on device team1 [ 444.615883][T16999] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.665803][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.692012][T16999] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.738219][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.753010][T17217] syzkaller1: entered promiscuous mode [ 444.761366][T17217] syzkaller1: entered allmulticast mode [ 444.776489][T16999] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.806501][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.897094][T16999] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.927097][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.030676][T17253] xt_ecn: cannot match TCP bits for non-tcp packets [ 445.276090][T17266] pim6reg1: entered promiscuous mode [ 445.288873][T17266] pim6reg1: entered allmulticast mode [ 445.331669][T16999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.486475][T16999] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.528140][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.535366][ T6801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.605609][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.614107][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.877192][T17295] tipc: Failed to remove unknown binding: 66,1,1/247079944:3161297889/3161297891 [ 445.886823][T17292] __nla_validate_parse: 5 callbacks suppressed [ 445.886840][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3045'. [ 445.911204][ T5616] Bluetooth: hci3: command tx timeout [ 446.031467][T17292] team0: Port device team_slave_0 removed [ 446.172241][T17313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3049'. [ 446.598165][T17334] 8021q: VLANs not supported on sit0 [ 446.712051][T17340] netlink: 'syz.1.3056': attribute type 4 has an invalid length. [ 446.748545][T17340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3056'. [ 446.788739][T17340] .`: renamed from bond0 (while UP) [ 446.948749][T17351] netlink: 'syz.5.3059': attribute type 1 has an invalid length. [ 446.976954][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.095959][T17351] bond5: entered promiscuous mode [ 447.110173][T17351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.175242][T17366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.194263][T17366] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 447.205346][T17366] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 447.233883][T17366] bond5: (slave wireguard0): making interface the new active one [ 447.240975][ C1] net_ratelimit: 14 callbacks suppressed [ 447.241032][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.256992][T17366] wireguard0: entered promiscuous mode [ 447.272957][T17366] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 447.345136][T17375] netlink: 'syz.2.3062': attribute type 2 has an invalid length. [ 447.376705][T17375] netlink: 'syz.2.3062': attribute type 1 has an invalid length. [ 447.428247][T17378] netlink: 'syz.4.3064': attribute type 1 has an invalid length. [ 447.495058][T16999] veth0_vlan: entered promiscuous mode [ 447.553948][T16999] veth1_vlan: entered promiscuous mode [ 447.605359][T17382] openvswitch: netlink: IP tunnel TTL not specified. [ 447.643960][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 447.688355][T16999] veth0_macvtap: entered promiscuous mode [ 447.727229][T16999] veth1_macvtap: entered promiscuous mode [ 447.838219][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3068'. [ 447.849282][T16999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.889474][T16999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.921543][T17401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3071'. [ 447.960956][ T92] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.012188][ T92] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.033539][T17407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.072556][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.101666][ T6801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.141332][ T6799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.205036][T12203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.281435][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.513233][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.550092][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.564192][T17413] syzkaller1: entered promiscuous mode [ 448.578365][T17413] syzkaller1: entered allmulticast mode [ 448.605300][T17426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.753432][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.769604][T17431] tipc: Enabling of bearer rejected, failed to enable media [ 448.787771][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.087744][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.248227][T17445] netlink: 'syz.5.3083': attribute type 10 has an invalid length. [ 449.322396][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.459960][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.474151][T17460] openvswitch: netlink: IPv4 tun info is not correct [ 449.479635][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.489700][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.499461][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.507590][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.535981][T17460] Bluetooth: MGMT ver 1.23 [ 449.857164][T17465] netlink: 'syz.4.3089': attribute type 2 has an invalid length. [ 449.905720][T17466] gre4: entered promiscuous mode [ 450.008719][ T5620] .`: (slave syz_tun): Releasing backup interface [ 450.419340][ T92] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.455569][ T92] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.486805][ T92] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 450.525198][ T92] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 450.893788][ T92] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.905557][ T92] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.919211][ T92] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 450.930484][ T92] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 451.052089][T17518] ip6erspan0: entered allmulticast mode [ 451.186296][T17531] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3099'. [ 451.387204][ T92] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.428962][ T92] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.456849][ T92] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 451.493946][ T92] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 451.561909][ T5616] Bluetooth: hci0: command tx timeout [ 451.615004][T17461] lo speed is unknown, defaulting to 1000 [ 451.919401][ T92] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.956172][ T92] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.981164][ T92] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 452.021702][ T92] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 452.771625][T17603] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 452.797300][T10836] net_ratelimit: 13 callbacks suppressed [ 452.797318][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.170338][ T92] veth0: left allmulticast mode [ 453.177052][ T92] veth0: left promiscuous mode [ 453.182961][ T92] bridge0: port 1(veth0) entered disabled state [ 453.258850][ T92] dvmrp8: left allmulticast mode [ 453.265784][T12201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.275656][ T92] pimreg3: left allmulticast mode [ 453.400657][T17629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.642021][ T5616] Bluetooth: hci0: command tx timeout [ 453.682391][ T92] bond8 (unregistering): (slave gretap1): Releasing active interface [ 453.764662][ T92] bond7 (unregistering): (slave geneve3): Releasing active interface [ 453.854388][ T92] bond13 (unregistering): (slave bridge4): Releasing backup interface [ 453.863634][ T92] bridge4 (unregistering): left promiscuous mode [ 453.876089][ T92] bond14 (unregistering): (slave bridge5): Releasing backup interface [ 453.889275][ T92] bridge5 (unregistering): left promiscuous mode [ 453.897307][ T92] bridge5 (unregistering): left allmulticast mode [ 453.923616][ T92] .` (unregistering): (slave team0): Releasing backup interface [ 453.933194][ T92] .` (unregistering): Released all slaves [ 453.945365][ T92] bond1 (unregistering): Released all slaves [ 453.966633][ T92] bond2 (unregistering): Released all slaves [ 453.992066][ T92] bond3 (unregistering): Released all slaves [ 454.009806][ T92] bond4 (unregistering): Released all slaves [ 454.029309][ T92] bond5 (unregistering): Released all slaves [ 454.058597][ T92] bond6 (unregistering): Released all slaves [ 454.076946][ T92] bond7 (unregistering): Released all slaves [ 454.096916][ T92] bond8 (unregistering): Released all slaves [ 454.130488][ T92] bond9 (unregistering): Released all slaves [ 454.263286][ T92] bond0 (unregistering): (slave bond12): Releasing active interface [ 454.275191][ T92] bond0 (unregistering): Released all slaves [ 454.283626][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.301652][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.312725][ T92] bond10 (unregistering): Released all slaves [ 454.360593][ T92] bond11 (unregistering): (slave veth5): Releasing active interface [ 454.371172][ T92] batadv1: entered promiscuous mode [ 454.384550][ T92] bond11 (unregistering): (slave batadv1): Releasing active interface [ 454.396463][ T92] bond11 (unregistering): Released all slaves [ 454.420110][ T92] bond12 (unregistering): Released all slaves [ 454.456771][ T92] bond13 (unregistering): Released all slaves [ 454.481976][ T92] bond14 (unregistering): Released all slaves [ 454.486741][T17637] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3124'. [ 454.512001][ T92] bond15 (unregistering): Released all slaves [ 454.608474][T10836] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 454.629195][T17611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.811057][ T6805] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.819792][T10836] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 454.842623][ T6799] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.863720][ T92] tipc: Disabling bearer [ 454.900516][ T92] tipc: Left network mode [ 454.914804][ T201] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.954825][ T201] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.391533][T12201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.683113][T17678] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 455.710957][T17678] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3132'. [ 455.895828][T17682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3133'. [ 456.051925][T17691] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3135'. [ 456.077520][T17698] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.139688][T17704] netlink: 'syz.0.3136': attribute type 21 has an invalid length. [ 456.169670][T17461] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.178646][T17461] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.186670][T17461] bridge_slave_0: entered allmulticast mode [ 456.205020][T17461] bridge_slave_0: entered promiscuous mode [ 456.273761][T17704] netlink: 'syz.0.3136': attribute type 6 has an invalid length. [ 456.296569][T17704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3136'. [ 456.319633][T17461] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.334631][T17461] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.363449][T17461] bridge_slave_1: entered allmulticast mode [ 456.395151][T17461] bridge_slave_1: entered promiscuous mode [ 456.453064][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.627959][T17461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.670057][T17461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.767167][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 456.783781][T17461] team0: Port device team_slave_0 added [ 456.793993][T17461] team0: Port device team_slave_1 added [ 456.831437][ T92] hsr_slave_0: left promiscuous mode [ 456.840354][ T92] veth0_macvtap: left promiscuous mode [ 456.847482][ T92] veth1_vlan: left promiscuous mode [ 456.853479][ T92] veth0_vlan: left promiscuous mode [ 457.233148][ T201] smbdirect: ib_dev[syz0] removed [ 457.264292][T17461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.272715][T17461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.299124][T17461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.327952][T17461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.340368][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.343542][T17461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.379128][T17461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.476569][T17461] hsr_slave_0: entered promiscuous mode [ 457.488355][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.504850][T17461] hsr_slave_1: entered promiscuous mode [ 457.511730][T17461] debugfs: 'hsr0' already exists in 'hsr' [ 457.517530][T17461] Cannot create hsr debugfs directory [ 457.659934][ T92] IPVS: stop unused estimator thread 0... [ 457.783998][T17461] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.897773][T17461] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.006359][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 458.063181][T17461] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.154904][T17461] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.343091][T17461] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.354046][T17461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.369696][T17461] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.382816][T17461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.394842][T17461] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.408672][T17461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.417989][T17461] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.433550][T17461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.530126][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.556255][T17461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.579661][T17461] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.593398][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.600550][ T6801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.624012][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.631215][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.193746][T17461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.260319][T17461] veth0_vlan: entered promiscuous mode [ 459.279260][T17461] veth1_vlan: entered promiscuous mode [ 459.326589][T17461] veth0_macvtap: entered promiscuous mode [ 459.340251][T17461] veth1_macvtap: entered promiscuous mode [ 459.364560][T17461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.383493][T17461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.433236][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.453700][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.548678][ T6801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.563867][ T92] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.575718][ T6801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.583247][ T92] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.597628][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.646033][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.655176][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.749545][T17781] netlink: 'syz.2.3084': attribute type 1 has an invalid length. [ 459.759447][T17781] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3084'. [ 459.772486][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 460.375325][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.607080][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.646427][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.362320][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.694181][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.402282][T12202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.722974][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.766473][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.805096][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.441503][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.845496][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.886239][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.924365][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.482124][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.966114][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.006019][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.966496][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.045121][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.521296][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.084725][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.125817][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.166137][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.562117][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.801384][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 476.204961][T12205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.245399][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.285269][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.601263][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.214577][T17879] netlink: 'syz.2.3139': attribute type 2 has an invalid length. [ 479.226260][T17884] netlink: 'syz.1.3138': attribute type 2 has an invalid length. [ 479.272564][T17879] netlink: 'syz.2.3139': attribute type 2 has an invalid length. [ 479.326331][T12206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.590160][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3140'. [ 479.777878][T17901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3144'. [ 480.002553][T17914] wg1: entered promiscuous mode [ 480.009073][T17914] wg1: entered allmulticast mode [ 480.168439][T17916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3149'. [ 480.186761][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.219885][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.243072][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.254512][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.264024][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.369418][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.510607][ T29] audit: type=1107 audit(1787188109.268:6): pid=17929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\2eb9JJCl3խA̓ ^gD4Znտ:XOǘjŤO7{vH4>R~TBi~dRƷ@žٶ3[i ~<7H(ez ~jϛ׹<&LH~-ԅ' [ 480.654332][ T1016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.668499][T17936] netlink: 'syz.2.3152': attribute type 11 has an invalid length. [ 480.718350][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 480.744188][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3154'. [ 480.776137][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 480.790890][T17941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3154'. [ 480.833317][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 480.852241][T17943] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3155'. [ 480.893920][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3154'. [ 481.063940][ T1016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.096530][ T1016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 481.125150][ T1016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.150816][ T48] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.194948][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.230381][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.281857][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.412837][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.472441][ T1016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.515882][ T1016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 481.555301][ T1016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.575678][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.645160][T10836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.666307][T17963] syzkaller1: entered promiscuous mode [ 481.674079][T17963] syzkaller1: entered allmulticast mode [ 481.782558][T17980] netlink: 'syz.2.3161': attribute type 10 has an invalid length. [ 481.820058][ T1016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.847222][ T1016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 481.865882][T17987] netlink: 'syz.2.3161': attribute type 10 has an invalid length. [ 481.881409][ T5610] Bluetooth: hci0: command 0x0419 tx timeout [ 481.886024][ T1016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.002995][T17980] team0: Port device dummy0 added [ 482.049466][T17987] team0: Port device dummy0 removed [ 482.127568][T17996] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.135707][T17996] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.143666][T17996] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.151618][T17996] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.159539][T17996] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.258351][T18000] veth1_to_bond: entered allmulticast mode [ 482.265664][T18000] veth1_to_bond: entered promiscuous mode [ 482.320363][T17999] veth1_to_bond: left promiscuous mode [ 482.342219][T17999] veth1_to_bond: left allmulticast mode [ 482.362638][ T5616] Bluetooth: hci4: command tx timeout [ 482.621358][ T92] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.676793][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.853966][ T13] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.903468][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.951708][ T1016] vlan2: left allmulticast mode [ 482.963950][ T1016] geneve0: left allmulticast mode [ 482.976937][ T1016] bridge0: port 1(vlan2) entered disabled state [ 483.035177][ T1016] dvmrp8: left allmulticast mode [ 483.441689][ T1016] bond3 (unregistering): (slave gretap1): Releasing active interface [ 483.606077][ T1016] bond16 (unregistering): (slave bridge7): Releasing backup interface [ 483.623925][ T1016] bond0 (unregistering): Released all slaves [ 483.641036][ T1016] bond1 (unregistering): Released all slaves [ 483.657133][ T1016] bond2 (unregistering): Released all slaves [ 483.675293][ T1016] bond3 (unregistering): Released all slaves [ 483.699676][ T1016] bond4 (unregistering): Released all slaves [ 483.715725][ T1016] bond5 (unregistering): Released all slaves [ 483.742391][ T1016] bond6 (unregistering): Released all slaves [ 483.759335][ T1016] bond7 (unregistering): Released all slaves [ 483.775594][ T1016] bond8 (unregistering): Released all slaves [ 483.792550][ T1016] bond9 (unregistering): Released all slaves [ 483.810519][ T1016] bond10 (unregistering): Released all slaves [ 483.845782][ T1016] bond11 (unregistering): Released all slaves [ 483.864494][ T1016] bond12 (unregistering): Released all slaves [ 483.880060][ T1016] bond13 (unregistering): Released all slaves [ 483.895935][ T1016] bond14 (unregistering): Released all slaves [ 483.911804][ T1016] bond15 (unregistering): Released all slaves [ 483.927259][ T1016] bond16 (unregistering): Released all slaves [ 483.943742][ T1016] bond17 (unregistering): Released all slaves [ 483.966918][ T5616] Bluetooth: hci0: command 0x0419 tx timeout [ 484.015451][T18034] bridge_slave_1: left allmulticast mode [ 484.035381][T18034] bridge_slave_1: left promiscuous mode [ 484.068485][T18034] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.126385][T18034] bridge_slave_0: left allmulticast mode [ 484.141184][T18034] bridge_slave_0: left promiscuous mode [ 484.171090][T18034] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.369428][ T1016] : left promiscuous mode [ 484.455379][ T5616] Bluetooth: hci4: command tx timeout [ 484.655135][T18059] vlan0: entered promiscuous mode [ 484.719843][ T1016] tipc: Left network mode [ 484.843090][T18071] __nla_validate_parse: 3 callbacks suppressed [ 484.843132][T18071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3183'. [ 484.892564][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 485.114878][T18050] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 485.158037][T18050] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 485.218009][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 485.254992][T18088] net_ratelimit: 50 callbacks suppressed [ 485.255062][T18088] openvswitch: netlink: Missing key (keys=40, expected=100) [ 485.491854][T18050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.514735][T18050] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 485.776159][T17898] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.785697][T17898] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.794452][T17898] bridge_slave_0: entered allmulticast mode [ 485.802454][T17898] bridge_slave_0: entered promiscuous mode [ 485.814155][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 485.840128][T18050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.842019][T17898] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.851042][T18050] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 485.878938][T17898] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.903081][T17898] bridge_slave_1: entered allmulticast mode [ 485.912280][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'. [ 485.928227][T17898] bridge_slave_1: entered promiscuous mode [ 485.989726][T18050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 486.008043][T18050] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 486.051771][ C0] ------------[ cut here ]------------ [ 486.057611][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 486.064554][ C0] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd4a/0x10a0, CPU#0: syz.1.3194/18117 [ 486.074470][ C0] Modules linked in: [ 486.078625][ C0] CPU: 0 UID: 0 PID: 18117 Comm: syz.1.3194 Not tainted syzkaller #0 PREEMPT(full) [ 486.088102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.098186][ C0] RIP: 0010:__queue_work+0xd66/0x10a0 [ 486.103657][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 f6 e0 cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 24 c3 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 486.123308][ C0] RSP: 0000:ffffc90000007bc8 EFLAGS: 00010046 [ 486.129430][ C0] RAX: 1ffff1100b05614e RBX: dffffc0000000000 RCX: ffff888055b3be00 [ 486.137424][ C0] RDX: ffff88807702f170 RSI: ffffffff8ac3dd30 RDI: ffffffff905abb50 [ 486.145418][ C0] RBP: 0000000000000100 R08: ffffffff90578f37 R09: 1ffffffff20af1e6 [ 486.153403][ C0] R10: dffffc0000000000 R11: ffffffff818de180 R12: 0000000000000008 [ 486.161396][ C0] R13: ffff8880582b0a58 R14: ffffffff905abb50 R15: ffff88807702f170 [ 486.169394][ C0] FS: 000055558387a500(0000) GS:ffff888124f49000(0000) knlGS:0000000000000000 [ 486.178357][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.184953][ C0] CR2: 0000200000000040 CR3: 0000000049eb8000 CR4: 00000000003526f0 [ 486.192947][ C0] Call Trace: [ 486.196329][ C0] [ 486.199226][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.204678][ C0] call_timer_fn+0x192/0x5e0 [ 486.209326][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 486.215155][ C0] ? call_timer_fn+0xd4/0x5e0 [ 486.219856][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 486.224996][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 486.230126][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 486.235955][ C0] __run_timer_base+0x67e/0x8b0 [ 486.240827][ C0] ? ktime_get+0x45/0x220 [ 486.245185][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 486.250585][ C0] ? ktime_get+0x1f5/0x220 [ 486.255022][ C0] ? lapic_next_event+0x11/0x20 [ 486.259928][ C0] run_timer_softirq+0xb7/0x170 [ 486.264803][ C0] handle_softirqs+0x225/0x840 [ 486.269587][ C0] ? __irq_exit_rcu+0xca/0x220 [ 486.274371][ C0] __irq_exit_rcu+0xca/0x220 [ 486.278976][ C0] irq_exit_rcu+0x9/0x30 [ 486.283233][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 486.288968][ C0] [ 486.291906][ C0] [ 486.294894][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.300935][ C0] RIP: 0010:__refill_objects_node+0x41a/0x600 [ 486.307036][ C0] Code: 00 00 41 0f b7 c7 41 39 f4 41 0f 92 c7 29 c3 74 64 41 39 f4 73 5f 44 89 e0 48 ff c0 89 d9 4d 89 6c c0 f8 8b 57 28 4a 8b 14 2a <66> 90 4c 39 f0 41 0f 92 c7 41 ff c4 89 cb ff cb 74 3f 49 89 d5 4c [ 486.326654][ C0] RSP: 0000:ffffc90002e7f850 EFLAGS: 00000203 [ 486.332743][ C0] RAX: 000000000000003b RBX: 0000000000000007 RCX: 0000000000000007 [ 486.340727][ C0] RDX: ffff8880587e57e0 RSI: 000000000000003c RDI: ffff88801b00b780 [ 486.348713][ C0] RBP: ffffc90002e7f920 R08: ffff88801b028c20 R09: ffffea000161f950 [ 486.356693][ C0] R10: dffffc0000000000 R11: fffffbfff20af1e7 R12: 000000000000003a [ 486.364680][ C0] R13: ffff8880587e5660 R14: 000000000000003c R15: 00000008002a0001 [ 486.372688][ C0] ? percpu_ref_get_many+0x19/0x140 [ 486.377943][ C0] refill_objects+0x56/0x350 [ 486.382576][ C0] __pcs_replace_empty_main+0x2bf/0x6b0 [ 486.388154][ C0] kmem_cache_alloc_noprof+0x382/0x5f0 [ 486.393653][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 486.399306][ C0] ? ptlock_alloc+0x20/0x70 [ 486.403836][ C0] ? ptlock_alloc+0x20/0x70 [ 486.408365][ C0] ptlock_alloc+0x20/0x70 [ 486.412729][ C0] pte_alloc_one+0x7a/0x370 [ 486.417275][ C0] __pte_alloc+0x25/0x1a0 [ 486.421625][ C0] do_pte_missing+0x2db7/0x34b0 [ 486.426505][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 486.431662][ C0] ? __pmd_alloc+0x40a/0x5c0 [ 486.436309][ C0] handle_mm_fault+0x1b36/0x3080 [ 486.441278][ C0] ? handle_mm_fault+0xec/0x3080 [ 486.446234][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 486.451534][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 486.456768][ C0] do_user_addr_fault+0xa4d/0x1340 [ 486.461925][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 486.467327][ C0] exc_page_fault+0x6a/0xc0 [ 486.471852][ C0] asm_exc_page_fault+0x26/0x30 [ 486.476717][ C0] RIP: 0033:0x7f8e22f6cf98 [ 486.481145][ C0] Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 [ 486.500767][ C0] RSP: 002b:00007fff5c49a2e8 EFLAGS: 00010246 [ 486.506869][ C0] RAX: 0000200000000040 RBX: 0000000000000004 RCX: 006c6f6f74687465 [ 486.514858][ C0] RDX: 0000000000000008 RSI: 006c6f6f74687465 RDI: 0000200000000040 [ 486.522846][ C0] RBP: fffffffffffffffe R08: 0000001b2e220000 R09: 0000000000000001 [ 486.530852][ C0] R10: 7ffffffffffffff7 R11: 0000000000000009 R12: 0000000000000000 [ 486.538845][ C0] R13: 0000000000000000 R14: 0000000000076a6f R15: 00007fff5c49a580 [ 486.546857][ C0] [ 486.549928][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.557235][ C0] CPU: 0 UID: 0 PID: 18117 Comm: syz.1.3194 Not tainted syzkaller #0 PREEMPT(full) [ 486.566616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.576762][ C0] Call Trace: [ 486.580073][ C0] [ 486.582937][ C0] vpanic+0x56c/0xa60 [ 486.586982][ C0] ? __pfx__printk+0x10/0x10 [ 486.591594][ C0] ? __pfx_vpanic+0x10/0x10 [ 486.596129][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 486.601465][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 486.606709][ C0] panic+0xc5/0xd0 [ 486.610459][ C0] ? __pfx_panic+0x10/0x10 [ 486.614908][ C0] __warn+0x315/0x4c0 [ 486.618908][ C0] ? __queue_work+0xd4a/0x10a0 [ 486.623698][ C0] ? __queue_work+0xd4a/0x10a0 [ 486.628494][ C0] __report_bug+0x276/0x570 [ 486.633141][ C0] ? __queue_work+0xd4a/0x10a0 [ 486.637930][ C0] ? __pfx___report_bug+0x10/0x10 [ 486.642981][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 486.648289][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.653338][ C0] ? look_up_lock_class+0x57/0x110 [ 486.658466][ C0] ? register_lock_class+0x31/0x2e0 [ 486.663685][ C0] report_bug_entry+0x19a/0x290 [ 486.668574][ C0] ? __queue_work+0xd66/0x10a0 [ 486.673360][ C0] ? __queue_work+0xd6b/0x10a0 [ 486.678153][ C0] handle_bug+0xce/0x200 [ 486.682483][ C0] exc_invalid_op+0x1a/0x50 [ 486.687015][ C0] asm_exc_invalid_op+0x1a/0x20 [ 486.691931][ C0] RIP: 0010:__queue_work+0xd66/0x10a0 [ 486.697334][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 f6 e0 cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 24 c3 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 486.716968][ C0] RSP: 0000:ffffc90000007bc8 EFLAGS: 00010046 [ 486.723051][ C0] RAX: 1ffff1100b05614e RBX: dffffc0000000000 RCX: ffff888055b3be00 [ 486.731039][ C0] RDX: ffff88807702f170 RSI: ffffffff8ac3dd30 RDI: ffffffff905abb50 [ 486.739036][ C0] RBP: 0000000000000100 R08: ffffffff90578f37 R09: 1ffffffff20af1e6 [ 486.747026][ C0] R10: dffffc0000000000 R11: ffffffff818de180 R12: 0000000000000008 [ 486.755030][ C0] R13: ffff8880582b0a58 R14: ffffffff905abb50 R15: ffff88807702f170 [ 486.763027][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 486.768860][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 486.774171][ C0] ? __queue_work+0xd25/0x10a0 [ 486.778958][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.784355][ C0] call_timer_fn+0x192/0x5e0 [ 486.788987][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 486.794818][ C0] ? call_timer_fn+0xd4/0x5e0 [ 486.799513][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 486.804653][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 486.809787][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 486.815639][ C0] __run_timer_base+0x67e/0x8b0 [ 486.820547][ C0] ? ktime_get+0x45/0x220 [ 486.824905][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 486.830295][ C0] ? ktime_get+0x1f5/0x220 [ 486.834728][ C0] ? lapic_next_event+0x11/0x20 [ 486.839600][ C0] run_timer_softirq+0xb7/0x170 [ 486.844495][ C0] handle_softirqs+0x225/0x840 [ 486.849279][ C0] ? __irq_exit_rcu+0xca/0x220 [ 486.854074][ C0] __irq_exit_rcu+0xca/0x220 [ 486.858679][ C0] irq_exit_rcu+0x9/0x30 [ 486.862941][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 486.868598][ C0] [ 486.871536][ C0] [ 486.874502][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.880503][ C0] RIP: 0010:__refill_objects_node+0x41a/0x600 [ 486.886588][ C0] Code: 00 00 41 0f b7 c7 41 39 f4 41 0f 92 c7 29 c3 74 64 41 39 f4 73 5f 44 89 e0 48 ff c0 89 d9 4d 89 6c c0 f8 8b 57 28 4a 8b 14 2a <66> 90 4c 39 f0 41 0f 92 c7 41 ff c4 89 cb ff cb 74 3f 49 89 d5 4c [ 486.906210][ C0] RSP: 0000:ffffc90002e7f850 EFLAGS: 00000203 [ 486.912306][ C0] RAX: 000000000000003b RBX: 0000000000000007 RCX: 0000000000000007 [ 486.920294][ C0] RDX: ffff8880587e57e0 RSI: 000000000000003c RDI: ffff88801b00b780 [ 486.928279][ C0] RBP: ffffc90002e7f920 R08: ffff88801b028c20 R09: ffffea000161f950 [ 486.936272][ C0] R10: dffffc0000000000 R11: fffffbfff20af1e7 R12: 000000000000003a [ 486.944258][ C0] R13: ffff8880587e5660 R14: 000000000000003c R15: 00000008002a0001 [ 486.952262][ C0] ? percpu_ref_get_many+0x19/0x140 [ 486.957499][ C0] refill_objects+0x56/0x350 [ 486.962116][ C0] __pcs_replace_empty_main+0x2bf/0x6b0 [ 486.967698][ C0] kmem_cache_alloc_noprof+0x382/0x5f0 [ 486.973182][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 486.978830][ C0] ? ptlock_alloc+0x20/0x70 [ 486.983346][ C0] ? ptlock_alloc+0x20/0x70 [ 486.987876][ C0] ptlock_alloc+0x20/0x70 [ 486.992221][ C0] pte_alloc_one+0x7a/0x370 [ 486.996742][ C0] __pte_alloc+0x25/0x1a0 [ 487.001119][ C0] do_pte_missing+0x2db7/0x34b0 [ 487.006013][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 487.011164][ C0] ? __pmd_alloc+0x40a/0x5c0 [ 487.015775][ C0] handle_mm_fault+0x1b36/0x3080 [ 487.020745][ C0] ? handle_mm_fault+0xec/0x3080 [ 487.025734][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 487.031036][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 487.036307][ C0] do_user_addr_fault+0xa4d/0x1340 [ 487.041472][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 487.046866][ C0] exc_page_fault+0x6a/0xc0 [ 487.051394][ C0] asm_exc_page_fault+0x26/0x30 [ 487.056259][ C0] RIP: 0033:0x7f8e22f6cf98 [ 487.060701][ C0] Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 [ 487.080331][ C0] RSP: 002b:00007fff5c49a2e8 EFLAGS: 00010246 [ 487.086444][ C0] RAX: 0000200000000040 RBX: 0000000000000004 RCX: 006c6f6f74687465 [ 487.094451][ C0] RDX: 0000000000000008 RSI: 006c6f6f74687465 RDI: 0000200000000040 [ 487.102445][ C0] RBP: fffffffffffffffe R08: 0000001b2e220000 R09: 0000000000000001 [ 487.110426][ C0] R10: 7ffffffffffffff7 R11: 0000000000000009 R12: 0000000000000000 [ 487.118414][ C0] R13: 0000000000000000 R14: 0000000000076a6f R15: 00007fff5c49a580 [ 487.126424][ C0] [ 487.130074][ C0] Kernel Offset: disabled [ 487.134408][ C0] Rebooting in 86400 seconds..