last executing test programs: 2m40.229381671s ago: executing program 4 (id=5468): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000300)="40000000240001040400000000000000000000000100000000000400030001000000000008000100657473001400028005000100030000000500020005000000", 0x40) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m39.933637322s ago: executing program 4 (id=5473): socketpair(0xf, 0x5, 0x1, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) unshare(0x28000600) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000000101040000b8e55d790000020000002400018014000180080014000c0002800500010000000000a40002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000200"/100], 0x64}}, 0x0) mmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x200000d, 0x4010, 0xffffffffffffffff, 0x81661000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r8, &(0x7f0000000080)="5b20bc9cc46a", 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '-@)]\x18^*\'[:>\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newtfilter={0x78, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r6, {0x5, 0x3da48c8682330ab8}, {0x8, 0xffe0}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x12}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0xfffa}, {0xb, 0xfffff800, 0x1ff, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r12) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="01002abd7000fbdbdf259600000008000300", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000240)=0x1e) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001100)=@xdp={0x2c, 0x7, r6, 0x2f}, 0x80, &(0x7f0000000200)=[{&(0x7f00000011c0)="7428f16e95c47ed96b57", 0xa}], 0x1}, 0x5) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={r6, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xc) 2m39.575630095s ago: executing program 4 (id=5476): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000000)=0x8) (async) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000000)=0x8) 2m39.323039792s ago: executing program 4 (id=5479): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) (async) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) (async) pread64(r4, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}}, 0x0) 2m38.203818957s ago: executing program 4 (id=5486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4040851) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r3}) 2m38.149835834s ago: executing program 4 (id=5487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0x21) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000001", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf250b00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xd5, "ff7a384787ad82321015026df730ed507d71be1cae47907ffa52764132e0073d32e4e81d862ed01476d6a23fe79763f4c1f06b383217bb643b2d092a9aa46f972d45c6eca7320d0665e27f1c9a60ec7bb155a534c5f387d0acfd27adfb5280eff254f264f6b37d3ec0bed79266e7d12f2eca49941c94d0521958cc6ed3893cf7c2c11c537179be57d73d1dd14633ce3bf5ec457f48e14b35c17c5a3d3085044d4f67e542c57043603fca6662e94273af6f3620ef49dfbb7ca79ce245d546728d7c869fa90e81095e26cd388286674e10df8d4208f1"}, &(0x7f0000000140)=0xdd) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) listen(r7, 0x0) 2m33.497663403s ago: executing program 2 (id=5528): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000200000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 2m32.453142555s ago: executing program 2 (id=5537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x8, 0x7, 0x2c}, 0x7d}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c102fe00ff8807c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) unshare(0x46000480) 2m31.613776855s ago: executing program 2 (id=5542): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x29) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c0001"], 0xb0}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003300)={0xffffffffffffffff, 0x0, 0x1000, 0x3e, &(0x7f0000002140)="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", &(0x7f0000003140)=""/62, 0x0, 0x0, 0x9e, 0x8a, &(0x7f0000003180)="bec66df7c84581d546bcf62f27ba778ea1cfb31bd9eec14c03f745e641d078a28891c16b28694bcf32465362ea6a551712a0932e56f0570e3cd6e40c555d5ad70a308c1c6c64d7be9c0fe089967b2fa063e8b18fa01c7f2c7be6de7ffb0fa196e8debd927b5dff02121158b747d3e18c1aff7594318149505d2b1720a42c79726ee4e35098824441f3513726a2bf0e8a198cce34518cd0dca177eed3b1ff", &(0x7f0000003240)="490a5771ba9751145bf7670da5e4415f0d056095f7240fb7b5674458a6000468975ffbcad8e6214cec3c3d5be746aaf00b8e96a83d6bda8644228e1e11c2e03801c5f60497d3d885d5ae01b38a00f5ef04cdb0d1776886b028eaa2170d4ed690de7a3d5af0486abb80e25ed0e035e416f5afd5eae56afe7e057d2e12cb7fed432723aa418075173c9b17", 0x0, 0x0, 0x6e}, 0x50) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) 2m31.211898952s ago: executing program 2 (id=5547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0x1, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x7, 0x17, 0x4, 0x1e, 0x0, 0x800000e, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000700)={r0, &(0x7f0000000600)='\x00', 0x507880, &(0x7f0000000640)={@_ha_fsid={[0x7, 0x2]}, {0x1000, 0x8, 0x3, 0x6}}, 0x240, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x1}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)=@delqdisc={0x1a0, 0x25, 0x200, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0xfff2}, {0xe, 0x10}, {0x1, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8dd}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x4, 0x9, 0x1, 0x0, 0xc9, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xb, 0x52, 0x6, 0x7fffffff, 0x2, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x3, 0x2, 0x1, 0x8000, 0xffffffff, 0x4}}, {0xc, 0x2, [0x2, 0x40, 0xffb2, 0x3]}}, {{0x1c, 0x1, {0x56, 0x6d, 0x401, 0x2, 0x3, 0x0, 0x200, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x0]}}, {{0x1c, 0x1, {0xfe, 0x1, 0x6, 0xc0000, 0x0, 0x101, 0x3, 0x4}}, {0xc, 0x2, [0x21, 0x7, 0x0, 0x54c4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xe4, 0x8, 0x3, 0x2, 0x3, 0x5b3, 0x4}}, {0xc, 0x2, [0x4, 0x7, 0x9, 0x221b]}}, {{0x1c, 0x1, {0x4, 0x6, 0x3, 0x4, 0x0, 0x0, 0xfffffff8, 0x3}}, {0xa, 0x2, [0x9, 0x2c50, 0xc]}}, {{0x1c, 0x1, {0xf7, 0x6, 0x31bf, 0xd, 0x1, 0x1, 0x2, 0x3}}, {0xa, 0x2, [0xb, 0x7, 0x2]}}, {{0x1c, 0x1, {0x8, 0x2, 0x6, 0x1, 0x2, 0x3, 0x10000, 0x2}}, {0x8, 0x2, [0x4, 0x6]}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) shutdown(r7, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000001ac0)=ANY=[@ANYRESHEX=r8, @ANYRES32=r0, @ANYRESHEX=r6, @ANYBLOB="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", @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m30.774216077s ago: executing program 2 (id=5551): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000fd2c0012800b00010062726964676500001c0002800800050001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) 2m29.018726773s ago: executing program 2 (id=5564): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x158, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}, @TCA_STAB={0x4}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x0, 0xffff, 0x2, 0xffffffff, 0x0, 0x2}}, {0x8, 0x2, [0xb7, 0x7]}}, {{0x1c, 0x1, {0xfc, 0x7, 0x7, 0x5, 0x1, 0x2, 0xfff, 0x9}}, {0x16, 0x2, [0x94a, 0x8, 0x8, 0x41a2, 0xf, 0xfff, 0xc2f0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3, 0x1, 0x2, 0x800, 0x6, 0x8}}, {0x14, 0x2, [0x8, 0x3, 0x7, 0x5, 0x5, 0x2, 0x0, 0x2]}}, {{0x1c, 0x1, {0x8, 0x35, 0x2, 0x6, 0x0, 0x9, 0x388c}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x54, 0xffff, 0x6, 0x1, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0xff1d, 0x420, 0x6]}}, {{0x1c, 0x1, {0x40, 0x5, 0x8, 0x4f3, 0x0, 0x6, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x75, 0x78, 0x1, 0x3, 0x0, 0x3, 0x3, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20048882}, 0x2000400c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m56.281060122s ago: executing program 32 (id=5487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0x21) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000001", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf250b00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xd5, "ff7a384787ad82321015026df730ed507d71be1cae47907ffa52764132e0073d32e4e81d862ed01476d6a23fe79763f4c1f06b383217bb643b2d092a9aa46f972d45c6eca7320d0665e27f1c9a60ec7bb155a534c5f387d0acfd27adfb5280eff254f264f6b37d3ec0bed79266e7d12f2eca49941c94d0521958cc6ed3893cf7c2c11c537179be57d73d1dd14633ce3bf5ec457f48e14b35c17c5a3d3085044d4f67e542c57043603fca6662e94273af6f3620ef49dfbb7ca79ce245d546728d7c869fa90e81095e26cd388286674e10df8d4208f1"}, &(0x7f0000000140)=0xdd) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) listen(r7, 0x0) 1m56.280984612s ago: executing program 33 (id=5564): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x158, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}, @TCA_STAB={0x4}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x0, 0xffff, 0x2, 0xffffffff, 0x0, 0x2}}, {0x8, 0x2, [0xb7, 0x7]}}, {{0x1c, 0x1, {0xfc, 0x7, 0x7, 0x5, 0x1, 0x2, 0xfff, 0x9}}, {0x16, 0x2, [0x94a, 0x8, 0x8, 0x41a2, 0xf, 0xfff, 0xc2f0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3, 0x1, 0x2, 0x800, 0x6, 0x8}}, {0x14, 0x2, [0x8, 0x3, 0x7, 0x5, 0x5, 0x2, 0x0, 0x2]}}, {{0x1c, 0x1, {0x8, 0x35, 0x2, 0x6, 0x0, 0x9, 0x388c}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x54, 0xffff, 0x6, 0x1, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0xff1d, 0x420, 0x6]}}, {{0x1c, 0x1, {0x40, 0x5, 0x8, 0x4f3, 0x0, 0x6, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x75, 0x78, 0x1, 0x3, 0x0, 0x3, 0x3, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20048882}, 0x2000400c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 13.788589791s ago: executing program 1 (id=5996): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="010c4d"], 0x6) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x40}}, 0x0) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="010c4d"], 0x6) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) (async) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x40}}, 0x0) (async) 13.152713573s ago: executing program 1 (id=5999): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES16], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES16], 0x10b8}, 0x20000000) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) 12.550772889s ago: executing program 1 (id=6001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async) close(r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x1, 0xb}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe2}}}, &(0x7f00000002c0)=0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) 12.04265367s ago: executing program 1 (id=6005): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x541b, &(0x7f0000000140)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f0000001880)) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={0x28, r5, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x9, 0x9, 0x3, 0x1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{}, {0x0, 0x2, @TCA_CBS_PARMS={0x0, 0x1, {0xd, '\x00', 0x4, 0x7fff, 0x81}}}}]}, 0xfffffc3f}}, 0x0) 11.347844342s ago: executing program 1 (id=6009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000700)=';', 0x5e0}], 0x1}, 0x40851) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf25040000000800090004000000929264eca425421e663fb4552c8db76d13025311eb84ca889e46aa3abe49e138"], 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES64=r7], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) 10.566738213s ago: executing program 1 (id=6014): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x1955, 0x4) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) r2 = accept$inet6(r1, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x21}}], 0x1, 0x800) recvfrom(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) 6.949486268s ago: executing program 0 (id=6037): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0xcc, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x44, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_SEC_KEY={0x6c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "499840c28b182e2b138fb54978acc25e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2ba5ad71a8836c4d3d5cf3e7f9e2d197"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc07}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x18}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58d5}, 0x20000081) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1, 0x0, 0xfffffd6c}}], 0x2, 0x8010) shutdown(r2, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) 6.825935796s ago: executing program 5 (id=6038): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000006301040000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x601, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x7, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008050}, 0x24008800) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000100)="31020002", 0x12}], 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x200042, &(0x7f0000000040)={@_ha_fsid={[0x8000, 0x8]}, {0x1, 0x1000, 0xce0, 0x1c}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x10}) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f00000001c0)={'raw\x00', 0x39, "bdedf937487f5044248980d2459287bac47ffdec5320164780ac0462af13b73d69d1fe482b1808d3a30549d292b2f9c783cab94bd244da062e"}, &(0x7f0000000240)=0x5d) (async) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f00000001c0)={'raw\x00', 0x39, "bdedf937487f5044248980d2459287bac47ffdec5320164780ac0462af13b73d69d1fe482b1808d3a30549d292b2f9c783cab94bd244da062e"}, &(0x7f0000000240)=0x5d) 5.445266209s ago: executing program 0 (id=6040): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000480), &(0x7f0000000500)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001740)=""/234, 0xea}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x0, 0x0) 5.193395932s ago: executing program 3 (id=6042): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="b4000000000000006b118a00000000008510000002000000850000000800000095000000000000009500000000000000fd6ab7a063545b06329b9aa9dea58e6759abbfb05f82ecde1a21cf967f3e5ad0b68be662d6834c4c5544eb83d80e880f44fd360cb972844858274335551efdb3d8b61a419aa53d7aa4e7d44f51a5161308d327e612ae38f47ef6f273c3373ecefa26d8803fca29f642093fbea55c720617c526982b89fcae47cf225a0bc577c19486a74259b2abff68040eff41564fd12f9d1f53074fe39a23fa44a967a1f420fa261f439bbef478c9da3ce5a8507bf2346a4d9bc20bfb8e4f5872f047cee04ccc9343a95a92674e0b44225b12bed1b3d38dfb8cd4911ccf4471b3"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) 4.888989142s ago: executing program 0 (id=6044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0xa}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) unshare(0x26020480) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x9c4, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x998, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xfffffbff}, @TCA_FW_ACT={0x98c, 0x4, [@m_bpf={0x11c, 0x17, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x3ff, 0x2, 0x1, 0xfc8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9f, 0x6, 0x10000000, 0x401, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0xd, 0x2, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc, 0x10, 0x3, 0x7, 0xd}}]}, {0x64, 0x6, "e26b5d4c586cdd39a450b47f9153fd81489b5d4b70eea892b01ef162e9cd827934c2052e042f9d42994b203233e4f9fc6ce42fd60cd0a006696cee417dd99a06c341ce633e16129b1c20b9c07d62d2bc991312a12dd848a076079ece63c1eef7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x110, 0x14, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3063, 0x0, 0x6, 0x4, 0x9}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x5, 0x4, 0x800}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x309, 0xe1, 0x5, 0x1, 0x1}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x7, 0x7, 0x8}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x70, 0xd, 0x0, 0x4, 0x5}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1f19, 0x0, 0x3, 0x7fff}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xffffffff, 0x2, 0x7, 0x8}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x10000000, 0x5, 0x8}, 0x57}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x444b2441, 0x8, 0x2779, 0x7}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0xb1, 0x6, "de06d2440fcb47fd1f17897434c8fba697b93423aa7f9208df3a840305ebe166b11675563a1349175db89e9b6c6b38af428d3d1eec4cf100652c54deb78d4bbef8f4779957c56cea00e62aadcc6eb869abab504e62e8992521f8b4f744c01d969f4fcea0d3791493d0ffb1ffc4f4d0368ea67789f2d8f61a7e527a4e64b10aaf436299d0458f746a34bcdff24fc88f6ef377732daa0588e02e3b7550c3df8c3dab8e19c98ff67c941aa40c80cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x94, 0x5, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x4, 0x10000000, 0x10, 0xfffffc59}}]}, {0x4f, 0x6, "389213278c444eb7eecfc0a0cf1fcc4e1b073b757ed67db2edd2f00ff91052a5a06299c4fe478c9bb6a9b638b6555d5ea419b15f26b2b343823aa468f89d8c1638daf669b3ddc807151185"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x204, 0x17, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0xa63, 0x5, 0x101, 0x43}, @local, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x8, 0xdd, 0xf53a}, @local, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff44, 0x7, 0xffffffffffffffff, 0xad9}, @local, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff8, 0x31f2, 0x10000006, 0x6, 0xffffffff}, @multicast2, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x3, 0x5, 0x1}, @empty, @dev={0xac, 0x14, 0x14, 0x32}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3fb3, 0x81, 0x8, 0x3, 0x400}, @empty, @rand_addr=0x64010102, 0xff, 0x1}}]}, {0xe9, 0x6, "42bfdcbdb20df9c631adc078859d488b7abdfad32224331d473613fef0f09be34724b8f4509cfe6d301f8691368fd5ffd9e1b77a0a72ee489faf69177f98e206de39ee2bbfd8d1b1989f95dcb9af062eb13b8068b42931eede303808cec9f29e02a275f0f94a0f8fe2b08542820f3c53ee4e8e9b16cab6368c92098004018e0745248192f5ad53ec015ff438f7ce1db6b5a1f5856628fc3738e4fb187a2e5623b62602b88cba8e143e71bba79c131ab2ca88412c0be5b85e091cbc71373d64a2027feb6110ba3fd5a97c1ac6945f15ecd9df4e3fbaf89d4110ef169e066801d475a5d1f783"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x90, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x2, 0x6, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x33, 0x6, "5194390362ff6410cb7acd65148ea5dbf587b1e490080171b502192c596d236a9fcd041a1bd4e928b4c70f3509683e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xf4, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3, 0x7, 0x5c4d624c, 0x9}, 0x2}}]}, {0x98, 0x6, "31152e8f5e93025270cd23042b3b3f1e90a985cc6a6d7c20b1649a60258c9886cf046c26ce7e7ac527fe7db99b7f482e4a1d3b559ba66734573f9532bce60d8435f71ebe445094c8253900028842c088391e4872c90d10b19e4af27f3896f7411a4e856fa2fcf875f2f0e8c1ab968c912974d16a496cfde4099f369f711071f6b670f82b42783b46ebb2d63156b2818407b43c1e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x54, 0x7, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x6, 0x97, 0x200}, 0x3b}}]}, {0x9, 0x6, "3cc04d6a4d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x11c, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xb, 0x6, 0x1, 0x80}, 0x1, r2}}]}, {0xcd, 0x6, "b655810c9b344d3f2e9560cf346733cf8d3ad4772d14b80ca687420cfa837c058020d1feda0c869eeff01738d1b7b31cf82884e43fa34074888030fcf95d38e0081c3107004b1160ff7bdbd73cebc7cfd63961acbaa4e98623cf0d677ea127b93317026600bd11b51840271b4f9563ffeb3c39366908d3ce0cea263f27dcbf5d82db29b3819219f202ba1fa56f82dc8498a3fc30555f7efe153e092a597d82ec9c651abdf6e296a895c77b5af046de1235e28a77e416f76df89aefd376faf4e6801d70c3f7594ec7d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xcc, 0x16, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xafc, 0x2, 0x332c72f2fe51a80b, 0xfffffffe, 0xf538}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}]}, {0x18, 0x6, "8481097fbec02c6c041100cfd8c2a46d43dd07ce"}, {0xc, 0x7, {0x4df8122f7e6a768c, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x9c4}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42082, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0xa}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) unshare(0x26020480) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x9c4, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x998, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xfffffbff}, @TCA_FW_ACT={0x98c, 0x4, [@m_bpf={0x11c, 0x17, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x3ff, 0x2, 0x1, 0xfc8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9f, 0x6, 0x10000000, 0x401, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0xd, 0x2, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc, 0x10, 0x3, 0x7, 0xd}}]}, {0x64, 0x6, "e26b5d4c586cdd39a450b47f9153fd81489b5d4b70eea892b01ef162e9cd827934c2052e042f9d42994b203233e4f9fc6ce42fd60cd0a006696cee417dd99a06c341ce633e16129b1c20b9c07d62d2bc991312a12dd848a076079ece63c1eef7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x110, 0x14, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3063, 0x0, 0x6, 0x4, 0x9}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x5, 0x4, 0x800}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x309, 0xe1, 0x5, 0x1, 0x1}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x7, 0x7, 0x8}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x70, 0xd, 0x0, 0x4, 0x5}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1f19, 0x0, 0x3, 0x7fff}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xffffffff, 0x2, 0x7, 0x8}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x10000000, 0x5, 0x8}, 0x57}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x444b2441, 0x8, 0x2779, 0x7}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0xb1, 0x6, "de06d2440fcb47fd1f17897434c8fba697b93423aa7f9208df3a840305ebe166b11675563a1349175db89e9b6c6b38af428d3d1eec4cf100652c54deb78d4bbef8f4779957c56cea00e62aadcc6eb869abab504e62e8992521f8b4f744c01d969f4fcea0d3791493d0ffb1ffc4f4d0368ea67789f2d8f61a7e527a4e64b10aaf436299d0458f746a34bcdff24fc88f6ef377732daa0588e02e3b7550c3df8c3dab8e19c98ff67c941aa40c80cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x94, 0x5, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x4, 0x10000000, 0x10, 0xfffffc59}}]}, {0x4f, 0x6, "389213278c444eb7eecfc0a0cf1fcc4e1b073b757ed67db2edd2f00ff91052a5a06299c4fe478c9bb6a9b638b6555d5ea419b15f26b2b343823aa468f89d8c1638daf669b3ddc807151185"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x204, 0x17, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0xa63, 0x5, 0x101, 0x43}, @local, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x8, 0xdd, 0xf53a}, @local, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff44, 0x7, 0xffffffffffffffff, 0xad9}, @local, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff8, 0x31f2, 0x10000006, 0x6, 0xffffffff}, @multicast2, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x3, 0x5, 0x1}, @empty, @dev={0xac, 0x14, 0x14, 0x32}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3fb3, 0x81, 0x8, 0x3, 0x400}, @empty, @rand_addr=0x64010102, 0xff, 0x1}}]}, {0xe9, 0x6, "42bfdcbdb20df9c631adc078859d488b7abdfad32224331d473613fef0f09be34724b8f4509cfe6d301f8691368fd5ffd9e1b77a0a72ee489faf69177f98e206de39ee2bbfd8d1b1989f95dcb9af062eb13b8068b42931eede303808cec9f29e02a275f0f94a0f8fe2b08542820f3c53ee4e8e9b16cab6368c92098004018e0745248192f5ad53ec015ff438f7ce1db6b5a1f5856628fc3738e4fb187a2e5623b62602b88cba8e143e71bba79c131ab2ca88412c0be5b85e091cbc71373d64a2027feb6110ba3fd5a97c1ac6945f15ecd9df4e3fbaf89d4110ef169e066801d475a5d1f783"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x90, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x2, 0x6, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x33, 0x6, "5194390362ff6410cb7acd65148ea5dbf587b1e490080171b502192c596d236a9fcd041a1bd4e928b4c70f3509683e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xf4, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3, 0x7, 0x5c4d624c, 0x9}, 0x2}}]}, {0x98, 0x6, "31152e8f5e93025270cd23042b3b3f1e90a985cc6a6d7c20b1649a60258c9886cf046c26ce7e7ac527fe7db99b7f482e4a1d3b559ba66734573f9532bce60d8435f71ebe445094c8253900028842c088391e4872c90d10b19e4af27f3896f7411a4e856fa2fcf875f2f0e8c1ab968c912974d16a496cfde4099f369f711071f6b670f82b42783b46ebb2d63156b2818407b43c1e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x54, 0x7, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x6, 0x97, 0x200}, 0x3b}}]}, {0x9, 0x6, "3cc04d6a4d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x11c, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xb, 0x6, 0x1, 0x80}, 0x1, r2}}]}, {0xcd, 0x6, "b655810c9b344d3f2e9560cf346733cf8d3ad4772d14b80ca687420cfa837c058020d1feda0c869eeff01738d1b7b31cf82884e43fa34074888030fcf95d38e0081c3107004b1160ff7bdbd73cebc7cfd63961acbaa4e98623cf0d677ea127b93317026600bd11b51840271b4f9563ffeb3c39366908d3ce0cea263f27dcbf5d82db29b3819219f202ba1fa56f82dc8498a3fc30555f7efe153e092a597d82ec9c651abdf6e296a895c77b5af046de1235e28a77e416f76df89aefd376faf4e6801d70c3f7594ec7d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xcc, 0x16, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xafc, 0x2, 0x332c72f2fe51a80b, 0xfffffffe, 0xf538}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}]}, {0x18, 0x6, "8481097fbec02c6c041100cfd8c2a46d43dd07ce"}, {0xc, 0x7, {0x4df8122f7e6a768c, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x9c4}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) (async) 4.826436123s ago: executing program 5 (id=6045): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000007110a0000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x800}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x4, 0x70}, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f30350008000340000000072000048006"], 0xcd0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000640)={0x1d, r5, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r5, 0x1, 0x6, @multicast}, 0x10) 4.249923408s ago: executing program 3 (id=6048): r0 = socket(0x29, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000400)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'netdevsim0\x00', @random="ad6f00251a80"}) 3.744853207s ago: executing program 3 (id=6049): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000000000071becf00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xffffffd1, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r1, @ANYBLOB="b5cbe25743110ba37d7dadf4d3c03df8acd50284173e01790bdbefc312ca54a4ffac45369858001c8c6fa18bee393ef46cdf88c56b25"], 0x3c}}, 0x0) 3.427494863s ago: executing program 6 (id=6050): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x81}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x38}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 3.385097509s ago: executing program 5 (id=6051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000090000001c001a80180002801400018008000c000300000008001a0004000000140035006572737061516f8b7e8939d8c9000000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3.088955805s ago: executing program 0 (id=6052): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x60, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0x40, 0x3, "463835e3908ea246ce38573cad23f71e7c88d7949b0a2b305ec358f839870c4c1fd35d40516f990797acfbc80750de3daeab0b8ae58902375a08f3b2"}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0xb, 0x1, 0x6c, 0x16, 0x36, 0x9, 0x27, 0x60, 0x4, 0x16, 0x4, 0x9, 0x9, 0x36, 0x24, 0x9, 0x3, 0x2, 0x48, 0x5c, 0x1, 0x60, 0x16, 0x6c, 0x6, 0x1b, 0x60, 0x18, 0x2, 0x60, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x734a, 0x2, 0x5, 0x5, 0x5, 0x8, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xabc, 0xd, 0x8, 0x8, 0x0, 0x7, 0x0, 0x7fff]}}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000084}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff81, 0x41}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x801) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xbde}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x110, r1, 0x402, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff0, 0x22}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcc, 0xbe, "4c985666f281febe6bf7226e23ec015193f39d67960cf8225cf185a96ecfa7a36fb7608d58ab1c81d42fab6ebda36a011edb1f31cf362e97d85c546fef5c0e90a49305af32210d34af6d684b04192a9317a62302c7034510213454967bb313a4d545d24920369f347c1485712c53d139149a39f989b8f8e598fd8264ed140020e30b36ec153ee2b0e17863ede78a5c3bb3473f15ecf47646773dd7d830a2a405f3f3b395d1220974ce28e23ebb236b0d2d2ea7aa3502b4e6c1b634332d03ccb92b65e8e1003ea8f2"}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4e5}]}, 0x110}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008801}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x40008c5) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) r7 = socket(0x6, 0x80000, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40), 0x8) bind$packet(r8, &(0x7f0000000b80)={0x11, 0x7, r3, 0x1, 0x2b, 0x6, @random="8bfb897585be"}, 0x14) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000bc0)={0x0, 'pimreg1\x00', {0x1}, 0x1}) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000f40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c40)={0x288, r6, 0x800, 0x70bd25, 0x179, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x25f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe56}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35e5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @empty, 0xfcc}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4273}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6616}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000004}, 0x8050) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000f80)=0x401, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r10, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x54, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x40851) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001240)={&(0x7f0000001100), 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x88, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x80}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x7f, 0xfffc, 0x1, 0x9, 0xfffc]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="42cd706b9713", {0x6, 0x9}, @value=@ver_80211n={0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, @vht_op_mode_ntf={0x15, 0x2, {0x1, 0x1, 0x1, 0x6}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040044}, 0xc015) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000001280)) sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x62}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6759493f56f67ec96e04287f66"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "46cea87635"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000001400)=0x8, 0x4) 2.991557874s ago: executing program 5 (id=6053): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x83, 0x0, &(0x7f0000000080)=0xb0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0x35, 0x8f, &(0x7f0000000140)="c6720996ac256a5dd860096f227ba65c3d21034d2a96258cb51871b7cd61b44f5cdc45f70f828f001015e32557771a164f199e6a30", &(0x7f0000000180)=""/143, 0x0, 0x0, 0x28, 0x2f, &(0x7f0000000240)="922fef2e666378cee49507f36caaa798a3a434bb77ee918834f40f321cfb26464c0b91085114c506", &(0x7f00000002c0)="72bcd864661e9afba680a5770d7ad1f79a8419fbb08e6b2f5e831f3374b871f7735d8c8a63e378db4190478e6e8336", 0x2, 0x0, 0xffff}, 0x50) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e1206021f1f00000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000380)="449f94251e1ddf8cf6871faa2cc36e5522f7a69750c205b3b0fbf7b5668b231056f1e427f168f8d2a23e2f5e93ed02b9f07637d155b0c8549d238f926ba05ac2", 0x40}], 0x2}, 0x4004850) 2.745740494s ago: executing program 6 (id=6054): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 2.657397162s ago: executing program 3 (id=6055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c811) 2.406501826s ago: executing program 5 (id=6056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000080000008510000003000000180000000000000000000000fc0100f49400000000000000bf00ffff"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/40, 0x28}], 0x1}, 0x20003ff1}], 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048890}, 0x40000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x27c, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xe9}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfffb}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd0a}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0xffffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7aaf}, {0x6, 0x11, 0x9}, {0x8}}]}, 0x27c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040801) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x204, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10000, 0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x1d8, 0x2, [@TCA_U32_SEL={0x1d4, 0x5, {0xc, 0x7, 0x0, 0x800, 0x3, 0x6, 0x5, 0x5, [{0x9, 0x4, 0x1000, 0x401}, {0xc79, 0x4, 0xfffffffb, 0x9}, {0x8, 0xb, 0xa6, 0x6}, {0x3, 0x35, 0x2, 0x9}, {0x2, 0x2, 0x1, 0x80000000}, {0xfffffffe, 0xfffffffe, 0xff, 0x4}, {0x80000001, 0x4, 0x8, 0xc4}, {0x5, 0x0, 0x8, 0x3850}, {0x3, 0x6, 0x7, 0x2}, {0x101, 0x5, 0x9659, 0x5}, {0x565, 0x1, 0x40, 0xfffffe9f}, {0xffff, 0x1400, 0x101, 0x4}, {0x6357, 0xb0, 0x0, 0x6}, {0xfffffffb, 0x8, 0x7, 0x5}, {0x100, 0x3ff, 0x24b, 0x3}, {0x80000001, 0xbc, 0xf, 0x10000}, {0x10, 0xdf5, 0xfffffffb, 0x80000001}, {0x6, 0x7, 0x6, 0x74}, {0x9, 0x9, 0xbb, 0xffffffff}, {0x2, 0xd9, 0xfffffff7, 0x10001}, {0x9, 0x2, 0xfe, 0x4}, {0xfffffff9, 0x5, 0x80000001, 0x5}, {0x426a, 0x3ff, 0x9, 0xcbd}, {0x6, 0x56, 0x6, 0x81}, {0x0, 0x3, 0x6, 0xae}, {0x5327dd9d, 0x0, 0x1, 0x1}, {0x7, 0xf998, 0x4, 0x1}, {0x3, 0xfffffffd, 0xfffffffb, 0x800}]}}]}}]}, 0x204}}, 0x404c0d4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002600)={r0, 0x0, 0x1000, 0x3b, &(0x7f0000001480)="0a25d5728b0fce4c63a37d7382d314ddab45931bcde8bd3d8a66de64b3db03e811c480b4565d3270b07d2ae2fd4ec60fced12f2a19ac5bcb25afea6ae3973b7bacda381ee9060a5b8526b4e4b443d3995dbf844d3ed64d16464759a10f11db80f24b9ec98afa595a567de62205354f2927961773a1f52f040153b40bd3dfa24a8f68f100b63b23d7b12f1fd2ee54c016e2809e830e8d905dddd19883cd78ff07662b265f11ba1f417d04c187e679512e5e87427c8850e54ba4a4a14608aa194c277420b29315b9d5eaeb08d1a22ad3e843e8bf3e71ae63c9f4c8b134b7317cb36d348e63b1c01328a414d10af79cb524ec051426b0af1e4ddc3426dfda62b1da73e5ba8a3eaea3cc875c54c5f6b9bb97e718bccac4d58fbcb38bdab37e9f025c16a45b8c43b1123f51380b82a2fe5e9013ddbc2926739d88172303cc9feb678bf64227df95563337a9284d999a667ad70cc20fdd22e52031c5d87572129336870aac85a05728d73de9cf12320887ad1a89753c73186d09a9635c5b28ab79f6243e441a15c79bf5e27062299456f6449de34971a9c7442b14537b5157cfce75e600e315bd35d3dc7a997ca1892d7b95e4b1c08f6aa453d9240c8bd5d09aeb3ea7f6f27ea75b6f2f9de734d4b9dac6f662415f1ccefd5df08303a4dbc59206892ef06f2504e94ecabaf0891e97043acf74fffdef0c44865d3823281090ae61afcf90b0e569bc6751c6647709b06c99a19e57c97c6bf5d59bbd9e962e7b23e973034c04a0e4df14d6c8750766e6f329e655cf803107383f6b93f73f8c9e49a2066185e1159851d4c31760e90ea09b984a6a018c10a6fd9d5cc6e69db4761e580a85fde1359bedf13184d5434cf7452770e2cd9ec85289146562a3c833c50d0c6fbede0a2a92d04bddba278e3e58777189c5f66e6e34c122671b915acc0d2b9172f0781b675aafd29fb03a075f069ba367d2a68431539482ea23c1f31db19b08fc872f50891965feae2fa2f3aeda05ea14653e0d651f9d8b7430f09c40a8987c1085cb3260d20a2135a1b22376ca19521c6cae8ff234917aaca88b880dec100341359f265d01c664c8db3ce5b0f60aff8f0e56d22c6db9a1b2f66b06bd125b86e6c813777c1080afaa85a8a768d0a6f6d2b7eb0c43119242decb90273c1e1870dc53895de3e3c74b670fa8c84a833bffc6f3669a07c64870219f4b87c8e9024c73bd50bb164f54a16ae3223b63aa2fdaf0f19db9acfa717cade40faff6ca9748848786292a0b049b53b69aaf4bd5c46b9c839c9a3351066ed3f5de2b5ade44defd7f081e4e048af5591143def46773a5697eb388f98a3fd0036589af7a7299d22a727f2b24897c6cc0d3f2d4252638492285fd6cc3a2866ea8128cfd1b5954fc0e53a958222dbb926de4921a30969fdc1af3cf3ddc27163535891c047b46988e391c4fc34d28086ef445242d123a68a5e7f3f62f9102549f89d46611b64ae248a68600d57987dce93e9a2a40bf98d852e928282f467a6e7033ae29846cfbd62f25c22710102c605dfdce55afbe4058e7e5dc517969286925838b38b859f8e5ebce56a34b03c32d9937861655373583a4ebca87cd260c25f05e097a50b78693a3dd3df63d9e8b0f484422ec7695eaf37d9d5308b830634a702e4bf6264e9578cbcd2264b2338525c98534dfecccf5768f49ff0b19c44ba2e7bc40aef75513c07e2b6660e923e67b7155d8a8d5a7c0990ab4f711477eae9de2ce649c269a3232a708008f27ff94ed6429d0a0ca5593cbddc204c2188de45022adfe3e5f275c2811cd930f37978cfab6e670907c0a16e90061dfa08117e1abf292b63941deae42642d17438048f60103cf2bc814ecbc35f6aee59366f5171350192f366be85715e8d8b55a8802509ba411e5d1a04e864df39cd3521a45a2a70c068857629bce439a1c8403af7b308d3200c071e8af63f775f92529d0b9bd65e08fa28cd46793bc696dff4103dea7bcd07507b1e3215d7d655bc849394e31ceed13d54a2894ad5bd0d126b1eb9bf8aeb180d61340aa89943ebe33bc6b787bf64769d1bba7d6ce42e94c99bb226818ed0ccbde7c12a285edb170c8200de39463285564889ea03f081e913b203c538249f1996814e7fc5e9ecf2aa59bc3780502c15a07fbfaa89a71c95dca22101c18daaa33f1dd33c79b029290811b09c1d75dfe1b6f200befa4e81373e10ac50a934e6cc6848a5e6816f764e92a830622cf65a9155b28e46e40b94349583eb693b1a98035ac496701873430dca7f237af1986d02d2ee94ce7e714860fec97a0424d109b522ab66a9c03732b8e13b494b1d0d0160667d2273391ac9efbf9fba25896a7a47abae24c6d3fe5a692952f887d4c17ef7e9f8b1edef88da22882d95a66ae8ecbbc68850868ed9540ad22a01a14051d323db88f6d388f746295627fc02fa5152ece8026f3dd59732eb4d466e12e8d084b16462f33983528cbee6605be98f2dca84b42db1e8994bda57199f3519f9df2783c8f8f627c74296bf28f57cf499ecf87f539f4c7f01f29bac968e3e65cbfff96eae2e9334688192df9f16b3ef03c48b2d6c445c7cb88ae9c0b84298973a7761cd062ab24919abeff657952839b10348e7ab5267e773a1e7b480c70cb9be4d3577f740c71c32a9902c3ecde8ac4aad06c40beabf462d0e77666b06dae82ee3fa2528b6c9418df67a043d193fd8bb3d39f41ce7cbee468885a838e60f0ba6be7c1d3b025cba38228bd5ced1d31d819f129d44f40d9a42ceb29767b9d1efc0dbb945414cb20d7ac88b2c5b1d11b4ba1371ef2aea13ed030046d88be32397e9586a5d05b558e8799c3e02ef6d84488ea5e7e52c7295091169b849338a054f066e0f07d956a70cbe4658fcc22858f4a4d4f734e50d039eb10b3e89faefad04a40e63958b1e0ca9633097654848a4cff49cbca7567f58bb8343989f51afe4ed354659e175f63e507d3a640d72bc07c0bbc990f85e549a8833069e9a5013dcb889dd18e9676afcf19e9047b466b1c8de3758e07495da7d30cc5bd2a83def5a06222a8ebdb60c99a984be45b5771767742d05a0527dce9d4ab0f4351cbc7d8b6ccf05de8fb6ab2eaff9dacd2b2c144f4a163ec1c6d1d182752d8b205654f24cd4a5ee91e58be9c27c0b9b2fb160d1bdf6b0da90dbf0a7e68244bd816c5794583eb1bb83e85c4d6d5d07cceff6783618acf25390060b3a7c2cd6c4055765d7e5591a0dadc1ddee507491fb9c4076d9207037e329c58029ed35e612412b26c3d9a9468808c2bddbd09c86073484a1f6f2a76606eb4b97fa4be240a62be4bba66b9da0895e210a49b8dc0e1ff27f0fbd89741affcb0e0f37dec7ac57818dacb7d6019fe34d69f1447c51cac9b5b78fcd0876a5825c7c78b3ea0ee43a4cde42a51784ce20c79ea3290ee5c26f2b61bee1de6dcaad57fb02028942347e7efe080fae91fb8ed2a67d3017b6e690fa9cb1d4a74c6017fd79d22e82a251e19f4de238cdfd875bb6b907a8edb52ecda76f143d9e9771acb2add04b3fff8a82f18ac83bc9dcdabb0fc982b9f96478cec1be85876d136bebbfa0d0183bb3e58d6518dc7731bf6b6e60db1867e4b45f62a9c42938e576e82caae2c5eb7893334482f3fa48b8f15be1386b02423757fe613eac38388883bcc86723bcd1c8d39cdcdfb067c58edbffc053e0f0f0d2c58e8ea90b423ffefa43886e8a93af42ca45c65935f914fc9fe219f7a464b6349d0df55443a5f5ac7ad697283266f4e33d5cf953b0a72cc1bc750917e79a856d4d3f8baf8516f7751c118ad81e0dfbd492295b0e8d0193df03a4249ecde13063068ca87bf1ba1fd06a6b9c8730fb17b84abd852b4aa09e9d311988f164d4df10213299a605ffab07055667d04c9374e9ba10f165e54e7e43c0b1f06a68aa69e4b4adc04878a22fbff6d27b1d8d882004aa58adeb7e3c10e43c293a7b664c0ec8358ea2a8913d2bc157fe2d2542ac9aed023f8fb90ec6761d9b658a1236dc8857843e6305f3d5b84f79dbfcbd3912e8c48c057fdd964090774a3f40b0b3712a2ec0a08cc357e67072713f8fc65f2b7d2db99983d60ed3279908f7e15a4c68f423d4b5e206d01f299524730bef87de41ec2aaf5f207b178f9ef2f2ef69d61e47917934818df5a7a9d427b36054bfd1e667bde36b605b2b829525a56fabe257b6d7e2a22bda1e3a9b07e9f37f22ae05bff80f6e0e2618b99011605db8f6788577698314734cab17a91532b375f56a28bede045b7f67f8ab173fd5262df67375a26aac194c6314d71cec0e7e09fb6c7b33bc29232cce408840b1bb85b5219acd9fd6eb3b533aad52d35d544426b44d84deb11a171de08aca0b2948b3b4e63ceb9a400bdfe6eedd3c650d9f381827e2720c87d2172ffdce2f9f851a34ebb64fe31c5d3d4ac73e632dbdb3e335eee190dbbcde045e05a5afdf282fddef906adeb700218d1c33580f47c89e7125a2d41037e197572948d60118c82af105bb76f1da15a9da9bee0b68b3a0035bcb6a0316a7e72b3e461431e5cb3685c3f8175155a0b4abe63c9c66a28b2a7cd8ae03ea4f81aa712da90b61c333272aea03fb1387543a5d0604b251dc1e660af7f775fb6d7d68a4c68c6823f3d7e9559a4bdb5d8fef860c1d8ffaf48ee0203351600e3c047f4a3483f717c974b8a61080330cd7dcacee3a38c1af2e785058ab2d480ce62ca275ea847066adeb3be01476dd458b892ca4ffe3a3cd13e035d1008fb083f179a1c544510d35cc3d5b8025cf9fa280c24c66c125a25fa89feddf96679552694e6fe7b6b5eb26456a8411e9dd1da1552daf93e25ca706a6d2db90702e0b04d31779a412610cd5321e755554040b47d9a0a88f65c5ca2f3cbbb95841f6edc2f499ea9e91af5a69744c092afa429c7c2d8430d6b7cbbb196c18663db7b553be667cc2de6e357a029b49da142374ba08505343a58f370fbfeb70fcc85badf5f382f1d93064fc65252d795bad590dd7514c09a50ee1e9480a5ddb9dac0118faa08b2f665733ff78f04620017545d8b10be093bb572ce6afc136041fc09013ff55aadd9c94ed9846f7b7d80861b8f8d63e856b941c08fef7cd11b5845122c7ecc2afa447faa94b631bb5cf0765b636adb707772c1c615dad704a935a379e93d98b1efbf6088ff452609020e0af8b1c1cc6fd26de46d2f20925d3984de1663df3c1feea0c50ae097a979160ddf4e933d2e131cea1c9afe247fbb27e8382e49c1c232a4bbd30617cf5c7fd6c5b4e7286d2a402d7a637cbdc7698dc91f9bd1e20217e1cf9311edb05d150b94b40961b9755be9d2d7cf45b8a68d201e302789559179e288834db0cb87fe5c0f44917b961697ce55d07731af0da709dd1196f092477ea77f3e0c04d27fd89f02902137009204bf63bd4024d608befa2c14a7e5df3ecab5b624e3c74d5f21194692b3abaa41f12ed0f17e9aaf25aa8c3c64e1369b06ed1abf2d448d285572bb0e99ee9eb6ea34a529f3a44183936579a95ef3ac71634e9bb76b16090687566e503497ac7c1a0a157bbda3041519380e8e0798bccd32902e3afacb8db5358a7010f88525833738f5b1b8efc3451c69e87c741ee84a9b7d46ae383e61abd1814390dfea942743e9cf576b28e6613cc9e57eb4be1a617e94be272cf6cedb702bbf350a3e38a2bd186abbc8d137b820c783394dbb0b416ac28c606c19f55686faaf08738567c9090f14ec1179aa0c6e7bc917a5c8b1ea7245e06dfeb9922655a5ebc970c03a1a5a0956eb8ca989bf84169a26666b", &(0x7f0000002480)=""/59, 0x9, 0x0, 0x7c, 0x84, &(0x7f00000024c0)="77327297ce57de317fc3d0e9f17cd737495dd82913186e8a0979204c63f7ce6102778122f7397213111badb5101b6221a9fb5074e95aff2d60f2e79c8f66e4391298c879c1b35038812257d76cdee474039ab6af4c3d99ec7174b8ef450c7d888495b58e1523284a311ae6e87bba5b7d3107a6c9560ab2a450623239", &(0x7f0000002540)="7976d7c6d8f3cf8152260bf4b86fff543b82d62b783459d3d1c0f5d98fb7f3272b8746cbf388ad70dc2ded672b0b9a25ef6dcd65441420a118dfdd060a80d3b2cf6299de91189c4e48707edf767c071719d641229740a2ce298c3bb3cfbf18917968ed518ecb8cf11e14b3735ad07b76598fe36f0a6441a33d323bd8e9fc7a5ae6d590aa", 0x1, 0x0, 0xffff1e83}, 0x50) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xfdef) 2.267100031s ago: executing program 0 (id=6057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @eth={@random="c55908cfe38f", @local, @void, {@mpls_mc={0x8848, {[], @generic="e4eabc70a3ee"}}}}}, 0x22) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000dd0a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="347f0002", @ANYRES16=r6, @ANYBLOB="010025b57000fbdbdf252800000008000300", @ANYRES32=r7, @ANYBLOB="0a000600000000000000000004002a00060036000f000000"], 0x34}, 0x1, 0x0, 0x0, 0x32ff5f671ead9f00}, 0x4008874) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r6, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4017) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='XR\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.688890433s ago: executing program 3 (id=6058): r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000240)={r4}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'vlan0\x00', 0xe}) 1.611656645s ago: executing program 6 (id=6059): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0xdc}}, 0x20000000) 1.148255599s ago: executing program 6 (id=6060): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'lo\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x6, 0x8000, [0x7, 0x1]}}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a727", 0x6}], 0x1, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r7, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000140)=0x2, 0x4) listen(r6, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="5001", @ANYRES32=r9, @ANYRESOCT=r10], 0x14) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf7060400000000000000d4b8bf4a31accb0000000045ef", 0x26}], 0x1}, 0x4010) 749.285389ms ago: executing program 0 (id=6061): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x40109, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 638.638533ms ago: executing program 5 (id=6062): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000a40)={0x0, &(0x7f0000000a00)}) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xca, &(0x7f0000000900)="0430e7f30005", 0x6) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) recvmsg$kcm(r0, &(0x7f0000002840)={0x0, 0x7, &(0x7f0000002780), 0x4a}, 0x40000000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 514.374931ms ago: executing program 6 (id=6063): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04000000000208000800060000008c9385afee48100d6962cd7c44e8eef62ec16e453922c46522b9f8a2b6"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04000000000208000800060000008c9385afee48100d6962cd7c44e8eef62ec16e453922c46522b9f8a2b6"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 453.362935ms ago: executing program 3 (id=6064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x800, 0x1) syz_emit_ethernet(0x58, &(0x7f0000000640)={@random="07000000a4a2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x30, 0x4a, 0x0, 0xe000, 0xf, 0x11, 0x0, @empty, @empty}, {0x0, 0x1, 0x36, 0x0, @opaque="e18f13f118c979b37e1970cfc3d602de1654d2bad5e61673c60382d4c343f4a57fda45a17c6df68167e4d7b0871f"}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0xc, 0x0, @void}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB=';\x00'], 0x20) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) 0s ago: executing program 6 (id=6065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0x4, 0x7fb) write$nci(r1, &(0x7f0000000140)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x8, "d04baebd7e554e1a926022fe9f75e5c45805bacc66acfac8401b4f608e08a9396402f8e1d292b0e4c5bf401b15e297b6675db71773ba839ee73f5c265e2e9cba735b087035094fdd9290c6147c9e5729bb70bb348a634c7a8fe21354d805eb7e98f2fd8b9f753ea183f88797cb4e59db6e5d5c76222a688e96fecf3a3695987e8ceccf4610"}, 0x88) syz_emit_ethernet(0x22, &(0x7f0000000040)={@broadcast, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "521aad485799c889"}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000ba00000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newsa={0x144, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0x60}}, @iptfs_reorder_window={0x6, 0x25, 0x40}]}, 0x144}}, 0x40000) kernel console output (not intermixed with test programs): st mode [ 512.881780][T23097] geneve1: entered allmulticast mode [ 513.038825][T23100] netlink: 'syz.0.4279': attribute type 32 has an invalid length. [ 513.038845][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4279'. [ 513.083593][T23100] bond8: option coupled_control: invalid value (192) [ 513.113028][T23100] bond8 (unregistering): Released all slaves [ 513.364354][T23112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4278'. [ 513.671100][T23145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4288'. [ 513.671134][T23145] netlink: 'syz.1.4288': attribute type 5 has an invalid length. [ 513.671149][T23145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4288'. [ 513.700829][T23147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4289'. [ 513.751447][T23141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4286'. [ 513.804216][T23153] netlink: 'syz.0.4291': attribute type 39 has an invalid length. [ 514.189738][T23177] syzkaller1: entered promiscuous mode [ 514.189764][T23177] syzkaller1: entered allmulticast mode [ 514.207568][T23177] xt_IDLETIMER: timeout value is zero [ 514.266498][T23180] batman_adv: batadv0: Adding interface: syzkaller0 [ 514.266514][T23180] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.266585][T23180] batman_adv: batadv0: Interface activated: syzkaller0 [ 514.276015][T19404] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 514.536184][T23188] netlink: 'syz.2.4304': attribute type 39 has an invalid length. [ 514.974402][T23179] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 515.016082][T23179] batman_adv: batadv0: Removing interface: syzkaller0 [ 515.131567][T23191] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 515.654223][T23231] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 515.722103][T23237] __nla_validate_parse: 3 callbacks suppressed [ 515.722121][T23237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4318'. [ 515.723089][T23227] xt_hashlimit: size too large, truncated to 1048576 [ 516.002145][T23251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4319'. [ 516.039788][T23253] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 516.092032][ T31] audit: type=1800 audit(1791313310.626:9): pid=23258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4321" name="memory.events" dev="tmpfs" ino=1490 res=0 errno=0 [ 516.179626][T23261] ip6t_rpfilter: unknown options [ 516.195591][T23262] ip6t_rpfilter: unknown options [ 516.300808][T23267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4324'. [ 516.325779][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4325'. [ 516.513493][T23277] wlan1 speed is unknown, defaulting to 1000 [ 516.607624][T23279] ip6gre1: entered allmulticast mode [ 517.035940][T23304] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 517.365309][T23313] ip_tables: iptables: counters copy to user failed while replacing table [ 517.456742][T23320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4339'. [ 517.481820][T23313] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 517.531314][T23325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4340'. [ 517.550307][T23325] bridge0: port 3(syz_tun) entered blocking state [ 517.550493][T23325] bridge0: port 3(syz_tun) entered disabled state [ 517.550616][T23325] syz_tun: entered allmulticast mode [ 517.580072][T23325] syz_tun: entered promiscuous mode [ 517.741134][T23334] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4344'. [ 517.741416][T23335] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4344'. [ 517.893991][T23344] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4346'. [ 517.968055][T23332] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 518.044313][T23353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4348'. [ 518.784322][T23392] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.791737][T23392] bond5: (slave lo): Enslaving as an active interface with an up link [ 518.818259][T23392] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 518.843150][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 518.917524][ T5621] Bluetooth: hci1: command 0x0405 tx timeout [ 518.920558][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b134800: rx timeout, send abort [ 519.420602][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b134800: abort rx timeout. Force session deactivation [ 519.420799][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b135000: rx timeout, send abort [ 519.680781][T23442] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 519.920834][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b135000: abort rx timeout. Force session deactivation [ 519.987860][T23465] IPVS: rr: UDP [::1]:8080 - no destination available [ 520.333891][T23492] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.645496][T23509] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.801416][T23519] netlink: 'syz.2.4394': attribute type 34 has an invalid length. [ 520.801438][T23519] __nla_validate_parse: 12 callbacks suppressed [ 520.801449][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4394'. [ 521.090718][T23523] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 521.212241][T23536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4396'. [ 521.340896][T23543] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4400'. [ 521.462167][T23544] syzkaller0: entered promiscuous mode [ 521.462193][T23544] syzkaller0: entered allmulticast mode [ 521.477953][ T5278] veth1_vlan: left promiscuous mode [ 521.596827][T23557] netlink: 4904 bytes leftover after parsing attributes in process `syz.3.4402'. [ 521.903824][T23571] vlan3: entered allmulticast mode [ 521.903847][T23571] veth1_virt_wifi: entered allmulticast mode [ 521.945658][T23576] netlink: 'syz.4.4408': attribute type 1 has an invalid length. [ 522.010154][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4408'. [ 522.044639][T23576] 8021q: adding VLAN 0 to HW filter on device bond4 [ 522.073827][T23582] macvlan2: entered promiscuous mode [ 522.073851][T23582] macvlan2: entered allmulticast mode [ 522.098174][T23576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4408'. [ 522.233216][T23592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.442966][T23606] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 522.461117][T23606] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4416'. [ 522.503713][T23608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4417'. [ 522.665794][T23616] wlan1 speed is unknown, defaulting to 1000 [ 522.849673][T23617] wlan1 speed is unknown, defaulting to 1000 [ 523.035697][T23616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4420'. [ 523.035719][T23616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4420'. [ 523.567681][T23647] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 523.593110][T23657] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 524.180440][T23701] SET target dimension over the limit! [ 524.448194][T23713] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 524.716643][ T52] Bluetooth: hci5: unexpected event 0x05 length: 0 < 4 [ 524.866979][T23736] openvswitch: netlink: IP tunnel dst address not specified [ 525.026061][T23751] veth5: entered promiscuous mode [ 525.026085][T23751] veth5: entered allmulticast mode [ 525.082062][T23755] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 525.611611][T23779] bond5: entered allmulticast mode [ 525.612145][T23779] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.631746][T23780] netlink: 'syz.4.4453': attribute type 10 has an invalid length. [ 525.657008][T23780] team0: Device wg2 is of different type [ 525.751041][T23795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.910074][T23803] __nla_validate_parse: 16 callbacks suppressed [ 525.910093][T23803] netlink: 18 bytes leftover after parsing attributes in process `syz.3.4461'. [ 525.917447][T23802] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.957137][T23806] ip_tables: iptables: counters copy to user failed while replacing table [ 526.007045][T23809] netlink: 'syz.4.4462': attribute type 1 has an invalid length. [ 526.056097][T23809] bond6: entered promiscuous mode [ 526.056528][T23809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 526.076837][T23809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4462'. [ 526.095318][ T5862] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.095336][T23809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4462'. [ 526.136353][T23809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 526.140958][T23809] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 526.140979][T23809] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 526.192588][T23809] bond6: (slave wireguard0): making interface the new active one [ 526.192610][T23809] wireguard0: entered promiscuous mode [ 526.207676][T23809] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 526.264650][ T2233] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.264703][ T2233] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.264746][ T2233] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.849729][T23835] netlink: 'syz.0.4470': attribute type 1 has an invalid length. [ 526.849753][T23835] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4470'. [ 527.195284][T23854] netlink: 'syz.2.4476': attribute type 1 has an invalid length. [ 527.237124][T23849] bond8: option resend_igmp: invalid value (32767) [ 527.237149][T23849] bond8: option resend_igmp: allowed values 0 - 255 [ 527.241763][T23849] bond8 (unregistering): Released all slaves [ 527.442412][T23851] bond8: option resend_igmp: invalid value (32767) [ 527.442438][T23851] bond8: option resend_igmp: allowed values 0 - 255 [ 527.448140][T23851] bond8 (unregistering): Released all slaves [ 527.710189][T23863] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 527.738841][T23863] bond8 (unregistering): Released all slaves [ 527.827552][T23878] bridge0: entered promiscuous mode [ 527.880797][T23855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4478'. [ 528.086335][T23894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4481'. [ 528.102271][T23894] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4481'. [ 528.102748][T23894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.103094][T23894] batadv_slave_0: entered allmulticast mode [ 528.580198][T23923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4485'. [ 528.705783][T23934] syzkaller1: entered promiscuous mode [ 528.706374][T23934] syzkaller1: entered allmulticast mode [ 529.035197][T23953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4495'. [ 529.270464][T23968] netlink: Unknown conntrack attr (0) [ 529.273087][T23968] netlink: Unknown conntrack attr (0) [ 529.277625][T23968] netlink: Unknown conntrack attr (0) [ 529.285138][T23968] netlink: Unknown conntrack attr (0) [ 529.285771][T23968] netlink: Unknown conntrack attr (0) [ 529.303071][T23968] netlink: Unknown conntrack attr (0) [ 529.303403][T23968] netlink: Unknown conntrack attr (0) [ 529.311224][T23967] netlink: 'syz.3.4499': attribute type 4 has an invalid length. [ 529.311245][T23967] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4499'. [ 529.476278][T23978] xt_time: unknown flags 0x68 [ 529.839457][T23984] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.036507][T24016] netlink: 'syz.2.4514': attribute type 1 has an invalid length. [ 530.143924][T24024] macsec0: entered promiscuous mode [ 530.283265][T24030] netlink: 'syz.2.4519': attribute type 9 has an invalid length. [ 530.455492][T24040] netlink: 'syz.3.4518': attribute type 5 has an invalid length. [ 530.482949][T24029] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 530.594794][ T5621] Bluetooth: hci4: command 0x0405 tx timeout [ 530.755006][T24049] netlink: 'syz.2.4523': attribute type 1 has an invalid length. [ 530.960014][T24060] x_tables: duplicate underflow at hook 1 [ 531.044877][T24062] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 531.237429][T24076] __nla_validate_parse: 3 callbacks suppressed [ 531.237452][T24076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4529'. [ 531.241151][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4529'. [ 531.333161][T24084] netlink: 'syz.1.4533': attribute type 8 has an invalid length. [ 531.488106][T24099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4535'. [ 531.489142][T24099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4535'. [ 531.489169][T24099] netlink: 'syz.0.4535': attribute type 8 has an invalid length. [ 531.489180][T24099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4535'. [ 531.651425][T24107] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4541'. [ 531.679456][T24112] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4541'. [ 531.758586][T24119] net_ratelimit: 5 callbacks suppressed [ 531.758606][T24119] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.070226][T24139] ip_tables: iptables: counters copy to user failed while replacing table [ 532.235136][T24154] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 532.673715][ T5621] Bluetooth: hci4: command 0x0405 tx timeout [ 533.046952][T24192] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 533.119111][T24192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4556'. [ 533.182789][T24192] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 533.423931][T24213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4559'. [ 533.869441][T24187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 533.869491][T24187] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 534.090209][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4563'. [ 534.107107][T24243] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.221624][T24187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.221646][T24187] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 534.389017][T24187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 534.389042][T24187] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 534.510904][T24187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.510926][T24187] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 535.185811][T24300] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 535.502840][T24320] Bluetooth: hci0: unsupported parameter 5135 [ 535.502864][T24320] Bluetooth: hci0: unsupported parameter 8192 [ 535.502876][T24320] Bluetooth: hci0: unsupported parameter 5135 [ 535.502888][T24320] Bluetooth: hci0: unsupported parameter 8192 [ 536.384222][T24363] __nla_validate_parse: 5 callbacks suppressed [ 536.384244][T24363] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4591'. [ 536.384856][T24363] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4591'. [ 536.769617][T24379] ip6gretap0: entered promiscuous mode [ 537.052237][T24405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4598'. [ 537.303429][T24419] sch_tbf: burst 0 is lower than device lo mtu (21) ! [ 537.473147][T24426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.502086][T24428] ip_tables: iptables: counters copy to user failed while replacing table [ 537.698266][T24435] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4606'. [ 537.789457][T24435] tipc: Failed to obtain node identity [ 537.789488][T24435] tipc: Enabling of bearer rejected, failed to enable media [ 537.873691][T24445] netlink: 'syz.0.4609': attribute type 64 has an invalid length. [ 537.873713][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'. [ 538.103068][T24459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.322863][T24474] netlink: 'syz.1.4618': attribute type 24 has an invalid length. [ 538.401911][T24476] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 538.414712][T24476] bond8 (unregistering): Released all slaves [ 538.770511][T24494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4622'. [ 539.021970][T24511] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4626'. [ 539.021997][T24511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4626'. [ 539.022014][T24511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'. [ 539.152049][T24525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4630'. [ 539.431709][T24541] netlink: 'syz.3.4635': attribute type 1 has an invalid length. [ 539.535773][T24541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 539.575460][T24542] bond7: (slave gretap3): making interface the new active one [ 539.580718][T24542] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 539.711611][T24562] syzkaller1: entered promiscuous mode [ 539.711635][T24562] syzkaller1: entered allmulticast mode [ 539.758795][T24561] macvlan3: entered promiscuous mode [ 539.758816][T24561] macvlan3: entered allmulticast mode [ 539.759091][T24561] bridge0: port 1(macvlan3) entered blocking state [ 539.760919][T24561] bridge0: port 1(macvlan3) entered disabled state [ 539.990679][T24571] netlink: 'syz.1.4644': attribute type 1 has an invalid length. [ 540.177091][T24575] ip6t_ah: unknown flags 5 [ 540.177224][T24575] ip6t_ah: unknown flags 5 [ 540.177330][T24575] ip6t_ah: unknown flags 5 [ 540.178805][T24575] ip6t_ah: unknown flags 5 [ 540.178908][T24575] ip6t_ah: unknown flags 5 [ 540.179003][T24575] ip6t_ah: unknown flags 5 [ 540.179096][T24575] ip6t_ah: unknown flags 5 [ 540.179192][T24575] ip6t_ah: unknown flags 5 [ 540.179293][T24575] ip6t_ah: unknown flags 5 [ 540.179511][T24575] ip6t_ah: unknown flags 5 [ 540.540798][T24598] tunl0: entered promiscuous mode [ 540.540962][T24598] netlink: 'syz.2.4652': attribute type 4 has an invalid length. [ 540.998550][T24610] bond3: Invalid ad_actor_system MAC address. [ 540.998572][T24610] bond3: option ad_actor_system: invalid value (1) [ 541.000280][T24610] bond3 (unregistering): Released all slaves [ 541.228878][T24625] netlink: 'syz.3.4659': attribute type 1 has an invalid length. [ 541.347864][T24635] lo speed is unknown, defaulting to 1000 [ 541.347930][T24635] lo speed is unknown, defaulting to 1000 [ 541.372691][T24635] lo speed is unknown, defaulting to 1000 [ 541.373915][T24635] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 541.373949][T24635] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 541.379628][T24635] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 541.495793][T24635] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 541.664834][T24635] lo speed is unknown, defaulting to 1000 [ 541.668950][T24635] lo speed is unknown, defaulting to 1000 [ 541.692822][T24635] lo speed is unknown, defaulting to 1000 [ 541.697678][T24635] lo speed is unknown, defaulting to 1000 [ 541.701821][T24635] lo speed is unknown, defaulting to 1000 [ 541.729392][T24635] lo speed is unknown, defaulting to 1000 [ 541.731148][T24635] lo speed is unknown, defaulting to 1000 [ 541.944330][T21690] IPVS: starting estimator thread 0... [ 541.948034][T24652] pim6reg: entered allmulticast mode [ 542.033358][T24657] IPVS: using max 42 ests per chain, 100800 per kthread [ 542.233066][T24669] __nla_validate_parse: 12 callbacks suppressed [ 542.233086][T24669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4671'. [ 542.233101][T24669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4671'. [ 542.233124][T24669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4671'. [ 542.474724][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4673'. [ 542.499248][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4673'. [ 542.827542][T24704] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4680'. [ 542.895939][ T5743] lo speed is unknown, defaulting to 1000 [ 542.895976][ T5743] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 543.219737][T24738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.470792][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4689'. [ 543.470834][T24786] netlink: 'syz.0.4689': attribute type 30 has an invalid length. [ 543.532050][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4689'. [ 543.532083][T24791] netlink: 'syz.0.4689': attribute type 30 has an invalid length. [ 543.646681][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4690'. [ 543.729318][T24695] workqueue: Failed to create a rescuer kthread for wq "nfc27_nci_tx_wq": -EINTR [ 544.081382][T24827] netlink: 'syz.3.4692': attribute type 14 has an invalid length. [ 544.108826][T24756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 544.495858][T24842] netlink: 'syz.4.4696': attribute type 7 has an invalid length. [ 544.632067][T24844] IPVS: set_ctl: invalid protocol: 59 172.30.1.5:20002 [ 544.801124][T24846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 544.949449][T24851] netlink: 'syz.0.4698': attribute type 1 has an invalid length. [ 544.949470][T24851] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4698'. [ 545.628924][T24900] netlink: 'syz.3.4710': attribute type 10 has an invalid length. [ 545.717578][T24900] team0: Device vxcan1 is of different type [ 545.878970][T24914] ipvlan0: entered promiscuous mode [ 545.879286][T24914] ipvlan0: entered allmulticast mode [ 545.905468][T24914] pimreg: left allmulticast mode [ 545.996046][T24916] netlink: 'syz.3.4714': attribute type 1 has an invalid length. [ 546.047940][T24916] 8021q: adding VLAN 0 to HW filter on device bond8 [ 546.069921][T24924] ip_tables: iptables: counters copy to user failed while replacing table [ 546.138584][T24919] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 546.197988][T24916] bridge7: entered promiscuous mode [ 546.210377][T24916] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 546.240124][T24928] pim6reg: entered allmulticast mode [ 546.240984][T24924] pim6reg: left allmulticast mode [ 546.332233][T24935] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 546.450275][T24947] openvswitch: netlink: Flow key attr not present in new flow. [ 547.039340][T24978] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 547.076567][T24980] ip_tables: iptables: counters copy to user failed while replacing table [ 547.102269][T24980] syzkaller1: entered promiscuous mode [ 547.105417][T24980] syzkaller1: entered allmulticast mode [ 547.295284][T24989] netlink: 'syz.1.4736': attribute type 4 has an invalid length. [ 547.458210][T24995] tipc: Enabled bearer , priority 10 [ 547.621730][T25000] __nla_validate_parse: 7 callbacks suppressed [ 547.621755][T25000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 547.969423][T25025] netlink: 'syz.1.4747': attribute type 2 has an invalid length. [ 547.971182][T25025] netlink: 'syz.1.4747': attribute type 2 has an invalid length. [ 547.971200][T25025] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.4747'. [ 548.056449][T25033] ipt_ECN: cannot use operation on non-tcp rule [ 548.122009][T25035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4749'. [ 548.210851][T25037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4750'. [ 548.303309][T25043] netlink: zone id is out of range [ 548.303454][T25043] netlink: zone id is out of range [ 548.309456][T25041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4752'. [ 548.411244][T25048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4755'. [ 548.619089][T25061] tun0: tun_chr_ioctl cmd 1074025675 [ 548.619113][T25061] tun0: persist disabled [ 548.704431][T25068] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 548.757392][T25070] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 548.929134][T25082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4767'. [ 549.020601][T25089] validate_nla: 1 callbacks suppressed [ 549.020622][T25089] netlink: 'syz.3.4770': attribute type 7 has an invalid length. [ 549.020637][T25089] netlink: 'syz.3.4770': attribute type 8 has an invalid length. [ 549.021405][T25089] netlink: 'syz.3.4770': attribute type 4 has an invalid length. [ 549.095769][T25093] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.4771'. [ 549.095870][T25093] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 549.107084][T25093] 0ªX¹¦Dö»: entered allmulticast mode [ 549.165271][T25096] syzkaller1: entered promiscuous mode [ 549.165293][T25096] syzkaller1: entered allmulticast mode [ 549.355951][T25108] syzkaller0: entered promiscuous mode [ 549.355974][T25108] syzkaller0: entered allmulticast mode [ 549.469324][T25113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4778'. [ 549.470969][T25113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4778'. [ 549.979834][T25131] batman_adv: batadv0: Adding interface: nicvf0 [ 549.979851][T25131] batman_adv: batadv0: The MTU of interface nicvf0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.979875][T25131] batman_adv: batadv0: Not using interface nicvf0 (retrying later): interface not active [ 550.053269][T25121] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 550.138965][T25137] syzkaller1: entered promiscuous mode [ 550.138986][T25137] syzkaller1: entered allmulticast mode [ 550.141857][T25138] netlink: 'syz.0.4789': attribute type 21 has an invalid length. [ 550.436171][T25157] bond9: option min_links: invalid value (18446744073709551614) [ 550.436195][T25157] bond9: option min_links: allowed values 0 - 2147483647 [ 550.475224][T25157] bond9 (unregistering): Released all slaves [ 550.674152][T25174] bond9: option min_links: invalid value (18446744073709551614) [ 550.674195][T25174] bond9: option min_links: allowed values 0 - 2147483647 [ 550.704450][T25174] bond9 (unregistering): Released all slaves [ 551.088790][T25199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.288435][T25218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.302422][T25222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.366015][T25217] netlink: 'syz.4.4805': attribute type 1 has an invalid length. [ 551.945548][T25255] syzkaller1: entered promiscuous mode [ 551.945573][T25255] syzkaller1: entered allmulticast mode [ 552.619179][T25291] can: request_module (can-proto-0) failed. [ 552.704785][T25294] vlan0: entered promiscuous mode [ 553.171763][T25326] __nla_validate_parse: 26 callbacks suppressed [ 553.171785][T25326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4831'. [ 553.246228][T25334] syzkaller0: entered promiscuous mode [ 553.246251][T25334] syzkaller0: entered allmulticast mode [ 553.537982][T25352] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4838'. [ 553.541763][T25354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4840'. [ 553.584042][T25356] ipt_ah: unknown flags FF [ 553.755994][T25366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 553.758526][T25366] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 553.845520][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4841'. [ 554.044951][T25377] dvmrp1: entered allmulticast mode [ 554.599915][T25393] netlink: 'syz.3.4851': attribute type 10 has an invalid length. [ 554.628244][T25393] team0: Device wg2 is of different type [ 554.823976][T25397] bond9: invalid ARP target 0.0.0.0 specified for addition [ 554.823998][T25397] bond9: option arp_ip_target: invalid value (0) [ 554.853127][T25397] bond9 (unregistering): Released all slaves [ 554.919932][T25403] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4855'. [ 554.939324][T25403] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4855'. [ 555.214668][T25418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 555.504592][T25440] x_tables: duplicate underflow at hook 1 [ 555.777180][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4864'. [ 556.436676][T25461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4870'. [ 556.462744][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4871'. [ 556.530887][T25470] bridge4: entered promiscuous mode [ 556.530907][T25470] bridge4: entered allmulticast mode [ 557.436789][T25495] netlink: 'syz.2.4881': attribute type 2 has an invalid length. [ 557.436831][T25495] netlink: 'syz.2.4881': attribute type 2 has an invalid length. [ 558.118761][T25534] ip_tables: iptables: counters copy to user failed while replacing table [ 558.461848][T25544] __nla_validate_parse: 1 callbacks suppressed [ 558.461868][T25544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 558.995715][T25566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4899'. [ 559.000115][T25564] netlink: 'syz.0.4897': attribute type 1 has an invalid length. [ 559.000134][T25564] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4897'. [ 559.201157][T25574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4898'. [ 559.311093][T25579] netlink: 'syz.1.4900': attribute type 32 has an invalid length. [ 559.311114][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4900'. [ 559.532156][T25579] bond4: option coupled_control: invalid value (192) [ 559.553995][T25579] bond4 (unregistering): Released all slaves [ 560.126722][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4904'. [ 560.126751][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4904'. [ 560.590508][T25618] netlink: 'syz.1.4910': attribute type 3 has an invalid length. [ 560.607784][T25618] netlink: 'syz.1.4910': attribute type 2 has an invalid length. [ 560.671854][T25620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4910'. [ 560.798541][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034fbc800: rx timeout, send abort [ 560.800341][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034fbe800: rx timeout, send abort [ 560.800655][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888034fbc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 560.801208][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888034fbe800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 561.081348][T25627] netlink: 'syz.2.4913': attribute type 29 has an invalid length. [ 561.273551][T25631] veth5: entered allmulticast mode [ 561.377047][T25637] netlink: 'syz.2.4916': attribute type 8 has an invalid length. [ 561.697390][T25653] netlink: 512 bytes leftover after parsing attributes in process `syz.1.4919'. [ 561.743762][T25657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4920'. [ 561.859954][T25661] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 562.259625][T25683] syzkaller1: entered promiscuous mode [ 562.259646][T25683] syzkaller1: entered allmulticast mode [ 562.278374][T25683] netlink: 'syz.0.4930': attribute type 4 has an invalid length. [ 562.417729][T25690] netlink: 'syz.2.4932': attribute type 1 has an invalid length. [ 562.666804][T25707] vlan4: entered promiscuous mode [ 562.666829][T25707] bond0: entered promiscuous mode [ 562.666844][T25707] bond_slave_0: entered promiscuous mode [ 562.667088][T25707] bond_slave_1: entered promiscuous mode [ 562.956517][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.956639][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.956739][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.956836][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.956943][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.957090][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.957197][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.957340][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.957453][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 562.957563][T25715] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 563.535892][T25737] __nla_validate_parse: 11 callbacks suppressed [ 563.535913][T25737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4944'. [ 563.656333][T25740] netlink: 'syz.0.4945': attribute type 1 has an invalid length. [ 563.849512][T25742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4946'. [ 564.014993][T25749] tipc: Enabled bearer , priority 9 [ 564.665452][T25787] ip_tables: iptables: counters copy to user failed while replacing table [ 564.873777][T25798] openvswitch: netlink: Unknown key attributes 1 [ 565.736478][T25843] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4975'. [ 566.009221][T25850] vlan1: entered allmulticast mode [ 566.009238][T25850] bond0: entered allmulticast mode [ 566.009248][T25850] bond_slave_0: entered allmulticast mode [ 566.185863][T25860] SET target dimension over the limit! [ 566.216227][T25857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4980'. [ 566.216250][T25857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4980'. [ 566.363926][T25866] netlink: 'syz.1.4984': attribute type 24 has an invalid length. [ 566.509427][T25875] Bluetooth: hci0: unsupported parameter 5135 [ 566.509449][T25875] Bluetooth: hci0: unsupported parameter 8192 [ 566.509470][T25875] Bluetooth: hci0: unsupported parameter 5135 [ 566.509482][T25875] Bluetooth: hci0: unsupported parameter 8192 [ 566.674122][T25879] xt_TCPMSS: Only works on TCP SYN packets [ 566.679064][T25882] xt_TCPMSS: Only works on TCP SYN packets [ 566.724506][T25884] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4989'. [ 566.724667][T25884] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4989'. [ 566.724858][T25884] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4989'. [ 566.725003][T25884] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4989'. [ 566.725146][T25884] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4989'. [ 567.138941][T25897] netlink: 'syz.0.4995': attribute type 1 has an invalid length. [ 567.693236][T25943] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 567.724297][T25943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 567.846892][T25950] netlink: 'syz.1.5010': attribute type 10 has an invalid length. [ 567.874656][T25940] syzkaller0: entered promiscuous mode [ 567.874678][T25940] syzkaller0: entered allmulticast mode [ 567.900162][T25950] dummy0: entered promiscuous mode [ 568.050185][T25960] netlink: zone id is out of range [ 568.050291][T25960] netlink: zone id is out of range [ 568.050344][T25960] netlink: zone id is out of range [ 568.050353][T25960] netlink: zone id is out of range [ 568.050361][T25960] netlink: zone id is out of range [ 568.050371][T25960] netlink: zone id is out of range [ 568.050378][T25960] netlink: zone id is out of range [ 568.050704][T25960] netlink: zone id is out of range [ 568.269904][T25973] ip_tables: iptables: counters copy to user failed while replacing table [ 568.293276][T25973] Unknown options in mask 4 [ 568.547868][T25981] __nla_validate_parse: 23 callbacks suppressed [ 568.547884][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5020'. [ 568.549781][T25981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5020'. [ 568.675216][T25984] netlink: 'syz.0.5021': attribute type 1 has an invalid length. [ 568.675247][T25984] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5021'. [ 569.068344][T25994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5022'. [ 570.886216][T26026] team0 (unregistering): Port device team_slave_0 removed [ 570.911395][T26026] team0 (unregistering): Port device team_slave_1 removed [ 571.177308][T26045] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5030'. [ 571.454858][T26055] vlan2: entered allmulticast mode [ 571.454879][T26055] bond0: entered allmulticast mode [ 571.454892][T26055] bond_slave_0: entered allmulticast mode [ 571.454907][T26055] bond_slave_1: entered allmulticast mode [ 571.589770][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5035'. [ 571.608321][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5035'. [ 571.608372][T26072] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 571.686165][ T52] block nbd4: Receive control failed (result -107) [ 571.716306][T26075] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5036'. [ 572.245342][T26107] netlink: 'syz.2.5046': attribute type 2 has an invalid length. [ 572.492571][T26120] netlink: 'syz.2.5049': attribute type 1 has an invalid length. [ 572.498815][T26124] netlink: 'syz.2.5049': attribute type 1 has an invalid length. [ 572.595993][T26127] netlink: 'syz.3.5051': attribute type 75 has an invalid length. [ 572.669808][T26133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5054'. [ 573.169716][T26158] netlink: 'syz.1.5063': attribute type 3 has an invalid length. [ 573.261742][T26154] macvlan2: entered promiscuous mode [ 573.261765][T26154] macvlan2: entered allmulticast mode [ 573.470752][T26178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5067'. [ 573.765228][T26201] netlink: 'syz.1.5075': attribute type 1 has an invalid length. [ 573.816422][T26202] __nla_validate_parse: 2 callbacks suppressed [ 573.816443][T26202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5075'. [ 573.816470][T26202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5075'. [ 574.178079][T26214] netlink: 'syz.4.5076': attribute type 1 has an invalid length. [ 574.229749][T26215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5076'. [ 574.245745][T26201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.345098][T26222] netlink: 'syz.3.5077': attribute type 11 has an invalid length. [ 574.345120][T26222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5077'. [ 574.621082][T26229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5080'. [ 575.401868][T26261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5086'. [ 575.402087][T26261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5086'. [ 575.468292][T26268] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 575.482886][T26264] IPVS: set_ctl: invalid protocol: 131 10.1.1.0:20001 [ 575.649236][T26274] 8021q: adding VLAN 0 to HW filter on device bond9 [ 575.877496][T26280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5089'. [ 576.019667][T26286] sctp: [Deprecated]: syz.0.5094 (pid 26286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.019667][T26286] Use struct sctp_sack_info instead [ 576.162306][T26295] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 576.167330][T26293] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5092'. [ 576.388041][T26305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5096'. [ 576.825033][T26313] netlink: 'syz.4.5099': attribute type 1 has an invalid length. [ 577.604661][T26344] netlink: 'syz.4.5104': attribute type 1 has an invalid length. [ 645.983920][T26379] netlink: 'syz.4.5115': attribute type 3 has an invalid length. [ 645.984121][T26379] netlink: 'syz.4.5115': attribute type 3 has an invalid length. [ 646.034366][T26380] __nla_validate_parse: 9 callbacks suppressed [ 646.034384][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5112'. [ 646.035201][T26378] set match dimension is over the limit! [ 646.040295][T26381] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.5111'. [ 646.180892][T26380] bond6: option xmit_hash_policy: invalid value (64) [ 646.202640][T26380] bond6 (unregistering): Released all slaves [ 646.264967][T26385] tipc: Bearer : already 2 bearers with priority 10 [ 646.264985][T26385] tipc: Bearer : trying with adjusted priority [ 646.265067][T26385] tipc: Enabling of bearer rejected, failed to enable media [ 646.265632][T26386] tipc: Bearer : already 2 bearers with priority 10 [ 646.265648][T26386] tipc: Bearer : trying with adjusted priority [ 646.265731][T26386] tipc: Enabling of bearer rejected, failed to enable media [ 646.576199][T26396] tipc: Enabling of bearer rejected, failed to enable media [ 646.600589][T26400] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5120'. [ 646.676872][T26402] geneve2: entered promiscuous mode [ 646.806593][T26405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5123'. [ 646.812742][T19406] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 39351 - 0 [ 646.819226][ T59] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 39351 - 0 [ 646.824348][ T2233] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 39351 - 0 [ 646.828356][T13202] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 39351 - 0 [ 646.951820][T26409] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5124'. [ 647.507333][T26430] netlink: 'syz.3.5130': attribute type 15 has an invalid length. [ 647.507359][T26430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5130'. [ 650.280845][T26438] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5131'. [ 650.553238][T26454] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 651.064780][T26470] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5141'. [ 651.099519][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5140'. [ 651.099558][T26475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5140'. [ 651.099578][T26475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5140'. [ 651.570396][T26482] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 651.570472][T26482] gretap1: entered promiscuous mode [ 651.570487][T26482] gretap1: entered allmulticast mode [ 651.605806][T26464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 651.897131][T26507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5150'. [ 652.013774][T26507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5150'. [ 652.303113][T26523] macvlan0: entered promiscuous mode [ 652.545121][T26552] xt_l2tp: v2 doesn't support IP mode [ 652.613660][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5156'. [ 652.825772][T26561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5157'. [ 653.073179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.640196][T26566] netlink: 'syz.4.5158': attribute type 1 has an invalid length. [ 655.640218][T26566] netlink: 'syz.4.5158': attribute type 3 has an invalid length. [ 655.640232][T26566] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5158'. [ 655.640249][T26566] NCSI netlink: No device for ifindex 813332851 [ 655.981819][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5161'. [ 656.326039][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5164'. [ 656.326557][T26585] netlink: 'syz.3.5164': attribute type 3 has an invalid length. [ 656.326576][T26585] netlink: 'syz.3.5164': attribute type 1 has an invalid length. [ 656.540898][T26597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5168'. [ 657.100005][T26625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5175'. [ 657.160879][T26625] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5175'. [ 657.343563][T26630] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5176'. [ 657.509040][T26641] ip_tables: iptables: counters copy to user failed while replacing table [ 657.972796][T26645] netlink: 'syz.1.5178': attribute type 1 has an invalid length. [ 658.188165][T26645] bond6: entered promiscuous mode [ 658.200980][T26645] 8021q: adding VLAN 0 to HW filter on device bond6 [ 658.324737][T26646] bond6: (slave bridge10): making interface the new active one [ 658.324766][T26646] bridge10: entered promiscuous mode [ 658.331201][T26646] bond6: (slave bridge10): Enslaving as an active interface with an up link [ 658.371258][T26648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5178'. [ 658.628946][T26651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5179'. [ 658.671134][T26651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5179'. [ 659.098117][T26653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.414924][T26655] openvswitch: netlink: ct_state flags ffffffff unsupported [ 660.245621][T26691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5188'. [ 660.630876][T26698] tipc: Failed to obtain node identity [ 660.630915][T26698] tipc: Enabling of bearer rejected, failed to enable media [ 660.680275][T26698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5191'. [ 661.451559][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5196'. [ 661.451618][T26721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5196'. [ 661.451633][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5196'. [ 661.802158][T26732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5198'. [ 662.627699][T26768] netlink: 'syz.1.5207': attribute type 4 has an invalid length. [ 662.673580][T26765] ip_tables: iptables: counters copy to user failed while replacing table [ 662.798646][T26780] ip_tables: iptables: counters copy to user failed while replacing table [ 662.843298][T26782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5208'. [ 663.208409][T26786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5211'. [ 663.280568][T26788] netlink: 'syz.2.5212': attribute type 29 has an invalid length. [ 663.296376][T26788] ip_tables: iptables: counters copy to user failed while replacing table [ 663.809931][T26802] netlink: 'syz.1.5216': attribute type 1 has an invalid length. [ 663.956945][T26813] ip_tables: iptables: counters copy to user failed while replacing table [ 663.961860][T26801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5216'. [ 664.066356][T26817] netlink: 'syz.4.5218': attribute type 1 has an invalid length. [ 664.069776][T26817] ip_tables: iptables: counters copy to user failed while replacing table [ 664.094805][T26823] netlink: 'syz.4.5218': attribute type 1 has an invalid length. [ 664.779010][T26805] veth7: entered promiscuous mode [ 664.797260][T26805] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 664.821558][T26803] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 665.022529][T26827] bond10: option fail_over_mac: invalid value (16) [ 665.026391][T26827] bond10 (unregistering): Released all slaves [ 665.287056][T26835] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5221'. [ 665.289849][T26834] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5221'. [ 665.380366][T26850] Bluetooth: ISO socket layer initialized [ 665.927753][T26880] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5233'. [ 666.216228][T26885] xt_policy: output policy not valid in PREROUTING and INPUT [ 666.399359][T26901] ip_tables: iptables: counters copy to user failed while replacing table [ 666.569305][T26908] __nla_validate_parse: 2 callbacks suppressed [ 666.569328][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5239'. [ 666.602114][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a350400: rx timeout, send abort [ 666.611224][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a350400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 667.081511][T26913] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5242'. [ 667.371949][T26923] ip_tables: iptables: counters copy to user failed while replacing table [ 667.639628][T26927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5246'. [ 667.991572][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5251'. [ 668.129371][T26952] netlink: 'syz.2.5251': attribute type 1 has an invalid length. [ 668.416876][T26976] tipc: Bearer : already 2 bearers with priority 10 [ 668.416898][T26976] tipc: Bearer : trying with adjusted priority [ 668.417166][T26976] tipc: Enabled bearer , priority 9 [ 668.471462][T26976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5257'. [ 668.887983][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5263'. [ 668.888893][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5263'. [ 669.363515][T27009] netlink: 'syz.3.5265': attribute type 12 has an invalid length. [ 669.596490][T27022] sctp: [Deprecated]: syz.2.5270 (pid 27022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.596490][T27022] Use struct sctp_sack_info instead [ 669.704560][T27024] xt_LOG: prefix is not null-terminated [ 670.057768][T27036] syzkaller1: entered promiscuous mode [ 670.057794][T27036] syzkaller1: entered allmulticast mode [ 670.314596][T27047] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5275'. [ 670.318124][T27048] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5275'. [ 670.364210][T27050] tipc: Started in network mode [ 670.364240][T27050] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 670.368384][T27050] tipc: Enabled bearer , priority 0 [ 670.494416][T27055] netlink: 75 bytes leftover after parsing attributes in process `syz.3.5279'. [ 670.522147][T27056] netlink: Conntrack attr has 8 unknown bytes [ 670.522179][T27056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.539288][T27059] SET target dimension over the limit! [ 670.743596][T27065] netlink: Unknown conntrack attr (type=205, max=9) [ 670.886450][T27068] netlink: 'syz.0.5282': attribute type 1 has an invalid length. [ 670.939231][T27068] 8021q: adding VLAN 0 to HW filter on device bond9 [ 671.091779][T27076] netlink: 'syz.1.5284': attribute type 10 has an invalid length. [ 671.194304][T27068] macvlan4: entered promiscuous mode [ 671.194574][T27068] macvlan4: entered allmulticast mode [ 671.506944][ T988] tipc: Node number set to 43690 [ 671.510803][T27090] 8021q: VLANs not supported on lo [ 671.748375][T27098] ip_tables: iptables: counters copy to user failed while replacing table [ 671.748693][T27098] ip_tables: iptables: counters copy to user failed while replacing table [ 671.749030][T27098] ip_tables: iptables: counters copy to user failed while replacing table [ 671.815894][T27098] ip_tables: iptables: counters copy to user failed while replacing table [ 671.816267][T27098] ip_tables: iptables: counters copy to user failed while replacing table [ 671.816790][T27098] ip_tables: iptables: counters copy to user failed while replacing table [ 671.818399][T27098] ip_tables: iptables: counters copy to user failed while replacing table [ 671.944516][T27098] ip_tables: iptables: counters copy to user failed while replacing table [ 672.146273][T27116] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 672.309141][T27117] tipc: Enabling of bearer rejected, failed to enable media [ 672.310353][T27122] tipc: Enabling of bearer rejected, failed to enable media [ 672.333615][T27117] __nla_validate_parse: 2 callbacks suppressed [ 672.333635][T27117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5293'. [ 673.065356][T27138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5296'. [ 673.065717][T27138] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5296'. [ 673.179447][T27144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5301'. [ 673.179502][T27144] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 673.331220][T27154] netlink: 'syz.0.5300': attribute type 25 has an invalid length. [ 673.533813][T27167] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5304'. [ 673.889316][T27180] netlink: 'syz.4.5309': attribute type 1 has an invalid length. [ 673.939488][T27189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5308'. [ 674.025946][T27193] bridge11: entered allmulticast mode [ 674.047053][T27194] bridge12: entered allmulticast mode [ 674.091879][T27197] netlink: 'syz.3.5312': attribute type 10 has an invalid length. [ 675.400626][T27237] bridge1: port 1(erspan0) entered disabled state [ 675.401169][T27237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5326'. [ 675.609928][T27250] 8021q: VLANs not supported on wg2 [ 675.828593][T27256] Bluetooth: hci0: unsupported parameter 5161 [ 675.828614][T27256] Bluetooth: hci0: unsupported parameter 8192 [ 675.828628][T27256] Bluetooth: hci0: unsupported parameter 5161 [ 675.828640][T27256] Bluetooth: hci0: unsupported parameter 8192 [ 676.243938][T27267] Bluetooth: hci0: unsupported parameter 5135 [ 676.243962][T27267] Bluetooth: hci0: unsupported parameter 8192 [ 676.243974][T27267] Bluetooth: hci0: unsupported parameter 5135 [ 676.243986][T27267] Bluetooth: hci0: unsupported parameter 8192 [ 676.515595][T27272] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 676.534429][T27272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5338'. [ 676.534450][T27272] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5338'. [ 676.534494][T27272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5338'. [ 676.933745][T27258] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 676.961003][T27295] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 676.985919][T27258] syz_tun: entered promiscuous mode [ 677.725688][T27314] bond10 (unregistering): Released all slaves [ 677.917161][T27323] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 677.932626][T27323] netlink: 'syz.4.5352': attribute type 21 has an invalid length. [ 677.932652][T27323] IPv6: NLM_F_CREATE should be specified when creating new route [ 677.932740][T27323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.932751][T27323] IPv6: NLM_F_CREATE should be set when creating new route [ 677.932797][T27323] IPv6: NLM_F_CREATE should be set when creating new route [ 677.932823][T27323] IPv6: NLM_F_CREATE should be set when creating new route [ 678.160316][T27328] netlink: 'syz.1.5349': attribute type 1 has an invalid length. [ 678.327313][T27328] 8021q: adding VLAN 0 to HW filter on device bond8 [ 678.361002][T27328] __nla_validate_parse: 6 callbacks suppressed [ 678.361021][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5349'. [ 678.395296][T27339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5354'. [ 678.481794][T27332] bond0: (slave veth0_to_bond): Releasing backup interface [ 678.481828][T27332] bond0: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 678.559830][T27356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5354'. [ 678.705792][T27332] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 678.870759][T27328] bridge13: entered promiscuous mode [ 678.889222][T27328] bond8: (slave bridge13): Enslaving as an active interface with an up link [ 678.931921][T27341] netlink: 'syz.2.5355': attribute type 12 has an invalid length. [ 679.363290][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5360'. [ 679.760019][T27402] netlink: 'syz.0.5365': attribute type 1 has an invalid length. [ 679.809155][T27402] bond10: entered promiscuous mode [ 679.809819][T27402] 8021q: adding VLAN 0 to HW filter on device bond10 [ 680.004717][T27402] ipvlan2: entered allmulticast mode [ 680.004739][T27402] bond10: entered allmulticast mode [ 680.142033][T27402] bond10: (slave bridge5): making interface the new active one [ 680.142057][T27402] bridge5: entered promiscuous mode [ 680.156185][T27402] bridge5: entered allmulticast mode [ 680.176306][T27402] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 680.344044][T27414] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5366'. [ 680.706863][T27433] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 681.749777][T27474] netlink: 'syz.4.5378': attribute type 1 has an invalid length. [ 681.784486][T27478] netlink: 'syz.0.5379': attribute type 11 has an invalid length. [ 681.784755][T27480] netlink: 'syz.2.5381': attribute type 2 has an invalid length. [ 681.835987][T27484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5380'. [ 681.860269][T27484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5380'. [ 681.974517][T27487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5378'. [ 682.012339][T27474] bond7: (slave veth0_to_bond): making interface the new active one [ 682.015490][T27474] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 682.064919][T27487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 682.174784][T27490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5383'. [ 682.217790][T27502] sctp: [Deprecated]: syz.0.5386 (pid 27502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 682.217790][T27502] Use struct sctp_sack_info instead [ 682.218768][T27502] netlink: 'syz.0.5386': attribute type 10 has an invalid length. [ 682.263064][T27502] team0: Port device dummy0 added [ 682.269421][T27502] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5386'. [ 682.356076][T27502] team0: Port device dummy0 removed [ 682.907937][T27497] sit0: entered promiscuous mode [ 682.963876][T27497] netlink: 'syz.3.5384': attribute type 1 has an invalid length. [ 683.550906][T27530] xt_CT: No such helper "netbios-ns" [ 683.678405][T27550] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.765681][T27553] __nla_validate_parse: 1 callbacks suppressed [ 683.765702][T27553] netlink: 6496 bytes leftover after parsing attributes in process `syz.4.5400'. [ 683.846842][T27557] netlink: 'syz.0.5398': attribute type 1 has an invalid length. [ 683.953398][T27557] 8021q: adding VLAN 0 to HW filter on device bond11 [ 684.025214][T27558] bond11: (slave veth0_to_bond): making interface the new active one [ 684.032146][T27558] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 684.068601][T27556] netlink: 'syz.4.5401': attribute type 2 has an invalid length. [ 684.109798][T27570] netlink: 'syz.1.5399': attribute type 11 has an invalid length. [ 684.141314][T27565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5399'. [ 684.159521][T27568] ip_tables: iptables: counters copy to user failed while replacing table [ 684.802159][T27588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5407'. [ 684.919810][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551ef800: rx timeout, send abort [ 684.919996][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880551ef800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 684.948686][T27599] netlink: 1744 bytes leftover after parsing attributes in process `syz.4.5412'. [ 684.970134][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551ec400: rx timeout, send abort [ 684.970338][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880551ec400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 685.448930][T27613] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 685.450781][T27622] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5415'. [ 686.464044][T27657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5421'. [ 686.654604][T27660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 686.672125][T27665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5424'. [ 686.685771][T27665] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5424'. [ 686.845876][T27671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5426'. [ 686.874362][T27672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5426'. [ 686.954954][T27665] veth11: entered promiscuous mode [ 687.065366][T27677] sock: sock_timestamping_bind_phc: sock not bind to device [ 687.266895][ T5278] veth0_vlan: left promiscuous mode [ 687.333963][ T5743] veth0_vlan: entered promiscuous mode [ 687.693878][T27707] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 688.261362][T27731] netlink: 'syz.0.5433': attribute type 16 has an invalid length. [ 688.435994][T27725] tipc: Resetting bearer [ 688.439726][T27725] tipc: Resetting bearer [ 688.951547][T27762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.033622][T27769] sctp: [Deprecated]: syz.0.5441 (pid 27769) Use of int in max_burst socket option deprecated. [ 689.033622][T27769] Use struct sctp_assoc_value instead [ 689.100284][T27770] __nla_validate_parse: 5 callbacks suppressed [ 689.100302][T27770] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5441'. [ 689.776602][T27797] veth0: entered promiscuous mode [ 689.999041][T27796] veth0: left promiscuous mode [ 690.310867][T27817] netlink: 'syz.1.5455': attribute type 21 has an invalid length. [ 690.310891][T27817] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5455'. [ 690.310939][T27817] netlink: 'syz.1.5455': attribute type 4 has an invalid length. [ 690.310953][T27817] netlink: 'syz.1.5455': attribute type 5 has an invalid length. [ 690.310966][T27817] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5455'. [ 690.695993][T27828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5458'. [ 690.721229][T27831] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5457'. [ 690.721251][T27831] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5457'. [ 690.805598][T27828] netlink: 'syz.4.5458': attribute type 10 has an invalid length. [ 690.950030][T27844] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 691.585838][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5461'. [ 691.590097][T27858] netlink: 404 bytes leftover after parsing attributes in process `syz.2.5461'. [ 691.590119][T27858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5461'. [ 691.590137][T27858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5461'. [ 691.950600][T27881] netlink: 'syz.4.5468': attribute type 1 has an invalid length. [ 692.377585][T27897] netlink: 'syz.4.5473': attribute type 1 has an invalid length. [ 692.429017][T27860] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 693.367534][T27938] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 693.413753][T27942] bond12: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 693.437232][T27940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.456540][T27942] bond12 (unregistering): Released all slaves [ 694.414556][T27978] netlink: 'syz.0.5490': attribute type 1 has an invalid length. [ 694.414578][T27978] netlink: 'syz.0.5490': attribute type 2 has an invalid length. [ 694.414590][T27978] netlink: 'syz.0.5490': attribute type 3 has an invalid length. [ 694.414603][T27978] __nla_validate_parse: 6 callbacks suppressed [ 694.414614][T27978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5490'. [ 694.479365][T27978] netlink: 'syz.0.5490': attribute type 1 has an invalid length. [ 694.479390][T27978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5490'. [ 694.661779][T27987] IPVS: Unknown mcast interface: caif0 [ 694.699215][T27993] Cannot find add_set index 34 as target [ 694.993575][T28003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5497'. [ 695.612153][T28024] syzkaller0: entered promiscuous mode [ 695.612179][T28024] syzkaller0: entered allmulticast mode [ 695.761398][T28031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5506'. [ 695.817529][T28031] ovs-dp0: entered promiscuous mode [ 695.841175][T28031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5506'. [ 696.162040][T28047] validate_nla: 3 callbacks suppressed [ 696.162059][T28047] netlink: 'syz.3.5510': attribute type 1 has an invalid length. [ 696.359528][T28060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5510'. [ 696.381268][T28050] 8021q: adding VLAN 0 to HW filter on device bond11 [ 696.398881][T28050] bond10: (slave bond11): making interface the new active one [ 696.435809][T28050] bond10: (slave bond11): Enslaving as an active interface with an up link [ 696.642801][T28047] bond10: (slave gretap5): Enslaving as a backup interface with an up link [ 696.930915][T28077] netlink: 'syz.3.5516': attribute type 1 has an invalid length. [ 696.989960][T28073] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5515'. [ 697.002983][T28072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5515'. [ 697.015133][T28072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5515'. [ 697.020360][T28072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5515'. [ 697.041447][T28073] netlink: 'syz.0.5515': attribute type 10 has an invalid length. [ 697.085733][T28077] bond12: entered promiscuous mode [ 697.086579][T28077] 8021q: adding VLAN 0 to HW filter on device bond12 [ 698.012613][T28109] xt_HMARK: proto mask must be zero with L3 mode [ 698.012834][T28112] xt_HMARK: proto mask must be zero with L3 mode [ 698.389976][T28123] bond2: (slave .`): Releasing active interface [ 698.441339][T28123] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.484916][T28123] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.507922][T28123] .` (unregistering): Released all slaves [ 698.878937][T28136] netlink: zone id is out of range [ 698.878975][T28136] netlink: zone id is out of range [ 698.879013][T28136] netlink: zone id is out of range [ 698.879022][T28136] netlink: zone id is out of range [ 698.879032][T28136] netlink: zone id is out of range [ 698.879041][T28136] netlink: zone id is out of range [ 698.879102][T28136] netlink: zone id is out of range [ 699.139344][T28147] netlink: NAT attribute has 4 unknown bytes [ 699.139381][T28147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.355716][T28151] IPVS: Scheduler module ip_vs_sip not found [ 699.770729][T28164] syzkaller0: entered promiscuous mode [ 699.770753][T28164] syzkaller0: entered allmulticast mode [ 699.921306][T28164] wlan1 speed is unknown, defaulting to 1000 [ 699.935290][T28164] lo speed is unknown, defaulting to 1000 [ 700.416280][T28187] __nla_validate_parse: 56 callbacks suppressed [ 700.418049][T28187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5540'. [ 700.434773][T28187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5540'. [ 700.968660][T28203] IPv6: addrconf: prefix option has invalid lifetime [ 701.002891][T28203] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 701.003139][T28203] syzkaller1: linktype set to 823 [ 701.925546][T28232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5554'. [ 701.974827][T28237] netlink: 'syz.1.5556': attribute type 1 has an invalid length. [ 701.974851][T28237] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5556'. [ 702.192916][T28242] xt_IDLETIMER: label is empty or not nul-terminated [ 702.438859][T28246] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5559'. [ 702.506504][T28222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5551'. [ 702.506545][T28222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5551'. [ 702.765191][T28248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5560'. [ 702.765213][T28248] tc_dump_action: action bad kind [ 703.148905][T28266] tipc: Started in network mode [ 703.148938][T28266] tipc: Node identity ac1414aa, cluster identity 4711 [ 703.149171][T28266] tipc: New replicast peer: 172.20.20.187 [ 703.165778][T28266] tipc: Enabled bearer , priority 10 [ 703.305924][T28270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5565'. [ 703.305955][T28270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5565'. [ 703.990848][T28288] block nbd0: Unsupported socket: should be TCP or UNIX. [ 704.262957][ T5729] tipc: Node number set to 2886997162 [ 704.954050][T28325] netlink: 'syz.1.5578': attribute type 1 has an invalid length. [ 705.081830][T28325] 8021q: adding VLAN 0 to HW filter on device bond9 [ 705.163503][T28329] bond9: (slave veth9): Enslaving as an active interface with a down link [ 705.202047][T28325] netlink: 'syz.1.5578': attribute type 11 has an invalid length. [ 705.209552][T28335] net_ratelimit: 2 callbacks suppressed [ 705.209598][T28335] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 705.430570][T28340] __nla_validate_parse: 5 callbacks suppressed [ 705.430601][T28340] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5583'. [ 705.607569][T28345] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5585'. [ 705.607812][T28345] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5585'. [ 705.677351][T28347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5586'. [ 706.018035][T28364] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000005184 [ 706.137601][T28366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5594'. [ 706.326736][T28372] netlink: 'syz.1.5595': attribute type 21 has an invalid length. [ 706.326761][T28372] IPv6: NLM_F_CREATE should be specified when creating new route [ 706.327013][T28372] netlink: 'syz.1.5595': attribute type 1 has an invalid length. [ 706.612623][T28383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5597'. [ 706.814078][T28390] tc_dump_action: action bad kind [ 736.044920][T28407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5605'. [ 736.120355][T28406] netlink: 'syz.0.5602': attribute type 21 has an invalid length. [ 736.120381][T28406] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.424471][T28417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5603'. [ 736.552577][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.559914][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.605657][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.611994][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.630140][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 736.713371][T28426] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 736.734033][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.765238][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.767701][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 736.768890][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 736.771410][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 736.925117][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.925482][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.925800][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 736.930889][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 736.988949][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.989279][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.989584][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.990510][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.991103][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 737.008231][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 737.618967][T28434] xt_ecn: cannot match TCP bits for non-tcp packets [ 739.072639][ T5621] Bluetooth: hci6: command tx timeout [ 739.073275][ T52] Bluetooth: hci2: command tx timeout [ 739.265562][T28415] wlan1 speed is unknown, defaulting to 1000 [ 739.267292][T28415] lo speed is unknown, defaulting to 1000 [ 739.830555][T28418] wlan1 speed is unknown, defaulting to 1000 [ 739.848987][T28418] lo speed is unknown, defaulting to 1000 [ 740.067280][T28499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5624'. [ 740.586689][T28523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5628'. [ 740.586716][T28523] netlink: 'syz.1.5628': attribute type 3 has an invalid length. [ 740.640314][T28524] openvswitch: netlink: Flow actions attr not present in new flow. [ 740.653288][T28524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5627'. [ 740.680920][T28525] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 740.975701][T28523] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 740.981046][T28523] bond11 (unregistering): Released all slaves [ 741.039764][T28524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.153098][ T5621] Bluetooth: hci6: command tx timeout [ 741.153178][ T52] Bluetooth: hci2: command tx timeout [ 741.222139][T28524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.266555][T28415] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.266766][T28415] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.266913][T28415] bridge_slave_0: entered allmulticast mode [ 741.269925][T28415] bridge_slave_0: entered promiscuous mode [ 741.387650][T28415] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.387779][T28415] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.387952][T28415] bridge_slave_1: entered allmulticast mode [ 741.390907][T28415] bridge_slave_1: entered promiscuous mode [ 741.528697][T28415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.649146][T28415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.769350][T28415] team0: Port device team_slave_0 added [ 741.783907][T28415] team0: Port device team_slave_1 added [ 741.819741][T28415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.819757][T28415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.819785][T28415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.821754][T28415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.821768][T28415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.821793][T28415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.959663][T28415] hsr_slave_0: entered promiscuous mode [ 741.960676][T28415] hsr_slave_1: entered promiscuous mode [ 742.596033][T28418] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.596189][T28418] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.596571][T28418] bridge_slave_0: entered allmulticast mode [ 742.600343][T28418] bridge_slave_0: entered promiscuous mode [ 742.671332][T28418] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.671476][T28418] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.671624][T28418] bridge_slave_1: entered allmulticast mode [ 742.698634][T28418] bridge_slave_1: entered promiscuous mode [ 742.848780][T28418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.848971][T28415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 742.871772][T28415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.881231][T28415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 742.893640][T28415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.897310][T28418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.897823][T28415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 742.928471][T28415] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 742.950982][T28415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 742.962664][T28415] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.036880][T28418] team0: Port device team_slave_0 added [ 743.054807][T28418] team0: Port device team_slave_1 added [ 743.130928][T28418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.130953][T28418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.130980][T28418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.184630][T28418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.184647][T28418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.184674][T28418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.242450][ T52] Bluetooth: hci2: command tx timeout [ 743.242483][ T52] Bluetooth: hci6: command tx timeout [ 743.326186][T28418] hsr_slave_0: entered promiscuous mode [ 743.329433][T28418] hsr_slave_1: entered promiscuous mode [ 743.330186][T28418] debugfs: 'hsr0' already exists in 'hsr' [ 743.330204][T28418] Cannot create hsr debugfs directory [ 743.624192][T28415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.727864][T28415] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.761315][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.761442][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.796047][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.796149][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.889024][T28418] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 743.907449][T28418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.919590][T28418] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 743.945939][T28418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.964221][T28418] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 743.988890][T28418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.991485][T28418] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 744.013469][T28418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.328643][T28418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.390532][T28418] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.418317][T26530] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.418418][T26530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.458991][T26529] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.459087][T26529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.313282][ T52] Bluetooth: hci2: command tx timeout [ 745.313329][ T5621] Bluetooth: hci6: command tx timeout [ 745.431869][T28415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.871004][T28418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.398010][T28415] veth0_vlan: entered promiscuous mode [ 746.429177][T28415] veth1_vlan: entered promiscuous mode [ 746.564859][T28415] veth0_macvtap: entered promiscuous mode [ 746.587204][T28415] veth1_macvtap: entered promiscuous mode [ 746.666095][T28415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.695133][T28415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.763364][T26532] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.763408][T26532] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.763443][T26532] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.763477][T26532] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.049163][T28418] veth0_vlan: entered promiscuous mode [ 747.092043][T28418] veth1_vlan: entered promiscuous mode [ 747.163969][T26527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.163991][T26527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.268218][T28418] veth0_macvtap: entered promiscuous mode [ 747.283485][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.283504][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.285683][T28418] veth1_macvtap: entered promiscuous mode [ 747.411918][T28418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.441674][T28418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.485189][T26530] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.486565][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.486763][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.486929][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.911118][T26535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.911143][T26535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.059120][T26535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.059143][T26535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.578204][T28591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 770.826728][T28612] netlink: 'syz.6.5631': attribute type 2 has an invalid length. [ 771.127681][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5636'. [ 771.280075][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5637'. [ 771.280110][T28628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5637'. [ 771.687297][T28646] netlink: 'syz.6.5642': attribute type 2 has an invalid length. [ 771.946996][T28661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5645'. [ 771.967928][T28662] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 772.152540][T28635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.502157][T28683] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5649'. [ 772.590890][T26530] IPVS: starting estimator thread 0... [ 772.675449][T28686] IPVS: using max 27 ests per chain, 64800 per kthread [ 773.249954][T28691] syzkaller0: entered promiscuous mode [ 773.249977][T28691] syzkaller0: entered allmulticast mode [ 773.475715][T28694] netlink: 'syz.6.5651': attribute type 1 has an invalid length. [ 773.475736][T28694] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5651'. [ 773.475750][T28694] netlink: 'syz.6.5651': attribute type 2 has an invalid length. [ 773.475762][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5651'. [ 773.612603][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5651'. [ 773.665014][T28703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5655'. [ 773.842838][T28700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.896424][T28701] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5654'. [ 773.955867][T28700] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 774.887713][T28711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.570902][T28723] bridge14: entered promiscuous mode [ 775.570925][T28723] bridge14: entered allmulticast mode [ 776.877590][T28775] __nla_validate_parse: 4 callbacks suppressed [ 776.877613][T28775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5672'. [ 776.923715][T28772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5672'. [ 777.079263][T28780] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5675'. [ 777.119096][T28780] gtp0: entered promiscuous mode [ 777.119116][T28780] gtp0: entered allmulticast mode [ 777.458700][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.459164][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.459565][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.461276][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.461771][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.462159][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.533536][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.558769][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.559141][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.559511][T28795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.658101][T28799] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5679'. [ 778.508849][T28825] netlink: 'syz.3.5682': attribute type 39 has an invalid length. [ 778.540007][T28818] bond12 (unregistering): Released all slaves [ 779.614073][T28840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5687'. [ 779.614107][T28840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5687'. [ 779.666403][T28843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5687'. [ 779.666440][T28843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5687'. [ 779.779341][T28847] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5688'. [ 780.067846][T28853] veth1_vlan: entered promiscuous mode [ 780.128311][T28854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5689'. [ 780.395572][T28863] netlink: 'syz.1.5692': attribute type 1 has an invalid length. [ 780.589977][T28863] 8021q: adding VLAN 0 to HW filter on device bond11 [ 780.925290][T28871] bond11: (slave bridge14): making interface the new active one [ 780.973156][T28871] bond11: (slave bridge14): Enslaving as an active interface with an up link [ 782.211873][T28901] netlink: 'syz.6.5701': attribute type 2 has an invalid length. [ 782.375270][T28901] __nla_validate_parse: 4 callbacks suppressed [ 782.375292][T28901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5701'. [ 782.375321][T28901] netlink: 'syz.6.5701': attribute type 10 has an invalid length. [ 782.375338][T28901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5701'. [ 782.487919][T28901] geneve2: entered promiscuous mode [ 782.487945][T28901] geneve2: entered allmulticast mode [ 782.530866][T28912] netlink: 'syz.3.5705': attribute type 1 has an invalid length. [ 782.532047][T28913] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 782.559882][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5705'. [ 782.690868][T28912] 8021q: adding VLAN 0 to HW filter on device bond13 [ 783.362023][T28931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5708'. [ 783.362051][T28931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5708'. [ 783.422962][T28940] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20004 [ 783.461000][T28928] net_ratelimit: 7 callbacks suppressed [ 783.461018][T28928] netlink: Failed to add  helper -22 [ 783.461063][T28928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.997788][T28949] netlink: 'syz.0.5713': attribute type 21 has an invalid length. [ 783.997813][T28949] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5713'. [ 784.186448][T28957] netlink: 'syz.1.5714': attribute type 4 has an invalid length. [ 784.186470][T28957] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5714'. [ 784.283347][T28958] netlink: 'syz.6.5716': attribute type 26 has an invalid length. [ 784.283759][T28957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.598774][T29001] block nbd0: Unsupported socket: should be TCP or UNIX. [ 785.620411][T29001] xt_CONNSECMARK: invalid mode: 0 [ 785.639913][T29001] netlink: 'syz.1.5725': attribute type 21 has an invalid length. [ 785.775030][T29001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5725'. [ 785.804291][T29008] block nbd0: Unsupported socket: should be TCP or UNIX. [ 785.841812][T29006] netlink: 'syz.1.5725': attribute type 21 has an invalid length. [ 785.841873][T29006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5725'. [ 785.871738][T29013] xt_CONNSECMARK: invalid mode: 0 [ 786.460755][T29027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5729'. [ 787.141196][T29051] netlink: 'syz.1.5736': attribute type 10 has an invalid length. [ 787.247914][T29051] team0: Device veth0_macvtap failed to register rx_handler [ 787.978736][T29075] __nla_validate_parse: 3 callbacks suppressed [ 787.978756][T29075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5741'. [ 788.058006][T29080] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 788.104910][T29086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5745'. [ 788.105882][T29086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5745'. [ 788.501383][T29094] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5747'. [ 788.564785][T29094] syzkaller1: entered promiscuous mode [ 788.564807][T29094] syzkaller1: entered allmulticast mode [ 788.787902][T29108] netlink: 'syz.3.5749': attribute type 1 has an invalid length. [ 789.151308][T29108] 8021q: adding VLAN 0 to HW filter on device bond14 [ 789.300253][T29110] bond8: (slave veth0_to_bond): Releasing backup interface [ 789.300277][T29110] bond8: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 789.453243][T29110] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 789.836258][T29140] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5755'. [ 789.836380][T29139] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5755'. [ 790.888535][T29158] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5758'. [ 790.984698][T29159] syzkaller1: entered promiscuous mode [ 790.992490][T29159] syzkaller1: entered allmulticast mode [ 791.120403][T29188] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 791.315159][T29184] netlink: 'syz.6.5764': attribute type 5 has an invalid length. [ 791.548237][T29198] xt_hashlimit: size too large, truncated to 1048576 [ 791.629259][T29198] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5767'. [ 791.871692][T29203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5769'. [ 792.266189][T29203] tipc: Enabling of bearer rejected, failed to enable media [ 792.425271][T29203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5769'. [ 793.061885][T29233] netlink: NAT attribute has 5 unknown bytes [ 793.061922][T29233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.099273][T29233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5773'. [ 793.252000][T29240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5774'. [ 793.821926][T29259] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5780'. [ 793.931761][T29264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5777'. [ 794.098860][T29266] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5777'. [ 794.310785][T29273] ip6gretap0: entered promiscuous mode [ 794.529303][T29280] nbd: socks must be embedded in a SOCK_ITEM attr [ 794.791436][T29282] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5784'. [ 794.888264][T29285] netlink: 'syz.0.5785': attribute type 7 has an invalid length. [ 795.154877][T29294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5787'. [ 795.176593][T29297] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5789'. [ 795.202100][T29297] netlink: 'syz.6.5789': attribute type 10 has an invalid length. [ 795.210431][T29297] veth0_vlan: entered allmulticast mode [ 795.258873][T29297] team0: Device veth0_vlan failed to register rx_handler [ 795.661085][T29305] openvswitch: netlink: Missing valid actions attribute. [ 795.736658][T29302] ip6gre1: entered allmulticast mode [ 795.804911][T26532] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 796.567555][T29334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5795'. [ 796.567581][T29334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5795'. [ 797.979265][T29356] hsr_slave_0: left promiscuous mode [ 797.999145][T29356] hsr_slave_1: left promiscuous mode [ 798.248745][T29358] __nla_validate_parse: 3 callbacks suppressed [ 798.248765][T29358] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5801'. [ 798.668547][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5797'. [ 798.751517][T29376] netlink: 576 bytes leftover after parsing attributes in process `syz.1.5805'. [ 799.886790][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 800.347166][T29419] IPv6: NLM_F_CREATE should be specified when creating new route [ 801.371090][T29450] syzkaller1: entered promiscuous mode [ 801.371113][T29450] syzkaller1: entered allmulticast mode [ 802.121840][T29465] netlink: 'syz.5.5827': attribute type 1 has an invalid length. [ 802.736770][T29400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 802.741843][T29465] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5827'. [ 803.539731][T29478] netlink: 'syz.6.5833': attribute type 21 has an invalid length. [ 803.539755][T29478] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5833'. [ 803.539835][T29478] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5833'. [ 803.681113][T29485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5834'. [ 803.681140][T29485] bridge: RTM_NEWNEIGH with invalid ether address [ 803.996434][T29485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5834'. [ 803.996458][T29485] bridge: RTM_NEWNEIGH with invalid ether address [ 804.167122][T29496] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5837'. [ 804.484851][T29502] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5838'. [ 804.486206][T29507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5839'. [ 804.537613][T29506] netlink: 'syz.0.5839': attribute type 10 has an invalid length. [ 804.588547][T29506] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.642531][T29506] team0: entered promiscuous mode [ 804.642553][T29506] team_slave_0: entered promiscuous mode [ 804.642743][T29506] team_slave_1: entered promiscuous mode [ 804.693485][T29506] bond0: (slave team0): Enslaving as an active interface with an up link [ 804.732121][T29510] vlan4: entered promiscuous mode [ 804.732141][T29510] geneve1: entered promiscuous mode [ 804.933444][T29510] vlan4: entered allmulticast mode [ 804.933465][T29510] geneve1: entered allmulticast mode [ 805.158211][T29524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5845'. [ 805.879947][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 805.891588][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 805.899868][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 805.910040][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 805.912086][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 805.952666][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 806.189800][T29547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5851'. [ 806.408230][T29547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 806.435613][T29547] bond0: (slave bond1): Enslaving as an active interface with an up link [ 806.436758][T29551] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5852'. [ 807.434626][T29576] ipt_REJECT: TCP_RESET invalid for non-tcp [ 807.891954][T29596] syzkaller0: entered promiscuous mode [ 807.892162][T29596] syzkaller0: entered allmulticast mode [ 807.958697][ T52] Bluetooth: hci7: command tx timeout [ 808.025066][T29539] wlan1 speed is unknown, defaulting to 1000 [ 808.029318][T29539] lo speed is unknown, defaulting to 1000 [ 808.032675][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.197002][ T5621] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 808.434170][T29603] sctp: [Deprecated]: syz.1.5865 (pid 29603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 808.434170][T29603] Use struct sctp_sack_info instead [ 808.795655][T26530] bond0: (slave bridge4): interface is now down [ 808.836868][T26530] bond0: now running without any active interface! [ 808.866187][T29607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5866'. [ 809.725747][T29635] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.5870'. [ 809.753390][T29635] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 809.757413][T29635] 0ªX¹¦Dö»: entered allmulticast mode [ 810.032357][ T5621] Bluetooth: hci7: command tx timeout [ 810.106147][T29539] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.108270][T29539] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.108434][T29539] bridge_slave_0: entered allmulticast mode [ 810.127826][T29539] bridge_slave_0: entered promiscuous mode [ 810.149728][T29539] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.149829][T29539] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.160489][T29539] bridge_slave_1: entered allmulticast mode [ 810.178254][T29539] bridge_slave_1: entered promiscuous mode [ 810.436926][T29539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.472098][T29539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.711320][T29539] team0: Port device team_slave_0 added [ 810.730620][T29539] team0: Port device team_slave_1 added [ 810.994588][T29539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.994605][T29539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.994631][T29539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.996557][T29539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.996571][T29539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.996598][T29539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.260291][T29539] hsr_slave_0: entered promiscuous mode [ 811.270317][T29539] hsr_slave_1: entered promiscuous mode [ 811.288514][T29539] debugfs: 'hsr0' already exists in 'hsr' [ 811.288535][T29539] Cannot create hsr debugfs directory [ 811.490134][T29658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5875'. [ 811.490165][T29658] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5875'. [ 811.648165][T29658] bridge15: entered promiscuous mode [ 811.648192][T29658] bridge15: entered allmulticast mode [ 812.114878][ T5621] Bluetooth: hci7: command tx timeout [ 812.506532][T29539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.506570][T29539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.898393][T29539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.898427][T29539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.270327][T29669] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5878'. [ 813.349198][T29676] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5877'. [ 813.368455][T29539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.368490][T29539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.577501][T29539] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 813.609584][T29539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.609618][T29539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.907048][T29685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.192665][ T5621] Bluetooth: hci7: command tx timeout [ 814.978190][T29539] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 815.033757][T29539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.040877][T29539] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.100407][T29539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 815.123516][T29539] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.168233][T29539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 815.171283][T29539] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 815.241902][T29539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.611640][T29539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.733917][T29539] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.756401][T26530] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.756497][T26530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.806345][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.806447][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.924744][T29728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.929549][T29751] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5900'. [ 816.929592][T29751] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5900'. [ 817.146251][T29753] veth3: entered allmulticast mode [ 817.514726][T29768] team0: Device xfrm0 is of different type [ 817.585976][T29773] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5904'. [ 817.651569][T29539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.093031][T29539] veth0_vlan: entered promiscuous mode [ 818.151718][T29539] veth1_vlan: entered promiscuous mode [ 818.186307][T29780] ip_tables: iptables: counters copy to user failed while replacing table [ 818.203129][T29781] ip_tables: iptables: counters copy to user failed while replacing table [ 818.276911][T29780] syzkaller1: entered promiscuous mode [ 818.276949][T29780] syzkaller1: entered allmulticast mode [ 818.689441][T29793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 818.717685][T29793] bridge15: entered promiscuous mode [ 818.717749][T29793] bridge15: entered allmulticast mode [ 818.741707][T29539] veth0_macvtap: entered promiscuous mode [ 818.780724][T29539] veth1_macvtap: entered promiscuous mode [ 818.890784][T29539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.950171][T29539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.022719][T26527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.023170][T26527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.023469][T26527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.068104][T26529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.564762][T29800] sch_tbf: burst 7 is lower than device syzkaller0 mtu (65589) ! [ 819.711787][T29805] netlink: 'syz.0.5913': attribute type 1 has an invalid length. [ 819.835560][T29812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5913'. [ 819.866283][T29805] 8021q: adding VLAN 0 to HW filter on device bond12 [ 819.928824][T29807] bond12: (slave geneve3): making interface the new active one [ 819.930350][T29807] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 819.935275][T29813] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5914'. [ 819.936153][T29813] netlink: 6 bytes leftover after parsing attributes in process `syz.6.5914'. [ 819.997574][T26533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.997598][T26533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.515231][T26539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.515252][T26539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.215862][T29842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5846'. [ 821.659852][T29850] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5920'. [ 821.690946][T29851] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5920'. [ 822.112093][T29856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5921'. [ 822.658814][T29874] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 823.723852][T29888] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 823.823505][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 823.843706][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 823.846250][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 823.849029][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 823.894036][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 824.033020][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.181794][ T50] IPVS: starting estimator thread 0... [ 824.279871][T29904] IPVS: using max 27 ests per chain, 64800 per kthread [ 824.391288][T29906] ipt_REJECT: TCP_RESET invalid for non-tcp [ 825.953022][ T5621] Bluetooth: hci5: command tx timeout [ 825.979700][T29927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5935'. [ 826.086187][T29925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5935'. [ 826.426771][T29943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5937'. [ 826.426804][T29943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5937'. [ 826.426838][T29943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5937'. [ 826.747734][T29947] openvswitch: netlink: Missing key (keys=40, expected=100) [ 826.807141][T29890] wlan1 speed is unknown, defaulting to 1000 [ 826.810527][T29890] lo speed is unknown, defaulting to 1000 [ 827.142006][T29954] openvswitch: netlink: Flow actions attr not present in new flow. [ 827.740604][T29973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5944'. [ 828.033318][ T5621] Bluetooth: hci5: command tx timeout [ 829.199229][T29890] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.199410][T29890] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.199531][T29890] bridge_slave_0: entered allmulticast mode [ 829.201218][T29890] bridge_slave_0: entered promiscuous mode [ 829.240807][T29890] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.243676][T29890] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.243966][T29890] bridge_slave_1: entered allmulticast mode [ 829.246617][T29890] bridge_slave_1: entered promiscuous mode [ 829.408520][T29890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.411732][T29890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.469129][T29890] team0: Port device team_slave_0 added [ 829.471907][T29890] team0: Port device team_slave_1 added [ 829.517192][T29890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.517210][T29890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.517240][T29890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.519865][T29890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.519880][T29890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.519911][T29890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.660237][T29890] hsr_slave_0: entered promiscuous mode [ 829.661190][T29890] hsr_slave_1: entered promiscuous mode [ 829.661856][T29890] debugfs: 'hsr0' already exists in 'hsr' [ 829.661873][T29890] Cannot create hsr debugfs directory [ 829.971960][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5945'. [ 829.971982][T29978] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5945'. [ 830.112046][T29978] bridge1: entered promiscuous mode [ 830.112068][T29978] bridge1: entered allmulticast mode [ 830.124386][ T5621] Bluetooth: hci5: command tx timeout [ 830.196592][T30009] xt_l2tp: wrong L2TP version: 255 [ 830.731170][T30015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5955'. [ 831.280226][T29890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.280260][T29890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.280303][T29890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39351 - 0 [ 831.377727][T30020] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5956'. [ 831.906614][T29890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.906651][T29890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.906678][T29890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39351 - 0 [ 832.202953][ T5621] Bluetooth: hci5: command tx timeout [ 832.288565][T29890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.288599][T29890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.288625][T29890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39351 - 0 [ 832.391143][T30049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5964'. [ 832.391173][T30049] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 832.520409][T30055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5966'. [ 832.520642][T30055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5966'. [ 832.641957][T30059] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5967'. [ 832.699154][T30061] netlink: 'syz.5.5967': attribute type 8 has an invalid length. [ 832.699174][T30061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5967'. [ 832.894338][T30050] syzkaller1: entered promiscuous mode [ 832.894361][T30050] syzkaller1: entered allmulticast mode [ 832.950583][T30061] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.952312][T30061] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.325901][T29890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.325937][T29890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.325963][T29890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39351 - 0 [ 833.482107][T30052] syzkaller1: left promiscuous mode [ 833.482132][T30052] syzkaller1: left allmulticast mode [ 834.318660][T30083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5972'. [ 834.506874][T30068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5968'. [ 834.585843][T30068] bridge16: entered promiscuous mode [ 834.585865][T30068] bridge16: entered allmulticast mode [ 834.606029][T29890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 834.666097][T30086] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5972'. [ 834.701262][T29890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.706816][T30083] syzkaller1: entered promiscuous mode [ 834.707285][T30083] syzkaller1: entered allmulticast mode [ 834.831961][T29890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 834.896485][T29890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.910868][T29890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 834.971103][T29890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.981467][T29890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 835.107634][T29890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 835.682210][T29890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.819309][T29890] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.897360][T26535] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.897495][T26535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.931632][T30121] netlink: 'syz.5.5981': attribute type 32 has an invalid length. [ 836.010255][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.010352][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.800064][T30137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5982'. [ 836.818120][T30137] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5982'. [ 836.855031][T30140] x_tables: duplicate underflow at hook 1 [ 837.154861][T30150] pim6reg527: entered allmulticast mode [ 837.332464][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5988'. [ 837.369520][T30158] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 837.433863][T30167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5989'. [ 838.238727][T30177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5993'. [ 838.238749][T30177] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5993'. [ 838.685092][T30185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5995'. [ 838.896653][T30198] netlink: 'syz.5.5998': attribute type 58 has an invalid length. [ 839.138598][T29890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.216233][T30203] bond2: Unable to set up delay as MII monitoring is disabled [ 839.221675][T30203] bond2 (unregistering): Released all slaves [ 839.881342][T29890] veth0_vlan: entered promiscuous mode [ 839.958559][T29890] veth1_vlan: entered promiscuous mode [ 840.191936][T29890] veth0_macvtap: entered promiscuous mode [ 840.226541][T29890] veth1_macvtap: entered promiscuous mode [ 840.358269][T29890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.530754][T29890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.603218][T26539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.604178][T26539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.604213][T26539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.604245][T26539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.809550][T30242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.015314][T30246] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 841.344724][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.344744][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.427583][T30255] x_tables: duplicate entry at hook 1 [ 841.508029][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.508053][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.534691][T30272] __nla_validate_parse: 67 callbacks suppressed [ 842.534713][T30272] netlink: 328 bytes leftover after parsing attributes in process `syz.0.6017'. [ 843.667604][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 843.685138][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 843.688864][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 843.696774][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 843.701944][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 844.455145][T17856] tipc: Resetting bearer [ 844.781616][T30336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6034'. [ 844.904012][ T31] audit: type=1800 audit(1791313639.436:10): pid=30338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6032" name="memory.events" dev="tmpfs" ino=38 res=0 errno=0 [ 844.907755][T17856] tipc: Disabling bearer [ 844.946715][ T31] audit: type=1804 audit(1791313639.446:11): pid=30338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6032" name="/newroot/4/memory.events" dev="tmpfs" ino=38 res=1 errno=0 [ 845.613837][ T52] Bluetooth: hci6: Unexpected cc 0x2753 with no status [ 845.792534][ T52] Bluetooth: hci0: command tx timeout [ 846.289280][T26532] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.289352][T26532] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.289379][T26532] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 846.551655][T30346] syzkaller0: entered promiscuous mode [ 846.551678][T30346] syzkaller0: entered allmulticast mode [ 846.591619][T30353] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 846.808587][T30380] sctp: [Deprecated]: syz.0.6040 (pid 30380) Use of int in maxseg socket option. [ 846.808587][T30380] Use struct sctp_assoc_value instead [ 846.998418][T30379] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6041'. [ 846.999817][T30379] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6041'. [ 847.279127][T30383] bond1: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 847.324011][T30383] bond1 (unregistering): Released all slaves [ 847.691486][T26532] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.691522][T26532] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.691548][T26532] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 847.836311][T30299] wlan1 speed is unknown, defaulting to 1000 [ 847.873507][ T5621] Bluetooth: hci0: command tx timeout [ 847.900677][T30397] netlink: 'syz.5.6045': attribute type 12 has an invalid length. [ 847.900698][T30397] netlink: 'syz.5.6045': attribute type 29 has an invalid length. [ 847.900730][T30397] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6045'. [ 847.900751][T30397] netlink: 'syz.5.6045': attribute type 2 has an invalid length. [ 848.101301][T30406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6047'. [ 848.154521][T30411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6048'. [ 848.160406][T26532] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.190983][T26532] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.191013][T26532] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 848.260944][T30299] lo speed is unknown, defaulting to 1000 [ 848.845653][T26532] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.845688][T26532] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.845714][T26532] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 849.073662][T30418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6049'. [ 849.354931][T30433] netlink: 'syz.5.6053': attribute type 10 has an invalid length. [ 849.516949][T30433] veth0_vlan: entered allmulticast mode [ 849.529603][T30433] team0: Device veth0_vlan failed to register rx_handler [ 851.253064][T30299] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.253172][T30299] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.253298][T30299] bridge_slave_0: entered allmulticast mode [ 851.261490][T30299] bridge_slave_0: entered promiscuous mode [ 851.377583][T30299] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.377699][T30299] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.377845][T30299] bridge_slave_1: entered allmulticast mode [ 851.404852][T30299] bridge_slave_1: entered promiscuous mode [ 851.664920][T30486] netlink: 'syz.0.6061': attribute type 4 has an invalid length. [ 851.664943][T30486] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6061'. [ 851.739491][T26532] bridge_slave_1: left allmulticast mode [ 851.739516][T26532] bridge_slave_1: left promiscuous mode [ 851.740553][T26532] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.785111][T26532] bridge_slave_0: left allmulticast mode [ 851.785135][T26532] bridge_slave_0: left promiscuous mode [ 851.785328][T26532] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.828171][T26532] erspan0: left allmulticast mode [ 851.828394][T26532] bridge1: port 1(erspan0) entered disabled state [ 851.894308][T26532] dvmrp1: left allmulticast mode [ 852.082418][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6064'. [ 852.194274][ T32] INFO: task syz.2.5564:28268 blocked for more than 143 seconds. [ 852.194298][ T32] Not tainted syzkaller #0 [ 852.194310][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 852.194319][ T32] task:syz.2.5564 state:D stack:26664 pid:28268 tgid:28267 ppid:18888 task_flags:0x400140 flags:0x00080002 [ 852.194379][ T32] Call Trace: [ 852.194387][ T32] [ 852.194401][ T32] __schedule+0x17db/0x58f0 [ 852.194557][ T32] ? __pfx___schedule+0x10/0x10 [ 852.194595][ T32] ? schedule+0x90/0x2b0 [ 852.194627][ T32] schedule+0x164/0x2b0 [ 852.195319][ T32] schedule_preempt_disabled+0x13/0x30 [ 852.195348][ T32] __mutex_lock+0x7c1/0x1550 [ 852.195384][ T32] ? __mutex_lock+0x5d4/0x1550 [ 852.195418][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 852.195487][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 852.195542][ T32] ? net_generic+0x1e/0x240 [ 852.195567][ T32] ? net_generic+0x1e/0x240 [ 852.195622][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 852.195653][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 852.195712][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 852.195801][ T32] ? do_syscall_64+0x166/0x520 [ 852.195842][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.195869][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 852.195915][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 852.195965][ T32] ? rcu_is_watching+0x16/0xb0 [ 852.195995][ T32] ? trace_kmalloc+0x2a/0xf0 [ 852.196022][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 852.196049][ T32] ? __nla_parse+0x40/0x60 [ 852.196091][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 852.196158][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 852.196199][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 852.196238][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 852.196283][ T32] ? bpf_lsm_capable+0x9/0x20 [ 852.196306][ T32] ? security_capable+0x7e/0x2c0 [ 852.196393][ T32] genl_rcv_msg+0x614/0x7a0 [ 852.196431][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.196461][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 852.196507][ T32] netlink_rcv_skb+0x226/0x4a0 [ 852.196532][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.196564][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 852.196605][ T32] ? down_read+0x2be/0x330 [ 852.196644][ T32] genl_rcv+0x28/0x40 [ 852.196671][ T32] netlink_unicast+0x7bd/0x940 [ 852.196745][ T32] netlink_sendmsg+0x813/0xb40 [ 852.196781][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.196830][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 852.196881][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.196903][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 852.196954][ T32] ____sys_sendmsg+0x54e/0x850 [ 852.197012][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.197053][ T32] ? import_iovec+0x73/0xa0 [ 852.197111][ T32] ___sys_sendmsg+0x2a5/0x360 [ 852.197144][ T32] ? __lock_acquire+0x747/0x2de0 [ 852.197175][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.197214][ T32] ? futex_wait+0x2a2/0x390 [ 852.197271][ T32] ? __fget_files+0x2a/0x420 [ 852.197304][ T32] ? __fget_files+0x3a2/0x420 [ 852.197349][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 852.197388][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.197447][ T32] do_syscall_64+0x166/0x520 [ 852.197479][ T32] ? trace_irq_disable+0x3b/0x140 [ 852.197504][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.197528][ T32] ? clear_bhb_loop+0x70/0xc0 [ 852.197558][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.197582][ T32] RIP: 0033:0x7fa3c5f9e199 [ 852.197603][ T32] RSP: 002b:00007fa3c6e05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.197629][ T32] RAX: ffffffffffffffda RBX: 00007fa3c6225fa0 RCX: 00007fa3c5f9e199 [ 852.197647][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 852.197661][ T32] RBP: 00007fa3c60358e0 R08: 0000000000000000 R09: 0000000000000000 [ 852.197676][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.197691][ T32] R13: 00007fa3c6226038 R14: 00007fa3c6225fa0 R15: 00007ffd9ef1f308 [ 852.197729][ T32] [ 852.197781][ T32] [ 852.197781][ T32] Showing all locks held in the system: [ 852.197794][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 852.197811][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 852.197871][ T32] locks held by kworker/u8:3/50: 3, last CPU#0: [ 852.197888][ T32] #0: ffff888022f68140 ((wq_completion)krds_cp_wq#11/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.197953][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.198017][ T32] #2: ffff88807989e180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 852.198148][ T32] locks held by kworker/u8:6/115: 3, last CPU#1: [ 852.198164][ T32] #0: ffff88807eb49140 ((wq_completion)krds_cp_wq#11/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.198230][ T32] #1: ffffc900026f7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.198305][ T32] #2: ffff888031d4c980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 852.198383][ T32] locks held by dhcpcd/5278: 2, on CPU#0: [ 852.198398][ T32] #0: ffff8880551866e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 852.198447][ T32] #1: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14a0 [ 852.198532][ T32] locks held by getty/5375: 2, on CPU#0: [ 852.198546][ T32] #0: ffff8880314800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 852.198628][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 852.198711][ T32] locks held by kworker/0:6/5729: 3, on CPU#0: [ 852.198726][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.198784][ T32] #1: ffffc90004607c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.198842][ T32] #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 852.198941][ T32] locks held by kworker/u8:27/26530: 2, on CPU#0: [ 852.198957][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.199015][ T32] #1: ffffc90003ed7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.199080][ T32] locks held by kworker/u8:28/26532: 5, on CPU#0: [ 852.199095][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.199154][ T32] #1: ffffc90007fdfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.361851][ T32] #2: ffffffff90246408 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 852.362018][ T32] #3: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 852.362079][ T32] #4: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 852.362155][ T32] locks held by syz.4.5487/27970: 2, on CPU#1: [ 852.362305][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 852.362361][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 852.362456][ T32] locks held by syz.2.5564/28268: 2, on CPU#0: [ 852.362471][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 852.362525][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 852.362583][ T32] locks held by syz-executor/28418: 4, last CPU#0: [ 852.362598][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 852.362654][ T32] #1: ffff888033c02800 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 852.362703][ T32] #2: ffff888020fce540 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 852.362767][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 852.362825][ T32] locks held by kworker/0:2/28588: 3, on CPU#0: [ 852.362872][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.362927][ T32] #1: ffffc9000eec7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 852.362980][ T32] #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 852.363066][ T32] locks held by syz-executor/30299: 2, on CPU#0: [ 852.363081][ T32] #0: ffffffff8f9bbaa8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 852.363160][ T32] #1: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 852.363216][ T32] locks held by syz.0.6061/30486: 1, on CPU#0: [ 852.363231][ T32] #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 852.363296][ T32] locks held by syz.0.6061/30487: 2, on CPU#0: [ 852.416960][ T32] #0: ffffffff907a9c40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 852.417078][ T32] #1: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 852.417143][ T32] locks held by syz.5.6062/30489: 2, on CPU#0: [ 852.417161][ T32] #0: ffffffff8fa0cd80 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 852.417322][ T32] #1: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xaef/0x1c00 [ 852.417388][ T32] locks held by syz.5.6062/30491: 1, on CPU#0: [ 852.417405][ T32] #0: ffffffff8fa0cd80 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 852.417470][ T32] locks held by syz.5.6062/30494: 1, on CPU#1: [ 852.417487][ T32] #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 852.417551][ T32] locks held by syz.3.6064/30498: 2, on CPU#0: [ 852.417567][ T32] #0: ffff88807a590ce0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 852.417663][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 852.417730][ T32] locks held by modprobe/30497: 1, last CPU#0: [ 852.417747][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 852.540523][ T32] [ 852.540534][ T32] ============================================= [ 852.540534][ T32] [ 852.540558][ T32] NMI backtrace for cpu 0 [ 852.540572][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 852.540610][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 852.540622][ T32] Call Trace: [ 852.540631][ T32] [ 852.540640][ T32] dump_stack_lvl+0xe8/0x150 [ 852.540675][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 852.540766][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 852.540811][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 852.540837][ T32] sys_info+0x135/0x170 [ 852.540857][ T32] watchdog+0xfd7/0x1030 [ 852.540886][ T32] ? watchdog+0x1c7/0x1030 [ 852.540913][ T32] kthread+0x38b/0x480 [ 852.540933][ T32] ? __pfx_watchdog+0x10/0x10 [ 852.540951][ T32] ? __pfx_kthread+0x10/0x10 [ 852.540972][ T32] ret_from_fork+0x514/0xb70 [ 852.540993][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 852.541012][ T32] ? __switch_to+0xc89/0x1420 [ 852.541042][ T32] ? __pfx_kthread+0x10/0x10 [ 852.541063][ T32] ret_from_fork_asm+0x1a/0x30 [ 852.541107][ T32] [ 852.541114][ T32] Sending NMI from CPU 0 to CPUs 1: [ 852.541175][ C1] NMI backtrace for cpu 1 [ 852.541187][ C1] CPU: 1 UID: 0 PID: 115 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 852.541205][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 852.541216][ C1] Workqueue: krds_cp_wq#11/0 rds_connect_worker [ 852.541266][ C1] RIP: 0010:debug_object_activate+0x38/0x420 [ 852.541334][ C1] Code: 48 83 ec 48 49 89 f6 48 89 fb 65 48 8b 05 f8 6f aa 0e 48 89 44 24 40 48 8d 7c 24 18 31 ed ba 10 00 00 00 31 f6 e8 d8 d3 4c fd <48> c7 44 24 28 05 00 00 00 48 89 5c 24 30 4c 89 74 24 38 80 3d 26 [ 852.541349][ C1] RSP: 0018:ffffc90000a18d98 EFLAGS: 00000046 [ 852.541363][ C1] RAX: ffffc90000a18db0 RBX: ffff88804561f938 RCX: 0000000000000000 [ 852.541374][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a18dc0 [ 852.541385][ C1] RBP: 0000000000000000 R08: ffffc90000a18dbf R09: 0000000000000000 [ 852.541396][ C1] R10: ffffc90000a18db0 R11: fffff520001431b8 R12: 0000000000000001 [ 852.541407][ C1] R13: dffffc0000000000 R14: ffffffff8c0f9c20 R15: 0000000000000000 [ 852.541419][ C1] FS: 0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 852.541432][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.541443][ C1] CR2: 00007f6267a5dff8 CR3: 0000000042c50000 CR4: 00000000003526f0 [ 852.541457][ C1] Call Trace: [ 852.541463][ C1] [ 852.541475][ C1] enqueue_hrtimer+0xa9/0x2c0 [ 852.541493][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 852.541527][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 852.541554][ C1] handle_softirqs+0x226/0x860 [ 852.541577][ C1] ? do_softirq+0x77/0xd0 [ 852.541600][ C1] ? __inet6_bind+0x386/0xf30 [ 852.541639][ C1] do_softirq+0x77/0xd0 [ 852.541659][ C1] [ 852.541664][ C1] [ 852.541670][ C1] __local_bh_enable_ip+0x100/0x140 [ 852.541691][ C1] __inet6_bind+0x386/0xf30 [ 852.541712][ C1] kernel_bind+0x13e/0x1c0 [ 852.541728][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 852.541751][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 852.541778][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 852.541809][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 852.541837][ C1] ? lock_acquire+0x115/0x350 [ 852.541860][ C1] rds_connect_worker+0x1d8/0x290 [ 852.541879][ C1] ? process_scheduled_works+0x97a/0x1630 [ 852.541901][ C1] process_scheduled_works+0xc3d/0x1630 [ 852.541937][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 852.541962][ C1] ? assign_work+0x3cf/0x5d0 [ 852.541985][ C1] worker_thread+0xa47/0xfb0 [ 852.542026][ C1] kthread+0x38b/0x480 [ 852.542043][ C1] ? __pfx_worker_thread+0x10/0x10 [ 852.542066][ C1] ? __pfx_kthread+0x10/0x10 [ 852.542082][ C1] ret_from_fork+0x514/0xb70 [ 852.542098][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 852.542113][ C1] ? __switch_to+0xc89/0x1420 [ 852.542136][ C1] ? __pfx_kthread+0x10/0x10 [ 852.542153][ C1] ret_from_fork_asm+0x1a/0x30 [ 852.542187][ C1] [ 852.738226][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 853.667594][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 853.676729][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 853.686792][ T32] Call Trace: [ 853.690104][ T32] [ 853.693058][ T32] vpanic+0x56d/0xa60 [ 853.697066][ T32] ? __pfx___schedule+0x10/0x10 [ 853.701964][ T32] ? __pfx_vpanic+0x10/0x10 [ 853.706506][ T32] panic+0xc5/0xd0 [ 853.710284][ T32] ? __pfx_panic+0x10/0x10 [ 853.714725][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 853.720212][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 853.725605][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 853.731785][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 853.737975][ T32] watchdog+0x1030/0x1030 [ 853.742344][ T32] ? watchdog+0x1c7/0x1030 [ 853.746782][ T32] kthread+0x38b/0x480 [ 853.750871][ T32] ? __pfx_watchdog+0x10/0x10 [ 853.755572][ T32] ? __pfx_kthread+0x10/0x10 [ 853.760207][ T32] ret_from_fork+0x514/0xb70 [ 853.764827][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 853.769965][ T32] ? __switch_to+0xc89/0x1420 [ 853.774678][ T32] ? __pfx_kthread+0x10/0x10 [ 853.779290][ T32] ret_from_fork_asm+0x1a/0x30 [ 853.784100][ T32] [ 853.787731][ T32] Kernel Offset: disabled [ 853.792066][ T32] Rebooting in 86400 seconds..