last executing test programs: 2m46.265347881s ago: executing program 3 (id=10870): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="b4000000000000006b118a00000000008510000002000000850000000800000095000000000000009500000000000000fd6ab7a063545b06329b9aa9dea58e6759abbfb05f82ecde1a21cf967f3e5ad0b68be662d6834c4c5544eb83d80e880f44fd360cb972844858274335551efdb3d8b61a419aa53d7aa4e7d44f51a5161308d327e612ae38f47ef6f273c3373ecefa26d8803fca29f642093fbea55c720617c526982b89fcae47cf225a0bc577c19486a74259b2abff68040eff41564fd12f9d1f53074fe39a23fa44a967a1f420fa261f439bbef478c9da3ce5a8507bf2346a4d9bc20bfb8e4f5872f047cee04ccc9343a95a92674e0b44225b12bed1b3d38dfb8cd4911ccf4471b3"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) 2m46.200232068s ago: executing program 3 (id=10872): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x41, 0x0, 0x0, 0x0, 0x4000}}], 0x344, 0x10122, 0x0) 2m46.104963702s ago: executing program 3 (id=10874): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x7c, r2, 0x213, 0x1000000, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x60, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "702d556d9008267be52a6a95c66a6070"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3034548630f4eecc858c7430c1540eb1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f9aa5a8c649742d18538c5017552a2c8"}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x8004014) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 2m45.963832501s ago: executing program 3 (id=10878): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000280)={0x3}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x3, 0x1, 0x3, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000480)={r0, &(0x7f0000000340)='\x00', 0x800, &(0x7f0000000380)={@_ha_fsid={[0x8b02, 0xffff8691]}, {0x800, 0x9, 0xc, 0x7f}}, 0x5, &(0x7f0000000400), &(0x7f0000000440)=0xfffffffd}) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000004c0)={0xffff, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map=r5, r1, 0x21, 0x36, r0, @void, @void, @void, @value=r6, r4}, 0x20) 2m45.667975302s ago: executing program 3 (id=10882): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1e}, r1}, 0x14) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xf8, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}]}, @CTA_ZONE={0x6}, @CTA_TUPLE_MASTER={0x98, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x7f}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x4, 0x2, 0x5, 0x573800, 0x7ff]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0xd0) 2m45.486548216s ago: executing program 3 (id=10885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000040feb1fdb607d050cb41fe1626fbe188000000711048000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m35.596761574s ago: executing program 1 (id=11063): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x121}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000100)=0x8, 0x4) 2m35.464344551s ago: executing program 1 (id=11066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000bbfc010000000000000000000000000000000107944e240000020020203a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c00000000000400000000000000ffffac1414aa000000000000000005000000000000000900000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffff0500ffffff1d800000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0xb, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x9}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.399811198s ago: executing program 1 (id=11069): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) 2m35.293207159s ago: executing program 1 (id=11071): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@null, 0x4, 'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="35020000800e006400000004000280080000000000000000000000000000000000edc58d7d467ea406a2dcab8773c7cdde861a4efabada94089644abbd00adf53470866aed4b3f6d955550ad6da692efeae33a82cba6c5cc267e065558faee7d55b6b64dc7e0ee4ae6a2e3fbb9bde4aa2b5ecc0200e763b1ecfda27f51f6cef4532422f181ba260701f4"], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) 2m35.216751664s ago: executing program 1 (id=11072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3cc000, 0x6}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xeca}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x24, 0x1}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c890}, 0x54) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x27}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000000440)=""/124, 0x7d}, {&(0x7f0000000340)=""/104, 0x74}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f00000003c0), 0x59}, {&(0x7f0000007080)=""/129, 0x81}, {&(0x7f0000007140)=""/93, 0x5d}, {&(0x7f00000071c0)=""/165, 0xa5}, {&(0x7f0000007300)=""/34, 0x22}], 0x8}}], 0x2, 0x140, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000090000006b1141000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="b3", 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000600000002000000000050ef618c00000005002e5f00"/42], 0x0, 0x2a}, 0x20) 2m34.939122442s ago: executing program 1 (id=11076): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4}, 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x84, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @private2, 0x4}, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x437}]}, &(0x7f0000000280)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x84, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @private2, 0x4}, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x437}]}, &(0x7f0000000280)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m30.391786225s ago: executing program 32 (id=10885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000040feb1fdb607d050cb41fe1626fbe188000000711048000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m19.331443637s ago: executing program 33 (id=11076): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4}, 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x84, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @private2, 0x4}, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x437}]}, &(0x7f0000000280)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x84, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7, @private2, 0x4}, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x437}]}, &(0x7f0000000280)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 4.954861894s ago: executing program 2 (id=12206): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x7fff}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000089515609312fc3bec1d8a61800010000000000000000001d01000005000a40c5b1e9c51ee5", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r6, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r0, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000844}, 0x4) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r10, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4004044) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r14, 0x84, 0x66, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r12, 0x400, 0x0, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x8e, 0x1}}]}, 0x48}}, 0x8000) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010001fff050070000000000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8840) 4.67097666s ago: executing program 5 (id=12209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=r1, @ANYBLOB="030726bd7000000000001f000000f00448dc0d78e73d7b29cb15606886b51210dacffde234020f596f2d117b408bcb91a09344dd6e43308886d3b8912a05461818d42967e0797f57274a7eae6875bb1a6a312435a8850a06d64712b73eac1e767df894a17c78059ddc319d71950859c3e3929b928569ce621924bf800e0ffee1837916cee745e2f40cef8dd9f7b2c768ad66de647c"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 4.395503243s ago: executing program 6 (id=12210): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x20, 0x0, {0x2, 0x0, 0x94, 0x0, 0xfe, 0x0, 0xfe, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r3, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) 3.70555637s ago: executing program 2 (id=12213): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@delchain={0xfe8, 0x65, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x9}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x394, 0x2, [@TCA_FLOW_EMATCHES={0x390, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xb}, "1c0312edcb30a44dd2"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5e, 0x2, 0x100}, {0x1, 0x5, 0x1, "24a6c1e2b8"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x6}, {0xfff, 0x8, 0x4, 0x4, 0xf, 0x2}}}, @TCF_EM_IPSET={0x10, 0x7, 0x0, 0x0, {{0x100, 0x8, 0x5d}, {0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "1874c91328db744531121160cb6cfdf1c08b8dc969d6042f67b8b7ed2b727b7a67b06970cac416fee2d267f97c"}}]}, @TCA_EMATCH_TREE_LIST={0x2ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_DATA={0xc5, 0x5, "e8cf364a1749071a28ca0785eee0c302cbb471cdc077dcb2f894a5e775e526f9e760735534cc2db2f63efaa19e78a4df2156dfec8803958ea589a625c7c29ec4fcadd39f222c9a953635de670f6d28b006d003be09e945b39d76f3fdbe2bc49f148181ca0471354bfd7443cf6ebad4d7354ae6e93883e6e711b15eaa604172fa01367f6e0f80698c6bbb1212b4ce20906a611a7e95d9f3cf4a8eae2cd9c02b4029d10309e523cc6745581d00d3efc4075082a901533ac675a88df99a8a72f3d88b"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x1b8, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "d1c29811c8071633b253c065850aabc5cf24c121fe99a69426335e89e9bc42ed8e04a152bfeb4f06435fb3e63d579312f9bc947673b910ca3d52a581c00fa126fa1d3501260866bdc7be0863edf28be3e5f1c6c17035cc0ae2f18a398d92864bcdaaf3e8acc7038bc8ddb7d9c482795d6f14e1915de1cb16ace4fd908d65e98b82"}, @TCA_EM_IPT_MATCH_DATA={0xf1, 0x5, "6226848700e9fa41e4ed4959189e695dd3dafb61113b2264a9fc8fa00fdc7d47a7040d035024bedec8bd0ea2fdaeaeebe7abf7d2dc94af5c43b5d651448cf68642afbb86dccecbc1117d34dddf6a02c87e1a37e472244940c503967c3cba2205f91885dbe159c5e99b70d3929ae9978bff59a40d34d4126a200e97c36234a270d881b6083b0b6c96e323647ec6f9d7bf3f1d293b8a3a137e8611ed9479130d4490a4294effbb24c0f6fe1dd8253a0095ccd03fce9de2fc3a3a829ec4de86896d06a321cfd45d0af26e8171c50ed89c08df070f7e16bd9269d3d189c43bea3dd8a36967eb86272b33439019e193"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xae, 0x1, 0x7}, {0xfffffffc, 0x1, 0xdc, 0x5, 0x4, 0x0, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x66}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc14, 0x2, [@TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0xfaba, 0x2, 0x7, 0x9, 0xffffffff, 0x9, 0x6, 0xf, 0x2, 0xff, 0x7, 0x5, 0x9, 0x9, 0x8, 0x1, 0x14, 0xd, 0x2b, 0x1, 0x7, 0x5, 0xddf, 0x1, 0x2, 0xb, 0x4, 0xa, 0x9, 0xd, 0xfffff651, 0x81, 0x1, 0x5c, 0xfeaa, 0x6, 0x0, 0x1, 0x2, 0x1, 0x5, 0x1, 0x5, 0x4, 0x6e20, 0x400, 0x7, 0x5, 0x8, 0x6, 0x7, 0x10, 0x1000, 0x6, 0xfffffffc, 0x54, 0xc2, 0x5, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x7, 0x4, 0x3, 0x2, 0x7, 0x7, 0x1, 0x4, 0x6, 0x10000, 0x1, 0x5, 0x7, 0x5, 0x6, 0x10000, 0x3, 0x80000000, 0xa84e, 0x0, 0x5, 0x6c9e, 0x4, 0x80, 0xd, 0x8, 0xe, 0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0xeb17, 0xfffffff1, 0x3, 0xffff, 0xa020, 0xbb, 0xf, 0x3, 0x10, 0x2, 0x7ee5, 0x3, 0x5fe4, 0x401, 0x2, 0x98b, 0x1, 0x7fffffff, 0x4, 0x6, 0xfffffffa, 0x7, 0x7fffffff, 0x3, 0x1, 0x198b400, 0xe7, 0x2, 0xe31, 0x8, 0x2f, 0x7, 0x3e3, 0x3, 0xc, 0x3, 0xffffffff, 0x0, 0x5, 0x8, 0xfffffffc, 0x2d1000, 0xa, 0xfffffffd, 0x8, 0x7, 0x4, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x6, 0x8, 0x5, 0x6, 0x1, 0x8d76, 0x80000000, 0xe, 0x5, 0x6, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x7fffffff, 0x0, 0x2, 0x6, 0x81, 0x2, 0x0, 0xc0000, 0x3, 0x2d, 0xfffffff2, 0x5, 0x8, 0x7, 0xdb23, 0x27, 0x6, 0x0, 0x7, 0x0, 0x3, 0x3e, 0xa8b7, 0x6f0f2833, 0x80000000, 0x0, 0x10001, 0x244d, 0x227b, 0x56497fb0, 0x400, 0x5, 0x3, 0x1000, 0x6, 0x2, 0x40000, 0x0, 0x7, 0x3ff, 0x3, 0x6, 0x3, 0x60b, 0x100, 0xffff, 0x1, 0x4, 0x8, 0x8000, 0x8, 0x0, 0x80, 0x1, 0xff, 0xa, 0xf5d0, 0x3, 0x8000, 0x2, 0x406, 0x401, 0x8, 0xda79, 0x7fffffff, 0x1, 0x7, 0x4, 0x4c3, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x4, 0xd708a80, 0xff, 0x4, 0x37d, 0x400, 0x9, 0x7, 0x23894440, 0x9, 0xd75, 0x9, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffb6, 0x1, 0x1, 0x5, 0x0, 0x2, 0x1000, 0x1000, 0x8, 0x9, 0x7, 0x8, 0xe, 0x698, 0x4, 0x22, 0x200, 0xfffffff3, 0x8, 0x9, 0x876, 0xbb97, 0x8000000, 0x81c, 0x64127ccb, 0x9, 0x3, 0x4, 0xd, 0x8, 0x8, 0xa, 0xfffffffa, 0x0, 0x2, 0x7, 0xce0, 0xceb1, 0x80, 0x1, 0xe, 0x10, 0x100, 0x9, 0x1, 0x3, 0x3ff, 0x80, 0x1, 0x1, 0x3, 0x7, 0xda96, 0x7, 0x9, 0x4, 0x5, 0x8, 0xfffffffb, 0x3, 0x1, 0xa, 0x6, 0x8246, 0xd2, 0xf9, 0x3, 0x3, 0x401, 0x2, 0x3, 0x8, 0x8c3, 0x9, 0x55d, 0x8, 0x8001, 0x9, 0x5, 0x7, 0x5b4a, 0xfffffff2, 0x2, 0x6, 0xfffffffb, 0x8, 0x7, 0x1, 0x2, 0xf, 0x0, 0x0, 0x484c, 0x9, 0x800, 0x9, 0x157, 0x4, 0x4a05, 0x1000, 0xd93d, 0xc3, 0x3, 0x6, 0x3, 0x6, 0x80000001, 0x81, 0x2, 0xc, 0xff, 0x1, 0x7, 0x8, 0x8, 0xc, 0xaaed, 0x795, 0xc5, 0x10001, 0x4, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x10000, 0x6, 0x3b910aad, 0x200, 0x3a3, 0x91, 0x7, 0xfffffffd, 0x854, 0x4, 0x4, 0x7, 0x3, 0x5, 0x9, 0x2, 0x5, 0x8, 0x7, 0x8001, 0x100, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0x1, 0x1, 0xfff, 0xd8a, 0x6, 0x5, 0xc72f, 0x8a46, 0xcb, 0x7, 0xff6e, 0x8000, 0xce, 0x7fff, 0x5, 0x9, 0x1, 0x821a, 0x6, 0x7, 0x9, 0xf, 0x1, 0xfff, 0xe7, 0x887, 0x0, 0x3, 0x5, 0x9, 0x56e6, 0x49, 0x8ca, 0x0, 0x4, 0x3, 0x4, 0x9, 0x4, 0x8, 0x0, 0xffff4247, 0x0, 0x1, 0x422, 0x2, 0x2, 0x28, 0x8, 0x8, 0x4fb, 0x8, 0x0, 0x6, 0x4, 0xc1, 0x7, 0x80000001, 0x9, 0x3, 0xf3, 0x2, 0x1, 0x3, 0x1, 0x8, 0x3, 0xf87, 0x3, 0x5, 0xfffffffd, 0x401, 0x4, 0x3, 0xfff, 0xffff8001, 0x2, 0xb0, 0x4, 0x4, 0x2, 0xb, 0x0, 0x0, 0x4, 0xe, 0x6, 0x4, 0x8, 0x1, 0x100, 0x8001, 0xd, 0x4, 0x0, 0xda, 0xb, 0x5, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0xff, 0x81, 0x1, 0x1, 0x5, 0x8, 0xff, 0x0, 0x5, 0x9, 0x30, 0x6, 0x0, 0x7227, 0x4, 0x2020, 0xa39, 0x3, 0x3, 0x8, 0x5, 0x5, 0x7, 0x9, 0x2, 0x35, 0x81, 0x800, 0x4, 0x2, 0x16701ef0, 0x3, 0x5, 0x3, 0x3, 0x3, 0x8, 0x4, 0xffffff8b, 0x5, 0x7, 0x5, 0x40, 0xfe, 0x46, 0x2706, 0x9, 0x1, 0x10001, 0x2, 0x481, 0x4cdb, 0x4e7, 0x3, 0x101, 0x6, 0x3ff, 0x3, 0x8, 0x0, 0x6, 0x2, 0x1, 0xb, 0x10000, 0x8, 0x0, 0x3, 0x4, 0x86, 0x5, 0x9, 0x4c8, 0x1ff, 0x2e, 0x3, 0x8, 0x59a, 0x980, 0xb16, 0x3, 0x9, 0x9, 0x4, 0x8002, 0x5, 0x1, 0xfa, 0x3, 0x5, 0x0, 0x7, 0x6, 0x7, 0xf8, 0xffffffff, 0x8, 0x10001, 0x100, 0x1000, 0x2, 0x1000, 0x4, 0x3, 0x8001, 0x4, 0x2, 0x7, 0xf, 0x5, 0x3ff, 0x0, 0x910e, 0x965d, 0x86e1, 0x8, 0x9, 0xff, 0x7, 0x8, 0x0, 0xfffffffa, 0x9, 0x8, 0x1e, 0x0, 0x2, 0x3, 0x3, 0x5, 0x252b, 0x80, 0x8, 0x8000, 0x3, 0x7, 0x1, 0xffff3736, 0xffffffff, 0x7fff, 0x8, 0x8, 0x10001, 0x80000000, 0x2, 0x8dc, 0x2, 0x80000000, 0x6, 0x763, 0x410, 0x6, 0x4000, 0x80000000, 0x3, 0x2, 0xad02, 0x1, 0x628aab26, 0x7, 0x8, 0x8, 0x9, 0x9, 0x3, 0x80000000, 0x929e, 0xc, 0xbf7, 0xffff1d13, 0x3, 0x9, 0x7, 0x4, 0x9, 0x80, 0xd584, 0x2f72, 0x5, 0x1, 0x7fffffff, 0x2, 0x2, 0x6e42fd, 0x2, 0x3, 0x10001, 0x7fffffff, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x7, 0x1ef60d56, 0xf, 0x3, 0x3, 0x4, 0x4, 0x2, 0x5, 0x7, 0x0, 0x400, 0xb, 0x80000001, 0x7, 0x4a9, 0x9, 0xe, 0xf, 0x10000, 0xc528, 0xffff, 0x5, 0x8, 0x3, 0xc, 0xe8bb, 0x6, 0x3, 0x101, 0x9, 0x0, 0x0, 0x5a, 0x9, 0x6, 0xd, 0x2, 0xf2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, 0x0, 0x28, 0x4, 0x4, 0x1, 0x10001, 0x4, 0x5, 0x5, 0x4, 0x1, 0x6, 0x80000001, 0x8, 0x7b4, 0x7]}]}]}}]}, 0xfe8}, 0x1, 0x0, 0x0, 0x40004}, 0x400c004) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) 3.636603503s ago: executing program 0 (id=12214): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aac1aaaaaaaac4bc9cac968686dd6000000000140600fe8000000000000000000000000000aa0000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140e80}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x124, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff835}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ac3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x429b}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) 3.474767864s ago: executing program 5 (id=12215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x41) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4844}, 0x20000090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x48}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '(\xeb\'.'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2010}, 0x8080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={&(0x7f0000000500)="4d695006461682ddb3c9007e8e4d0f0b0f43b8865f9c8814e25ccc2afcba16f191372d058aaebe652d95d0a1c13860a835b88513a4755d689b8975979b46e5b58559a3605f0c90a182be0157f23126b2926ebc3bd5977787478ec1de18f4a6582146e1df493ae5736ed1970fd5407459cd4a304745bc62e6cb2df9a5a5e44b7b162738a61125105e27efe5643e72a6040c5a43c2fe3f0f5b44fd106a57878bdc9fe947b51a16d509d10a54f313669da923ab", &(0x7f00000005c0)=""/231, &(0x7f00000006c0)="3bf9436137b1e6391486e70fe46717ddf1a4416259c6cc197bdcccfecb5cf23a10a6ac5b34e6851dcbf44934b6c37bbc6bdd4becc8fc4d34b2ecf3a436", &(0x7f0000000700)="f30d4e0c9db8a4b738fc773153a6fc6224696e6f0b4262f09bc0e7f7757b8cda29b79dd0eeb1a335afbbaeef62648d7b5031a26db35f4ad5fce394f6b7e5f4008f7f68b31f744546bd781bb44daf725093e7530c12d2c3680b3282a583b13cc4b7c825f72f0ee96ad3060c463ccdcfdb7c4f0e4389cc25c81e5748ae8a4964e6228d00a97f6c7b119ca7d8d200bf3435058d62162160545d41e9ac4a3f485431c48c2e0b051f134c44248c5f4ed5a00f61fd83c528804cb564b08006fe6336b463fad6d2f4beabad8d3810e514c495123b9226e7f41e025a3d810900ce548843caf665487622968ae222c8b5c1585855af4101af26", 0xfff, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x1, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}}, 0x20008000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1ac, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xdd0c}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x104, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x64801) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d40), r4) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000d80)=0x310000, 0x4) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0xafd84c6eb55bd}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc041) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f0000001000)={0xffffffffffffffff, &(0x7f0000000f00)=':[-(.&\\\x00', 0x800, &(0x7f0000000f40)={@align=0x6, {0xcd50, 0x8, 0x1, 0x98}}, 0x3b, &(0x7f0000000f80)={@_ha_fsid}, &(0x7f0000000fc0)=0x1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001080)={@empty, 0x0}, &(0x7f00000010c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001200)={'syztnl0\x00', &(0x7f0000001180)={'ip6tnl0\x00', 0x0, 0x29, 0xa, 0x3, 0x3, 0x51, @empty, @loopback, 0x700, 0x40, 0xab66, 0xb}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000012c0)={'ip6_vti0\x00', &(0x7f0000001240)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x5, 0x9, 0x28, @empty, @empty, 0x7, 0x7800, 0x0, 0x8001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000001480)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xec, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x20c}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r11, 0x402, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4040000) 3.422476444s ago: executing program 4 (id=12216): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000dc0)={'vcan0\x00', 0x0}) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) sendmmsg$inet(r0, &(0x7f0000002640)=[{{&(0x7f0000000040)={0x2, 0x2000, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="a29e58c4d9b65a704af9616a3b4b918b", 0x10}, {&(0x7f0000000140)="6587ddfeb965f4e9d68acc41bc4c79f4b6493a1a980e1fbfa6229e1ea5b6aeaf288869de6d826818ede429dc700607269be444b92022e3d31810a04582fee20e4ed91574920209eb83e0752f094adbda32a9bbe75e6b55a8a49d7ef2241d805f811dc65e9e6f88acfd", 0x69}, {&(0x7f00000001c0)="aa3f287a9ad7d0c0b6fc59680e6325", 0xf}, {&(0x7f0000000200)="a391ee27e4b8c7a81fe87ff5c0d5387831958b1689e5232c10bb671d8b441167821ddb69f3466a5b0e4ed5af5694d9fe78cb2da1c90cdb49b3682d0629941979d89116223db433388703b3aeceae6610a57582b31b532b988a5b7988eaac36bfd856", 0x62}, {&(0x7f0000000280)}], 0x5, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@cipso={0x86, 0x13, 0x0, [{0x1, 0xd, "7ea0169f3d0f567cbc3c3d"}]}, @lsrr={0x83, 0x13, 0xb0, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1]}, @noop, @cipso={0x86, 0x2e, 0x3, [{0x5, 0x9, "ff87c329a8644c"}, {0x0, 0x3, "ea"}, {0x7, 0x3, "b4"}, {0x5, 0x8, "419fbcfc01a4"}, {0x2, 0x11, "0f3442c184732605abc7e14809d377"}]}, @timestamp_addr={0x44, 0x24, 0x4e, 0x1, 0x4, [{@broadcast, 0x6}, {@empty, 0x4a1d}, {@loopback, 0x638}, {@multicast2, 0x3}]}, @cipso={0x86, 0x49, 0x3, [{0x2, 0x6, "59eaf8a3"}, {0x1, 0x7, "1b1e174b18"}, {0x2, 0x3, 'p'}, {0x7, 0x2}, {0x0, 0x4, "bfd5"}, {0x7, 0x4, "05c6"}, {0x1, 0x12, "7d19515d6e339b47fb2a4e79c1e0a75c"}, {0x2, 0xb, "4b9b8ce2c00a234b8b"}, {0x2, 0x6, "3d6d8935"}, {0x1, 0x6, "35e3eba5"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x198}}, {{&(0x7f0000000600)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000640)="b8255336f7e95fdda63ab99169b2ebb9b9fffb0ee078487a98d7a67101e69f11cfdb645fa218ddb45aef6ab2e741fa001b1ef0e51aaa6e2651dbd3e65d19254c670a657bb66883ce7529fdc788283064f1239b6b69313054e000ae3f31b4044d0060329c22fabada4a79c1bc48b8129afae877f027f65811ae05f4d965d76d5a2d4f0472b9ad41a838e1e2eaf1877eb305ba366596c97df74c12ef2b0791278ed5b97af978acaf7d4729e2b42712b721e59e227212", 0xb5}, {&(0x7f0000000700)="571062d33027d4612668b7c44575b6451a4c8c97", 0x14}, {&(0x7f0000000740)="4986e991ba53ac6b29b162cf9211576a6b89403c2c9e450fc67c59d546472f7a680deba223d45e4b082f7e133b41ee5e0459c5a28990349d1c81e8ebde1aedafc50b34e18f7320a1e54a4cc971054a42921c5edeaad3297a7a22f98302d090c28636aa04d6086c29fb38793432663b7474cce320ef6dddd3178b9dced4511a6fe1645270c48b4da4", 0x88}, {&(0x7f0000000800)="94f64e4ef859d533c357676ad551b218e7fcd022c33990c1e4a5c328a581bc92829534e1bb43a6b626", 0x29}, {&(0x7f0000000840)="20980050aaeddccf6b5fb009c0eaf7a5131ccceaf577184c8d1e6efaf35e4b0fd04cfccf5c44c400e9e323f3e95096d297a7213d14fd58395fa13d04b56e8afc1bb53160b5", 0x45}, {&(0x7f00000008c0)="ec1603733020a34a1ca9ff20854b6d4befc28b2baa22bf1962f30252843d8d8f71bcc8f774d7749a6f5d3f3e397ca25ac6", 0x31}], 0x6, &(0x7f0000000980)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xc6, [@local]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x7a, [@local]}, @timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0x8, [{@multicast1}]}, @rr={0x7, 0xf, 0x65, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x47b8}}], 0x68}}, {{&(0x7f0000000a00)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a40)="fda93907b259d141a3cfb0e56e295989e9e26f349214f52187bea1dd007026446ad72fe2d762969b405cc76c7273d3370806021bd36a158476527a738846cab27e9f48b07f4209655c907c64b14daa0f8df8c84de94455900c4a50ace121e2fa5db56ad45a8ab4f4dd64e20ecaba253a1a5ab18c1a6607e5e9cde4f2548be10b77d3ecfef47cc19040ec3d11ae06f27d8cceb51e467542f1ed832317b78722f3608e597cace0fe9c7c96b984423d2b0dd3879b52d3026cb8bc74", 0xba}, {&(0x7f0000000b00)="1e1273a15eb626f6cf39b22dd457220de4d0531c4daf500049828bef320988cb12bcaeef399e417dd4857c66ce283f2960fc8ba5f331c491794d2975e79cb3c23d70a7bb0af5ccdb5be948fd884fd076975c2cbf48ebcc2410377c14cd4a2b0767ad5c5a7aa5f56b3d19cb29f4e89c1579a459aba54ba3afba8386081e30def70f42a8882275e38025dad910c4f7d374b2dac100cc98a286b20561cdc666cd16c934a6dfb0bc02deab29fb5334f0d16874a4772f3e71ae7a10b0664d22857b0e1a641216e9c5113c2326f2dc8ee101bf3f815923c4610a6c", 0xd8}, {&(0x7f0000000c00)="dc50bd890d7e6236428db899413a5e9387bf1acb39f49b1f4b9aeefbbab1966c", 0x20}, {&(0x7f0000000c40)="6eb5a3f2ae510574b15546338c5c07902642f9a45ee0ec4d78b122795c7147364b2560690ee1acbf6b18f8be590089a266c8094c385049ffe01da73d35ebd6b8550863035b5296a0ca7985f04cf073a46f3a9e27fbd6987ada74d3351133f5e4d0d137a25270a4bff41282612476d61c03126f0fb77f32ea8dd8c5ce89a961eec98566dda92b6bde004e4f9f35859f5e8563c0b05fed8ff29deb38af4287fbef42652f6cd86a3ad44afc58f3a9307dabd4f7", 0xb2}, {&(0x7f0000000d00)="894ee54f17d3ccb1baf412f0428eb80e4e5e20481110abf0c3148ef7ef", 0x1d}], 0x5, &(0x7f0000000e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x2f}}}}], 0x88}}, {{&(0x7f0000000ec0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002480)=[{&(0x7f0000000f00)="34c4770bd5c8a62bf4037fda85a25c0ec92daa797eec5eb4873c385e618370735617f07d79ca8389c535f51d6681f066450f0fd07016924f48a919f2fcbd089477ddf6acb9492c6dbc4f6ad981eec59a", 0x50}, {&(0x7f0000001300)="3c7f5814b5821d984eedc3a4aec15a18fa7245f9412f991c69f27876ed82526439aaab93933065377636f5dfe00d7b1c063c4be956e9611ce4565c9c075ac688bd9b291265e2bf0f0018807728978e5b2c0ba8e52bda03b2e4f432079ad04101a5af1001b53a98a05f5a87fc7a1e0a9edc2e74b4e137add35f9b2200fe27b8da733f453bf8a2784561776f67b487b9c132ac8e6ae2c56d9421db0ff548a1e512bcedddad9cc2b6564aa7356d5453aa739c2ab432d52a0cba44b1f8bbbdd9093c056bc7d690838b7364b03309076e289f00f34ef4d9c2e9ecd986b6f5205873924df12407cd32dee7fa595e454faaf411187d02e9e5f7ce0e039878d7f18b47dc53073b5f83b7f76804832766670fa68aa4442dd01b996ecb7eabf8a078266893f7d2d8364a81ace4d9c5fc1225ea4ea69fba19f4c1e36b9cb2718bbc439c990268e8e40818c8667fc6ab5b40c21a19263494673257b193b0a338c0b004babfaa7f629eb6ac566493872b85ac2de08e165241f9fff59e36c782f231c1dca4a82b8377f0617a4b715a3d6ac12674b176bd1996e2d810d01e1abc1c690befe7411f3c7eaaaeea0dee51c6a900d44791734576b0585d99827367fab3e1c91bc384a22871b8434efd4d639ef6e3f34f0ea927b10f7bf58464050419a8eb0763cd47efa1da6fbb079510a5e010490c16c8db7f8a6f455263c8734de6fd18784cc5cc6dec839019a0dd78d806e61dc90cb50352b21cae66538637d1eda7df362f94ba200890a2e15858d2cd2c011b6bf79016e50dc25562fc7f76ca4a5bb5635835f91f17b54d683c6bfd5e9970791f34219246bbb11451c468333f01b470f59315a256a58da91cb57549e29d67dc6f715ed3b91cc45cdfe54672cd86ffa1722f7f44c8c0fed58c2f5ad5adfe77d112cf57c1af67cf61464adb6755b19906c9813b39335943a947bacfe01f323d9492a37e436d2be563d588eec0d245f8b09aa4899319f487b10e983223d2c282af5ce7266160d19d259a7bfbd1adffc1f7e21b07e91c66f64a7397fcaa667b890fa08f1c8e799c3044528174293281ef0691adfbda976c671ce214191fbdf41b6a6cccf6386998a1b66644ad97bd8affa1daa315f209be7af23eeadffa9b8121b0e7a45734bb1357857ca34245ac53e3f63cc36b2264d732ca2394db677123a9a0040d4c46129c199e33600b7a00f711486aab7bfde54df7119809bbd138c2281ad8043a9f469bd25ec4b52340c88d95085595daf2ca8bf4faa660922a4b928212c65c7d25e482d9f2976f9af6881e893415ae69592a984bd7790fb05b2d000cd9c9e39b616ec8c07600f84e7f8357f3ed994d6228c2d0c99b0f2cec8147fdcba5dd7a33a0e55aee87a6adcff9a5c5f3448b008f51e5d8c1fea0e5ec560e17c0e76c9391c402b349cf5a43b6166682e594ff87d03ccbf747de2f606fc6f0db81c34d2321415147c5c5b66488811970d6e4862f509961da50e50463921036b46df2f1e94c3da419396f76a3efe313436d2914b4eb47d59583138d11b4e725bc9def0d049eeaadd31d852dec07284d6e3c22ecc9daba32962d333f10d8e380e714db5420afceaf01fb5e651e408cbfe0a25e4a6dbf5ba8d73eb4b71d88f16dc9a901ffe5abbf008de157f726d75c75a748e56afb569d3c99cf422f026df890f997a9693641af15dcad9d9be243f05ce171026dde85f106fc71dc2b7542301deb34635ff7201c45862ca880569eba07469f3dd55dbffb61e3307ab601837cf71d960514e3c23fb9b43908497c4c4208a71e8969a7cdc51d455c918a2a23d649a31777377dcb3e67b05b1c661d20420ce98c1b68d7b63a36d9f9d35ee8875b439c2032ccac90b16afe00ea6000343f0ff7ab4f0df8d269a49a63ac07734d555f9c530db9304365e306dad594023be66814c22f9d09de365615efff9a470bc51d68d9a8efe3024352d34c9377eca8966d7f88ef7e6912b98c29f43a484418dc0ee0918903a1a17a6e005dba58f962344551c0e5c56b080f97325704ebd28d48801f474cf3b7416939553803a23b7c6defa2410255e53427fd0ced45a657b37bb285fc4907a87ecc8dd95a36924fb50abeb3f489f839eaeba83981d2091380ea4d8a59659a5382a37e3ad5c7ea51f80c9a8152abb47d3decd7058cb318f9d87a431481e86d04093b8ddebb5c8ad9a9a72d3d91b0c49aa68d0f304b6b48539f6740d78e6a969c789c952460a0812de12d2036e0ab335cfe768a2cfda0cf4c564257d0df18e39fbdd51ced6abeefbd8ab3d844315295896d0e5d2ae4093604c82bc2ead81052bf4a2f7e1bdaa56322c82535f44d5fd83f7c631da2b850f60afcde4adb7279d8cba6b6d2c6986bdd38282c1f7b0aa53defe8770ff113eacc0ce188f0e241cde96455b5e3b4b884f0f3fbdab7bc413416cd7274ff668977137b1efd54047d952205b3e329f96a5263e7e3725c55e446b7c60326a4cb8e11531a4023d467b4f46fa4f9ea788a9079f8e06ff591956fc361f1f0bf3d4e7d05c9574a8805322bbbe2f52d52c884a228965bea345cb517efc7f3f61037febae7d1cc0ac79361a0f0a8e5b7eb143bd8ccc1e70da6aedf1564c75697d97fc59f16a104a9d94ab73bf48ff69bb72bc335461d1c8f5eea755a48bfb064db1b797ef4e91394d357f0bc69d060c8d4bfb8474a275646d5144f0540e709f9800877ef398eeb7e0bc15527190c69f1e7621e8c19502b490cd6f62b8072ab344b5136729fde2a8e87c87389c3d68154cc7ee9c7a8ed07f34a9cb211dfd6c89aaccad2b352cbfcb81843916431171811c4484bf90164bb118c7dddf3fbff35be400d1d34b3977cc3f253eddee7e8584072270286e60ab64e8575944d795f77b4901dcf8f7c4b8629ef15d8e1637ba35a29157551204046c53a2a463581a1161c2b5fb6c9497f49d79cb959ff1e9845bf83e991344c3787d7c87a87eb992a92d05f25960ee2e041d15b300745b0b74af91614558c8a679911445a9c63f072cce372bcb7774d40f597d2736c5dc74dc8ebf1b9d7d508ce92bbc111e8a0810376edd7050b23909ec6be86aca3b99cdc60a58fa4681771666f189e42a2015a750bdf7b1360be5c66a76ea0dcb50e0e1f2f815138bbf5625d68de67ccf9c51e4d438fb2f662f3fdacb533b63475c3649e20f718c8a57817759321ed0c91f13c71947c2f66019cf00b619a5c68ef56ccc7a6ec9007a68811ecc0a9e36e5e921cd6d0d050633aed52f3eb3e3f67b66136ddb52d9744d554806f4661e0ac570df831ed1759909eed649c5f43193ea7dc588655fa4524ca082d3063bc33f29d9fb6e49b6c644f77a3886777abab302e7b5b3d237d48e9b60f07c24f3762f0a0cba6a1a70a3764915a56e1b1211676865845e5a01fabf65fe00ea92a2af3878a5b24ba44d823f074bea7d5d8594e23b1d84966ba610213ded7e477ac6c6d66c20781f274392554447fb9760f4962557e97905111c20a3f48a7db79f505581636fecebf830b9ccab7b0de76f13c35578862967e16184e6a3ead1a54f38a470539b5aa6e97a1008fb8de0602f39fe34333aafda5627bdf4df31aed1b546d7052946fc978fbf13dc77946673c7a487156f721689d2b9c4e392be2da59e736dbf2799537fe7862f769f8281f7c275fa4711188251042b15fa58a9f5220aeecc1f632a3db8d44960763597da0aaf4551021d185870f250e9367d55eae3fb6fd203f7da8dad2f1b49b1879325b8deb3f4c3bd2044749fbd11facb5b29a9da7ec4b5cac07f95b02cb7e61bfa8605781c7e34c86a8f46a7ac7c2b525c1f62faca1d4d50f4a02dc361a869922c0b72649079d75ab72becceb8a4d7ae1cee7528753a4ffb96e095c34837fc2b696e7d110c779c573fd4c97aa75c574a0c07f7031b34e1df809660c6cee1d598ece4be1137a37ebbfd5920a13274669a72944761b92e185448e200985dd8f3f0b50809489f4492661a38ef9f94d2af9bcdca4d01be1146b1c156fac2ddd93b12d298f908c9d6a50b5de3358f6902a9ce20f9eb39d156b35624ef9b98d721861417baab3ba0a54b04dfe6a8279d59daeec6a696053d7c46eb3ed5b58df7571ce5427519a7ef565d6a0b48690ff88f8716cf9a2a2efcbeca348ca3534615561bd9a1a4efae1c12af339048d4e5648f0486aedd9c314b5b981ec3c8d90d7de173a58ad286dda58d102516a8826597f043ca82a82075eabf73e40511366d622efdfd537af98749dca2a58fe53a97ce07adea3c44012fb044e042098b89070ce663933489557ca80d6fff64170216e6e02fc317346f74e80e0f9f241c80744387b8ae860a054bf7de8601dd5df31cb8f1cd8e7e7ca759ae20a80252f6212049618e1aa9a52960d51399dceb29386c47c47d15e487d821ad4a3a406604ccbf9f720e37ae811925381599fe060f45b356cbf0c7b2f96ff202b5de91f16766673b79d16f453a7e3a8c52ebb901c8b86f52eaf9db02e8138d059e7de6cd8b3fef2f7f2f0998c75c901943dfd2c6edb78e6c1faec5dec3afce6a2b85c971492d2e45dab49c60b97ce1924d68a07744bb29e6a45ec9806ecdf6afb974eab2c3c79daf5987d6f04b76e47aae7ca42889b0f37f6cfa4926fd45785bffa7731515a5675fa423987031cc1d9df51d5ac1503325833838bfa297742f89e56e54af81ea73cf50724bce9998fffebf58b6cb10db39291b35c58d0b327a8647da1ce273214b54b52d36eceb9da3d14a77e7e71c70d88c90ab9a1290b83495b6e31a735bfff74e2d6d6a0a92991fc52c06279996a5ff23f60c80dbf5f2c2435069d2d01697939c4accb5dfcc420f46a52be8cae0f6fb49db159f39923c3c5bd304ad0ffc9b96488dfdcc640bf0ed63aaa9dbda030aa8f1c93d500384013df6dca9f4b252768eaff223c6707a0f5073a52055b01960ca8810c98b32f6beaa5dd928a7862cc2b280f389a14eaa06ad4d0d2380332bc3c02d266057611a6a739334e309477bcfd6499b46abee06ab518afb3337bbfa0b09f6543ac2661c6317693603e113aa5da116f6ddb392396529acaa1a750d31f78274032b04e3ff1f73bf62936dd8017e4d681718894086927c5738ed5a022d0aef42f2af598afe0b4df8b18c817360237dbee033d013781d503205a657317562d6e76df0849e6a17712dd4cb2a342a0af986eca4928ad131faa0c9523720d333509559c94b327725f03ffea77eeefc11405cc7f5bf3452f3014fe5bfffd64868e35ac5a3e2444c3d9e379deb0fd096b2aa1af000ebe11ca9494380daa003f815cd5aa0c9e6bfe07c1216424721cd1680ac4459801eb5b1314afd49922a704e9c15ad7ade9c9952371c4bcaf3e11b630ae33f5c30092ecdba83b77307b9e70f0a3be5e851157f9dd5057d00c4a480e91850e4bae09b8be2fe0554c1e67b25ded4344575c06e22602014d32194dd38c4cf96dbfbea1b406ad38a222c16bbe798f4edaa62503f8695feee6bfeac027fa7846a83669b1f8b470ba933161c5dd1a685a6a5e7afe66797a7a745906a55e91bf9322769a9bf1e375a0620868b864b1f632414ccb2219dbd5bb8328ae634aa522e8805b290b626c02af73aa7d68e8b5fc4ade10852085fec9798b83300234bc64fa710c82fae74ed5c02ca3dc584a68695e6a02780dce1d3eeec99bd63bac6ab9ba208275699a2f1ffb2b7323b0212c411ca8759f8c9a0f1fd9d2e01f6a2270bd4d493ab4732a88a4f9ab6f596cde4261bfcbc7cac338d3ffba1605177ca0c6d9daa3e09bed", 0x1000}, {&(0x7f0000002300)="e48baad6674cdf1b3a071be3623823a8d5bee8d797ca7e8915537df170f08391d7d1206b1c7f8fc94fcbd3c535b25bade76bf15355e37b76f4e78e11e4e4621e779d9af3667fc8ab17abebe39012bfe6e74ef46f73ff82f479c9d83ab321fdcb1544150156787d09e6d45427e9dbe2dbb1978c3e46387b96cdb3b2d45f2a82039a2e12fe4e851b531618aa51c1ba4320e13b8b73959febedd739e14d875806d4cd9ae6e8a31a8bead3705014cce088c5e89d7855809aea1702cd344ca1bbe13ce9fb5ebe4949e09fc210bd1629910c8e22fa16ea119fe34147e827d192d1ca4033d72ddf1ccfa9fff3faa478d9b8ed", 0xef}, {&(0x7f0000002400)="8a2056754a6c026fcbd689d5026793f323b017bb2222af85af7f06eb20b81149af1df239b4e9df80a01ccebe4c3858a9570b7e9bb440e3ed0067ba0613f45594805e7cd3af3dfd458fd357218e04e85e9c6cf2c6d31f34536da068dec2b27648a9e43b74114dba6359f59b4e42a03b346c5c21", 0x73}], 0x4}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000024c0)="1dda24fe19485d62d4e3c57676a692f6dbef881a7ed358f7fdbfc8ca7073d9b6cdc98a70e95a18d22548fe62fc4d815c49762bfeb3139c5150af07455836b3dfb300d2814827a18c4634d91e0d490beb05af562928f00630b932901d584e9857667c909dc011a9c209ee6bc8201d39c8799593bb02cc787ed3c79c2d1f576e4756919b43ccb6072f13d933a370ff7c9e60278dad8e2a50e26abfdea9d705e8d8a4a614f1302ec95e5c8174dc4331fb1919360a1be4846c603e1f7ad091541f2cb6dedd250a38c9c22eef59028a1ea1739143aa0da0c4eeed3dbe346f08c4", 0xde}, {&(0x7f00000025c0)="2a20491aee75180db89fae", 0xb}], 0x2}}], 0x6, 0x40011) 3.305882229s ago: executing program 0 (id=12217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x14000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040}, 0x20004810) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f00000004c0)={&(0x7f0000000480), 0x0, 0x37a, 0x9}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x9, 0x9, 0x83dc}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000580)={r8, 0x8, 0x3, [0x9, 0x7, 0x1c40]}, 0xe) sendmsg$nl_generic(r1, &(0x7f0000000b40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x500, 0x42, 0x100, 0x70bd28, 0x25dfdbfd, {0x12}, [@nested={0x2fe, 0x62, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @fd=r1}, @generic="02c623b2a5210fd7993b6acd30da3ffe1eb139685c3c7ebe987e", @generic="3cf1aa306bbe64091dfd2e6d2a5f462fa341249e3d3413e606c8819bc90d290588ba511cb76714e623964fed5040e9ce185b6b9aa3b4c37c0d95591424174b0ff8ada8dea8633166cef2b4900b62d565ede8e8079c5255c80487841ea0c6b49e701a16c9e99278b8b9aaa9736a9b89cb7d987ea0b29dd03205e5b92ed62bc732613d04a956136bf3f425b9ef01fd30c7fd829d558e6d0ca985e4ef927c4f8c8c5723e81c885e984e4601155bb4210727786d38627b5c92481e807e3117ad1c7780e814fecdf1eab445d2a06d9dcb57c0a969e59ba60a", @typed={0x8, 0x8, 0x0, 0x0, @u32=0x8bd9}, @nested={0x4, 0x10}, @generic="ab8149398f8df92771ebd174489a53bef82f724dd146ba0178a747c15503d4fbd35531c93313f2fd9fdaa1ef78d98f9126ce0a478acd027ead30c242fb591d6ff00b543a5b3bd85faf76754755a846cca061676a0268c678daddcb15e355785ad482502af5f2c1bd5205a9f9325919ebf533606d6496b772dd81b3568add5ca741588bb47fa4c0280855555cc9ee44b25831d0595159330e05e9232973ad0762c8b71bb353d2849a556742a19b5785e0e5a2964f42e59d78da6f86af7bdee60f5476f3bc8c40ac5df520a58c263ece97fa40d597a8344e34dcd4b2", @generic="e1069fbd5d63d25fc37ca9c7634d2194dfbd4c21eb0e9bb15290ae941748405134326ddbaacbf5e130f3fe1e78fafeeb679df12fa31ef04b2ba521de05c271582f62343a3213bd7aef18fd9d3e19062a0518205711750f222e312f70f2a15ec975e7bffef8519953ddb2e40833dd44c27dd014121b2c", @generic="a6908ab6746606e1ae28dcdf250281d8134f16cf76454f14dd63f17f7e98205108ecf647cd986f8d2dd2fcfce1092da4e078653c04734144708d65eedaa2d0e5a9f720b1c1f66ca3072e65c7296e76707e1efd97cc081c1038c996aacf435e3559ff424f2ba938a9dba9ea2a1b6ee3ab52164a899c7865715fc80d219c2ff6db352872b8232dd8dc9fc900268fc57e5f16673d12b66285894df994e31652d35cf444a74a01"]}, @typed={0x8, 0x61, 0x0, 0x0, @fd=r0}, @generic="aa02371b768cb15d7a48f9e60faf225008f9481da1c719c13e491916790cd2805a4547d8a70724", @generic="71b27167ecd0cd6e15491aea1eac98d99d9af9425bc0a4afff81bf74eb00489d28515d4cabb9cdbe179161feff0eb9c4dade9a29b1", @typed={0xc, 0x32, 0x0, 0x0, @u64=0x100000000}, @nested={0x17c, 0x90, 0x0, 0x1, [@generic="4386af0cab52113aa8375e90b0357ce29f4a167a3094206d6806693c39436995d0c99235ef4b5cea137a228176e4bb19c1a0c1051c875ea83c8184c2239f0f0a578eb1255588d3caa11479d50cb2b753c2a040f01fe38b7ece8112718b34d19a5a77e8f88d64008a67856469e75105144736e9d66eb15b8649e6582890e78ffd2049bf3e8fdb4ea3b434de4bd8044374706affd308f758c003b2f02c11423abca657569f3cd51ccf5af690a244e9d673dddf3244d7ef0f3cf428b8956a82939e7f029e225e1caa60622a70e1ca467844c5373cf097ae1efaba72d768", @typed={0x9a, 0x62, 0x0, 0x0, @binary="246f573e1cf91410aee62b5bd580eefab0de4f7e336b3f440acad6c0bc4d61d52f44881d0fc0b1f42dddda8cbf905a4417ecf9db60c547970e73e1bb20c01fd6e1ce0c4beb612048bbd24a6b483f612b6059ca375edad63a975ac0130d097da676d4f111eff59c0bec61bc5606cdee0fce1556be469a18a62e6471259916043c3fc5eeb578ba9a98c4c8ee5976ac6297576fa174a2b0"}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000c00)={&(0x7f0000000b80)=[{0x7f, 0x6, 0x2}, {0x6, 0xa4e0, 0x1}, {0x7, 0x8, 0x2}, {0x6edb, 0x6, 0x2}, {0xa1, 0xffffff00, 0x1}, {0x3ff, 0x2, 0x1}, {0x8, 0x98, 0x2}, {0x40, 0x800}], 0x8, 0x10, 0x2, 0x5}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000c40)={0x8, {{0x2, 0x4e21, @multicast1}}}, 0x88) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r11, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040804}, 0x48c5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r6, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x180, 0x35}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r13, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) listen(r7, 0x6) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x400, 0x70bd28, 0x101, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20048841) 3.26284442s ago: executing program 6 (id=12218): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r1}, {@void, @actul_num={@val=0x2d, 0x8000000000000000}}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.900581966s ago: executing program 0 (id=12219): r0 = socket(0x12, 0x6, 0xfffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) r11 = epoll_create1(0x80000) epoll_wait(r11, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0xd3cd) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = epoll_create(0xef) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000100)) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007c80)={0x14, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.812461544s ago: executing program 5 (id=12220): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0002005200010002000000fdfffeff0203000008000200be8ef499"], 0x1c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, 0x0, 0x8001) sendmsg$IPVS_CMD_FLUSH(r3, 0x0, 0x40000c1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x4040810) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000001840)={&(0x7f0000001640), 0xc, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x4004014}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x8, @mcast1, 0xc3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='a', 0x1}, {&(0x7f0000000280)="3415549e7318f521147bdf16ec8716c4f7e1fccefecc96686081", 0x1a}], 0x2, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) recvfrom$rxrpc(r6, 0x0, 0x0, 0x10001, 0x0, 0x0) r7 = openat$cgroup_int(r2, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) 2.811796352s ago: executing program 6 (id=12221): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008851}, 0x44) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000140)={0x6, 0x7, 0x7, 0x4}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x20000012}) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/230, 0xe6}], 0x2, 0x400, 0x74) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000400)=0xd126, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000440)={'macsec0\x00', {0x2, 0x0, @loopback}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x128, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000006c0)) r4 = openat$cgroup_ro(r2, &(0x7f0000000700)='cpuacct.usage_percpu\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000b00)=[{&(0x7f0000000740)="c5daaee718bd58f48d8b8567afc752b6163ce8ab0c9510ce67130eefd185ed91cc79970e4550e06a8da0df337ae434c4c112e28f042874c36d11cfc757104b199abf447934811f09c58a69bcfe809c8e7f1df602bfc622253c9597eba8490fd320a862772fb874fb7148145b6c9763d8e6ebb2537e637821896c5d809320a172dc21ab62c27aabdad1f41ea8b88d75e29fd43a47d17c59ee059eafff9fa3ad61d4969545d45ca72cd477c69be560fd5a6a6a0af654", 0xb5}, {&(0x7f0000000800)="a06c0da70d8d9bc2af756ac92db116e36736d3a87652438fe2342fbfaf87b70a8bb7802dec68407172690cbb54e216f39e05b136193a332ac10b084ebd1763e0c2566a83927be6341376e0abf8a57f93293c84f58950335c6ba0740f30ff63e5d5fc7b00298117f1afc5f0026bed5492045ddc394d4d2b73ec9f52ef7f34597aaa9e128cb43dd8ad476d15e2", 0x8c}, {&(0x7f00000008c0)="29b60f0b2a77765872717aa14db215467b1c85be9b13f8fab19264626ee2b5f0c24105c40f818b24d2d7cbfdeb66b945423f0129b4a2ba8d8674120af340e0bc61e0f152938944", 0x47}, {&(0x7f0000000940)="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", 0xff}, {&(0x7f0000000a40)="0f1bb5a32a72b0b9a9a3d55ddb0e43e379f7b6ea8b05d373d90665a187e690628eb9ffffa3a35e1bb8bbcba9bbe26a81dacb83d5a4a06f6c027ee414fee22bde5eac4b6525e555c28d7f5caee02c4b422a2f99aec78f97ba89a6e6e86e1824c0a59e2dcbb04a53a46f57c3a40b25c301decf9fbb8e5a676f14191da124d194c0d40b9cc932d645fce0c9e678baef2be99c6557d6169e9e716e544316764e67bf3d20", 0xa2}], 0x5, 0xe) recvmsg$can_raw(r3, &(0x7f0000000fc0)={&(0x7f0000000b80), 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000000d00)=""/33, 0x21}, {&(0x7f0000000d40)=""/252, 0xfc}, {&(0x7f0000000e40)=""/131, 0x83}], 0x4, &(0x7f0000000f40)=""/95, 0x5f}, 0x40002022) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x460480, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001040)={'ip6_vti0\x00'}) splice(r5, &(0x7f0000001080), r1, &(0x7f00000010c0)=0x6c65a7cf, 0x5e, 0x8) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001100), 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000001240)={r7, &(0x7f0000001140)='\x00', 0x200000, &(0x7f0000001180)={@_ha_fsid={[0x9, 0xad4]}, {0x1, 0x5, 0x4, 0x4e18}}, 0x6, &(0x7f00000011c0), &(0x7f0000001200)=0x5c8}) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ppoll(&(0x7f0000001280)=[{r3, 0x84c0}, {r6, 0x201}, {r6, 0x846fca927882ca71}, {r1, 0xa00}, {r9, 0x40}, {r8, 0xd200}, {r1, 0x200}], 0x7, &(0x7f00000012c0), &(0x7f0000001300)={[0x5]}, 0x8) epoll_pwait(r4, &(0x7f0000001340)=[{}], 0x1, 0x5, &(0x7f0000001380)={[0xff]}, 0x8) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000013c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000001480)={'sit0\x00', &(0x7f0000001440)={@private0={0xfc, 0x0, '\x00', 0x1}, @multicast2, 0x14, 0x14}}) epoll_pwait(r1, &(0x7f00000014c0)=[{}, {}], 0x2, 0x5, &(0x7f0000001500)={[0xff]}, 0x8) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r11, 0x0, 0xcf, &(0x7f0000001540), 0x4) recvmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000001580)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001600)=""/246, 0xf6}], 0x1, &(0x7f0000001740)}, 0x2}, {{&(0x7f0000001780)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001800)=""/222, 0xde}, {&(0x7f0000001900)=""/19, 0x13}, {&(0x7f0000001940)=""/238, 0xee}, {&(0x7f0000001a40)=""/23, 0x17}, {&(0x7f0000001a80)=""/162, 0xa2}, {&(0x7f0000001b40)=""/168, 0xa8}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/212, 0xd4}], 0x8, &(0x7f0000002d80)=""/70, 0x46}, 0x2}, {{&(0x7f0000002e00)=@generic, 0x80, &(0x7f0000003140)=[{&(0x7f0000002e80)=""/29, 0x1d}, {&(0x7f0000002ec0)=""/129, 0x81}, {&(0x7f0000002f80)=""/30, 0x1e}, {&(0x7f0000002fc0)=""/230, 0xe6}, {&(0x7f00000030c0)=""/93, 0x5d}], 0x5}, 0xa5a}, {{&(0x7f00000031c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004480)=[{&(0x7f0000003240)=""/242, 0xf2}, {&(0x7f0000003340)=""/21, 0x15}, {&(0x7f0000003380)=""/240, 0xf0}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x4, &(0x7f00000044c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000054c0)=@can, 0x80, &(0x7f0000005640)=[{&(0x7f0000005540)=""/25, 0x19}, {&(0x7f0000005580)=""/14, 0xe}, {&(0x7f00000055c0)=""/71, 0x47}], 0x3}, 0xffffffff}], 0x5, 0x83, 0x0) 2.603634688s ago: executing program 4 (id=12222): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1feb01001800000000000004340000003400000006000000040000000080000e0300000000000000030044900000000800000000000000000000000204000000000000800000000a02000000000000616100"], 0x0, 0x52}, 0x20) 2.535880588s ago: executing program 2 (id=12223): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 2.178057417s ago: executing program 6 (id=12224): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000840)={0x3c, r0, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x3c}, 0x1, 0x2000000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.175646111s ago: executing program 5 (id=12225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1, &(0x7f0000000280)=""/126, 0x7e}, 0x6}, {{&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/245, 0xf5}, 0x7fff}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000ec0)=""/87, 0x57}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000f40)=""/231, 0xe2}, {&(0x7f0000000740)=""/89, 0x59}, {&(0x7f00000007c0)=""/22, 0x16}], 0x5, &(0x7f0000000880)=""/215, 0x7f}, 0xfff}, {{&(0x7f0000000540)=@qipcrtr, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/20, 0x14}, {&(0x7f0000000a40)=""/20, 0x14}], 0x2, &(0x7f0000000ac0)=""/248, 0xf8}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/160, 0xa0}], 0x1, &(0x7f0000000cc0)=""/119, 0x77}, 0x1}], 0x5, 0x40, &(0x7f0000000e80)={0x77359400}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) 2.175138784s ago: executing program 4 (id=12226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x891e, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xd1, &(0x7f0000003a00)=0x710f955b, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) 1.624147405s ago: executing program 6 (id=12227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="dc0000000a0a030000000000000000000a0000090900010073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="dc0000000a0a030000000000000000000a0000090900010073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) 1.4570983s ago: executing program 2 (id=12228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xfffffffffffffebd}, {&(0x7f0000000040)=""/114, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000000b80)=""/4106, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x120, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept4(r0, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xfffffffffffffebd}, {&(0x7f0000000040)=""/114, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000000b80)=""/4106, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x120, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) 1.299494924s ago: executing program 5 (id=12229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x0, 0x30, 0x0, &(0x7f000000a500)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0x70bd25, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x40}, 0x1, 0x7}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) 1.154169447s ago: executing program 4 (id=12230): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)=@ethtool_cmd={0x2f, 0x80000000, 0x0, 0x9, 0x12, 0x3, 0x3, 0xfc, 0x2, 0xff, 0x0, 0x9, 0x6, 0xff, 0x0, 0x5}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x21010000) 1.151889525s ago: executing program 0 (id=12231): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x3000c947}, 0x0) 1.041293276s ago: executing program 2 (id=12232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_rxfh={0x24, 0x8, 0x0, 0x9, 0x4, "226ac5", 0x5}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="038000c70f000000140012800bf045f601642864eb6e00002d97a8c90d83a243", @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="4fcf2d141e"], 0x44}, 0x1, 0x0, 0x0, 0x20000840}, 0x4054) pwrite64(r1, &(0x7f0000000440)="ff1449aa8063aaeee40025df8034655e49d4816f02caedcd271ac4b8cf58bb078578d68158f7be72", 0x28, 0x1) 597.494169ms ago: executing program 0 (id=12233): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 590.578868ms ago: executing program 4 (id=12234): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket(0x1d, 0x2, 0x6) recvfrom$packet(r0, 0x0, 0x0, 0x4001, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x1000}, 0x8) 493.751386ms ago: executing program 6 (id=12235): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x235, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delchain={0x24, 0x66, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf, 0x6}, {0x0, 0xfff1}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000881}, 0x49090) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) 288.673383ms ago: executing program 2 (id=12236): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x2e, 0xb, 0x0, 0x0, {0x18}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x8000) 17.639851ms ago: executing program 0 (id=12237): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000ef198451ee5e518299c721fe5f57e356be35244b10265207a51d77b48eb8f3353e10601b8591737f006cd02084b55283b3e37bb9a262bc5bc4e27ddc522a24d9a16e51ab902ede3f04f5f9fc8dee31bae1c355846338a017cc14e33854fcb11331d2336ae03c2ce9978cdd87dcb5a606c967105ba1f9", @ANYRES16=0x0, @ANYBLOB="0100000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x40010142, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xac, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x40010}, 0x24008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) pread64(r1, 0x0, 0x0, 0x101) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 10.102445ms ago: executing program 4 (id=12238): r0 = socket$kcm(0x2, 0x3, 0x106) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x7, 0x15e4, 0x3, 0x0, 0x0, [{{r0}, 0x6e6e}, {{r0}, 0x5}, {{r0}, 0x9}]}) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 0s ago: executing program 5 (id=12239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="622037350008092ebf72"], 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x300}, 0x90) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x100000000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000a40)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x7}, 0x8, 0x0, 0x3, 0x4, 0x1b, 'syz1\x00', "29fdb2fb9a044bb5d67017dad0ce403355039071250615f0d31306ea5f16ce13", "41dc011a2c557b300f6f183d638403a758224335fdc4e18c5a5f1d0987f2397a", [{0x0, 0x1, {0x1, 0x2}}, {0xdb6f, 0x0, {0x0, 0x1}}, {0x1ff, 0xfca, {0x54585ebabb7729dc, 0x5}}, {0x1, 0x8, {0x2, 0x5cc}}, {0x2, 0x81, {0x3, 0x9}}, {0xfff9, 0x7, {0x3, 0x90000000}}, {0x3, 0x7, {0x3, 0xdb6}}, {0x100, 0xe, {0x1, 0xc}}, {0x1, 0xa, {0x2, 0x7f}}, {0x101, 0xb, {0x3, 0x8}}, {0xfd47, 0x7fff, {0x2, 0x2}}, {0x5, 0x1, {0x3, 0x4}}, {0xa042, 0x100, {0x2, 0x2}}, {0x5, 0xc573, {0x1, 0xbb6}}, {0x6, 0x6, {0x3, 0x7}}, {0x8, 0x7, {0x0, 0x4}}, {0x8001, 0x4, {0x3}}, {0x1, 0x6, {0x0, 0x7}}, {0x8, 0x8, {0x1, 0x7f}}, {0x40, 0x7, {0x3, 0x2}}, {0x1, 0x6, {0x0, 0xffffffff}}, {0xb8af, 0x81, {0x1, 0x7fff}}, {0x800, 0x8, {0x1, 0x3}}, {0x4, 0xfffc, {0x0, 0x7}}, {0x7, 0x7, {0x1, 0x4}}, {0x3, 0x1ff, {0x0, 0x1}}, {0x1, 0x1, {0x2, 0x90a}}, {0x6, 0xffff, {0x1, 0x4}}, {0x81, 0x9, {0x1, 0xfff}}, {0x1, 0x100, {0x2, 0x2}}, {0x3, 0x95, {0x3, 0x2}}, {0xc, 0x3ff, {0x0, 0x7}}, {0xffff, 0x5}, {0x5, 0xc559, {0x0, 0xff58}}, {0x8000, 0x7, {0x1, 0x8}}, {0x4, 0x8, {0x1, 0x5}}, {0x8853, 0x1, {0x1, 0xb}}, {0x0, 0x4, {0x0, 0x7}}, {0xfffb, 0x5, {0x3, 0x6}}, {0x2, 0x1, {0x1, 0xfffffff9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x5ce54e32d58ea775}, 0x840) r8 = socket(0x10, 0x803, 0x0) getsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000400)=0x4) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff}}) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000180)='`', 0x5e0, 0x0, &(0x7f0000000240)={0x3a, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r10, 0x7800, 0x700, 0x6, 0xa000, {{0x1a, 0x4, 0x1, 0x2d, 0x68, 0x64, 0x0, 0x5, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0xf, 0x3, [{0x2, 0x9, "adde60ac1052a6"}]}, @timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0x9, [{@broadcast, 0x3}]}, @cipso={0x86, 0x1c, 0xfffffffffffffffa, [{0x0, 0x4, "51e5"}, {0x0, 0xb, "c9314ee8d175fd944a"}, {0x7, 0x7, "9b6c0324e6"}]}, @rr={0x7, 0x1b, 0x25, [@local, @multicast1, @empty, @local, @remote, @rand_addr=0x64010100]}]}}}}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000002000000000600000008000300", @ANYRES32=r2, @ANYBLOB="05005300c70dff967426a8d902000000"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): priority 0 [ 992.471164][T12197] syzkaller0: entered promiscuous mode [ 992.488903][T12197] syzkaller0: entered allmulticast mode [ 992.508482][T12197] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 992.556499][T12196] tipc: Resetting bearer [ 992.575422][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10756'. [ 992.597295][T12212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10756'. [ 992.618165][T12196] tipc: Disabling bearer [ 993.088587][T12241] Bluetooth: MGMT ver 1.23 [ 993.199124][T12254] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10769'. [ 993.224099][T12254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10769'. [ 993.304004][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10770'. [ 993.319764][T12260] netlink: 'syz.4.10770': attribute type 7 has an invalid length. [ 993.352037][T12260] netlink: 'syz.4.10770': attribute type 8 has an invalid length. [ 993.383463][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10770'. [ 993.576391][T12273] netlink: 'syz.4.10776': attribute type 1 has an invalid length. [ 993.620905][T12273] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10776'. [ 993.658350][T12273] netlink: 'syz.4.10776': attribute type 1 has an invalid length. [ 993.699170][T12273] netlink: 'syz.4.10776': attribute type 8 has an invalid length. [ 993.912868][T12293] syzkaller0: entered promiscuous mode [ 993.931176][T12293] syzkaller0: entered allmulticast mode [ 993.949005][T12295] netlink: 'syz.3.10782': attribute type 4 has an invalid length. [ 994.116052][T12306] vlan2: entered allmulticast mode [ 994.596889][T12338] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 994.670854][T12341] veth0: entered promiscuous mode [ 994.748828][T12329] veth0: left promiscuous mode [ 995.162855][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.242890][T12380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.598203][T12412] block nbd0: Unsupported socket: should be TCP or UNIX. [ 995.628426][T12413] block nbd0: Unsupported socket: should be TCP or UNIX. [ 995.718758][T12422] netlink: 'syz.4.10817': attribute type 1 has an invalid length. [ 995.766788][T12422] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 995.904377][T12436] netlink: 'syz.4.10819': attribute type 1 has an invalid length. [ 995.978532][T12438] netlink: 'syz.2.10820': attribute type 1 has an invalid length. [ 996.026273][T12438] bond7: entered promiscuous mode [ 996.035866][T12438] 8021q: adding VLAN 0 to HW filter on device bond7 [ 996.075434][T12438] bond7: (slave bridge6): making interface the new active one [ 996.085903][T12438] bridge6: entered promiscuous mode [ 996.092949][T12438] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 996.185350][T12450] H: renamed from dummy0 [ 996.234966][T12457] tipc: Enabled bearer , priority 0 [ 996.283308][T12457] tipc: Disabling bearer [ 996.666510][T12489] ip_vti0: entered promiscuous mode [ 996.733364][T12494] netlink: 'syz.4.10836': attribute type 1 has an invalid length. [ 996.809000][T12494] macvtap0: entered allmulticast mode [ 996.954212][T12498] bond9: (slave bridge7): making interface the new active one [ 996.983339][T12498] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 997.202425][T12529] __nla_validate_parse: 24 callbacks suppressed [ 997.202468][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10843'. [ 997.225758][T12532] netlink: 146772 bytes leftover after parsing attributes in process `syz.3.10842'. [ 999.687719][T12494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 999.882336][T12551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10851'. [ 999.929774][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.936974][T12554] bridge0: port 2(bridge_slave_1) entered listening state [ 999.944349][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.951517][T12554] bridge0: port 1(bridge_slave_0) entered listening state [ 999.986773][T12554] bridge0: entered promiscuous mode [ 999.996647][T12554] bridge0: entered allmulticast mode [ 1000.135882][T12567] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1000.143956][T12567] bridge0: port 3(bond8) entered blocking state [ 1000.153496][T12567] bridge0: port 3(bond8) entered disabled state [ 1000.162968][T12567] bond8: entered allmulticast mode [ 1000.196553][T12567] bond8: entered promiscuous mode [ 1000.450021][T12584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1000.487340][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10861'. [ 1000.791130][T12614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10868'. [ 1000.832105][T12613] syzkaller0: entered promiscuous mode [ 1000.844727][T12613] syzkaller0: entered allmulticast mode [ 1001.118022][T12640] netlink: 'syz.3.10878': attribute type 10 has an invalid length. [ 1001.159006][T12640] veth0_to_bond: entered promiscuous mode [ 1001.182810][T12640] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1001.221964][T12647] netlink: 'syz.0.10881': attribute type 1 has an invalid length. [ 1001.288714][T12651] bond10: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1001.315645][T12651] bond10 (unregistering): Released all slaves [ 1001.597761][T12665] netlink: 'syz.3.10885': attribute type 1 has an invalid length. [ 1001.648729][T12665] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1001.670367][T12665] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1001.683064][T12665] bond10: (slave ip6gre2): making interface the new active one [ 1001.694459][T12665] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 1001.780866][T12672] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10886'. [ 1001.891634][T12677] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10890'. [ 1002.118103][T12695] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1002.216304][T12706] netlink: 'syz.1.10896': attribute type 17 has an invalid length. [ 1002.236668][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10896'. [ 1002.247876][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10897'. [ 1002.352866][T12704] team0 (unregistering): Port device team_slave_0 removed [ 1002.399993][T12704] team0 (unregistering): Port device team_slave_1 removed [ 1002.439202][T12704] team0 (unregistering): Port device dummy0 removed [ 1002.459006][T11142] tipc: Resetting bearer [ 1002.544898][T12704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.608523][T12723] netlink: 'syz.2.10902': attribute type 1 has an invalid length. [ 1002.655021][T12723] bond9: entered promiscuous mode [ 1002.661419][T12723] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1002.701509][T12723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10902'. [ 1002.744026][T12724] bond9: (slave bridge7): making interface the new active one [ 1002.752097][T12724] bridge7: entered promiscuous mode [ 1002.758627][T12724] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 1002.767836][T12723] bond9: entered allmulticast mode [ 1002.773413][T12723] bridge7: entered allmulticast mode [ 1002.822131][T12740] netlink: 'syz.2.10907': attribute type 1 has an invalid length. [ 1003.384964][T12778] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1003.462389][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10913'. [ 1003.507502][T12781] team1: entered promiscuous mode [ 1003.513237][T12781] team1: entered allmulticast mode [ 1003.553381][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10915'. [ 1003.702436][T12798] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1003.720009][T12798] bond5 (unregistering): Released all slaves [ 1003.738073][T12800] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10919'. [ 1003.762246][T12800] sctp: [Deprecated]: syz.1.10919 (pid 12800) Use of int in max_burst socket option deprecated. [ 1003.762246][T12800] Use struct sctp_assoc_value instead [ 1003.810440][T12802] nbd0: detected capacity change from 63 to 0 [ 1003.819092][T12802] block nbd0: reconnected socket [ 1003.831522][T12802] netlink: 'syz.0.10920': attribute type 1 has an invalid length. [ 1003.845924][T12802] nbd: error processing sock list [ 1003.858626][T10534] block nbd0: NBD_DISCONNECT [ 1003.879379][T26488] block nbd0: Receive control failed (result -32) [ 1003.880481][T10534] block nbd0: Send disconnect failed -32 [ 1003.918450][T10534] block nbd0: Send disconnect failed -32 [ 1003.918479][T26488] block nbd0: Disconnected due to user request. [ 1004.079347][T10534] udevd[10534]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1004.102575][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10923'. [ 1004.377039][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1004.390632][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1004.622385][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10935'. [ 1004.760003][T12862] netlink: 'syz.1.10936': attribute type 23 has an invalid length. [ 1004.933919][T12872] vlan3: entered allmulticast mode [ 1004.939536][T12872] veth1_virt_wifi: entered allmulticast mode [ 1005.561798][T12918] bond12: Unable to set down delay as MII monitoring is disabled [ 1005.580452][T12918] bond12 (unregistering): Released all slaves [ 1005.598795][T12922] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1005.614679][T12925] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1005.925649][T12942] netlink: 'syz.2.10964': attribute type 11 has an invalid length. [ 1005.944718][T12942] netlink: 'syz.2.10964': attribute type 5 has an invalid length. [ 1005.958931][T12939] syzkaller0: entered promiscuous mode [ 1005.980433][T12939] syzkaller0: entered allmulticast mode [ 1006.087941][T12949] openvswitch: netlink: Flow actions attr not present in new flow. [ 1006.473189][T12972] netlink: 'syz.0.10972': attribute type 9 has an invalid length. [ 1006.589167][T12975] team0 (unregistering): Port device team_slave_0 removed [ 1006.635499][T12975] team0 (unregistering): Port device team_slave_1 removed [ 1007.101749][T12993] syzkaller0: entered promiscuous mode [ 1007.107881][T12993] syzkaller0: entered allmulticast mode [ 1007.119149][T12993] TC_ACT_REPEAT abuse ? [ 1007.146911][T12959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.371277][T13016] openvswitch: netlink: EtherType 50a is less than min 600 [ 1007.586390][T13025] __nla_validate_parse: 7 callbacks suppressed [ 1007.586411][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10990'. [ 1007.978624][T13054] openvswitch: netlink: EtherType 0 is less than min 600 [ 1008.002000][T13051] bond5: Unable to set down delay as MII monitoring is disabled [ 1008.021766][T13051] bond5 (unregistering): Released all slaves [ 1008.113767][T13064] netlink: 'syz.4.11001': attribute type 11 has an invalid length. [ 1008.141431][T13064] syzkaller0: entered promiscuous mode [ 1008.155143][T13064] syzkaller0: entered allmulticast mode [ 1008.313294][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11002'. [ 1008.805888][T13099] sit1: entered promiscuous mode [ 1008.814470][T13099] sit1: entered allmulticast mode [ 1008.825158][T13099] netlink: 'syz.4.11010': attribute type 1 has an invalid length. [ 1008.846726][T13099] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1008.870367][T13099] NCSI netlink: No device for ifindex 0 [ 1008.938569][T13101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11012'. [ 1008.958828][T13105] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.11011'. [ 1008.970645][T13103] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1008.983794][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11011'. [ 1008.995089][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11011'. [ 1009.081450][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11012'. [ 1009.139415][T13115] netlink: 'syz.1.11013': attribute type 8 has an invalid length. [ 1009.284484][T13118] netlink: 124 bytes leftover after parsing attributes in process `syz.4.11015'. [ 1009.295589][T13118] netlink: 'syz.4.11015': attribute type 1 has an invalid length. [ 1009.303879][T13118] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11015'. [ 1009.735068][T13130] mac80211_hwsim hwsim105 : renamed from wlan1 [ 1009.757042][T13147] netlink: 'syz.1.11022': attribute type 1 has an invalid length. [ 1009.907285][T13159] xt_hashlimit: max too large, truncated to 1048576 [ 1010.159308][T13180] netlink: 'syz.4.11030': attribute type 12 has an invalid length. [ 1010.171926][T13180] netlink: 'syz.4.11030': attribute type 29 has an invalid length. [ 1010.309909][T13183] netlink: 'syz.0.11031': attribute type 1 has an invalid length. [ 1010.334047][T13183] netlink: 'syz.0.11031': attribute type 1 has an invalid length. [ 1010.344582][T13183] syzkaller0: entered promiscuous mode [ 1010.357345][T13183] syzkaller0: entered allmulticast mode [ 1010.379542][T13198] netlink: 'syz.2.11036': attribute type 1 has an invalid length. [ 1010.466108][T13204] lo: entered promiscuous mode [ 1010.472770][T13204] lo: entered allmulticast mode [ 1010.848550][T13236] 8021q: VLANs not supported on ip6_vti0 [ 1011.167838][T13260] tipc: Enabling of bearer rejected, failed to enable media [ 1011.248049][T13260] bond11: (slave gretap3): making interface the new active one [ 1011.259520][T13260] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 1011.390592][T13275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1011.778494][T13302] Bluetooth: hci1: too big key_count value 32778 [ 1011.817505][T13303] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.857939][T13303] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.944282][T13303] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.968522][T13303] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.041689][T13303] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.062911][T13303] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.141986][T13303] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.154180][T13303] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.225646][T11146] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.244744][T11146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.261097][T13325] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1012.277783][T11384] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.286611][T11384] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.328083][T11384] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.337775][T11384] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.347169][T11384] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.371605][T11384] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.475547][T13333] validate_nla: 3 callbacks suppressed [ 1012.475582][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.493662][T13335] syzkaller0: entered promiscuous mode [ 1012.500653][T13335] syzkaller0: entered allmulticast mode [ 1012.526941][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.687200][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.705840][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.714312][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.723140][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.732154][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.742787][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.752926][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1012.761556][T13333] netlink: 'syz.2.11082': attribute type 1 has an invalid length. [ 1013.253588][T13357] __nla_validate_parse: 19 callbacks suppressed [ 1013.253611][T13357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11089'. [ 1013.269576][T13357] IPVS: Unknown mcast interface: vcan0 [ 1013.328668][T13357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11089'. [ 1013.355161][T13357] team0: Port device geneve1 added [ 1013.578691][T13369] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11093'. [ 1013.590453][T13370] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11093'. [ 1013.753108][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11097'. [ 1014.052738][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11102'. [ 1014.063951][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11102'. [ 1014.169231][T13408] xt_ecn: cannot match TCP bits for non-tcp packets [ 1014.177471][T13408] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11105'. [ 1014.312609][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11108'. [ 1015.859766][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11124'. [ 1016.750475][T30882] Bluetooth: hci4: command 0x0405 tx timeout [ 1016.798644][T30882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1016.806218][T30882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1016.815551][T30882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1016.825223][T30882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1016.833845][T30882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1017.320630][T13581] openvswitch: netlink: IP tunnel dst address not specified [ 1017.474476][T13548] xfrm0 speed is unknown, defaulting to 1000 [ 1017.690008][T13604] Cannot find add_set index 4 as target [ 1017.706723][T13606] Cannot find add_set index 4 as target [ 1017.970539][T13613] gre1: entered promiscuous mode [ 1018.459385][T13630] veth0: entered promiscuous mode [ 1018.524586][T13548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.532062][T13548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.539406][T13548] bridge_slave_0: entered allmulticast mode [ 1018.548869][T13548] bridge_slave_0: entered promiscuous mode [ 1018.557616][T13548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.565746][T13548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.574728][T13548] bridge_slave_1: entered allmulticast mode [ 1018.583708][T13548] bridge_slave_1: entered promiscuous mode [ 1018.611212][T11384] bridge_slave_1: left allmulticast mode [ 1018.621194][T11384] bridge_slave_1: left promiscuous mode [ 1018.635906][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.653337][T11384] bridge_slave_0: left allmulticast mode [ 1018.659238][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.674424][T11384] pim6reg: left allmulticast mode [ 1018.679697][T11384] lo: left allmulticast mode [ 1018.689879][T11384] tipc: Resetting bearer [ 1018.803564][T11384] erspan0 (unregistering): left promiscuous mode [ 1018.875683][T11384] tipc: Disabling bearer [ 1018.901331][T11384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.910881][T26488] Bluetooth: hci0: command tx timeout [ 1018.919325][T11384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.932385][T11384] bond0 (unregistering): (slave ): Releasing backup interface [ 1018.945230][T11384] bond0 (unregistering): Released all slaves [ 1018.955307][T11384] bond1 (unregistering): Released all slaves [ 1018.973449][T11384] bond2 (unregistering): Released all slaves [ 1018.986626][T11384] bond3 (unregistering): Released all slaves [ 1018.999283][T11384] bond4 (unregistering): Released all slaves [ 1019.031597][T11384] bond5 (unregistering): Released all slaves [ 1019.048900][T11384] bond6 (unregistering): Released all slaves [ 1019.062664][T11384] bond7 (unregistering): Released all slaves [ 1019.076223][T11384] bond8 (unregistering): Released all slaves [ 1019.096342][T11384] bond9 (unregistering): Released all slaves [ 1019.116082][T13630] veth0: left promiscuous mode [ 1019.125479][T13548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.155608][T13548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.218386][T11384] : left promiscuous mode [ 1019.255928][T13548] team0: Port device team_slave_0 added [ 1019.279053][T13548] team0: Port device team_slave_1 added [ 1019.316292][T11384] tipc: Disabling bearer [ 1019.323536][T11384] tipc: Left network mode [ 1019.378813][T13548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.398955][T13548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.430932][T13548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.527908][T13548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.537476][T13548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.567448][T13548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.582085][T13662] __nla_validate_parse: 11 callbacks suppressed [ 1019.582117][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11165'. [ 1019.705605][T13648] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1019.769966][T13548] hsr_slave_0: entered promiscuous mode [ 1019.779332][T13548] hsr_slave_1: entered promiscuous mode [ 1019.786387][T13548] debugfs: 'hsr0' already exists in 'hsr' [ 1019.792570][T13548] Cannot create hsr debugfs directory [ 1019.948049][T13672] dvmrp0: entered allmulticast mode [ 1019.968984][T13672] validate_nla: 57 callbacks suppressed [ 1019.969003][T13672] netlink: 'syz.4.11168': attribute type 4 has an invalid length. [ 1020.000862][T13672] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11168'. [ 1020.055592][T13672] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.11168'. [ 1020.102686][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11168'. [ 1020.507191][T13703] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11175'. [ 1020.991750][T26488] Bluetooth: hci0: command tx timeout [ 1021.367806][T26488] block nbd7: Receive control failed (result -32) [ 1021.699120][T13729] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11182'. [ 1021.722876][T13730] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11182'. [ 1021.736717][T13732] openvswitch: netlink: Message has 8 unknown bytes. [ 1021.756807][T13732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.893036][T13548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1021.904265][T13548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.918414][T13548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1021.952547][T13548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1021.976785][T13548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1021.998736][T13548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.008560][T13548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1022.031671][T13548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1022.049722][T13739] vxcan3: entered promiscuous mode [ 1022.079841][T13739] bond12: Unable to set up delay as MII monitoring is disabled [ 1022.090742][T13739] bond12 (unregistering): Released all slaves [ 1022.201157][T11384] IPVS: stop unused estimator thread 0... [ 1022.249787][T13548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.291290][T13548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.304726][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11188'. [ 1022.315831][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11188'. [ 1022.333246][T11384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.340427][T11384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.377023][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.384753][T11135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.567151][T13768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11191'. [ 1022.759833][T13782] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1022.767781][T13782] syzkaller1: Refused to change device type [ 1022.931203][T13548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.071761][T26488] Bluetooth: hci0: command tx timeout [ 1023.201879][T13548] veth0_vlan: entered promiscuous mode [ 1023.219282][T13548] veth1_vlan: entered promiscuous mode [ 1023.266825][T13548] veth0_macvtap: entered promiscuous mode [ 1023.284753][T13548] veth1_macvtap: entered promiscuous mode [ 1023.316571][T13548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.341315][T13548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.362610][T11142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.382241][T11142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.395512][T11142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.412557][T11142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.546349][T11142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.571600][T11142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.603560][T11142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.614810][T11142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.825008][T13826] bond1: option fail_over_mac: invalid value (16) [ 1023.837313][T13826] bond1 (unregistering): Released all slaves [ 1023.879930][T13831] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1023.914032][T13826] bond1: option fail_over_mac: invalid value (16) [ 1023.922283][T13826] bond1 (unregistering): Released all slaves [ 1024.013521][T13826] bond1: option fail_over_mac: invalid value (16) [ 1024.025927][T13826] bond1 (unregistering): Released all slaves [ 1024.103270][T13826] bond1: option fail_over_mac: invalid value (16) [ 1024.115602][T13826] bond1 (unregistering): Released all slaves [ 1024.361125][T13844] tipc: Enabling of bearer rejected, failed to enable media [ 1024.419053][T13826] bond1: option fail_over_mac: invalid value (16) [ 1024.429074][T13826] bond1 (unregistering): Released all slaves [ 1024.536630][T13826] bond1: option fail_over_mac: invalid value (16) [ 1024.565311][T13826] bond1 (unregistering): Released all slaves [ 1024.612285][T13857] veth0: entered allmulticast mode [ 1024.819220][T13866] __nla_validate_parse: 7 callbacks suppressed [ 1024.819245][T13866] netlink: 144 bytes leftover after parsing attributes in process `syz.5.11216'. [ 1025.151315][T26488] Bluetooth: hci0: command tx timeout [ 1026.113439][T13925] syzkaller0: entered promiscuous mode [ 1026.119398][T13925] syzkaller0: entered allmulticast mode [ 1026.128192][T13922] tipc: Started in network mode [ 1026.134667][T13922] tipc: Node identity d62196a999c2, cluster identity 4711 [ 1026.145088][T13922] tipc: Enabled bearer , priority 0 [ 1026.154886][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11234'. [ 1026.167446][T11146] tipc: Resetting bearer [ 1026.190623][T13935] sock: sock_set_timeout: `syz.2.11237' (pid 13935) tries to set negative timeout [ 1026.336653][T26488] block nbd8: Receive control failed (result -32) [ 1026.362113][T13926] tipc: Resetting bearer [ 1026.508060][T13926] tipc: Disabling bearer [ 1026.537605][T13951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11239'. [ 1026.640989][T13954] netlink: 'syz.5.11240': attribute type 12 has an invalid length. [ 1026.649735][T13954] netlink: 'syz.5.11240': attribute type 29 has an invalid length. [ 1026.660612][T13954] netlink: 148 bytes leftover after parsing attributes in process `syz.5.11240'. [ 1026.671530][T13954] netlink: 59 bytes leftover after parsing attributes in process `syz.5.11240'. [ 1026.748112][T13958] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11242'. [ 1026.809176][T13961] --map-set only usable from mangle table [ 1026.997042][T13972] syz.2.11250: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1027.029074][T13972] CPU: 0 UID: 0 PID: 13972 Comm: syz.2.11250 Not tainted syzkaller #0 PREEMPT(full) [ 1027.029104][T13972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1027.029119][T13972] Call Trace: [ 1027.029128][T13972] [ 1027.029137][T13972] dump_stack_lvl+0xe8/0x150 [ 1027.029167][T13972] warn_alloc+0x249/0x340 [ 1027.029198][T13972] ? __pfx_stack_trace_save+0x10/0x10 [ 1027.029232][T13972] ? __pfx_warn_alloc+0x10/0x10 [ 1027.029273][T13972] ? __kasan_kmalloc+0x93/0xb0 [ 1027.029301][T13972] ? __kmalloc_cache_noprof+0x318/0x660 [ 1027.029329][T13972] ? xskq_create+0x56/0x170 [ 1027.029353][T13972] ? xsk_init_queue+0x8a/0xe0 [ 1027.029375][T13972] ? xsk_setsockopt+0x52a/0x960 [ 1027.029396][T13972] ? do_sock_setsockopt+0x17c/0x1b0 [ 1027.029425][T13972] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1027.029453][T13972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.029477][T13972] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1027.029521][T13972] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1027.029552][T13972] ? __kasan_kmalloc+0x93/0xb0 [ 1027.029583][T13972] vmalloc_user_noprof+0xad/0xe0 [ 1027.029608][T13972] ? xskq_create+0xbf/0x170 [ 1027.029634][T13972] xskq_create+0xbf/0x170 [ 1027.029661][T13972] xsk_init_queue+0x8a/0xe0 [ 1027.029686][T13972] xsk_setsockopt+0x52a/0x960 [ 1027.029712][T13972] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1027.029735][T13972] ? __pfx_aa_sk_perm+0x10/0x10 [ 1027.029767][T13972] ? lock_release+0x4b/0x3c0 [ 1027.029799][T13972] ? aa_sock_opt_perm+0xff/0x1a0 [ 1027.029822][T13972] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1027.029849][T13972] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1027.029872][T13972] do_sock_setsockopt+0x17c/0x1b0 [ 1027.029905][T13972] __x64_sys_setsockopt+0x13d/0x1b0 [ 1027.029936][T13972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.029959][T13972] do_syscall_64+0x174/0x580 [ 1027.029986][T13972] ? trace_irq_disable+0x3b/0x140 [ 1027.030014][T13972] ? clear_bhb_loop+0x40/0x90 [ 1027.030043][T13972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.030063][T13972] RIP: 0033:0x7f4e2339ce59 [ 1027.030083][T13972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.030102][T13972] RSP: 002b:00007f4e241bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1027.030124][T13972] RAX: ffffffffffffffda RBX: 00007f4e23615fa0 RCX: 00007f4e2339ce59 [ 1027.030139][T13972] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1027.030152][T13972] RBP: 00007f4e23432e6f R08: 0000000000000004 R09: 0000000000000000 [ 1027.030166][T13972] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.030180][T13972] R13: 00007f4e23616038 R14: 00007f4e23615fa0 R15: 00007ffe0fade528 [ 1027.030207][T13972] [ 1027.322452][T13972] Mem-Info: [ 1027.334651][T13972] active_anon:7366 inactive_anon:414 isolated_anon:0 [ 1027.334651][T13972] active_file:2694 inactive_file:40289 isolated_file:0 [ 1027.334651][T13972] unevictable:768 dirty:40 writeback:0 [ 1027.334651][T13972] slab_reclaimable:13836 slab_unreclaimable:148170 [ 1027.334651][T13972] mapped:34542 shmem:1300 pagetables:3574 [ 1027.334651][T13972] sec_pagetables:0 bounce:0 [ 1027.334651][T13972] kernel_misc_reclaimable:0 [ 1027.334651][T13972] free:1227577 free_pcp:30386 free_cma:0 [ 1027.381233][T13972] Node 0 active_anon:29464kB inactive_anon:1656kB active_file:10776kB inactive_file:160956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117688kB dirty:160kB writeback:0kB shmem:3664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18144kB pagetables:14172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1027.421993][T13972] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1027.455564][T13972] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1027.486726][T13972] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1027.493060][T13972] Node 0 DMA32 free:1057820kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29464kB inactive_anon:1656kB active_file:10776kB inactive_file:160956kB unevictable:1536kB writepending:160kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:66080kB local_pcp:40864kB free_cma:0kB [ 1027.526889][T13972] lowmem_reserve[]: 0 0 0 0 0 [ 1027.531770][T13972] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1027.561847][T13972] lowmem_reserve[]: 0 0 0 0 0 [ 1027.566796][T13972] Node 1 Normal free:3841248kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56064kB local_pcp:28312kB free_cma:0kB [ 1027.617630][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11252'. [ 1027.626828][T13979] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 1027.636375][T13972] lowmem_reserve[]: 0 0 0 0 0 [ 1027.643192][T13972] Node 0 DMA: 2*4kB (U) 0*8kB 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11240kB [ 1027.661045][T13972] Node 0 DMA32: 5977*4kB (UME) 8803*8kB (UME) 4708*16kB (UME) 343*32kB (UME) 304*64kB (UM) 721*128kB (UME) 650*256kB (UM) 330*512kB (UME) 220*1024kB (UME) 100*2048kB (UM) 0*4096kB = 1057820kB [ 1027.686158][T13972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1027.720698][T13972] Node 1 Normal: 4*4kB (U) 8*8kB (UM) 9*16kB (UM) 8*32kB (UM) 18*64kB (UM) 13*128kB (UM) 10*256kB (UM) 9*512kB (UM) 11*1024kB (UM) 7*2048kB (U) 929*4096kB (UM) = 3841248kB [ 1027.777020][T13972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.789868][T13972] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1027.808353][T13977] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11250'. [ 1027.850685][T13972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.907337][T13977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1027.968558][T13972] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1027.998245][T13972] 44285 total pagecache pages [ 1028.013685][T13972] 2 pages in swap cache [ 1028.032224][T13972] Free swap = 124988kB [ 1028.041834][T13972] Total swap = 124996kB [ 1028.054088][T13972] 2097051 pages RAM [ 1028.065269][T13972] 0 pages HighMem/MovableOnly [ 1028.082687][T13972] 427124 pages reserved [ 1028.099485][T30882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1028.108638][T30882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1028.116117][T30882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1028.127656][T30882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1028.137341][T30882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1028.176311][T13972] 0 pages cma reserved [ 1028.292908][T13999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1028.302936][T13999] bond0: (slave bond8): Enslaving as an active interface with an up link [ 1028.314883][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11259'. [ 1028.407327][T14009] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11261'. [ 1028.797056][T14045] tipc: Enabling of bearer rejected, failed to enable media [ 1029.093010][T14056] bond9 (unregistering): Released all slaves [ 1029.211854][T13996] xfrm0 speed is unknown, defaulting to 1000 [ 1029.441453][T14073] macvtap1: entered promiscuous mode [ 1029.447546][T14073] vlan0: entered promiscuous mode [ 1029.455779][T14073] macvtap1: entered allmulticast mode [ 1029.462467][T14073] vlan0: entered allmulticast mode [ 1029.468128][T14073] veth0_vlan: entered allmulticast mode [ 1029.709675][T14101] openvswitch: netlink: Multiple metadata blocks provided [ 1029.789836][T14102] xt_ecn: cannot match TCP bits for non-tcp packets [ 1030.018349][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.032666][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.045763][T13996] bridge_slave_0: entered allmulticast mode [ 1030.054235][T13996] bridge_slave_0: entered promiscuous mode [ 1030.069670][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.077578][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.085142][T13996] bridge_slave_1: entered allmulticast mode [ 1030.092752][T13996] bridge_slave_1: entered promiscuous mode [ 1030.110178][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1030.117429][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1030.143074][T14125] __nla_validate_parse: 11 callbacks suppressed [ 1030.143105][T14125] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11285'. [ 1030.165779][T14126] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11285'. [ 1030.176766][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.190720][T30882] Bluetooth: hci6: command tx timeout [ 1030.196854][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.276903][T13996] team0: Port device team_slave_0 added [ 1030.287353][T13996] team0: Port device team_slave_1 added [ 1030.316004][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.323198][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.352186][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.365614][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.372905][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.401623][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.454856][T13996] hsr_slave_0: entered promiscuous mode [ 1030.462757][T13996] hsr_slave_1: entered promiscuous mode [ 1030.468986][T13996] debugfs: 'hsr0' already exists in 'hsr' [ 1030.475330][T13996] Cannot create hsr debugfs directory [ 1032.270267][T30882] Bluetooth: hci6: command tx timeout [ 1032.507457][T14087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1032.525327][T13996] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1032.542870][T13996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1032.562601][T13996] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1032.594386][T13996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1032.614426][T13996] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1032.642413][T13996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1032.674626][T13996] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1032.693442][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11288'. [ 1032.726513][T13996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1032.787099][T14152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11289'. [ 1032.913835][T14164] netlink: 211472 bytes leftover after parsing attributes in process `syz.5.11291'. [ 1033.003529][T13996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.046005][T13996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.083995][T11139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.091697][T11139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.119159][T11139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.126876][T11139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.438582][T14195] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 1033.559714][T14199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.766903][T14214] Cannot find map_set index 135 as target [ 1033.774435][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11307'. [ 1033.788958][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11306'. [ 1033.814220][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11306'. [ 1033.901870][T14222] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11308'. [ 1033.975748][T14226] team0: Device ipvlan2 is already an upper device of the team interface [ 1034.006086][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.044119][T14227] bond9: option lp_interval: invalid value (0) [ 1034.050858][T14227] bond9: option lp_interval: allowed values 1 - 2147483647 [ 1034.064218][T14227] bond9 (unregistering): Released all slaves [ 1034.351126][T30882] Bluetooth: hci6: command tx timeout [ 1034.492985][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11315'. [ 1034.656552][T14259] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1034.684261][T14260] bond9: entered promiscuous mode [ 1034.693874][T14260] bond9: entered allmulticast mode [ 1034.711828][T14264] openvswitch: netlink: IP tunnel dst address not specified [ 1034.798667][T14279] nbd: must specify an index to disconnect [ 1034.841765][T13996] veth0_vlan: entered promiscuous mode [ 1034.867711][T14277] bond0: entered promiscuous mode [ 1034.877110][T14277] bond_slave_0: entered promiscuous mode [ 1034.893303][T14277] bond_slave_1: entered promiscuous mode [ 1034.914203][T14277] batadv0: entered promiscuous mode [ 1034.920951][T14277] debugfs: 'hsr1' already exists in 'hsr' [ 1034.928366][T14277] Cannot create hsr debugfs directory [ 1034.935579][T14277] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1034.958812][T14277] bond0: left promiscuous mode [ 1034.964333][T14277] bond_slave_0: left promiscuous mode [ 1034.972296][T14277] bond_slave_1: left promiscuous mode [ 1034.980701][T14277] batadv0: left promiscuous mode [ 1035.015362][T14286] tun0: tun_chr_ioctl cmd 1074025675 [ 1035.021428][T14286] tun0: persist enabled [ 1035.027686][T13996] veth1_vlan: entered promiscuous mode [ 1035.167727][T13996] veth0_macvtap: entered promiscuous mode [ 1035.217681][T13996] veth1_macvtap: entered promiscuous mode [ 1035.294231][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.343872][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.408360][T11139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.427946][T11139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.455145][T11139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.477927][T11139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.579791][T14316] __nla_validate_parse: 3 callbacks suppressed [ 1035.579813][T14316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11327'. [ 1035.773558][T14325] netlink: 'syz.2.11329': attribute type 1 has an invalid length. [ 1035.796351][T11135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.811563][T14327] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11331'. [ 1035.828663][T11135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.832068][T14325] netlink: 'syz.2.11329': attribute type 11 has an invalid length. [ 1035.849376][T14327] netlink: 'syz.0.11331': attribute type 1 has an invalid length. [ 1035.877273][T14325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11329'. [ 1035.915539][T14327] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1035.970973][T11135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.986141][T11135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.319046][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11339'. [ 1036.330019][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11338'. [ 1036.345510][T14355] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1036.358275][T14355] netlink: 'syz.2.11339': attribute type 1 has an invalid length. [ 1036.367055][T14355] netlink: 476 bytes leftover after parsing attributes in process `syz.2.11339'. [ 1036.378052][T14355] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.11339'. [ 1036.430243][T30882] Bluetooth: hci6: command tx timeout [ 1036.479028][T14365] netlink: 'syz.4.11340': attribute type 1 has an invalid length. [ 1036.512906][T14365] netlink: 'syz.4.11340': attribute type 1 has an invalid length. [ 1036.602709][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11342'. [ 1036.614222][T14376] netlink: 'syz.6.11345': attribute type 1 has an invalid length. [ 1036.628548][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11344'. [ 1036.675372][T14370] macsec1: entered promiscuous mode [ 1036.693187][T14370] bridge0: entered promiscuous mode [ 1036.731585][T14370] macsec1: entered allmulticast mode [ 1036.745283][T14370] bridge0: entered allmulticast mode [ 1036.771723][T14370] bridge0: port 3(macsec1) entered blocking state [ 1036.784949][T14370] bridge0: port 3(macsec1) entered disabled state [ 1036.795571][T14370] bridge0: left allmulticast mode [ 1036.814216][T14391] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11348'. [ 1036.834017][T10969] bridge0: left promiscuous mode [ 1036.858258][T14392] tipc: Enabled bearer , priority 0 [ 1036.954506][T14395] syzkaller0: entered promiscuous mode [ 1036.974839][T14395] syzkaller0: entered allmulticast mode [ 1037.027766][T14395] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1037.038838][T14392] tipc: Disabling bearer [ 1037.083570][T14396] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1037.892309][T14450] netlink: 'syz.0.11365': attribute type 11 has an invalid length. [ 1037.901422][T14450] netlink: 'syz.0.11365': attribute type 5 has an invalid length. [ 1038.239639][T14468] Bluetooth: MGMT ver 1.23 [ 1038.281953][T14467] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1038.290955][T14467] bond12: entered allmulticast mode [ 1038.296898][T14467] bond0: (slave bond12): Enslaving as an active interface with an up link [ 1038.308699][T11145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.330279][T11145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.373527][T14467] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1038.415823][T14467] bond13 (unregistering): Released all slaves [ 1038.824838][T14510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.022751][T14520] bridge0: left allmulticast mode [ 1039.066092][T14520] veth1_to_bridge: left allmulticast mode [ 1039.082644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1039.112719][T14520] tipc: Resetting bearer [ 1039.122616][T14520] veth0_to_hsr: left allmulticast mode [ 1039.139041][T14520] bridge3: left allmulticast mode [ 1039.147251][T14520] veth1: left allmulticast mode [ 1039.155666][T14520] ipvlan2: left allmulticast mode [ 1039.161819][T14520] batadv_slave_1: left allmulticast mode [ 1039.170953][T14520] ip6gretap1: left allmulticast mode [ 1039.179331][T14520] macvtap1: left allmulticast mode [ 1039.185198][T14520] vlan0: left allmulticast mode [ 1039.190726][T14520] veth0_vlan: left allmulticast mode [ 1039.197122][T14520] bond9: left allmulticast mode [ 1039.427496][T14547] tipc: Enabling of bearer rejected, failed to enable media [ 1039.453327][T14547] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1039.588028][T14556] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1039.616839][T14556] bond1 (unregistering): Released all slaves [ 1039.643921][T14560] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1039.690571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1039.795222][T14565] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1040.027158][T14586] netlink: zone id is out of range [ 1040.054907][T14582] netlink: zone id is out of range [ 1040.069418][T14585] syzkaller0: entered promiscuous mode [ 1040.085639][T14581] netlink: set zone limit has 4 unknown bytes [ 1040.089489][T14586] netlink: zone id is out of range [ 1040.102821][T14585] syzkaller0: entered allmulticast mode [ 1040.108734][T14582] netlink: zone id is out of range [ 1040.108748][T14582] netlink: zone id is out of range [ 1040.108759][T14582] netlink: zone id is out of range [ 1040.108768][T14582] netlink: zone id is out of range [ 1040.108778][T14582] netlink: zone id is out of range [ 1040.108787][T14582] netlink: zone id is out of range [ 1040.653464][T14611] __nla_validate_parse: 15 callbacks suppressed [ 1040.653625][T14611] netlink: 252 bytes leftover after parsing attributes in process `syz.0.11415'. [ 1040.965399][T14621] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1041.095839][T14623] netlink: 'syz.5.11417': attribute type 7 has an invalid length. [ 1041.158132][T14623] netlink: 'syz.5.11417': attribute type 5 has an invalid length. [ 1041.169975][T14623] netlink: 17 bytes leftover after parsing attributes in process `syz.5.11417'. [ 1041.291582][T14639] netlink: 'syz.2.11423': attribute type 33 has an invalid length. [ 1041.303722][T14638] syzkaller1: entered promiscuous mode [ 1041.320563][T14638] syzkaller1: entered allmulticast mode [ 1041.357191][T14639] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1041.386140][T14639] bond12 (unregistering): Released all slaves [ 1041.407276][T14645] xt_TCPMSS: Only works on TCP SYN packets [ 1041.446100][T14640] syzkaller0: entered promiscuous mode [ 1041.470354][T14640] syzkaller0: entered allmulticast mode [ 1041.800515][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11427'. [ 1041.884205][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11427'. [ 1042.354519][T14683] ip6gretap1: entered promiscuous mode [ 1042.379017][T14683] ip6gretap1: entered allmulticast mode [ 1042.534319][T14695] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11436'. [ 1042.762642][T14720] netlink: 'syz.5.11442': attribute type 17 has an invalid length. [ 1042.770816][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11442'. [ 1042.779812][T14720] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11442'. [ 1042.789696][T14723] netlink: 'syz.4.11439': attribute type 1 has an invalid length. [ 1042.821626][T14723] netlink: 'syz.4.11439': attribute type 3 has an invalid length. [ 1042.829542][T14723] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11439'. [ 1043.083533][T14746] syzkaller0: entered promiscuous mode [ 1043.089217][T14746] syzkaller0: entered allmulticast mode [ 1043.116428][T14748] netlink: 'syz.2.11448': attribute type 1 has an invalid length. [ 1045.606529][T14704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1045.768082][T14764] tipc: Enabled bearer , priority 10 [ 1045.779119][T14770] sctp: [Deprecated]: syz.5.11454 (pid 14770) Use of int in maxseg socket option. [ 1045.779119][T14770] Use struct sctp_assoc_value instead [ 1045.795939][T14769] netlink: 'syz.4.11456': attribute type 1 has an invalid length. [ 1045.834364][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11452'. [ 1045.928471][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11456'. [ 1045.956347][T14775] bond13: (slave geneve3): making interface the new active one [ 1045.984876][T14775] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 1046.014560][T11142] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1046.052212][T11142] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1046.063752][T11142] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1046.074313][T11142] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1046.089967][T14775] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1046.104877][T14769] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1046.268827][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11464'. [ 1046.323752][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11464'. [ 1046.341507][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11464'. [ 1046.363309][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11464'. [ 1046.554935][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11468'. [ 1046.577687][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11469'. [ 1046.625065][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11468'. [ 1046.625556][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11472'. [ 1046.667746][T14820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1046.678851][T14827] bond1: entered promiscuous mode [ 1046.688099][T14822] x_tables: duplicate underflow at hook 2 [ 1046.695835][T14827] bond1: entered allmulticast mode [ 1046.704935][T14826] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1047.034304][T14850] netlink: 'syz.2.11480': attribute type 2 has an invalid length. [ 1047.096376][T14850] netlink: 'syz.2.11480': attribute type 2 has an invalid length. [ 1047.119932][T14852] syzkaller0: entered promiscuous mode [ 1047.140182][T14852] syzkaller0: entered allmulticast mode [ 1047.442990][T14876] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1047.465624][T14877] syzkaller1: entered promiscuous mode [ 1047.504648][T14877] syzkaller1: entered allmulticast mode [ 1047.516945][T14879] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1047.577828][T14884] x_tables: duplicate underflow at hook 1 [ 1047.778606][T14901] xt_addrtype: ipv6 does not support BROADCAST matching [ 1048.279980][T14918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.287570][T14918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.315652][T14932] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1048.589070][T14948] ip6gretap0: entered promiscuous mode [ 1048.633687][T14950] netlink: 'syz.2.11510': attribute type 21 has an invalid length. [ 1048.642436][T14950] IPv6: NLM_F_CREATE should be specified when creating new route [ 1048.652078][T14948] ip6gretap0: left promiscuous mode [ 1048.658297][T14950] netlink: 'syz.2.11510': attribute type 1 has an invalid length. [ 1048.699114][T14951] netlink: 'syz.2.11510': attribute type 21 has an invalid length. [ 1048.725937][T14951] netlink: 'syz.2.11510': attribute type 1 has an invalid length. [ 1048.932696][T14971] netlink: 'syz.5.11517': attribute type 1 has an invalid length. [ 1049.036661][T14971] bond2: entered promiscuous mode [ 1049.043708][T14971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1049.109109][T14971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1049.118512][T14971] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1049.131028][T14971] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1049.152124][T14971] bond2: (slave vti0): making interface the new active one [ 1049.160942][T14971] vti0: entered promiscuous mode [ 1049.176012][T14971] vti0: left promiscuous mode [ 1049.193805][T14981] netlink: 'syz.4.11521': attribute type 1 has an invalid length. [ 1049.253838][T14981] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1049.537880][T15006] bond0: entered allmulticast mode [ 1049.565543][T15006] bond_slave_0: entered allmulticast mode [ 1049.584863][T15006] bond_slave_1: entered allmulticast mode [ 1049.590802][T15006] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1049.671724][T15012] syzkaller0: entered promiscuous mode [ 1049.696543][T15012] syzkaller0: entered allmulticast mode [ 1049.894573][T15031] netlink: 'syz.0.11535': attribute type 1 has an invalid length. [ 1050.064838][T15037] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1050.075155][T15037] bond11: (slave bond12): making interface the new active one [ 1050.083474][T15037] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1050.107536][T15044] IPv6: sit3: Disabled Multicast RS [ 1050.124648][T15040] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1050.185285][T15048] ip6gretap0: entered promiscuous mode [ 1050.203144][T15048] syz_tun: entered promiscuous mode [ 1050.218447][T15048] debugfs: 'hsr1' already exists in 'hsr' [ 1050.227371][T15048] Cannot create hsr debugfs directory [ 1050.428705][T15056] syzkaller0: entered promiscuous mode [ 1050.446082][T15056] syzkaller0: entered allmulticast mode [ 1050.635054][T15074] netlink: 'syz.4.11551': attribute type 9 has an invalid length. [ 1050.855922][T15084] __nla_validate_parse: 18 callbacks suppressed [ 1050.855956][T15084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11553'. [ 1050.877995][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11553'. [ 1050.958480][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11552'. [ 1051.066250][T15093] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1051.223691][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11561'. [ 1051.282929][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11563'. [ 1051.390672][T26488] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.407501][T15110] dvmrp0: entered allmulticast mode [ 1051.416390][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11564'. [ 1051.439997][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11564'. [ 1051.740809][T15143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11569'. [ 1051.767748][T15143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11569'. [ 1052.306238][T15185] net_ratelimit: 12 callbacks suppressed [ 1052.306270][T15185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1052.586681][T15201] netlink: 'syz.5.11585': attribute type 1 has an invalid length. [ 1052.737553][T15214] batman_adv: batadv0: Adding interface: wlan0 [ 1052.754920][T15214] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.807680][T15214] batman_adv: batadv0: Interface activated: wlan0 [ 1052.914981][T15224] xt_hashlimit: size too large, truncated to 1048576 [ 1053.239276][T15243] netlink: 'syz.0.11595': attribute type 1 has an invalid length. [ 1053.734782][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11599'. [ 1054.005524][T15280] sctp: [Deprecated]: syz.4.11603 (pid 15280) Use of int in max_burst socket option. [ 1054.005524][T15280] Use struct sctp_assoc_value instead [ 1054.106769][T15285] netlink: 'syz.0.11601': attribute type 1 has an invalid length. [ 1054.126758][T15274] netlink: 'syz.2.11602': attribute type 21 has an invalid length. [ 1054.167948][T15274] netlink: 'syz.2.11602': attribute type 5 has an invalid length. [ 1054.183130][T15274] netlink: 'syz.2.11602': attribute type 6 has an invalid length. [ 1054.334048][ T76] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.384421][ T76] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.397074][ T76] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.408449][ T76] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.713909][T15313] netlink: 'syz.6.11611': attribute type 1 has an invalid length. [ 1054.738947][T15313] netlink: 'syz.6.11611': attribute type 2 has an invalid length. [ 1056.945267][T15270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1057.225957][T15337] __nla_validate_parse: 9 callbacks suppressed [ 1057.226007][T15337] netlink: 116 bytes leftover after parsing attributes in process `syz.0.11616'. [ 1057.277345][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11612'. [ 1057.427695][T15331] bond13: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1057.456096][T15331] bond13 (unregistering): Released all slaves [ 1057.502228][T15356] netlink: 'syz.6.11622': attribute type 9 has an invalid length. [ 1057.577100][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11623'. [ 1057.796771][T15375] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1057.803318][T15375] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1057.828235][T15367] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1057.834789][T15367] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1057.973635][T15382] veth1_macvtap: left promiscuous mode [ 1057.985842][T15382] macsec0: entered promiscuous mode [ 1058.039608][T15387] syzkaller0: entered promiscuous mode [ 1058.046886][T15387] syzkaller0: entered allmulticast mode [ 1058.299316][T15402] openvswitch: netlink: Key type 262 is out of range max 32 [ 1058.355664][T15402] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1058.481246][T15414] tipc: Enabling of bearer rejected, failed to enable media [ 1058.493564][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11641'. [ 1058.613407][T15416] pimreg: entered allmulticast mode [ 1058.650782][T15414] v: renamed from vlan0 (while UP) [ 1058.708149][T15426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1058.749467][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11643'. [ 1058.894931][T15436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11644'. [ 1058.927649][T15436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11644'. [ 1059.485995][T26488] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1059.495297][T26488] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1059.504175][T26488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1059.516069][T26488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1059.525157][T26488] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1059.714553][T15458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.722176][T15458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.043216][T15458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.057177][T15458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.133777][T15458] macsec0: left promiscuous mode [ 1060.169875][T15458] bond1: left promiscuous mode [ 1060.176489][T15458] bond1: left allmulticast mode [ 1060.241969][T11139] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.292671][T11139] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.339012][T11139] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.382195][T11139] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.411886][T11139] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.444142][T11139] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.487719][T11139] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.528309][T11139] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.615278][T11145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.682146][T11145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1060.709740][T15483] tipc: Enabled bearer , priority 0 [ 1060.756259][T15504] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1060.783889][T15504] bond14: (slave lo): Enslaving as an active interface with an up link [ 1060.793034][T15504] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1060.822676][T15491] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1060.865989][T11145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.934293][T11145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1060.992931][T15519] syzkaller0: entered promiscuous mode [ 1061.008805][T15519] syzkaller0: entered allmulticast mode [ 1061.059396][T11145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.092916][T11145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1061.176767][T15526] netlink: 187468 bytes leftover after parsing attributes in process `syz.5.11668'. [ 1061.442007][T15482] tipc: Disabling bearer [ 1061.454362][T15459] xfrm0 speed is unknown, defaulting to 1000 [ 1061.504337][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11672'. [ 1061.554140][T26488] Bluetooth: hci7: command tx timeout [ 1061.594550][T11145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.625488][T11145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1062.354146][T15564] netlink: 'syz.6.11678': attribute type 23 has an invalid length. [ 1062.441815][T11145] bridge_slave_1: left allmulticast mode [ 1062.453725][T11145] bridge_slave_1: left promiscuous mode [ 1062.473669][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.502134][T11145] bridge_slave_0: left allmulticast mode [ 1062.509578][T11145] bridge_slave_0: left promiscuous mode [ 1062.528341][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.561153][T11145] dvmrp0: left allmulticast mode [ 1062.573227][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11680'. [ 1062.598099][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11680'. [ 1062.743500][T11145] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1062.763930][T11145] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1062.792339][T11145] bond13 (unregistering): (slave geneve3): Releasing active interface [ 1062.805860][T11145] bond7 (unregistering): (slave geneve2): Releasing active interface [ 1062.814747][T11145] geneve2 (unregistering): left allmulticast mode [ 1062.829307][T11145] team0: Port device geneve1 removed [ 1062.863690][T11145] bond9 (unregistering): (slave bridge7): Releasing active interface [ 1062.892465][T11145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.908955][T11145] bond_slave_0: left allmulticast mode [ 1062.917438][T11145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.926786][T11145] bond_slave_1: left allmulticast mode [ 1062.934773][T11145] bond0 (unregistering): (slave bond12): Releasing backup interface [ 1062.943560][T11145] bond12 (unregistering): left allmulticast mode [ 1062.950796][T11145] bond0 (unregistering): Released all slaves [ 1062.961961][T11145] bond1 (unregistering): Released all slaves [ 1062.974173][T11145] bond3 (unregistering): Released all slaves [ 1062.986295][T11145] bond2 (unregistering): Released all slaves [ 1063.007600][T11145] bond4 (unregistering): Released all slaves [ 1063.022318][T11145] bond5 (unregistering): Released all slaves [ 1063.038838][T11145] bond6 (unregistering): Released all slaves [ 1063.055689][T11145] bond7 (unregistering): Released all slaves [ 1063.068187][T11145] bond8 (unregistering): Released all slaves [ 1063.091286][T11145] bond9 (unregistering): Released all slaves [ 1063.103958][T11145] bond10 (unregistering): Released all slaves [ 1063.118536][T11145] bond11 (unregistering): Released all slaves [ 1063.138612][T11145] bond12 (unregistering): Released all slaves [ 1063.153526][T11145] bond13 (unregistering): Released all slaves [ 1063.166598][T11145] bond14 (unregistering): Released all slaves [ 1063.215054][T15575] gtp1: entered promiscuous mode [ 1063.243359][T15575] gtp1: entered allmulticast mode [ 1063.276279][T15581] bond0: left allmulticast mode [ 1063.290555][T15581] bond_slave_0: left allmulticast mode [ 1063.309204][T15581] bond_slave_1: left allmulticast mode [ 1063.331795][T15581] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 1063.350477][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11685'. [ 1063.380806][T15584] netlink: 11 bytes leftover after parsing attributes in process `syz.6.11684'. [ 1063.408409][T15584] netlink: 11 bytes leftover after parsing attributes in process `syz.6.11684'. [ 1063.421050][T11145] tipc: Left network mode [ 1063.597965][T15599] netlink: 'syz.0.11687': attribute type 11 has an invalid length. [ 1063.632419][T26488] Bluetooth: hci7: command tx timeout [ 1063.798692][T15615] netlink: 'syz.0.11691': attribute type 2 has an invalid length. [ 1063.814689][T15615] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11691'. [ 1063.929931][T15625] netlink: 15 bytes leftover after parsing attributes in process `syz.2.11692'. [ 1063.959725][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11691'. [ 1064.039803][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11691'. [ 1064.339215][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11697'. [ 1064.374270][T15640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.439034][T15642] syzkaller0: entered promiscuous mode [ 1064.453530][T15642] syzkaller0: entered allmulticast mode [ 1064.536024][T15663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.804866][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1064.836522][T15459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.879559][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.924462][T15459] bridge_slave_0: entered allmulticast mode [ 1064.968077][T15459] bridge_slave_0: entered promiscuous mode [ 1065.024602][T15459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.048703][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.076556][T15459] bridge_slave_1: entered allmulticast mode [ 1065.117253][T15459] bridge_slave_1: entered promiscuous mode [ 1065.137757][T15678] veth1_macvtap: left promiscuous mode [ 1065.144088][T15678] macsec0: entered promiscuous mode [ 1065.153425][T15678] macsec0: entered allmulticast mode [ 1065.404078][T11145] team0 (unregistering): Port device team_slave_1 removed [ 1065.426040][T11145] team0 (unregistering): Port device team_slave_0 removed [ 1065.512563][T11145] team0 (unregistering): Port device H removed [ 1065.522636][T11145] smc: removing net device team0 with user defined pnetid SYZ2 [ 1065.557356][T15680] veth1_macvtap: entered promiscuous mode [ 1065.565230][T15680] veth1_macvtap: entered allmulticast mode [ 1065.574735][T15680] macsec0: left promiscuous mode [ 1065.579981][T15680] macsec0: left allmulticast mode [ 1065.585515][T15680] veth1_macvtap: left allmulticast mode [ 1065.620378][T15691] syzkaller1: entered promiscuous mode [ 1065.632796][T15691] syzkaller1: entered allmulticast mode [ 1065.643300][T25206] syz0: Port: 1 Link DOWN [ 1065.656872][T15459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.676738][T15459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.710624][T26488] Bluetooth: hci7: command tx timeout [ 1065.742329][T15459] team0: Port device team_slave_0 added [ 1065.753716][T15459] team0: Port device team_slave_1 added [ 1065.803817][T15459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.818662][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.852657][T15459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.868637][T15459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.878272][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.908287][T15459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.015913][T15706] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1066.218838][T15459] hsr_slave_0: entered promiscuous mode [ 1066.251587][T15459] hsr_slave_1: entered promiscuous mode [ 1066.266741][T15459] debugfs: 'hsr0' already exists in 'hsr' [ 1066.273862][T15459] Cannot create hsr debugfs directory [ 1066.282502][T11141] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 1066.313857][T11141] bond1: now running without any active interface! [ 1066.442252][T15728] netlink: 'syz.2.11715': attribute type 9 has an invalid length. [ 1066.673182][T15740] netlink: 'syz.6.11719': attribute type 2 has an invalid length. [ 1066.699868][T15740] netlink: 'syz.6.11719': attribute type 11 has an invalid length. [ 1067.072590][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1067.080963][T15758] SET target dimension over the limit! [ 1067.121090][T15761] SET target dimension over the limit! [ 1067.546131][T15780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.790125][T26488] Bluetooth: hci7: command tx timeout [ 1072.006891][T15812] __nla_validate_parse: 2 callbacks suppressed [ 1072.006912][T15812] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11730'. [ 1072.921406][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11729'. [ 1073.649393][T15843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11740'. [ 1073.752947][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11741'. [ 1074.592057][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11743'. [ 1074.611443][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11743'. [ 1074.637673][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11743'. [ 1074.667180][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11745'. [ 1074.935213][T15900] lo: entered allmulticast mode [ 1074.974315][T15900] lo: left allmulticast mode [ 1075.046136][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11751'. [ 1075.369772][T15914] can: request_module (can-proto-3) failed. [ 1075.433326][T15907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1075.879984][T15459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1075.996739][T15459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1076.071293][T15459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1076.083855][T15948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11762'. [ 1076.166559][T15459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1076.332894][T15459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1076.413264][T15459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1076.477202][T15459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1076.564784][T15459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1077.172165][T16000] __nla_validate_parse: 1 callbacks suppressed [ 1077.172187][T16000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11773'. [ 1077.296291][T15459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.304810][T16003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11773'. [ 1077.335624][T16005] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11775'. [ 1077.382243][T16003] openvswitch: netlink: Flow key attr not present in new flow. [ 1077.406571][T16005] nbd: must specify a device to reconfigure [ 1077.421955][T16011] x_tables: duplicate underflow at hook 1 [ 1077.429438][T15459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.462141][T16001] gtp0: entered allmulticast mode [ 1077.482597][T16001] team0: Device gtp0 is of different type [ 1077.541204][T16005] lo: entered allmulticast mode [ 1077.557590][T16005] lo: left allmulticast mode [ 1077.585052][T11141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.592274][T11141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.644433][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.651627][T11145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.913037][T16022] netlink: 'syz.0.11777': attribute type 1 has an invalid length. [ 1078.004226][T16022] netlink: 'syz.0.11777': attribute type 1 has an invalid length. [ 1078.499730][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11780'. [ 1078.630257][T16042] team0 (unregistering): Port device team_slave_0 removed [ 1078.714664][T16042] team0 (unregistering): Port device team_slave_1 removed [ 1079.147822][T16061] syzkaller0: entered promiscuous mode [ 1079.190755][T16061] syzkaller0: entered allmulticast mode [ 1079.237065][T16037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.300329][T16070] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1079.324841][T16070] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1079.808722][T15459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.497535][T16112] netlink: 'syz.0.11791': attribute type 2 has an invalid length. [ 1080.646508][T15459] veth0_vlan: entered promiscuous mode [ 1080.773630][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11792'. [ 1080.828501][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11792'. [ 1080.883127][T15459] veth1_vlan: entered promiscuous mode [ 1081.167186][T15459] veth0_macvtap: entered promiscuous mode [ 1081.236956][T15459] veth1_macvtap: entered promiscuous mode [ 1081.359184][T15459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.461852][T15459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.529756][T11141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.567415][T11141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.597827][T11141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.634813][T16155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11802'. [ 1081.740058][ C1] sched: DL replenish lagged too much [ 1081.887052][T11141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.134937][T11142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.196864][T11142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.352735][T11141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.414174][T11141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.439150][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11807'. [ 1082.509718][T16170] openvswitch: netlink: Flow actions attr not present in new flow. [ 1083.001053][T16190] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.11813'. [ 1083.102144][T16190] 0XD: renamed from gretap0 [ 1083.136239][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11815'. [ 1083.188373][T16190] 0XD: entered allmulticast mode [ 1083.246126][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11815'. [ 1083.328518][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11815'. [ 1083.400955][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11815'. [ 1083.491241][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11815'. [ 1083.563152][T16203] netlink: 232 bytes leftover after parsing attributes in process `syz.5.11817'. [ 1083.578646][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11815'. [ 1083.605403][T16201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11816'. [ 1083.629787][T30882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1083.652326][T30882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1083.661698][T30882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1083.672767][T30882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1083.680519][T30882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1084.049121][T16215] netlink: 'syz.4.11818': attribute type 1 has an invalid length. [ 1085.710657][T30882] Bluetooth: hci2: command tx timeout [ 1087.790534][T30882] Bluetooth: hci2: command tx timeout [ 1088.427320][T16251] netlink: 'syz.5.11824': attribute type 1 has an invalid length. [ 1088.888126][T16277] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1089.270707][T16291] netlink: 'syz.5.11836': attribute type 1 has an invalid length. [ 1089.278846][T16291] __nla_validate_parse: 63 callbacks suppressed [ 1089.278866][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11836'. [ 1089.295147][T16291] netlink: 658 bytes leftover after parsing attributes in process `syz.5.11836'. [ 1089.304761][T16291] netlink: 'syz.5.11836': attribute type 1 has an invalid length. [ 1089.567177][T16303] sctp: [Deprecated]: syz.5.11837 (pid 16303) Use of int in max_burst socket option deprecated. [ 1089.567177][T16303] Use struct sctp_assoc_value instead [ 1089.870371][T30882] Bluetooth: hci2: command tx timeout [ 1090.203510][T16295] geneve2: entered promiscuous mode [ 1090.215798][T16295] geneve2: entered allmulticast mode [ 1090.229280][T16312] 8021q: VLANs not supported on ipvlan0 [ 1090.306939][T16204] xfrm0 speed is unknown, defaulting to 1000 [ 1090.538423][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11843'. [ 1090.732606][T16332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1090.894616][T16339] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11847'. [ 1090.998219][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11847'. [ 1091.046484][T16344] xt_recent: Unsupported userspace flags (000000b1) [ 1091.074957][T16339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.101835][T16345] xt_recent: Unsupported userspace flags (000000b1) [ 1091.715274][T16363] netlink: 196 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1091.798160][T16363] netlink: 196 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1091.842675][T16363] netlink: 19 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1091.899521][T16371] lo: entered promiscuous mode [ 1091.947275][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1091.956623][T30882] Bluetooth: hci2: command tx timeout [ 1092.010681][T16371] tunl0: entered promiscuous mode [ 1092.016818][T16381] netlink: 'syz.5.11856': attribute type 3 has an invalid length. [ 1092.062800][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1092.139399][T16371] gre0: entered promiscuous mode [ 1092.225463][T16371] gretap0: entered promiscuous mode [ 1092.563243][T16371] erspan0: entered promiscuous mode [ 1092.575654][T16371] ip_vti0: entered promiscuous mode [ 1092.599367][T16371] ip6_vti0: entered promiscuous mode [ 1092.629106][T16371] sit0: entered promiscuous mode [ 1092.685250][T16371] ip6tnl0: entered promiscuous mode [ 1092.737299][T16371] ip6gre0: entered promiscuous mode [ 1092.812372][T16371] ip6gretap0: entered promiscuous mode [ 1092.870956][T16371] bridge0: entered promiscuous mode [ 1092.942737][T16371] team0: entered promiscuous mode [ 1092.947992][T16371] team_slave_0: entered promiscuous mode [ 1092.954445][T16371] team_slave_1: entered promiscuous mode [ 1092.968216][T16371] nlmon0: entered promiscuous mode [ 1093.027410][T16371] vxcan0: entered promiscuous mode [ 1093.065462][T16371] vxcan1: entered promiscuous mode [ 1093.083797][T16371] veth0: entered promiscuous mode [ 1093.095334][T16371] veth0: left allmulticast mode [ 1093.117760][T16371] veth1: entered promiscuous mode [ 1093.133548][T16371] wg0: entered promiscuous mode [ 1093.173513][T16371] wg1: entered promiscuous mode [ 1093.199547][T16371] wg2: entered promiscuous mode [ 1093.221711][T16371] veth0_to_bridge: entered promiscuous mode [ 1093.302454][T16371] veth1_to_bridge: entered promiscuous mode [ 1093.320977][T16371] veth0_to_bond: entered promiscuous mode [ 1093.380368][T16371] veth1_to_bond: entered promiscuous mode [ 1093.426557][T16371] veth0_to_team: entered promiscuous mode [ 1093.479425][T16371] veth1_to_team: entered promiscuous mode [ 1093.536407][T16371] veth0_to_batadv: entered promiscuous mode [ 1093.567776][T16371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.607033][T16371] batadv_slave_0: entered promiscuous mode [ 1093.623114][T16371] veth1_to_batadv: entered promiscuous mode [ 1093.653788][T16371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.669502][T16371] batadv_slave_1: entered promiscuous mode [ 1093.698834][T16371] xfrm0: entered promiscuous mode [ 1093.733499][T16371] veth0_to_hsr: entered promiscuous mode [ 1093.792471][T16371] veth1_to_hsr: entered promiscuous mode [ 1093.859539][T16371] hsr0: entered promiscuous mode [ 1093.903942][T16371] veth1_virt_wifi: entered promiscuous mode [ 1093.931058][T16371] veth0_virt_wifi: entered promiscuous mode [ 1093.974526][T16371] virt_wifi0: entered promiscuous mode [ 1094.096766][T16371] vlan0: entered promiscuous mode [ 1094.106797][T16371] vlan1: entered promiscuous mode [ 1094.125994][T16371] macvlan0: entered promiscuous mode [ 1094.155544][T16371] macvlan1: entered promiscuous mode [ 1094.172291][T16371] ipvlan0: entered promiscuous mode [ 1094.213416][T16371] ipvlan1: entered promiscuous mode [ 1094.285053][T16371] __nla_validate_parse: 54 callbacks suppressed [ 1094.285076][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.333632][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.373132][T16371] macvtap0: entered promiscuous mode [ 1094.384368][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.404045][T16371] macsec0: entered promiscuous mode [ 1094.436126][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.455745][T16371] geneve0: entered promiscuous mode [ 1094.481856][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.500499][T16371] geneve1: entered promiscuous mode [ 1094.523450][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.556102][T16371] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1094.572621][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.610430][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.636914][T16371] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1094.658675][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.703870][T16371] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1094.715481][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11855'. [ 1094.756934][T16371] mac80211_hwsim hwsim107 wlan0: entered promiscuous mode [ 1094.807374][T16371] mac80211_hwsim hwsim108 wlan1: entered promiscuous mode [ 1094.820956][T16371] ;: entered promiscuous mode [ 1094.863804][T16371] bond1: entered promiscuous mode [ 1094.874294][T16371] vlan2: entered promiscuous mode [ 1094.886209][T16371] sit1: entered promiscuous mode [ 1094.941630][T16371] ip6gre1: entered promiscuous mode [ 1095.104245][T16371] bond2: entered promiscuous mode [ 1095.112313][T16371] bridge1: entered promiscuous mode [ 1095.130417][T16371] @: entered promiscuous mode [ 1095.155262][T16371] ip6gre2: entered promiscuous mode [ 1095.184600][T16371] bridge2: entered promiscuous mode [ 1095.211849][T16371] macvlan2: entered promiscuous mode [ 1095.239718][T16371] macsec1: entered promiscuous mode [ 1095.261721][T16371] geneve2: entered promiscuous mode [ 1095.278961][T16371] geneve3: entered promiscuous mode [ 1095.297323][T16371] bridge3: entered promiscuous mode [ 1095.313412][T16371] mac80211_hwsim hwsim116 wlan2: entered promiscuous mode [ 1095.322198][T16371] gretap1: left allmulticast mode [ 1095.339099][T16371] ip6tnl1: entered promiscuous mode [ 1095.346084][T16371] bond4: entered promiscuous mode [ 1095.353056][T16371] bridge4: entered promiscuous mode [ 1095.364163][T16371] sit2: entered promiscuous mode [ 1095.369665][T16371] bond5: left allmulticast mode [ 1095.376650][T16371] : entered promiscuous mode [ 1095.383604][T16371] bond6: entered promiscuous mode [ 1095.389174][T16371] bridge5: entered promiscuous mode [ 1095.419934][T16371] gretap2: left allmulticast mode [ 1095.506752][T16371] bond9: left allmulticast mode [ 1095.512220][T16371] bridge7: left allmulticast mode [ 1095.549320][T16371] bond10: entered promiscuous mode [ 1095.556523][T16371] bridge8: entered promiscuous mode [ 1095.565409][T16371] team1: left allmulticast mode [ 1095.571995][T16371] bond11: entered promiscuous mode [ 1095.577659][T16371] gretap3: entered promiscuous mode [ 1095.698217][T16371] mac80211_hwsim hwsim127 wlan3: entered promiscuous mode [ 1095.722140][T16371] mac80211_hwsim hwsim128 wlan4: entered promiscuous mode [ 1095.735511][T16371] bond12: entered promiscuous mode [ 1095.741936][T16371] sit3: entered promiscuous mode [ 1095.757108][T16371] pimreg: entered promiscuous mode [ 1095.770641][T16371] mac80211_hwsim hwsim136 wlan5: entered promiscuous mode [ 1095.795008][T16377] tipc: Started in network mode [ 1095.805931][T16377] tipc: Node identity 62019635697a, cluster identity 4711 [ 1095.815334][T16377] tipc: Enabled bearer , priority 0 [ 1095.824973][T16378] netlink: 'syz.2.11855': attribute type 3 has an invalid length. [ 1095.901387][T16379] syzkaller0: entered promiscuous mode [ 1095.926902][T16379] syzkaller0: entered allmulticast mode [ 1096.074306][T11141] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.090794][T11141] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.193576][T11141] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.268294][T11141] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.491524][T16379] tipc: Resetting bearer [ 1096.568580][T16379] tipc: Disabling bearer [ 1096.666872][T11141] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.712577][T11141] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.850048][T11141] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.918703][T11141] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.008388][T16458] netlink: 'syz.5.11869': attribute type 1 has an invalid length. [ 1098.741829][T16484] bridge0: port 4(gretap0) entered blocking state [ 1098.777054][T16484] bridge0: port 4(gretap0) entered disabled state [ 1098.815069][T16484] gretap0: entered allmulticast mode [ 1099.132717][T16204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.157630][T16204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.193873][T16204] bridge_slave_0: entered allmulticast mode [ 1099.210441][T16204] bridge_slave_0: entered promiscuous mode [ 1099.240546][T16204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.256105][T16204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.282015][T16204] bridge_slave_1: entered allmulticast mode [ 1099.316826][T16204] bridge_slave_1: entered promiscuous mode [ 1099.452308][T16204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.598171][T16204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.672045][T16507] tipc: Enabled bearer , priority 0 [ 1099.684305][T16204] team0: Port device team_slave_0 added [ 1099.695104][T16510] syzkaller0: entered promiscuous mode [ 1099.706238][T16510] syzkaller0: entered allmulticast mode [ 1099.726867][T16204] team0: Port device team_slave_1 added [ 1099.734998][T16507] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1099.806445][T16507] tipc: Resetting bearer [ 1099.872663][T16506] tipc: Resetting bearer [ 1099.960716][T16506] tipc: Disabling bearer [ 1100.012638][T16204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.027189][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.088105][T16204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.100526][T16523] __nla_validate_parse: 49 callbacks suppressed [ 1100.100555][T16523] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11887'. [ 1100.117839][T16526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11888'. [ 1100.128714][T16204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.136846][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.213837][T16204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.524097][T16540] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11892'. [ 1100.573870][T16204] hsr_slave_0: entered promiscuous mode [ 1100.604610][T16204] hsr_slave_1: entered promiscuous mode [ 1100.624712][T16204] debugfs: 'hsr0' already exists in 'hsr' [ 1100.651153][T16204] Cannot create hsr debugfs directory [ 1101.136505][T16557] Cannot find del_set index 4 as target [ 1101.297597][T16204] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.318846][T16204] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.526429][T16204] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.537364][T16204] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.672417][T16576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11902'. [ 1101.891413][T16204] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.902482][T16204] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.936653][T16583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11903'. [ 1102.194148][T16204] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.204594][T16204] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.277676][T16567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1104.301520][T16204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1104.385333][T16204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.444737][T16204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1104.543639][T16204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.588823][T16204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1104.656939][T16204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.770468][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11908'. [ 1104.834477][T16204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1104.872106][T30882] Bluetooth: hci7: link tx timeout [ 1104.878338][T30882] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1104.888718][T16204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1104.967372][T16606] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1105.051094][T16606] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1105.074348][T16624] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11911'. [ 1105.107175][T16606] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1105.395998][T16204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.487818][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11914'. [ 1105.530407][T16204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.549476][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11914'. [ 1105.595408][T16640] syzkaller0: entered promiscuous mode [ 1105.628484][T16640] syzkaller0: entered allmulticast mode [ 1105.685984][T11144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.693237][T11144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.724231][T16644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11918'. [ 1105.784326][T16640] tipc: Enabled bearer , priority 0 [ 1105.794688][T16651] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11919'. [ 1105.811007][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11914'. [ 1105.844791][T11144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.852025][T11144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.866129][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11914'. [ 1105.947165][T16639] tipc: Resetting bearer [ 1106.113737][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11914'. [ 1106.145486][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11914'. [ 1106.368082][T16639] tipc: Disabling bearer [ 1106.552071][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11922'. [ 1106.657870][T30882] Bluetooth: hci7: link tx timeout [ 1106.663202][T30882] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1106.705745][T16658] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1106.969361][T16670] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.11923'. [ 1106.970128][T30882] Bluetooth: hci7: command 0x0406 tx timeout [ 1109.036724][T16715] syzkaller0: entered promiscuous mode [ 1109.121846][T16715] syzkaller0: entered allmulticast mode [ 1110.570982][T16750] netlink: 'syz.2.11940': attribute type 10 has an invalid length. [ 1110.995704][T16765] syzkaller0: entered promiscuous mode [ 1111.035612][T16765] syzkaller0: entered allmulticast mode [ 1111.201422][T16772] netlink: 'syz.4.11943': attribute type 18 has an invalid length. [ 1111.505607][ T1169] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.567876][ T1169] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.614992][ T1169] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.683624][ T1169] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1111.874470][T16779] dvmrp0: entered allmulticast mode [ 1111.947774][T16783] __nla_validate_parse: 2 callbacks suppressed [ 1111.947822][T16783] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11946'. [ 1112.033234][T16785] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1112.106919][T16204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.449131][ T29] audit: type=1107 audit(1782067142.352:27): pid=16794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1112.573301][T16795] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11950'. [ 1112.602459][T16798] netlink: 'syz.4.11948': attribute type 1 has an invalid length. [ 1112.687519][T16798] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1112.809321][T16204] veth0_vlan: entered promiscuous mode [ 1113.069673][T16204] veth1_vlan: entered promiscuous mode [ 1113.373670][T16204] veth0_macvtap: entered promiscuous mode [ 1113.467292][T16204] veth1_macvtap: entered promiscuous mode [ 1113.747411][T16204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.868266][T16204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.008385][T16761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.042686][T16761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.083944][T16840] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1114.150697][T16841] openvswitch: netlink: Key type 262 is out of range max 32 [ 1114.191827][T16761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.257676][T16761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.334056][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11962'. [ 1114.399402][T16846] netlink: 'syz.4.11962': attribute type 5 has an invalid length. [ 1114.472597][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11963'. [ 1114.487307][T16846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11962'. [ 1114.597275][T16857] netlink: 256 bytes leftover after parsing attributes in process `syz.5.11963'. [ 1114.649644][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.732553][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.876987][T16862] netlink: 'syz.4.11965': attribute type 1 has an invalid length. [ 1114.902954][T16761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.928226][T16862] netlink: 'syz.4.11965': attribute type 2 has an invalid length. [ 1114.938297][T16761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.979762][T16868] netlink: 'syz.4.11965': attribute type 1 has an invalid length. [ 1114.994355][T16868] netlink: 'syz.4.11965': attribute type 2 has an invalid length. [ 1120.205563][T16902] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.11973'. [ 1120.526471][ T5748] IPVS: starting estimator thread 0... [ 1120.648766][T16920] xt_hashlimit: size too large, truncated to 1048576 [ 1120.664387][T16916] IPVS: using max 37 ests per chain, 88800 per kthread [ 1120.799315][T16925] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.11981'. [ 1120.885216][T10969] hid-generic 0005:0458:0440.0004: hidraw0: BLUETOOTH HID vc3.3b Device [syz0] on aa:aa:aa:aa:aa:aa [ 1120.924181][T16925] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1121.042686][T30882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1121.052274][T30882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1121.062514][T30882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1121.076839][T30882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1121.100353][T30882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1121.718776][T16953] netlink: 'syz.5.11987': attribute type 1 has an invalid length. [ 1123.150456][T30882] Bluetooth: hci5: command tx timeout [ 1123.924354][T16955] bond3: (slave gretap0): making interface the new active one [ 1123.953374][T16955] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 1124.114313][T16962] netlink: 'syz.0.11988': attribute type 1 has an invalid length. [ 1124.304130][T16977] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11990'. [ 1124.320445][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11991'. [ 1125.167367][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.230522][T30882] Bluetooth: hci5: command tx timeout [ 1125.240553][T16976] bridge_slave_1 (unregistering): left allmulticast mode [ 1125.248909][T16976] bridge_slave_1 (unregistering): left promiscuous mode [ 1125.257938][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.469764][T16966] batman_adv: batadv0: Interface deactivated: wlan0 [ 1125.604787][T16992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1125.614209][T16992] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1125.860361][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11996'. [ 1125.870152][T17008] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11997'. [ 1125.907743][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11996'. [ 1125.974102][T16933] xfrm0 speed is unknown, defaulting to 1000 [ 1126.221346][T17008] bond2 (unregistering): Released all slaves [ 1126.614998][T17028] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11999'. [ 1126.675946][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11999'. [ 1127.154916][T17034] block nbd9: server does not support multiple connections per device. [ 1127.208086][T17034] block nbd9: shutting down sockets [ 1127.311982][T26488] Bluetooth: hci5: command tx timeout [ 1127.343497][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12003'. [ 1127.852074][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12007'. [ 1128.190338][T26488] Bluetooth: hci4: command 0x0405 tx timeout [ 1128.722340][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12015'. [ 1129.214489][T16933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.274577][T16933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.316644][T16933] bridge_slave_0: entered allmulticast mode [ 1129.366632][T16933] bridge_slave_0: entered promiscuous mode [ 1129.390448][T30882] Bluetooth: hci5: command tx timeout [ 1129.427136][T16933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.456401][T16933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.484150][T16933] bridge_slave_1: entered allmulticast mode [ 1129.516256][T16933] bridge_slave_1: entered promiscuous mode [ 1129.872414][T16933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.968166][T16933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.235048][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12025'. [ 1130.281153][T17149] 8021q: VLANs not supported on ipvlan1 [ 1130.299137][T16933] team0: Port device team_slave_0 added [ 1130.346726][T16933] team0: Port device team_slave_1 added [ 1130.538690][T16933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.603427][T16933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.695278][T16933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.768802][T16933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.816883][T16933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.926061][T16933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.942618][T17164] : entered promiscuous mode [ 1130.950242][T17157] netlink: 'syz.4.12028': attribute type 5 has an invalid length. [ 1131.171141][T16933] hsr_slave_0: entered promiscuous mode [ 1131.184010][T17176] IPVS: set_ctl: invalid protocol: 2 172.20.20.15:20003 [ 1131.202802][T16933] hsr_slave_1: entered promiscuous mode [ 1131.224278][T16933] debugfs: 'hsr0' already exists in 'hsr' [ 1131.266024][T16933] Cannot create hsr debugfs directory [ 1131.277755][T17173] netlink: 'syz.0.12032': attribute type 12 has an invalid length. [ 1131.295434][T17173] netlink: 'syz.0.12032': attribute type 29 has an invalid length. [ 1131.318524][T17173] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12032'. [ 1131.339637][T17173] netlink: 'syz.0.12032': attribute type 3 has an invalid length. [ 1131.361823][T17173] netlink: 'syz.0.12032': attribute type 2 has an invalid length. [ 1131.380466][T17173] netlink: 35 bytes leftover after parsing attributes in process `syz.0.12032'. [ 1133.158890][T17233] netlink: 'syz.0.12045': attribute type 5 has an invalid length. [ 1133.481927][T17233] netlink: 'syz.0.12045': attribute type 5 has an invalid length. [ 1133.507938][T17252] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12050'. [ 1133.760872][T16933] bond0: (slave netdevsim1): Releasing backup interface [ 1133.875163][T17265] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12053'. [ 1134.186469][T17280] netlink: 'syz.0.12059': attribute type 10 has an invalid length. [ 1134.197937][T17280] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12059'. [ 1134.386917][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12061'. [ 1134.397237][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1134.416772][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12061'. [ 1134.805444][T16933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1134.843314][T16933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1134.854757][T16933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1134.879712][T16933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1134.902003][T16933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1134.937324][T16933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1134.945783][T16933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1134.969241][T16933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1134.998993][T17305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.038415][T17304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.198812][T17313] netlink: 172648 bytes leftover after parsing attributes in process `syz.0.12066'. [ 1135.508495][T16933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.579545][T17328] bond0: Error: Cannot enslave bond to itself. [ 1135.603803][T16933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.611215][T17328] x_tables: duplicate underflow at hook 2 [ 1135.668658][T16761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.675876][T16761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.787264][T17333] netlink: 83 bytes leftover after parsing attributes in process `syz.6.12073'. [ 1135.803859][T16761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.811063][T16761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.194134][T17351] syzkaller0: entered promiscuous mode [ 1136.232103][T17351] syzkaller0: entered allmulticast mode [ 1136.623764][T17371] __nla_validate_parse: 2 callbacks suppressed [ 1136.623784][T17371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12081'. [ 1137.062663][T17391] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12084'. [ 1137.254092][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.337733][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.377802][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.443621][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.453024][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12088'. [ 1137.495883][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.542247][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.600526][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.648745][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.698085][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1137.720808][T17419] ref_ctr_offset mismatch. inode: 0x1fe offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 1137.739476][T17399] netlink: 'syz.4.12085': attribute type 2 has an invalid length. [ 1138.106418][T17433] mac80211_hwsim hwsim142 syzkaller0: entered promiscuous mode [ 1138.133589][T17433] mac80211_hwsim hwsim142 syzkaller0: entered allmulticast mode [ 1138.156335][T16933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.186077][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12094'. [ 1138.429886][T16933] veth0_vlan: entered promiscuous mode [ 1138.504343][T16933] veth1_vlan: entered promiscuous mode [ 1138.653138][T16933] veth0_macvtap: entered promiscuous mode [ 1138.754375][T16933] veth1_macvtap: entered promiscuous mode [ 1138.858090][T16933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.873155][T16933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.949566][T17455] netlink: 84 bytes leftover after parsing attributes in process `syz.6.12100'. [ 1138.967139][T17455] netlink: 84 bytes leftover after parsing attributes in process `syz.6.12100'. [ 1138.979192][T17455] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1139.063708][ T8770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.094739][ T8770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.222867][ T8770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.323477][ T8770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.917372][ T8770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.022502][ T8770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.349961][T16766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.429386][T16766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.617519][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12112'. [ 1140.777845][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12112'. [ 1140.859575][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e5d4000: rx timeout, send abort [ 1140.903884][T17497] netlink: 104 bytes leftover after parsing attributes in process `syz.5.12113'. [ 1141.345221][T17508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12114'. [ 1142.079975][T17523] __nla_validate_parse: 1 callbacks suppressed [ 1142.152488][T17523] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12117'. [ 1142.498661][T17520] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12118'. [ 1142.575096][T17530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12120'. [ 1143.108692][T17533] validate_nla: 120 callbacks suppressed [ 1143.108736][T17533] netlink: 'syz.6.12121': attribute type 2 has an invalid length. [ 1143.357453][T17546] Cannot find add_set index 0 as target [ 1143.484795][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12125'. [ 1143.824938][T17554] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1143.863800][T17554] gretap1: entered promiscuous mode [ 1143.893295][T17554] gretap1: entered allmulticast mode [ 1144.319592][T17564] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12130'. [ 1144.349319][T17567] netlink: 'syz.6.12132': attribute type 4 has an invalid length. [ 1144.413098][T17564] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12130'. [ 1145.636699][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12141'. [ 1146.555580][T17620] netlink: 'syz.4.12145': attribute type 1 has an invalid length. [ 1146.607566][T17620] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12145'. [ 1146.699632][T17620] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12145'. [ 1152.266960][T17622] netlink: 'syz.6.12146': attribute type 4 has an invalid length. [ 1152.290420][T17626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12147'. [ 1152.301661][T17626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12147'. [ 1152.310873][T17626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12147'. [ 1152.447302][T17628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12147'. [ 1152.479119][T17628] tc_dump_action: action bad kind [ 1152.789642][T17650] syzkaller1: entered promiscuous mode [ 1152.809494][T17657] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12157'. [ 1152.833214][T17650] syzkaller1: entered allmulticast mode [ 1152.852727][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12156'. [ 1152.929014][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12155'. [ 1152.978805][T17658] 0: reclassify loop, rule prio 0, protocol 700 [ 1152.996035][T17659] netlink: 'syz.5.12155': attribute type 33 has an invalid length. [ 1153.067340][T17650] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12155'. [ 1153.162740][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12159'. [ 1153.185486][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12161'. [ 1155.729545][T17674] netlink: 'syz.6.12159': attribute type 3 has an invalid length. [ 1156.014447][T17697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1156.021772][T17697] IPv6: NLM_F_CREATE should be set when creating new route [ 1156.489037][T17715] xt_limit: Overflow, try lower: 271964/0 [ 1156.764313][T17711] veth0: entered promiscuous mode [ 1157.198290][T17710] veth0: left promiscuous mode [ 1157.725679][T17750] syzkaller0: entered promiscuous mode [ 1157.775715][T17750] syzkaller0: entered allmulticast mode [ 1157.792613][T17757] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1157.897684][T17757] netlink: 'syz.6.12182': attribute type 1 has an invalid length. [ 1157.935997][T17750] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1158.228383][T17765] netlink: 'syz.0.12183': attribute type 2 has an invalid length. [ 1158.369028][T17757] __nla_validate_parse: 4 callbacks suppressed [ 1158.369060][T17757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12182'. [ 1158.526262][T17760] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1158.712115][T17762] veth5: entered promiscuous mode [ 1158.885073][T17778] netlink: 'syz.4.12185': attribute type 61 has an invalid length. [ 1158.898767][T17774] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12186'. [ 1158.919754][ T8770] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1158.932572][T17757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1158.954905][T17774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12186'. [ 1159.073899][T16762] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1159.524899][T17792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1159.702545][T17791] bond0: option ad_select: unable to set because the bond device is up [ 1160.306236][T17809] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.12197'. [ 1160.743338][T17822] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12198'. [ 1161.129716][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12201'. [ 1161.168786][T17833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12203'. [ 1161.679459][T17832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1162.014391][T17845] gretap1: entered promiscuous mode [ 1162.101911][T17845] batman_adv: batadv0: Adding interface: gretap1 [ 1162.168884][T17845] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1162.355368][T17845] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1162.533377][T17854] x_tables: duplicate underflow at hook 1 [ 1162.548424][T17864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12209'. [ 1162.848717][T17867] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 1162.875199][T17867] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1162.978146][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12211'. [ 1163.056005][T17873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12211'. [ 1163.163446][T26488] Bluetooth: hci7: link tx timeout [ 1163.169890][T26488] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 1163.227061][T17876] netlink: 'syz.4.12212': attribute type 1 has an invalid length. [ 1163.288013][T17876] netlink: 'syz.4.12212': attribute type 2 has an invalid length. [ 1164.032209][T16671] Bluetooth: hci6: command 0x0406 tx timeout [ 1165.099847][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12225'. [ 1165.112387][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12225'. [ 1165.230958][T30882] Bluetooth: hci7: command 0x0406 tx timeout [ 1165.621818][T17922] netlink: 'syz.6.12227': attribute type 12 has an invalid length. [ 1165.698312][T17923] netlink: 188 bytes leftover after parsing attributes in process `syz.6.12227'. [ 1165.782301][T17922] netlink: 'syz.6.12227': attribute type 29 has an invalid length. [ 1165.861921][T17924] netlink: 188 bytes leftover after parsing attributes in process `syz.6.12227'. [ 1165.955223][T17922] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12227'. [ 1166.043227][T17922] netlink: 'syz.6.12227': attribute type 3 has an invalid length. [ 1166.156573][T17922] netlink: 'syz.6.12227': attribute type 2 has an invalid length. [ 1166.189054][T17922] netlink: 35 bytes leftover after parsing attributes in process `syz.6.12227'. [ 1166.305225][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1166.371184][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1167.081524][ T30] INFO: task syz.1.11076:13317 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1167.263266][ T30] Not tainted syzkaller #0 [ 1167.281495][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1167.315810][ T30] task:syz.1.11076 state:D stack:25608 pid:13317 tgid:13315 ppid:7186 task_flags:0x400140 flags:0x00080002 [ 1167.365435][ T30] Call Trace: [ 1167.381985][ T30] [ 1167.395573][ T30] __schedule+0x17d9/0x56c0 [ 1167.433499][ T30] ? kernel_text_address+0xa5/0xe0 [ 1167.497890][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1167.594256][ T30] ? stack_trace_save+0xa9/0x100 [ 1167.638918][ T30] ? __pfx___schedule+0x10/0x10 [ 1167.699640][ T30] ? rcu_is_watching+0x15/0xb0 [ 1167.739059][ T30] ? rcu_is_watching+0x15/0xb0 [ 1167.771904][ T30] ? lock_release+0x4b/0x3c0 [ 1167.810205][ T30] ? rcu_is_watching+0x15/0xb0 [ 1167.842158][ T30] schedule+0x164/0x360 [ 1167.854763][ T30] schedule_preempt_disabled+0x13/0x30 [ 1167.872067][ T30] __mutex_lock+0x7bf/0x1550 [ 1167.884578][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1167.903956][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1167.921620][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1167.932330][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1167.953110][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1167.970214][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1167.984901][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1168.004614][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 1168.023070][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1168.043388][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1168.062554][ T30] ? security_capable+0x7e/0x2c0 [ 1168.067937][ T30] genl_rcv_msg+0x614/0x7a0 [ 1168.082111][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.101584][ T30] ? ref_tracker_free+0x689/0x830 [ 1168.108894][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1168.132820][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1168.150541][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1168.158475][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.166035][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1168.174143][ T30] ? down_read+0x2be/0x330 [ 1168.178946][ T30] genl_rcv+0x28/0x40 [ 1168.184133][ T30] netlink_unicast+0x7bb/0x940 [ 1168.206304][ T30] netlink_sendmsg+0x813/0xb40 [ 1168.214838][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.222605][ T30] ? futex_unqueue+0x22/0x240 [ 1168.227772][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1168.237747][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1168.246955][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.254515][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 1168.259764][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1168.266348][ T30] ? lock_release+0x4b/0x3c0 [ 1168.276284][ T30] ? import_iovec+0x73/0xa0 [ 1168.284968][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1168.291610][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.297355][ T30] ? __fget_files+0x2a/0x420 [ 1168.303159][ T30] ? __fget_files+0x3a2/0x420 [ 1168.308259][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 1168.315578][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1168.321786][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1168.327750][ T30] ? handle_softirqs+0x70f/0x840 [ 1168.333845][ T30] ? rcu_is_watching+0x15/0xb0 [ 1168.339057][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.359060][ T30] do_syscall_64+0x174/0x580 [ 1168.364677][ T30] ? clear_bhb_loop+0x40/0x90 [ 1168.369743][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.378982][ T30] RIP: 0033:0x7facf9b9ce59 [ 1168.384697][ T30] RSP: 002b:00007facfaa81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.397057][ T30] RAX: ffffffffffffffda RBX: 00007facf9e15fa0 RCX: 00007facf9b9ce59 [ 1168.407311][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 1168.416566][ T30] RBP: 00007facf9c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1168.433762][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.442701][ T30] R13: 00007facf9e16038 R14: 00007facf9e15fa0 R15: 00007fff42c4bb38 [ 1168.455319][ T30] [ 1168.459296][ T30] INFO: lockdep is turned off. [ 1168.470361][ T30] NMI backtrace for cpu 1 [ 1168.470381][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1168.470404][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1168.470416][ T30] Call Trace: [ 1168.470424][ T30] [ 1168.470433][ T30] dump_stack_lvl+0xe8/0x150 [ 1168.470459][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1168.470483][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1168.470517][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1168.470541][ T30] sys_info+0x135/0x170 [ 1168.470570][ T30] watchdog+0xfd7/0x1030 [ 1168.470600][ T30] ? watchdog+0x1c7/0x1030 [ 1168.470627][ T30] kthread+0x388/0x470 [ 1168.470645][ T30] ? __pfx_watchdog+0x10/0x10 [ 1168.470668][ T30] ? __pfx_kthread+0x10/0x10 [ 1168.470686][ T30] ret_from_fork+0x514/0xb70 [ 1168.470704][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1168.470721][ T30] ? __switch_to+0xc89/0x1420 [ 1168.470747][ T30] ? __pfx_kthread+0x10/0x10 [ 1168.470765][ T30] ret_from_fork_asm+0x1a/0x30 [ 1168.470794][ T30] [ 1168.470851][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1168.596776][ C0] NMI backtrace for cpu 0 [ 1168.596793][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 1168.596814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1168.596825][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 1168.596856][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1168.596883][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 34 da 61 0c 48 89 de 5b e9 33 f8 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d d8 49 74 11 65 8b 15 f9 49 74 [ 1168.596897][ C0] RSP: 0018:ffffc90000006b30 EFLAGS: 00000293 [ 1168.596913][ C0] RAX: ffffffff81b305a8 RBX: 001eed8dbf99c6e6 RCX: 0000000000000100 [ 1168.596927][ C0] RDX: ffff88801da9dd00 RSI: 0000000000000018 RDI: 0000000000000040 [ 1168.596940][ C0] RBP: 00000000000372ec R08: ffffffff903117f7 R09: 1ffffffff20622fe [ 1168.596954][ C0] R10: dffffc0000000000 R11: fffffbfff20622ff R12: 0000010ff0500756 [ 1168.596968][ C0] R13: ffffffffffffffff R14: 0000000000000018 R15: dffffc0000000000 [ 1168.596982][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 1168.596998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.597011][ C0] CR2: 0000564ccab52ee8 CR3: 0000000040f64000 CR4: 00000000003526f0 [ 1168.597027][ C0] Call Trace: [ 1168.597034][ C0] [ 1168.597041][ C0] ktime_get+0x103/0x220 [ 1168.597069][ C0] cake_dequeue+0xa3/0x4f10 [ 1168.597086][ C0] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 1168.597114][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1168.597130][ C0] ? rcu_is_watching+0x15/0xb0 [ 1168.597147][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1168.597162][ C0] ? trace_irq_enable+0x3b/0x140 [ 1168.597185][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1168.597200][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1168.597215][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1168.597237][ C0] ? ip6t_do_table+0x13c4/0x15b0 [ 1168.597252][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1168.597282][ C0] __qdisc_run+0x24c/0x1620 [ 1168.597314][ C0] __dev_queue_xmit+0x1c00/0x37f0 [ 1168.597336][ C0] ? __pfx_ipv6_synproxy_hook+0x10/0x10 [ 1168.597356][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 1168.597373][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 1168.597394][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1168.597412][ C0] ? lock_release+0x4b/0x3c0 [ 1168.597438][ C0] ? ip6_output+0x337/0x540 [ 1168.597453][ C0] ? rcu_is_watching+0x15/0xb0 [ 1168.597471][ C0] ? ip6_output+0x337/0x540 [ 1168.597487][ C0] ? rcu_is_watching+0x15/0xb0 [ 1168.597504][ C0] ? ip6_output+0x337/0x540 [ 1168.597524][ C0] ? ip6_finish_output2+0xd41/0x13c0 [ 1168.597548][ C0] ? ip6_output+0x11e/0x540 [ 1168.597566][ C0] ip6_output+0x337/0x540 [ 1168.597584][ C0] synproxy_send_tcp_ipv6+0x549/0x700 [ 1168.597607][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 1168.597636][ C0] ? synproxy_send_client_synack_ipv6+0x357/0xcd0 [ 1168.597658][ C0] synproxy_send_client_synack_ipv6+0x83f/0xcd0 [ 1168.597685][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 1168.597713][ C0] ? synproxy_pernet+0x45/0x270 [ 1168.597769][ C0] nft_synproxy_eval_v6+0x37b/0x530 [ 1168.597794][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 1168.597818][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1168.597843][ C0] nft_synproxy_do_eval+0x3d1/0x550 [ 1168.597866][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1168.597887][ C0] ? nft_trace_init+0x280/0x4d0 [ 1168.597911][ C0] ? nft_trace_init+0x280/0x4d0 [ 1168.597938][ C0] nft_do_chain+0x48d/0x1b10 [ 1168.597960][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1168.597975][ C0] ? trace_irq_enable+0x3b/0x140 [ 1168.598005][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1168.598046][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1168.598070][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1168.598091][ C0] ? nf_nat_ipv6_local_in+0x157/0x660 [ 1168.598122][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 1168.598148][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1168.598168][ C0] ? rcu_is_watching+0x15/0xb0 [ 1168.598188][ C0] ? lock_acquire+0x5f/0x350 [ 1168.598213][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1168.598236][ C0] nf_hook_slow+0xc5/0x220 [ 1168.598259][ C0] NF_HOOK+0x21f/0x3c0 [ 1168.598281][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1168.598304][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1168.598325][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1168.598346][ C0] ? rcu_is_watching+0x15/0xb0 [ 1168.598365][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1168.598391][ C0] ? rcu_is_watching+0x15/0xb0 [ 1168.598411][ C0] ip6_input+0x16a/0x270 [ 1168.598432][ C0] ? ip6_input+0x23/0x270 [ 1168.598456][ C0] NF_HOOK+0x336/0x3c0 [ 1168.598478][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1168.598499][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1168.598521][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1168.598543][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1168.598571][ C0] process_backlog+0x774/0x1860 [ 1168.598596][ C0] ? process_backlog+0x3c3/0x1860 [ 1168.598625][ C0] __napi_poll+0xaa/0x330 [ 1168.598647][ C0] net_rx_action+0x61d/0xf50 [ 1168.598675][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1168.598696][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1168.598729][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1168.598764][ C0] handle_softirqs+0x225/0x840 [ 1168.598789][ C0] ? do_softirq+0x76/0xd0 [ 1168.598814][ C0] ? neigh_periodic_work+0xc23/0xe40 [ 1168.598837][ C0] do_softirq+0x76/0xd0 [ 1168.598859][ C0] [ 1168.598865][ C0] [ 1168.598873][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1168.598896][ C0] neigh_periodic_work+0xc23/0xe40 [ 1168.598941][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1168.598967][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1168.599005][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1168.599039][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1168.599066][ C0] ? assign_work+0x3cf/0x5d0 [ 1168.599090][ C0] worker_thread+0xa47/0xfb0 [ 1168.599126][ C0] kthread+0x388/0x470 [ 1168.599144][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1168.599166][ C0] ? __pfx_kthread+0x10/0x10 [ 1168.599183][ C0] ret_from_fork+0x514/0xb70 [ 1168.599202][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1168.599219][ C0] ? __switch_to+0xc89/0x1420 [ 1168.599245][ C0] ? __pfx_kthread+0x10/0x10 [ 1168.599262][ C0] ret_from_fork_asm+0x1a/0x30 [ 1168.599291][ C0] [ 1169.250318][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1169.257259][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1169.266401][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1169.276481][ T30] Call Trace: [ 1169.279786][ T30] [ 1169.282747][ T30] vpanic+0x56c/0xa60 [ 1169.286769][ T30] ? __pfx___schedule+0x10/0x10 [ 1169.291658][ T30] ? __pfx_vpanic+0x10/0x10 [ 1169.296216][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1169.301642][ T30] panic+0xc5/0xd0 [ 1169.305404][ T30] ? __pfx_panic+0x10/0x10 [ 1169.309852][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1169.315343][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1169.320759][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1169.326945][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1169.333164][ T30] watchdog+0x1030/0x1030 [ 1169.337579][ T30] ? watchdog+0x1c7/0x1030 [ 1169.342033][ T30] kthread+0x388/0x470 [ 1169.346127][ T30] ? __pfx_watchdog+0x10/0x10 [ 1169.350839][ T30] ? __pfx_kthread+0x10/0x10 [ 1169.355455][ T30] ret_from_fork+0x514/0xb70 [ 1169.360077][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.365216][ T30] ? __switch_to+0xc89/0x1420 [ 1169.369939][ T30] ? __pfx_kthread+0x10/0x10 [ 1169.374550][ T30] ret_from_fork_asm+0x1a/0x30 [ 1169.379367][ T30] [ 1169.383020][ T30] Kernel Offset: disabled [ 1169.387349][ T30] Rebooting in 86400 seconds..