last executing test programs: 2m27.896295533s ago: executing program 0 (id=3129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x49920d862a92153b}, 0x20}}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 2m27.758418568s ago: executing program 0 (id=3131): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x7) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0xc400) readv(r1, &(0x7f00000004c0)=[{0x0, 0x4500}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2) syz_emit_ethernet(0x32, &(0x7f00000027c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000024000200000011907800000000000000aae0684e2000109078c2800001000000e3"], 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00dfffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="4d01f3b7570c34abb8ae532df004c28f98d89dfbc94762f0eeb4cea95837dad4300aaf0671183c1da876cd98f752c8c9babc1bc72d5a9fa2f50ce2782deac11dbf85301bf0fbc581ef6650a2d1bb7f6950cf6e6999b8253fe14a23ee15ba21869b0a56c9677b2999702ed98e994a4f014c741ebf7752df0fb4f105ebdc7592b75a472080d3f877e2c836d4677fa2f2a486dcaddd544bdb0510f0ccfade2c19a028966ef4e9cbdb016d6ea308b201615ac2", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00dfffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0xa8, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0xa8}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001400)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0xa8, 0x150, 0xffffffff, 0xa8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast, @port, @port=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @remote, @icmp_id, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 2m26.767512009s ago: executing program 0 (id=3140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x7}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r2, 0x84, 0x80, &(0x7f00000001c0)={r3, 0x6}, &(0x7f0000000200)=0x8) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @broadcast}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0xffffffff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 2m26.354932848s ago: executing program 0 (id=3143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000980)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000009c0)={r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x4, &(0x7f0000000cc0)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000b40), &(0x7f0000000b80)=r2}, 0x20) openat$cgroup_subtree(r2, &(0x7f0000000bc0), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffea9, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x3, 0x4}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x4, 0x0, 0x8461, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0xb90, 0x3, 0x6, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x50, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd8, r10, 0xc28, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r5, 0xb97534d5fe9704cf, 0x70bd2d, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xdba5}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x18) r12 = accept(r0, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r12, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040028bd7000fedbdf257f00000008000300", @ANYRES32=r11, @ANYBLOB="0c00990081000000140000000a00340001010101010100000a00340001010101010100000a00f5005050505050500000140055007af26f5c235cac6423b6f741b7c1e01de1cc972c9980e876aef3dd47760a1dbfb36ccfa2be46bbd1bb8a893a292d433f5bc5751e0b79f3b4e8230c7baa9f6000e0b65f1d0cbcca169659c98aedb24210993fe42540dc58cda1da711cae5577aaa7c5d10f7243df6360887d7bf8dbb669ddd39eae1a963a4b7089798175c33f7e327d2d47ea2ec2e83ed33eef2c7e71bb70"], 0x60}}, 0x4) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000001180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) 2m25.854044205s ago: executing program 0 (id=3149): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000980)={{'\x00', 0x3}, {0x8}, 0x10e, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="a5bd83c10e6ccd496de056a88ea444b184d7616b6331eb2c565c399a95ba5bced7657a6555cd33a24ddab15e34d4fee88fcff2f2b46e8f6c8b5cbc6d866d34a0e68c05e5c80609e53f1e9c73fb34eeecf37289e797548930b1a7a7fa0bce4cfc525c65a87d1fea711c17cef6aeaf3a24e31377b953b4eccd3d75e2d5936b1b1a6e00c756", 0x84, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x282}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000140)=0x3, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1, 0xfff, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0), 0x6, r3}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000b80)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000bc0)={0x5, &(0x7f0000000c00)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x4, 0x4, 0x8, @vifc_lcl_addr=@loopback, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = gettid() r7 = syz_open_procfs$namespace(r6, &(0x7f00000001c0)='ns/cgroup\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x258, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xd8, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0xfffffffffffffffa}, @nested={0xc0, 0x109, 0x0, 0x1, [@nested={0x20, 0xe7, 0x0, 0x1, [@typed={0x8, 0xef, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x130, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0xeb}, @typed={0x8, 0x141, 0x0, 0x0, @fd=r0}]}, @nested={0x93, 0x11e, 0x0, 0x1, [@generic="4dc4826fe6ee08442ee4ef1f5a9356524047ca4e2cea684267f2dc3408d8baa04ed9ec5dd52853fc8a4a366f2e0c15b2d574665667b8ee708d6901bea42b3a1eb909a65fb03683e685f8f18bdab9057d3ca9f5dc948d959e5608a5f6bc40ea5c8643f5c33f2994dbab8a8f84328c61", @nested={0x4, 0xea}, @typed={0x8, 0x159, 0x0, 0x0, @uid=r8}, @typed={0xc, 0xb0, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x107, 0x0, 0x0, @fd=r7}]}, @typed={0x8, 0xe, 0x0, 0x0, @fd=r5}]}]}, @nested={0x165, 0x2, 0x0, 0x1, [@generic="0f156dd6c80da0d5370b464119871aceacd97a15d27da1c24d4d31b3e5ae2e959791fbdc86ab9e770a05cbb3b619a0f7aa0732ae0d332cdc9a08c2959dd202e3661cdd1eff79dcdcfc508bffd6d541e8023ebc0af776ea68ea4786966b2bfa86bc0721b0108250e111", @typed={0x8, 0x36, 0x0, 0x0, @uid=r8}, @generic="ea18caae062f99da295e12951d6f0f6797d0481c6aa7b3ded9e07755e9ea790992cbcdba0bb3fa6745d164470eba0056519abb8589c1409e04f6d20c677894148c098bfd2e7544fa91e0d22de854e1d2cbd81b8f10c015409c1e5acee29f1a277a0e37c896c7736fb1ae426d5b6760cd5c1b9b78b98d921b019b04c84b927d7fa0309d48e436a257df8870cbe7d1ae850e06fe0a0b584340b464ba87afe2fb161b749f657513c5a9383acfbf1ada470c9d2237e329af4b3666cdcd25c835d6617ec5ccf102916552f742c1415efcb4cc5e80b7f8cea10fba1ebea810fa4653311d26e221070dff5acff58f3f1e772c26"]}]}, 0x258}, 0x1, 0x0, 0x0, 0x48815}, 0xc010) 2m25.176600002s ago: executing program 0 (id=3156): r0 = accept(0xffffffffffffffff, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @broadcast, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@delqdisc={0x3c, 0x25, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x7, 0xfff3}, {0x9, 0xf}, {0x8, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xe}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x40040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000300)=0xfffffffffffffd1e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000200)={r5, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f00000002c0)=0x90) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) accept(0xffffffffffffffff, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x80) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @broadcast}, &(0x7f0000000480)=0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@delqdisc={0x3c, 0x25, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x7, 0xfff3}, {0x9, 0xf}, {0x8, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xe}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x40040) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000300)=0xfffffffffffffd1e) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000200)={r5, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f00000002c0)=0x90) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) 2m10.06037164s ago: executing program 32 (id=3156): r0 = accept(0xffffffffffffffff, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @broadcast, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@delqdisc={0x3c, 0x25, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x7, 0xfff3}, {0x9, 0xf}, {0x8, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xe}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x40040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000300)=0xfffffffffffffd1e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000200)={r5, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f00000002c0)=0x90) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) accept(0xffffffffffffffff, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x80) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @broadcast}, &(0x7f0000000480)=0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=@delqdisc={0x3c, 0x25, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x7, 0xfff3}, {0x9, 0xf}, {0x8, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xe}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x40040) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000300)=0xfffffffffffffd1e) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000200)={r5, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f00000002c0)=0x90) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) 5.11345641s ago: executing program 5 (id=3832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0xfffffffffffffe45}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000001c0)=0x87f9, 0x4) (async) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40010042) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) 5.112618878s ago: executing program 1 (id=3833): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000380)={'veth1_vlan\x00', 0x101}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback}, 0x3, 0x4, 0x0, 0x4}}, 0x26) 5.073631691s ago: executing program 5 (id=3834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000180)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)='A', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f00000002c0)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280)) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="68000000000905040000000000000000020000000900010073797a300000000014000280060001000002000005000200060000000800051c05000000240004800832600000000004200002800c000100706f6c69637930000800020000000402080003000000001e", 0x68}], 0x1}, 0x0) 4.908559226s ago: executing program 1 (id=3836): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00', @ANYRES64, @ANYBLOB="010000000000000000003f"], 0x38}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffa, 0x25dfdbfd, {{@in=@multicast2, @in=@empty, 0x0, 0xfd, 0x2, 0x7f, 0xa, 0x20, 0x10}, {0x8, 0x14, 0x100001002, 0x81, 0xfff, 0xffffffffffffb473, 0xfffffffffffffffb}, {0x1000000000, 0x2000000000000001, 0x2, 0xffffffffffffffff}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000b7243560f96563b16fae000000000200200000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001280)={'wpan4\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)={0x24, r8, 0xc0f, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000001800)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)={0x4a4, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xd4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ce8c30896663e04ea2094c6209aa799f"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0xa8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "613ab560bffb0b891bdb27d7a531a8831892f8bb0cfaf990d3b761e9a4589ad1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f0a799eb08541d44e655c9f79602d148"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a01a8e74c1fab9c8a77749efac5ba203d76dd6c419a9de42575ad9c3bb86f41e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7e78}]}]}, @NL802154_ATTR_SEC_KEY={0x15c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "28285212d5c07541cfed32c5a8b64eaa6586635ba2733ca8f382f8d611a6e0ce"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "12114403b047a653929ebe7534801f8551d83d7bc48fc370936c12318fdaa815"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ca2b9dee29d4cc62947a935a5f3a76cf5851f0f263dd8b8013a47610fa61cb85"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bfe37800c2df80a995e49b39bf154497"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9197}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc4e8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "eff319f86f671e2178a99f4bf9bf8a0a"}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_SEC_KEY={0xf8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "70e9a5939c32ef2ee2602583471958e4b6caf67ad4b459522335438eb9a2cd92"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "20cb2265772ea91dddc6be007b8eea20ff46dc8d107d0004c7cf62a92f56a7c7"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "322049fe47931b6b4c2b77cb3d7f3ca6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa8}]}, @NL802154_ATTR_SEC_KEY={0x98, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7d63def1de4e84b6d914df199951a5d8c4da7266479e55ba4b65bd31eac4b628"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a9799a7b8925e5184fd232023cb345e4f01cc4c6b31f48904cc92bef5a9b1d31"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "836403632662d1bee7bc3dd8dda9eb16af923d565aa1ed08dfb6ee2499831fcc"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "858713ff32dea82a04378b44e1843793"}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x44080}, 0x927a7e2d9e5e90d8) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f40), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000f80)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r12, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x40, 0x80000001, 0x5a, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1, 0xfffffff9}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r17, 0x10f, 0x87, &(0x7f0000001180), &(0x7f00000011c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r14, &(0x7f0000000dc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1d", @ANYRES16=r15, @ANYBLOB="20002dbd7000fbdbdf250c000000180001801400020065727370616e300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="700001800800030003000000080003000100000008000100", @ANYRES32=r16, @ANYBLOB="080003000000000008000100", @ANYRES32=r18, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x20048010}, 0x94) 4.906361541s ago: executing program 5 (id=3837): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003b80)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003bc0)={r1}, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003c00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003c40)={0xb, 0x1c, &(0x7f0000003d00)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000003e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/132, 0x7e}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000007c0)=""/63, 0x40}, {&(0x7f0000000800)=""/4092, 0xffc}], 0x4}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0xfffffe23, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001880)=""/4103, 0x1007}, {&(0x7f00000028c0)=""/4092, 0xffc}, {&(0x7f00000038c0)=""/234, 0xea}, {&(0x7f00000039c0)=""/83, 0x53}, {&(0x7f0000003a40)=""/165, 0xa5}], 0x5}, 0x900000}], 0x7, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x19, @private1, 0x1000}], 0x1c) getpeername$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffff9, @private2, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122400000000000000000000800000"], &(0x7f0000000040)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket(0x28, 0xa, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000003b00)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "eb3b1900"}]}}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000300), 0x400000000000235, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003b80)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003bc0)={r1}, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003c00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003c40)={0xb, 0x1c, &(0x7f0000003d00)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000003e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/132, 0x7e}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000007c0)=""/63, 0x40}, {&(0x7f0000000800)=""/4092, 0xffc}], 0x4}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0xfffffe23, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001880)=""/4103, 0x1007}, {&(0x7f00000028c0)=""/4092, 0xffc}, {&(0x7f00000038c0)=""/234, 0xea}, {&(0x7f00000039c0)=""/83, 0x53}, {&(0x7f0000003a40)=""/165, 0xa5}], 0x5}, 0x900000}], 0x7, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r3) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x19, @private1, 0x1000}], 0x1c) (async) getpeername$inet6(r4, 0x0, 0x0) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffff9, @private2, 0x7}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122400000000000000000000800000"], &(0x7f0000000040)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) socket(0x28, 0xa, 0x6) (async) syz_emit_ethernet(0x4a, &(0x7f0000003b00)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "eb3b1900"}]}}}}}}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r5, &(0x7f0000000300), 0x400000000000235, 0x0) (async) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000340)) (async) 2.971605898s ago: executing program 4 (id=3848): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="24010000160001"], 0x124}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@deltclass={0x74, 0x29, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7, 0x5}, {0xfffb, 0x6}, {0xf, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x81}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8a, 0x25}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xcb, 0x9}}, @TCA_RATE={0x6, 0x5, {0xff, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x45004) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@migrate={0xbc, 0x21, 0x1, 0xffffffff, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@local, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e20, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1, 0x8001}, {0x3, 0x300}}}, 0x24}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000600)={r1, &(0x7f0000000500)='\x00', 0x105800, &(0x7f0000000540)={@_ha_fsid={[0x4, 0x4]}, {0x3, 0x8, 0xcb3, 0x7}}, 0x4, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x3ff}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, r10, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x6, r10, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfffffffc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044845}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.671825518s ago: executing program 1 (id=3849): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @private1, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f0000000b40)=""/220, 0xdc}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000cc0)=""/85, 0x55}], 0x5}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000800)=[{&(0x7f0000000840)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000880)={0x3, 0x276}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x6c7, r1, 0x0, 0x200000000000000}, 0x38) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000a00)='GPL\x00', 0x5, 0x29e, &(0x7f0000000a40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) 1.67086633s ago: executing program 5 (id=3850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000000380)='GPL\x00', 0x5, 0xfd90, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000006c0)={0x3, &(0x7f0000000700)=[{0x3}, {0x61}, {0x6}]}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r4, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffffff, 0xe0f, 0x5, 0x6c}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) (async) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000740)) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="fd", 0x0}, 0x50) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="50100000308100616e00000010000280050016004200000004001200eeffffffffffffff0000000000000000"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) socket$kcm(0x21, 0x2, 0x2) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000b40)=0x401, 0x4) (async) bind$inet6(r6, &(0x7f0000000cc0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r6, 0x4) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000d00)=0x800001, 0x4) (async, rerun: 32) bind$inet6(r7, &(0x7f0000000d40)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (rerun: 32) listen(r7, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000880)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaa823aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000c40)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r8, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000cc0), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 1.601075501s ago: executing program 3 (id=3852): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000010}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x7, 0x0, 0x0) (async) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.599990446s ago: executing program 4 (id=3853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x48044}, 0x4000011) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000300)='rose0\x00', 0xc442, &(0x7f0000000340)={@align=0x9, {0x1, 0x3, 0x3}}, 0x40000, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x10000}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000007c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000800)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x81) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r13, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x48801) syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r5) read$nci(r3, &(0x7f0000000ac0)=""/40, 0x28) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r14, 0x8004f50e, &(0x7f0000000b00)) ioctl$FS_IOC_SETFLAGS(r14, 0x40086602, &(0x7f0000000b40)=0x10000) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r15, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r16, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000001) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000e80)) 1.455205851s ago: executing program 2 (id=3854): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x5}, 0x90) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000300), 0x90) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x60}, 0x94) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x400}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r4, 0x4) 1.341268911s ago: executing program 4 (id=3855): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'gre0\x00', 0x2}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x800}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={r0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x52}}, 0x8001, 0x3, 0xfbb, 0x10, 0x2b03856a}, &(0x7f0000000200)=0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000240)={r0, 0x2, 0x6, [0x4, 0xd4e6, 0x100, 0x1000, 0x4, 0x4]}, 0x14) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x7, 0x5, {{0xd, 0x4, 0x1, 0x27, 0x34, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@end, @generic={0x86, 0xc, "47106980a303b0793b78"}, @rr={0x7, 0xf, 0x96, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x96, 0x492, 0x20, @private1, @mcast1, 0x7, 0x10, 0x6, 0x9}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe4, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x51}, 0x44) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000740)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000007c0)={r2, 0x10, &(0x7f0000000780)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000800)=0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000880), r4) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r10, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x41040}, 0x8800) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x15c, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) socket$pppoe(0x18, 0x1, 0x0) r13 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r13, 0x0, 0x24, &(0x7f0000000d80)={@dev, @multicast1}, &(0x7f0000000dc0)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r14, &(0x7f0000000e40)="d9cf740958ccedbda26451cca4c72d3596d7a4ab4a0837a57fd18303637f6af0fb1308ae90f0", &(0x7f0000000e80)=""/133}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f0000000fc0)={'geneve0\x00', @remote}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r11, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040015}, 0x4008020) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000001100)=0x3, 0x4) 1.195670827s ago: executing program 1 (id=3856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003300000018000180140002007665746830"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) ioctl$sock_ifreq(r5, 0x8910, &(0x7f00000005c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000600)="1a4cf331728a2ab98f4b19a5a033e412b2a11fbbb6a3a9c9e6bea5f37dbca046"}) ioctl$sock_netdev_private(r5, 0x89f1, &(0x7f0000000640)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008bd7000fbdb1a6d96d10000080001006e00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f5, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f6, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000b00)}) vmsplice(r8, &(0x7f0000000440)=[{&(0x7f0000000480)='wi', 0x2}], 0x1, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x3c, r11, 0x6ae3e61d32b8160b, 0x20000000, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r11, 0x20, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4080085) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000880)='-\'\x00', 0x42, &(0x7f00000008c0)={@align=0x6, {0x7, 0x1, 0x80000000, 0xa}}, 0x1, &(0x7f0000000900), &(0x7f0000000940)=0x9}) sendmsg$NL80211_CMD_START_NAN(r13, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r4, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1432, 0x1d}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "1210c7e3ceca16638825e80166a4c5b0ed209a065c21b97a1b5c837fbc618f0b61fa2f6b4e878cf523035376228760c5b31c0a2cfcead67feedba6528070e252db16f2a39f7e5b5eb15d315cb1a6fb0de712662bbef3bf17bf4a7696a93115b6f01676e6a34a1dec2007685531012a378898921a300bef720f3e8c9c45730fbd421105e76bed7088ee7143efdb939ed151043f44aa35e157306931ef4c7504833242"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x44050) 1.16654977s ago: executing program 3 (id=3857): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0xb7, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x8, 0x9, 0x9, 0x80, 0xfffffffffffffff0}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x10000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.100777091s ago: executing program 2 (id=3858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000100), 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {0x0, 0x4}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x40}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x81}, {}, {}, {}, {0x80000}, {0x0, 0xfffffffd}, {}, {}, {0x15d, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xdff8}, {}, {}, {}, {0x0, 0xfffffffc}, {0x4}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0xd1000000}, {}, {0x800000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0xda8, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf2ac}]}, 0x30}, 0x1, 0xffffffc3, 0x0, 0x801}, 0x4040000) 939.607502ms ago: executing program 4 (id=3859): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xb3, 0x6}, [@NDA_LLADDR={0xa, 0x2, @random="81e03eeb2f9f"}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x4040004) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@delchain={0x24, 0x65, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff2, 0x7}, {0xb, 0x1}, {0xffec, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, r4, 0x101}, 0xc) 938.849089ms ago: executing program 3 (id=3860): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000580)='xfrm0\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000880), &(0x7f00000008c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) pipe(&(0x7f0000001000)) sendmsg$nl_route_sched(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff7f}]}, 0x2c}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000d40)={{r0, &(0x7f0000000b80)='-\'\x00', 0x101000, &(0x7f0000000bc0)={@align=0xffff, {0x8, 0xb, 0xea9e, 0x100}}, 0x7, &(0x7f0000000c00), &(0x7f0000000c40)=0x6}, {[0x4, 0x8, 0xfb, 0x1ff]}, 0xfbff, 0xa9, &(0x7f0000000c80)=""/169}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)="14000000100035", 0x7}], 0x1}, 0x0) r7 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001100)={r7}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x12, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000080000000000000000008520000003000000181176f5", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', r5, @cgroup_sock_addr=0x8, r6, 0x8, &(0x7f0000000dc0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x5, 0x9, 0x19}, 0x10, r8, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000e80)=[{0x8, 0x2, 0x2}, {0x3, 0x4, 0x8, 0x1}, {0x3, 0x4, 0xd, 0x6}, {0x0, 0x1, 0xc, 0x8}], 0x10, 0x2}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c"], 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e20, @private=0xa010100}, 0x10) pipe(&(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r9, &(0x7f0000000fc0)={0x2, 0x4e20, @remote}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x1e, {0x2, 0x4e21, @local}, 'vcan0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001000020029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="1d551891f024e40c0a0003003a712f0756b80000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x7c}}, 0x4008804) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31000000000800044000000000907d877ac1180900010073797a300000000008000340000000011400000011000100000000000000"], 0x64}}, 0x0) 608.849447ms ago: executing program 2 (id=3861): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f00000000c0)=""/39, 0x1}) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 603.421039ms ago: executing program 3 (id=3862): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x0, 0xb, "08c82ce8da6ee06cb8"}, {0x5, 0x5, "02270e"}, {0x0, 0x8, "00de6c83d500"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0xf, "8475be675de6a70a8525dc91e5"}, {0x6, 0x9, "00000000008000"}]}]}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc) getpeername$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) 499.824074ms ago: executing program 5 (id=3863): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='bridge0\x00') (async) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000080)=0x2, 0x4) 413.929167ms ago: executing program 3 (id=3864): r0 = epoll_create(0x400) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000040)) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000040)) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x5) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000140)='1', 0x1) (async) write$6lowpan_enable(r1, &(0x7f0000000140)='1', 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000180)=0x127, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0x26, 0x3, 0x7) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x2e, 0x0, "9e3a250e8c5cf490bdd6fba1511712d0dd9eae9a9f670d08a63d4583c339e27d30d3a33670be81f052b7ca31293b41398fddb340fcec5f52816c1a0dc97eb93fb6225c8ed12272e435d9bc459d3fbe18"}, 0xd8) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0x4}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000340)="49f4d6f47acec1212a2aa5f191a612187251837272c333022a7b0e3d55a9a2c0e384a4e6ee1b0bc2c55acfbab107fbd5249c29485b28bc9c92012274ae302b39e3e2c1f463bd3aaa80913ac1cb7c7203373f604fbf4c75daff168921e02b9bba402b894ddaece7ad02e8bcf85802c17ed50ae97382af233b6e12efb561ddb76ccee122b7d4e8d5349a61eaf6b842a3825e", 0x91}, {&(0x7f0000000400)="b0f3457a4e49a5c0ecda4d20d6a7f3e07479ab4a22c45084cf0764d90cb229ceb6726c43b0a12ac17d55cffce74f0e3efd6c44d68816d5a1a3ef17d7f6af9fa543f70fc3b37d14737189787474f22274f38a12ec", 0x54}, {&(0x7f0000000480)="9858d82ea9ebf2b28dafc2c075fa0095a6e803dc9ac668b7e11aa854989c468ecf3a83a4897e8bc17e7aa9a6cf880eaefef21e03f09076f4a76272c97c945dea6358bb8cf249b7904e8fb7188874a9fceca0952d0115c9efbbd9d01ed73a7100f1f520f4a74eb65148adbfffdb27844c99628d6e9a155403f217e88f45641d22e1db9dea94f43698b632cfeaa4eee7755f8ca279eac10d6aa76bcc751efc9f499a473b1a939c874fb6ac7277ab310aca2ed2946ffd6d1511f00794b1a55581", 0xbf}, {&(0x7f0000000540)="b21c20b75cb9017e5b4ed2cc6c278c5fead1b29736550ee421d669434331b51ff4", 0x21}], 0x4) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000340)="49f4d6f47acec1212a2aa5f191a612187251837272c333022a7b0e3d55a9a2c0e384a4e6ee1b0bc2c55acfbab107fbd5249c29485b28bc9c92012274ae302b39e3e2c1f463bd3aaa80913ac1cb7c7203373f604fbf4c75daff168921e02b9bba402b894ddaece7ad02e8bcf85802c17ed50ae97382af233b6e12efb561ddb76ccee122b7d4e8d5349a61eaf6b842a3825e", 0x91}, {&(0x7f0000000400)="b0f3457a4e49a5c0ecda4d20d6a7f3e07479ab4a22c45084cf0764d90cb229ceb6726c43b0a12ac17d55cffce74f0e3efd6c44d68816d5a1a3ef17d7f6af9fa543f70fc3b37d14737189787474f22274f38a12ec", 0x54}, {&(0x7f0000000480)="9858d82ea9ebf2b28dafc2c075fa0095a6e803dc9ac668b7e11aa854989c468ecf3a83a4897e8bc17e7aa9a6cf880eaefef21e03f09076f4a76272c97c945dea6358bb8cf249b7904e8fb7188874a9fceca0952d0115c9efbbd9d01ed73a7100f1f520f4a74eb65148adbfffdb27844c99628d6e9a155403f217e88f45641d22e1db9dea94f43698b632cfeaa4eee7755f8ca279eac10d6aa76bcc751efc9f499a473b1a939c874fb6ac7277ab310aca2ed2946ffd6d1511f00794b1a55581", 0xbf}, {&(0x7f0000000540)="b21c20b75cb9017e5b4ed2cc6c278c5fead1b29736550ee421d669434331b51ff4", 0x21}], 0x4) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000005c0)={0x8, 0xcc0d}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000005c0)={0x8, 0xcc0d}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000600)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@arena={0x21, 0x0, 0x0, 0x3b, 0x20000, r5, 0x4, '\x00', r6, r7, 0x4, 0x1, 0x5}, 0x50) bind$can_raw(r5, &(0x7f00000007c0)={0x1d, r6}, 0x10) sendmsg$nl_route(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@can_delroute={0x1c, 0x19, 0x4, 0x70bd2a, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffe, 0x5, 0x4, 0x7}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x8000) read(r4, &(0x7f0000000900)=""/187, 0xbb) r8 = socket(0x0, 0x4, 0x2) ioctl$OCFS2_IOC_INFO(r4, 0x80106f05, &(0x7f0000006300)={&(0x7f0000006140)=[&(0x7f00000009c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000000a00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x14}, &(0x7f0000000b40)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000000b80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x1}, &(0x7f0000000cc0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000d00)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000000d40)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000d80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0xd}, &(0x7f0000000ec0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000000f40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2}, &(0x7f0000001080)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f00000010c0)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0xc}, &(0x7f0000001200)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000001240)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f00000012c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x140000000}}, &(0x7f0000001300)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000001380)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f00000013c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000001400)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x1, 0xff0}, {0x9, 0x8}, {0x7fffffffffffffff, 0x200}, {0x5, 0xc}, {0x2, 0x10000}, {0x89a6, 0x2}, {0x4, 0x6}, {0x3, 0x3}, {0x3, 0x100000001}, {0x69db95cb, 0x6}, {0x8001, 0x7b}, {0x5, 0xe053}, {0x800, 0x200}, {0x8, 0x4}, {0xe68c, 0x8001}, {0x7, 0xffffffffffff0001}, {0x4, 0xf}, {0x100000001, 0x5}, {0x1, 0x2}, {0x9, 0x1ff}, {0xfffffffffffffffb, 0xd}, {0x10, 0xffffffffffffff0d}, {0x7fffffffffffffff}, {0x5, 0x8000000000000001}, {0xfffffffffffff0cf, 0x3}, {0xc, 0x1000}, {0xffffffff80000000, 0x8}, {0x8, 0x5}, {0x8000, 0x4}, {0x7, 0x5}, {0x8, 0xb}, {0x7ff, 0xfffffffffffffffa}, {0x1000000000000000}, {0xe3, 0x2}, {0x5a4104b3, 0x3}, {0x8, 0x5}, {0x5, 0x100000000}, {0xfffffffffffffffb, 0x9d}, {0x400, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x5, 0x8}, {0x7, 0x5f32}, {0x2, 0xff}, {0x7f, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x1, 0x28}, {0x0, 0x7}, {0x9, 0x7}, {0x0, 0x401}, {0x0, 0x2}, {0x101, 0x4f}, {0x2, 0x8b}, {0x1, 0xf1c2}, {0x2890, 0xfffffffffffffff8}, {0xcc, 0x79}, {0xba3, 0xbee6}, {0xb37, 0x7fff}, {0x9, 0x40}, {0x4, 0x2}, {0xfffffffffffffffd, 0x9}, {0x9, 0x7ff}, {0x7, 0x3}, {0x5, 0x8000}, {0x200, 0x101}, {0xffffffff, 0x3}, {0x400, 0x8}, {0xffffffffffffffff}, {0x9, 0x80}, {0x800, 0xffffffffffffffff}, {0x80000000, 0x5}, {0x4, 0xffffffffffffffcf}, {0xc329, 0xeb7e}, {0xf, 0x835}, {0x3, 0x7fffffff}, {0x7, 0x4}, {0xe06e, 0xffff}, {0x6}, {0xffffffffffffffff, 0x5}, {0xfffffffffffffffa, 0x7}, {0x5, 0x80000001}, {0x4, 0xc}, {0x101}, {0x1, 0xf3}, {0x4, 0x5}, {0x7f, 0x308}, {0x1, 0x7}, {0x100000001, 0x5}, {0x0, 0xa418}, {0x0, 0x8}, {0xffffffffffffffff, 0x661}, {0x80000001, 0x80000000}, {0x6e33, 0x81}, {0x6, 0x4}, {0x7f, 0x5}, {0x10000, 0x8}, {0x6, 0x9}, {0xff, 0x5}, {0x7, 0xb67}, {0x6, 0xfffffffffffffffa}, {0x5, 0x2}, {0xfff, 0x9}, {0x8, 0x5544}, {0x8, 0x9}, {0x6, 0x9}, {0xec, 0xb}, {0x242b, 0x4159}, {0x4, 0x8}, {0xff, 0x1}, {0x5, 0x1}, {0xfffffffffffffffd, 0x81}, {0x7, 0x7ff}, {0x7, 0x36}, {0x1ff, 0x6}, {0x1, 0x8}, {0x5}, {0x6, 0xab}, {0x5, 0xfc}, {0x937, 0xffffffffffff8001}, {0x7fffffff, 0x80000000}, {0x34, 0x1165}, {0x8, 0x5}, {0x5}, {0x2}, {0x5, 0xa68}, {0x2, 0x8}, {0x200}, {0x0, 0x4}, {0x1, 0x100}, {0x6, 0xe}, {0x100, 0x8001}, {0x6, 0x3}, {0x6, 0xffff}, {0x3}, {0xfffffffffffffc1b}, {0x0, 0x2}, {0x7, 0xc}, {0xf9f}, {0x1ff, 0x80000000}, {0x4, 0x3}, {0xb2b, 0x9}, {0xccac, 0x56b3}, {0x5, 0x8000000000000001}, {0x80}, {0x9, 0x1}, {0x101}, {0x10001, 0xb}, {0x200, 0x5}, {0xa9e, 0x100}, {0x642d1ee2, 0x5}, {0xb4, 0x9}, {0x2, 0x8}, {0x3, 0x8}, {}, {0x80000001, 0x1}, {0x1, 0x309}, {0x9}, {0x2, 0x6}, {0x1800000000, 0x1000}, {0x2, 0xffffffffffffffff}, {0xc5a, 0xfffffffffffffc00}, {0xfa, 0x9}, {0x6}, {0x447c, 0x2}, {0x2}, {0x2, 0x3}, {0x1ff, 0x7fffffffffffffff}, {0x0, 0x100000000}, {0x200, 0x7}, {0x0, 0x80000000}, {0x9, 0xd375}, {0x61c, 0xbdd}, {0x9d, 0x4}, {0x9, 0x8}, {0x7, 0x8}, {0x4, 0x6a3}, {0x0, 0x4}, {0x2}, {0x1, 0x4}, {0x9, 0x7fffffff}, {0x9, 0x100000001}, {0xee, 0xa}, {0x1, 0x2}, {0x9, 0x4}, {0x7, 0x420c1092}, {0xffffffffffffffff, 0x5}, {0x8, 0x8}, {0x4, 0x4}, {0x2, 0xfffffffffffffff9}, {0x0, 0x5f7c}, {0x401, 0x8000000000000000}, {0xd, 0x9}, {0xffffffffffffffff, 0x6}, {0x9, 0xfc}, {0x1, 0x2}, {0x30, 0xffffffff}, {0x9, 0xfffffffffffffffa}, {0x800, 0x6}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0x476}, {0x7fff, 0x6}, {0x8, 0x401}, {0xe905}, {0x6, 0x314c}, {0x7fffffffffffffff, 0x3ff}, {0x5, 0x4}, {0x1, 0x4b9}, {0x5, 0x3}, {0x8, 0xe11}, {0x200, 0xb}, {0x200, 0x2}, {0x2, 0x5}, {0x0, 0x5}, {0x7fffffffffffffff, 0x8}, {0xb, 0xfffffffffffffffa}, {0x1, 0xfff}, {0x3, 0x6}, {0xfffffffffffffffb, 0x30000000000000}, {0x6, 0xa}, {0x8, 0x2}, {0xfff, 0x5}, {0x4, 0x9}, {0x1ff}, {0x0, 0x7fff}, {0x0, 0x7}, {0x5, 0x6}, {0x8, 0x1ff}, {0x40, 0x3}, {0xf97}, {0x10, 0x26d}, {0x3a1, 0x8000000000000000}, {0x9, 0x8}, {0x1, 0x150}, {0x9, 0x7fffffff}, {0x1, 0x7}, {0x0, 0xffffffff}, {0xdce, 0x7f91}, {0x9, 0x6}, {0x0, 0x4}, {0xf, 0x4}, {0x8, 0x1}, {0x8, 0x1ff}, {0x2, 0xccbf}, {0x81, 0xc79}, {0x80, 0x1}, {0x7fffffff, 0x4}, {0x100, 0x4}, {0x0, 0x9}, {0x9e, 0x3}, {0x10000, 0xc60f}, {0xb5c}, {0x85a8}, {0x9, 0x8}]}, &(0x7f0000002440)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f00000024c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002500)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000002540)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000002580)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000025c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000002640)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x0, 0x7}, {0x4, 0x139}, {0x1}, {0x4, 0x9}, {0x8, 0x5}, {0xffffffffffffff99, 0x7fff}, {0xff, 0x6e2}, {0xbd5c, 0x7}, {0xf96c, 0x2}, {0x2, 0x81}, {0x2, 0x8}, {0xc4fb, 0x9}, {0x4, 0x100000000}, {0x7, 0xffc}, {0x1, 0x1}, {0x8001}, {0x9, 0x8}, {0x8, 0x1}, {0x92, 0x4}, {0x3, 0x9}, {0x4, 0x79d}, {0x1, 0xd}, {0x2, 0x8}, {0x0, 0x5}, {0x3, 0x9d}, {0x40, 0xffffffff80000000}, {0x1, 0x4}, {0x7, 0x1f}, {0x0, 0x3}, {0x8, 0x5fd}, {0x7fff, 0x2cc480000000000}, {0x3}, {0x9, 0xb}, {0x9, 0x6}, {0xf13c000000000000, 0x3}, {0x3, 0x5}, {0x431e, 0x10}, {0xffffffff, 0x4}, {0x36ad, 0x1}, {0x0, 0x100000000}, {0x0, 0x10}, {0xab8, 0x7}, {0xb8b5, 0x2}, {0xc, 0x36}, {0x7, 0xffffffffffffffff}, {0x9, 0x100}, {0x1, 0x6bb7}, {0x1, 0xab}, {0x7, 0x3}, {0x1000, 0x5f}, {0x4, 0xb2}, {0x28, 0x1ff}, {0x2, 0xffffffffffffffff}, {0xffffffff, 0x2}, {0xec, 0x1}, {0x9, 0x5}, {0x0, 0xfff}, {0xb61d, 0x7}, {0x40}, {0x6a, 0x4db471a2}, {0x9, 0x5}, {0x1, 0x4}, {0x9, 0x6}, {0x2, 0x8}, {0xf, 0x5}, {0x9, 0x80000001}, {0xa, 0xe0}, {0x6, 0x6}, {0xc4, 0x8}, {0x1, 0x401}, {0x9}, {0xff, 0x4}, {0x2, 0x5}, {0x3486, 0x4}, {0x7fffffff}, {0x6, 0xd32f}, {0x0, 0x4}, {0x2, 0x1be}, {0xb673, 0x8}, {0x81, 0x81}, {0x3, 0xe}, {0x15e7, 0x3}, {0x3, 0x6}, {0x5, 0x2}, {0x9, 0x9}, {0x67dd, 0x4}, {0x7, 0x8000000000000000}, {0x7, 0x8}, {0xc6e, 0x4}, {0xd462, 0x1}, {0x5, 0x1}, {0x3ff, 0x45}, {0xffffffffffffff00, 0x101}, {0x40, 0x7}, {0x6, 0x5}, {0x4, 0xb7}, {0x2, 0xfffffffffffffff9}, {0xfffffffffffffff7, 0x1}, {0x4, 0x9}, {0x5, 0x10}, {0x0, 0x7fff}, {0x6, 0x7}, {0xffff, 0x10}, {0x5, 0x4}, {0x2, 0x2}, {}, {0x7, 0x9}, {0x2, 0x7}, {0xa5, 0x4a27}, {0x4, 0x5}, {0x1, 0x2}, {0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x7ff, 0x5}, {0x10000000000000, 0x40000000000000}, {0x283, 0x3}, {0x8, 0x7}, {0x3, 0x1}, {0x9, 0x2}, {0x5, 0x4126179}, {0x59, 0x6}, {0x8, 0x8}, {0x8, 0x5}, {0x5, 0x7}, {0x4, 0x400}, {0x1, 0x9}, {0x7}, {0xcc40, 0x7}, {0xb8a, 0x3}, {0x2, 0x4}, {0x7, 0x5}, {0x2, 0x24b}, {0xfffffffffffffff8, 0xfffffffffffffff9}, {0x8000000000000001, 0x9}, {0x100000001, 0xffffffffffffe2ac}, {0x96f9, 0x2}, {0x5, 0x100000001}, {0x6, 0x7fffffff}, {0x6, 0xaf03}, {0x4042, 0x9}, {0x0, 0xfffffffffffffff7}, {0x1873, 0x9}, {0x2, 0xb}, {0x4, 0x2}, {0xfffffffffffffffb, 0x8000}, {0x6, 0x4}, {0x8}, {0x401, 0x100000000}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0x1}, {0x3, 0x1}, {0x24e466cb, 0x1ff}, {0x1, 0x9}, {0x8001, 0x1}, {0xfffffffffffffff7, 0x2}, {0x101, 0x7f00000000}, {0x3, 0x9}, {0x0, 0x4}, {0x8, 0x101}, {0x5, 0x8}, {0x1000000000000, 0x4}, {0x8, 0x80}, {0x4, 0x9}, {0x5, 0x1}, {0xd, 0x8}, {0x8, 0x9}, {0x2, 0x3}, {0x2}, {0x10001, 0x80}, {0x10001, 0x1a}, {0x0, 0xc3}, {0x3, 0x6}, {0x8, 0xc}, {0x7, 0x1}, {0x2, 0xde6d}, {0x2, 0xb}, {0xc, 0x4}, {0x8000, 0x3}, {0xd824, 0x81}, {0xffffffff, 0x7fffffffffffffff}, {0x7, 0x6}, {0x1, 0x5ef}, {0x6f, 0x5}, {0x101}, {0x1, 0x9}, {0x10000, 0x1}, {0x6, 0x1}, {0x9a4, 0x5}, {0xffff, 0x17d}, {0x101, 0x4}, {0xaf0, 0x4}, {0x100000000, 0x7fffffff}, {0x3, 0x100000000}, {0xce92, 0x9}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0x4b51}, {0x5, 0x2}, {0x6, 0x80000000}, {0x9, 0x5}, {0x8d16, 0x5}, {0xfffffffffffffffe, 0x100}, {0x1, 0x1b1}, {0xe805, 0x100000000}, {0x4582, 0x1}, {0x3, 0xcd}, {0x10001, 0x6}, {0x3, 0x8000000000000000}, {0x2f, 0xf}, {0x0, 0x6}, {0x6, 0xa7}, {0x9, 0xfffffffffffffffa}, {0x1, 0x4}, {0x5, 0x2ab2}, {0x987, 0x6}, {0x0, 0x6000000000000}, {0x9, 0x100}, {0x3, 0xfffffffffffffffb}, {0x7f, 0x11}, {0x7, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0xc9c}, {0xffff, 0x2d}, {0x9}, {0x101, 0x2149}, {0x1, 0x3}, {0x9, 0x1}, {0xfffffffffffffffb, 0xff9ba42}, {0x9, 0x7}, {0xca8, 0x8000000000000000}, {0x6, 0x3}, {0x3, 0x3e8}, {0x3, 0xfffffffffffffffa}, {0x2, 0x8000}, {0x2, 0x4}, {0x2, 0x8}, {0x800, 0x6}, {0x7, 0x9}, {0xd, 0x3ff}, {0x6, 0x6}, {0x8, 0x2}, {0xfffffffffffffffe, 0x86e}, {0x5, 0x1ff}, {0x7, 0x8}, {0x1ff, 0x7bd}, {0x10, 0x80000001}, {0x0, 0x7}, {0xff, 0xfffffffffffffffe}, {0x5, 0x4}, {0xd716, 0x8}, {0x100, 0xffffffffffffc465}]}, &(0x7f0000003680)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x6}, &(0x7f00000037c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000003800)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x8}, &(0x7f0000003940)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f00000039c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000003a00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x8001}, &(0x7f0000003b40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000003b80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000003bc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000002}, [{0xb23, 0x457}, {0x7, 0x7f}, {0x80000001, 0x8000}, {0x7, 0x400}, {0x101, 0x4}, {0x5, 0x5}, {0x8, 0x8}, {0xf2, 0xffff}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x3000000000000000}, {0x4, 0x9}, {0x870, 0x1}, {0x8, 0xffffffffa1870430}, {0x953a}, {0x2, 0x5}, {0x1000, 0x3}, {0x0, 0xb}, {0x1, 0x5}, {0x3}, {0x6, 0x21ec}, {0xffffffffffffff80, 0x8000000000000001}, {0x8000000000000000, 0x2}, {0x9, 0x8}, {0x5, 0x401}, {0x1000, 0x8}, {0xffff, 0x3}, {0x7fffffff, 0x800}, {0xd3f, 0x1}, {0x7, 0x3}, {0x8, 0x4}, {0x80000000, 0x9}, {0x9, 0x101}, {0x6, 0x1}, {0x8000000000000001, 0x1}, {0x9bec, 0x8}, {0x0, 0xffffffffffffffff}, {0x9, 0xfffffffffffffffe}, {0x9, 0x4}, {0xb, 0x2a1d}, {0xfff}, {0x2, 0x8}, {0x7, 0x7}, {0xc, 0x6}, {0x1, 0xb1}, {0xfee, 0x1f8}, {0x81, 0x3}, {0x3, 0x7}, {0x1000, 0x4}, {0xc, 0x8}, {0x8000, 0x9}, {0x8, 0xffffffffffffff00}, {0x6, 0x9}, {0x9, 0x9}, {0xf, 0xe6d}, {0x7, 0x3}, {0x5925, 0x10}, {0x3, 0x1ff}, {0x1, 0xc9b}, {0x9, 0x1}, {0xa, 0x4}, {0x2, 0x1}, {0x4, 0x95}, {0x0, 0x4}, {0x8, 0x2}, {0x5, 0x1}, {0xcc}, {0x0, 0xfffffffffffffffd}, {0x8, 0x9}, {0x28, 0x933}, {0x9, 0x200}, {0x3000, 0x6}, {0x6, 0x21}, {0x3, 0xe81}, {0x800, 0x8}, {0x7, 0x9}, {0x36, 0x3}, {0xc7c0, 0xffffffff}, {0x8000, 0x2}, {0x5}, {0x2, 0x2bbf}, {0x9}, {0xf7fb, 0x1}, {0x0, 0x7}, {0x326}, {0x2, 0xffffffffffffffc0}, {0x3, 0xfffffffffffffff7}, {0xfffffffffffffff7, 0x6}, {0x9, 0x8}, {0x4, 0x100}, {0x3ff, 0x6}, {0x19}, {0xb25, 0x2}, {0xfa, 0xab}, {0x8, 0xbe23}, {0xd, 0x7}, {0x4, 0x3}, {0x0, 0x1ff}, {0x7a, 0x7}, {0x0, 0x7fffffffffffffff}, {0x4, 0xc}, {0x98, 0x83d}, {0x1, 0x5}, {0x4, 0x3}, {0x8, 0x18000000000000}, {0x6, 0x7}, {0x8, 0x91af}, {0xe, 0x3c8}, {0x6, 0x3ff}, {0x5}, {0x9, 0x8000000000000001}, {0x8, 0x8000000000000000}, {0x75a, 0x1}, {0x470, 0x4}, {0x1, 0xffffffffffff0000}, {0x2, 0x3}, {0x800, 0x9}, {0x2, 0x8}, {0x8, 0x8000000000000000}, {0x365, 0x373}, {0x1, 0x2}, {0x8, 0x4}, {0x7, 0x7}, {0x20000000000, 0x7b2}, {0x2}, {0x380000000000000, 0x33fc}, {0x0, 0x44}, {0x4000000000000000, 0x7}, {0x4, 0x9}, {0xb190, 0xfffffffffffff801}, {0x6, 0xffffffffffffffff}, {0xdb, 0x8}, {0x2, 0x2}, {0x8, 0x2}, {0x43, 0x8}, {0x5, 0x4}, {0xffffffffffffff7d}, {0xffffffffffffc6d5, 0x100000001}, {0x3892, 0x8}, {0x1, 0xffffffffffff22c1}, {0x78293dff, 0x6}, {0xfffffffffffffffe, 0x7}, {0xdda, 0x5}, {0x9, 0x2}, {0xeb2, 0xfffffffffffffffd}, {0xe, 0x3}, {0x86f, 0x9}, {0x3ff, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x2, 0x8000}, {0x4, 0xdf97}, {0x79d, 0xffffffff}, {0x2, 0x3}, {0x7, 0x2}, {0x8, 0x1}, {0x3, 0xfffffffffffffff8}, {0x8001, 0xf44a}, {0x3, 0xceb}, {0x8, 0x1}, {0x0, 0xc}, {0x1}, {0x8}, {0xb9f2, 0x5}, {0x60e7, 0x16}, {0x7f, 0x6ed}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x1000}, {0x200, 0xfffffffffffffff6}, {0x8, 0xff}, {0x40000, 0x7}, {0x200, 0x9}, {0x9, 0x665e}, {0x5, 0x5}, {0x81, 0x783c00000000}, {0xfffffffffffff2b9, 0x401}, {0x1, 0x3}, {0x3ff, 0x6}, {0x800, 0x9}, {0x1, 0x4e}, {0x4, 0x1796000000}, {0x7, 0x5}, {0x8, 0x1}, {0x4, 0x8}, {0xa3c, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x5, 0x8000000000000001}, {0x3, 0x7}, {0x7fffffffffffffff, 0x6}, {0x7, 0xe5e3}, {0x6, 0x748}, {0x9, 0x7fff}, {0x1, 0x81}, {0x100, 0xfffe000000000000}, {0x6, 0x3}, {0x100000001, 0xfffffffffffff800}, {0x1, 0x10001}, {0x40}, {0x2, 0xc}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0xfffffffffffffffa}, {0x2, 0x2}, {0x1, 0x7}, {0x100000001, 0x9}, {0x81, 0xfff}, {0x6, 0x8}, {0x8000000000, 0xfffffffffffffff9}, {0x4, 0x3}, {0x3, 0x75}, {0x4, 0x7fff}, {0x8000000000000000, 0xfffffffffffffff9}, {0x78, 0x7}, {0x7, 0x2e89}, {0x3, 0x8}, {0x4, 0xfffffffffffffff7}, {0x8, 0x4}, {0x5, 0x3}, {0x200, 0x800000}, {0x7, 0x6}, {0x100, 0x2}, {0xa000, 0x1}, {0x6, 0x4}, {0x2, 0x1000}, {0x317, 0x4}, {0x90d, 0x4}, {0x2, 0x3}, {0x2, 0x3}, {0xffffffff80000001, 0x400}, {0x8, 0x26e}, {0x6, 0x5}, {0x180000000000000, 0x5}, {0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x5, 0xffffffff}, {0x8, 0x8}, {0x6afa, 0x3}, {0x0, 0x5}, {0xfffffffffffffffe, 0x3}, {0x7, 0x1c0}, {0x8000000000000000, 0xa4}, {0x3, 0x3}, {0x3, 0x6}, {0x4, 0x81}, {0x81, 0x8}, {0x9a, 0x4}, {0x2, 0x3}, {0x7fffffffffffffff, 0x7fff}, {0x8, 0x57}, {0x800, 0x4}, {0x7f, 0x80}, {0x6, 0xfec2}]}, &(0x7f0000004c00)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000004c40)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004c80)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000004d00)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000004d40)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000004d80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004dc0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f0000004e40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000004e80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000004ec0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000004f00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000004f40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x81}, &(0x7f0000005080)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f00000050c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x800000000000, 0x3}, {0x4, 0x25}, {0x8, 0xf}, {0xbc04, 0xf}, {0x9, 0x7fff}, {0x84f, 0x1}, {0x1, 0x2400000000000000}, {0x3, 0x2}, {0x5, 0x18}, {0x365, 0x6}, {0x9, 0x1}, {0xf, 0x2}, {0x100000000, 0x101}, {0x1, 0x4}, {0x8, 0x7fffffff}, {0xac5, 0x1}, {0x7, 0x46f8}, {0x4, 0x100000000}, {0x2, 0x7}, {0x6, 0x8}, {0xb, 0xd5b7}, {0x9, 0x4}, {0x7, 0x5}, {0x2, 0xd}, {0xffffffffffffff00, 0x10001}, {0x5, 0x6}, {0x9, 0x1}, {0x7fffffff, 0x8000000000000001}, {0x0, 0x2}, {0x0, 0x4}, {0x9, 0x4}, {0x7ff, 0x80000001}, {0x2, 0xa8}, {0x2, 0x6f76e30c}, {0x7fffffffffffffff, 0x7f}, {0xba6a, 0x1800000000}, {0xfffffffeffffffff, 0x8000000000000001}, {0xfffffffffffffffd, 0x1000}, {0x100000000, 0x3}, {0xe, 0x200}, {0x2, 0x80}, {0xe58, 0xffffffffffffd169}, {0x80000000, 0x3}, {0x71, 0x8}, {0x1, 0x9}, {0x40, 0x3}, {0x0, 0xcbf0}, {0x2, 0x5}, {0x1}, {0x3, 0x8}, {0x930, 0x10}, {0x1, 0x10}, {0x9}, {0x7, 0x7fffffff}, {0x9, 0x5}, {0x7, 0x919}, {0x9, 0x1}, {0x9f, 0x3120}, {0x10, 0x6}, {0xfffffffffffffffc, 0x5}, {0x1, 0x8000000000000000}, {0x8, 0x6}, {0x781e, 0x2917}, {0x5, 0x37c2}, {0xc459, 0xbdd}, {0x6, 0xa00d}, {0xd, 0x180000}, {0xffffffffffffe13d, 0x5}, {0x7fffffff, 0xd8b}, {0x7fffffffffffffff, 0x2}, {0x9, 0x9}, {0x7ff, 0x110}, {0xfc, 0x8}, {0x8, 0xb}, {0x800, 0xb2}, {0x6, 0x9}, {0x4, 0x1}, {0x6, 0x90d9}, {0xf, 0x7fffffff}, {0x0, 0x7}, {0x28, 0x5}, {0x7ef, 0x1}, {0x8}, {0x3ff, 0x8000000000000000}, {0x1, 0x2}, {0x7, 0x7}, {0xfffffffffffffff8, 0x6}, {0x4, 0x9}, {0x2, 0x1}, {0xd, 0x1}, {0xd0, 0x1000}, {0x8000, 0x3}, {0x81}, {0xa6, 0x1}, {0x0, 0x9}, {0xba25, 0x6a4}, {0x9, 0xd6}, {0x4, 0x2}, {0x3830000000000000, 0x8}, {0x8000000000000000, 0x3}, {0x3, 0x4}, {0x6, 0x6}, {0x81, 0x1ff}, {0x10000000, 0x5}, {0x7, 0x80}, {0x10, 0x7}, {0x6, 0x1}, {0x8, 0x80000001}, {0x81, 0xa3c3}, {0x0, 0x1}, {0x6, 0x9}, {0xe, 0x9}, {0x2, 0x6}, {0x2, 0x5}, {0x100000000, 0x3}, {0x6, 0xc7d0}, {0x8, 0xfffffffffffffabf}, {0x1000, 0x7}, {0x100000000, 0xfffffffffffffff1}, {0xff, 0xffff}, {0xe, 0x7f}, {0x0, 0x6}, {0x8, 0x3ff}, {0x8, 0x8001}, {0x4}, {0x10000, 0x1}, {0x7fff, 0xfffffffffffffff9}, {0x9, 0xffffffffffffffff}, {0x4411, 0x7f}, {0x101, 0x2}, {0x1, 0x8}, {0x35, 0xf}, {0x9b, 0x6}, {0xffffffff, 0x9}, {0x5a8, 0x9}, {0xffffffff00000001, 0xe4}, {0x1, 0x2}, {0x6, 0x81}, {0xa, 0x8}, {0x2, 0x5}, {0xb1, 0x4}, {0x401, 0x9}, {0x0, 0xf50a}, {0x5, 0x100}, {0x18, 0x1000}, {0x3, 0xd}, {0xffffffff, 0x4}, {0x3, 0xc3d1}, {0x36, 0x3}, {0xac12, 0x9}, {0x9, 0xfeb6}, {0x3, 0x8}, {0x0, 0x1}, {0xfffffffffffffe00, 0x13}, {0x80000001, 0x6}, {0x10000}, {0x5, 0x5}, {0x9, 0x8}, {0x1, 0x1}, {0x2, 0x7}, {0x4, 0xfc1c68c}, {0x6, 0x8}, {0x3, 0x5}, {0x9, 0x1}, {0xfffffffffffffffe, 0x7}, {0x8, 0x7}, {0xd, 0x64d}, {0x1, 0x6}, {0xfffffffffffffffd, 0x1}, {0xf27, 0x7f}, {0x7, 0x3}, {0x7f, 0x400}, {0xffffffffffffffff}, {0x8, 0x9}, {0x6, 0xfffffffffffff8fa}, {0xa000000000, 0x4}, {0x4}, {0x4, 0x3}, {0x7, 0xffffffffffffffad}, {0x400}, {0xffffffffffffb6c7, 0x7}, {0x100000000, 0x3}, {0x3, 0x7}, {0xf3, 0x6}, {0xff, 0x1}, {0x240, 0x3e0}, {0x8, 0x3}, {0x81, 0x50}, {0xffffffffffffffff, 0x4}, {0x1, 0x80000001}, {0xa, 0x2}, {0x6, 0x9}, {0x6, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0xfffffffffffffff8, 0x7}, {0x8281, 0x3}, {0x25, 0x1}, {0x7, 0x7fff}, {0xc, 0x9}, {0x5, 0xffffffffffffffff}, {0x3, 0x100}, {0xfffffffffffffffd, 0xfff}, {0xfff, 0x7}, {0x8, 0x6}, {0xfffffffffffffff3, 0x10001}, {0xffffffff00000001, 0xfffffffffffffffd}, {0x6, 0x9}, {0xffffffffffffff0d}, {0x7fffffffffffffff, 0xb0}, {0xa2, 0xaec}, {0xe15, 0xfffffffffffffffe}, {0x9, 0x1}, {0x9, 0x2}, {0x9, 0x8}, {0x8000, 0xfffffffffffffffb}, {0x6, 0x9}, {0x6, 0x6a59}, {0x6, 0xd4a6}, {0x8, 0xffffffffffff977f}, {0xbe, 0x7}, {0x400, 0xc360}, {0x0, 0x8}, {0x1, 0x8}, {0x8, 0xda3}, {0x100000001, 0x7}, {0x3, 0x535}, {0x7, 0x100000001}, {0xe2, 0x4}, {0x20000000000, 0x3}, {0x3, 0x401}, {0x2, 0xffffffffffff8ce0}, {0x1, 0x8}, {0xdb32, 0xb}, {0x7, 0x2}, {0x10, 0x8}, {0x1, 0x7fffffffffffffff}, {0x7, 0x9}, {0x200, 0x10000}, {0x1, 0x4}, {0x0, 0x2}, {0x1}, {0x81, 0x4}, {0xfffffffffffffffa, 0x7}, {0x102, 0x3ff}, {0x664a, 0x8}, {0x2}, {0xffffffffffffffff, 0xfffffffffffffff7}, {0x800, 0xa50}, {0x5, 0x1}, {0x2}, {0x1, 0x36a}, {0x8}, {0x3, 0x5}, {0x6, 0x8000000000000000}]}, &(0x7f0000006100)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}], 0x32}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000006340)) ioctl$FIONCLEX(r3, 0x5450) (async) ioctl$FIONCLEX(r3, 0x5450) openat$tun(0xffffffffffffff9c, &(0x7f0000006380), 0x42300, 0x0) recvmsg$can_raw(r8, &(0x7f0000006680)={&(0x7f00000063c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006580)=[{&(0x7f0000006440)=""/111, 0x6f}, {&(0x7f00000064c0)=""/21, 0x15}, {&(0x7f0000006500)=""/122, 0x7a}], 0x3, &(0x7f00000065c0)=""/143, 0x8f}, 0x120) (async) recvmsg$can_raw(r8, &(0x7f0000006680)={&(0x7f00000063c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006580)=[{&(0x7f0000006440)=""/111, 0x6f}, {&(0x7f00000064c0)=""/21, 0x15}, {&(0x7f0000006500)=""/122, 0x7a}], 0x3, &(0x7f00000065c0)=""/143, 0x8f}, 0x120) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000067c0)={'gre0\x00', &(0x7f00000066c0)={'sit0\x00', r6, 0x80, 0x10, 0xe, 0xfffffc00, {{0x29, 0x4, 0x2, 0x9, 0xa4, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x34, 0xdd, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0xb}}, {@loopback, 0x4}, {@empty, 0x7f}, {@private=0xa010101, 0x4}, {@empty, 0x1}, {@multicast2, 0x5}]}, @ra={0x94, 0x4}, @end, @end, @timestamp_prespec={0x44, 0x34, 0xb8, 0x3, 0x1, [{@empty, 0x5}, {@broadcast, 0xfffffff3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x5}, {@empty, 0x9}, {@remote, 0xe8800000}]}, @cipso={0x86, 0x22, 0xfffffffffffffffe, [{0x5, 0xe, "a5f3b7196da48fa21808296c"}, {0x5, 0x7, "93b482a7bf"}, {0x6, 0x3, 'q'}, {0x1, 0x4, "da20"}]}]}}}}}) 411.232503ms ago: executing program 4 (id=3865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0xb0}, 0x1, 0x0, 0x0, 0x20000}, 0xc4) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x168, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x81, 0x8, "3b9b613db0e93d877a04f9c51e0df93e76c84878638e3c4c8b2994a4004b19425844ebde7de35a9153a0516ad25e42e558a37a56423dd6454416a84804477bcd2e3aff59604e39f8c900ba419562ed7e0c20d1cd908b9b2fd7ce103a743f53040012228360cb1dd1c5256a41168a6ab90f7d1dc7709f76be5446cdd277"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x99, 0x8, "4ff6a765f9871d77f4998d102c8ddf4ef0b83e1f8bf282210166221f4fb4587a7116c39e77ad93565d31dc8011bfef60b671bef210d683e0adfce3d53bc5c7e31f8f2a521c4a37171ac138a3ee65c43b2cc756c074f31df5675b13cfee9989e95e377468d78eb10e1cb68a9ab92f935129af071211af062fa76ba3058863cb8bbaecee830332987f23406e7609ab9c8b2a5a78672e"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x168}}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl2\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0x52, 0xfffffeff, {{0x1c, 0x4, 0x2, 0x7, 0x70, 0x64, 0x0, 0x7f, 0x4, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x34, 0x12, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xfff}, {@multicast2, 0xffff}, {@private=0xa010102, 0xfffffffa}, {@multicast1, 0x80000001}, {@broadcast, 0x3}, {@broadcast, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa6, 0x1, 0x3, [{@private=0xa010102, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xe, "10c067daecf8d06a3348b5d3"}]}}}}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x1}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x8}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @var={0xd, 0x0, 0x0, 0xe, 0x2, 0x2}, @union={0x10, 0x7, 0x0, 0x5, 0x0, 0x4, [{0x4, 0x5, 0xa}, {0x2, 0x0, 0x6}, {0x0, 0x2, 0xf3c9}, {0x6, 0x5, 0x2}, {0xa, 0x4, 0x3f1f}, {0x2, 0x5, 0x9}, {0xc, 0x3, 0x3}]}]}, {0x0, [0x61, 0x30, 0x61]}}, &(0x7f0000000a80)=""/189, 0xb9, 0xbd, 0x0, 0x1}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c00)={0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000cc0)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000d00)=r3, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40)={r4}, 0x8) read(r5, &(0x7f0000000d80)=""/66, 0x42) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)='%pS \x00'}, 0x20) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x1, 0x3, 0x1, 0x9, 0xfffffffffffffff0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffefffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000380)='GPL\x00', 0x883, 0xf3, &(0x7f0000001100)=""/243, 0x41000, 0x10, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000001200)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r6, r2, r6]}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000340)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = socket(0xa, 0x2, 0x0) close(r14) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r14, 0x84, 0x21, 0x0, &(0x7f0000000680)) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="2f79e300", @ANYRESDEC=r11, @ANYBLOB="e4ff0e050000340200d5ad9d9f19bd18d6420668fb7b199a29f49ca2e31194118948c45dbd0abd16eeb4c2cfca7f3ecd82519d860084bb00000000ce3bfe2000dd5ce14109c8a36ea58491", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x2004c0c0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r8, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 401.747124ms ago: executing program 2 (id=3866): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[], 0x190) 344.605966ms ago: executing program 2 (id=3867): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x22d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001180)="06ff03076844babeb89eacf008e9", 0x0, 0x6fe0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[@ANYBLOB], 0xfdef) close(0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 268.178355ms ago: executing program 1 (id=3868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 164.349999ms ago: executing program 3 (id=3869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x30, 0x20, 0x301, 0x3, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 141.752879ms ago: executing program 1 (id=3870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000090c000000000000000000140000ff438209843e0666298d3e05b8eb0a264eb9daba81b9", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700000000000a000100aaaaaaaaaabb0000"], 0x48}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x1f, 0x2, &(0x7f0000000b40)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0xea) (async) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7, 0x0}, 0x8) (async, rerun: 64) r7 = socket(0x11, 0x3, 0x0) (rerun: 64) sendmmsg(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000c00)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000000d00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000600)={'wlan1\x00', @random="390979fd459c"}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r10, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000010000000005000000cc53c00effffffff18124000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f85000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @sk_lookup=0x24, r2, 0x8, &(0x7f0000000540)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000640)=[r8, r1, r1], &(0x7f0000000680)=[{0x0, 0x4, 0x4, 0x3}, {0x4, 0x1, 0x0, 0xb}], 0x10, 0x4}, 0x94) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x8003, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x1}, 0x1c) (async, rerun: 32) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x2, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) (async) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x7) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001800130700000000fcdbdf25e0000002000000000000000000000000ac14143d000000000000000000000000000000004c210002000000005c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 92.936816ms ago: executing program 5 (id=3871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071100300007eb6043977750911170000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002300), r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000002200), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000002240)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000002280)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000002300)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000036c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x24040080) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003780)={0x94, r5, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x6c}, @val={0x4, 0x6, {0x8, 0x4, 0x8001, 0xe64}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0xa, {0xb, 0xa3, 0x9, "3b83abfac2d833"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xb, 0xb5, 0xe6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x2, 0x0, 0x0, 0x6, 0x29}}, @void}}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x94}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000002340)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002380)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000003380), 0x0) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000003380)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000003540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000e08000000000000cc554e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000003400)=0xffff1884, 0x4) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f0000000200)={{0x0, 0xb58f, 0x8000000000000001, 0x3, 0x0, 0x3ff, 0x1, 0x9, 0x8, 0x0, 0x1, 0x9, 0x9, 0xffffffffffffffff, 0xdad}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001200)={{r11, 0x0, 0x4, 0x7ff, 0x2, 0x200, 0x2, 0x5, 0x80, 0x400, 0x2, 0xff, 0xc, 0x8e, 0x8e57}}) 89.958353ms ago: executing program 2 (id=3872): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="05090a7010db3fbb8cfa6f0035e7832141386bd9d7be5cd90c8fdd123809ae8b32db03e4f1373a42962b6f48bdad0b8255bde953e067d375a7a66637065c3578", 0x40) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x4076cbba9945d516, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xf}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f00000000c0)={0x30, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 0s ago: executing program 4 (id=3873): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000090000)={0x0, 0x0, &(0x7f0000090040)={&(0x7f0000080000)=ANY=[@ANYBLOB="380e00002400010500000000000000000000000001000000000001"], 0xe38}, 0x1, 0x0, 0x0, 0x81}, 0x0) kernel console output (not intermixed with test programs): team0: Device ipvlan2 is already an upper device of the team interface [ 357.432127][T15510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2489'. [ 357.432155][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 357.443290][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 357.621677][T15516] IPv6: NLM_F_REPLACE set, but no existing node found! [ 357.942933][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2492'. [ 357.943360][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2492'. [ 357.965184][T15527] netlink: 'syz.1.2492': attribute type 3 has an invalid length. [ 357.965237][T15527] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2492'. [ 358.131444][T15529] ip_tables: iptables: counters copy to user failed while replacing table [ 358.483780][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 358.519497][T15541] dvmrp1: left allmulticast mode [ 358.636402][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 358.636425][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 358.640075][T15543] xt_ecn: cannot match TCP bits for non-tcp packets [ 358.821228][T15547] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2499'. [ 358.905047][T15555] netlink: 'syz.2.2500': attribute type 1 has an invalid length. [ 358.905068][T15555] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2500'. [ 359.237474][T15567] xt_addrtype: ipv6 does not support BROADCAST matching [ 359.275212][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 359.523530][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.531822][T15583] pimreg: entered allmulticast mode [ 359.904980][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 359.961620][T15594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2511'. [ 360.075409][T15600] ÿÿÿÿÿÿ: renamed from vlan1 [ 360.491150][T15619] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 360.563628][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.603313][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.895487][T15643] scsi_nl_rcv_msg: discarding partial skb [ 362.643107][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 362.874618][T15690] rxe_eth0 speed is unknown, defaulting to 1000 [ 363.258495][T15711] __nla_validate_parse: 6 callbacks suppressed [ 363.258534][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'. [ 363.597970][T15714] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 363.683105][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 363.811015][T15724] pim6reg: entered allmulticast mode [ 364.160587][T15743] ip_tables: iptables: counters copy to user failed while replacing table [ 364.227169][T15741] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 364.387348][T15746] sctp: [Deprecated]: syz.3.2553 (pid 15746) Use of int in maxseg socket option. [ 364.387348][T15746] Use struct sctp_assoc_value instead [ 364.438134][T15748] can: request_module (can-proto-0) failed. [ 364.560305][T15754] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2554'. [ 364.723510][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 364.792885][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2556'. [ 364.871676][T15754] bond5 (unregistering): Released all slaves [ 365.268432][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2557'. [ 365.380518][T15777] netlink: 'syz.1.2557': attribute type 10 has an invalid length. [ 365.763309][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.849264][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2558'. [ 365.879514][T15783] syzkaller0: entered promiscuous mode [ 365.879536][T15783] syzkaller0: entered allmulticast mode [ 365.901330][T15789] 8021q: VLANs not supported on ip6_vti0 [ 365.919007][T15782] netlink: 'syz.2.2559': attribute type 1 has an invalid length. [ 365.921526][T15794] netlink: NAT attribute has 8 unknown bytes [ 365.921555][T15794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.041647][T15799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2561'. [ 366.357002][T15814] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2564'. [ 366.357661][T15812] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2564'. [ 366.500815][T15819] openvswitch: netlink: IPv6 tunnel dst address is zero [ 366.552437][T15819] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 366.702340][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 366.702463][T15820] ksmbd: Daemon and kernel module version mismatch. ksmbd: 236, kernel module: 1. User-space ksmbd should terminate. [ 366.803198][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.346786][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2569'. [ 367.772713][T15872] gtp1: entered promiscuous mode [ 367.772736][T15872] gtp1: entered allmulticast mode [ 367.843430][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 368.414326][T15894] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 368.417773][T15893] __nla_validate_parse: 1 callbacks suppressed [ 368.417790][T15893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2577'. [ 368.547141][T15894] bond7: (slave veth0_to_bond): Releasing active interface [ 368.547169][T15894] veth0_to_bond: left allmulticast mode [ 368.585324][T15894] bond14: (slave veth0_to_bond): making interface the new active one [ 368.585688][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2576'. [ 368.641675][T15894] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 368.709498][T15900] 8021q: adding VLAN 0 to HW filter on device bond14 [ 368.747366][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 368.749437][T15911] openvswitch: netlink: Message has 8 unknown bytes. [ 368.883073][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.118591][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 369.156116][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 369.266514][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2585'. [ 369.289987][T15936] 8021q: adding VLAN 0 to HW filter on device .` [ 369.345933][T15936] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 369.346634][T15936] mac80211_hwsim hwsim11 ÿ: left promiscuous mode [ 369.346655][T15936] A link change request failed with some changes committed already. Interface ÿ may have been left with an inconsistent configuration, please check. [ 369.389366][ T3342] bond2: (slave .`): link status definitely up, 20000 Mbps full duplex [ 369.405358][ T3342] bond2: (slave .`): making interface the new active one [ 369.409229][ T3342] bond2: active interface up! [ 369.696030][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2591'. [ 369.696056][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2591'. [ 369.819004][T15951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2589'. [ 369.869530][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 369.923269][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.947290][T15949] tipc: Enabling of bearer rejected, media not registered [ 370.963217][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.003114][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.190014][T16050] 0ªX¹¦Dö»: entered promiscuous mode [ 372.190050][T16050] 0ªX¹¦Dö»: left allmulticast mode [ 372.242071][T16053] netlink: 'syz.2.2618': attribute type 5 has an invalid length. [ 372.369700][T16053] geneve4: entered promiscuous mode [ 372.369724][T16053] geneve4: entered allmulticast mode [ 372.374585][T16051] ip_tables: iptables: counters copy to user failed while replacing table [ 372.403396][ T42] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 372.405522][ T56] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 372.407033][ T56] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 372.407124][ T56] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 372.433480][T16058] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 372.971271][T16083] netlink: Conntrack attr has 8 unknown bytes [ 372.971304][T16083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.043472][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 373.877748][T16121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.083225][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 375.076591][T16185] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 375.123079][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 375.160171][T16184] __nla_validate_parse: 16 callbacks suppressed [ 375.160189][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.185218][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.185401][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.185570][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.185738][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.185906][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.186079][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.186474][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.186640][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.186832][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 375.277268][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803330e000: rx timeout, send abort [ 375.277617][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802620cc00: rx timeout, send abort [ 375.277991][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803330e000: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 375.279883][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802620cc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 375.985365][T16219] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 376.163333][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 376.276410][T16235] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 376.381149][T16237] netlink: 'syz.0.2669': attribute type 3 has an invalid length. [ 376.564005][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c7f400: rx timeout, send abort [ 376.564255][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056c7f400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 376.778998][T16253] netlink: 'syz.0.2673': attribute type 6 has an invalid length. [ 377.149755][T16273] netlink: 'syz.4.2681': attribute type 2 has an invalid length. [ 377.203643][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 377.237071][T16270] macvtap1: entered promiscuous mode [ 377.237112][T16270] hsr0: entered promiscuous mode [ 377.261319][T16270] macvtap1: entered allmulticast mode [ 377.261340][T16270] hsr0: entered allmulticast mode [ 377.261351][T16270] hsr_slave_0: entered allmulticast mode [ 377.261365][T16270] hsr_slave_1: entered allmulticast mode [ 377.294994][T16283] netlink: 'syz.4.2684': attribute type 1 has an invalid length. [ 377.657962][T16297] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 377.828187][T16304] x_tables: duplicate underflow at hook 1 [ 378.243405][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 378.392483][T16331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.488496][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.488610][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.805359][T16348] 0: reclassify loop, rule prio 0, protocol 03 [ 378.853763][T16348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.007697][T16342] syzkaller0: entered promiscuous mode [ 379.007721][T16342] syzkaller0: entered allmulticast mode [ 379.080693][T16365] xt_time: unknown flags 0x68 [ 379.121266][T16352] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 379.283324][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 380.328104][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 381.363173][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 381.877051][T16397] netlink: 'syz.1.2714': attribute type 2 has an invalid length. [ 382.403263][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 383.443157][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 383.890874][T16397] : entered promiscuous mode [ 383.972400][T16402] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 384.191345][T16413] __nla_validate_parse: 38 callbacks suppressed [ 384.191365][T16413] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2719'. [ 384.210318][T16412] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2719'. [ 384.308623][T16426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2722'. [ 384.420579][T16431] ovs-s: entered promiscuous mode [ 384.483374][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 384.564362][T16440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.757525][T16449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'. [ 384.757871][T16449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'. [ 384.854818][T16456] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2730'. [ 384.861494][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 385.017973][T16465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2733'. [ 385.329837][T16479] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2735'. [ 385.331734][T16484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2735'. [ 385.524185][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 385.981779][T16516] ip_tables: iptables: counters copy to user failed while replacing table [ 386.318327][T16525] block nbd1: Unsupported socket: should be TCP or UNIX. [ 386.563088][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 386.890772][T16555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.011693][T16564] netlink: 'syz.0.2762': attribute type 9 has an invalid length. [ 387.140814][T16572] netlink: 'syz.1.2763': attribute type 4 has an invalid length. [ 387.603345][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.643298][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 389.127684][T16689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.332855][T16699] netlink: 'syz.1.2792': attribute type 1 has an invalid length. [ 389.332875][T16699] __nla_validate_parse: 21 callbacks suppressed [ 389.332887][T16699] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2792'. [ 389.455747][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2793'. [ 389.455947][T16702] openvswitch: netlink: Message has 4 unknown bytes. [ 389.638789][T16718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2799'. [ 389.674835][T16718] syzkaller1: entered promiscuous mode [ 389.674856][T16718] syzkaller1: entered allmulticast mode [ 389.683261][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 389.708590][T16718] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2799'. [ 389.748364][T16723] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2800'. [ 389.748449][T16723] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2800'. [ 390.256294][T16755] netlink: 'syz.3.2808': attribute type 4 has an invalid length. [ 390.436253][T16761] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2809'. [ 390.723679][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 390.778659][T16770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.863357][T16771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.030287][T16773] netlink: 'syz.3.2813': attribute type 8 has an invalid length. [ 391.121453][T16779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.146428][T16779] netlink: 'syz.4.2812': attribute type 2 has an invalid length. [ 391.401965][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 391.576598][T16796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2818'. [ 391.749246][T16796] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2818'. [ 391.763469][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 392.073591][T16810] wg2: entered promiscuous mode [ 392.073612][T16810] wg2: entered allmulticast mode [ 392.581397][T16829] dvmrp0: entered allmulticast mode [ 392.594436][T16825] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 392.803687][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 393.106551][T16856] sctp: [Deprecated]: syz.0.2831 (pid 16856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.106551][T16856] Use struct sctp_sack_info instead [ 393.112862][T16856] netlink: 'syz.0.2831': attribute type 10 has an invalid length. [ 393.173680][T16856] team0: Port device dummy0 added [ 393.352138][T16856] team0: Port device dummy0 removed [ 393.655154][T16876] netlink: 'syz.0.2835': attribute type 30 has an invalid length. [ 393.778746][T16881] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 393.846493][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 394.114943][T16892] syzkaller1: entered promiscuous mode [ 394.114998][T16892] syzkaller1: entered allmulticast mode [ 394.392303][T16901] __nla_validate_parse: 10 callbacks suppressed [ 394.392324][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 394.511509][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 394.614961][T16911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 394.637836][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 394.706260][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 394.763228][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'. [ 394.883952][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 395.118476][T16935] xt_cgroup: invalid path, errno=-2 [ 395.174094][T16943] siw: device registration error -23 [ 395.327895][T16948] netlink: 'syz.0.2855': attribute type 64 has an invalid length. [ 395.327918][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 395.648891][T16966] xt_hashlimit: size too large, truncated to 1048576 [ 395.665220][T16966] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2860'. [ 395.745189][T16972] tipc: Enabled bearer , priority 0 [ 395.787722][T16973] syzkaller0: MTU too low for tipc bearer [ 395.787789][T16973] tipc: Disabling bearer [ 395.855462][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 395.855499][T16979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.865649][T16975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.923129][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 396.301128][T17002] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 396.301180][T17002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2869'. [ 396.301345][T17002] NCSI netlink: No device for ifindex 0 [ 396.328588][T17002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.332701][T17003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.554655][T17012] netlink: 'syz.2.2872': attribute type 2 has an invalid length. [ 396.554767][T17012] netlink: 'syz.2.2872': attribute type 2 has an invalid length. [ 396.910326][T17021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 396.963320][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 397.375718][T17041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.377721][T17041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.378793][T17041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.380265][T17041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.381313][T17041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.466175][ T4935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.468350][ T4935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.469475][ T4935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.474526][ T4935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.504441][ T4935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.678670][T17055] ipt_REJECT: ECHOREPLY no longer supported. [ 397.720935][T17055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2883'. [ 397.951917][T17057] bond8: entered promiscuous mode [ 397.952051][T17057] bond8: entered allmulticast mode [ 397.958250][T17057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 398.003436][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 398.206031][T17076] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 398.358728][T17082] gtp2: entered promiscuous mode [ 398.358749][T17082] gtp2: entered allmulticast mode [ 398.394298][T17091] netlink: 'syz.2.2887': attribute type 2 has an invalid length. [ 398.394338][T17091] netlink: 'syz.2.2887': attribute type 2 has an invalid length. [ 398.558540][T17097] netlink: 'syz.2.2887': attribute type 2 has an invalid length. [ 398.558564][T17097] netlink: 'syz.2.2887': attribute type 2 has an invalid length. [ 398.636265][T17039] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.730914][T17107] ip_tables: iptables: counters copy to user failed while replacing table [ 398.835781][T17111] block nbd0: reconnected socket [ 398.900423][T17114] netlink: 'syz.3.2891': attribute type 12 has an invalid length. [ 398.954422][ T4935] block nbd0: Receive control failed (result -32) [ 399.043491][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 399.155037][ T56] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 49853 - 0 [ 399.155102][ T56] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 399.227161][T17106] rxe_eth0 speed is unknown, defaulting to 1000 [ 399.496089][T17138] __nla_validate_parse: 7 callbacks suppressed [ 399.496109][T17138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2896'. [ 399.501766][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 399.502810][T17140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 399.608751][ T4935] Bluetooth: hci5: command tx timeout [ 399.695128][T17139] bond9: Invalid ad_actor_system MAC address. [ 399.695163][T17139] bond9: option ad_actor_system: invalid value (1) [ 399.705785][T17139] bond9 (unregistering): Released all slaves [ 399.846017][T17140] bond9: Invalid ad_actor_system MAC address. [ 399.846038][T17140] bond9: option ad_actor_system: invalid value (1) [ 399.852331][T17140] bond9 (unregistering): Released all slaves [ 400.076862][T17107] rxe_eth0 speed is unknown, defaulting to 1000 [ 400.083741][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 400.090457][T17157] ip_tables: iptables: counters copy to user failed while replacing table [ 400.387308][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2903'. [ 400.437065][T17176] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2902'. [ 400.456685][T17176] unsupported nlmsg_type 40 [ 400.491939][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 400.526260][T17179] netlink: 'syz.3.2899': attribute type 29 has an invalid length. [ 400.858111][T17199] sctp: [Deprecated]: syz.3.2906 (pid 17199) Use of int in maxseg socket option. [ 400.858111][T17199] Use struct sctp_assoc_value instead [ 400.862497][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.878776][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.886752][T17039] bridge_slave_0: entered allmulticast mode [ 400.912568][T17039] bridge_slave_0: entered promiscuous mode [ 400.945307][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.945417][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.945565][T17039] bridge_slave_1: entered allmulticast mode [ 400.947517][T17039] bridge_slave_1: entered promiscuous mode [ 400.989511][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2907'. [ 401.108946][T17202] IPv6: sit2: Disabled Multicast RS [ 401.123462][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 401.167242][T17039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.199397][T17039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.478738][T17213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2910'. [ 401.494745][T17039] team0: Port device team_slave_0 added [ 401.498013][T17039] team0: Port device team_slave_1 added [ 401.684429][ T4935] Bluetooth: hci5: command tx timeout [ 401.745316][T17039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.745334][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.745356][T17039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.747973][T17039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.747987][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.748009][T17039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.991680][T17224] lo: entered promiscuous mode [ 401.991700][T17224] lo: left allmulticast mode [ 402.026035][T17224] tunl0: entered promiscuous mode [ 402.031481][T17224] gre0: entered promiscuous mode [ 402.119490][T17224] gretap0: entered promiscuous mode [ 402.164013][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.374914][T17224] ip_vti0: entered promiscuous mode [ 402.467604][T17039] hsr_slave_0: entered promiscuous mode [ 402.468574][T17039] hsr_slave_1: entered promiscuous mode [ 402.469260][T17039] debugfs: 'hsr0' already exists in 'hsr' [ 402.469277][T17039] Cannot create hsr debugfs directory [ 402.870118][T17039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.870151][T17039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.923834][T17240] : left allmulticast mode [ 402.923892][T17240] : left allmulticast mode [ 402.923926][T17240] bond_slave_1: left allmulticast mode [ 402.923958][T17240] : left promiscuous mode [ 402.923985][T17240] : left promiscuous mode [ 402.924389][T17240] bond_slave_1: left promiscuous mode [ 402.925591][T17240] bridge0: port 4() entered disabled state [ 402.948049][T17240] team0: Port device dummy0 removed [ 402.951037][T17240] bridge_slave_0: left allmulticast mode [ 402.951090][T17240] bridge_slave_0: left promiscuous mode [ 402.951422][T17240] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.968159][T17240] veth1_to_bridge: left allmulticast mode [ 402.968197][T17240] veth1_to_bridge: left promiscuous mode [ 402.970267][T17240] bridge0: port 3(veth1_to_bridge) entered disabled state [ 403.005679][T17240] bridge_slave_1: left allmulticast mode [ 403.005722][T17240] bridge_slave_1: left promiscuous mode [ 403.006075][T17240] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.040545][T17240] : (slave 30): Releasing backup interface [ 403.054305][T17240] : (slave bond_slave_1): Releasing backup interface [ 403.062718][T17240] team0: Port device team_slave_0 removed [ 403.081894][T17240] team0: Port device team_slave_1 removed [ 403.082267][T17240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.096555][T17240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.098805][T17240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 403.203413][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.427243][T17258] netlink: 'syz.1.2921': attribute type 8 has an invalid length. [ 403.428556][T17258] netlink: 197076 bytes leftover after parsing attributes in process `syz.1.2921'. [ 403.429930][T17258] netlink: 197076 bytes leftover after parsing attributes in process `syz.1.2921'. [ 403.616811][T17039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.616847][T17039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.763900][ T4935] Bluetooth: hci5: command tx timeout [ 403.913622][T17039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.913685][T17039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.147231][T17039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.147290][T17039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.187255][T17280] netlink: 'syz.4.2926': attribute type 12 has an invalid length. [ 404.243432][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 404.464254][T17293] macsec0: entered promiscuous mode [ 404.553306][T17039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.570887][T17039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.571810][T17039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.592220][T17039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.601280][T17039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.614243][T17039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.630870][T17039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.645158][T17039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.790096][T17039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.821062][T17039] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.834086][T17306] ip_tables: iptables: counters copy to user failed while replacing table [ 404.838978][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.839081][T10315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.894392][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.894582][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.010540][T17315] __nla_validate_parse: 32 callbacks suppressed [ 405.010560][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2938'. [ 405.119586][T17327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.283255][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 405.502086][T17342] netlink: 'syz.2.2942': attribute type 1 has an invalid length. [ 405.502105][T17342] netlink: 'syz.2.2942': attribute type 2 has an invalid length. [ 405.542857][T17342] netlink: 'syz.2.2942': attribute type 1 has an invalid length. [ 405.545671][T17342] netlink: 'syz.2.2942': attribute type 2 has an invalid length. [ 405.821651][T17354] TC_ACT_REPEAT abuse ? [ 405.823072][T17354] TC_ACT_REPEAT abuse ? [ 405.844338][ T4935] Bluetooth: hci5: command tx timeout [ 405.847814][T17354] TC_ACT_REPEAT abuse ? [ 405.869563][T17354] TC_ACT_REPEAT abuse ? [ 406.533366][T17376] netlink: 'syz.2.2949': attribute type 1 has an invalid length. [ 406.570641][T17327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.701174][T17383] netlink: 'syz.3.2950': attribute type 24 has an invalid length. [ 406.725812][T17379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 406.777598][T17385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2949'. [ 406.926103][T17384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2950'. [ 407.035290][T17377] bond9: (slave geneve5): making interface the new active one [ 407.037036][T17377] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 407.117678][T17385] 8021q: adding VLAN 0 to HW filter on device bond9 [ 407.133756][T17403] Bluetooth: MGMT ver 1.23 [ 407.154891][T10311] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 407.225874][ T1175] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 407.304680][T10308] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 407.355400][T17039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.491922][T17039] veth0_vlan: entered promiscuous mode [ 407.532916][T17039] veth1_vlan: entered promiscuous mode [ 407.623983][T17039] veth0_macvtap: entered promiscuous mode [ 407.629878][T17039] veth1_macvtap: entered promiscuous mode [ 407.690498][T17039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.732692][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2957'. [ 407.749370][T17039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.864350][T10309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.884163][T10315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.886537][T10309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.886913][T10309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.129175][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2959'. [ 408.129201][T17430] block nbd1: Unsupported socket: should be TCP or UNIX. [ 408.152216][T10315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.152254][T10315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.262588][T10309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.262627][T10309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.403456][ C0] net_ratelimit: 64 callbacks suppressed [ 408.403582][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 408.526801][T17452] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 408.764631][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 409.156787][T17477] netlink: 'syz.0.2969': attribute type 1 has an invalid length. [ 409.156829][T17477] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2969'. [ 409.162515][T17477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.272245][T17485] gre2: entered promiscuous mode [ 409.272267][T17485] gre2: entered allmulticast mode [ 409.307810][T17481] netlink: 'syz.4.2967': attribute type 11 has an invalid length. [ 409.443280][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 409.739681][T17493] bond10: entered allmulticast mode [ 409.740054][T17493] 8021q: adding VLAN 0 to HW filter on device bond10 [ 409.925213][T17041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.941639][T17041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.952129][T17041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.964800][T17041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.966742][T17041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.339503][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'. [ 410.420031][T17517] block nbd0: Unsupported socket: should be TCP or UNIX. [ 410.478323][T17522] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2979'. [ 410.483397][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.582568][T17525] C: renamed from lo [ 410.602685][T17525] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 410.649801][T17525] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 410.736053][T17533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2982'. [ 410.736079][T17533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2982'. [ 410.736093][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 410.849931][T17534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2982'. [ 410.998369][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'. [ 411.061490][T17498] rxe_eth0 speed is unknown, defaulting to 1000 [ 411.417946][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2989'. [ 411.451159][T17557] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 411.467157][T17557] bond1 (unregistering): Released all slaves [ 411.523551][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.811947][T17576] netlink: 'syz.4.2992': attribute type 3 has an invalid length. [ 411.830013][T17576] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2992'. [ 411.844199][T17576] ip_tables: iptables: counters copy to user failed while replacing table [ 411.855802][T17578] netlink: 'syz.0.2994': attribute type 64 has an invalid length. [ 411.855836][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 411.886346][T17576] ip_tables: iptables: counters copy to user failed while replacing table [ 411.913327][T17581] netlink: 'syz.4.2992': attribute type 3 has an invalid length. [ 412.084654][ T4935] Bluetooth: hci0: command tx timeout [ 412.563381][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 412.661781][T17625] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 412.891351][T17498] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.891457][T17498] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.891596][T17498] bridge_slave_0: entered allmulticast mode [ 412.916127][T17498] bridge_slave_0: entered promiscuous mode [ 412.939603][T17498] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.939826][T17498] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.940104][T17498] bridge_slave_1: entered allmulticast mode [ 412.966439][T17498] bridge_slave_1: entered promiscuous mode [ 413.119932][T17644] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 413.209970][T17644] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 413.221784][T17498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.259063][T17644] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 413.259279][T17644] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 413.259506][T17644] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 413.272903][T17498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.370366][T17498] team0: Port device team_slave_0 added [ 413.379917][T17498] team0: Port device team_slave_1 added [ 413.435247][T17498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.435271][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.435293][T17498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.437158][T17498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.437172][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.437194][T17498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.603253][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.638929][T17498] hsr_slave_0: entered promiscuous mode [ 413.640026][T17498] hsr_slave_1: entered promiscuous mode [ 413.640794][T17498] debugfs: 'hsr0' already exists in 'hsr' [ 413.640812][T17498] Cannot create hsr debugfs directory [ 413.710983][T17676] openvswitch: netlink: Message has 8 unknown bytes. [ 413.711015][T17676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.163859][ T4935] Bluetooth: hci0: command tx timeout [ 414.396296][T17498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.396330][T17498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.634664][T17498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.634699][T17498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.643551][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.755699][T17714] smc: removing ib device rxe0 [ 414.938520][T17498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.938555][T17498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.979840][T17714] smbdirect: ib_dev[rxe0] removed [ 415.238149][T17498] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.238183][T17498] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.683477][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.080133][T17498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.110803][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.122894][T17498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.153603][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.210557][T17752] __nla_validate_parse: 11 callbacks suppressed [ 416.210575][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'. [ 416.239085][T17498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.244391][ T4935] Bluetooth: hci0: command tx timeout [ 416.262873][T17745] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 416.265660][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3032'. [ 416.265690][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3032'. [ 416.291518][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.293675][T17498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.312530][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.358359][T17757] bond0: Error: CAN devices cannot be enslaved [ 416.724171][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.811873][T17498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.825755][T17775] validate_nla: 22 callbacks suppressed [ 416.825804][T17775] netlink: 'syz.0.3038': attribute type 2 has an invalid length. [ 416.916419][T17776] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3037'. [ 417.026849][T17498] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.111470][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.111576][T10315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.214720][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.214949][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.535872][T17791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3041'. [ 417.729852][T17794] netlink: 'syz.4.3042': attribute type 4 has an invalid length. [ 417.763947][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 417.843986][T17798] netlink: 'syz.4.3044': attribute type 9 has an invalid length. [ 418.186994][T17808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3045'. [ 418.335611][ T4935] Bluetooth: hci0: command tx timeout [ 418.804784][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.942406][T17833] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3053'. [ 418.956310][T17833] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 419.103666][T17845] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 419.291939][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3055'. [ 419.339054][T17842] x_tables: unsorted underflow at hook 1 [ 419.365169][T17857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3057'. [ 419.428491][T17857] netlink: 'syz.2.3057': attribute type 2 has an invalid length. [ 419.430052][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 419.436589][T17857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.578486][T17864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.589516][T17498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.843604][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.877154][T17877] netlink: 'syz.4.3063': attribute type 21 has an invalid length. [ 419.877590][T17498] veth0_vlan: entered promiscuous mode [ 419.901734][T17498] veth1_vlan: entered promiscuous mode [ 420.091615][T17498] veth0_macvtap: entered promiscuous mode [ 420.111068][T17498] veth1_macvtap: entered promiscuous mode [ 420.540948][T17498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.559572][T17498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.595653][T10315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.654026][T17905] netlink: 'syz.0.3071': attribute type 1 has an invalid length. [ 420.806747][ T1175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.806800][ T1175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.806831][ T1175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.883206][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.042726][T10312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.042784][T10312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.117632][T10309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.117670][T10309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.217859][T17920] netlink: 'syz.1.3076': attribute type 4 has an invalid length. [ 421.536159][T17934] ip_tables: iptables: counters copy to user failed while replacing table [ 421.536504][T17935] ip_tables: iptables: counters copy to user failed while replacing table [ 421.688331][T17041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.690144][T17041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.692172][T17041] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.721721][T17041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.722570][T17041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.923457][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 422.817817][T17970] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 422.921234][T17970] __nla_validate_parse: 8 callbacks suppressed [ 422.921272][T17970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3087'. [ 423.286504][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.300957][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.302002][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.311379][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 423.311942][T17979] block nbd1: server does not support multiple connections per device. [ 423.312502][T17979] block nbd1: shutting down sockets [ 423.767783][T17041] Bluetooth: hci3: command tx timeout [ 423.880659][T17941] infiniband rxe0: set active [ 423.880681][T17941] infiniband rxe0: added rxe_eth0 [ 423.938890][T17941] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 423.939057][T17941] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 423.939094][T17941] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 424.004391][ C0] net_ratelimit: 1 callbacks suppressed [ 424.004434][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 424.030388][T10751] rxe_eth0 speed is unknown, defaulting to 1000 [ 424.030487][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3094'. [ 424.065849][T17941] RDS/IB: rxe0: added [ 424.065950][T17941] smc: adding ib device rxe0 with port count 1 [ 424.065993][T17941] smc: ib device rxe0 port 1 has no pnetid [ 424.066121][T10747] rxe_eth0 speed is unknown, defaulting to 1000 [ 424.076240][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 424.197750][T18007] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3097'. [ 424.213507][T18005] veth0: entered promiscuous mode [ 424.257040][T18004] veth0: left promiscuous mode [ 424.330770][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'. [ 424.366667][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 425.043286][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.216467][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.487284][T18034] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3104'. [ 425.774665][T18043] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 425.774688][T18043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3105'. [ 425.774702][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 425.844225][T17041] Bluetooth: hci3: command tx timeout [ 425.934694][T18046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.935585][T18046] netlink: Unknown nat attribute (0) [ 425.935613][T18046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.055162][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 426.083311][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.188805][T18052] netlink: NAT attribute has 8 unknown bytes [ 426.188885][T18052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.235979][T18053] netlink: 'syz.1.3107': attribute type 5 has an invalid length. [ 426.294055][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 426.328779][T18052] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 426.363461][T18057] Bluetooth: MGMT ver 1.23 [ 426.371923][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.123461][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 427.188511][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.629354][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.923527][ T4935] Bluetooth: hci3: command tx timeout [ 428.163522][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 428.237288][T18123] x_tables: unsorted entry at hook 1 [ 428.237364][T18123] x_tables: unsorted entry at hook 1 [ 428.237428][T18123] x_tables: unsorted entry at hook 1 [ 428.237491][T18123] x_tables: unsorted entry at hook 1 [ 428.237554][T18123] x_tables: unsorted entry at hook 1 [ 428.237648][T18123] x_tables: unsorted entry at hook 1 [ 428.237710][T18123] x_tables: unsorted entry at hook 1 [ 428.237778][T18123] x_tables: unsorted entry at hook 1 [ 428.237839][T18123] x_tables: unsorted entry at hook 1 [ 428.237899][T18123] x_tables: unsorted entry at hook 1 [ 428.272767][T18123] bridge0: port 1(batadv_slave_0) entered blocking state [ 428.273889][T18123] bridge0: port 1(batadv_slave_0) entered disabled state [ 428.274069][T18123] batadv_slave_0: entered allmulticast mode [ 428.281066][T18123] batadv_slave_0: entered promiscuous mode [ 428.282981][T18123] bridge0: port 1(batadv_slave_0) entered blocking state [ 428.283088][T18123] bridge0: port 1(batadv_slave_0) entered forwarding state [ 428.295180][T18123] netlink: 'syz.1.3127': attribute type 1 has an invalid length. [ 428.461231][T18134] __nla_validate_parse: 2 callbacks suppressed [ 428.461285][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 428.461316][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3130'. [ 428.496841][T18130] bond9 (unregistering): Released all slaves [ 428.501134][T18134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3130'. [ 428.519679][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.522200][T18134] netlink: 'syz.2.3130': attribute type 1 has an invalid length. [ 428.522234][T18134] netlink: 'syz.2.3130': attribute type 3 has an invalid length. [ 428.522246][T18134] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3130'. [ 428.597961][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 428.598000][T18138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3130'. [ 428.627559][T18137] xt_NETMAP: bad rangesize 37. [ 428.837738][T17941] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.898106][T18142] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 428.899404][T18140] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3132'. [ 429.203282][ C0] net_ratelimit: 1 callbacks suppressed [ 429.203316][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 429.461145][T18157] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3138'. [ 429.480787][T18157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3138'. [ 429.496924][T18157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3138'. [ 429.640419][T18162] pimreg: entered allmulticast mode [ 430.004080][ T4935] Bluetooth: hci3: command tx timeout [ 430.223407][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.223672][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.223908][T17941] bridge_slave_0: entered allmulticast mode [ 430.227345][T17941] bridge_slave_0: entered promiscuous mode [ 430.233901][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.234117][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.234328][T17941] bridge_slave_1: entered allmulticast mode [ 430.237662][T17941] bridge_slave_1: entered promiscuous mode [ 430.243620][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 430.400179][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.428220][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.497492][T17941] team0: Port device team_slave_0 added [ 430.509936][T18201] pimreg3: entered allmulticast mode [ 430.520326][T17941] team0: Port device team_slave_1 added [ 430.521173][T18201] openvswitch: netlink: Key type 265 is out of range max 32 [ 430.632257][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.632274][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.632296][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.704256][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.704291][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.704331][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.947007][T17941] hsr_slave_0: entered promiscuous mode [ 430.951106][T17941] hsr_slave_1: entered promiscuous mode [ 430.951822][T17941] debugfs: 'hsr0' already exists in 'hsr' [ 430.951841][T17941] Cannot create hsr debugfs directory [ 431.238755][T18239] ip_tables: iptables: counters copy to user failed while replacing table [ 431.283285][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 431.812177][T18252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 432.047582][T17941] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.047618][T17941] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.266491][T17941] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.266525][T17941] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.323680][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 432.400187][T17941] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.400220][T17941] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.542898][T17941] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.546670][T17941] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.727744][T18273] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 432.728036][T18273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 433.127915][T17941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.161178][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.172616][T17941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.206478][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.209332][T17941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.233994][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.235604][T17941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.255516][T17941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.363533][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 433.599362][T17941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.648448][T17941] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.679485][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.679656][T10312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.720557][T18310] __nla_validate_parse: 6 callbacks suppressed [ 433.720575][T18310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3175'. [ 433.720776][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.720946][T10309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.873346][T18319] xt_socket: unknown flags 0x4 [ 433.874182][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 433.899723][T18314] 8021q: adding VLAN 0 to HW filter on device bond11 [ 434.123577][T18327] syzkaller1: entered promiscuous mode [ 434.123601][T18327] syzkaller1: entered allmulticast mode [ 434.403254][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 435.109690][T18345] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3182'. [ 435.167518][T17941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.243583][T18349] ip_tables: iptables: counters copy to user failed while replacing table [ 435.446024][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 435.558353][T17941] veth0_vlan: entered promiscuous mode [ 435.574248][T17941] veth1_vlan: entered promiscuous mode [ 435.626545][T17941] veth0_macvtap: entered promiscuous mode [ 435.632031][T17941] veth1_macvtap: entered promiscuous mode [ 435.659068][T17941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.674029][T17941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.694814][T10315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.694908][T10315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.695002][T10315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.695068][T10315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.157408][T18293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.295409][T10312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.295463][T10312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.437004][ T3385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.437026][ T3385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.483239][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 436.843630][T18396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3192'. [ 437.146781][T17041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 437.150121][T17041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 437.156736][T17041] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 437.182820][T17041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 437.191801][T17041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.523421][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 437.660150][T18425] netlink: 'syz.4.3198': attribute type 4 has an invalid length. [ 437.660172][T18425] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3198'. [ 437.998345][T18401] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.447225][T18451] syzkaller0: entered promiscuous mode [ 438.447250][T18451] syzkaller0: entered allmulticast mode [ 438.466939][T18451] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3203'. [ 438.563375][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 439.216254][T18456] netlink: 'syz.4.3204': attribute type 1 has an invalid length. [ 439.288362][ T4935] Bluetooth: hci2: command tx timeout [ 439.603332][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 439.948355][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.948406][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.643316][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.081770][T18440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.271248][T18467] batman_adv: batadv0: Adding interface: syzkaller0 [ 441.271266][T18467] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.271291][T18467] batman_adv: batadv0: Interface activated: syzkaller0 [ 441.367152][ T4935] Bluetooth: hci2: command tx timeout [ 441.425310][T18466] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 441.456508][T18466] batman_adv: batadv0: Removing interface: syzkaller0 [ 441.498626][T18480] ip6t_frag: unknown flags 6 [ 441.511829][T18480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3208'. [ 441.610060][T18401] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.610254][T18401] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.610388][T18401] bridge_slave_0: entered allmulticast mode [ 441.612180][T18401] bridge_slave_0: entered promiscuous mode [ 441.618348][T18401] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.618636][T18401] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.618809][T18401] bridge_slave_1: entered allmulticast mode [ 441.620599][T18401] bridge_slave_1: entered promiscuous mode [ 441.683569][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.740913][T18401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.753533][T18401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.860985][T18401] team0: Port device team_slave_0 added [ 441.869215][T18401] team0: Port device team_slave_1 added [ 441.966385][T18401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.966403][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.966426][T18401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.975844][T18401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.975859][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.975881][T18401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.322384][T18401] hsr_slave_0: entered promiscuous mode [ 442.337257][T18401] hsr_slave_1: entered promiscuous mode [ 442.338784][T18401] debugfs: 'hsr0' already exists in 'hsr' [ 442.338819][T18401] Cannot create hsr debugfs directory [ 442.407089][T18508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3214'. [ 442.407906][T18507] gre1: entered promiscuous mode [ 442.680418][T18514] netlink: 'syz.4.3216': attribute type 64 has an invalid length. [ 442.680693][T18514] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.681293][T18514] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.723105][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.809486][T18401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 49853 - 0 [ 442.809519][T18401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 442.809544][T18401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 442.909513][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'. [ 443.010225][T18401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 49853 - 0 [ 443.010288][T18401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 443.010328][T18401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 443.172892][T18401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 49853 - 0 [ 443.173090][T18401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 443.173116][T18401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 443.391101][T18535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3221'. [ 443.391542][T18535] netlink: 'syz.3.3221': attribute type 21 has an invalid length. [ 443.391560][T18535] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.443620][ T4935] Bluetooth: hci2: command tx timeout [ 443.463298][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 443.764445][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 443.790792][T18552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3227'. [ 443.879671][T18401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.891713][T18401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.892847][T18401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.914481][T18401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.915692][T18401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.920303][T18401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.921494][T18401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.951946][T18401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.971379][T18557] xt_hashlimit: size too large, truncated to 1048576 [ 444.027338][T18564] xt_hashlimit: size too large, truncated to 1048576 [ 444.100085][T18401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.132845][T18567] netlink: 'syz.3.3229': attribute type 10 has an invalid length. [ 444.144812][T18401] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.162535][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.162709][ T8490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.197868][T18567] team0: Device wg2 is of different type [ 444.220949][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.221037][ T8490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.305559][T18564] syzkaller0: entered promiscuous mode [ 444.305610][T18564] syzkaller0: entered allmulticast mode [ 444.778896][T18582] netlink: NAT attribute has 4 unknown bytes [ 444.778929][T18582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.803121][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 444.809174][T18583] Bluetooth: hci0: unsupported parameter 5134 [ 444.809209][T18583] Bluetooth: hci0: unsupported parameter 8192 [ 444.809237][T18583] Bluetooth: hci0: unsupported parameter 5134 [ 444.809249][T18583] Bluetooth: hci0: unsupported parameter 8192 [ 445.298161][T18612] openvswitch: netlink: Multiple metadata blocks provided [ 445.322876][T18615] openvswitch: netlink: Multiple metadata blocks provided [ 445.527530][ T4935] Bluetooth: hci2: command tx timeout [ 445.584435][T18401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.665745][T18401] veth0_vlan: entered promiscuous mode [ 445.680621][T18401] veth1_vlan: entered promiscuous mode [ 445.730466][T18401] veth0_macvtap: entered promiscuous mode [ 445.745225][T18401] veth1_macvtap: entered promiscuous mode [ 445.770720][T18401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.801405][T18401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.843360][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 445.848697][T10312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.897964][ T8490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.928017][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 445.963529][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.967009][ T1175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.968329][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 446.093207][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 446.100091][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 446.216873][T10306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.216929][T10306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.257939][T18645] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 446.302075][T18644] netlink: 'syz.4.3245': attribute type 1 has an invalid length. [ 446.361740][T10306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.361766][T10306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.366987][T17041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.379343][T17041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.382554][T17041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.406931][T17041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.411437][T17041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 446.883388][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 447.106742][T18674] sctp: [Deprecated]: syz.4.3249 (pid 18674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.106742][T18674] Use struct sctp_sack_info instead [ 447.326432][T18647] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.429277][T18685] xt_limit: Overflow, try lower: 536871034/127 [ 447.453414][T18685] netlink: 'syz.4.3252': attribute type 11 has an invalid length. [ 447.453437][T18685] __nla_validate_parse: 1 callbacks suppressed [ 447.453448][T18685] netlink: 3800 bytes leftover after parsing attributes in process `syz.4.3252'. [ 447.761580][T18689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3253'. [ 447.929071][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 448.296923][T18704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3258'. [ 448.315383][T18704] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3258'. [ 448.493704][ T4935] Bluetooth: hci4: command tx timeout [ 448.669128][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.669315][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.669443][T18647] bridge_slave_0: entered allmulticast mode [ 448.672476][T18647] bridge_slave_0: entered promiscuous mode [ 448.707381][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.707560][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.707709][T18647] bridge_slave_1: entered allmulticast mode [ 448.709663][T18647] bridge_slave_1: entered promiscuous mode [ 448.769852][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.772762][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.827119][T18647] team0: Port device team_slave_0 added [ 448.830192][T18647] team0: Port device team_slave_1 added [ 448.904822][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.904839][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.904862][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.906708][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.906721][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.906742][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.928115][T18731] openvswitch: netlink: IPv4 frag type 96 is out of range max 2 [ 449.185871][T18647] hsr_slave_0: entered promiscuous mode [ 449.186875][T18647] hsr_slave_1: entered promiscuous mode [ 449.188070][T18647] debugfs: 'hsr0' already exists in 'hsr' [ 449.188089][T18647] Cannot create hsr debugfs directory [ 449.601659][T18750] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3269'. [ 449.757135][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 449.861057][T18761] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 449.895979][T18647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.913273][T18758] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3272'. [ 449.926850][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.927696][T18647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.954702][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.957221][T18647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.981263][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.982086][T18647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.000939][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.003354][ C0] net_ratelimit: 1 callbacks suppressed [ 450.003383][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 450.192692][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.249214][T18647] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.295125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.295296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.328269][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.328414][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.563546][ T4935] Bluetooth: hci4: command tx timeout [ 450.692620][T18798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3282'. [ 450.692836][T18798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3282'. [ 450.744153][T18798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3282'. [ 451.044583][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 451.202581][ T3385] IPVS: starting estimator thread 0... [ 451.323136][T18826] IPVS: using max 29 ests per chain, 69600 per kthread [ 451.325791][T18829] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 451.402810][T18821] team0: Port device team_slave_0 removed [ 452.052064][T18647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.084520][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 452.644900][ T4935] Bluetooth: hci4: command tx timeout [ 452.944002][T18893] __nla_validate_parse: 5 callbacks suppressed [ 452.944021][T18893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3304'. [ 453.050312][T18647] veth0_vlan: entered promiscuous mode [ 453.081657][T18647] veth1_vlan: entered promiscuous mode [ 453.123447][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 453.232526][T18647] veth0_macvtap: entered promiscuous mode [ 453.257461][T18647] veth1_macvtap: entered promiscuous mode [ 453.285863][T18647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.333394][T18647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.377037][T18916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3310'. [ 453.381642][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3310'. [ 453.538838][T18927] ip_tables: iptables: counters copy to user failed while replacing table [ 453.553807][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.553936][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.554005][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.554072][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.656187][T18932] syzkaller1: entered promiscuous mode [ 453.656244][T18932] syzkaller1: entered allmulticast mode [ 453.978176][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.978198][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.981222][T18943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3315'. [ 454.163410][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 454.323885][T18958] ip_tables: iptables: counters copy to user failed while replacing table [ 454.340196][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.340231][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.625452][T18967] netlink: 'syz.2.3324': attribute type 9 has an invalid length. [ 454.627077][T18968] netlink: 'syz.2.3324': attribute type 9 has an invalid length. [ 454.632598][T18972] openvswitch: netlink: EtherType 500 is less than min 600 [ 454.724590][ T4935] Bluetooth: hci4: command tx timeout [ 454.737718][T18973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3324'. [ 454.738215][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3243'. [ 454.738249][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3243'. [ 454.982867][T17041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 454.992282][T17041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 455.002761][T17041] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 455.022131][T17041] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 455.028801][T17041] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 455.203853][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 455.294941][T18997] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 455.671688][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3333'. [ 455.671715][T19007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3333'. [ 455.671729][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3333'. [ 456.063192][T19025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.197311][T18986] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.243120][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 456.390819][T19036] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 457.124449][T17041] Bluetooth: hci6: command tx timeout [ 457.283343][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 457.318527][T18986] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.318678][T18986] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.318812][T18986] bridge_slave_0: entered allmulticast mode [ 457.322603][T18986] bridge_slave_0: entered promiscuous mode [ 457.356733][T18986] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.356958][T18986] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.357103][T18986] bridge_slave_1: entered allmulticast mode [ 457.358934][T18986] bridge_slave_1: entered promiscuous mode [ 457.427614][T18986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.430899][T18986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.491033][T18986] team0: Port device team_slave_0 added [ 457.499857][T18986] team0: Port device team_slave_1 added [ 457.535147][T19072] xt_hashlimit: size too large, truncated to 1048576 [ 457.569808][T18986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.569824][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.569846][T18986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.571691][T18986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.571704][T18986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.571725][T18986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.870448][T18986] hsr_slave_0: entered promiscuous mode [ 457.871425][T18986] hsr_slave_1: entered promiscuous mode [ 457.872156][T18986] debugfs: 'hsr0' already exists in 'hsr' [ 457.872174][T18986] Cannot create hsr debugfs directory [ 457.954208][T19082] __nla_validate_parse: 3 callbacks suppressed [ 457.954254][T19082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3352'. [ 458.019378][T19082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3352'. [ 458.323421][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 458.462669][T19109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3357'. [ 458.529951][T19113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3357'. [ 458.545999][T18986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.546067][T18986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.784716][T18986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.784750][T18986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.931683][T19133] netlink: 'syz.2.3365': attribute type 1 has an invalid length. [ 459.037300][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3365'. [ 459.081123][T18986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.081189][T18986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.203447][T17041] Bluetooth: hci6: command tx timeout [ 459.277689][T19149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3368'. [ 459.327302][T19150] netlink: Failed to add helper -22 [ 459.327355][T19150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.361562][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 459.363324][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 459.425752][T19134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.450858][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3365'. [ 459.464059][T19134] bond1: (slave bond2): making interface the new active one [ 459.467338][T19134] bond1: (slave bond2): Enslaving as an active interface with an up link [ 459.594975][T19154] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 459.595206][T19149] : renamed from bond0 (while UP) [ 459.715984][T18986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.716019][T18986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.794768][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 460.125701][T19185] ip_tables: iptables: counters copy to user failed while replacing table [ 460.263559][T18986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.288949][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.291579][T18986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.312866][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.322308][T18986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.345474][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.347666][T18986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 460.368347][T18986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.404657][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 460.927028][T18986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.004298][T19232] netlink: 'syz.4.3384': attribute type 1 has an invalid length. [ 461.046773][T19230] ipt_ECN: cannot use operation on non-tcp rule [ 461.105337][T18986] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.129431][ T3385] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.129552][ T3385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.165889][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.165982][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.284265][T17041] Bluetooth: hci6: command tx timeout [ 461.344154][T18986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.344246][T18986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.443275][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 462.263536][T19285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3398'. [ 462.440569][T19298] Cannot find add_set index 0 as target [ 462.483322][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 462.772540][T19320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 462.802013][T18986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.981893][T18986] veth0_vlan: entered promiscuous mode [ 463.041546][T18986] veth1_vlan: entered promiscuous mode [ 463.121643][T18986] veth0_macvtap: entered promiscuous mode [ 463.141114][T18986] veth1_macvtap: entered promiscuous mode [ 463.279640][T18986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.318222][T19336] __nla_validate_parse: 5 callbacks suppressed [ 463.318275][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3407'. [ 463.342039][T18986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.364794][T17041] Bluetooth: hci6: command tx timeout [ 463.406168][T10306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.407537][T10306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.465583][T10306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.523290][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 463.588492][T10312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.595733][T19340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3409'. [ 463.640905][T19347] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3411'. [ 463.640927][T19347] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3411'. [ 463.640937][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 463.640945][T19347] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3411'. [ 463.641108][T19347] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3411'. [ 463.641122][T19347] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3411'. [ 463.641133][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 463.641142][T19347] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3411'. [ 463.641296][T19347] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3411'. [ 463.641309][T19347] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3411'. [ 463.641320][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 463.641482][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 463.641659][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 463.641811][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 463.785252][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 463.785440][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 463.785610][T19347] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 464.013949][T10307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.013971][T10307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.201585][ T8490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.201608][ T8490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.563200][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.695422][T19394] syzkaller0: entered promiscuous mode [ 464.695443][T19394] syzkaller0: entered allmulticast mode [ 464.768747][T19391] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 465.170077][T19404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.281518][T19404] ipvlan2: entered allmulticast mode [ 465.281539][T19404] bond0: entered allmulticast mode [ 465.603056][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 465.868243][T19438] netlink: NAT attribute has 8 unknown bytes [ 465.868322][T19438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.219383][T19455] geneve2: entered promiscuous mode [ 466.242712][T19455] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 466.270835][T19455] 0ªX¹¦Dö»: entered allmulticast mode [ 466.302219][T19461] syzkaller0: entered promiscuous mode [ 466.302239][T19461] syzkaller0: entered allmulticast mode [ 466.643086][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 466.968555][T19493] bond0: (slave ip6tnl0): refused to change device type [ 467.100813][T19501] No such timeout policy "syz0" [ 467.158459][T19504] Bluetooth: hci0: unsupported parameter 5135 [ 467.158482][T19504] Bluetooth: hci0: unsupported parameter 8192 [ 467.158493][T19504] Bluetooth: hci0: unsupported parameter 5135 [ 467.158504][T19504] Bluetooth: hci0: unsupported parameter 8192 [ 467.468538][T19519] sctp: [Deprecated]: syz.2.3453 (pid 19519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.468538][T19519] Use struct sctp_sack_info instead [ 467.683081][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 467.729314][T19526] ip_tables: iptables: counters copy to user failed while replacing table [ 468.630506][T19553] __nla_validate_parse: 111 callbacks suppressed [ 468.630550][T19553] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3464'. [ 468.631535][T19553] netlink: 872 bytes leftover after parsing attributes in process `syz.4.3464'. [ 468.724563][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 468.886509][T19556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3465'. [ 468.887070][T19561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3465'. [ 469.763126][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 470.060011][T19571] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 470.803213][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 471.797332][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'. [ 471.797386][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'. [ 471.831691][T19583] validate_nla: 24 callbacks suppressed [ 471.831709][T19583] netlink: 'syz.3.3471': attribute type 2 has an invalid length. [ 471.849234][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 471.880145][T19588] syz_tun: entered promiscuous mode [ 471.908015][T19594] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3471'. [ 471.909976][T19595] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3471'. [ 471.927780][T19583] : entered promiscuous mode [ 471.939937][T19582] syz_tun: left promiscuous mode [ 472.319182][T19615] batadv_slave_1: entered promiscuous mode [ 472.320597][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3479'. [ 472.320718][T19606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.358759][T19606] batadv_slave_1 (unregistering): left promiscuous mode [ 472.361737][T19606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.883088][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 472.885064][T19637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3488'. [ 472.932731][T19641] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.266208][T19657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.677111][T19672] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 473.714696][T19672] __nla_validate_parse: 2 callbacks suppressed [ 473.714724][T19672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3496'. [ 473.822355][T19678] ieee802154 phy0 wpan0: encryption failed: -126 [ 473.880288][T19680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.880611][T19680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.880933][T19680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.882629][T19680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.923442][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 473.933343][T19680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.933691][T19680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 474.766742][T19712] team0: Device ipvlan0 failed to register rx_handler [ 475.527250][T19752] IPv6: sit1: Disabled Multicast RS [ 475.819366][T19770] netlink: 'syz.1.3529': attribute type 21 has an invalid length. [ 475.819442][T19770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3529'. [ 475.974095][T19779] netlink: 'syz.3.3531': attribute type 2 has an invalid length. [ 475.993433][T19775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3531'. [ 476.003064][ C0] net_ratelimit: 60 callbacks suppressed [ 476.003100][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 476.272521][T19785] xt_l2tp: v2 doesn't support IP mode [ 476.342635][T19790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 476.346974][T19790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 476.347335][T19790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 476.347659][T19790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 476.357152][T19790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 476.357512][T19790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 476.357842][T19790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 477.044318][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 477.165896][T19826] SET target dimension over the limit! [ 477.188646][T19828] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 478.093024][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 479.133049][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 480.173016][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 481.213055][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 482.253156][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 483.293046][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 484.333028][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 485.373620][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 486.413034][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 487.453039][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 488.483059][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 489.523744][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 490.563179][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 491.603684][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 492.653132][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 493.683689][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 494.723553][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 495.773141][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 496.813032][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 497.853025][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 498.883637][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 499.933134][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 500.973048][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 501.365013][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.365128][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.013874][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 503.053041][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 504.093053][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.133043][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 506.173023][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 507.213081][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 508.253142][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 509.283203][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 510.324789][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 511.373049][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 512.413043][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 513.453026][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 514.493016][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 515.533075][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 516.573061][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 517.603535][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 518.654869][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 519.692999][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 520.723088][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 521.763664][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 522.813119][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 523.843092][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 524.893077][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 525.932998][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 526.975732][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 528.013031][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 529.053067][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 530.093018][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 531.123461][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 532.163559][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 533.203351][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 534.253127][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 535.293163][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 536.333077][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 537.373096][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 538.403499][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 539.283049][T17041] Bluetooth: hci5: command 0x0406 tx timeout [ 539.453153][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 540.493010][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 541.533022][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 542.563572][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 542.599236][T19846] ip6t_rt: too many addresses specified [ 543.010846][T19870] __nla_validate_parse: 62 callbacks suppressed [ 543.010879][T19870] netlink: 15051 bytes leftover after parsing attributes in process `syz.3.3556'. [ 543.049484][T19876] netlink: 14923 bytes leftover after parsing attributes in process `syz.3.3556'. [ 543.049512][T19876] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3556'. [ 543.218833][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3558'. [ 543.288843][T19883] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3558'. [ 543.420009][T19892] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3563'. [ 543.603417][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 543.670481][T19911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3566'. [ 544.120264][T19920] netlink: 'syz.2.3569': attribute type 1 has an invalid length. [ 544.216254][T19920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.254082][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 544.260770][T19924] bond3: (slave geneve3): making interface the new active one [ 544.288701][T19924] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 544.643003][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 544.991921][T19966] netlink: 'syz.3.3580': attribute type 26 has an invalid length. [ 545.190054][T19973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3583'. [ 545.326661][T19973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.353660][T19977] netlink: 'syz.4.3583': attribute type 1 has an invalid length. [ 545.367794][T19973] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3583'. [ 545.683052][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 545.690961][T19979] macvtap0: entered allmulticast mode [ 545.691014][T19979] veth0_macvtap: entered allmulticast mode [ 546.474618][T20014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 546.494257][T20018] netlink: NAT attribute has 4 unknown bytes [ 546.494287][T20018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.545042][T20014] ipip0: entered allmulticast mode [ 546.723010][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 546.781127][T20024] netlink: 'syz.3.3596': attribute type 1 has an invalid length. [ 546.864563][T20024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.907704][T20025] bond1: (slave macvlan0): making interface the new active one [ 546.926040][T20025] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 547.111411][T20039] Dead loop on virtual device ip6_vti0 (net 278), fix it urgently! [ 547.337282][T20052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.504555][T20060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.782627][T20066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.877837][T20070] dvmrp0: entered allmulticast mode [ 548.249026][T20089] netlink: 'syz.5.3615': attribute type 3 has an invalid length. [ 548.492048][T20099] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 548.496228][T20099] bond3 (unregistering): Released all slaves [ 548.787722][T20119] __nla_validate_parse: 7 callbacks suppressed [ 548.787740][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3622'. [ 548.802992][ C0] net_ratelimit: 3 callbacks suppressed [ 548.803023][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 549.843020][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 550.235745][T20137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3629'. [ 550.323868][T20142] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3631'. [ 550.344605][T20142] netlink: 'syz.3.3631': attribute type 10 has an invalid length. [ 550.345019][T20142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.354022][T20140] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.3630'. [ 550.449643][T20145] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3632'. [ 550.553354][T20145] team0 (unregistering): Port device team_slave_0 removed [ 550.577243][T20145] team0 (unregistering): Port device team_slave_1 removed [ 550.883628][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 551.933195][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 552.963478][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 553.351946][T20165] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3637'. [ 553.369120][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3637'. [ 553.379604][T20167] netlink: 'syz.2.3638': attribute type 7 has an invalid length. [ 553.379637][T20167] netlink: 'syz.2.3638': attribute type 8 has an invalid length. [ 553.504266][T20171] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 553.557753][T20179] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 553.570465][T20172] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3637'. [ 553.636067][T20165] netlink: 'syz.1.3637': attribute type 3 has an invalid length. [ 553.868096][T20194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3644'. [ 554.003107][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 554.011444][T20204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3649'. [ 554.199076][T20209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.201910][T20209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3652'. [ 554.598925][T20227] netlink: 'syz.3.3658': attribute type 5 has an invalid length. [ 554.675988][T20233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3657'. [ 554.703241][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 554.779958][T20234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3659'. [ 554.993551][T20233] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 555.043578][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 555.147435][T20256] netlink: 'syz.5.3664': attribute type 1 has an invalid length. [ 555.449075][T20269] netlink: 'syz.5.3666': attribute type 11 has an invalid length. [ 555.468884][T20264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3663'. [ 555.469661][T20264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.471308][T20264] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3663'. [ 555.871923][T20281] ip6erspan0: entered allmulticast mode [ 556.083178][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 556.088844][T20288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3674'. [ 556.100476][T20287] bridge0: port 3(batadv1) entered blocking state [ 556.100677][T20287] bridge0: port 3(batadv1) entered disabled state [ 556.115070][T20287] batadv1: entered allmulticast mode [ 556.132669][T20287] batadv1: entered promiscuous mode [ 556.161640][T20279] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.363316][T20292] netlink: 'syz.1.3675': attribute type 30 has an invalid length. [ 556.493778][T20292] bond1: option arp_missed_max: invalid value (0) [ 556.493836][T20292] bond1: option arp_missed_max: allowed values 1 - 255 [ 556.511765][T20292] bond1 (unregistering): Released all slaves [ 556.545645][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 556.545674][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 556.600764][T20317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3681'. [ 556.618861][T20320] veth0: entered promiscuous mode [ 556.912261][T20319] veth0: left promiscuous mode [ 557.146955][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 557.519453][T20354] hsr_slave_1 (unregistering): left promiscuous mode [ 557.738132][T20374] syzkaller1: entered promiscuous mode [ 557.738155][T20374] syzkaller1: entered allmulticast mode [ 557.762518][T20374] 0: reclassify loop, rule prio 0, protocol 03 [ 558.077237][T20389] gretap0: entered promiscuous mode [ 558.128096][T20389] vlan2: entered promiscuous mode [ 558.173055][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 558.250462][T20380] bridge0: entered promiscuous mode [ 558.250521][T20380] bridge0: entered allmulticast mode [ 558.594800][T20414] netlink: 'syz.4.3705': attribute type 2 has an invalid length. [ 558.594823][T20414] netlink: 'syz.4.3705': attribute type 2 has an invalid length. [ 558.787971][T20412] bond5: option downdelay: invalid value (18446744073709551615) [ 558.788031][T20412] bond5: option downdelay: allowed values 0 - 2147483647 [ 558.873662][T20412] bond5 (unregistering): Released all slaves [ 559.203021][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 559.558376][T20452] lo: entered promiscuous mode [ 559.577175][T20452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.765890][T20373] Bluetooth: hci2: command 0x0406 tx timeout [ 559.765955][T20373] Bluetooth: hci3: command 0x0406 tx timeout [ 560.221980][T20481] __nla_validate_parse: 6 callbacks suppressed [ 560.222001][T20481] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.3716'. [ 560.263614][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 560.442590][T20488] GUP no longer grows the stack in syz.1.3717 (20488): 200000003000-20000000a000 (200000001000) [ 560.442652][T20488] CPU: 1 UID: 0 PID: 20488 Comm: syz.1.3717 Not tainted syzkaller #0 PREEMPT(full) [ 560.442674][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.442694][T20488] Call Trace: [ 560.442775][T20488] [ 560.442844][T20488] dump_stack_lvl+0xe8/0x150 [ 560.442977][T20488] __get_user_pages+0x23b6/0x2750 [ 560.443038][T20488] ? lock_acquire+0x115/0x350 [ 560.443132][T20488] ? __gup_longterm_locked+0xc3b/0x15c0 [ 560.443170][T20488] __gup_longterm_locked+0xd52/0x15c0 [ 560.443203][T20488] ? lock_acquire+0x115/0x350 [ 560.443242][T20488] gup_fast_fallback+0x1d92/0x20e0 [ 560.443305][T20488] ? __pfx_gup_fast_fallback+0x10/0x10 [ 560.443336][T20488] ? lock_acquire+0x115/0x350 [ 560.443354][T20488] ? is_valid_gup_args+0x11f/0x200 [ 560.443383][T20488] ? get_user_pages_fast+0x4d/0xb0 [ 560.443411][T20488] __iov_iter_get_pages_alloc+0x378/0xa40 [ 560.443528][T20488] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 560.443566][T20488] iov_iter_get_pages2+0x5e/0xa0 [ 560.443599][T20488] __se_sys_vmsplice+0x7b5/0x1660 [ 560.443648][T20488] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 560.443671][T20488] ? __pfx_futex_wait+0x10/0x10 [ 560.443781][T20488] do_syscall_64+0x166/0x520 [ 560.443870][T20488] ? trace_irq_disable+0x3b/0x140 [ 560.443902][T20488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.443937][T20488] ? clear_bhb_loop+0x70/0xc0 [ 560.443961][T20488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.443980][T20488] RIP: 0033:0x7f8e1099e559 [ 560.444009][T20488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.444026][T20488] RSP: 002b:00007f8e1186f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 560.444057][T20488] RAX: ffffffffffffffda RBX: 00007f8e10c25fa0 RCX: 00007f8e1099e559 [ 560.444072][T20488] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 0000000000000006 [ 560.444084][T20488] RBP: 00007f8e10a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 560.444095][T20488] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 560.444107][T20488] R13: 00007f8e10c26038 R14: 00007f8e10c25fa0 R15: 00007ffddce7f0c8 [ 560.444140][T20488] [ 560.545792][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3717'. [ 560.717454][T20496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'. [ 560.953632][T20506] netlink: 'syz.3.3725': attribute type 1 has an invalid length. [ 561.098615][T20507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.101018][T20507] bond2: (slave bond3): making interface the new active one [ 561.101616][T20507] bond2: (slave bond3): Enslaving as an active interface with an up link [ 561.286049][T20521] syzkaller1: entered promiscuous mode [ 561.286070][T20521] syzkaller1: entered allmulticast mode [ 561.287060][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 561.289397][T20523] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 561.394896][T20530] netlink: 'syz.5.3732': attribute type 1 has an invalid length. [ 561.534093][T20530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.635200][T20535] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 561.684629][T20543] vlan0: entered promiscuous mode [ 561.709889][T20543] team0: Port device vlan0 added [ 562.130237][T20570] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 562.154165][T20570] bond2: (slave lo): Enslaving as an active interface with an up link [ 562.159661][T20570] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 562.215508][T20565] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3742'. [ 562.323205][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 562.827052][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.827968][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.013886][T20597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 563.137997][T20602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3753'. [ 563.279822][T20602] veth2: entered promiscuous mode [ 563.279844][T20602] veth2: entered allmulticast mode [ 563.373166][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 563.395664][T20608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 563.646539][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3756'. [ 564.042552][T20623] tunl0: entered promiscuous mode [ 564.065359][T20623] gre0: entered promiscuous mode [ 564.095303][T20623] erspan0: entered promiscuous mode [ 564.101834][T20623] ip_vti0: entered promiscuous mode [ 564.217726][T20651] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3765'. [ 564.401887][T20660] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3766'. [ 564.403186][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 564.796615][T20672] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 564.879511][T20679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3771'. [ 564.885483][T10312] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.885581][T10312] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.885644][T10312] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.885690][T10312] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.379380][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 565.379445][T20697] netlink: 'syz.3.3777': attribute type 30 has an invalid length. [ 565.403978][T10312] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.404645][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 565.404707][T20697] netlink: 'syz.3.3777': attribute type 30 has an invalid length. [ 565.443023][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 565.454359][T10312] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.466089][T10312] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.470577][T10312] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.061295][T20714] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 566.483064][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 566.582628][T20735] netlink: 'syz.4.3783': attribute type 1 has an invalid length. [ 566.847317][T20735] bridge4: entered promiscuous mode [ 567.255738][T20761] netlink: 'syz.1.3790': attribute type 30 has an invalid length. [ 567.341798][T20761] netlink: 'syz.1.3790': attribute type 3 has an invalid length. [ 567.358561][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3789'. [ 567.397221][T20771] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 567.461714][T20773] pim6reg: entered allmulticast mode [ 567.515191][T20773] pim6reg: left allmulticast mode [ 567.522998][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 567.672758][T20782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3795'. [ 567.673571][ T1175] IPVS: starting estimator thread 0... [ 567.764517][T20784] IPVS: using max 27 ests per chain, 64800 per kthread [ 568.284583][T20811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3803'. [ 568.331007][T20808] vxcan0: tx address claim with dest, not broadcast [ 568.428265][T20816] netlink: 'syz.3.3805': attribute type 2 has an invalid length. [ 568.440992][T20816] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3805'. [ 568.563094][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 569.287519][T20839] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3811'. [ 569.296163][T20839] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3811'. [ 569.296358][T20839] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3811'. [ 569.332548][T20843] IPv6: sit2: Disabled Multicast RS [ 569.368782][T17041] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 569.495430][T20847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3813'. [ 569.612992][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 569.712759][T20868] netlink: 'syz.5.3820': attribute type 1 has an invalid length. [ 570.653018][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 570.871840][T20924] __nla_validate_parse: 5 callbacks suppressed [ 570.871861][T20924] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3828'. [ 571.302670][T20947] Cannot find del_set index 0 as target [ 571.308017][T20947] openvswitch: netlink: Message has 8 unknown bytes. [ 571.528589][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'. [ 571.532583][T20962] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 571.554135][T20962] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3839'. [ 571.683009][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 572.144898][T21000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3844'. [ 572.258660][T21004] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3845'. [ 572.723174][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 573.221681][T21019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3848'. [ 573.248460][T21019] netlink: 'syz.4.3848': attribute type 10 has an invalid length. [ 573.248488][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 573.297828][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 573.337118][T21019] bond5: Invalid ad_actor_system MAC address. [ 573.337137][T21019] bond5: option ad_actor_system: invalid value (1) [ 573.338967][T21019] bond5 (unregistering): Released all slaves [ 573.773186][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 574.259144][T20947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.619042][T21031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3851'. [ 574.634209][T21033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3851'. [ 574.813105][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 574.817751][T21029] sit3: entered promiscuous mode [ 574.817773][T21029] sit3: entered allmulticast mode [ 575.124134][T17041] Bluetooth: hci4: command 0x0406 tx timeout [ 575.377560][T21058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.400218][T21058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.461680][T21062] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 575.471342][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.471444][ T8490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.567348][T10312] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.567488][T10312] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.567603][T10312] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.587155][T10315] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.843096][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 576.150129][T21098] __nla_validate_parse: 2 callbacks suppressed [ 576.150148][T21098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3870'. [ 576.171323][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 576.244654][ T31] INFO: task syz.0.3156:18230 blocked for more than 143 seconds. [ 576.244694][ T31] Not tainted syzkaller #0 [ 576.244720][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.244728][ T31] task:syz.0.3156 state:D stack:27136 pid:18230 tgid:18225 ppid:17039 task_flags:0x400140 flags:0x00080002 [ 576.244827][ T31] Call Trace: [ 576.244851][ T31] [ 576.244882][ T31] __schedule+0x17db/0x58f0 [ 576.245088][ T31] ? __pfx___schedule+0x10/0x10 [ 576.245151][ T31] ? schedu ** replaying previous printk message ** [ 576.245151][ T31] ? schedule+0x90/0x2b0 [ 576.245207][ T31] schedule+0x164/0x2b0 [ 576.245247][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.245281][ T31] __mutex_lock+0x7c1/0x1550 [ 576.245338][ T31] ? __mutex_lock+0x5d4/0x1550 [ 576.245378][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 576.245545][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.245584][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 576.245643][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 576.245732][ T31] ? do_syscall_64+0x166/0x520 [ 576.245770][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.245832][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 576.245900][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 576.245969][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 576.246029][ T31] ? trace_kmalloc+0x2a/0xf0 [ 576.246093][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 576.246134][ T31] ? __nla_parse+0x40/0x60 [ 576.246173][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 576.246322][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 576.246392][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 576.246461][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 576.259824][ T31] ? bpf_lsm_capable+0x9/0x20 [ 576.259903][ T31] ? security_capable+0x7e/0x2c0 [ 576.260065][ T31] genl_rcv_msg+0x614/0x7a0 [ 576.260129][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.260184][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 576.260258][ T31] netlink_rcv_skb+0x226/0x4a0 [ 576.260314][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.260358][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.260427][ T31] ? down_read+0x2be/0x330 [ 576.260483][ T31] genl_rcv+0x28/0x40 [ 576.260525][ T31] netlink_unicast+0x8ef/0xa80 [ 576.260612][ T31] netlink_sendmsg+0x813/0xb40 [ 576.260675][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.260722][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 576.260812][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.260849][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 576.260978][ T31] ____sys_sendmsg+0x54e/0x850 [ 576.261036][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.261082][ T31] ? import_iovec+0x73/0xa0 [ 576.261139][ T31] ___sys_sendmsg+0x2a5/0x360 [ 576.261174][ T31] ? __lock_acquire+0x747/0x2de0 [ 576.261232][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.261272][ T31] ? futex_wait+0x2a2/0x390 [ 576.261366][ T31] ? __fget_files+0x2a/0x420 [ 576.261409][ T31] ? __fget_files+0x3a2/0x420 [ 576.261468][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 576.261508][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.261598][ T31] do_syscall_64+0x166/0x520 [ 576.261636][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.261670][ T31] ? clear_bhb_loop+0x70/0xc0 [ 576.261725][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.261759][ T31] RIP: 0033:0x7fc143f9e559 [ 576.261792][ T31] RSP: 002b:00007fc144eea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.261828][ T31] RAX: ffffffffffffffda RBX: 00007fc144226180 RCX: 00007fc143f9e559 [ 576.261857][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 576.261869][ T31] RBP: 00007fc144035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 576.261896][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.261923][ T31] R13: 00007fc144226218 R14: 00007fc144226180 R15: 00007ffdf6e7d088 [ 576.269265][ T31] [ 576.269466][ T31] [ 576.269466][ T31] Showing all locks held in the system: [ 576.269494][ T31] locks held by kworker/0:0/9: 3, on CPU#0: [ 576.269593][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 576.269751][ T31] #1: ffffc900000e7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 576.269849][ T31] #2: ffff88803595e250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 576.270014][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 576.270079][ T31] #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 576.270160][ T31] #1: ffffffff9bd4be38 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 576.270348][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 576.270378][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 576.270511][ T31] locks held by getty/5374: 2, on CPU#0: [ 576.270545][ T31] #0: ffff88803765a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 576.270708][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 576.270818][ T31] locks held by kworker/u8:13/8490: 3, last CPU#0: [ 576.270843][ T31] #0: ffff88803459d140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 576.270938][ T31] #1: ffffc9000642fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 576.271035][ T31] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 576.271138][ T31] locks held by syz-executor/17941: 4, last CPU#1: [ 576.271166][ T31] #0: ffffffff8fe36570 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 576.271260][ T31] #1: ffff88807ec34080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 576.271335][ T31] #2: ffff888028227180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 576.283714][ T31] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 576.283812][ T31] locks held by syz.0.3156/18226: 2, on CPU#1: [ 576.283842][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.283938][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 576.284024][ T31] locks held by syz.0.3156/18230: 2, on CPU#1: [ 576.284050][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.284144][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 576.284343][ T31] locks held by syz.2.3872/21093: 2, last CPU#1: [ 576.284371][ T31] #0: ffff88807ec32800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 576.284466][ T31] #1: ffff888075322070 (&anon_vma->rwsem){++++}-{4:4}, at: validate_mm+0x1f2/0x4f0 [ 576.284564][ T31] locks held by syz.2.3872/21097: 1, on CPU#1: [ 576.284577][ T31] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 576.284669][ T31] locks held by syz.3.3869/21096: 2, last CPU#0: [ 576.284700][ T31] #0: ffffffff917bf030 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 576.289785][ T31] #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 576.289878][ T31] locks held by syz.1.3870/21099: 1, on CPU#1: [ 576.289907][ T31] #0: ffff88804ac38260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_tcp_setsockopt+0x351/0x1f80 [ 576.290078][ T31] locks held by syz.1.3870/21103: 2, last CPU#0: [ 576.290108][ T31] #0: ffff888042ff9c60 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x6b0 [ 576.290198][ T31] #1: ffff88804ac38260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_splice_read+0x15d/0x950 [ 576.290310][ T31] locks held by syz.5.3871/21095: 1, last CPU#0: [ 576.290339][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x116/0x500 [ 576.290430][ T31] [ 576.290436][ T31] ============================================= [ 576.290436][ T31] [ 576.290464][ T31] NMI backtrace for cpu 0 [ 576.290475][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.290496][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.290507][ T31] Call Trace: [ 576.290514][ T31] [ 576.290522][ T31] dump_stack_lvl+0xe8/0x150 [ 576.290556][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 576.290616][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.290646][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 576.290676][ T31] sys_info+0x135/0x170 [ 576.290725][ T31] watchdog+0xfd7/0x1030 [ 576.290759][ T31] ? watchdog+0x1c7/0x1030 [ 576.290785][ T31] kthread+0x38b/0x480 [ 576.290803][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.290820][ T31] ? __pfx_kthread+0x10/0x10 [ 576.290840][ T31] ret_from_fork+0x514/0xb70 [ 576.290874][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.290891][ T31] ? __switch_to+0xc89/0x1420 [ 576.290919][ T31] ? __pfx_kthread+0x10/0x10 [ 576.290938][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.290970][ T31] [ 576.291052][ T31] Sending NMI from CPU 0 to CPUs 1: [ 576.291124][ C1] NMI backtrace for cpu 1 [ 576.291137][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 576.291158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.291169][ C1] RIP: 0010:preempt_count_add+0x47/0x140 [ 576.291202][ C1] Code: 13 48 c7 c0 40 55 9f 9b 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 b8 00 00 00 83 3d 93 48 0a 1a 00 75 12 65 48 8b 05 59 03 01 13 <0f> b6 c0 3d f5 00 00 00 73 59 65 48 8b 05 47 03 01 13 39 c7 75 42 [ 576.291218][ C1] RSP: 0018:ffffc90000157898 EFLAGS: 00000046 [ 576.291235][ C1] RAX: 8000000000000002 RBX: 0000000000000899 RCX: ffffffff9b9f5503 [ 576.291250][ C1] RDX: 0000000000000101 RSI: ffffffff8c6ddb60 RDI: 0000000000000001 [ 576.291263][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 576.291275][ C1] R10: dffffc0000000000 R11: ffffffff8be776c0 R12: 1ffffffff37a9821 [ 576.291290][ C1] R13: 00000000ffffffff R14: 0000012ca7e46c46 R15: dffffc0000000000 [ 576.291304][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 576.291321][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.291334][ C1] CR2: 00007f8e117ebd58 CR3: 000000005db6c000 CR4: 00000000003526f0 [ 576.291351][ C1] Call Trace: [ 576.291358][ C1] [ 576.291367][ C1] delay_tsc+0x67/0xd0 [ 576.291396][ C1] wait_for_lsr+0x147/0x2f0 [ 576.291427][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 576.291453][ C1] serial8250_console_write+0xa7e/0x1200 [ 576.291479][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 576.291506][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 576.291532][ C1] ? __schedule+0x17f1/0x58f0 [ 576.291561][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 576.291602][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 576.291630][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 576.291661][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 576.291683][ C1] nbcon_kthread_func+0x679/0x880 [ 576.291709][ C1] ? nbcon_kthread_func+0x163/0x880 [ 576.291729][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 576.291755][ C1] ? __kthread_parkme+0x71/0x1f0 [ 576.291785][ C1] ? __kthread_parkme+0x199/0x1f0 [ 576.291816][ C1] kthread+0x38b/0x480 [ 576.291835][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 576.291855][ C1] ? __pfx_kthread+0x10/0x10 [ 576.291875][ C1] ret_from_fork+0x514/0xb70 [ 576.291910][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 576.291928][ C1] ? __switch_to+0xc89/0x1420 [ 576.291957][ C1] ? __pfx_kthread+0x10/0x10 [ 576.291976][ C1] ret_from_fork_asm+0x1a/0x30 [ 576.292003][ C1] [ 576.311916][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 577.379996][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.389094][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.399139][ T31] Call Trace: [ 577.402405][ T31] [ 577.405322][ T31] vpanic+0x56d/0xa60 [ 577.409305][ T31] ? __pfx___schedule+0x10/0x10 [ 577.414143][ T31] ? __pfx_vpanic+0x10/0x10 [ 577.418640][ T31] ? irqentry_exit+0x218/0x920 [ 577.423398][ T31] panic+0xc5/0xd0 [ 577.427111][ T31] ? __pfx_panic+0x10/0x10 [ 577.431526][ T31] watchdog+0x1030/0x1030 [ 577.435853][ T31] ? watchdog+0x1c7/0x1030 [ 577.440262][ T31] kthread+0x38b/0x480 [ 577.444315][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.448977][ T31] ? __pfx_kthread+0x10/0x10 [ 577.453552][ T31] ret_from_fork+0x514/0xb70 [ 577.458133][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.463225][ T31] ? __switch_to+0xc89/0x1420 [ 577.467894][ T31] ? __pfx_kthread+0x10/0x10 [ 577.472472][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.477235][ T31] [ 577.480529][ T31] Kernel Offset: disabled [ 577.484845][ T31] Rebooting in 86400 seconds..