last executing test programs: 4.74147669s ago: executing program 1 (id=4016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.734316358s ago: executing program 2 (id=4017): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x22, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0xffffffff, 0x9, 0x4444, 0x5}, 0x7, 0x0, 0xc, 0x336c, 0xfffffff9, 0x14, 0x19, 0x3, 0x8, 0x3, {0x3ff, 0x6, 0x3, 0x5, 0x2, 0x101}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newqdisc={0x15c, 0x24, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xce3a31ad63dd577d, 0x4}, {0x5, 0x4}, {0xfff1, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x6, 0x81, 0x0, 0x2, 0x10000}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x40, 0x2, 0x1ff, 0x1, 0x1, 0xb, 0x9}}, {0x16, 0x2, [0x952, 0x616, 0x0, 0x1, 0xb57, 0x4a, 0x7, 0x0, 0xebd]}}, {{0x1c, 0x1, {0x9, 0x2, 0x4, 0x800, 0x2, 0x2, 0x101, 0x2}}, {0x8, 0x2, [0x6, 0x9]}}, {{0x1c, 0x1, {0x40, 0x2, 0x4, 0x4, 0x2, 0x5, 0x81, 0x3}}, {0xa, 0x2, [0x0, 0x918b, 0x1]}}, {{0x1c, 0x1, {0xb, 0xff, 0x8, 0x1, 0x2, 0x80d, 0x5, 0xa}}, {0x18, 0x2, [0x81, 0x4, 0x9, 0xa2, 0x1000, 0x3600, 0xf670, 0x81, 0x8, 0x7fff]}}, {{0x1c, 0x1, {0x1, 0x6, 0x8f, 0x6, 0x0, 0xc, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x40, 0xfc}}, @qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x8}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x10, 0x24}}, 0x14}}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000300), &(0x7f0000000400)=0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r9, 0x0) splice(r7, &(0x7f0000000480)=0xa, r8, &(0x7f00000004c0)=0xd1da, 0x1, 0x0) close(r8) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r11, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf251c00000008000300050000000800040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0xc004) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000214e7a60f4736ba277adf2508004400", @ANYRES32=r8, @ANYBLOB="050054000000000005005400000000000900020073797a320000000008004400", @ANYRES32=r10, @ANYBLOB="0500540001000000"], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x825) 4.685289718s ago: executing program 1 (id=4018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x22040004) recvmmsg(r2, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffff8b5}], 0x2, 0x2002, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 4.678126154s ago: executing program 3 (id=4019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x50}}, 0x0) 3.97184621s ago: executing program 0 (id=4024): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x1, 0x9, 0xc421, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x7}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) socket$nl_generic(0x11, 0x3, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000980)=""/189, 0xbd}], 0x3}}], 0x1, 0x41, 0x0) recvmsg$can_raw(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/187, 0xbb}], 0x3}, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080)="cd9b183949949286c88fcae2dff1255035b339be4da0753f32f3013f3aaa64970bb9e42ed10c360e2fbf468c65d4b22d8d23225f99c8d284b5fa29c26b43059fde91dab5e3efdd55c7343f24a398cc7e92b7b890e0078bed3096e077d312875597569b74dbb2c4cb2dcf083fce02fa52a4f4e06125027ddfa5", &(0x7f0000000100)=@udp=r6}, 0x20) 3.751299167s ago: executing program 1 (id=4025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x54) socket(0x0, 0x80001, 0x100000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0197a0b57e816213e0000a00000008000280040005"], 0x1c}}, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) pread64(r4, &(0x7f0000001840)=""/4096, 0x1003, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000008076786c616e000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 2.352386903s ago: executing program 3 (id=4026): r0 = socket$kcm(0x21, 0x2, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122', @ANYRESHEX], 0xa) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x60, r3, 0x1, 0x70bd23, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r10) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r15) (async) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x40, r16, 0x852dd6c070cd7e4b, 0x0, 0x259fdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r18}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x4, 0x700000000000000}, 0x8800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0013000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x5c, r12, 0x9, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4094}, 0x4004008) (async) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0) 2.351978186s ago: executing program 4 (id=4027): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x8080) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.252383831s ago: executing program 1 (id=4028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.250320738s ago: executing program 2 (id=4029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x10, 0x70bd2d, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x0, 0x5, 0x5bd9790bd3e9e986}]}, 0xfffffffffffffefb}}, 0x0) 2.183694204s ago: executing program 0 (id=4030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x6000, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000a600ff84000aac141440e0", 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xffffff4d, 0x0, 0x1}, 0x48) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="0d010000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}}}}}]}, 0x50}}, 0x0) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) 2.043900441s ago: executing program 2 (id=4031): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, &(0x7f0000000000)=0x80000001, r1, &(0x7f0000000040)=0x8, 0x8a, 0xa) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa7dfa8ff7a4fa11e}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3ff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc8bd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1cc, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe36}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xcc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x8}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4d}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1c4, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4c}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfd23}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x1c4}}, 0x8000) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r2) (async) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0xa5, 0x19, "25014de9ea29b9e6e0f5e9d3caa52eac63b79398845ebfbb113b7417713f95340a2c5b5287766725697b392c037a17048e9817d79a1fe5a4b5428fbe8a2b4e9c72bea655784e5749f9198e174621977470f7aa63b0ea7910294b4060cb7166617a41735a30e545a05ac7d3ea408a1bdf7747312a712f345416ff9819aacf03ff975f75ef7c673b4358d7529809f3ba75cf7b589e31f0fe1305026c86cc03e3fa63"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x2a, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x5, 0x2, 0x6, 0x9a126f4076308dfe}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b80)='syzkaller\x00', 0x800, 0xfa, &(0x7f0000000bc0)=""/250, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[0x1, 0x1], &(0x7f0000000d80)=[{0x2, 0x1, 0x5, 0x7}], 0x10, 0x8a0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000e80)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)=@deltaction={0x134, 0x31, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd4}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x606}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8001}, 0x44090) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000010c0)={0x0, 0x5}, &(0x7f0000001100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001140)={0xcbaa, 0x1, 0xf188, 0x5, r7}, 0x10) (async, rerun: 32) bind$inet(r0, &(0x7f0000001180)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), r8) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000001400)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x14c, r9, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x44}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @private0, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @remote, 0x10}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000) (async, rerun: 64) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000001480), r8) (rerun: 64) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x58, r10, 0x400, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r11 = accept(r1, &(0x7f00000015c0)=@ethernet={0x0, @local}, &(0x7f0000001640)=0x80) sendmsg$nl_route_sched(r11, &(0x7f0000001a40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f00000016c0)=@newtfilter={0x314, 0x2c, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x4, 0xf}, {0xb, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_batadv\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x32}, @TCA_U32_LINK={0x8, 0x3, 0x100}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x28c, 0x2, [@TCA_CGROUP_EMATCHES={0x158, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcb1b}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x800}, {{0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x78, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x1}, {0x1, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="a87fb6a6a8af1718d858"]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="920f091dc8fe6e4b", @TCF_META_TYPE_VAR="b8101396c3a1", @TCF_META_TYPE_VAR="c96cfda4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xdf}, {0x3, 0xe}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x22c5}, {0x3, 0x9, 0x7, 0x30000000}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf12d, 0x8, 0x7ff}, {0x1, 0x1, 0x4}}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x401}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x80, 0x2}, {0x4, 0x9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf, 0x1}, {0xb28, 0x7}}}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR='L`', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0b1fe460b7", @TCF_META_TYPE_VAR="e7c3d1ba", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xaa2, 0xc, 0x2}, {0x6, 0x7, 0x1}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xc00, 0x2, 0x3f}, {0x6, 0x4, 0x0, "38102c03"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x400}, {0x3, 0x3, 0xa}}}]}]}, @TCA_CGROUP_EMATCHES={0x130, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0x1, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x1c00, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x800}, {0x81, 0x8, 0x6, 0x1, 0x1, 0x2, 0x2}}}, @TCF_EM_META={0x80, 0x1, 0x0, 0x0, {{0x10}, [@TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="bf5830", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="04125a231644c3"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="8494dbc368", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="5fc7faa9ecad85", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="ccd810794d", @TCF_META_TYPE_VAR="c352e6"]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR='U', @TCF_META_TYPE_VAR="6c561c6a"]}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="6960d5", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x8}, {{0x2, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x5}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x334, 0x2, 0x4}, {0x6, 0x9, 0x2, "895dac171973e20361"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xd8}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x314}, 0x1, 0x0, 0x0, 0x1}, 0x14040010) (async, rerun: 64) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x104, r9, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb6d9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc43}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7325955d}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x999}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) (rerun: 64) sendmsg$nl_route(r11, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)=@ipv6_getnexthop={0x3c, 0x6a, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000001fc0)={&(0x7f0000001d80), 0xc, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x184, r9, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @private2, 0xfffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffc01, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81d}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "ea11357571fd5d15882e7bd75757a97653c203c64711443163abf7ba2befb45d0c64839b7f3c8af56836e3de559477c7a190132526fe5a"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf66}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a2}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async, rerun: 32) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002000), 0x20102, 0x0) (rerun: 32) ioctl$PPPIOCGUNIT(r12, 0x80047456, &(0x7f0000002040)) 2.030397579s ago: executing program 4 (id=4032): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002540)=""/4086, 0x1055, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) accept(r0, 0x0, &(0x7f0000000080)) (async) r4 = accept(r0, 0x0, &(0x7f0000000080)) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r7}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r7}, 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r7}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r7}, &(0x7f0000000240)=0x8) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/79, 0x4f}], 0x1}, 0x7fffffff}], 0x2, 0x10002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="280029dc", @ANYRES16=r9, @ANYBLOB="0102000000000000000004002600140006007369743000"/34], 0x28}, 0x8, 0x3000000000002}, 0x0) 1.961889009s ago: executing program 3 (id=4033): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) close(0x4) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x64d45775, {{0xa, 0x4e23, 0x7, @private0, 0x2}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x1a, @private0={0xfc, 0x0, '\x00', 0x9}, 0x1}}, {{0xa, 0x4e20, 0x401, @mcast1, 0x8}}, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x3}}]}, 0x210) 1.78384856s ago: executing program 2 (id=4034): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x7, 0x3}]}}, 0x0, 0x26}, 0x20) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900090000007400000004008700080026006c09000008009f0006"], 0x3c}}, 0x20000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 1.280161888s ago: executing program 4 (id=4035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x80, 0x2c, 0x20, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x8001, 0x0, 0x9}, "1ba1"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x300}, {{0x2, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x13b, 0x1, 0x7fff}, {0x7, 0x5bfb, 0x800, 0x0, 0x2, 0x1, 0x2}}}]}]}]}}]}, 0x80}}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 1.148974993s ago: executing program 1 (id=4036): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newtclass={0x24, 0x28, 0xff, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0xd}, {0xffff, 0xc}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.085292578s ago: executing program 0 (id=4037): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x298, 0x10, 0x503, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9d}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'dummy0\x00'}, @IFLA_VF_PORTS={0x240, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '#.]\\$\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "bc2cf66a0312b77f5b9454f33ec885f3"}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "32ee4bbcfa70ff6a2acd2728d5c51ab8"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "125cc1743bbdb2f77b6dcbb37c544eb0"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c6a4e1e915d587490165247b6ec5c2ba"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, ')\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2095}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d8b308c7c00a4448caa2e8d686304e06"}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9b24591900973a548431c53f8e22288e"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "827cc8773eb0dc06c5b92e3e0c6c89f7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9bf38fc1373597487c13bcd36529592a"}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8e18444a3726c6d7f45838eee39ffae4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b182d4f5388b0ecad4587f3daf8dd211"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ff78a1fad762bc848c20f54df1b82058"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a83b53128b1bf7ca76d9ca6779dc4dd7"}]}, {0x98, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "09e4d2ff84aeab2a5f8bf53eb78c1e2a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "514631188959abe6fc70affab0f697e1"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5f439fb32b39b20bd60720b730344d96"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b45ad330affec348654c8f114850a73"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "66332f9bfadfe09a6bc7828548210360"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e0c607fdc36d33e5bcc4c36c506ac2a4"}]}]}]}, 0x298}}, 0x0) 1.084088017s ago: executing program 3 (id=4038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000380)=r3) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8, r5}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1400800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x28, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xa800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x90}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000005c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000b40)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000001b40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001b80)={0x2, 0x0, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB="6bbb6b73dfadaf90bc87444977eba9669b88aba2bacf0d5b52628d8234f0517a2f66df6af078ff2cd9961a105bed55e91a2d0cd5a84e0837ade61f9195c543c4c10aea52a28512e9333c5dec165b115c615acdba56938a1749b695eb91276fd9684a272ad18f8fc765af8f31718952b5116509e79f8e7ac60b95"], 0x4c}}, 0x884) 970.601384ms ago: executing program 4 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4fffcffffff711028dd000000009500000004000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000000}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) shutdown(r3, 0x0) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)={0x2000200b}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x1, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1, 0x7, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e21, @multicast2}}]}, 0x410) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r6, 0x0, 0x0, 0x800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r10, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x39, 0x2a, [@prep={0x83, 0x1f, {{}, 0x5, 0xc, @broadcast, 0xa, @void, 0x10, 0x6, @broadcast, 0x7fff}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xad, 0xb8}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @supported_rates={0x1, 0x4, [{0x4c}, {0x18}, {0x18}, {0x5}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040804}, 0x20040000) sendmmsg$alg(r9, &(0x7f00000023c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x4044804) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) 795.279127ms ago: executing program 0 (id=4040): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f086dd1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r3 = socket(0xa, 0x3, 0xffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$kcm(r3, &(0x7f0000005000)={&(0x7f00000002c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000001a80)="c6cd2ad60ed7ba69cc7c24e84253dd035b0fb9279767bf21391d874aba22d059dd9cfb28ab864b4794c84ffe629e75605d7a1ae80f15a656d7244e72f3e2d370c71babafa0395ec45878b2ad50491e7a729d6fb36c5a70eb2740cbda02f66de0374de03627f9319ff7196c0cd581bb9d2e736192a6664ca9f148008fe90369b2ec8e21fce104daa9c78d2353e8c64e1bf0c3cd6dfad08a26fc1cae53bec13bd8e6599033bc8787ff01d864ac81ad7371e74eeeaac8b9508de20df489136ec25f03b7d7b54d48daaf4d9069c9e89317f38180e2623c627a031e82dceaffd7f245fbafa247a4b0c59a1d3df6feda9b553804de673066071ecb1a75a8a43e6921edab38659a744d56838e8fd10e3dd8bb5de72123637880da9fb3639e946cb0f523705a027ceedc325d4ee54eb7dc16aad7943a41ccaf535b63b4266b7420c5760d92349fbf28729b3e7cb6bafba31295f23d9427c19fb49cf98c56c3160f81ad1e728c6f75e5b6aee66d8af0e1dadf635d9b56de196546c39e076e6fe6275744bd26d04c96224d26ff5134ac265c02a4eae939ec02abb5ea09dfaae84d010856feab300f285f97bfb025b06407960b89e7967677186be0707d203a62e64e156663e6eaaafae9b2ec1176b74ddd05b72840e6850c4753b3959265b789f6d99f3137aaf9003036f873ff17f0c34fb88c7b9fc4c665e25c53712447ff5c1ffb5236720dd118cd5238d1e58a51525a239778ac50f729df36c582ac377a4d7000799e59ceeed5512496011e86b2895f478d0f4ed7858fd0fbc89889605e366ceda474fe98c5fadb7093737e38532f16e1849f9e7dff33366476d64571afbb75cd2a085cbf686a35995a1d6876b03e056aed84092e2cb406dca4d8e703f4d5aa04ab3841fa977f899fb18e5766576cd1859db8a23740b85cabc9a3fe24a0a69f092f726b0594e98d3c0a794382925739972083c99c1be37b82d083e7f0f18b66fd04ebc03477ac9f129d7f68978c4737670ab295d7487c5060365bde59774736e16e6a15cf0781ee4b2e5d5d1f880a72bc27ba22fa7867fb00c11f701cc5448111f36461f855fa2169e45272fdacabdecd6fc31ec0fb7ce187a3c6b4f27edb66c9e5f67b6327ac77271074cf3da0433503176d1fdab05012b49e9a1fa0639c883639d30bfd79cd3381c062b5c7575d100842dd78dc00f560e38f5f8df4e0f86d7f03724ad6e29aa884bbf965d443bef94d8887f07de2cce3b673f9d1cb1444aab65f11f56330a8a2e30f0227cd52acb2c1af82cd7b3b642fdcfb15427ed2cb8d96fcab4ad7d600e1ce460820b4de9b49b19f22b0002d568841d804069945a867ba443ef5550c90c83231b6f172e1d3654561618717139012e6d53b86d606736f8facc7d86624de9f9e8735ad13059da3398558534fbb0a2da336383d0808d60c7b132665520aa0c693c072442180ccdb8c9adafbd7706e6601da6173ad5f92faf433d3aa096bf6669374b43c6b3f5ce01df125dc00706f002bbda3da86c6961dd4354e1819dae1870b289eb11063b25414b2d998d2635b2a86f2e5aab5237659623eb5ea4af5cd4899b475e9df463a1b04f7afc24200c2d16d066731df21b4be73ece156de5334f07ab7917f8454738c38c5ade87bf201a46b7b98628603be995735ad1b927616d4c3507a4e96ade8ad12359a284a0a0d6457a58c79d070546873bafbe2186b62f0e35f407ab6d84b12553f4e6c2109126d6d0b18bae6478bd7107ea25b1e969c30c4742da2de42d7f90c474eff191f81896841855a4db9a4a6d3abf15ee8384946381d79bad060416d2dfedcc3813686239716a86335ace6cae0775a0f72840f80038042f800f497f904a6c8aaf286bb579cef520db3b2763e4e8706f4e4825eba2e881bc363913853448e57499180d5e2492a99ba7755e5c4487913d2edcc84c50ed964e356600244c8265d76e5c6d654eb5f696768baad0300fa7312eaee77eae2e2d6a4d12356b7d5e00cbc072f65e98f14d732e220ddaac60bd1ab6249268264ce315fb9e413c7db34ae891b88d7fa6422de6e2e8e1b67b08480700be4b3921f510b60bd8e6aa1f1fbab78c5e44e1864dc300c8efb8201726635b19dcaacf57c6f33e50c92f94d86934c1e9782c6792bd9b7ab74a9cf6ef5b79226d6190050d070623a39e9035645f65bf18b3fc08a1f3c23120078c7fcb26bf432cf11ffb8544d081a4408122c2b42fe71220397f5563f0718fe736326a6cc7e2fcfd1255aded29d66125156afc3a7da55b0eeb002f067c623cc399db4676bf4aa54314769a2bb6eba3a4330715f2274eb425c33869f6f4c1243e95bf6779bd066e1dc2c6ac8a09cd5a7c59bcaf526d7748359efa2a785bc5d6b68402bed24f92596e8b670122dc6e7959575f15c9fa4a30ebe73ad744a78e683303d7606911ef97ee9d070afd90cbdb569aa1f5f6047c270cdb521998783eb82714ddd8ed35189cbf9d5c8d0f55cb4610287bbc61f4fb0a49e6f177115d2b9e9cb2b508234aedf94ad5789caa5274d585d57e1a48fe0dc31e47e58f55cea32ab8d52771140d8745dee2fa3e95fb6daeb4b8b1d3c00d8163ce27e6dc46d07ee61d0e023aace9d1d08bf335b6983e1e55bd66d706ef4cc984e505a8e9b642cea1fb7f82a5bb505c28df934e81f6a2196830da6cab2442f75e1da55de7f4b1fa467210e10e9b932e77051dc3607e1684c07dae3609d4045c3ec9d33c9591bad50881e03e951fc1bbbf6e1141e2bc24920eea4bb85ba456e8aa66cca009babe83d3c7a5abd6b7071927092838286d92ecf478674059c630804bf553dbbd018417478626dab1ad37331b1e8b797036f2c540ed92922be9a8f59b830e364dda7273fd53eac4dc797cab1f9cb21d3e6a2758b9dfd92078531bec9676ba8bbaba81456dc74c508662400ebc1e4779ea901bda7c0152f4373bcb89d58ab0693801a6c45d56e4cfd8471b275e1e9d8fbdcf75314815b1d67b6f7ec359fcf385e35212f568f2b446327001ba3b14ea02afffd9f65d3230e3d20b7a790024e845325437d220f4b0a5836a676ff87e193aa2c886564ad7a4d3952e82b54ea084733750efa66c06a01892c1b6f159411f7129bf681c0a1decec7902c52cca9a6e40585f2e615598c5823f1aef0c2bcedd56dbc0a6623816decb9e0df5cb3eea31922f2d3eb71b8a27deca06dc9e9e0ecbf065c6dede939132c63d2f247f68ba08b5f1dc0cd97bd4f041647b7c026416fa1f591a38ebdd44a3009ed6b3bd96f6d78951e5e89f8bbda739899a32a3cb237dc5795b766c9c086932568ade770b9760510252cec3f190df3bd17c44684972d74d789dccfcd475d29131dd321571450004a10aeb13ddfacaca09b64d681e3f65803045d6e88b3e60de9f308dd4c8730a69687e92f4af2269b207ef92b047f31f26db3db1d686d9b6846590ebdb3e1064e57183476c7348e9df808f00534141d63b1b657f4553d2edb707ef9b4bd66eea09377c7e1a1789a09297c96efe0c6de8f046fa788692200570a672024d19c12cb55b8dbaece448f7ed67312c6cc05cad920045a20f24c9c021a2ce530b68714b5182209bd75073dfd7e5fedad3dd8a0beb72266e0bb3b79d5be5cb64266920c6f3ca079e1cb382f089b7a5ffdab6cf3efff6f4c2ed07f2fdf10fba1a7ea92f0f3ad6fd62cdf2c2d32aef8dbdf9858710e09805181fb184230b157a61effb57a91517eb01ba40bf4abf0abe8851b223524e7ec853a4e3a71b431d2592e3ded8bb204ab19b44bfc79ee730ef3f39e31fece50974491f06021690edd379783b085c572871f20f3d6ba98edb70b849e9cba012a4f6c48f82351f553eff425a4034d7c99d2e6ad848182910371999c650c06199f90162cb5c587d72ae02327f12f4a32b447edc998b52c598db1de20acb32fbcf7dd1e3f5c4892c9d1be9f67b0d44cfd4f2ffec1e15d4e252f369cfbc5c87e27500fa4ca5f54d5048eaab1ba57e4bca544a9087b3a47949cc76d4c78fe53687a2b46079d623825e8e87ad613eb4e8515e1d35abee772fc1b7f7ec58a88d751f74f1a5dc066f2599004a03fd16a39e3d02cca4de93f4a1d59786918cd5f6f567023f50c6ef0ef3cfd995ce6c1f4889acb4245757ef529ad094dd5fd96e074c9e247bc12e274d2909e5621f564ad15360ff47d8383aafd53de81d223bb2eb1245d4e4e57ed6851ffcdb6c0d96298ee9d0412d900a927a5cff291b7c676099b5c5081f7406e616a8e6b850b4ee52495b29da188c0611fdb60a755230b28a62221b8e690655537331e73b29c6f9101b20187d42b54e674eae58bd1c1c3d47bce38fdb4a72454fe1038bea328ea5a61b468119e18f14543f95eff81249a92803673c015eb32729e3a9f9e03e7911e15101fbe3307f5d5e1f1b6fb5bfb41a318b628a5193cf34d0a8375164865af7b119d8c6a1a59d7d3c7a3f0d7f0f24e7da90af89af393aa0925b820dbb52eab7e606cde93119dd6d8a61ff7d777f859912de7789a3a8f7446fd2508be05ee7de729d16777521ee8f10fa2043e9632008ebd1e24408f46ff7f9ced2e053628f02370a94376dbff6afbf95cfdf0799e45f484cd1284f197134ee3995901c4ebe50363944e60fb9aab8c6ada59027978ffed1623640234e51ab1c141456e848dba8fd82ce7944006b0592bf2cc0b2abd200d2dbcb42cd640744d09c6e0387bc6e768d7c84bd2cf9b54a8d581a13b303cc44f6668ce07a2b545a60bcad188e0a54c8bc1cb69280802b5ca27cb942d50e1073ed145cd169b5147511d74bb87b9fb62f27865b478d518fed5aa58a8a44de561744390c4dd7abe2437289da87e82a2aca56166b03c44fc0fe551b955e74901a6a9d1c8e60ada183a3810cb07e0524e0b45e0b2fd5a6d954d5bb8fa41883ccb7905be7ac9b791afde4fe4683308dfd5036bc7a0ef500add2f3ec9b946a66e4ef55092c719666ce86d5aeb3559964c5f603a7d1f9855ca6715097790a2a7d6c182c6782d76951d0e7d205efa78b0236fddac024d325880b869c5af1520c641a848e941fd8936e397f319aa2bc082cc031fb8fccac0c605d6ea9bf2d9b872ef413cf0043418ccca1009b61364ec27477f22e9e518056f90631665816b7227abeccdf2aee2834fb86d58edfe453f46c9bf7309f1d2cca242f037bb3c02ff8c497dcfdec0b163691ff96cfde5e3174ccc373fc228aba263f66b046731869d29a31c342cdcd526c628766ead1ff05859cfda20bcbaf0861912cfed1c2ac7c663db94f224fb0858179761e257de2d118aeeeb468ba34be5e3106983a6f3d54023fb2e52ad76bf3be2e3b5e654f7ea95fcd41acd55bc715b2a0442c01479e20dd18ea6f18d22f5bad2e43ead132f804ea89653a8ab98dfa4c8b405008cc262390fe223fd9aca268ec29e7f3706b2dd1a56ee32cbb992847464354d93ec75a71c392112f8a4850f4fb15d1925cd344bdb7c5dd544a08552951467769c74906d6766a0466c390c4a1b3a55aa14d7a6c7d9f6b4657ba61f9577c45669c684dfca516903e9cda0c5a5fea3e3b63d41811c3a7a5231e5a7a70c84330473a1427e871f47899187a52af6b345183b110f32020e7dcef0a8f6f845fe2fc8dd419679b41da93bd719f1018707226b59210a91e54f805e3e866a89b0802d2f95368db087d25e6f4f5f8a1c68285fa234a0ab449b53c3c6a7d3b41326fc80def29a370e4dd1defd7bc49e1ea37c35433f7bd1e081c25f2099ebd140204f27673299650e71098b7310596726", 0x1000}, {&(0x7f0000002a80)="789255e5f5f56b19e5e68fc53bb977989fcdbe01c0f98389a5e3825d81aceae04da3a77e22cf3d6899814c75c41e65191873239d5dd7", 0x36}, {&(0x7f0000000380)="e09bbdcefbe8b223e496fa6f091d8ad67df26f863ea29bf2bf6fc3edc68d1a9efd4ebca3a9cc5a5b4a8271af9f4d1d6d23a2c96b866c047acd52301b3a8f", 0x3e}, {&(0x7f0000002b00)="22eadbc0d84e430e29b4a66bae66c6ab7b6dbd306643a92ea0937aa429ba6a9ce256d87c95b69c20ca3fdcb8fae669aee00ac3ce294a13a3145e0d907298fd2e1c471bec199f269b921c71c7d49f95ae128836becb1ecba69bd231e1c5f7e0fbd4b08a3aec24f74da0ba2766a6a1b91d377e8fa4bc8e05305ba698a7e59ef312bde6da9837e6894a8a78931ffcf876", 0x8f}, {&(0x7f0000002bc0)="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", 0xfd}, {&(0x7f0000002cc0)="965ac5667cc0d73a00667e6b48d645b765db6ce7db40a67de30df8e00d1beca72c81f77a4de8bd3102bd34f3d3681157e24b121a2e9ede98a3238fc165fa5c4f8fbaa6587cf12b", 0x47}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="1e6137ad013ff0e060a674ec0eac78bb3dd1ef2f8567e3b104ad2be09b6d2032565525205d4b2b594af04903f2da6f9f64a808b627", 0x35}], 0x8, &(0x7f0000003e00)=[{0x28, 0x104, 0x40, "8741b66deee81d41ce6182a8897340b4061313b89690"}, {0xa0, 0x112, 0x7, "752d4d53d5e7133f0fb568d7397b85bbccb1f77ae509fa28a606c131c208898fad70d83b2947ab6dbf6704636904b849d8549f71e90a1f5f1db5f9cf9e8445c7bb633b5830ce2254ebffbd5c53b394d44636d75f972df89b0a217d758cd300df43394eade2748503e6c02f9bda95eab11e293e514e3437eff0e7af48e916fc8dc9c86f46cd5fd336c87dc5"}, {0x1010, 0x1, 0xd, "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"}, {0xf0, 0xff, 0x0, "7e42d1d57b4892bb8aeb84cf849f4f106479481c29a068ac54b66629013667550732c1d779aae40073c6c5b5ab6ee2801e5c8f020163a6280a29db3aadc244cf294fbc3bbc65048c44b2608ac88ef9fd704b312a9da3b9098df1ff15e82a3094a2af27a2cea9d26c8ba38aa3fc3bae194f06ebd6f52c97027a16819e29e074bf803cfcc7929ac028c4261a1a70a85384ecd928ea1d24bd4c5384b2409f0171cc80ded1291a491751a368c15c58201231868aea414a9b38b937b661b0481e0cb340baaf2c2c5ec639ebe51aac69484923d28f945d2808c19f75a5be"}], 0x11c8}, 0x40081) 680.942484ms ago: executing program 0 (id=4041): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) accept(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x64, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 680.185092ms ago: executing program 2 (id=4042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="25672d2b89c3de90180016801400018098000200010000807702000000001b00000000028de693fc3222f5f6b1"], 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000480)={0x0, r2, r2, 0x2, 0x0, '\x00', {0x1, 0x3, 0x4, 0x0, 0x7ff, 0x9, 0x1000, 0x5, {0x0, 0x3}, {0x6, 0x9}, {0x8, 0xb5}, 0x91b, 0xb, 0x3, 0x6, 0x5, 0x828, 0x1, 0x1, 0x8, 0x5, '\x00', 0x1, 0x4, 0xffff, 0x1}}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x2, 0x2, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = epoll_create1(0x80000) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000080)) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendto$packet(r6, &(0x7f0000001340)="de53141dc643b04131225d277e3d349e6be75e9029df208966ee608ab6914b54a74636d3f1b869504604aeb117b1fd36cf9ff45a1dd08222242b406b97fc38f4f4e16d512c1454d3f478f0f764b40f47917eeaaaf7a7c89de8cbcd9a0ee2ceee67dc2a51418effb1dc770c17cf62be4ebdb3ee668640be22064788a25fc307116d99f825669e3c415c86d024ca79a7877445294627121e78ab8bfd0e100549fdfffe5a20774d321931e3dd1266045d057604abc1308f9cb3373d04f3dc9fa5a8124b1aac72bc0033dd36c0dc03d803bea9fc52354c38441df915dbe2ddd89b145fa80a57eb033a181885c8a3b6e3dd3b87ac467c88636b40ee23c5877ee0c3a6a268e82106bf7701a236e5f41e727ffd595f6714bef27db21c8c59e216d59e828e4154f31edde35a46c1b62cb57baa7ca7841bed5502838c71f77a702e1cf39e828cc2e8661348e2d4593f65d98bab3a31696a5b825f37287101ce4753135e1b941af93033962a6ef29cef7411676fdf497f9d4306fc2eec9b5f4b92641324e47793fb3f65e86f0438aef10a4a8288fbbec3d58dfac4674ca9574b57172e63c7cf37f3ef8a307f2988a2e39171dbe816877d55d81062204271fe7bec3bf18925834a7512de935e1e333581db82391bcdd9a5b533abc7b0e243a78393cc7d345c616d7541034d697387db26b6c6fedac288c08a8ac7f6cee81f3f37105acafdd69c42bae0b71f67b693f06d96d2e33815db80a2a3e800f35245c78d0983b0b5afbcebba5b995926b2eacc71f3d5a32df034e09eb48f2f44396620a307d9f867365a25ef093e0691970916c2c8b3f1a1ed774dac57493b1291dfa2d1b5a0f8888a8d4587319f33a0684ace284d8588b2ca02f2aa23105320905c5327a6065cbc172680528ffc704d75f04a1163446149f4836ced1910e70b9430781a890783767cdc2b1402a24e985bc59a4eaf0b2775f546b9e1eb9753ce67f5553cf2743fca50f3b1cf96671013fdba7d154b4ef93f47d972b0fc539db56566bbd7e09e894a8967d1cb1bd1e7090d6814cc4d0c7404a9a18ab39d5421c514fe84ea36bc10fcd9c0e2e102d8f91000cbfc519d15b8cf73db4704ea7053d29ef397e44935778b4a61f52c1460e933d08805a390e1876e5eac0e200793dd7720c7c5ae4ecc70b78d993e378ab8c9475cbe2fc45aeab733efe3a1a1776daa4780bbce9d41a976974355606eb216c13db5c7c497ef281ff6e1e9f55a45231ce6bdf4a3b03f23230b400b56e6c900f4ad6752127fdd21b1d8639c426da8927ffcbe6c6bba3f7f3800cc804654542c59c9dfed70ddf415b2bda8e647879761d976095c93e2a1c36a430a0f3fea1482c1c1c004e5ca4d5ae31f13cf91f5d59295fcaf5c05107a5f73ddb7dad5b215e4c2a1ee1358c621632784094d3c5ec5e03834b264b36be47c703bd4e0957a3ecdd34b4eb7e2165b12a527845716bbf265f83b81fe47e88c8f9fde53bd505ae27ece7206d374736783514564f01628d7dc10cb77780c99700e16e3d0cc21502455fd50fefbed7c754da6323f4d24c9ff8086b2669bf5401f24e78dcf319d815896d460da7129646f24e18c72c4f70457b30a13837d54ce1b9fddcfb3cca450f39f4aced089659786e250143f20aa0a75f8442d1488f51a58d589e833898b4cacaf231706d42f346d30202577192c9e9e903feaa882be257eec9d3c4bee6e7827ca0241c1d785e16729753445fcba63fa68a2521d132b8bd0aa17fb46942220f246df0bedf96d6855dca8676123c8eec2fcf056d2662ee1cea4daa46135613e01137893f94db263770bf265818dc18011919c3b41a4f3d48a9adcf51b3626ac220279f5f6ff14923786cee6b7c56d4dad7f3434d9c2aa5512f0cedbac36bb32fabfe51e338b455aa5e412bf855a7fbfa5461b114e83e52438854980f3222e27a1f890867d62ec9355d7f35a68173588f1ac6972547256739ae7b02ced68f10c6440e6da9b8821e5b0a30d3c7bc1edace4d0166a969637b464f69addae7e5834c23f40a1eb434d5004100978cbd52a03b957f6a3d3d47270dde4c8647bd888dfb55fcdf5b26d19ae4d9de37e264048b49c44b1bf356588c5048b34b5409ce38363ee1609a4309209ad81837a978801cab372439e7759b3ade88ddc75e8a8771c1a1cc6cf44424422f78062828ba8bcf9a0da8a82f08c2f5426e24efc75c178d603d3525c3f276e412f6eb9efc4ad2cfc3fb8ff2852fb108ff1aa6486c18c778232702122473189ccb83a75d728e894801232f39882e7f72ad61520e69f1bd5be8d79926ac9309a4036ddadced709de218c99341285c44b7922f5b54618b9711706c01f7046c8e6bdf6eb2c151c0491c8e9750b5e53a72191f3c687dd089d121102e12015668312ac020b29da2bd34757b549f1a63ce1836c74ec9dd8a96856839a8db8d015fc38e295bf713b2973dcdf92bf725172073b354d2a6d964bcb913b53e61281499bfc0fa8549f74d6eaa7587ca81b2a929a4aebde3669b70323d4ae79d68a4973a78d21dd09b3548f154616ac5a076e510367c20f94bdad71f921e3c4a31b4b5a766e977d9c1694f92f24723ea525706f6ab33feb466aff84e6ce1e431fc3ed21c064656b9a12c6a9897b3a7f22c7f3897613577192ded60c8a2795948bc6ece6354a6f35c97ba274619ce74f29b4d30ebc0524db12d2c904feb60123068f2a119a578200f0db6d0c85061e973af4f932f01df8adc5c6d94bd7368b87ce933fea9902c77606860c38885cb7581ef36f984ba84b324c8b1cfd5afae95045cf6f092974d943684705efdff0483004000c426b6fd3c945eb5fa41a7f411f799a0eda94edecd85b67e8583978760c6a51a8188050600543324ef32f1f6a98bc49076ddfea4ffbe7ae348c2e268d056f7a5d1de5186b06a66d2e2c17f4fc757a4fb9dc6bb1b560f213e4eebaadbd27756351b0e33c7222b2515731dcb3886154afcaa1027360c06fc0018885b1819186bd3b46d56d4df24710fb6e21a5965645f20b36cd980ad7d415697ec983c8701e0db7791589715184c5f164ec379fbaa285f3fb7dfe35939402977630fbf5b9222ee1262129492d64779cfa8308388fb85d3c2abbbdd632239ceec1e05848be7b671626e2c3d8dd97ed25280e46e930ea88bca0338cde28df1a6326db7b87838458553454a396cef9ae5fbf61f7f709507446d5282866bef65b086335e269b72bd8eeb5fc25e1b25f396f866b4b7a582c7fb72c2b2d526c2e1d5d213b87d4b38a6386e8f14b5e3c99c0589de2b2c01bbd3f8f5a56c7ad2a78e196a109f787bbe7cbc2c118a0ffe0cd895eaf80f500a43af7acecadf2e4c7c2272841d83530307d7e4164ecee52972926c4245c342a581bcf30e2d4f74b56a59ba010b53852f05db4430e9e8fa79f95828662a0ad476c8c6a672ee7ac070d6819be21885f7545e013f55eaebcea7bfd94867e444e3f157d0f50a18a8694e4402b212675bd885b56ace6b33e122e6811f9a979e976ecd385674d4b7151f9a159396287c4f59613e5be9679a55767f0fba91e62dcdc9f8d12af69ef8bd7a487aa66bbe5c5808e32fe49a636f321d62b85cfa6df99c16a384b6ac287b8c39ce8386c72f8e222a3984b9b1803d4765f9ef74b1ab71c24d71983f96cb05cca8fc6839fb0378e2be3c41bc982fbc92991f316d785b0214a170156f5a556ae04785b47b5e29827f6016bf5e30f2d3d0ef727f9101a576043cded7984eb204e3ce93a455eb2f34bea3999d279ed16fb3ffef1c4d4c7b705b1adcc401691afc053ef9ab2797040105dd5bdcfdd1a4a6a5acfba5fc04a9bd410c0c9f4abb5f7d20f7d593cff1c0c2fc5e0c5d2b956260ed779dcf43c9943cb0b13cd4d61e2b34b49ea027e7a7872fcb2e60be13ce063d4e2a37e674a9d4fbe64b03998d8b91478dbebfcf3921f4e5ed296c2bcf3d58b19d50508fe47603eedfe0f478f3b7462f4c954f9c773918638e180e59f6190a44a90a034d65e94803ecc538d20083b4c8fb39f3fb95a71f633a3a75c72d92dc154f3998875e35e112f85343338619eab232fe8874e1e3abb938a0142d944aba17c90b7d795b73c4de3a24e2eebac103a5a8f7a2645573156de34f75750006cdd6cad7883fa9efc94a50b05f7d962d343dda86a76d35a75d0af8d6d959802d8a94fc034bd231129f13611020fb47ccac73c4f2191e1880123d005413e47360fa1e524a6a67f01237940591dfc95039b2a1d592e1f77944d4f7b1efb708290708043f3e87f8405dd181f441e7275496bc810dcf00c97266b26ae33a9914d8d3768d06256e9917911639d9de714d10c946012adb946331f6dd6fb765965f376eeb275223265f270ec7bfc25b5054dedad01f64332fa6d38e55975d5df384cb782e1a3f7a49ae8d7bd4dd2d230ba0bdbc8b999f87a43ef30c82491bdb7337ddf9891cdf95a6d57f4fed47dfec24dad9bcb63651978f04307af1e70863b9aca04afe5b1ba2e71715f0e4d7ab64e7b51bdb0c9a7fc74fb22aad68ac088d021c05c5d9d6d6f9c814e590b971bc68ec38a3d5887aec71b7b7305a950e8387cf8f3c4a907d534771ba1fce062679df2bac233575eddcf5eec0531f46e647af3f0758219976a1c4bf2f43f4c520128ea3c87133f31d4338d9af9f546ed76f401ed4f9093d522df964fcce2c140376ffd9d3c028509774dbb93e8ae8541297d62bacd2832a3388c89ae82cd6339e10f44a6c7d62a3afb5f25b0df6be3e92de23097422e5081e499c19a440b88a4bd260e781106ccfabd8ff4972d07261b1f6994ecade167e28f9f01798a506fb622a105476ef1428c5b21f322e0e87b37b6fde462ae3e4016f4064d4e4ed888edebc3145ca205503f9850f9e7cce25541f12212c0547f7f04bc4185eade80bc0510f5bc08825f0881cc55f6eb9f89149f211d09670736dfd517659fb032af528cf3376667a504ff0497505abc72d352bf975ef542bb2e10c30c5552598a01c6997a6a71cc5249c6f73fd5921e4d6910fcdf6ebd823e5fbd8ff108f0b0ac22e77cfe7904b56a1a58d025437077d8ce06914579ad44d44ca36b2e1df43a940c28c69a4679f8bd695350fd66ac0142cf1dde57dd80c63737576d2de4dfaab6bc83022d4b55a6e0aef6605dd4a659c0af3237d766b75b06486e9d5c137886103f6bc4b8077d66f94241798f48e53599f8266b2c7b06f8bd5da4b7af8d87e693cd63775c6c03324f5b3f36592700ba873431fec3cbfc601425e7f4373cebe2bf8930281322dd1e9c1d3918fc3684741ba7a44dc2c7283ae81af1d57b27c24ee09e5d929ee46ab603d39a45ee9055e2b8e2cdc2132ed1306c54e9b0bec6c1cc1c8121cd75e6d947ff6bf8b8bf80517403608c86224a8b3228b0e63466dc56e07758012bc26e3248c097e76b560c8463b65673cfb57a71f87a13212e049c5f1274b8316d2f373470782baa813b8d09fa6c887b8c408d37ef7ad700be6c4858a0408f221e06411907da77682ca1ba7ed8a0fcaafaf72f39a4377484193ff324723b81f06aa6d404f35d8c52e5eb17a76134968094411ac14b8e2ce6790619f76802fc31077a7022cecfe797a017d53e665176b7905a8d0346609fdd24d01bc145c60fd8ee24d1440e67e01fa4832bd318eae5a45092a80e8b0004ffc8b8fdb00fc58a5dc7eec70f972b2aa64cf76e4aa3365bd51390834619f444e98e4b3bdfa4bb40d0b986278b7436bc948101b8ae8eaf72c212f088a72dc67f70b4f9446b30f5bf659c", 0x1000, 0x44000, &(0x7f0000002340)={0x11, 0x4, 0x0, 0x1, 0xbc, 0x6, @local}, 0x14) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) socket$netlink(0x10, 0x3, 0xb) 379.806104ms ago: executing program 3 (id=4043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60380, 0x0) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000100)=0x14) (rerun: 64) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44040000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x22001084}, 0x4000800) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000180), 0x4) (async, rerun: 64) r8 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x2, 0x6, 0xff, 0x0, 0x7, 0x0, 0x0, 0x2, [@sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x18, 0x10, 0x12}]}, 0x38}}, 0x3400400c) (async, rerun: 32) readv(r7, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/207, 0xcf}], 0x1) (rerun: 32) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r10], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r11, &(0x7f0000000580)="8b90869eede879aa48fcf30885db895dc817eb0a709298be152439e5c63377eea3ba22e09695320cf3626e28eb1c13c5a5183a2da0a84ba1d85e81483745c13e10e2f7784057e1bd5c433d321702cec253b25883a24d6d64aca1361b0df8b4adc4e2ac4e5b7a860e958cc2f1c0dccf4b3371415f77863daf09173b0310bc2914f5c4a0a3b1582d734c36818bdf44325b7ed5eb6f9172784bed5d1395d2b9c4a511c0d5250fc711622bb17a453efc716cb78d3b2cba49eb2dcdc38ea7214bb7eadec965a668966090", 0xc8, 0x20008010, &(0x7f0000000680)={0xa, 0x4e22, 0xb533, @mcast1, 0x9a9}, 0x1c) (async) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffefff00000000000086dd6c9d221800462f01fc000000000000000000000000000001fe8000000000000000000000000000aa042065580000000205000000000000000000080088be00000001110100000000000000000003080022eb0000000325031f0702000000000000000000ab070800655800000001"], 0x0) 269.919591ms ago: executing program 1 (id=4044): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x2}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x35, 0x0, 0xffffffffffffffff, @void, @value=r4}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x166, 0x6, 0x8002, 0xc0000, 0x8, 0x81, 0x1, 0x4, r5}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000140)=0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1ab84, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) 224.442395ms ago: executing program 4 (id=4045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040400000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000acf1c483af483be37880d9ba00"/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r1, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_mreqn(r3, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@mh={{0x28}, {"03c4"}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xb, 0x7484, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 193.641689ms ago: executing program 2 (id=4046): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x45444}, 0x20008000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r5}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7}, 0x50) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x40, r1, 0x1, 0x70bd29, 0x3ff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6efed485dfb26801d7bfb008842f520e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "88c44ef2a689379c"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048804}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000340)=0x7ffc, 0x1c05368394a3b3e4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20004000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 105.266819ms ago: executing program 0 (id=4047): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x20010000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r4, 0xf13}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x200, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x1000, 0x0, 0x2}, 0x50) 710.415µs ago: executing program 3 (id=4048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="0200000000000000000001000000100002800c00010000000000000000d806070000000180"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x40010) 0s ago: executing program 4 (id=4049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="360a000040000000611058000000000095000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x6, 0xbaa, 0x10}, 0x48) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000200)={&(0x7f0000000140)=[{0x9, 0x7, 0x7, 0xae}, {0x8000, 0x4, 0x200, 0x3}], 0x2, 0x20, 0x1, 0x340e}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800442d2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a40)={'erspan0\x00', 0x0, 0xa1, 0x8, 0xad, 0xc8a, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x68, 0x0, 0xad, 0x2f, 0x0, @multicast2, @empty, {[@noop]}}}}}) sendmsg$inet(r0, &(0x7f0000000b80)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="efcaec987ff4646a4a94f28158", 0xd}, {&(0x7f00000001c0)="d2749a141c5cdb941f994756fb5aca4c4dd1ffcd6712319250db6be192e1e3f371531af68ff92133eca9f17e8dea5e5df02ddc4a04327736c3f7944d0f", 0x3d}, {&(0x7f00000004c0)="abadd0730add7ee86e81ba86ebc9cfbf8409d096f0c608450d9b2fce8b7c4af17ae038d372926227343dd1a5bffc109a365a9da500e77f28f31676417cb62bd108afc63052ee25c6e653eaa411f00f6a74f96808a0fac0393181bd8f974f299250ec66de679078f952b9975b169e2bc0c3121fd49092ae4252000116121bf257ebc93303dbe1e9e0ab3e5cd2fbce6147d5f15ccf0adc081ea09aff3c47609c63c918d362494d93084bf53ae139115021c9f64e89b3aa8ba2d8436ddab7113bd11306679f6761e5d8d0402958424d40e3f947d2f3333c6f782948ceb6544c76e101", 0xe1}, {&(0x7f00000006c0)="fedacbc5e52658db927d6641c5bf3b10a037f164d3130b90c7ee06d9486a9e388ff8f083007b9037311f46b8a6990f164caf8291946bc1ce68dbe09cf6483756d5f0748318e600357798c744f95a0483f4a161e6f80e91e3c736ee0ea4c0b0143fd799d11660", 0x66}, {&(0x7f0000000740)="4eeb01624a39427604e6440a7b0814cf876d7c399630f8e30cf673f73509dd2a80b2fd1409051660be8bb7cc00b7e77970ea5f5b41ee0cd346da8aaae4bfcd43d998d2582bd5fbe076a3cc89353c8611dfc21c4b25e7961eb050f35b79e0369e8bdbcada46c2633956a49cd2a200f403949e5610b92431f4063c305ce2ec1227c69bdcadf74e2022e60ff647f8ca20b433d8b6e1952bd67d997660d613a710a12ee9e8134c263fec13befb08da2432", 0xaf}, {&(0x7f0000000800)="a59466a9e130d130a999e62f7a2385fbf6a434031e2cf3623a18f3fce969a95c192d41ae2c732844a12bdcc1bd2933272e6ef6169f680782c45e84c792175b8c38971350947d15d54e90e98c1fce2594de3c810ab546b70d5dc8abae3bdfc82f97af32bd4420f5ed55c5c502f3de9f47f1850a2c20beeb51040f2603955974722dde4ddd78a8c2e6bff49da577e3890a21baf8e6eff4536fcea120263c846faba1821e5b27e9053d892073d94d7720493615b32d8891dfea817518097886c71d2cb74025", 0xc4}, {&(0x7f0000000900)="50f65669fd16932f5461692f8db5c4a3498f315ef9fe2d191d86a5e1fa29020bc7bb35a3cac6ef157bada73e6436b385b716fad650ee713e92b201e6af6f8d801c09f042bb5e448c2d8e9be3f05c8cbb7408ed07c0e78b5f570efd0cd46a7f12cc327b424b3f36aa8c5560ff34e269e2a06eeaf992150aa015283e265c147a34cd68eab75f59107e9c51f8d224f0cc6f7aa8619b7a530dd4ffdc49dbba9aad363b0ed858e2e05a2681d631bf490af4a28781", 0xb2}], 0x8, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x22}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9a1e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f3}}], 0x98}, 0x8050) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="360a000040000000611058000000000095000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x6, 0xbaa, 0x10}, 0x48) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) connect$nfc_raw(r3, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) (async) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000200)={&(0x7f0000000140)=[{0x9, 0x7, 0x7, 0xae}, {0x8000, 0x4, 0x200, 0x3}], 0x2, 0x20, 0x1, 0x340e}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800442d2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a40)={'erspan0\x00', 0x0, 0xa1, 0x8, 0xad, 0xc8a, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x68, 0x0, 0xad, 0x2f, 0x0, @multicast2, @empty, {[@noop]}}}}}) (async) sendmsg$inet(r0, &(0x7f0000000b80)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="efcaec987ff4646a4a94f28158", 0xd}, {&(0x7f00000001c0)="d2749a141c5cdb941f994756fb5aca4c4dd1ffcd6712319250db6be192e1e3f371531af68ff92133eca9f17e8dea5e5df02ddc4a04327736c3f7944d0f", 0x3d}, {&(0x7f00000004c0)="abadd0730add7ee86e81ba86ebc9cfbf8409d096f0c608450d9b2fce8b7c4af17ae038d372926227343dd1a5bffc109a365a9da500e77f28f31676417cb62bd108afc63052ee25c6e653eaa411f00f6a74f96808a0fac0393181bd8f974f299250ec66de679078f952b9975b169e2bc0c3121fd49092ae4252000116121bf257ebc93303dbe1e9e0ab3e5cd2fbce6147d5f15ccf0adc081ea09aff3c47609c63c918d362494d93084bf53ae139115021c9f64e89b3aa8ba2d8436ddab7113bd11306679f6761e5d8d0402958424d40e3f947d2f3333c6f782948ceb6544c76e101", 0xe1}, {&(0x7f00000006c0)="fedacbc5e52658db927d6641c5bf3b10a037f164d3130b90c7ee06d9486a9e388ff8f083007b9037311f46b8a6990f164caf8291946bc1ce68dbe09cf6483756d5f0748318e600357798c744f95a0483f4a161e6f80e91e3c736ee0ea4c0b0143fd799d11660", 0x66}, {&(0x7f0000000740)="4eeb01624a39427604e6440a7b0814cf876d7c399630f8e30cf673f73509dd2a80b2fd1409051660be8bb7cc00b7e77970ea5f5b41ee0cd346da8aaae4bfcd43d998d2582bd5fbe076a3cc89353c8611dfc21c4b25e7961eb050f35b79e0369e8bdbcada46c2633956a49cd2a200f403949e5610b92431f4063c305ce2ec1227c69bdcadf74e2022e60ff647f8ca20b433d8b6e1952bd67d997660d613a710a12ee9e8134c263fec13befb08da2432", 0xaf}, {&(0x7f0000000800)="a59466a9e130d130a999e62f7a2385fbf6a434031e2cf3623a18f3fce969a95c192d41ae2c732844a12bdcc1bd2933272e6ef6169f680782c45e84c792175b8c38971350947d15d54e90e98c1fce2594de3c810ab546b70d5dc8abae3bdfc82f97af32bd4420f5ed55c5c502f3de9f47f1850a2c20beeb51040f2603955974722dde4ddd78a8c2e6bff49da577e3890a21baf8e6eff4536fcea120263c846faba1821e5b27e9053d892073d94d7720493615b32d8891dfea817518097886c71d2cb74025", 0xc4}, {&(0x7f0000000900)="50f65669fd16932f5461692f8db5c4a3498f315ef9fe2d191d86a5e1fa29020bc7bb35a3cac6ef157bada73e6436b385b716fad650ee713e92b201e6af6f8d801c09f042bb5e448c2d8e9be3f05c8cbb7408ed07c0e78b5f570efd0cd46a7f12cc327b424b3f36aa8c5560ff34e269e2a06eeaf992150aa015283e265c147a34cd68eab75f59107e9c51f8d224f0cc6f7aa8619b7a530dd4ffdc49dbba9aad363b0ed858e2e05a2681d631bf490af4a28781", 0xb2}], 0x8, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x22}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9a1e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f3}}], 0x98}, 0x8050) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) (async) kernel console output (not intermixed with test programs): length. [ 403.055433][T15741] netlink: 'syz.4.2662': attribute type 25 has an invalid length. [ 403.088000][T15741] netlink: 'syz.4.2662': attribute type 26 has an invalid length. [ 403.146854][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2662'. [ 403.788063][T15761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2667'. [ 403.898342][T15761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2667'. [ 404.046120][T15766] netlink: 'syz.0.2669': attribute type 29 has an invalid length. [ 404.096455][T15766] netlink: 'syz.0.2669': attribute type 29 has an invalid length. [ 404.282598][T15773] netlink: 'syz.1.2670': attribute type 1 has an invalid length. [ 404.375790][T15774] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2670'. [ 404.487876][T15773] 8021q: adding VLAN 0 to HW filter on device bond10 [ 404.539783][T15772] vlan3: entered allmulticast mode [ 404.556923][T15772] bond10: entered allmulticast mode [ 404.742610][T15782] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2672'. [ 405.127700][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 405.617182][T15806] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 406.130657][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068ef4000: rx timeout, send abort [ 406.145928][T15827] netlink: 'syz.2.2684': attribute type 1 has an invalid length. [ 406.332267][T15827] 8021q: adding VLAN 0 to HW filter on device bond17 [ 406.372982][T15829] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 406.451972][T15832] bridge8: entered promiscuous mode [ 406.500983][T15832] bridge8: entered allmulticast mode [ 406.542211][T15842] netlink: 'syz.4.2688': attribute type 1 has an invalid length. [ 406.556147][T15832] bond17: (slave bridge8): making interface the new active one [ 406.566668][T15832] bond17: (slave bridge8): Enslaving as an active interface with an up link [ 406.630767][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069307000: rx timeout, send abort [ 406.640198][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068ef4000: abort rx timeout. Force session deactivation [ 406.736942][T15845] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2689'. [ 406.903407][T15842] bond12: entered promiscuous mode [ 406.931883][T15842] 8021q: adding VLAN 0 to HW filter on device bond12 [ 407.013069][T15856] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2693'. [ 407.100839][T15843] bond12: (slave bridge7): making interface the new active one [ 407.128228][T15843] bridge7: entered promiscuous mode [ 407.139352][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069307000: abort rx timeout. Force session deactivation [ 407.158610][T15862] netlink: 157 bytes leftover after parsing attributes in process `syz.0.2694'. [ 407.169194][T15843] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 407.564840][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2696'. [ 407.695598][ C1] bridge0: port 3(macvlan2) entered forwarding state [ 407.703311][ C1] bridge0: topology change detected, propagating [ 408.070483][T15887] vlan2: entered promiscuous mode [ 408.097547][T15887] bridge0: entered promiscuous mode [ 408.128542][T15887] macvlan2: entered promiscuous mode [ 408.158298][ T5726] ip6gretap0: left promiscuous mode [ 408.304502][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2702'. [ 408.588285][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2707'. [ 408.611417][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2705'. [ 408.656335][T15905] netlink: 'syz.0.2707': attribute type 3 has an invalid length. [ 408.692643][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2702'. [ 408.973990][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.575646][T15941] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 409.680930][T15946] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 410.538982][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2719'. [ 410.789844][T15964] syzkaller0: entered promiscuous mode [ 410.801426][T15964] syzkaller0: entered allmulticast mode [ 410.815698][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2721'. [ 412.823720][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 415.849890][T16041] ieee802154 phy0 wpan0: encryption failed: -90 [ 416.189305][T16060] netlink: 'syz.1.2747': attribute type 21 has an invalid length. [ 416.429485][T16060] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 416.506658][T16060] bond11 (unregistering): Released all slaves [ 416.671364][T16079] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2745'. [ 417.056437][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2751'. [ 417.271034][T16096] netlink: 'syz.4.2752': attribute type 13 has an invalid length. [ 417.305235][T16096] netlink: 'syz.4.2752': attribute type 58 has an invalid length. [ 417.330306][T16097] xt_l2tp: v2 doesn't support IP mode [ 417.342840][T16096] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2752'. [ 417.396099][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2752'. [ 417.452065][T16100] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 417.515399][T16103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2752'. [ 417.568392][T16100] netlink: 'syz.4.2752': attribute type 2 has an invalid length. [ 417.639205][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2755'. [ 417.651431][T16112] netlink: 'syz.3.2757': attribute type 1 has an invalid length. [ 417.693330][T16114] netlink: 'syz.0.2756': attribute type 1 has an invalid length. [ 417.725381][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2757'. [ 417.738211][T16108] bond11: option xmit_hash_policy: invalid value (64) [ 417.778199][T16108] bond11 (unregistering): Released all slaves [ 418.059048][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2758'. [ 418.357621][T16119] 8021q: adding VLAN 0 to HW filter on device bond13 [ 418.421706][T16123] 8021q: adding VLAN 0 to HW filter on device bond13 [ 418.456010][T16123] bond13: (slave ipip1): The slave device specified does not support setting the MAC address [ 418.487707][T16123] bond13: (slave ipip1): Error -95 calling set_mac_address [ 418.593559][T16133] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2762'. [ 418.659495][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2762'. [ 419.270155][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.286249][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.302105][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.320728][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.332633][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.537146][T16159] netlink: 'syz.0.2767': attribute type 1 has an invalid length. [ 419.745901][T16145] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 419.797531][T16145] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 419.812838][T16159] 8021q: adding VLAN 0 to HW filter on device bond12 [ 419.887810][T16161] bond12: (slave ip6erspan0): making interface the new active one [ 419.954606][T16161] bond12: (slave ip6erspan0): Enslaving as an active interface with an up link [ 421.015978][T16196] sctp: [Deprecated]: syz.0.2778 (pid 16196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.015978][T16196] Use struct sctp_sack_info instead [ 421.076745][T16198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.276958][T16207] pim6reg: entered allmulticast mode [ 421.374876][ T5644] Bluetooth: hci5: command tx timeout [ 421.632594][T16214] tipc: Failed to remove unknown binding: 66,1,1/2946282136:1837092847/1837092849 [ 421.656020][T16214] tipc: Failed to remove unknown binding: 66,1,1/2946282136:1837092847/1837092849 [ 421.677264][T16149] xfrm0 speed is unknown, defaulting to 1000 [ 421.781750][ T7416] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 421.876654][T16221] netlink: 'syz.0.2786': attribute type 1 has an invalid length. [ 421.886493][T16221] netlink: 'syz.0.2786': attribute type 1 has an invalid length. [ 423.456772][ T5644] Bluetooth: hci5: command tx timeout [ 423.872393][T16275] __nla_validate_parse: 13 callbacks suppressed [ 423.872417][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2801'. [ 423.978739][T16275] 8021q: adding VLAN 0 to HW filter on device bond13 [ 424.051899][T16275] ipvlan0: entered allmulticast mode [ 424.057926][T16275] bond13: entered allmulticast mode [ 424.132672][T16275] bond13: (slave ipip0): refused to change device type [ 424.274791][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2803'. [ 424.301594][T16284] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2803'. [ 424.314999][T16284] netlink: ct family unspecified [ 424.569287][T16290] netlink: 'syz.4.2805': attribute type 10 has an invalid length. [ 424.590684][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2805'. [ 424.726142][T16293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2808'. [ 424.741163][T16295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2808'. [ 424.928431][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 424.969808][T16298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2809'. [ 425.030586][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 425.068717][T16298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2809'. [ 425.300430][T16313] netlink: 'syz.2.2812': attribute type 8 has an invalid length. [ 425.534183][ T5644] Bluetooth: hci5: command tx timeout [ 425.564613][T16325] netlink: 'syz.0.2815': attribute type 8 has an invalid length. [ 425.939417][T16149] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.949004][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.957116][T16149] bridge_slave_0: entered allmulticast mode [ 425.966123][T16149] bridge_slave_0: entered promiscuous mode [ 425.979570][T16149] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.994380][T16149] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.012979][T16149] bridge_slave_1: entered allmulticast mode [ 426.032081][T16149] bridge_slave_1: entered promiscuous mode [ 426.258135][T16149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.310432][T16149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.548707][T16149] team0: Port device team_slave_0 added [ 426.625797][T16149] team0: Port device team_slave_1 added [ 426.690505][T16352] netlink: 'syz.3.2822': attribute type 3 has an invalid length. [ 426.747800][T16149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.762320][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.820153][T16149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.871582][T16149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.901816][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.026331][T16149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.242308][T16149] hsr_slave_0: entered promiscuous mode [ 427.269094][T16149] hsr_slave_1: entered promiscuous mode [ 427.546455][T16368] netlink: 'syz.4.2824': attribute type 1 has an invalid length. [ 427.566901][T16368] netlink: 'syz.4.2824': attribute type 2 has an invalid length. [ 427.576764][T16369] netlink: 'syz.4.2824': attribute type 8 has an invalid length. [ 427.603332][T16369] bond0: entered promiscuous mode [ 427.612958][T16369] gretap0: entered promiscuous mode [ 427.618868][ T5644] Bluetooth: hci5: command tx timeout [ 427.632793][T16369] veth1_to_hsr: entered promiscuous mode [ 427.640838][T16369] hsr1: entered promiscuous mode [ 428.135974][T16149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.207820][T16383] netlink: 'syz.3.2828': attribute type 3 has an invalid length. [ 428.244885][T16383] netlink: 'syz.3.2828': attribute type 2 has an invalid length. [ 428.341638][T16388] syzkaller0: entered promiscuous mode [ 428.371642][T16388] syzkaller0: entered allmulticast mode [ 428.598866][T16149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.651908][T16403] netlink: 'syz.3.2833': attribute type 11 has an invalid length. [ 428.747684][T16408] netlink: 'syz.2.2834': attribute type 1 has an invalid length. [ 428.757312][T16408] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 428.768102][T16408] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 428.786412][T16408] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 428.864721][T16149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.122733][T16149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.200238][T16413] tc action pedit 'at' offset 6 out of bounds [ 429.360508][T16426] __nla_validate_parse: 13 callbacks suppressed [ 429.360570][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2842'. [ 429.362085][T16422] syzkaller0: entered promiscuous mode [ 429.402617][T16422] syzkaller0: entered allmulticast mode [ 429.477085][T16427] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.2841'. [ 430.000123][T16439] bond14: (slave ip6gretap1): making interface the new active one [ 430.009493][T16439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 430.026217][T16439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 430.034793][T16439] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 430.074824][T16149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 430.121320][T16149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.160698][T16149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 430.215442][T16149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.249425][T16149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 430.271653][T16149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.282307][T16149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 430.296963][T16451] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2847'. [ 430.326182][T16149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.346553][T16451] 8021q: VLANs not supported on gre0 [ 430.477136][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'. [ 430.711895][T16149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.822864][T16149] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.904431][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.912227][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.956527][T16472] x_tables: ip_tables: ah match: only valid for protocol 51 [ 431.008310][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.015618][T10607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.198029][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 431.244096][T16481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2858'. [ 431.324263][T16480] gtp1: entered promiscuous mode [ 431.354696][T16480] gtp1: entered allmulticast mode [ 431.386258][T16485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2858'. [ 431.480636][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'. [ 431.963353][T16504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2863'. [ 432.503231][T16523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.597396][T16524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.838337][T16534] sctp: [Deprecated]: syz.4.2869 (pid 16534) Use of int in max_burst socket option deprecated. [ 432.838337][T16534] Use struct sctp_assoc_value instead [ 433.058312][T16541] syzkaller0: entered promiscuous mode [ 433.073123][T16541] syzkaller0: entered allmulticast mode [ 433.239478][T16149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.447948][T16560] SET target dimension over the limit! [ 433.578077][T16149] veth0_vlan: entered promiscuous mode [ 433.726877][T16149] veth1_vlan: entered promiscuous mode [ 433.824398][T16568] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 434.117702][T16149] veth0_macvtap: entered promiscuous mode [ 434.220204][T16149] veth1_macvtap: entered promiscuous mode [ 434.462109][T16149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.478179][T16579] veth0_to_team: Caught tx_queue_len zero misconfig [ 434.518893][T16582] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 434.529064][T16582] syzkaller1: linktype set to 823 [ 434.555737][T16149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.678170][T10607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.698446][T10607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.717385][T16591] siw: device registration error -23 [ 434.730169][T10607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.792616][T10607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.934669][T16599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2886'. [ 435.157793][T10607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.193260][T10607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.300767][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 435.334939][T16609] validate_nla: 2 callbacks suppressed [ 435.334960][T16609] netlink: 'syz.3.2890': attribute type 30 has an invalid length. [ 435.352584][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.365386][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.393616][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 435.481881][T16609] netlink: 'syz.3.2890': attribute type 21 has an invalid length. [ 435.543577][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 435.578094][T16609] netlink: 'syz.3.2890': attribute type 21 has an invalid length. [ 435.631713][T16617] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.641832][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 436.250248][T16634] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2897'. [ 436.622723][T16642] openvswitch: netlink: IPv4 tun info is not correct [ 436.861035][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.886362][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.899205][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.910547][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.931946][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.507312][ T5624] syz_tun (unregistering): left allmulticast mode [ 437.518501][ T5624] syz_tun (unregistering): left promiscuous mode [ 437.539470][ T5624] bridge0: port 3(syz_tun) entered disabled state [ 437.777920][T16656] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.853615][T16666] ipt_REJECT: TCP_RESET invalid for non-tcp [ 437.898146][T16666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2903'. [ 438.021315][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.079023][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.426455][T16682] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2907'. [ 438.462111][T16682] netlink: Unknown conntrack attr (0) [ 438.470354][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.508066][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.670721][T16682] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2907'. [ 438.819959][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.889369][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.935343][T16692] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 439.003314][T16697] netlink: 'syz.4.2911': attribute type 21 has an invalid length. [ 439.027225][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2911'. [ 439.055886][ T5644] Bluetooth: hci2: command tx timeout [ 439.112682][T16697] netlink: 'syz.4.2911': attribute type 21 has an invalid length. [ 439.378862][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.423436][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.754821][T16645] xfrm0 speed is unknown, defaulting to 1000 [ 439.850959][T16716] netlink: 'syz.2.2914': attribute type 30 has an invalid length. [ 440.349914][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.855521][ T12] bridge_slave_1: left promiscuous mode [ 440.905426][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.088744][ T12] bridge_slave_0: left allmulticast mode [ 441.106345][ T12] bridge_slave_0: left promiscuous mode [ 441.135115][ T5644] Bluetooth: hci2: command tx timeout [ 441.148240][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.316366][ T12] pimreg: left allmulticast mode [ 441.330886][T16753] __nla_validate_parse: 4 callbacks suppressed [ 441.330948][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'. [ 441.979222][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 441.991299][ T12] bond12 (unregistering): (slave ip6erspan0): Releasing active interface [ 442.040850][ T12] bond14 (unregistering): (slave ip6gretap1): Releasing active interface [ 442.467463][ T12] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 442.521058][ T12] bond2 (unregistering): (slave geneve2): Releasing active interface [ 442.850545][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.862484][ T12] bond_slave_0: left promiscuous mode [ 442.875390][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.885270][ T12] bond_slave_1: left promiscuous mode [ 442.891369][ T12] bond0 (unregistering): Released all slaves [ 442.907842][ T12] bond1 (unregistering): Released all slaves [ 442.930793][ T12] bond2 (unregistering): Released all slaves [ 442.962127][ T12] bond3 (unregistering): (slave bond4): Releasing backup interface [ 442.972314][ T12] bond3 (unregistering): Released all slaves [ 442.994799][ T12] bond4 (unregistering): Released all slaves [ 443.019644][ T12] bond5 (unregistering): Released all slaves [ 443.050672][ T12] bond6 (unregistering): Released all slaves [ 443.078458][ T12] bond7 (unregistering): Released all slaves [ 443.105097][ T12] bond8 (unregistering): Released all slaves [ 443.139870][ T12] bond9 (unregistering): (slave lo): Releasing backup interface [ 443.150934][ T12] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 443.167586][ T12] bond9 (unregistering): Released all slaves [ 443.192731][ T12] bond10 (unregistering): Released all slaves [ 443.214051][ T5644] Bluetooth: hci2: command tx timeout [ 443.229894][ T12] bond11 (unregistering): Released all slaves [ 443.255841][ T12] bond12 (unregistering): Released all slaves [ 443.296197][ T12] bond13 (unregistering): Released all slaves [ 443.317505][ T12] bond14 (unregistering): Released all slaves [ 443.360960][T16741] vti0: entered promiscuous mode [ 443.371152][T16741] vti0: entered allmulticast mode [ 443.387109][T16741] team0: Device vti0 is of different type [ 443.562685][T16761] team1: entered promiscuous mode [ 443.574400][T16761] team1: entered allmulticast mode [ 443.592595][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 444.071041][T16789] x_tables: unsorted underflow at hook 3 [ 444.507039][T16806] IPVS: set_ctl: invalid protocol: 28 0.0.0.0:20003 [ 444.668029][T16809] netlink: 'syz.2.2937': attribute type 2 has an invalid length. [ 444.684777][T16811] netlink: 'syz.3.2938': attribute type 1 has an invalid length. [ 444.793906][T10607] smc: removing ib device sy‡1 [ 444.952998][T10607] smbdirect: ib_dev[sy‡1] removed [ 445.207372][T16811] 8021q: adding VLAN 0 to HW filter on device bond14 [ 445.295704][ T5644] Bluetooth: hci2: command tx timeout [ 445.498956][T16817] vlan3: entered promiscuous mode [ 445.510515][T16817] bond14: entered promiscuous mode [ 445.525396][T16817] vlan3: entered allmulticast mode [ 445.552062][T16817] bond14: entered allmulticast mode [ 445.609664][T16819] bridge7: entered promiscuous mode [ 445.705549][T16819] bond14: (slave bridge7): making interface the new active one [ 445.741228][T16819] bridge7: entered allmulticast mode [ 445.793352][T16819] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 446.449612][T16856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2945'. [ 447.141803][T16850] syzkaller0: entered promiscuous mode [ 447.163034][T16850] syzkaller0: entered allmulticast mode [ 451.337653][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 451.592098][T16883] netlink: 'syz.4.2951': attribute type 1 has an invalid length. [ 451.680999][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2952'. [ 451.707432][T16890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2951'. [ 451.889514][T16883] 8021q: adding VLAN 0 to HW filter on device bond14 [ 451.977629][T16898] 8021q: adding VLAN 0 to HW filter on device bond15 [ 451.989076][T16898] bond14: (slave bond15): Enslaving as an active interface with a down link [ 452.012105][ T12] tipc: Left network mode [ 453.082922][T16938] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 453.332561][T16948] netlink: 'syz.1.2964': attribute type 1 has an invalid length. [ 453.365955][T16948] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2964'. [ 453.775392][ T7540] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.790129][T16645] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.835650][T16645] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.860306][T16645] bridge_slave_0: entered allmulticast mode [ 453.881915][T16645] bridge_slave_0: entered promiscuous mode [ 453.986827][T16645] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.039592][T16645] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.060096][T16645] bridge_slave_1: entered allmulticast mode [ 454.090717][T16645] bridge_slave_1: entered promiscuous mode [ 454.198420][T16972] netlink: 'syz.3.2969': attribute type 4 has an invalid length. [ 454.302230][T16972] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2969'. [ 454.523423][T16645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.597575][T16645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.902643][T16985] GUP no longer grows the stack in syz.2.2972 (16985): 200000003000-20000000a000 (200000001000) [ 454.971528][T16985] CPU: 1 UID: 0 PID: 16985 Comm: syz.2.2972 Not tainted syzkaller #0 PREEMPT(full) [ 454.971564][T16985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.971576][T16985] Call Trace: [ 454.971584][T16985] [ 454.971593][T16985] dump_stack_lvl+0xe8/0x150 [ 454.971623][T16985] __get_user_pages+0x2378/0x2720 [ 454.971649][T16985] ? __gup_longterm_locked+0xc4e/0x1630 [ 454.971699][T16985] ? __gup_longterm_locked+0xc4e/0x1630 [ 454.971722][T16985] ? down_read_killable+0x1bb/0x340 [ 454.971754][T16985] __gup_longterm_locked+0xdcf/0x1630 [ 454.971783][T16985] ? lock_acquire+0x106/0x350 [ 454.971823][T16985] gup_fast_fallback+0x1d84/0x20d0 [ 454.971882][T16985] ? __pfx_gup_fast_fallback+0x10/0x10 [ 454.971908][T16985] ? is_valid_gup_args+0x11f/0x200 [ 454.971933][T16985] ? get_user_pages_fast+0x4d/0xb0 [ 454.971960][T16985] __iov_iter_get_pages_alloc+0x370/0xa10 [ 454.971996][T16985] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 454.972030][T16985] iov_iter_get_pages2+0x5e/0xa0 [ 454.972061][T16985] __se_sys_vmsplice+0x7c7/0x1620 [ 454.972109][T16985] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 454.972138][T16985] ? __pfx_futex_wake+0x10/0x10 [ 454.972174][T16985] ? lockdep_hardirqs_on+0x7a/0x110 [ 454.972255][T16985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.972276][T16985] do_syscall_64+0x15f/0xf80 [ 454.972298][T16985] ? trace_irq_disable+0x3b/0x140 [ 454.972327][T16985] ? clear_bhb_loop+0x40/0x90 [ 454.972352][T16985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.972372][T16985] RIP: 0033:0x7f063ff9cdd9 [ 454.972391][T16985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.972409][T16985] RSP: 002b:00007f0640dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 454.972430][T16985] RAX: ffffffffffffffda RBX: 00007f0640215fa0 RCX: 00007f063ff9cdd9 [ 454.972445][T16985] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 454.972457][T16985] RBP: 00007f0640032d69 R08: 0000000000000000 R09: 0000000000000000 [ 454.972469][T16985] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 454.972482][T16985] R13: 00007f0640216038 R14: 00007f0640215fa0 R15: 00007ffc55fbfcc8 [ 454.972516][T16985] [ 455.380715][T16994] netlink: zone id is out of range [ 455.386249][T16994] netlink: zone id is out of range [ 455.392002][T16994] netlink: zone id is out of range [ 455.398632][T16994] netlink: zone id is out of range [ 455.405370][T16994] netlink: zone id is out of range [ 455.410697][T16994] netlink: del zone limit has 4 unknown bytes [ 455.499374][T16645] team0: Port device team_slave_0 added [ 455.544483][T16645] team0: Port device team_slave_1 added [ 455.581891][T16991] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 455.615156][ T5644] Bluetooth: hci2: command tx timeout [ 455.772174][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 455.986230][T16999] netlink: 'syz.2.2975': attribute type 9 has an invalid length. [ 456.006311][T16645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.023105][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.070129][T16645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.089748][T16645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.129527][T16645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.223075][T16645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.525049][T17012] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 456.673256][T17018] netlink: 'syz.1.2979': attribute type 1 has an invalid length. [ 456.715070][T17018] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2979'. [ 456.764452][T17018] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2979'. [ 456.780295][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2980'. [ 456.806207][T17018] netlink: 'syz.1.2979': attribute type 1 has an invalid length. [ 456.844649][T17018] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2979'. [ 457.036393][T16645] hsr_slave_0: entered promiscuous mode [ 457.087839][T16645] hsr_slave_1: entered promiscuous mode [ 457.130898][T16645] debugfs: 'hsr0' already exists in 'hsr' [ 457.170623][T16645] Cannot create hsr debugfs directory [ 457.228628][T17028] netlink: 'syz.3.2981': attribute type 1 has an invalid length. [ 457.280536][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 457.543309][T17028] 8021q: adding VLAN 0 to HW filter on device bond15 [ 457.556978][T17033] bond15: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 457.621829][T17033] bond15: entered allmulticast mode [ 457.762446][T17038] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link [ 457.802578][T17044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2985'. [ 458.222751][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 458.589850][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'. [ 458.622560][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.668478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.717638][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 459.163440][T17081] can: request_module (can-proto-0) failed. [ 459.483038][ T12] team0 (unregistering): Port device team_slave_1 removed [ 459.511156][ T12] team0 (unregistering): Port device team_slave_0 removed [ 459.756328][T17069] veth0_to_bond: entered allmulticast mode [ 459.772244][T17077] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 459.878622][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 460.087878][T17092] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2995'. [ 460.764855][T17114] Cannot find set identified by id 65534 to match [ 461.502831][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'. [ 461.553191][T17138] netlink: 'syz.3.3006': attribute type 83 has an invalid length. [ 461.811290][ T12] IPVS: stop unused estimator thread 0... [ 462.086847][T17149] netlink: 'syz.3.3009': attribute type 4 has an invalid length. [ 463.470924][T17196] netlink: 'syz.2.3019': attribute type 83 has an invalid length. [ 463.787784][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3020'. [ 463.912039][T16645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 464.039103][T16645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.082315][T16645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 464.169664][T16645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.285585][T16645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.337211][T16645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.382075][T17225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3027'. [ 464.540503][T16645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.599177][T16645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.680325][T17235] netlink: 496 bytes leftover after parsing attributes in process `syz.3.3028'. [ 464.699951][T17235] openvswitch: netlink: Message has 5 unknown bytes. [ 465.260269][T17252] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3030'. [ 465.305917][T17252] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3030'. [ 465.733710][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3032'. [ 465.879280][T16645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.021257][T16645] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.055409][T17267] netlink: 'syz.2.3035': attribute type 7 has an invalid length. [ 466.099013][T17275] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3034'. [ 466.136716][T17267] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3035'. [ 466.302719][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.311062][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.498569][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.506204][ T7532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.681740][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3038'. [ 466.766407][T17291] netlink: 'syz.2.3039': attribute type 10 has an invalid length. [ 466.798551][T17291] dummy0: left allmulticast mode [ 466.855257][T17291] team0: Port device dummy0 added [ 466.953082][T17289] netlink: 'syz.2.3039': attribute type 10 has an invalid length. [ 467.283197][T17289] team0: Port device dummy0 removed [ 467.326653][T17289] dummy0: entered allmulticast mode [ 467.334561][T17289] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 467.811028][T17313] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3044'. [ 467.912576][T17309] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 467.950952][T17309] bond2 (unregistering): Released all slaves [ 469.169097][T17356] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 469.423611][T16645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.495068][T16645] veth0_vlan: entered promiscuous mode [ 469.517721][T16645] veth1_vlan: entered promiscuous mode [ 469.576312][T16645] veth0_macvtap: entered promiscuous mode [ 469.592087][T16645] veth1_macvtap: entered promiscuous mode [ 469.632335][T16645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.659215][T16645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.687509][ T7532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.709042][ T7532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.741707][ T7532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.758292][ T7532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.498673][T17383] netlink: 'syz.2.3057': attribute type 5 has an invalid length. [ 470.938902][T17319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.136659][ T7531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.187574][ T7531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.413595][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.469471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.728669][T17415] __nla_validate_parse: 1 callbacks suppressed [ 471.728691][T17415] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3064'. [ 471.757840][T17418] netlink: 'syz.2.3064': attribute type 49 has an invalid length. [ 471.810923][T17415] veth0_to_bond: default FDB implementation only supports local addresses [ 472.170738][T17418] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.200449][T17418] ip6gretap0: entered promiscuous mode [ 472.219817][T17418] ip6gretap0: entered allmulticast mode [ 473.596938][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.624167][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.638285][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.651830][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.665357][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.949970][T17482] netlink: 'syz.1.3076': attribute type 4 has an invalid length. [ 474.789469][T17506] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3081'. [ 475.031990][T17519] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3083'. [ 475.076070][T17521] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3082'. [ 475.092784][T17521] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 475.416325][T17528] netlink: 'syz.1.3086': attribute type 83 has an invalid length. [ 475.416468][T10607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.432080][T17530] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3087'. [ 475.476100][T10607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.488986][T10607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 475.680614][T17537] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 475.694006][ T5644] Bluetooth: hci0: command tx timeout [ 475.993033][T10607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.030154][T10607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.061358][T10607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 476.175547][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 476.439049][T10607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.498009][T10607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.543685][T10607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 477.087650][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 477.122109][T17579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3097'. [ 477.236841][T10607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.280415][T10607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.339041][T10607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 477.370217][T17594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.776732][ T5644] Bluetooth: hci0: command tx timeout [ 477.867254][T17469] xfrm0 speed is unknown, defaulting to 1000 [ 478.866347][T17625] vcan1: entered promiscuous mode [ 478.878160][T17625] vcan1: entered allmulticast mode [ 478.887942][T17640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3106'. [ 479.221781][T17623] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 479.288738][T10607] macvlan2: left allmulticast mode [ 479.312093][T17646] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3107'. [ 479.334193][T10607] ip6gretap0: left allmulticast mode [ 479.361281][T17647] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3107'. [ 479.408222][T10607] macvlan2: left promiscuous mode [ 479.431920][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'. [ 479.432754][T10607] bridge0: port 3(macvlan2) entered disabled state [ 479.743376][T17661] netlink: 'syz.4.3110': attribute type 10 has an invalid length. [ 479.755881][T17661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3110'. [ 479.858673][ T5644] Bluetooth: hci0: command tx timeout [ 480.138759][T10607] bond15 (unregistering): (slave ip6gretap1): Releasing active interface [ 480.250075][T17512] smc: removing ib device syz1 [ 480.352358][T17512] smbdirect: ib_dev[syz1] removed [ 480.963186][T10607] bridge0 (unregistering): left allmulticast mode [ 481.283356][T10607] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 481.606803][T10607] bond14 (unregistering): (slave bridge7): Releasing active interface [ 481.615968][T10607] bridge7 (unregistering): left allmulticast mode [ 481.761558][T10607] bond0 (unregistering): Released all slaves [ 481.821598][T10607] bond1 (unregistering): Released all slaves [ 481.937548][ T5644] Bluetooth: hci0: command 0x0419 tx timeout [ 481.947910][T10607] bond2 (unregistering): Released all slaves [ 482.031705][T10607] bond3 (unregistering): Released all slaves [ 482.121196][T10607] bond4 (unregistering): Released all slaves [ 482.259087][T10607] bond5 (unregistering): (slave veth3): Releasing active interface [ 482.283045][T10607] bond5 (unregistering): Released all slaves [ 482.367913][T10607] bond6 (unregistering): Released all slaves [ 482.423366][T10607] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 482.451351][T10607] bond7 (unregistering): Released all slaves [ 482.498474][T10607] bond8 (unregistering): Released all slaves [ 482.563645][T10607] bond9 (unregistering): Released all slaves [ 482.608663][T10607] bond10 (unregistering): Released all slaves [ 482.651745][T10607] bond11 (unregistering): (slave lo): Releasing backup interface [ 482.662482][T10607] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 482.683196][T10607] bond11 (unregistering): Released all slaves [ 482.769691][T10607] bond12 (unregistering): Released all slaves [ 482.827084][T10607] bond13 (unregistering): Released all slaves [ 482.895834][T10607] bond14 (unregistering): Released all slaves [ 482.929414][T10607] bond15 (unregistering): Released all slaves [ 483.018408][T17650] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 483.021929][T17661] dummy0: entered promiscuous mode [ 483.089552][T17661] bridge0: port 1(dummy0) entered blocking state [ 483.125595][T17661] bridge0: port 1(dummy0) entered disabled state [ 483.165170][T17661] dummy0: entered allmulticast mode [ 483.289557][T17661] bridge0: port 1(dummy0) entered blocking state [ 483.296349][T17661] bridge0: port 1(dummy0) entered forwarding state [ 483.330052][T17675] IPVS: length: 174 != 24 [ 483.362487][T17285] xfrm0 speed is unknown, defaulting to 1000 [ 483.387233][T17285] syz1: Port: 1 Link DOWN [ 483.489367][T17679] netlink: 294 bytes leftover after parsing attributes in process `syz.1.3112'. [ 483.523416][T17679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.610089][T17684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'. [ 483.621580][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 483.768378][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 483.898093][T17692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3114'. [ 484.015255][ T5644] Bluetooth: hci0: command 0x0419 tx timeout [ 484.038530][T17684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'. [ 484.693157][T10607] tipc: Left network mode [ 484.765361][T17707] netlink: 'syz.4.3118': attribute type 23 has an invalid length. [ 485.311291][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 485.329879][T17729] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.3122'. [ 485.344264][T17728] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.3122'. [ 485.842017][T10607] hsr_slave_0: left promiscuous mode [ 485.919476][T10607] veth1_macvtap: left promiscuous mode [ 485.920605][T17746] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3127'. [ 485.937397][T10607] veth0_macvtap: left promiscuous mode [ 485.949732][T10607] veth1_vlan: left promiscuous mode [ 485.956033][T10607] veth0_vlan: left promiscuous mode [ 486.103473][ T5644] Bluetooth: hci0: command 0x0419 tx timeout [ 486.451799][T17469] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.461242][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.469099][T17469] bridge_slave_0: entered allmulticast mode [ 486.477765][T17469] bridge_slave_0: entered promiscuous mode [ 486.488904][T17469] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.498111][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.523585][T17469] bridge_slave_1: entered allmulticast mode [ 486.542749][T17469] bridge_slave_1: entered promiscuous mode [ 486.648311][T17469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.669984][T17469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.777257][T17469] team0: Port device team_slave_0 added [ 486.786948][T17469] team0: Port device team_slave_1 added [ 486.841045][T17469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.841682][T10607] IPVS: stop unused estimator thread 0... [ 486.848687][T17469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.883022][T17469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.912619][T17469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.920376][T17469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.948964][T17469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.043636][T17469] hsr_slave_0: entered promiscuous mode [ 487.051157][T17469] hsr_slave_1: entered promiscuous mode [ 487.060307][T17469] debugfs: 'hsr0' already exists in 'hsr' [ 487.072034][T17469] Cannot create hsr debugfs directory [ 487.152147][T17769] bridge0: port 3(syz_tun) entered blocking state [ 487.159650][T17769] bridge0: port 3(syz_tun) entered disabled state [ 487.170846][T17769] syz_tun: entered allmulticast mode [ 487.180720][T17769] syz_tun: entered promiscuous mode [ 487.187136][T17769] bridge0: port 3(syz_tun) entered blocking state [ 487.193879][T17769] bridge0: port 3(syz_tun) entered forwarding state [ 487.769193][T17709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.837222][T17469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.900094][T17469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.938663][T17469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.058385][T17469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.086999][T17469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.169820][T17469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.203004][T17469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.277960][T17469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.600705][T17823] __nla_validate_parse: 2 callbacks suppressed [ 488.600727][T17823] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3144'. [ 488.667688][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3144'. [ 488.700875][T17828] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 488.706363][T17469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.809550][T17823] xt_l2tp: missing protocol rule (udp|l2tpip) [ 488.847857][T17469] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.923029][T17510] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.930463][T17510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.020672][T17510] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.027936][T17510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.101244][T17849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3150'. [ 489.526805][T17870] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3156'. [ 489.582343][T17870] vlan2: entered allmulticast mode [ 489.592170][T17870] gretap0: entered allmulticast mode [ 489.831570][T17887] tc_dump_action: action bad kind [ 490.190458][T17902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 490.637714][T17932] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3166'. [ 491.252599][T17469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.296687][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3173'. [ 491.439550][T17469] veth0_vlan: entered promiscuous mode [ 491.537653][T17469] veth1_vlan: entered promiscuous mode [ 491.564102][T17967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3176'. [ 491.586110][T17964] tipc: Enabling of bearer rejected, media not registered [ 491.613343][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'. [ 491.669217][T17966] bridge0: port 3(syz_tun) entered disabled state [ 491.675993][T17966] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.684269][T17966] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.720717][T17966] bridge0: entered allmulticast mode [ 491.762311][T17975] netlink: 'syz.1.3179': attribute type 14 has an invalid length. [ 491.763251][T17977] bridge0: port 3(veth0_to_bridge) entered blocking state [ 491.780887][T17977] bridge0: port 3(veth0_to_bridge) entered disabled state [ 491.789044][T17977] veth0_to_bridge: entered allmulticast mode [ 491.797863][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 491.800750][T17977] veth0_to_bridge: entered promiscuous mode [ 491.825693][T17971] vlan2: entered promiscuous mode [ 491.831162][T17971] bridge0: entered promiscuous mode [ 491.968325][T17973] bond2: entered promiscuous mode [ 491.997951][T17973] bond2: entered allmulticast mode [ 492.020773][T17973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.050197][T17469] veth0_macvtap: entered promiscuous mode [ 492.082521][T17975] netlink: 'syz.1.3179': attribute type 14 has an invalid length. [ 492.127280][T10608] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.169255][T17469] veth1_macvtap: entered promiscuous mode [ 492.196647][T10608] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.222161][T10608] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.357544][T17992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.405673][T10608] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.457722][T17998] bond2: (slave hsr0): The slave device specified does not support setting the MAC address [ 492.508220][T17998] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 492.532338][T17998] bond2: (slave hsr0): Error -22 calling dev_set_mtu [ 492.570775][T18001] syzkaller0: entered promiscuous mode [ 492.600690][T18001] syzkaller0: entered allmulticast mode [ 492.665950][T18015] Bluetooth: MGMT ver 1.23 [ 492.842787][T17469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.891276][T17469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.950127][T17511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.980445][T17511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.018806][T17511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.049529][T17511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.130190][T18029] vlan2: entered allmulticast mode [ 493.140565][T18029] bond0: entered allmulticast mode [ 493.151376][T18029] bond_slave_0: entered allmulticast mode [ 493.159651][T18029] bond_slave_1: entered allmulticast mode [ 493.508959][T17512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.532236][T17512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.590838][T17513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.602529][T17513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.105128][T18063] syzkaller0: entered promiscuous mode [ 494.130917][T18063] syzkaller0: entered allmulticast mode [ 494.181054][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.194068][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.207819][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.219451][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.230619][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 494.449777][T18073] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 494.557530][T18075] x_tables: duplicate underflow at hook 2 [ 494.772379][T18086] __nla_validate_parse: 6 callbacks suppressed [ 494.772403][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3207'. [ 494.927140][T18086] bond3: Invalid ad_actor_system MAC address. [ 494.961909][T18086] bond3: option ad_actor_system: invalid value (1) [ 494.993043][T18086] bond3 (unregistering): Released all slaves [ 495.097438][T18090] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 495.110473][T18090] bond3 (unregistering): Released all slaves [ 495.148068][T18094] bond19: option lp_interval: invalid value (0) [ 495.155795][T18094] bond19: option lp_interval: allowed values 1 - 2147483647 [ 495.185103][T18094] bond19 (unregistering): Released all slaves [ 495.220922][T18105] netlink: 'syz.3.3210': attribute type 1 has an invalid length. [ 495.246181][T18098] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 495.495918][T18110] netlink: 'syz.1.3211': attribute type 12 has an invalid length. [ 495.509736][T18110] netlink: 'syz.1.3211': attribute type 29 has an invalid length. [ 495.534561][T18110] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3211'. [ 495.582007][T18110] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3211'. [ 495.627077][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3214'. [ 495.867914][T18134] sctp: [Deprecated]: syz.2.3218 (pid 18134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.867914][T18134] Use struct sctp_sack_info instead [ 495.965550][T18136] netlink: 'syz.2.3218': attribute type 33 has an invalid length. [ 496.111426][T18136] bond19: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 496.128771][T18136] bond19 (unregistering): Released all slaves [ 496.177626][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 496.177882][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 496.354192][ T5644] Bluetooth: hci1: command tx timeout [ 496.752770][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 496.789311][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3223'. [ 496.807719][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3224'. [ 496.824576][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3224'. [ 497.018550][ T7425] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.036171][ T7425] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.046855][ T7425] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.092478][ T7425] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.288607][T18064] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.305645][T18064] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.329975][T18064] bridge_slave_0: entered allmulticast mode [ 497.355396][T18064] bridge_slave_0: entered promiscuous mode [ 497.382848][T18064] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.406415][T18064] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.427857][T18064] bridge_slave_1: entered allmulticast mode [ 497.452326][T18064] bridge_slave_1: entered promiscuous mode [ 497.604269][T18064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.632223][T18064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.805399][T18064] team0: Port device team_slave_0 added [ 497.841075][T18064] team0: Port device team_slave_1 added [ 497.848288][T18219] netlink: 'syz.1.3239': attribute type 5 has an invalid length. [ 497.948558][T18219] geneve2: entered promiscuous mode [ 497.973048][T18219] geneve2: entered allmulticast mode [ 498.043413][ T7425] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 498.072179][ T7425] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 498.103440][T18064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.121408][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.156952][T18064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.178056][T18238] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 498.213189][ T7425] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 498.236235][ T7425] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 498.256087][T18243] netlink: 'syz.1.3245': attribute type 30 has an invalid length. [ 498.344993][T18064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.362239][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.414016][ T5644] Bluetooth: hci1: command tx timeout [ 498.424115][T18064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.541726][T18256] netlink: 'syz.2.3251': attribute type 1 has an invalid length. [ 498.611243][T18258] sctp: [Deprecated]: syz.2.3251 (pid 18258) Use of int in max_burst socket option. [ 498.611243][T18258] Use struct sctp_assoc_value instead [ 498.737124][T18256] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address [ 498.765027][T18256] bond19: (slave vxcan3): Error -95 calling set_mac_address [ 498.892360][T18258] bond19: (slave bridge10): Enslaving as an active interface with a down link [ 498.927896][T18270] macvlan4: entered promiscuous mode [ 498.937106][T18270] macvlan4: entered allmulticast mode [ 498.950014][T18270] bond19: entered promiscuous mode [ 498.970254][T18270] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 498.980532][T18270] bond19: left promiscuous mode [ 499.065768][T18064] hsr_slave_0: entered promiscuous mode [ 499.084257][T18064] hsr_slave_1: entered promiscuous mode [ 499.091136][T18064] debugfs: 'hsr0' already exists in 'hsr' [ 499.126561][T18064] Cannot create hsr debugfs directory [ 499.905847][T18064] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.943501][T18064] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 499.973786][T18064] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.192327][T18064] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.221737][T18064] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 500.244007][T18064] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.340207][T18064] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.366127][T18064] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 500.388359][T18064] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.485598][T18064] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.501630][ T5644] Bluetooth: hci1: command tx timeout [ 500.519189][T18064] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 500.543922][T18064] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.708318][T18333] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 500.725759][T18333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.165164][T18345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.200653][T18349] __nla_validate_parse: 6 callbacks suppressed [ 501.200674][T18349] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3270'. [ 501.442406][T18363] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.454024][T18064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.487247][T18064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.522269][T18064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.600414][T18064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.631976][T18064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.663493][T18064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.691273][T18064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 501.743246][T18064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.777895][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.912745][T18378] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3278'. [ 501.973329][T18064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.056503][T18064] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.077438][T17512] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.084944][T17512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.150655][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.157970][T10608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.381579][T18396] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3284'. [ 502.576876][ T5644] Bluetooth: hci1: command tx timeout [ 502.796699][T18410] sctp: [Deprecated]: syz.2.3287 (pid 18410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.796699][T18410] Use struct sctp_sack_info instead [ 502.819967][T18410] sctp: [Deprecated]: syz.2.3287 (pid 18410) Use of int in maxseg socket option. [ 502.819967][T18410] Use struct sctp_assoc_value instead [ 503.190461][T18425] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3291'. [ 503.579554][T18064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.659090][T18440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'. [ 503.809872][T18437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'. [ 503.835399][T18437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'. [ 503.875481][T18453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3295'. [ 503.888213][T18437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'. [ 503.939223][T18437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3292'. [ 504.244208][T18461] vcan0: tx address claim with dlc 0 [ 504.445189][T18473] netlink: 'syz.0.3300': attribute type 4 has an invalid length. [ 504.801008][T18064] veth0_vlan: entered promiscuous mode [ 504.854951][T18064] veth1_vlan: entered promiscuous mode [ 504.877368][T18491] openvswitch: netlink: EtherType 0 is less than min 600 [ 505.018155][T18064] veth0_macvtap: entered promiscuous mode [ 505.052060][T18064] veth1_macvtap: entered promiscuous mode [ 505.137130][T18064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.212006][T18064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.291615][T10607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.340342][T10607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.356837][T10607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.394751][T10607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.515806][T18513] x_tables: duplicate underflow at hook 1 [ 505.770006][T17511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.805420][T17511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.918971][T17510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.955068][T17510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.978551][T18511] netlink: 'syz.3.3309': attribute type 1 has an invalid length. [ 506.332002][T18533] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 506.387586][T18532] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 506.525721][T18533] __nla_validate_parse: 29 callbacks suppressed [ 506.525743][T18533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3199'. [ 506.638486][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 506.656800][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 506.666026][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 506.675400][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 506.689963][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.791014][T18545] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 506.937420][T18550] tipc: Enabling not permitted [ 506.969502][T18550] tipc: Enabling of bearer rejected, failed to enable media [ 507.055016][T18553] xt_hashlimit: size too large, truncated to 1048576 [ 507.167635][T18554] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 507.248799][T18561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3322'. [ 507.363547][T18567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3323'. [ 507.572536][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3324'. [ 507.576627][T18576] netlink: 'syz.0.3325': attribute type 10 has an invalid length. [ 507.609882][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3324'. [ 507.662203][T18576] team0 (unregistering): Port device team_slave_0 removed [ 507.729117][T18576] team0 (unregistering): Port device team_slave_1 removed [ 507.792922][ T62] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.821910][ T62] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.842865][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.877758][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.947479][T18594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.221645][T18607] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 508.221755][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 508.316326][T18614] openvswitch: netlink: Key type 79 is out of range max 32 [ 508.402962][T18607] bond1: entered promiscuous mode [ 508.428630][T18607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.815434][ T5644] Bluetooth: hci3: command tx timeout [ 508.853497][T18634] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3339'. [ 509.267244][T18538] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.275074][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.282665][T18538] bridge_slave_0: entered allmulticast mode [ 509.292116][T18538] bridge_slave_0: entered promiscuous mode [ 509.311416][T18538] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.326611][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.342500][T18538] bridge_slave_1: entered allmulticast mode [ 509.353328][T18538] bridge_slave_1: entered promiscuous mode [ 509.445687][T18653] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3344'. [ 509.487247][T18538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.487290][T18653] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3344'. [ 509.519561][T18538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.533160][T18653] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3344'. [ 509.690165][T18538] team0: Port device team_slave_0 added [ 509.728085][T18538] team0: Port device team_slave_1 added [ 509.933158][T18538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.943243][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.961339][T18676] No such timeout policy "syz1" [ 510.017859][T18538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.159121][T18538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.166893][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.194879][T18538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.219882][T18681] C: renamed from lo (while UP) [ 510.237677][T18681] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 510.432604][T18689] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 510.486049][T18538] hsr_slave_0: entered promiscuous mode [ 510.501063][T18538] hsr_slave_1: entered promiscuous mode [ 510.530350][T18538] debugfs: 'hsr0' already exists in 'hsr' [ 510.544576][T18538] Cannot create hsr debugfs directory [ 510.896789][ T5644] Bluetooth: hci3: command tx timeout [ 511.050675][T18538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.066177][T18538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.225110][T18538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.235981][T18538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.345455][T18538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.370259][T18725] IPv6: Can't replace route, no match found [ 511.394201][T18538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.404640][T18725] IPv6: Can't replace route, no match found [ 511.648821][T18538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.663479][T18538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.695856][T18744] __nla_validate_parse: 33 callbacks suppressed [ 511.695879][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3366'. [ 512.226122][T18538] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 512.252933][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.264029][T18538] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 512.280616][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.298122][T18538] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 512.323313][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.339311][T18538] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 512.374811][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.477539][T18777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.546458][T18777] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 512.742812][T18538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.820837][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 512.847181][T18538] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.854828][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 512.888532][T18793] tipc: Started in network mode [ 512.895679][T18793] tipc: Node identity fe95d27ed42e, cluster identity 4711 [ 512.917759][T18793] tipc: Enabled bearer , priority 0 [ 512.937354][T18792] tipc: Disabling bearer [ 512.962149][T18798] bond0: entered promiscuous mode [ 512.968030][T18798] bond_slave_0: entered promiscuous mode [ 512.975259][T18798] bond_slave_1: entered promiscuous mode [ 512.975558][ T5644] Bluetooth: hci3: command tx timeout [ 512.991687][T18798] gretap0: entered promiscuous mode [ 513.030109][T18798] debugfs: 'hsr1' already exists in 'hsr' [ 513.049834][T18798] Cannot create hsr debugfs directory [ 513.058427][T18798] hsr1: entered promiscuous mode [ 513.117515][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.125108][T10608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.154268][T18806] smc: net device team0 applied user defined pnetid SYZ2 [ 513.172359][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.179858][T10608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.219605][T18813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3384'. [ 514.358410][T18876] netlink: 'syz.1.3401': attribute type 1 has an invalid length. [ 514.391479][T18877] syzkaller0: entered promiscuous mode [ 514.405523][T18877] syzkaller0: entered allmulticast mode [ 514.527699][T18876] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.535848][T18872] veth0_to_bond: left allmulticast mode [ 514.554741][T18872] bond5: (slave veth0_to_bond): making interface the new active one [ 514.565449][T18872] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 514.599006][T18879] bond5: entered promiscuous mode [ 514.605153][T18879] veth0_to_bond: entered promiscuous mode [ 514.611433][T18879] bond5: entered allmulticast mode [ 514.617842][T18879] veth0_to_bond: entered allmulticast mode [ 514.896726][T18538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.905548][T18895] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3405'. [ 514.922418][T18895] netlink: 'syz.3.3405': attribute type 2 has an invalid length. [ 515.048257][T18538] veth0_vlan: entered promiscuous mode [ 515.056480][ T5644] Bluetooth: hci3: command tx timeout [ 515.090936][T18538] veth1_vlan: entered promiscuous mode [ 515.109347][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3406'. [ 515.130013][T18901] netlink: 29 bytes leftover after parsing attributes in process `syz.1.3406'. [ 515.134345][T18905] netlink: 'syz.3.3407': attribute type 29 has an invalid length. [ 515.149724][T18904] netlink: 'syz.0.3408': attribute type 4 has an invalid length. [ 515.158693][T18904] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3408'. [ 515.178066][T18905] netlink: 'syz.3.3407': attribute type 29 has an invalid length. [ 515.188216][T18538] veth0_macvtap: entered promiscuous mode [ 515.239688][T18538] veth1_macvtap: entered promiscuous mode [ 515.300482][T18538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.339333][T18881] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 515.392097][T18538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.451530][T10607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.479453][T17510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.519736][T17510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.556050][T18925] xt_l2tp: v2 doesn't support IP mode [ 515.556761][T17510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.573439][T18930] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.592180][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'. [ 516.038691][T10607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.085825][T10607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.152715][T18957] netlink: 592 bytes leftover after parsing attributes in process `syz.4.3417'. [ 516.212793][T10607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.237993][T10607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.490621][T18970] ip6tnl1: entered promiscuous mode [ 516.525358][T18970] ip6tnl1: entered allmulticast mode [ 516.878024][T18994] block nbd4: not configured, cannot reconfigure [ 517.041053][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3430'. [ 517.057382][T19000] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3431'. [ 517.090811][T18998] block nbd2: Unsupported socket: should be TCP or UNIX. [ 517.092743][T19000] xt_policy: neither incoming nor outgoing policy selected [ 517.102516][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 517.144327][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 517.590722][T19016] dvmrp0: entered allmulticast mode [ 517.674902][T18995] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3429'. [ 517.698699][T18995] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.763311][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 517.824263][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 518.160593][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3446'. [ 518.199381][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3446'. [ 518.472853][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3450'. [ 518.811091][T19060] syzkaller1: entered promiscuous mode [ 518.831337][T19060] syzkaller1: entered allmulticast mode [ 518.987689][T19086] xt_TCPMSS: Only works on TCP SYN packets [ 519.002655][T19087] xt_TCPMSS: Only works on TCP SYN packets [ 519.578726][T19112] syzkaller0: entered promiscuous mode [ 519.589681][T19112] syzkaller0: entered allmulticast mode [ 519.600963][T19111] netlink: 'syz.2.3467': attribute type 11 has an invalid length. [ 520.493128][T19167] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 520.629927][T19174] Bluetooth: MGMT ver 1.23 [ 520.760395][T19177] xt_hashlimit: size too large, truncated to 1048576 [ 520.985665][T19189] tipc: Started in network mode [ 521.015442][T19189] tipc: Node identity 26ee8872be5b, cluster identity 4711 [ 521.056671][T19189] tipc: Enabled bearer , priority 0 [ 521.192501][T19195] syzkaller0: entered promiscuous mode [ 521.204067][T19195] syzkaller0: entered allmulticast mode [ 521.224782][T19195] tipc: Resetting bearer [ 521.254533][T19197] : entered promiscuous mode [ 521.323501][T10607] tipc: Resetting bearer [ 521.339277][T19188] tipc: Resetting bearer [ 522.355794][T19227] netlink: 'syz.1.3499': attribute type 3 has an invalid length. [ 524.639471][T19188] tipc: Disabling bearer [ 524.658514][ T5765] tipc: Node number set to 2562033778 [ 524.848511][T19235] __nla_validate_parse: 5 callbacks suppressed [ 524.848536][T19235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3502'. [ 524.921470][T19239] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 524.980204][T19244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3505'. [ 524.980929][T19233] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 525.004763][T19233] bond2: option packets_per_slave: allowed values 0 - 65535 [ 525.015468][T19233] bond2 (unregistering): Released all slaves [ 525.050146][T19242] netlink: 'syz.0.3504': attribute type 5 has an invalid length. [ 525.118874][T19244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.132327][T19250] veth1_macvtap: left promiscuous mode [ 525.164809][T19250] macsec0: entered promiscuous mode [ 525.183389][T19250] macsec0: entered allmulticast mode [ 525.232035][T19253] veth1_macvtap: entered promiscuous mode [ 525.263930][T19253] veth1_macvtap: entered allmulticast mode [ 525.299607][T19253] macsec0: left promiscuous mode [ 525.313598][T19253] macsec0: left allmulticast mode [ 525.330963][T19253] veth1_macvtap: left allmulticast mode [ 525.479948][T19265] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3511'. [ 525.589296][T19270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.609968][T19266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3510'. [ 525.676754][T19273] netlink: 'syz.1.3514': attribute type 4 has an invalid length. [ 525.695223][T19273] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 526.012762][T19291] Cannot find add_set index 0 as target [ 526.260238][T19301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3524'. [ 526.443138][T19320] netlink: 'syz.2.3530': attribute type 21 has an invalid length. [ 526.478713][T19320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3530'. [ 526.526243][T19320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3530'. [ 526.707229][T19336] netlink: 'syz.2.3535': attribute type 1 has an invalid length. [ 526.749364][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3535'. [ 526.766481][T19338] netlink: 'syz.1.3534': attribute type 1 has an invalid length. [ 526.777162][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 526.856457][T19344] netlink: 'syz.2.3537': attribute type 1 has an invalid length. [ 527.115345][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 528.161899][T19381] netlink: 'syz.0.3547': attribute type 1 has an invalid length. [ 528.310829][T19393] netlink: 'syz.2.3549': attribute type 30 has an invalid length. [ 528.359676][T19395] netlink: 'syz.2.3549': attribute type 30 has an invalid length. [ 528.388758][T19381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.445836][T19393] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 528.447244][T19395] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 528.557858][T19381] bond3: (slave bridge2): making interface the new active one [ 528.628572][T19381] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 528.681678][T19417] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 528.696834][T19412] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.094960][T19435] xt_ecn: cannot match TCP bits for non-tcp packets [ 529.802549][T19474] bond6 (unregistering): Released all slaves [ 529.816102][T19479] NCSI netlink: No device for ifindex 813332851 [ 530.230355][T19499] __nla_validate_parse: 10 callbacks suppressed [ 530.230377][T19499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3577'. [ 530.377781][T19502] openvswitch: netlink: IPv4 tun info is not correct [ 530.394094][T19501] openvswitch: netlink: IPv4 tun info is not correct [ 530.538874][T19509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 530.777034][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'. [ 530.777660][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3584'. [ 530.804806][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3585'. [ 530.816365][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'. [ 530.861359][T19523] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3585'. [ 530.910157][T19527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3585'. [ 530.955035][T19533] x_tables: duplicate underflow at hook 1 [ 531.221904][T19541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3591'. [ 531.353203][T19548] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 531.356391][T19549] validate_nla: 2 callbacks suppressed [ 531.356409][T19549] netlink: 'syz.0.3593': attribute type 3 has an invalid length. [ 531.378296][ T5644] Bluetooth: hci3: command tx timeout [ 531.512697][T19552] pim6reg: entered allmulticast mode [ 531.693138][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 531.730444][T19568] netlink: 'syz.2.3600': attribute type 1 has an invalid length. [ 531.996220][T19583] netlink: 'syz.2.3606': attribute type 1 has an invalid length. [ 532.007469][T19585] sctp: [Deprecated]: syz.4.3607 (pid 19585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.007469][T19585] Use struct sctp_sack_info instead [ 532.037033][T19583] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 532.346321][T19598] netlink: 'syz.2.3608': attribute type 21 has an invalid length. [ 533.224626][T19640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.249087][T19640] netlink: 'syz.1.3623': attribute type 1 has an invalid length. [ 533.370333][T19640] bond6: entered promiscuous mode [ 533.380876][T19640] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.433276][T19651] bond1: Unable to set down delay as MII monitoring is disabled [ 533.478762][T19651] bond1 (unregistering): Released all slaves [ 533.534687][T19655] veth: renamed from veth0_vlan (while UP) [ 534.368924][T19695] netlink: 'syz.2.3642': attribute type 39 has an invalid length. [ 534.782457][T19708] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 534.838551][T19708] bond2 (unregistering): Released all slaves [ 544.814180][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 554.761229][T19744] __nla_validate_parse: 6 callbacks suppressed [ 554.761252][T19744] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3656'. [ 554.778263][T19745] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3659'. [ 554.786179][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 554.889331][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 555.137207][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3665'. [ 555.195062][T19771] netlink: 'syz.2.3664': attribute type 3 has an invalid length. [ 555.219083][T19771] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3664'. [ 555.235812][T19773] tipc: Enabled bearer , priority 14 [ 555.417095][T19782] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3671'. [ 555.427064][T19780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3669'. [ 555.456761][T19783] dvmrp0: entered allmulticast mode [ 555.522515][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 555.606345][T19798] netlink: 'syz.3.3672': attribute type 10 has an invalid length. [ 555.614653][T19798] netlink: 396 bytes leftover after parsing attributes in process `syz.3.3672'. [ 555.646030][T19783] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 555.702124][T19777] dvmrp0: left allmulticast mode [ 556.354129][T17366] tipc: Node number set to 716952190 [ 563.220091][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 579.531777][T19806] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 579.738254][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3678'. [ 579.769214][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3678'. [ 580.116863][T19845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.139926][T19845] xt_hashlimit: size too large, truncated to 1048576 [ 580.289141][T19853] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 580.591059][T19874] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 580.662654][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 580.702312][T19881] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 580.725541][T19881] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 580.755662][T19881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3692'. [ 580.843025][T19886] bond2: option mode: invalid value (133) [ 580.853282][T19886] bond2 (unregistering): Released all slaves [ 580.877681][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 581.339834][T19914] bond0: (slave bond_slave_1): Releasing backup interface [ 581.400704][T19917] openvswitch: netlink: Duplicate or invalid key (type 0). [ 581.408924][T19917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.515498][T19920] bridge0: entered allmulticast mode [ 583.296399][T19865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.307417][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3690'. [ 583.318707][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3690'. [ 583.534767][T19924] netlink: 'syz.2.3711': attribute type 1 has an invalid length. [ 583.574693][T19931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3710'. [ 583.650109][T19924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.710150][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'. [ 583.721786][T19933] bond1: (slave ip6erspan0): making interface the new active one [ 583.752414][T19933] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 583.837071][T19940] netlink: 'syz.1.3710': attribute type 11 has an invalid length. [ 583.881298][T19940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3710'. [ 583.898098][T19942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3710'. [ 583.961424][T19942] nbd: device at index 64 is going down [ 584.466529][T19974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.498706][T19974] batadv_slave_0: entered promiscuous mode [ 584.746036][T19986] __nla_validate_parse: 4 callbacks suppressed [ 584.746058][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3724'. [ 584.791831][T19986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3724'. [ 584.843373][T19986] openvswitch: netlink: Flow actions attr not present in new flow. [ 585.180975][T20010] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3731'. [ 585.208204][T20013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3732'. [ 585.437097][T20023] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3733'. [ 585.448842][T20024] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3734'. [ 585.471142][T20023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3733'. [ 585.992071][T20048] syzkaller1: entered promiscuous mode [ 586.004796][T20048] syzkaller1: entered allmulticast mode [ 586.369865][T20068] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3750'. [ 586.442539][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3752'. [ 586.479140][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3752'. [ 586.950561][T20102] netlink: 'syz.2.3759': attribute type 4 has an invalid length. [ 587.001253][T20102] .`¹: renamed from bond0 (while UP) [ 587.235037][T20107] netlink: 'syz.2.3761': attribute type 1 has an invalid length. [ 587.339179][T20118] netlink: 'syz.3.3765': attribute type 1 has an invalid length. [ 587.441671][T20118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.459170][T20129] bond2: option mode: unable to set because the bond device is up [ 587.600187][T20125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.627029][T20125] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 587.660306][T20125] bond2: (slave vcan1): Error -95 calling set_mac_address [ 587.769172][T20137] tipc: Started in network mode [ 587.791755][T20137] tipc: Node identity 6627695c2c91, cluster identity 4711 [ 587.856402][T20137] tipc: Enabled bearer , priority 0 [ 587.893555][T20145] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20004 [ 588.109058][T20140] syzkaller0: entered promiscuous mode [ 588.124571][T20140] syzkaller0: entered allmulticast mode [ 588.135049][T20140] tipc: Resetting bearer [ 588.237042][T17512] tipc: Resetting bearer [ 588.276568][T20136] tipc: Resetting bearer [ 591.951498][T20136] tipc: Disabling bearer [ 592.060482][T20173] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 592.097379][T20174] lo: entered promiscuous mode [ 592.102759][T20174] netlink: 'syz.3.3774': attribute type 2 has an invalid length. [ 592.112814][T20174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.167643][T20175] macvlan2: entered promiscuous mode [ 592.174288][T20175] macvlan2: entered allmulticast mode [ 592.180677][T20175] bond0: entered promiscuous mode [ 592.186766][T20175] bridge2: entered promiscuous mode [ 592.199262][T20175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 592.214387][T20175] bond0: left promiscuous mode [ 592.221360][T20175] bridge2: left promiscuous mode [ 592.239405][ T9] tipc: Node number set to 1253468508 [ 592.248370][T20204] tipc: Invalid UDP bearer configuration [ 592.248445][T20204] tipc: Enabling of bearer rejected, failed to enable media [ 592.428400][T20213] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 592.436954][T20213] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 592.465819][T20216] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 592.677130][T20235] __nla_validate_parse: 6 callbacks suppressed [ 592.677152][T20235] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3793'. [ 592.732162][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3795'. [ 593.001204][T20246] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3799'. [ 593.011568][T20246] xt_policy: neither incoming nor outgoing policy selected [ 593.184909][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.197721][T20260] netlink: 'syz.3.3804': attribute type 26 has an invalid length. [ 593.201228][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.208564][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3804'. [ 593.223599][T20260] netlink: 'syz.3.3804': attribute type 26 has an invalid length. [ 593.232858][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.239627][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.247890][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.255801][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.257881][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3804'. [ 593.264459][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.277762][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.287043][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.308884][T20257] ip6t_REJECT: ECHOREPLY is not supported [ 593.650066][T20303] syzkaller0: entered promiscuous mode [ 593.676739][T20303] syzkaller0: entered allmulticast mode [ 593.910044][T20354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3811'. [ 594.508811][T20382] bond2: entered promiscuous mode [ 594.517790][T20382] bond2: entered allmulticast mode [ 594.528142][T20382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.083614][T20399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3822'. [ 595.154985][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3823'. [ 596.080261][T20424] x_tables: unsorted entry at hook 3 [ 596.376351][T20441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3834'. [ 596.404778][T20441] tipc: Invalid UDP bearer configuration [ 596.404857][T20441] tipc: Enabling of bearer rejected, failed to enable media [ 596.427389][ T5763] IPVS: starting estimator thread 0... [ 596.574690][T20446] IPVS: using max 24 ests per chain, 57600 per kthread [ 596.644954][T20458] sctp: [Deprecated]: syz.2.3838 (pid 20458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.644954][T20458] Use struct sctp_sack_info instead [ 596.669239][T20457] sctp: [Deprecated]: syz.2.3838 (pid 20457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.669239][T20457] Use struct sctp_sack_info instead [ 597.179922][ T5726] IPVS: starting estimator thread 0... [ 597.273975][T20484] IPVS: using max 24 ests per chain, 57600 per kthread [ 597.355775][T20496] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.3850'. [ 598.001259][T20507] netlink: 'syz.1.3853': attribute type 4 has an invalid length. [ 598.030432][T20507] __nla_validate_parse: 1 callbacks suppressed [ 598.030453][T20507] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3853'. [ 598.109504][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3857'. [ 598.131076][T20520] Unsupported ieee802154 address type: 0 [ 598.134053][T20519] netlink: 'syz.2.3857': attribute type 30 has an invalid length. [ 598.201221][T17512] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.223187][T17512] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.244243][T17512] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.347279][T20552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3867'. [ 602.134470][T17512] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.149612][T20546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3865'. [ 602.310399][T20562] x_tables: unsorted underflow at hook 4 [ 602.321926][T20562] xt_TCPMSS: Only works on TCP SYN packets [ 602.427232][T20563] vlan3: entered allmulticast mode [ 602.445023][T20563] bond0: entered allmulticast mode [ 602.450276][T20563] bond_slave_0: entered allmulticast mode [ 602.457990][T20563] bond_slave_1: entered allmulticast mode [ 602.476482][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 602.834734][T20595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3879'. [ 603.022739][T20605] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3883'. [ 603.034643][T20605] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3883'. [ 603.045185][T20605] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3883'. [ 603.059378][T20606] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3882'. [ 603.071432][T20606] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3882'. [ 603.161940][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 603.186188][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 603.464497][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3889'. [ 603.520024][T20633] netlink: 'syz.3.3890': attribute type 12 has an invalid length. [ 603.685325][T20639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3891'. [ 604.482084][T20676] netlink: 'syz.3.3903': attribute type 28 has an invalid length. [ 604.521364][T20676] netlink: 'syz.3.3903': attribute type 3 has an invalid length. [ 604.543901][T20676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3903'. [ 604.568634][ T5763] IPVS: starting estimator thread 0... [ 604.631167][T20680] syzkaller0: entered promiscuous mode [ 604.657711][T20680] syzkaller0: entered allmulticast mode [ 604.675381][T20693] IPVS: using max 26 ests per chain, 62400 per kthread [ 604.712181][T20698] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3906'. [ 608.683310][T20723] netlink: 'syz.3.3914': attribute type 18 has an invalid length. [ 608.737670][T20723] netlink: 'syz.3.3914': attribute type 18 has an invalid length. [ 608.750010][ T62] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.781147][ T62] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.795351][T20730] netlink: 'syz.2.3916': attribute type 21 has an invalid length. [ 608.811770][T20730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3916'. [ 608.831196][ T62] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.851451][ T62] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.867803][T20736] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3917'. [ 608.911705][T20736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3917'. [ 608.960428][T20742] sctp: [Deprecated]: syz.0.3918 (pid 20742) Use of int in maxseg socket option. [ 608.960428][T20742] Use struct sctp_assoc_value instead [ 609.125248][T20750] syzkaller1: entered promiscuous mode [ 609.136850][T20750] syzkaller1: entered allmulticast mode [ 609.197088][T20744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3919'. [ 609.315055][T17512] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.322637][T20750] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 609.333638][T17512] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.334385][T17366] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.424564][T17366] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.505497][T17366] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.875285][T20789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.882705][T20789] IPv6: NLM_F_CREATE should be set when creating new route [ 609.918666][T20789] lo: entered allmulticast mode [ 609.962248][T20789] tunl0: entered allmulticast mode [ 609.975851][T20789] gre0: entered allmulticast mode [ 609.993582][T20789] gretap0: entered allmulticast mode [ 610.018515][T20789] erspan0: entered allmulticast mode [ 610.032098][T20789] ip_vti0: entered allmulticast mode [ 610.042834][T20789] ip6_vti0: entered allmulticast mode [ 610.052052][T20789] sit0: entered allmulticast mode [ 610.061230][T20789] ip6tnl0: entered allmulticast mode [ 610.070378][T20789] ip6gre0: entered allmulticast mode [ 610.080085][T20789] syz_tun: entered allmulticast mode [ 610.089265][T20789] ip6gretap0: entered allmulticast mode [ 610.099173][T20789] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.107714][T20789] bridge0: entered allmulticast mode [ 610.120626][T20789] team0: entered allmulticast mode [ 610.127072][T20789] team_slave_0: entered allmulticast mode [ 610.133038][T20789] team_slave_1: entered allmulticast mode [ 610.141805][T20789] dummy0: entered allmulticast mode [ 610.151854][T20789] nlmon0: entered allmulticast mode [ 610.161455][T20789] batadv0: entered allmulticast mode [ 610.169898][T20789] vxcan0: entered allmulticast mode [ 610.178403][T20789] vxcan1: entered allmulticast mode [ 610.186666][T20789] veth0: entered allmulticast mode [ 610.195486][T20789] veth1: entered allmulticast mode [ 610.205524][T20789] wg0: entered allmulticast mode [ 610.213253][T20789] wg1: entered allmulticast mode [ 610.221374][T20789] wg2: entered allmulticast mode [ 610.229522][T20789] veth0_to_bridge: entered allmulticast mode [ 610.242411][T20789] veth1_to_bridge: entered allmulticast mode [ 610.260069][T20789] veth1_to_bond: entered allmulticast mode [ 610.268066][T20789] veth0_to_team: entered allmulticast mode [ 610.279319][T20789] veth1_to_team: entered allmulticast mode [ 610.290282][T20789] veth0_to_batadv: entered allmulticast mode [ 610.302125][T20789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.310374][T20789] batadv_slave_0: entered allmulticast mode [ 610.327088][T20789] veth1_to_batadv: entered allmulticast mode [ 610.338760][T20789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.347989][T20789] batadv_slave_1: entered allmulticast mode [ 610.362217][T20789] xfrm0: entered allmulticast mode [ 610.377255][T20789] veth0_to_hsr: entered allmulticast mode [ 610.388675][T20789] hsr_slave_0: entered allmulticast mode [ 610.397626][T20789] veth1_to_hsr: entered allmulticast mode [ 610.409142][T20789] hsr_slave_1: entered allmulticast mode [ 610.425975][T20789] hsr0: entered allmulticast mode [ 610.431906][T20789] veth1_virt_wifi: entered allmulticast mode [ 610.442210][T20789] veth0_virt_wifi: entered allmulticast mode [ 610.453293][T20789] virt_wifi0: entered allmulticast mode [ 610.471538][T20789] veth1_vlan: entered allmulticast mode [ 610.486381][T20789] veth: entered allmulticast mode [ 610.492074][T20789] vlan0: entered allmulticast mode [ 610.499158][T20789] vlan1: entered allmulticast mode [ 610.510203][T20789] macvlan0: entered allmulticast mode [ 610.520840][T20789] macvlan1: entered allmulticast mode [ 610.541001][T20789] ipvlan0: entered allmulticast mode [ 610.554835][T20789] ipvlan1: entered allmulticast mode [ 610.565619][T20789] veth1_macvtap: entered allmulticast mode [ 610.587066][T20789] veth0_macvtap: entered allmulticast mode [ 610.608540][T20789] macvtap0: entered allmulticast mode [ 610.621498][T20789] macsec0: entered allmulticast mode [ 610.630081][T20789] geneve0: entered allmulticast mode [ 610.644759][T20789] geneve1: entered allmulticast mode [ 610.652467][T20789] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 610.660493][T20789] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 610.670204][T20789] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 610.686468][T20789] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 610.697710][T20789] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 610.709160][T20789] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 610.719384][T20789] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 610.728076][T20789] veth2: entered allmulticast mode [ 610.735927][T20789] veth3: entered allmulticast mode [ 610.741629][T20789] ip6tnl1: entered allmulticast mode [ 610.748048][T20789] bond1: entered allmulticast mode [ 610.753568][T20789] erspan1: entered allmulticast mode [ 610.760175][T20789] syztnl0: entered allmulticast mode [ 610.766939][T20789] @: entered allmulticast mode [ 610.775507][T20789] bond2: entered allmulticast mode [ 610.781875][T20789] bond3: entered allmulticast mode [ 610.788389][T20789] gre1: entered allmulticast mode [ 610.796138][T20789] geneve2: left promiscuous mode [ 610.805077][T20789] veth0_vlan.3: entered allmulticast mode [ 610.812163][T20789] bond4: entered allmulticast mode [ 610.819617][T20789] gre2: entered allmulticast mode [ 610.845072][T20789] bond5: left promiscuous mode [ 610.850228][T20789] veth0_to_bond: left promiscuous mode [ 610.857685][T20789] ip6erspan0: entered allmulticast mode [ 610.868138][T20789] mac80211_hwsim hwsim28 rose0: entered allmulticast mode [ 610.876691][T20789] bond6: left promiscuous mode [ 610.882456][T20789] bond6: entered allmulticast mode [ 610.892456][T20789] gretap1: entered allmulticast mode [ 610.902013][T20789] bond7: entered allmulticast mode [ 610.908079][T20789] veth4: entered allmulticast mode [ 610.914401][T20789] veth5: entered allmulticast mode [ 610.919957][T20789] syztnl2: entered allmulticast mode [ 610.931095][T20811] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0 [ 610.963375][T10607] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.985640][T10607] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.005582][T10607] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 611.032198][T10607] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.049789][T10607] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.059655][T10607] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 611.089416][T20816] netlink: 'syz.4.3937': attribute type 1 has an invalid length. [ 611.120424][T10607] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.121264][T20795] netlink: 'syz.3.3932': attribute type 1 has an invalid length. [ 611.131087][T10607] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.149472][T10607] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 611.155848][T20795] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3932'. [ 611.175186][T10607] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.183780][T20795] netlink: 'syz.3.3932': attribute type 1 has an invalid length. [ 611.193565][T10607] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.207940][T20795] netlink: 'syz.3.3932': attribute type 8 has an invalid length. [ 611.212274][T10607] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 611.226119][T20795] netlink: 582 bytes leftover after parsing attributes in process `syz.3.3932'. [ 611.275099][T20819] syzkaller0: entered promiscuous mode [ 611.289161][T20819] syzkaller0: entered allmulticast mode [ 611.614707][T20832] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 611.647747][T20835] netlink: 'syz.4.3946': attribute type 2 has an invalid length. [ 611.663145][T20835] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3946'. [ 611.679665][T20834] syzkaller0: entered promiscuous mode [ 611.688611][T20834] syzkaller0: entered allmulticast mode [ 611.706604][T20835] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 612.025002][T20849] nbd: socks must be embedded in a SOCK_ITEM attr [ 612.127642][T20856] sctp: [Deprecated]: syz.2.3948 (pid 20856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.127642][T20856] Use struct sctp_sack_info instead [ 612.205659][T20860] veth0: entered promiscuous mode [ 612.441955][T20858] veth0: left promiscuous mode [ 612.557829][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3955'. [ 613.061838][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3965'. [ 613.233604][T20918] lo speed is unknown, defaulting to 1000 [ 613.264201][T20922] siw: device registration error -23 [ 613.277709][T20918] lo speed is unknown, defaulting to 1000 [ 613.290656][T20922] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 613.312330][T20918] lo speed is unknown, defaulting to 1000 [ 613.337602][T20924] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 613.352265][T20918] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 613.356659][T20926] netlink: 'syz.3.3969': attribute type 1 has an invalid length. [ 613.403351][T20918] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 613.428380][T20918] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 613.490390][T20918] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 613.553016][T20926] bond3: entered promiscuous mode [ 613.555894][T20918] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 613.571341][T20926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 613.621471][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3972'. [ 613.666123][T20937] bond3: (slave bridge2): making interface the new active one [ 613.675405][T20937] bridge2: entered promiscuous mode [ 613.682590][T20937] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 613.694138][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.739972][T20918] lo speed is unknown, defaulting to 1000 [ 613.805164][T20918] lo speed is unknown, defaulting to 1000 [ 613.843594][T20918] lo speed is unknown, defaulting to 1000 [ 613.858594][T20918] lo speed is unknown, defaulting to 1000 [ 613.889367][T20918] lo speed is unknown, defaulting to 1000 [ 613.907829][T20918] lo speed is unknown, defaulting to 1000 [ 613.936619][T20918] lo speed is unknown, defaulting to 1000 [ 613.980059][T20918] lo speed is unknown, defaulting to 1000 [ 614.378304][T20966] bond3: option fail_over_mac: invalid value (16) [ 614.435621][T20966] bond3 (unregistering): Released all slaves [ 614.438392][T20976] netlink: 'syz.1.3980': attribute type 24 has an invalid length. [ 614.717333][T20970] openvswitch: netlink: Missing key (keys=40, expected=80) [ 615.077090][T20996] syzkaller0: entered promiscuous mode [ 615.111279][T20996] syzkaller0: entered allmulticast mode [ 615.152387][T21000] __nla_validate_parse: 3 callbacks suppressed [ 615.152408][T21000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3988'. [ 615.212921][T21000] netlink: 'syz.3.3988': attribute type 13 has an invalid length. [ 615.368081][T21018] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3992'. [ 615.449013][T21020] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 615.485669][T21019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3992'. [ 615.644994][T21023] gretap2: entered promiscuous mode [ 615.661715][T21023] batman_adv: batadv0: Adding interface: gretap2 [ 615.677087][T21023] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 615.700063][T21030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3996'. [ 615.728278][T21023] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 615.740506][T21030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3996'. [ 615.752584][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'. [ 615.814520][T21032] Bluetooth: MGMT ver 1.23 [ 615.924573][T21040] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3999'. [ 616.002575][T21045] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4000'. [ 616.036659][T21046] IPv6: Can't replace route, no match found [ 616.074181][T21046] IPv6: Can't replace route, no match found [ 616.119321][T21050] ip6t_rpfilter: unknown options [ 616.157685][T10608] bond0: (slave bond_slave_0): interface is now down [ 616.165224][T21058] netlink: 736 bytes leftover after parsing attributes in process `syz.2.4004'. [ 616.167867][T21050] netlink: 'syz.4.4003': attribute type 11 has an invalid length. [ 616.186261][T21051] netlink: 'syz.1.4002': attribute type 58 has an invalid length. [ 616.212314][T10608] bond0: (slave bond_slave_1): interface is now down [ 616.227276][T21051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4002'. [ 616.317297][T10608] bond0: now running without any active interface! [ 616.469477][T21053] lo speed is unknown, defaulting to 1000 [ 616.496139][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 616.900651][T21091] nbd0: detected capacity change from 63 to 0 [ 616.929156][T21091] block nbd0: reconnected socket [ 616.934747][T21091] block nbd0: reconnected socket [ 616.988840][ T5644] block nbd0: Receive control failed (result -32) [ 617.011832][ T5645] block nbd0: Receive control failed (result -32) [ 617.041694][T17512] bridge_slave_1: left promiscuous mode [ 617.054208][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.082680][T17512] bridge_slave_0: left allmulticast mode [ 617.097674][T17512] bridge_slave_0: left promiscuous mode [ 617.113043][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.193299][T21108] netlink: 'syz.4.4020': attribute type 1 has an invalid length. [ 617.350588][T17512] pimreg: left allmulticast mode [ 618.774495][T17512] bond1 (unregistering): (slave bridge23): Releasing active interface [ 618.930012][T17512] bond8 (unregistering): (slave bridge26): Releasing backup interface [ 619.019900][T17512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.029796][T17512] bond_slave_0: left promiscuous mode [ 619.035561][T17512] bond_slave_0: left allmulticast mode [ 619.042450][T17512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.056665][T17512] bond_slave_1: left promiscuous mode [ 619.062599][T17512] bond_slave_1: left allmulticast mode [ 619.070117][T17512] bond0 (unregistering): Released all slaves [ 619.081468][T17512] bond1 (unregistering): Released all slaves [ 619.097653][T17512] bond2 (unregistering): Released all slaves [ 619.112640][T17512] bond3 (unregistering): Released all slaves [ 619.136615][T17512] bond4 (unregistering): Released all slaves [ 619.152346][T17512] bond5 (unregistering): Released all slaves [ 619.169549][T17512] bond6 (unregistering): Released all slaves [ 619.190171][T17512] bond7 (unregistering): (slave C): Releasing backup interface [ 619.199015][T17512] bond7 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 619.212105][T17512] bond7 (unregistering): Released all slaves [ 619.228219][T17512] bond8 (unregistering): Released all slaves [ 619.244620][T17512] bond9 (unregistering): Released all slaves [ 619.265662][T17512] bond10 (unregistering): Released all slaves [ 619.384691][T21135] tipc: Enabling of bearer rejected, failed to enable media [ 619.626012][T17512] tipc: Left network mode [ 619.852208][T21158] netlink: 'syz.0.4030': attribute type 1 has an invalid length. [ 620.031674][T21158] bond4: entered promiscuous mode [ 620.037586][T21158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 620.041745][T17512] IPVS: stopping backup sync thread 8368 ... [ 620.141591][T21169] bridge3: entered promiscuous mode [ 620.152023][T21169] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 620.245590][ T7531] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 620.273500][T21173] veth3: entered promiscuous mode [ 620.293729][T21173] veth3: entered allmulticast mode [ 620.318750][T21180] __nla_validate_parse: 5 callbacks suppressed [ 620.318769][T21180] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4034'. [ 620.340734][T21173] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 620.396827][ T7531] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 620.738653][T21190] netlink: 'syz.3.4038': attribute type 1 has an invalid length. [ 620.741826][T21187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.822808][T21186] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 620.866855][ T5763] IPVS: starting estimator thread 0... [ 620.874844][T21186] bond5 (unregistering): Released all slaves [ 620.975449][T21197] IPVS: using max 25 ests per chain, 60000 per kthread [ 621.018615][T21200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4039'. [ 621.057507][T21193] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 621.087460][T21193] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 621.108330][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4042'. [ 621.134476][T21196] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 621.151993][T21199] macvlan2: entered promiscuous mode [ 621.158470][T21199] macvlan2: entered allmulticast mode [ 621.165473][T21199] bond4: entered promiscuous mode [ 621.171882][T21199] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 621.181566][T21199] bond4: left promiscuous mode [ 621.242016][T21200] bond3 (unregistering): Released all slaves [ 621.615168][T21226] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 621.718889][T21229] netlink: 'syz.2.4046': attribute type 21 has an invalid length. [ 621.735182][T21229] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4046'. [ 621.811377][T17512] [ 621.813836][T17512] ====================================================== [ 621.821003][T17512] WARNING: possible circular locking dependency detected [ 621.828130][T17512] syzkaller #0 Not tainted [ 621.832650][T17512] ------------------------------------------------------ [ 621.840052][T17512] kworker/u8:33/17512 is trying to acquire lock: [ 621.846475][T17512] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 621.857379][T17512] [ 621.857379][T17512] but task is already holding lock: [ 621.864946][T17512] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 621.875023][T17512] [ 621.875023][T17512] which lock already depends on the new lock. [ 621.875023][T17512] [ 621.886236][T17512] [ 621.886236][T17512] the existing dependency chain (in reverse order) is: [ 621.895715][T17512] [ 621.895715][T17512] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 621.904164][T17512] down_write+0x96/0x200 [ 621.909067][T17512] kernfs_add_one+0x41/0x5c0 [ 621.914388][T17512] kernfs_create_dir_ns+0xde/0x130 [ 621.920138][T17512] internal_create_group+0x425/0x1180 [ 621.926170][T17512] cpuhp_invoke_callback+0x445/0x860 [ 621.932253][T17512] cpuhp_issue_call+0x430/0x7a0 [ 621.937896][T17512] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 621.944667][T17512] __cpuhp_setup_state+0x3f/0x60 [ 621.950314][T17512] do_one_initcall+0x250/0x870 [ 621.955862][T17512] do_initcall_level+0x104/0x190 [ 621.962028][T17512] do_initcalls+0x59/0xa0 [ 621.966886][T17512] kernel_init_freeable+0x2a6/0x3e0 [ 621.972612][T17512] kernel_init+0x1d/0x1d0 [ 621.977799][T17512] ret_from_fork+0x514/0xb70 [ 621.983183][T17512] ret_from_fork_asm+0x1a/0x30 [ 621.988477][T17512] [ 621.988477][T17512] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 621.996411][T17512] [ 621.996411][T17512] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 622.004160][T17512] cpus_read_lock+0x42/0x160 [ 622.009382][T17512] static_key_slow_inc+0x12/0x30 [ 622.015022][T17512] nbd_genl_reconfigure+0x132f/0x1ea0 [ 622.021271][T17512] genl_family_rcv_msg_doit+0x22a/0x330 [ 622.027440][T17512] genl_rcv_msg+0x61c/0x7a0 [ 622.032577][T17512] netlink_rcv_skb+0x232/0x4b0 [ 622.038234][T17512] genl_rcv+0x28/0x40 [ 622.042922][T17512] netlink_unicast+0x75c/0x8e0 [ 622.048300][T17512] netlink_sendmsg+0x813/0xb40 [ 622.054039][T17512] ____sys_sendmsg+0x972/0x9f0 [ 622.059508][T17512] ___sys_sendmsg+0x2a5/0x360 [ 622.064797][T17512] __x64_sys_sendmsg+0x1bd/0x2a0 [ 622.070353][T17512] do_syscall_64+0x15f/0xf80 [ 622.075647][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.082177][T17512] [ 622.082177][T17512] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 622.090183][T17512] __mutex_lock+0x1a3/0x1550 [ 622.095566][T17512] nbd_queue_rq+0x37b/0x1100 [ 622.100809][T17512] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 622.107243][T17512] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 622.114454][T17512] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 622.121140][T17512] blk_mq_run_hw_queue+0x348/0x4f0 [ 622.127122][T17512] blk_mq_dispatch_list+0xd16/0xe10 [ 622.132939][T17512] blk_mq_flush_plug_list+0x48d/0x570 [ 622.139297][T17512] __blk_flush_plug+0x3ed/0x4d0 [ 622.144855][T17512] __submit_bio+0x28d/0x580 [ 622.150023][T17512] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 622.156543][T17512] block_read_full_folio+0x599/0x830 [ 622.162367][T17512] filemap_read_folio+0x137/0x3b0 [ 622.167929][T17512] do_read_cache_folio+0x358/0x590 [ 622.174096][T17512] read_part_sector+0xb6/0x2b0 [ 622.179503][T17512] adfspart_check_ICS+0xb1/0x960 [ 622.185145][T17512] bdev_disk_changed+0x817/0x1770 [ 622.190873][T17512] blkdev_get_whole+0x380/0x510 [ 622.196368][T17512] bdev_open+0x31e/0xd30 [ 622.201141][T17512] blkdev_open+0x470/0x610 [ 622.206088][T17512] do_dentry_open+0x785/0x14e0 [ 622.212019][T17512] vfs_open+0x3b/0x340 [ 622.216880][T17512] path_openat+0x2e08/0x3860 [ 622.222089][T17512] do_file_open+0x23e/0x4a0 [ 622.227562][T17512] do_sys_openat2+0x113/0x200 [ 622.232859][T17512] __x64_sys_openat+0x138/0x170 [ 622.238245][T17512] do_syscall_64+0x15f/0xf80 [ 622.243371][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.250137][T17512] [ 622.250137][T17512] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 622.257682][T17512] __mutex_lock+0x1a3/0x1550 [ 622.263018][T17512] nbd_queue_rq+0xc6/0x1100 [ 622.268046][T17512] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 622.274127][T17512] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 622.281087][T17512] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 622.287813][T17512] blk_mq_run_hw_queue+0x348/0x4f0 [ 622.293899][T17512] blk_mq_dispatch_list+0xd16/0xe10 [ 622.299818][T17512] blk_mq_flush_plug_list+0x48d/0x570 [ 622.305749][T17512] __blk_flush_plug+0x3ed/0x4d0 [ 622.311231][T17512] __submit_bio+0x28d/0x580 [ 622.316275][T17512] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 622.322441][T17512] block_read_full_folio+0x599/0x830 [ 622.328248][T17512] filemap_read_folio+0x137/0x3b0 [ 622.333898][T17512] do_read_cache_folio+0x358/0x590 [ 622.339540][T17512] read_part_sector+0xb6/0x2b0 [ 622.344835][T17512] adfspart_check_ICS+0xb1/0x960 [ 622.350423][T17512] bdev_disk_changed+0x817/0x1770 [ 622.355982][T17512] blkdev_get_whole+0x380/0x510 [ 622.361469][T17512] bdev_open+0x31e/0xd30 [ 622.366411][T17512] blkdev_open+0x470/0x610 [ 622.371436][T17512] do_dentry_open+0x785/0x14e0 [ 622.376989][T17512] vfs_open+0x3b/0x340 [ 622.381940][T17512] path_openat+0x2e08/0x3860 [ 622.387341][T17512] do_file_open+0x23e/0x4a0 [ 622.392479][T17512] do_sys_openat2+0x113/0x200 [ 622.397689][T17512] __x64_sys_openat+0x138/0x170 [ 622.403076][T17512] do_syscall_64+0x15f/0xf80 [ 622.408807][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.415496][T17512] [ 622.415496][T17512] -> #4 (set->srcu){.+.+}-{0:0}: [ 622.422660][T17512] __synchronize_srcu+0xca/0x300 [ 622.428325][T17512] elevator_switch+0x1e8/0x7a0 [ 622.433897][T17512] elevator_change+0x2cc/0x450 [ 622.439477][T17512] elevator_set_default+0x36c/0x430 [ 622.445408][T17512] blk_register_queue+0x3e9/0x4e0 [ 622.451149][T17512] __add_disk+0x677/0xd50 [ 622.456093][T17512] add_disk_fwnode+0xfb/0x480 [ 622.461490][T17512] nbd_dev_add+0x72c/0xb50 [ 622.466440][T17512] nbd_init+0x168/0x1f0 [ 622.471242][T17512] do_one_initcall+0x250/0x870 [ 622.476538][T17512] do_initcall_level+0x104/0x190 [ 622.482018][T17512] do_initcalls+0x59/0xa0 [ 622.486964][T17512] kernel_init_freeable+0x2a6/0x3e0 [ 622.492868][T17512] kernel_init+0x1d/0x1d0 [ 622.497821][T17512] ret_from_fork+0x514/0xb70 [ 622.503067][T17512] ret_from_fork_asm+0x1a/0x30 [ 622.508582][T17512] [ 622.508582][T17512] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 622.516508][T17512] __mutex_lock+0x1a3/0x1550 [ 622.521722][T17512] elevator_change+0x1b3/0x450 [ 622.527284][T17512] elevator_set_none+0xb5/0x140 [ 622.533190][T17512] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 622.539809][T17512] nbd_start_device+0x17f/0xb10 [ 622.545417][T17512] nbd_genl_connect+0x165b/0x1cf0 [ 622.551230][T17512] genl_family_rcv_msg_doit+0x22a/0x330 [ 622.557450][T17512] genl_rcv_msg+0x61c/0x7a0 [ 622.562657][T17512] netlink_rcv_skb+0x232/0x4b0 [ 622.568130][T17512] genl_rcv+0x28/0x40 [ 622.572792][T17512] netlink_unicast+0x75c/0x8e0 [ 622.578100][T17512] netlink_sendmsg+0x813/0xb40 [ 622.583487][T17512] ____sys_sendmsg+0x972/0x9f0 [ 622.588968][T17512] ___sys_sendmsg+0x2a5/0x360 [ 622.594198][T17512] __x64_sys_sendmsg+0x1bd/0x2a0 [ 622.599947][T17512] do_syscall_64+0x15f/0xf80 [ 622.605188][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.611693][T17512] [ 622.611693][T17512] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 622.620312][T17512] blk_alloc_queue+0x546/0x680 [ 622.625899][T17512] __blk_mq_alloc_disk+0x197/0x390 [ 622.631545][T17512] nbd_dev_add+0x499/0xb50 [ 622.636613][T17512] nbd_init+0x168/0x1f0 [ 622.641300][T17512] do_one_initcall+0x250/0x870 [ 622.646591][T17512] do_initcall_level+0x104/0x190 [ 622.652057][T17512] do_initcalls+0x59/0xa0 [ 622.657011][T17512] kernel_init_freeable+0x2a6/0x3e0 [ 622.662910][T17512] kernel_init+0x1d/0x1d0 [ 622.667858][T17512] ret_from_fork+0x514/0xb70 [ 622.673144][T17512] ret_from_fork_asm+0x1a/0x30 [ 622.678433][T17512] [ 622.678433][T17512] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 622.685664][T17512] fs_reclaim_acquire+0x71/0x100 [ 622.691246][T17512] kmem_cache_alloc_noprof+0x40/0x650 [ 622.697348][T17512] __kernfs_iattrs+0xdf/0x320 [ 622.702588][T17512] kernfs_iop_setattr+0xea/0x3f0 [ 622.708163][T17512] notify_change+0xc1a/0xf40 [ 622.713367][T17512] do_truncate+0x1c2/0x250 [ 622.718409][T17512] path_openat+0x2f89/0x3860 [ 622.723548][T17512] do_file_open+0x23e/0x4a0 [ 622.728767][T17512] do_sys_openat2+0x113/0x200 [ 622.734062][T17512] __x64_sys_openat+0x138/0x170 [ 622.739617][T17512] do_syscall_64+0x15f/0xf80 [ 622.744753][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.751261][T17512] [ 622.751261][T17512] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 622.759975][T17512] __lock_acquire+0x15a5/0x2cf0 [ 622.765450][T17512] lock_acquire+0x106/0x350 [ 622.770480][T17512] down_write+0x96/0x200 [ 622.775250][T17512] kernfs_unlink_sibling+0x71/0x180 [ 622.781064][T17512] kernfs_rename_ns+0x4a6/0x830 [ 622.786879][T17512] sysfs_rename_link_ns+0x16e/0x1b0 [ 622.792848][T17512] device_rename+0x110/0x210 [ 622.798408][T17512] __dev_change_net_namespace+0x15d3/0x20a0 [ 622.805006][T17512] cfg802154_switch_netns+0xbf/0x3d0 [ 622.810819][T17512] cfg802154_pernet_exit+0x75/0xe0 [ 622.816555][T17512] ops_undo_list+0x49f/0x940 [ 622.821849][T17512] cleanup_net+0x56b/0x800 [ 622.826881][T17512] process_scheduled_works+0xb5d/0x1860 [ 622.833039][T17512] worker_thread+0xa53/0xfc0 [ 622.838338][T17512] kthread+0x388/0x470 [ 622.843240][T17512] ret_from_fork+0x514/0xb70 [ 622.848444][T17512] ret_from_fork_asm+0x1a/0x30 [ 622.854084][T17512] [ 622.854084][T17512] other info that might help us debug this: [ 622.854084][T17512] [ 622.864488][T17512] Chain exists of: [ 622.864488][T17512] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 622.864488][T17512] [ 622.879283][T17512] Possible unsafe locking scenario: [ 622.879283][T17512] [ 622.886745][T17512] CPU0 CPU1 [ 622.892202][T17512] ---- ---- [ 622.897913][T17512] lock(&root->kernfs_rwsem); [ 622.902868][T17512] lock(cpuhp_state_mutex); [ 622.910165][T17512] lock(&root->kernfs_rwsem); [ 622.917897][T17512] lock(&root->kernfs_iattr_rwsem); [ 622.923459][T17512] [ 622.923459][T17512] *** DEADLOCK *** [ 622.923459][T17512] [ 622.931872][T17512] 5 locks held by kworker/u8:33/17512: [ 622.937521][T17512] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 622.948808][T17512] #1: ffffc90005cdfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 622.959346][T17512] #2: ffffffff8fdbfe08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 622.968967][T17512] #3: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 622.978641][T17512] #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 622.989380][T17512] [ 622.989380][T17512] stack backtrace: [ 622.996516][T17512] CPU: 1 UID: 0 PID: 17512 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full) [ 622.996539][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.996550][T17512] Workqueue: netns cleanup_net [ 622.996577][T17512] Call Trace: [ 622.996583][T17512] [ 622.996590][T17512] dump_stack_lvl+0xe8/0x150 [ 622.996611][T17512] print_circular_bug+0x2e1/0x300 [ 622.996633][T17512] check_noncircular+0x12e/0x150 [ 622.996655][T17512] __lock_acquire+0x15a5/0x2cf0 [ 622.996675][T17512] ? __lock_acquire+0x6b5/0x2cf0 [ 622.996692][T17512] ? __lock_acquire+0x6b5/0x2cf0 [ 622.996709][T17512] ? kernfs_unlink_sibling+0x71/0x180 [ 622.996733][T17512] lock_acquire+0x106/0x350 [ 622.996748][T17512] ? kernfs_unlink_sibling+0x71/0x180 [ 622.996782][T17512] down_write+0x96/0x200 [ 622.996802][T17512] ? kernfs_unlink_sibling+0x71/0x180 [ 622.996824][T17512] ? __pfx_down_write+0x10/0x10 [ 622.996842][T17512] ? kernfs_root+0x1c/0x230 [ 622.996860][T17512] ? kernfs_root+0x1c/0x230 [ 622.996877][T17512] ? kernfs_root+0x1c/0x230 [ 622.996895][T17512] ? kernfs_root+0x1ea/0x230 [ 622.996914][T17512] kernfs_unlink_sibling+0x71/0x180 [ 622.996937][T17512] kernfs_rename_ns+0x4a6/0x830 [ 622.996963][T17512] sysfs_rename_link_ns+0x16e/0x1b0 [ 622.996990][T17512] device_rename+0x110/0x210 [ 622.997009][T17512] __dev_change_net_namespace+0x15d3/0x20a0 [ 622.997039][T17512] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 622.997067][T17512] ? __lock_acquire+0x6b5/0x2cf0 [ 622.997086][T17512] ? __mutex_trylock_common+0x158/0x260 [ 622.997107][T17512] ? __pfx___mutex_trylock_common+0x10/0x10 [ 622.997128][T17512] ? rcu_is_watching+0x15/0xb0 [ 622.997148][T17512] ? trace_contention_end+0x3d/0x140 [ 622.997168][T17512] ? __mutex_lock+0x319/0x1550 [ 622.997189][T17512] ? do_raw_spin_unlock+0xf5/0x210 [ 622.997211][T17512] ? _raw_spin_unlock+0x28/0x50 [ 622.997227][T17512] ? __pfx___mutex_lock+0x10/0x10 [ 622.997247][T17512] ? __pfx_netdev_run_todo+0x10/0x10 [ 622.997270][T17512] cfg802154_switch_netns+0xbf/0x3d0 [ 622.997296][T17512] cfg802154_pernet_exit+0x75/0xe0 [ 622.997320][T17512] ops_undo_list+0x49f/0x940 [ 622.997339][T17512] ? __pfx_ops_undo_list+0x10/0x10 [ 622.997356][T17512] ? idr_destroy+0x218/0x290 [ 622.997371][T17512] ? do_raw_spin_unlock+0xf5/0x210 [ 622.997394][T17512] cleanup_net+0x56b/0x800 [ 622.997410][T17512] ? __pfx_cleanup_net+0x10/0x10 [ 622.997429][T17512] ? process_scheduled_works+0xa70/0x1860 [ 622.997445][T17512] ? process_scheduled_works+0xa70/0x1860 [ 622.997460][T17512] process_scheduled_works+0xb5d/0x1860 [ 622.997485][T17512] ? __pfx_process_scheduled_works+0x10/0x10 [ 622.997503][T17512] ? assign_work+0x3d5/0x5e0 [ 622.997518][T17512] worker_thread+0xa53/0xfc0 [ 622.997543][T17512] kthread+0x388/0x470 [ 622.997562][T17512] ? __pfx_worker_thread+0x10/0x10 [ 622.997577][T17512] ? __pfx_kthread+0x10/0x10 [ 622.997596][T17512] ret_from_fork+0x514/0xb70 [ 622.997614][T17512] ? __pfx_ret_from_fork+0x10/0x10 [ 622.997630][T17512] ? __switch_to+0xc79/0x1410 [ 622.997652][T17512] ? __pfx_kthread+0x10/0x10 [ 622.997671][T17512] ret_from_fork_asm+0x1a/0x30 [ 622.997695][T17512] [ 623.312938][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.370977][T21229] netlink: 'syz.2.4046': attribute type 5 has an invalid length. [ 623.383096][T21229] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4046'. [ 623.416514][T17512] hsr_slave_0: left promiscuous mode [ 623.439463][T17512] hsr_slave_1: left promiscuous mode [ 623.445918][T17512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.455694][T17512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.559496][T17512] team0 (unregistering): Port device team_slave_1 removed [ 623.838634][T17512] IPVS: stop unused estimator thread 0... [ 624.655019][ T1312] ieee802154 phy0 wpan0: encryption failed: -22