last executing test programs: 5.526929339s ago: executing program 0 (id=3465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r5, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x1, {0x2, 0xff, 0x6}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000180)=0x4, 0x4) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r9, 0xfffffffffffffffd, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r6, &(0x7f0000000200)=[{{&(0x7f0000000100)=@can={0x1d, r9, 0xc7}, 0x80, 0x0}}], 0x1, 0x880) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x33}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r13}, 0xc) 5.291358116s ago: executing program 0 (id=3473): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.388746582s ago: executing program 0 (id=3474): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000001000000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000020000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bfb92000000000000007000000b70000000000000195000000000000ae00004000002200000000000ee88c6c888c0998a48ccb9ac4e4792907b69349c96228ba035b7c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000048009d0300000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000014000100ff"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000c0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0xb, 0x2, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$inet(0x2, 0x3, 0x2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, 0x0, &(0x7f0000000140)) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 3.641891855s ago: executing program 0 (id=3481): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2, 0x1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)=@ethtool_link_settings={0x6a, 0x222, 0x4, 0x4, 0x0, 0x9, 0xf9, 0x3, 0x8, 0x2, [0x5, 0xfff, 0xaeb, 0x6, 0x10001, 0x87, 0xffffffff, 0x2], [0x1, 0x4, 0x8]}}) ioctl$sock_qrtr_TIOCINQ(r1, 0x5760, 0x0) sendto$llc(r1, &(0x7f0000000140)="8d6e9c4215e56e87c2124695c4b42426e9def21a53941dfc13debeae5128bfbfcb685bf3baea498e6ad4a10bf86a6512b623546731a0d74912df45e1afd03d490587df01117e2f0c6164096cfebe16c19521ab8d70407258e3ab45328d9bc4c71d427c54c9f8b311a9af97261970bc5ebaacf4b1c547105da20c05ce54e8678cab6d3fa97bd291df314bc5a1787ca1ada11bb06fcefb1e6ae716ca077e7196c7dfee9f99294ef5d4cfb9b639fa8e6d8fc216", 0xb2, 0x4, &(0x7f0000000200)={0x1a, 0x18f, 0x8, 0x13, 0x2, 0x9, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) r6 = socket(0x18, 0x0, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000800000000000000000000001800000001000000000000000a0000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000440), &(0x7f0000000040)=@udp=r7}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) getsockopt$nfc_llcp(r6, 0x111, 0x0, 0x0, 0x90aa62107f0000) 3.641269534s ago: executing program 4 (id=3482): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0", 0x13}], 0x1) 2.451369757s ago: executing program 4 (id=3490): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000002c0012800900010069706970000000001c00028008000300ac1414aa08000100", @ANYRESHEX=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000001cc0)) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6f, r1}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="028000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000005000000000000000000"], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r4 = epoll_create1(0x80000) unshare(0x20000400) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r4, &(0x7f0000002880)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x3) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, 0x0, 0xc005) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4044890) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 1.75835266s ago: executing program 3 (id=3496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xbfffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0xe}, {0xa, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x170}}, 0x24040004) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffff42, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.754052618s ago: executing program 4 (id=3497): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="dbaa00044100000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.703783432s ago: executing program 3 (id=3498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000100)=0x3d) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_getneigh={0xac, 0x1e, 0x200, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x41401, 0x4}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xf}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9f94}, @IFLA_VFINFO_LIST={0x50, 0x16, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x800, 0x0, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x1000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xe71, 0xc1e9}}, @IFLA_VF_TRUST={0xc, 0x9, {0xc, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x1, 0x4}}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xac}}, 0x4) 1.663842221s ago: executing program 4 (id=3499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, 0x0, 0x0, 0x10002, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000214010027bdfdfbdbdf25ca43c50600", @ANYRES32, @ANYBLOB="05005400010000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r4, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000a24d0815695d513c6404563fe5f73520e528944ba5545542c395c2e0a9d072a13645e87903c02fbddc", @ANYRES16=r7, @ANYBLOB="010028bd7000010000040f00000008000300", @ANYRES32=r8, @ANYBLOB="05002f0001000000"], 0x24}}, 0x80) 1.578583749s ago: executing program 3 (id=3500): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0xfffff453}], 0x1, 0x10120, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x11000000, 0x7, 0x40000000}}], 0x18}, 0x804) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @local, @val={@val={0x88a8, 0x6}, {0x8100, 0x5}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8ab7f2", 0x14, 0x2c, 0x0, @empty, @local, {[], {{0x3a04, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x4}, {0x0, 0x1, 0x80ec}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, 0x5, 0x5}, [@lifetime_val={0x24, 0x9, {0x5, 0x916, 0x9, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendto$packet(r5, &(0x7f00000001c0)="a3c59b04cbe9b05f4d625f1872ad43aa7439996219", 0x15, 0x20000018, &(0x7f0000000280)={0x11, 0x8, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000040), 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x1012, &(0x7f0000002180)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xff0, 0x0, @opaque="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"}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x21}, 0x4, 0x6, 0x0, 0x100, 0x4, 0x560002, r8}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x80980107, r8}) 1.443202465s ago: executing program 1 (id=3502): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000000c0)={0x614, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x33}}}}, [@NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x21c, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x85}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x3}, {0x7}, {0x3, 0x8}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x3, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x5}, {0x6, 0x3}, {0x6}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x7}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x2, 0x36, 0x0, 0xb, 0x9, 0x12, 0x5, 0x6c, 0x36, 0x12, 0x60, 0x12, 0x2, 0xc, 0x2]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0xa}, {0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x7}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x3}, {0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x4}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x5, 0x7}, {}, {0x0, 0x2}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x4, 0xb, 0x0, 0x4, 0x5, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd13, 0x7592, 0x5, 0x1, 0x5, 0x9, 0x2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x7, 0x6, 0x4, 0x1, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a1e, 0x5, 0x7, 0x6, 0x200, 0x8, 0x5, 0xffff]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x6}, {0x1, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x7}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x2, 0x6}, {0x1}, {0x1, 0x9}, {0x6, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x8}, {0x3}, {0x4, 0x5}, {0x1, 0x2}, {0x3, 0x2}, {0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x5, 0x6}, {0x6, 0x5}, {0x6}, {0x3, 0x7}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x4, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x340, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x3, 0x200, 0xda92, 0xfa60, 0x8, 0x5]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x1}, {0x0, 0x2}, {0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x8}, {0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {}, {0x5, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0xfffa, 0x6, 0x1, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x2, 0x6c, 0x3, 0x2, 0xc, 0x2, 0x60, 0x48, 0x4]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x400, 0x8, 0x9, 0x4, 0x0, 0x79]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x6c, 0x18, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xef, 0xd, 0xfdfd, 0x4, 0xfb2, 0x7fff, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe, 0x5, 0xd4e, 0x4c, 0xa, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x9, 0xffff, 0x6a0c, 0x5, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x3, 0x0, 0x7, 0x0, 0x5fc6, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x81, 0x6, 0xd7, 0x8, 0x7ff, 0x1200]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x4}, {0x5, 0x1}, {0x6, 0x8}, {0x3, 0x4}, {0x5, 0x8}, {0x3, 0x5}, {0x5, 0x7}, {0x5, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x3}, {0x5, 0x5}, {0x1, 0x6}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x3}, {0x6, 0x3}, {}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0xa}, {0x7}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x4, 0x6}, {0x6, 0x4}, {0x5, 0x4}, {0x1, 0x5}, {0x1, 0x6}, {0x1}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6f, 0x16, 0x6c, 0x7e, 0x16, 0x60, 0x4, 0x30, 0x5, 0x60, 0x6, 0x6, 0x136a7507ef369ace, 0x1b, 0xc, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2001, 0x7, 0x800, 0x200, 0x2, 0x6, 0x4a]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0xa}, {0x6, 0x6}, {0x1}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x3, 0x8}, {0x7, 0x6}, {0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x7, 0x9}, {0x5}, {0x3, 0x4}, {0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x3, 0x1, 0x36, 0x1, 0x2, 0x36, 0x18, 0x6, 0x48, 0x1b, 0x5, 0x4, 0x4, 0x30, 0x1, 0x30, 0xb, 0x24, 0x48, 0x3, 0x1, 0xb, 0x1b, 0x24, 0x6c, 0x12]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x30, 0x6c, 0x24, 0x16, 0x24, 0x36, 0x4, 0xb, 0xa, 0x12, 0x2, 0x60, 0x48, 0x60, 0x2, 0x12, 0x1, 0xb, 0x4, 0xb, 0x24, 0x18, 0x16, 0x16, 0xb, 0x16, 0x3, 0x5, 0x60, 0x48, 0x4]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x8}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0xa}, {0x6}, {0x4, 0x1}, {0x2, 0xa}, {0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x5}, {0x1, 0x3}, {0x4, 0x14}, {0x6, 0xa}, {0x7, 0x2}, {0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x2}, {}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x7}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x6, 0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x5}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x6, 0x60, 0x5, 0xb, 0x5, 0x5, 0x29, 0x2, 0x24, 0x18, 0xc, 0x4, 0x18, 0x5, 0xc, 0x5a, 0x9, 0x30, 0x60, 0x9]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x6c, 0x3, 0x60, 0x60, 0x3, 0x3, 0xc, 0x18, 0x2]}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x614}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x140c, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a80)={r5, &(0x7f0000000900)="81238d148b89fc19729b52f41c0b60e1dd87628826cf9e8e6c4d871c9a58ab8459de272e1c80a67e0940c60c133ae63c32d42cf729e2baea69a48ced6acff118f7", &(0x7f0000000980)=""/193}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000088) (async) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000088) sendmmsg$inet(r4, &(0x7f0000002000)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000000c40)="15f78c2a70720e9cb79ebb68aad976595033e5b2180664b4fbf91c3c3214f667b9573ba968e4934483047fb552df2c62138fe6f474f1ab67354b79ceb982731eadaf6ce41b0b7828c8a1eeea183bc8911041470eace45e79fed5a2d1d51285c66ef61277", 0x64}, {&(0x7f0000000cc0)="4e93315a82135c6aa48a1c3018acd80e6ebdae0d4f635f40131142dbbcde78f5e33efc683de404be064a68c61946dbbcd51fcc42f3b77fe40f9073d3ae1fe5b52265cd827015a2259e886de0918334f822a708827bd14d609259ea21a3053f8acc0e04644457bce568fff2a8dfab15dc8686221a6bbb9756562a0a0d403bb9423131ba22ad9e5e9fcde6ab910ce688e2", 0x90}, {&(0x7f0000000d80)="5a900168a6c459b57e59a5af7dd4b6c7c6c852028eaa3110f67bc916960b01a6edd601b72fbdcc546364cb57f96ae9d7941c58239925a0fd519bffc0f6d9aa970fa66d72e66bc826a147db8a1a7cda931e08a087c71571de4cf2871c151dceb90ff7e0d9e6965be2a4b275dcd93f4fae732ddd471c2f20d07ec9fbb0817ae5482e42839ad0aeccfa195d88679add75d01f5050ffff368011f728cb5f2fb224c01ff552", 0xa3}, {&(0x7f0000000e40)="1fbd03190d62e61cb7fc54a47bdd4f839dfdc05acbba3d60a7beabaa9f3122cc1d92aea69e976ede5fd9dcae72fb301a7dc38fae916f0e7ce506f35d06cbb0a340382c85b474cdc41e8221c3ff442143540c1adedb0a956d7a59080e5ca9246097646a00f6c8c72154af831dc4149c6c7f7088854e34e7b849b2d00908ae7432ad448b2606e07836fc50bef61f6239b9ea4f30e1387c2c65f0ef5968c93a4e41462b1d9abab3fd2f4629e2c668c0e976fbc0ee6b5609149c951f08", 0xbb}, {&(0x7f0000000f00)="ebdd0dfd08bc6595b8cdbc8a21b9d0573336c94094bdb9da91d5386ceba641d3afd5875b79e6ae8ff5057f64fe8021b0fce33db3ee8d4e34cfd029ef9fd9d3c31eace6ecf512344487f75412ab38311b019ffc67ccaffd6cdce5f15acd2ab701a4bd79b07472e45b08d09102", 0x6c}, {&(0x7f0000000f80)="0ad6ade84daa5a7fad052c8c6c29400db30e415d587f6d2787524d784e44d862c5d1fb0b07517260704aec916075d943e353b2b627bb3ac3902dfb3bfcc91db18248acce77f5ed34eeea6f2ad62a556b24a6f557a0148dc4d901f6bcadf728c5ee1673255524363be367fe5917bc7a8d75b864c3f7906b9a7bad5e20139df7c7690734ecd83704229c4ce0d2a0b9e32f0e84432c791a941ad3decb645ce75b5f56161ced0479d2d3fba1b974aa612271ff14ff8a2ca45f14b2447aaccc8843cadbf850d3d8f779a7a5689f9c8e0a6bf3081cc509dffac91869b0a96347f740609bd9908a33de7c2e496156b1630a8c1218b15c81a11a418cd7ab2c946587aa71d330c48ef77a702365d6ed19c044c558d6b8a2a702aa33c11a8a7afdacbd7a400cea8e5354804acc563a770e98449647f080f1b80e205fd5478d01e8e605f1b79367f1af778286f401f0d4bae6a6684ed34f653e7c1d9485a3cd4a4807849d519c3f23b9e64fa6fdd355e6fcb00bfdf3769156ac51dad9ab08a885817adbbcbeafb90d71ded66b7630e827b72822faa1ebca9e9856d82ecceabea08f56be7ef7cb7b03b4b4ff68c8018b277e3465f00ad389c361792a80b24c319e0a33a08184abb8ff4fbb0ddddb411835690535527d181c3f7bf173b22ca4d5aec87e55732cdd7f1785f84a51d32d0546c86ca4c0ac4b78e78d92f04312e7171ee1d21ddae3454e7b9d155ed31b1dade4987f0cc87e20a9b72008de28ff186b55511741657555baf556958ff86791eab3699d85913e5eb9d17b4967b58f544e8e8ab9d176b1498f7d5984be1eccb12c7f5cb511bcf25b50e0a224e966e2fcd182d6fba5ad72258138b2e9d69d418bd05ab7724892505fdd9d7c3853762d4f20cd3541886dc3c5729c5efec43b4af5f43ae6f7541f9f126170352c189afba42b23248146d37dea9798168e440d1db759e977baac29a39ec1d2a4c941c341caf748d5755c2bde2047ae1986af66631a4a8ab5c6ad2ef73d107cf6df27a858899f384806fdfcbb844c0818b2f5954f7885a84f82628481b020ab919f8d6424b1f869a2b0c80317c36866eb0765c33eb4a08cc942f58edaf844d9a7427472865f975ab020c3d6a377707d90178185ce68b807e45c83356e911ac3d5515fa861183a4efb61dde62c17ee430459c696fff1abfff29445e38e63a5101e73c64bf677ddc0e4e360828f231fded81c940dccb8eaea431ac0fd832ac7283a5c1c98b7cb06cd0674ec889e3bee31f1fd8320cd68c72e6679d7d05e44b72aab7e5e9982d7f7dd21ebe80bb2070410e7b7b20d9bec78e60acbea95a7cc4fd6143422c9b0ea01a2f0fb57fdc5e3c27ab8f36f3e9697b0f4f8e07350a16f77f300f45f5a6f0ba0cc0590826cddb04a815bcc4a9dd841b157616a009fe78523e55ff1e1c2800d1914ff0d01594ffdb3d55f90085666afd8769e08a0d2d6a087cadf168718107052aabf69c37a3a93f79394b52050b49e94015fe67340eec0b6ec6e04c9ae2aa31780863acfaf12eda9a0bc1fa232d5665f03bb9f218931a5ff7cd6f59dd97d160f8cd20f6f2928ddde43267c47e169a35b7640f1acdea339db3fe7b6459425370e3b01848036533e201ebeca558429a27f706a8c052ae7580c697a58b212751bf652e837f08919edc110af6a9d2a4baf56539232a7db6602e7a634d01e940a6c6e4fe1af785dba280402bfebd164558044b815398ea85da3803eb30c6a9d8eb764e635814e3615140cd6f2c42faa50644686c359af227e3e207fae736646420465d5d9a83d7e897f1e3974a3fefe79daf790ceac37a4f711d0589ea1544a205ef8aeebfa337ef31e4fa0508f7dea325afa08716d97bbb74a0fee73bb5d78d954d7dc085de22ec53bc8cf9e649a1827af4c6602e8be515f33983a404984c6e3cdd002b383a2394c9a0beb833bb9dc8d1ea2d8cfc79e49216cb786859aefcd4001fd0c9703c8505513b66b57693c13fcde3ff39785baeec86e01f56f1e72b69c63f07ad148723242d59b11c341efb103211be9e72e1a7eecbffee08475b593a1296f3b37f2b437fe86e1bfc2c9deeb4df456b169a2adfc8882513f5fdc8388305b4e4b2d01c12de34cd5723b362d380556e6ca5f0d51ad7acd3fb854505eb28147416771ac646129824f073761810132bbea6fa0c33de44ad956336e976dafe87b7ce78c26a9fd88ba8b884c0de0ebe1d053f08e5f4bd5ee6b124f94b0eaecf6d227ff98f3d9756b02cc6abbbd5936ba8aac384708fccab4e92028c080261a2640c44b7403420e4e1308f8ca49a0eb76bc436e0a535679d9d364eb020b53c94cdfc862429342d9dc19004b3ba5eba46cd5025df20a44b7100c002570201767b7145ec62d6635cddb710fbe151250481dfc66ab1af3d1a4d742527207611a6cc813aeedf95657425ccb02245ccb571f37fd9faf2ce4d15771d9c6c876075d04235c2f5836e9d9003aa8a11009b460ad2aafcbb9d8332ca885f0b54fcbee49a353fca8ce0250966b9a3cddee22f27aa961d89bd4991988cb64102983d856f58b6ea10acc1f1920f80d4fdb161e3ffbc2302d3492201ace07a008f83e95b6aa6fa246b78872dd9661e9fb410414c35b3a513d58eb58481658b38c827ade22049c3a206085e08487864ad32395cbbe7ea0f41dd193f7aba83a1f1f6ba69a1f93c0496e6a2f693dd24a972973b57a7ff6862446e83acfda4efa23ec087307991ec5f843b20abbd53809f2d9db9e890a383e17037a61afebb8940074ab4f0899d83416eefe1a2fbd2c1e3fe32dd6adc03da78a6aec7db5979f79af135188bf4c999720350a36b3f534276b27451d31b31b5ae2624fc7def1d7a16f3c9e102e7c6bfd111a2a9d014a656f7e20027990ba9f4cc46fe590fc1cce832b991c6264d8861cd2d013d3c74e51875146d0eb4db642437fc453736fcc15a87b5e8f3bf2a2c72b1e7e796193e247b253767b3475c3eeafc689111696c48a102e28b396547375dc8292a4ca97bdaa3fdb0293badb5f233757259001481e69d15fa006912c386e671b71055eb9a1a830f4aba7b7b37b0a75919c5ff98fb412c1b5a9790866656ced584b46802da84fb9fcf057c33161cfd950a47cf913b89fedf313019c1eb0245e7fdb4eef65f1fa07a8096c7698a8844ff0595c096d853606f2a3ce2fe10189898753cd2e10f7707c93b05f8d2eabf0056d2392fc40f7ac45346b4db53d491ad26e40297c2d13beb3137efab4237ec489f978c64590d3ef3db1d09209daab276760735cdee6545f2b4f2dbe782ebbf7bd1a728040b798a6c260180f47f3aaba659fae1d8a5d48cd4f511c6e98ef5350f2dbe9385195c08bcda309c64622be6642ab6f5713672c2f254d0c16d689cf1cd7b41e663ee420880f5004866c11d1ea92d961f2af1a691776213bb725d027fb9e944f04267988a84939ede93d6e5eeaacbb4825d1d72516fcbcf7ae8dccc19fbd2ab1369fc9430102467f6a35e536fd0af9b02a5d7e9a3ee9c016a8cd5b9d50197c516f459a0e2c1a2614af07952c68cebd5b89c64640cfcd2f665949afd887add06f8d9c085ff194689b2467264d70e8491f2e4ed179009e1e100ad6bf768732d5e8a2d868e6a7be27bfcd034efcb2da77f892f502bdf22e20dea740c91752b1d24cf0127686cd0f3ea0b67dc4c75318f324a83335ecc012eaa63541fa0e049dc8ee75fb7b35ea3c8bf02d9c145b51610d06873a9bfa2f09eda6835701c20b2bb291ff542f35b05abf696e7baf0febefa8c8f12d8c36a7da5521efd32353156a572cd5617b2f1292d5b076aac89853191d0db19708c13bfcbfb4215e005d0eb036cc5fbc9561364424708e0200429d224fcf7cce5c7483dc05d9394695096d542f89b2737be76c9e8ac7a7d406c9046b8b81af28e6423e20c5cecb63829fa1f96b1d54197b59028577a86ebfae1bc5dff916f0bb455819ee84bf5e55c8f627c08dc51841067166f4b220ac2986e4d5060e24d707ca62ed50c7943666abd34ba334d401007b38c3e4d2ef0e894153a1da059f7b010ae70260bf9d2ee528b4cdc03b8520e92ae131f47d375c738a15e072ddf26aa30e39e8febb86a4501bd9e44bd9d34b180e8b38e0da80af5d02282a6b9e0f70e5a98f61ff887de29c36a6cc05612808a9c633f908f36468e27eddb9b41874b632aa497f64ae444966fe188a2e03555e4758938ede0585fb441d67a0b91f8de0c6e9c58783503b4717d21d195240b60d60eee583d3e08c464b18809b46b62138ccdc935e8ed942ec78fc016798bb8fa728b18f8c780eaf0b3ac26d4c5d4291ee2c3e9155be7d25363a804ed8ef912fb5bafe465a5f6eeff5438bc6002070b72296dc445b270a5aed07c6d6fe51587d697216f77c1364779bcb9214a109ffbe9b48404a06f34a2b38bd61c900714a923c8360fb7b6afbe3045532999d16df69d4f2622b805004880e1cea1148b55b80cad289b6f80fbd8889f24cceb35c436bc94dd500b958bf81c1797555dafcb88f21e66b779f9fa03ffba76489bfbf2a0a5c3e958745e3ae29a563f0837a81a38e70326894860b54dce15dc14f7997348b90fa41879d7c8488dcfd072893524b1ee210fc992046ecbfb6f626bd0dc11b32e49a9695bfd8f4d060699e2deaf2738b83b4fcef25343e50ecb4104f1b84a66d27b0eaec8b4b2d2f0d0c97d01e822aa14d848e74d57a2f0b28377c1e7128bf0dfe112e81226039a7358a4cf91b30aa232a9d7e48e2e6eeb22ff3d0cb428ad207a650b5541842e130db1e6b340e0c2653d716a242d07d9cb9ebe7d826a9fa873a4d81db7aea002a5a39cd4b59592bdbf7abda64c91f3270b0b29500bf1856d9338895357707c0a4f4ef35c59772e830456b448699e58b47cd0a03cc162fdf9c33912bcd6dd75f3dce24245c3149fb454bf4871fc77bc31b0a9c3079d1f558730e327e6b50934191f92cfc36a69a536b80a39e85796877fc34e6de2531943261bb048c9f5d99a9c4ce5ced9df3c36fea24dbabcd8f9eb33d5db3df4758e102672abe2dfe7b53d47887b7ebcc9b7e1fda05b4804478cb91d028742b74378a3e100a67364a15f726b67723fa549671b1dfcd6decf7b15503ed7ff34d0be73fd152e3ef0730dcd7bc28da2a2bf53864fe197a3057e041cc26f1ed6a9d8cb892509e158015a8f8014da3d2f36c36b1163a293cf44cc736d958ef1f9dc5934c7acae2fd8e871fbff02a8c5db8796cff1170d343a59e8cb18a6b3740bf824967a171a6cb8dac8f8c8d2fb7808a6ccccd877971d8b7f22749d8d342422357bdf94729641a3d56b39f177f4b2a278742c18751d93ee0bc35646051ca1bec79cbea02debe34cd799e3fd227f9bead5b33ff2e4cc282a16f033efc39e8bf75c0775cb3ed794662713212734cdce3c0a462c2da8591d75c26c28487a7b059e5783a4632b3aa6afff607e1f4501aad257b530889d55df31a63d06a5ce4e66d6d49b861578de4c4670482b78a4ad44de9927af5dab35cd597ecf65611150d158f3b7b10bd0a6c412b1a446c8dfa56fef9016daa3bbcf1eb9a0e8a7d723158cb0a708ba7dad547284e23ceea97120025aaeabeae7c24ed0d9b0cd002a5dedcbc508844af89e4787a945bf2a4f36c9b135e2bb65774c7c57de230ee5f0a29e8a367639275c70fb4bf5a936c1249022d7c0f6fb11624222010f4a11fd3d18730fec028465b17618461d416333c240445b950b2113dd233242a79541383cb19f404c17a7263deca8053ae6fdddb9d3a08", 0x1000}], 0x6}}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002080)={'veth1_vlan\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002140)={'ip6gre0\x00', &(0x7f00000020c0)={'ip6_vti0\x00', 0x0, 0x29, 0xf8, 0x9, 0xa32, 0x2, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x7800, 0x2, 0xf928}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002180)={0x0, @broadcast}, &(0x7f00000021c0)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002200)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000002340)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0x98, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40048c0}, 0x20080851) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r13, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000024c0)={&(0x7f00000023c0)={0xd0, 0x13, 0x1, 0x70bd28, 0x25dfdbfb, {0x29, 0x0, 0x9, 0x81, {0x4e21, 0x4e22, [0x3, 0x9, 0x4cb, 0x2], [0x1213a382, 0x63, 0x9, 0x8], r11, [0x61, 0x401]}, 0x7ff, 0x8f}, [@INET_DIAG_REQ_BYTECODE={0x82, 0x1, "f7199acdda0c62586b5ecdb500513850ce15bbbb681507efda1b3571bcdbb13c44653985f205bb2a436fa430f2f28e7a73f7e2e2c568ebcb9c2502e203030f099110fdcbb2e703b8dc5d8b9b15b7f05b0bcc0818e455f2d65e2079a747b0125e2e55618ab3c851dcec49853f675fda55d7834c55db2b8f5c8b5671accf22"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$DCCPDIAG_GETSOCK(r13, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000024c0)={&(0x7f00000023c0)={0xd0, 0x13, 0x1, 0x70bd28, 0x25dfdbfb, {0x29, 0x0, 0x9, 0x81, {0x4e21, 0x4e22, [0x3, 0x9, 0x4cb, 0x2], [0x1213a382, 0x63, 0x9, 0x8], r11, [0x61, 0x401]}, 0x7ff, 0x8f}, [@INET_DIAG_REQ_BYTECODE={0x82, 0x1, "f7199acdda0c62586b5ecdb500513850ce15bbbb681507efda1b3571bcdbb13c44653985f205bb2a436fa430f2f28e7a73f7e2e2c568ebcb9c2502e203030f099110fdcbb2e703b8dc5d8b9b15b7f05b0bcc0818e455f2d65e2079a747b0125e2e55618ab3c851dcec49853f675fda55d7834c55db2b8f5c8b5671accf22"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) (async) r14 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r14, &(0x7f00000026c0)={&(0x7f0000002540)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002580)="a7e02a0b948839aa78e4199794f365b1ad5ea6bf9d7d5c639f19cdf02003fa919f3afded3f4db866281549ffac704aa3ed8ef7a83532554d835b90e4", 0x3c}, {&(0x7f00000025c0)="8716c23ba6f95525df87dceb0dc140157d6bcdf1205b769fadc3ca81406554979fa921ac2ee0a2fffae7eb5ed18387ffd10857ab2b88a410d4d5a8e2037c336589549bed37ae22b2d0a08349208e143b99a157b88a6c0ab61598c87935", 0x5d}], 0x2, &(0x7f0000002680)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @init={0x18, 0x84, 0x0, {0xa, 0x0, 0x3, 0x2}}], 0x38}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0x1c, 0xb96, 0x0, 0x8, 0x400, r5, 0x1, '\x00', r9, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0x1c, 0xb96, 0x0, 0x8, 0x400, r5, 0x1, '\x00', r9, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r14, 0x84, 0x73, &(0x7f0000002780)={0x0, 0x4, 0x30, 0x9, 0x3}, &(0x7f00000027c0)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r14, 0x84, 0x73, &(0x7f0000002780)={0x0, 0x4, 0x30, 0x9, 0x3}, &(0x7f00000027c0)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000002800)={r15, 0xc7}, 0x8) r16 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002880), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x38, r16, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x80000001, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfc46}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x54}]}, 0x38}}, 0x4c040) (async) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x38, r16, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x80000001, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfc46}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x54}]}, 0x38}}, 0x4c040) epoll_ctl$EPOLL_CTL_DEL(r14, 0x2, r14) 1.270698929s ago: executing program 1 (id=3503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70020000", @ANYRES16=r1, @ANYBLOB="0f0700000000000000006700000048000e000c"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70020000", @ANYRES16=r1, @ANYBLOB="0f0700000000000000006700000048000e000c"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x439, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x40800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x439, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x40800) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000001c0)={r3, &(0x7f0000000040)='\x00', 0x14e01, &(0x7f00000000c0)={@align, {0x6, 0x2, 0x1, 0x3}}, 0x9, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x67, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x67, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYBLOB="b495a6900d3d1cc3943a945980a4a597d341e0d0aa314e7de7c4ea9a4d0eed7567434e863e3f99ded0fd11003d1252bd20219937d0dfc9e3c690188fead43e021c929d20aa161545b5c7e16a6169f73e256fd643f4bfe6fc42f5c2", @ANYRES16=r3, @ANYRES16=r11], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtfilter={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {0x0, 0xfff2}, {0xffff, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c0c4) 1.086119053s ago: executing program 2 (id=3505): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 1.032989545s ago: executing program 1 (id=3506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20000000) unshare(0x22020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x123000, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000040)=0xffffff51) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], &(0x7f0000000300)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESDEC=r3], 0x20}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) 980.96177ms ago: executing program 4 (id=3507): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) unshare(0x28000600) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000050000000000000700000000001e2e615f61"], 0x0, 0x2d, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r3, 0x38, 0xfffffffffffffffd}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000080)={0x4, 0x7fffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r5, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r8 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xfffffdda}, 0x1, 0x0, 0x0, 0x438e9b2952b66f34}, 0x20004800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 887.213034ms ago: executing program 1 (id=3508): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x25df5bfc, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) socket$nl_crypto(0x10, 0x3, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) 854.983502ms ago: executing program 2 (id=3509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r2, &(0x7f0000001f00), 0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r3) 764.28308ms ago: executing program 2 (id=3510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r4 = socket$inet(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x330, 0x40000, 0x198, 0x0, 0x198, 0x428, 0x358, 0x358, 0x428, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r5}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x10, [0x40, 0x37, 0x32, 0x2a, 0x2, 0x2d, 0x28, 0x17, 0x23, 0x1c, 0xe, 0x38, 0xb, 0x22, 0x27, 0xd], 0x2, 0x4b, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x520) (async) r6 = accept4(r3, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) (async) recvfrom$packet(r6, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r7 = socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f00000004c0), 0x12) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (rerun: 32) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000007, 0x13, r8, 0x180000000) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x32, 0xffffffffffffffff, 0x2000) (async, rerun: 32) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000800)='cubic', 0x4) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) preadv(r10, &(0x7f0000000180)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1, 0x0, 0x1) 671.60957ms ago: executing program 1 (id=3511): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004f0000000e0001"], 0x34}}, 0x0) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) writev(r4, &(0x7f0000000140)=[{&(0x7f00000002c0)="aefd", 0x2}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="5847f1e30e2d4f8cc884b1504188b0691bb52327a04418d87345bc0000a2289f9c040000330000000000839ef869", @ANYRESOCT=r3, @ANYBLOB="020000000048d30814000000123068000000000400ff000a00"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x224, r7, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffea1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36d9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x700000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57e}]}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf28}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x811}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4cc643b9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x946f}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x44010}, 0x40000d0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x86f, @mcast2, 0x20000006}}, {0x20, 0x2, @in6={0xa, 0x2, 0x0, @local}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40815}, 0x0) 668.72316ms ago: executing program 3 (id=3512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x8, 0xfffffffd, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x8c0, &(0x7f0000000080)={@align=0x6, {0x3, 0xd, 0xfffffffe, 0x7fff}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000280)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0xff80) openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) 568.097671ms ago: executing program 2 (id=3513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000840)="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", 0x1cb) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'bond_slave_0\x00', {0x2, 0x4e21, @empty}}) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400ff002500010324bd7006fcdbdf25150000000f005b00378d39000000000245cd2900"], 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f0000002840)={&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000002700)=[{0x0}, {&(0x7f0000002500)=""/189, 0xbd}, {&(0x7f00000025c0)=""/75, 0x4b}, {&(0x7f0000002640)=""/82, 0x52}, {&(0x7f00000026c0)=""/23, 0x17}], 0x5, &(0x7f0000002780)=""/134, 0x86}, 0x10100) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d100200000000001d400200000000004704000001ed0000620300007e0000001d440000000000007a0a00fe00ffffffc3030000e10000009f000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91c11ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cdb70f617af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028af0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00672f0814bf895e3a6dfbc711243f58a817895f5c4eaf7de8411a831ef65508f416ae3fd1db8386f6aae40515273adcff6196bb45476ec0a5279ed223f772aee25947b1f0d275c0e495b050f10a0b5d19b578a2b4096b9df527211bb39a29224c34a517dc344a195697b0c158d3519c04fe7621ebeef0bc369a1431a90c4117bdfe358e0e869e9f3e5443813261c1c3c78ab2584603e4468de7d0dc93691491050666f4ea5f083a1b281ed230569921856befe07538fbf33f43fa4ad583867bee301ae1e2566ae7a7afb7fc54895a2fef928d91a162affb4d373c7628a2871d7d19eaf06ed5f58f799c8ff391d3752b115073702ee257ade173dd2f736ed5939f219ba42f7650b9a262f6ee4af52aba3e669a835555ea1674f89d7f98ee1a1c7f977e0a93fdf91606d01c1a9dacfd4328502948bed0bc9514e4f66846bc1f245aa5abad88d56679092fee01007cade7ee72a49a498d51a26ba5cf0896cd9143d457262976f682bf31833ee99b5301f349dd2815e76a8b9a6cec5e000bd6bdafcb9536379b6cd0351cfe345abb1f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 542.223664ms ago: executing program 1 (id=3514): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x16, 0xa01}, 0x14}}, 0x0) recvmmsg$unix(r2, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={r7, 0x2}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x1b) pread64(r3, &(0x7f0000002200)=""/89, 0x59, 0x10000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r10, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000100)=0x730) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_setlink={0x8, 0x13, 0x20, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x0, 0x4a02}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 478.898555ms ago: executing program 3 (id=3515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000640)={0x5, &(0x7f0000000600)=[{0x7ff, 0x9, 0x9, 0x6}, {0x5, 0x6, 0x3, 0xfffffffc}, {0x1ff, 0x9, 0x7, 0x7}, {0xdc15, 0x5, 0x8, 0x9}, {0xffff, 0x9, 0x6, 0x2}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x4, r5, 0x300, 0x82a0}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x24048060) 478.165581ms ago: executing program 0 (id=3516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000405"], 0x1c}, 0x1, 0x0, 0x0, 0x24008895}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 398.339477ms ago: executing program 2 (id=3517): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe8b}, {0x2, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xf, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0x4, 0x8}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x41100, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 284.650546ms ago: executing program 3 (id=3518): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340919128f5db36125c506203ad5c52a0611d0b97b6a01b300cac5718fc85b5ca56cabc6f6b8ff54fcdc7765c0a7c05ed66748ded1a4b362f5357262df3dafd299917bd0bb81c342fae79567abd0d5838ed75d31555b39a3d57decfb1cfa24e4bb22affbf095", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000978e6a2ae5e62d0e93f7fc62c2f5ca2abfe782ef25bc05ce18fa07bdd256c69512ebc0", @ANYRES16=r5, @ANYBLOB="040026bd7000fddbdf256d000000"], 0x14}}, 0x20008894) bind$inet(r6, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000800)=""/21, 0x15}], 0x2}}], 0x2, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272f874ee3b5c6e56", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) 147.665961ms ago: executing program 2 (id=3519): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r3], 0x20, 0x6044}, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x1, 0xff, 0x0, 0x4, 0x87}, 0x20) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) close(r1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r3], 0x20, 0x6044}, 0x6) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x1, 0xff, 0x0, 0x4, 0x87}, 0x20) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000100)) (async) 146.433083ms ago: executing program 0 (id=3520): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="134cb3f60000000014d7689637a42eb28861746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e26, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r4, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x4000, 0x40, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r7, 0x5000}], 0x1, 0x14) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000140)="474d10", 0x3}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x24000880) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4a4be58bb69f2f4ba4e7dfcb47874eab9be0471dd4c2eec7591bd2ac355cb9a1", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="3b9a0c2b9e11af42c762faa21860af98d575884e0355b6d9b99440421076e94b2e00e5451948f2d7f796b8296250024566d2ed7d841c3a9f6b63bf02cdb2ef9b00d33052309c402bc47920c23f3ab240e26b0b27ef97a9a8615ccf0606c5ca8d631cef9ead6494a16e8d48dbe36f395af9ea19270d3821f87c8b17b4404254e8f31d24ad57351c05af0303e74cc31a34fc29a3698e1a805f36bba9257253e3dbfd76547413ad42b81932105485f603eb", @ANYRESHEX=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x200c8081) r10 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000005c0)}, 0x10000) 0s ago: executing program 4 (id=3521): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000304030000000000000000005500", @ANYRES32=r4, @ANYBLOB="000000006f0018000500100002000020080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) kernel console output (not intermixed with test programs): le+0x1bb/0x340 [ 335.755379][T13778] __gup_longterm_locked+0xd52/0x15c0 [ 335.755404][T13778] ? lock_acquire+0x106/0x350 [ 335.755443][T13778] gup_fast_fallback+0x1d82/0x20d0 [ 335.755497][T13778] ? __pfx_gup_fast_fallback+0x10/0x10 [ 335.755519][T13778] ? futex_unqueue+0x22/0x240 [ 335.755540][T13778] ? is_valid_gup_args+0x11f/0x200 [ 335.755565][T13778] ? get_user_pages_fast+0x4d/0xb0 [ 335.755591][T13778] __iov_iter_get_pages_alloc+0x378/0xa40 [ 335.755622][T13778] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 335.755655][T13778] iov_iter_get_pages2+0x5e/0xa0 [ 335.755680][T13778] __se_sys_vmsplice+0x7b5/0x1660 [ 335.755726][T13778] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 335.755750][T13778] ? __pfx_futex_wait+0x10/0x10 [ 335.755770][T13778] ? __might_fault+0xaf/0x130 [ 335.755803][T13778] ? fdget+0x148/0x1e0 [ 335.755844][T13778] ? put_files_struct+0x24f/0x350 [ 335.755865][T13778] ? 0xffffffffff600000 [ 335.755924][T13778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.755948][T13778] do_syscall_64+0x174/0x580 [ 335.755968][T13778] ? trace_irq_disable+0x3b/0x140 [ 335.756005][T13778] ? clear_bhb_loop+0x40/0x90 [ 335.756033][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.756052][T13778] RIP: 0033:0x7f423959ce59 [ 335.756070][T13778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.756088][T13778] RSP: 002b:00007f423a3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 335.756113][T13778] RAX: ffffffffffffffda RBX: 00007f4239815fa0 RCX: 00007f423959ce59 [ 335.756128][T13778] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 335.756141][T13778] RBP: 00007f4239632d6f R08: 0000000000000000 R09: 0000000000000000 [ 335.756154][T13778] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 335.756165][T13778] R13: 00007f4239816038 R14: 00007f4239815fa0 R15: 00007fffa13070c8 [ 335.756197][T13778] [ 336.103078][T13786] __nla_validate_parse: 5 callbacks suppressed [ 336.103096][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 336.131874][T13779] bridge10: entered allmulticast mode [ 336.178751][ T9352] hsr0: entered promiscuous mode [ 336.191638][T13789] SET target dimension over the limit! [ 336.473917][T13801] tipc: Enabling of bearer rejected, failed to enable media [ 336.522969][T13809] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 336.554000][T13801] tipc: Enabling of bearer rejected, failed to enable media [ 336.578610][T13812] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 336.602165][T13814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2003'. [ 336.637179][T13817] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 336.660762][T13817] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2005'. [ 336.756699][T13820] bond0: entered allmulticast mode [ 336.881905][T13834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2004'. [ 336.950679][T13834] ip6tnl2: entered allmulticast mode [ 337.009362][T13839] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2010'. [ 337.038201][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 337.138995][T13852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2012'. [ 337.245342][T13857] lo speed is unknown, defaulting to 1000 [ 337.299393][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 337.451238][T13872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.507847][T13875] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 337.543246][T13875] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2017'. [ 337.560179][T13875] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2017'. [ 337.603004][T13875] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 337.612266][T13875] netlink: 'syz.3.2017': attribute type 8 has an invalid length. [ 338.307627][T13930] tipc: Enabled bearer , priority 0 [ 338.348096][T13924] syzkaller0: entered promiscuous mode [ 338.356819][T13924] syzkaller0: entered allmulticast mode [ 338.373385][T13924] tipc: Resetting bearer [ 338.418104][T13923] tipc: Resetting bearer [ 338.488299][T13923] tipc: Disabling bearer [ 338.545536][T13935] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 338.706927][T13935] 8021q: adding VLAN 0 to HW filter on device bond12 [ 338.848430][T13942] bond12: (slave veth5): Enslaving as an active interface with a down link [ 338.860254][T13947] bond10: (slave dummy0): Releasing active interface [ 338.894274][T13947] bond12: (slave dummy0): making interface the new active one [ 338.934116][T13947] dummy0: entered promiscuous mode [ 338.955110][T13947] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 339.052638][T13948] tipc: Enabled bearer , priority 0 [ 339.069593][T13948] syzkaller0: entered promiscuous mode [ 339.078385][T13948] syzkaller0: entered allmulticast mode [ 339.089245][T13967] syzkaller1: entered promiscuous mode [ 339.106519][T13967] syzkaller1: entered allmulticast mode [ 339.193350][T13946] tipc: Resetting bearer [ 339.215901][T13946] tipc: Disabling bearer [ 339.399046][ T5628] block nbd2: Receive control failed (result -1) [ 340.040689][ T6744] net_ratelimit: 2 callbacks suppressed [ 340.040704][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.054465][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.065970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.074107][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.082257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.090394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.191086][T14013] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 340.210861][T14013] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 340.519323][ T29] audit: type=1800 audit(1781730154.185:6): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2047" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2061 res=0 errno=0 [ 340.532288][T14027] macsec1: entered promiscuous mode [ 341.036529][T14049] tap0: tun_chr_ioctl cmd 2148553947 [ 341.346580][T14058] __nla_validate_parse: 9 callbacks suppressed [ 341.346599][T14058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2057'. [ 341.367404][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'. [ 341.387483][T14058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2057'. [ 341.402263][T14058] netlink: 'syz.2.2057': attribute type 3 has an invalid length. [ 341.548597][ T6744] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.566681][ T6744] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.594367][ T6744] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.619714][ T6744] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.753125][T14074] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2061'. [ 341.781624][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2061'. [ 341.786835][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 341.799949][T14078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2063'. [ 341.810338][T14075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2062'. [ 341.933191][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 341.975357][T14074] bond6: Removing last arp target with arp_interval on [ 341.991697][T14097] netlink: 'syz.4.2061': attribute type 13 has an invalid length. [ 342.020982][T14074] bond6: entered promiscuous mode [ 342.047740][T14074] bond6: entered allmulticast mode [ 342.114677][T14093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.319349][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2070'. [ 342.524046][T14130] bond4: (slave gretap0): Removing an active aggregator [ 342.565636][T14130] bond4: (slave gretap0): Releasing backup interface [ 342.635247][T14130] erspan0: left allmulticast mode [ 342.656223][T14138] xt_ecn: cannot match TCP bits for non-tcp packets [ 342.661554][T14130] erspan0: left promiscuous mode [ 342.686122][T14130] bridge2: port 1(erspan0) entered disabled state [ 342.740603][T14130] bond3: (slave bridge1): Releasing active interface [ 342.975270][ T9352] IPVS: starting estimator thread 0... [ 343.075397][T14159] IPVS: using max 31 ests per chain, 74400 per kthread [ 343.351171][T14171] xt_hashlimit: size too large, truncated to 1048576 [ 344.776664][T14164] tipc: Enabling of bearer rejected, already enabled [ 344.812340][T14174] netlink: 'syz.2.2083': attribute type 1 has an invalid length. [ 344.826039][T14173] bridge_slave_0 (unregistering): left allmulticast mode [ 344.833386][T14173] bridge_slave_0 (unregistering): left promiscuous mode [ 344.846335][T14173] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.112242][T14191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.151144][T14191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.175896][T14191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.281322][T14201] bridge0: port 1(syz_tun) entered disabled state [ 345.442596][T14207] xt_CT: No such helper "snmp_trap" [ 345.539746][ T5628] block nbd3: Receive control failed (result -1) [ 346.698704][T14259] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 346.738205][T14259] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 346.980226][T14281] xt_hashlimit: size too large, truncated to 1048576 [ 347.271221][T14293] __nla_validate_parse: 11 callbacks suppressed [ 347.271240][T14293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2117'. [ 347.337155][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 347.413134][T14293] gretap3: entered allmulticast mode [ 347.741595][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2121'. [ 347.743675][T14304] lo speed is unknown, defaulting to 1000 [ 347.942137][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'. [ 347.973087][T14319] netlink: 'syz.0.2124': attribute type 34 has an invalid length. [ 347.998829][T14319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2124'. [ 348.495466][T14353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2131'. [ 348.538656][T14355] batadv0: left promiscuous mode [ 348.548097][T14355] geneve1: left promiscuous mode [ 348.553349][T14355] bond1: left promiscuous mode [ 348.558931][T14355] bond2: left promiscuous mode [ 348.563745][T14355] erspan1: left promiscuous mode [ 348.569155][T14355] bond2: left allmulticast mode [ 348.575405][T14355] erspan1: left allmulticast mode [ 348.580804][T14355] vlan3: left allmulticast mode [ 348.586484][T14355] veth0_to_bond: left allmulticast mode [ 348.592968][T14355] veth9: left allmulticast mode [ 348.726792][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 348.768312][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 348.964273][T14378] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2137'. [ 349.010009][T14378] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2137'. [ 349.168084][T14389] netlink: 'syz.0.2139': attribute type 7 has an invalid length. [ 349.187188][T14388] tipc: Enabled bearer , priority 5 [ 349.195323][T14389] netlink: 'syz.0.2139': attribute type 8 has an invalid length. [ 349.287610][T14394] tipc: Enabling of bearer rejected, failed to enable media [ 349.402048][T14400] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 349.443722][T14406] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.345422][ T10] tipc: Node number set to 686191305 [ 350.847437][T14475] : entered promiscuous mode [ 350.893248][T14478] netlink: 'syz.0.2156': attribute type 6 has an invalid length. [ 350.935723][T14480] ip6gre3: entered promiscuous mode [ 350.952245][T14480] ip6gre3: entered allmulticast mode [ 351.428326][T14506] syzkaller0: entered promiscuous mode [ 351.442310][T14506] syzkaller0: entered allmulticast mode [ 353.526004][T14539] tipc: Enabling of bearer rejected, already enabled [ 353.548980][T14545] geneve0: entered promiscuous mode [ 353.571630][T14545] geneve0: left promiscuous mode [ 353.686035][T14550] syzkaller0: entered promiscuous mode [ 353.702364][T14550] syzkaller0: entered allmulticast mode [ 353.731637][T14550] tipc: Enabled bearer , priority 0 [ 353.762193][T14548] tipc: Resetting bearer [ 353.818692][T14548] tipc: Disabling bearer [ 353.833621][T14556] ip6tnl0: mtu greater than device maximum [ 353.840724][T14559] bond0: Caught tx_queue_len zero misconfig [ 353.902313][T14559] netlink: 'syz.0.2178': attribute type 2 has an invalid length. [ 353.986841][T14559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.105191][ T29] audit: type=1800 audit(1781730167.775:7): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2181" name="memory.events" dev="tmpfs" ino=2249 res=0 errno=0 [ 354.225586][T14589] __nla_validate_parse: 16 callbacks suppressed [ 354.225605][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'. [ 354.246176][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2185'. [ 354.343834][T14592] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2187'. [ 354.747984][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 354.774314][T14619] batadv_slave_1: entered promiscuous mode [ 354.858820][T14616] batadv_slave_1: left promiscuous mode [ 354.951783][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 354.965857][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2198'. [ 355.056491][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2199'. [ 355.117374][T14637] tipc: Enabling of bearer rejected, failed to enable media [ 355.128427][T14634] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2199'. [ 355.142957][T14634] netlink: 'syz.0.2199': attribute type 3 has an invalid length. [ 355.176736][T14640] sctp: [Deprecated]: syz.3.2202 (pid 14640) Use of int in maxseg socket option. [ 355.176736][T14640] Use struct sctp_assoc_value instead [ 355.357792][T14656] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 355.486418][T14658] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 355.503438][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 355.514789][T14658] netlink: 'syz.4.2207': attribute type 12 has an invalid length. [ 355.525187][T14661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2206'. [ 355.958320][T14683] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 355.966570][T14683] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 355.992850][T14683] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 357.027959][T14747] geneve3: entered promiscuous mode [ 357.034707][T14747] geneve3: entered allmulticast mode [ 358.172359][T14769] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 358.172359][T14769] 3ìUH†5rºBnœæ [ 358.246921][T14771] bridge4: entered promiscuous mode [ 358.264844][T14771] bridge4: entered allmulticast mode [ 358.305243][T14771] team0: Port device bridge4 added [ 358.445914][T14779] tipc: Enabled bearer , priority 0 [ 358.626130][T14779] syzkaller0: entered promiscuous mode [ 358.635244][T14779] syzkaller0: entered allmulticast mode [ 358.642975][T14779] tipc: Resetting bearer [ 358.702100][T14778] tipc: Resetting bearer [ 360.603852][T14778] tipc: Disabling bearer [ 360.618709][T14802] bond0: (slave bond_slave_0): Releasing backup interface [ 360.629536][T14802] bond0: (slave bond_slave_1): Releasing backup interface [ 360.642417][T14802] team0: Port device team_slave_1 removed [ 360.652484][T14802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.661263][T14802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.670275][T14802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.717821][T14809] tipc: Enabling of bearer rejected, failed to enable media [ 360.841877][T14822] netlink: 'syz.3.2260': attribute type 4 has an invalid length. [ 360.865901][T14822] __nla_validate_parse: 36 callbacks suppressed [ 360.865918][T14822] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2260'. [ 360.913739][T14822] .`: renamed from bond0 [ 360.922789][T14825] netlink: 320 bytes leftover after parsing attributes in process `syz.4.2262'. [ 360.923654][T14830] netlink: 'syz.1.2263': attribute type 1 has an invalid length. [ 360.936845][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2262'. [ 360.951603][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2262'. [ 360.967683][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2262'. [ 361.094222][T14837] veth0: entered promiscuous mode [ 361.124056][T14844] netlink: 'syz.0.2268': attribute type 1 has an invalid length. [ 361.141484][T14837] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.265902][T14844] 8021q: adding VLAN 0 to HW filter on device bond12 [ 361.287556][T14858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2270'. [ 361.333657][T14848] macvlan2: entered promiscuous mode [ 361.364171][T14848] macvlan2: entered allmulticast mode [ 361.389556][T14848] bond12: entered allmulticast mode [ 361.421538][T14848] bond12: entered promiscuous mode [ 361.454219][T14848] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 361.466742][T14848] team0: Port device macvlan2 added [ 361.507836][T14855] bond12: (slave ip6gretap0): making interface the new active one [ 361.517326][T14855] ip6gretap0: entered promiscuous mode [ 361.522993][T14855] ip6gretap0: entered allmulticast mode [ 361.530142][T14855] bond12: (slave ip6gretap0): Enslaving as an active interface with an up link [ 361.539548][T14834] veth0: left promiscuous mode [ 361.638297][T14872] netlink: 'syz.2.2271': attribute type 3 has an invalid length. [ 361.711343][T14864] syzkaller0: entered promiscuous mode [ 361.740123][T14864] syzkaller0: entered allmulticast mode [ 363.709089][T14888] veth0_to_hsr: entered allmulticast mode [ 363.859101][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2279'. [ 363.889948][T14902] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2279'. [ 363.926165][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2279'. [ 364.182649][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 365.567876][T14973] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 365.579421][T14973] bond8 (unregistering): Released all slaves [ 365.925573][T15000] veth0: Caught tx_queue_len zero misconfig [ 366.148055][T15009] __nla_validate_parse: 1 callbacks suppressed [ 366.148073][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 366.288337][T15007] x_tables: duplicate underflow at hook 1 [ 366.582635][T15023] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 366.591255][T15023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.983931][T15034] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 367.192369][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 367.530318][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 367.560702][T15056] netlink: 'syz.0.2323': attribute type 1 has an invalid length. [ 367.590865][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 367.709725][T15061] syzkaller0: entered promiscuous mode [ 367.720105][T15061] syzkaller0: entered allmulticast mode [ 368.422022][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'. [ 370.014181][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 370.037538][T15098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2332'. [ 370.127634][T15100] xfrm0: entered allmulticast mode [ 370.170084][T15100] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 370.241941][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2336'. [ 370.309778][T15112] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 370.705253][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2344'. [ 370.801787][T15145] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2344'. [ 371.031098][T15162] IPVS: length: 15 != 8 [ 371.196538][T15173] netlink: 'syz.1.2353': attribute type 1 has an invalid length. [ 371.244240][T15173] __nla_validate_parse: 3 callbacks suppressed [ 371.244255][T15173] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2353'. [ 371.332646][T15173] netlink: 'syz.1.2353': attribute type 1 has an invalid length. [ 371.358206][T15173] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2353'. [ 371.372076][T15188] openvswitch: netlink: Flow actions attr not present in new flow. [ 371.390809][T15187] netlink: 'syz.2.2355': attribute type 10 has an invalid length. [ 371.418458][T15187] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2355'. [ 371.699753][T15201] geneve5: entered promiscuous mode [ 371.725638][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 35761 - 0 [ 371.771506][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 35761 - 0 [ 371.801122][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 35761 - 0 [ 371.838397][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 35761 - 0 [ 371.890188][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2360'. [ 372.122131][T15224] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2363'. [ 372.172791][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2363'. [ 372.183525][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2364'. [ 372.201834][T15226] 8021q: VLANs not supported on ip6_vti0 [ 372.209420][T15224] 8021q: VLANs not supported on ip_vti0 [ 372.217689][T15226] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2364'. [ 372.223797][T15229] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2363'. [ 372.241076][T15229] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2363'. [ 372.287213][T15224] sctp: [Deprecated]: syz.4.2363 (pid 15224) Use of int in max_burst socket option. [ 372.287213][T15224] Use struct sctp_assoc_value instead [ 372.434225][T15242] xt_hl: Unknown TTL match mode: 237 [ 372.736927][T15262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.741815][T15260] netlink: 'syz.0.2372': attribute type 21 has an invalid length. [ 372.769867][T15260] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.791320][T15260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.798745][T15260] IPv6: NLM_F_CREATE should be set when creating new route [ 372.806097][T15260] IPv6: NLM_F_CREATE should be set when creating new route [ 372.813352][T15260] IPv6: NLM_F_CREATE should be set when creating new route [ 372.826453][T15267] netlink: 'syz.0.2372': attribute type 21 has an invalid length. [ 372.835429][T15267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.846813][T15260] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 373.382751][T15290] 8021q: adding VLAN 0 to HW filter on device bond13 [ 374.113995][T15331] lo speed is unknown, defaulting to 1000 [ 374.494560][T15346] netlink: 'syz.0.2388': attribute type 10 has an invalid length. [ 374.527527][T15346] syz_tun: entered promiscuous mode [ 374.790533][T15359] netlink: 'syz.1.2394': attribute type 20 has an invalid length. [ 375.028239][T15363] netlink: 'syz.1.2395': attribute type 23 has an invalid length. [ 375.264147][T15373] sctp: [Deprecated]: syz.0.2399 (pid 15373) Use of int in max_burst socket option. [ 375.264147][T15373] Use struct sctp_assoc_value instead [ 375.908676][T15411] netlink: zone id is out of range [ 375.926877][T15411] netlink: zone id is out of range [ 375.940165][T15411] netlink: zone id is out of range [ 375.948401][T15411] netlink: zone id is out of range [ 375.967163][T15411] netlink: zone id is out of range [ 375.982602][T15411] netlink: zone id is out of range [ 376.003332][T15411] netlink: zone id is out of range [ 376.025704][T15411] netlink: zone id is out of range [ 376.050477][T15411] netlink: zone id is out of range [ 376.075727][T15411] netlink: zone id is out of range [ 376.360820][T15438] gretap2: entered allmulticast mode [ 376.478258][ T29] audit: type=1804 audit(1781730190.145:8): pid=15445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2415" name="/newroot/468/cgroup.controllers" dev="tmpfs" ino=2407 res=1 errno=0 [ 376.525864][T15446] netlink: 'syz.3.2416': attribute type 3 has an invalid length. [ 376.532156][ T29] audit: type=1800 audit(1781730190.145:9): pid=15445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2415" name="cgroup.controllers" dev="tmpfs" ino=2407 res=0 errno=0 [ 376.550034][T15448] __nla_validate_parse: 18 callbacks suppressed [ 376.550051][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 376.556255][ T29] audit: type=1804 audit(1781730190.175:10): pid=15445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2415" name="/newroot/468/cgroup.controllers" dev="tmpfs" ino=2407 res=1 errno=0 [ 376.786406][T15448] tipc: Enabled bearer , priority 0 [ 376.797166][T15448] syzkaller0: entered promiscuous mode [ 376.804025][T15448] syzkaller0: entered allmulticast mode [ 376.826225][T15448] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 376.898632][T15447] tipc: Resetting bearer [ 376.944147][T15447] tipc: Disabling bearer [ 376.968426][T15468] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2420'. [ 377.088060][T15474] tunl0: Caught tx_queue_len zero misconfig [ 377.294840][T15479] netlink: 'syz.3.2424': attribute type 1 has an invalid length. [ 377.350741][T15482] 8021q: adding VLAN 0 to HW filter on device bond14 [ 377.392336][T15479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.765968][T15512] syzkaller0: entered promiscuous mode [ 377.777873][T15512] syzkaller0: entered allmulticast mode [ 378.337972][T15545] bridge0: port 1(syz_tun) entered blocking state [ 378.363124][T15545] bridge0: port 1(syz_tun) entered disabled state [ 378.383429][T15545] syz_tun: entered allmulticast mode [ 378.407146][T15545] syz_tun: entered promiscuous mode [ 378.449252][T15547] bridge0: entered allmulticast mode [ 378.568276][T15548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2441'. [ 378.655232][T15555] 8021q: adding VLAN 0 to HW filter on device bond16 [ 378.706419][T15555] bond15: (slave bond16): Enslaving as an active interface with an up link [ 378.745983][T15567] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 378.748647][T15548] 8021q: adding VLAN 0 to HW filter on device bond15 [ 378.967587][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2445'. [ 378.985332][T15563] syzkaller0: entered promiscuous mode [ 379.019369][T15563] syzkaller0: entered allmulticast mode [ 381.231909][T15589] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 381.241762][T15589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 381.252061][T15589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 381.456408][T15616] sctp: [Deprecated]: syz.0.2457 (pid 15616) Use of int in maxseg socket option. [ 381.456408][T15616] Use struct sctp_assoc_value instead [ 381.487473][T15608] bond6: Unable to set up delay as MII monitoring is disabled [ 381.531350][T15608] bond6 (unregistering): Released all slaves [ 381.638986][T15622] team_slave_1: Caught tx_queue_len zero misconfig [ 381.804235][T15633] hmac(sha224: entered promiscuous mode [ 382.067642][T15643] bond7 (unregistering): Released all slaves [ 382.289382][T15650] nbd: must specify a size in bytes for the device [ 382.362740][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'. [ 382.391127][T15659] net_ratelimit: 378 callbacks suppressed [ 382.391142][T15659] openvswitch: netlink: Message has 2 unknown bytes. [ 382.453872][T15649] can: request_module (can-proto-0) failed. [ 382.546435][T15655] : option downdelay: invalid value (18446744073709547007) [ 382.554003][T15655] : option downdelay: allowed values 0 - 2147483647 [ 382.562824][T15655]  (unregistering): Released all slaves [ 382.582164][T15652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2464'. [ 382.890337][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 382.942346][T15681] 0ªX¹¦À: left allmulticast mode [ 382.959247][T15687] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2469'. [ 382.972299][T15687] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2469'. [ 382.972760][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 383.022735][T15681] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 383.056389][T15688] team0: entered promiscuous mode [ 383.124176][T15691] netlink: 'syz.2.2472': attribute type 1 has an invalid length. [ 383.136610][T15690] netlink: 'syz.2.2472': attribute type 1 has an invalid length. [ 383.145865][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 383.156000][T15690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2472'. [ 383.257104][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 383.288717][T15700] tunl0: Caught tx_queue_len zero misconfig [ 383.344095][T15690] vlan3: entered promiscuous mode [ 383.354638][T15690] gretap0: entered promiscuous mode [ 383.422551][T15700] syzkaller0: entered promiscuous mode [ 383.439009][T15700] syzkaller0: entered allmulticast mode [ 383.486436][T15701] tipc: Enabled bearer , priority 0 [ 383.511540][T15700] tipc: Enabling of bearer rejected, already enabled [ 383.556041][T15698] tipc: Resetting bearer [ 383.601751][T15698] tipc: Disabling bearer [ 383.627055][T15711] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 383.638043][T15711] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 383.649597][T15711] tipc: Resetting bearer [ 383.688177][T15713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2477'. [ 383.826298][T15722] netlink: 'syz.0.2481': attribute type 30 has an invalid length. [ 383.856903][T15722] bond17: option arp_missed_max: invalid value (0) [ 383.867974][T15722] bond17: option arp_missed_max: allowed values 1 - 255 [ 383.895937][T15726] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 383.896770][T15722] bond17 (unregistering): Released all slaves [ 384.155893][T15741] openvswitch: netlink: IP tunnel dst address not specified [ 384.207579][T15740] hmó3)ó: entered promiscuous mode [ 384.461216][T15754] xt_NFQUEUE: number of total queues is 0 [ 384.606386][T15764] lo: Caught tx_queue_len zero misconfig [ 384.787418][T15775] ip6gre4: entered promiscuous mode [ 384.803033][T15775] ip6gre4: entered allmulticast mode [ 385.030467][T15779] lo speed is unknown, defaulting to 1000 [ 385.030485][T15790] : renamed from veth0_to_bond [ 385.170638][T15801] openvswitch: netlink: Tunnel attr 16 has unexpected len 8 expected 0 [ 386.705435][T15866] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 387.791293][T15905] sctp: [Deprecated]: syz.2.2538 (pid 15905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.791293][T15905] Use struct sctp_sack_info instead [ 387.825241][T15905] sctp: [Deprecated]: syz.2.2538 (pid 15905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.825241][T15905] Use struct sctp_sack_info instead [ 387.980531][T15907] __nla_validate_parse: 18 callbacks suppressed [ 387.980551][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'. [ 388.096296][T15904] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 388.104073][T15904] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 388.168437][T15909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2540'. [ 388.220887][T15909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2540'. [ 389.172827][T15693] udevd[15693]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 389.224198][T10810] udevd[10810]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 389.351406][T15974] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2553'. [ 389.376560][T15974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.669353][T15993] bridge0: port 1(syz_tun) entered blocking state [ 389.676097][T15993] bridge0: port 1(syz_tun) entered forwarding state [ 389.709641][T15993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.720955][T15993] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.733346][T15993] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 389.775471][T15993] veth1_vlan: left promiscuous mode [ 389.783965][T15993] veth0_vlan: left promiscuous mode [ 389.800784][T15993] veth0_vlan: entered promiscuous mode [ 389.811478][T15993] veth1_vlan: entered promiscuous mode [ 389.826137][T15993] veth1_macvtap: left promiscuous mode [ 389.840205][T15993] veth1_macvtap: entered promiscuous mode [ 389.853838][T15993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.872382][T15993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.883759][T15993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.892551][T16002] xt_hashlimit: size too large, truncated to 1048576 [ 389.894219][T15993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.901086][T16002] xt_hashlimit: max too large, truncated to 1048576 [ 389.916266][T15993] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 389.937079][T15993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.944793][T15993] ip6gre1: left allmulticast mode [ 389.954146][T15993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.962981][T15993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.977770][T15993] vlan2: left allmulticast mode [ 389.982858][T15993] bridge2: left allmulticast mode [ 389.997977][T15993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.009935][T15993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.018505][T15993] ip6erspan0: left allmulticast mode [ 390.032557][T15993] bridge4: left allmulticast mode [ 390.042689][T15993] team1: left allmulticast mode [ 390.048649][T15993] 8021q: adding VLAN 0 to HW filter on device team1 [ 390.057829][T15993] ip6tnl2: left allmulticast mode [ 390.066198][T15993] bond6: left allmulticast mode [ 390.071535][T15993] 8021q: adding VLAN 0 to HW filter on device bond6 [ 390.081442][T15993] geneve3: left allmulticast mode [ 390.087258][T15993] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 390.134231][ T9353] dummy0: entered promiscuous mode [ 390.162824][ T3325] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.176640][T16011] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2562'. [ 390.189677][ T3325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.201167][ T3325] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.211157][ T3325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.273907][T16011] bridge4: entered allmulticast mode [ 390.293099][ T3325] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.318437][ T3325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.339503][ T3325] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.358954][ T3325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.389152][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'. [ 390.401307][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2567'. [ 390.419930][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2567'. [ 390.442729][T16026] netlink: 'syz.3.2567': attribute type 4 has an invalid length. [ 390.467411][ T3325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.477385][ T3325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.498144][ T9357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.545691][ T9353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.567760][ T9357] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 390.586350][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2569'. [ 390.780623][ T9353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.015358][ T13] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 391.191952][T16068] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 391.223636][T16068] 8021q: adding VLAN 0 to HW filter on device bond14 [ 391.362439][T16074] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2581'. [ 391.502565][T16086] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 391.516439][T16086] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 391.575497][ T9352] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 391.977418][T16113] syzkaller0: entered promiscuous mode [ 391.991489][T16113] syzkaller0: entered allmulticast mode [ 392.015536][T16106] xt_CT: No such helper "netbios-ns" [ 392.037067][ T13] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 392.066714][ T13] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 392.105497][T16106] tipc: Enabled bearer , priority 0 [ 392.158396][T16104] tipc: Resetting bearer [ 392.208935][T16104] tipc: Disabling bearer [ 392.277767][T16122] netlink: 'syz.0.2597': attribute type 1 has an invalid length. [ 392.360079][T16122] bond17: entered promiscuous mode [ 392.369620][T16122] bond17: entered allmulticast mode [ 392.375662][T16122] 8021q: adding VLAN 0 to HW filter on device bond17 [ 392.626064][T16148] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 392.829009][T16156] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 392.977232][T16156] bond15: entered promiscuous mode [ 392.993491][T16156] 8021q: adding VLAN 0 to HW filter on device bond15 [ 393.032590][T16175] netlink: 'syz.4.2609': attribute type 10 has an invalid length. [ 393.039603][T16177] netlink: 'syz.4.2609': attribute type 10 has an invalid length. [ 393.048343][T16156] bond15: (slave bridge10): making interface the new active one [ 393.048366][T16156] bridge10: entered promiscuous mode [ 393.056971][T16156] bond15: (slave bridge10): Enslaving as an active interface with an up link [ 393.080203][T16158] ipvlan4: entered allmulticast mode [ 393.086355][T16158] bond15: entered allmulticast mode [ 393.091822][T16158] bridge10: entered allmulticast mode [ 393.230658][T16188] __nla_validate_parse: 4 callbacks suppressed [ 393.230675][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'. [ 395.026168][T16168] ipvlan5: entered allmulticast mode [ 395.075475][ T5628] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 395.182331][T16197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2612'. [ 395.250932][T16199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'. [ 395.352190][T16206] netlink: 'syz.0.2615': attribute type 2 has an invalid length. [ 395.399898][T16209] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2617'. [ 395.649503][T16221] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 395.667904][T16221] bond7 (unregistering): Released all slaves [ 395.974860][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 396.114912][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 396.114927][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 396.136537][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2626'. [ 396.156313][T16251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2626'. [ 396.183057][T16252] : entered promiscuous mode [ 396.395670][T16265] netlink: 'syz.1.2633': attribute type 1 has an invalid length. [ 396.475874][T16266] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 396.623183][T16280] pim6reg: entered allmulticast mode [ 396.956933][T16292] syzkaller0: entered promiscuous mode [ 396.982139][T16292] syzkaller0: entered allmulticast mode [ 397.339150][T16319] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2643'. [ 399.274716][T16320] tipc: Enabling of bearer rejected, failed to enable media [ 399.507336][T16353] syzkaller0: entered promiscuous mode [ 399.530659][T16353] syzkaller0: entered allmulticast mode [ 400.378103][T16404] tipc: Enabled bearer , priority 0 [ 400.443761][T16409] netlink: 'syz.1.2660': attribute type 10 has an invalid length. [ 400.463107][T16409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2660'. [ 400.486931][T16409] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 400.596555][T16413] netlink: 'syz.0.2661': attribute type 111 has an invalid length. [ 400.971964][T16436] netlink: 'syz.2.2667': attribute type 1 has an invalid length. [ 401.066366][T16436] bond8: entered promiscuous mode [ 401.071873][T16436] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.103789][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 401.195829][T16438] bond8: (slave bridge7): making interface the new active one [ 401.203388][T16438] bridge7: entered promiscuous mode [ 401.213859][T16448] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2669'. [ 401.225773][T16438] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 401.349662][T16453] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2671'. [ 401.361973][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2671'. [ 401.482898][T16464] syzkaller0: entered promiscuous mode [ 401.496481][T16464] syzkaller0: entered allmulticast mode [ 401.508031][ T9353] tipc: Node number set to 4187093633 [ 401.564926][T16466] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 401.616834][ T3325] tipc: Subscription rejected, illegal request [ 401.830277][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 401.922982][T16492] tipc: Enabled bearer , priority 0 [ 401.944253][T16492] syzkaller0: entered promiscuous mode [ 401.959977][T16492] syzkaller0: entered allmulticast mode [ 402.061032][T16492] tipc: Resetting bearer [ 402.077272][T16491] tipc: Resetting bearer [ 402.106600][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'. [ 402.121476][T16491] tipc: Disabling bearer [ 402.414340][T16521] openvswitch: netlink: Message has 4 unknown bytes. [ 402.426197][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 402.468741][T16518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2687'. [ 402.672587][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 402.804355][T16539] bridge_slave_1: left allmulticast mode [ 402.812530][T16539] bridge_slave_1: left promiscuous mode [ 402.820098][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.839165][T16539] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 402.910397][T16543] netlink: 'syz.1.2696': attribute type 39 has an invalid length. [ 403.308832][T16569] TCP: TCP_TX_DELAY enabled [ 403.352626][T16573] vxlan2: entered promiscuous mode [ 403.365485][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.369051][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.383635][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.394819][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.403203][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.414251][T16569] tipc: Enabled bearer , priority 0 [ 403.448985][T16575] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 403.462577][T16575] bond18 (unregistering): Released all slaves [ 403.498500][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.508666][T16569] syzkaller0: entered promiscuous mode [ 403.515146][T16569] syzkaller0: entered allmulticast mode [ 403.548274][T16568] tipc: Resetting bearer [ 403.626689][T16568] tipc: Disabling bearer [ 403.650559][T16592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.128304][T16628] bridge_slave_1: Caught tx_queue_len zero misconfig [ 404.602348][T16656] vlan2: entered promiscuous mode [ 404.626929][T16656] bridge0: entered promiscuous mode [ 404.674603][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 404.713477][T16666] netlink: 'syz.0.2733': attribute type 1 has an invalid length. [ 404.743028][T16666] netlink: 'syz.0.2733': attribute type 30 has an invalid length. [ 404.792431][T16668] syzkaller0: entered promiscuous mode [ 404.817359][T16668] syzkaller0: entered allmulticast mode [ 404.840583][T16668] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 404.921422][T16677] netlink: 'syz.2.2739': attribute type 12 has an invalid length. [ 404.930504][T16677] netlink: 'syz.2.2739': attribute type 11 has an invalid length. [ 405.024017][T16692] netlink: 'syz.2.2740': attribute type 1 has an invalid length. [ 405.098521][T16692] nftables ruleset with unbound set [ 405.126573][T16695] netlink: 'syz.3.2741': attribute type 1 has an invalid length. [ 405.139155][T16692] sch_tbf: burst 0 is lower than device ip6gre0 mtu (5376) ! [ 405.301644][T16701] 8021q: adding VLAN 0 to HW filter on device bond7 [ 405.338140][T16701] bond6: (slave bond7): making interface the new active one [ 405.355335][T16701] bond6: (slave bond7): Enslaving as an active interface with an up link [ 405.391143][T16713] 8021q: adding VLAN 0 to HW filter on device bond6 [ 405.542247][T16725] __nla_validate_parse: 20 callbacks suppressed [ 405.542266][T16725] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2746'. [ 406.407644][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 406.455210][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 406.494278][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 406.498934][T16763] lo speed is unknown, defaulting to 1000 [ 406.531807][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 406.566946][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 406.602243][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 406.627018][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 406.648261][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 406.672087][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 407.082576][T16805] netlink: 'syz.0.2762': attribute type 13 has an invalid length. [ 407.308878][T16812] netlink: 'syz.2.2763': attribute type 5 has an invalid length. [ 407.702801][T16821] lo speed is unknown, defaulting to 1000 [ 408.240107][T16864] netlink: 'syz.1.2777': attribute type 6 has an invalid length. [ 411.258705][T16896] __nla_validate_parse: 31 callbacks suppressed [ 411.258723][T16896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2788'. [ 411.393299][T16901] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 411.423612][T16901] macsec1: entered promiscuous mode [ 411.446896][T16901] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 411.596438][T16906] vlan0: entered promiscuous mode [ 411.601692][T16906] bridge0: entered promiscuous mode [ 411.689920][T16909] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 411.709496][T16911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2795'. [ 411.737066][T16911] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2795'. [ 411.812253][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2794'. [ 412.448503][T16949] sctp: [Deprecated]: syz.0.2801 (pid 16949) Use of int in max_burst socket option. [ 412.448503][T16949] Use struct sctp_assoc_value instead [ 412.647126][T16956] lo speed is unknown, defaulting to 1000 [ 412.757119][T16973] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 412.958835][T16973] 8021q: adding VLAN 0 to HW filter on device bond8 [ 413.135969][T16987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.149090][T16983] ip6tnl1: entered allmulticast mode [ 413.561753][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2811'. [ 413.597806][T16996] syzkaller0: entered promiscuous mode [ 413.611016][T16996] syzkaller0: entered allmulticast mode [ 413.620586][T17007] bond0: Unable to set down delay as MII monitoring is disabled [ 414.053510][T17035] netlink: 'syz.0.2817': attribute type 1 has an invalid length. [ 414.061926][T17030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.071963][T17035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2817'. [ 416.311449][T17052] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 416.506900][T17063] netlink: 'syz.4.2826': attribute type 1 has an invalid length. [ 416.637644][T17063] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.667510][T17069] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2826'. [ 416.685462][T17061] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 416.706404][T17067] bond7: option lp_interval: invalid value (18446744073709551607) [ 416.706586][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 416.741794][T17067] bond7: option lp_interval: allowed values 1 - 2147483647 [ 416.761880][T17063] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 416.799024][T17069] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2826'. [ 416.809565][T17066] veth1_macvtap: renamed from vlan0 [ 416.826799][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 416.838674][T17069] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2826'. [ 417.010507][T17081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2828'. [ 417.021695][T17081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2828'. [ 417.031716][T17081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2828'. [ 417.041139][T17081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2828'. [ 417.053474][T17081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2828'. [ 417.424326][T17111] netlink: 'syz.3.2837': attribute type 3 has an invalid length. [ 417.461790][T17116] ÿÿÿÿÿÿ: renamed from bond_slave_0 (while UP) [ 417.608129][T17122] netlink: 'syz.1.2839': attribute type 1 has an invalid length. [ 417.730988][T17122] 8021q: adding VLAN 0 to HW filter on device bond16 [ 417.860900][T17131] bond16: (slave geneve2): making interface the new active one [ 417.871905][T17131] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 417.896905][T17122] netlink: 'syz.1.2839': attribute type 8 has an invalid length. [ 417.917552][T17122] sch_fq: defrate 0 ignored. [ 417.936619][T13717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.953252][T13717] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.977276][T13717] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.008943][T13717] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.049606][T17151] batadv_slave_1: entered promiscuous mode [ 418.085208][T17151] veth1_to_hsr: entered promiscuous mode [ 418.105682][T17151] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 418.160966][T17149] batadv_slave_1: left promiscuous mode [ 418.181825][T17156] netlink: 'syz.4.2849': attribute type 30 has an invalid length. [ 418.435680][T17173] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 418.439390][T17167] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 418.487691][T17167] netlink: 'syz.3.2852': attribute type 2 has an invalid length. [ 418.506221][T17179] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 418.514131][T17179] netlink: 'syz.3.2852': attribute type 2 has an invalid length. [ 418.530752][T17180] netlink: 'syz.4.2856': attribute type 1 has an invalid length. [ 418.870455][ T35] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.900142][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.937893][T17203] netlink: 'syz.4.2863': attribute type 29 has an invalid length. [ 418.940084][ T35] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.986922][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.000831][T17203] netlink: 'syz.4.2863': attribute type 29 has an invalid length. [ 419.012903][ T35] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.043399][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.069983][ T35] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.092408][T17203] netlink: 'syz.4.2863': attribute type 4 has an invalid length. [ 419.105689][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.346107][T17226] bond17: option tlb_dynamic_lb: invalid value (5) [ 419.360765][T17226] bond17 (unregistering): Released all slaves [ 419.401935][T17236] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 419.667936][T17249] tipc: Resetting bearer [ 419.803972][T17263] sock: sock_set_timeout: `syz.1.2881' (pid 17263) tries to set negative timeout [ 420.080330][T12875] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 35761 - 0 [ 420.102120][T12875] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 35761 - 0 [ 420.134770][T12875] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 35761 - 0 [ 420.159218][T12875] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 35761 - 0 [ 420.527208][ T5628] block nbd4: Receive control failed (result -32) [ 420.528246][T16178] block nbd4: Receive control failed (result -32) [ 420.674730][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.976038][T17318] syzkaller0: entered promiscuous mode [ 420.986766][T17318] syzkaller0: entered allmulticast mode [ 421.316636][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 423.857318][T17360] lo speed is unknown, defaulting to 1000 [ 423.938506][T17369] validate_nla: 1 callbacks suppressed [ 423.938525][T17369] netlink: 'syz.3.2904': attribute type 1 has an invalid length. [ 424.037446][T17369] 8021q: adding VLAN 0 to HW filter on device bond9 [ 424.082504][T17384] syzkaller0: entered promiscuous mode [ 424.083568][T17369] __nla_validate_parse: 37 callbacks suppressed [ 424.083584][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2904'. [ 424.091119][T17384] syzkaller0: entered allmulticast mode [ 424.095011][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'. [ 424.179050][T17369] netlink: 'syz.3.2904': attribute type 10 has an invalid length. [ 424.212133][T17369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2904'. [ 424.602002][T17414] lo speed is unknown, defaulting to 1000 [ 424.728052][T17364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.088750][T17423] lo speed is unknown, defaulting to 1000 [ 425.203510][T17436] syzkaller0: entered promiscuous mode [ 425.211104][T17436] syzkaller0: entered allmulticast mode [ 425.540813][T17462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2928'. [ 425.583743][T17450] bond12: left allmulticast mode [ 425.595666][T17450] ip6gretap0: left allmulticast mode [ 425.608944][T17450] bond12: left promiscuous mode [ 425.624017][T17450] ip6gretap0: left promiscuous mode [ 425.987618][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2935'. [ 426.005242][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2935'. [ 426.258417][T17490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2938'. [ 426.406356][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.420994][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.432136][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.442886][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.452863][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.769688][T10810] udevd[10810]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 426.819110][T10810] udevd[10810]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 427.017739][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2939'. [ 427.064700][T17509] openvswitch: netlink: Unknown nsh attribute 0 [ 427.145922][ T5625] bridge0: port 1(syz_tun) entered disabled state [ 427.289528][ T5625] syz_tun (unregistering): left allmulticast mode [ 427.317121][ T5625] syz_tun (unregistering): left promiscuous mode [ 427.335692][ T5625] bridge0: port 1(syz_tun) entered disabled state [ 427.464735][T17494] lo speed is unknown, defaulting to 1000 [ 427.737527][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 428.255685][T17548] sctp: [Deprecated]: syz.1.2950 (pid 17548) Use of int in max_burst socket option deprecated. [ 428.255685][T17548] Use struct sctp_assoc_value instead [ 428.297796][T17552] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.313359][T17554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2951'. [ 428.360544][T17552] bridge_slave_1: left allmulticast mode [ 428.395502][T17552] bridge_slave_1: left promiscuous mode [ 428.419282][T17552] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.469293][T17552] team0: Port device team_slave_0 removed [ 428.492533][T17552] team0: Port device team_slave_1 removed [ 428.514102][T17552] team0: Port device geneve1 removed [ 428.519678][ T5628] Bluetooth: hci5: command tx timeout [ 428.548153][T17552] vlan2: left allmulticast mode [ 428.559217][T17552] bridge_slave_0: left allmulticast mode [ 428.573346][T17552] vlan2: left promiscuous mode [ 428.604592][T17552] bridge_slave_0: left promiscuous mode [ 428.617890][T17552] bridge0: port 3(vlan2) entered disabled state [ 428.646273][T17552] bond1: (slave gre1): Releasing backup interface [ 428.668392][T17552] bond3: (slave bond4): Releasing backup interface [ 428.692229][T17552] bond5: (slave bridge4): Releasing active interface [ 428.699717][T17552] bridge4: left promiscuous mode [ 428.705304][T17552] bridge4: left allmulticast mode [ 428.713497][T17552] bond0: (slave vti0): Releasing backup interface [ 428.720574][T17552] vti0: left promiscuous mode [ 428.728357][T17552] bond7: (slave bond8): Releasing backup interface [ 428.735596][T17552] bond7: (slave bond8): the permanent HWaddr of slave - 2a:00:1e:3d:68:af - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 428.759849][T17552] bond7: (slave gretap2): Releasing backup interface [ 428.775696][T17552] bond10: (slave bridge9): Releasing backup interface [ 428.793254][T17552] team0: Port device macvlan2 removed [ 428.801590][T17552] bond12: (slave ip6gretap0): Releasing active interface [ 428.813860][T17552] bond15: (slave bond16): Releasing backup interface [ 428.866525][T17543] lo speed is unknown, defaulting to 1000 [ 429.002304][T17494] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.025371][T17494] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.045888][T17494] bridge_slave_0: entered allmulticast mode [ 429.065432][T17494] bridge_slave_0: entered promiscuous mode [ 429.115160][T17494] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.123754][T17494] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.142780][T17494] bridge_slave_1: entered allmulticast mode [ 429.157729][T17494] bridge_slave_1: entered promiscuous mode [ 429.400500][T17494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.437514][T17494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.499695][T17577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 429.541371][T17494] team0: Port device team_slave_0 added [ 429.559330][T17494] team0: Port device team_slave_1 added [ 429.659174][T17494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.671698][T17494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.698442][T17494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.713538][T17494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.721946][T17494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.758239][T17579] netlink: 'syz.0.2958': attribute type 30 has an invalid length. [ 429.766958][T17494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.781890][T17579] __nla_validate_parse: 2 callbacks suppressed [ 429.781906][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2958'. [ 429.902966][T17579] bond19: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 429.950295][T17594] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2962'. [ 429.964017][T17579] bond19 (unregistering): Released all slaves [ 430.152460][T17494] hsr_slave_0: entered promiscuous mode [ 430.177374][T17494] hsr_slave_1: entered promiscuous mode [ 430.276663][T17609] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 430.454266][T17612] IPVS: length: 105 != 24 [ 430.503081][T17612] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 430.597858][ T5628] Bluetooth: hci5: command tx timeout [ 430.717253][T17620] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2970'. [ 430.795847][T17636] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 430.981403][T17494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.993062][T17494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.243528][T17494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.257051][T17494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.280801][T17659] atomic_op ffff8880296c0998 conn xmit_atomic 0000000000000000 [ 431.289864][T17659] netlink: 'syz.0.2978': attribute type 1 has an invalid length. [ 431.304908][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 431.478245][T17494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.491663][T17494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.527858][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2982'. [ 431.742453][T17494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.777351][T17494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.860585][T17685] lo speed is unknown, defaulting to 1000 [ 432.080137][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 432.147267][T17699] netlink: 'syz.1.2989': attribute type 1 has an invalid length. [ 432.248478][T17699] 8021q: adding VLAN 0 to HW filter on device bond17 [ 432.296712][T17705] bond17: (slave veth9): Enslaving as an active interface with a down link [ 432.309378][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2992'. [ 432.361832][T17709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.371340][T17709] bond17: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 432.410638][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2992'. [ 432.470909][T17711] netlink: 'syz.2.2993': attribute type 1 has an invalid length. [ 432.525960][T17494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.560277][T17494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.572737][T17494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.596623][T17494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.616416][T17494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.627554][T17494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.656225][T17494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.674697][ T5628] Bluetooth: hci5: command tx timeout [ 432.677503][T17494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.838335][T17729] netlink: 'syz.2.2996': attribute type 1 has an invalid length. [ 432.861848][T17494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.876368][T17729] netlink: 'syz.2.2996': attribute type 7 has an invalid length. [ 432.897058][T17729] netlink: 'syz.2.2996': attribute type 8 has an invalid length. [ 432.905815][T17729] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2996'. [ 432.918966][T17494] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.922603][T17734] xt_hashlimit: size too large, truncated to 1048576 [ 432.926781][T17729] NCSI netlink: No device for ifindex 1073545264 [ 433.008565][T17732] bond10: option ad_select: invalid value (34) [ 433.028147][T17736] netlink: 'syz.0.2998': attribute type 17 has an invalid length. [ 433.046815][T17732] bond10 (unregistering): Released all slaves [ 433.149758][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.150933][T17744] nbd: couldn't find a device at index 1 [ 433.156955][T12875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.171924][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.179099][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.210350][T17744] netlink: 752 bytes leftover after parsing attributes in process `syz.1.3001'. [ 433.260794][T17744] netlink: 'syz.1.3001': attribute type 11 has an invalid length. [ 433.709469][T17769] bridge0: port 1(vlan0) entered blocking state [ 433.716891][T17769] bridge0: port 1(vlan0) entered disabled state [ 433.723419][T17769] vlan0: entered allmulticast mode [ 433.731729][T17769] vlan0: left allmulticast mode [ 433.749336][T17772] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 433.778936][T17772] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 433.827226][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.848632][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.874201][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.065662][T17793] tap0: tun_chr_ioctl cmd 1074025676 [ 434.080323][T17793] tap0: owner set to 0 [ 434.090068][T17494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.261080][T17807] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 434.275973][T17807] bond9 (unregistering): Released all slaves [ 434.446587][T17821] team_slave_1: left promiscuous mode [ 434.457923][T17821] team0: Port device team_slave_1 removed [ 434.464086][T17821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.472918][T17821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 434.557843][T17822] xfrm0: entered promiscuous mode [ 434.573188][T17822] team0: Device xfrm0 is of different type [ 434.607724][T17822] tipc: Enabled bearer , priority 0 [ 434.647040][T17494] veth0_vlan: entered promiscuous mode [ 434.661939][T17494] veth1_vlan: entered promiscuous mode [ 434.740807][T17494] veth0_macvtap: entered promiscuous mode [ 434.755084][ T5628] Bluetooth: hci5: command tx timeout [ 434.782583][T17494] veth1_macvtap: entered promiscuous mode [ 434.792350][T17826] netlink: 'syz.0.3020': attribute type 10 has an invalid length. [ 434.806092][T17831] netlink: 'syz.0.3020': attribute type 10 has an invalid length. [ 434.816264][T17826] dummy0: left promiscuous mode [ 434.830295][T17826] team0: Port device dummy0 added [ 434.853043][T17831] team0: Port device dummy0 removed [ 434.893377][T17833] netlink: 'syz.3.3021': attribute type 1 has an invalid length. [ 434.925178][T17833] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 434.965978][T17494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.029437][T17494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.038558][T17840] __nla_validate_parse: 5 callbacks suppressed [ 435.038573][T17840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3022'. [ 435.065546][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3022'. [ 435.075060][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.104044][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.129901][T17841] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 435.131830][T17840] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 435.153295][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.193214][T13717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.417956][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.449405][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.551121][T17856] ip6gre0: Caught tx_queue_len zero misconfig [ 435.578608][T17856] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 435.623507][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 435.640314][T13717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.655824][T17866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3028'. [ 435.690681][T13717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.980307][T17880] netlink: 'syz.4.2936': attribute type 1 has an invalid length. [ 435.991709][T17880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2936'. [ 436.148934][T17885] lo speed is unknown, defaulting to 1000 [ 436.386972][T16178] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.399835][T16178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.412093][T16178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.413312][T17907] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 436.430486][T17904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3039'. [ 436.443260][T16178] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.453108][T16178] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.461186][T17907] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 436.556234][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3039'. [ 436.570890][T17904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3039'. [ 436.582325][T17904] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3039'. [ 436.604882][T17904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3039'. [ 437.103734][T17901] lo speed is unknown, defaulting to 1000 [ 437.629010][T17956] bond18: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 437.647851][T17956] bond18: entered promiscuous mode [ 437.653882][T17956] 8021q: adding VLAN 0 to HW filter on device bond18 [ 437.676079][T17956] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 437.935447][T17901] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.935586][T17974] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 437.952615][T17901] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.964394][T17901] bridge_slave_0: entered allmulticast mode [ 437.976666][T17901] bridge_slave_0: entered promiscuous mode [ 437.991418][T17979] netlink: 'syz.1.3057': attribute type 6 has an invalid length. [ 438.002019][T17979] netlink: 'syz.1.3057': attribute type 5 has an invalid length. [ 438.032125][T17901] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.041149][T17901] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.049448][T17901] bridge_slave_1: entered allmulticast mode [ 438.059179][T17901] bridge_slave_1: entered promiscuous mode [ 438.210678][T17901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.226725][T17901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.283213][T17901] team0: Port device team_slave_0 added [ 438.301081][T17901] team0: Port device team_slave_1 added [ 438.350578][T17901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.359232][T17901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.386895][T17901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.402751][T17901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.411448][T17901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.443097][T17901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.501218][T17995] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 438.518071][T16178] Bluetooth: hci0: command tx timeout [ 438.569927][T17901] hsr_slave_0: entered promiscuous mode [ 438.577591][T17901] hsr_slave_1: entered promiscuous mode [ 438.589758][T17901] debugfs: 'hsr0' already exists in 'hsr' [ 438.598236][T17901] Cannot create hsr debugfs directory [ 438.710368][T18003] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 438.743910][T18003] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 438.782501][T18003] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 439.208336][T17901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.323595][T18036] netlink: 'syz.4.3070': attribute type 21 has an invalid length. [ 439.347585][T18032] Cannot find set identified by id 0 to match [ 439.388329][T17901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.500671][T17901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.714142][T18059] batadv_slave_0: Caught tx_queue_len zero misconfig [ 439.829894][T18065] syzkaller0: entered promiscuous mode [ 439.839122][T18065] syzkaller0: entered allmulticast mode [ 440.155629][T18088] bridge0: port 1(vlan0) entered blocking state [ 440.172803][T18088] bridge0: port 1(vlan0) entered disabled state [ 440.201016][T18088] vlan0: entered allmulticast mode [ 440.221030][T18088] vlan0: left allmulticast mode [ 440.253510][T17901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.292320][T17901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.308919][T17901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.342633][T17901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.369537][T17901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.393548][T17901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.408451][T17901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.435297][T17901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.537531][T18120] __nla_validate_parse: 47 callbacks suppressed [ 440.537549][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 440.595255][T16178] Bluetooth: hci0: command tx timeout [ 440.631746][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3097'. [ 440.662901][T17901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.690698][T17901] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.703361][T18127] netlink: 'syz.3.3097': attribute type 1 has an invalid length. [ 440.735335][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.742528][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.798597][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.805846][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.560073][T18167] sctp: [Deprecated]: syz.3.3109 (pid 18167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.560073][T18167] Use struct sctp_sack_info instead [ 441.617717][T18167] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3109'. [ 441.702512][T18175] netlink: 'syz.2.3110': attribute type 9 has an invalid length. [ 441.799334][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3111'. [ 441.948356][T18191] netlink: 'syz.3.3112': attribute type 1 has an invalid length. [ 441.957265][T17901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.976909][T18175] x_tables: duplicate underflow at hook 1 [ 441.983005][T18191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.074888][T17901] veth0_vlan: entered promiscuous mode [ 442.087189][T17901] veth1_vlan: entered promiscuous mode [ 442.132997][T17901] veth0_macvtap: entered promiscuous mode [ 442.157152][T17901] veth1_macvtap: entered promiscuous mode [ 442.173900][T17901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.189386][T17901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.207784][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.217130][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.232178][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.241954][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.477817][T18174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.626187][T12875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.637799][T12875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.676208][T16178] Bluetooth: hci0: command tx timeout [ 442.688323][T18205] geneve2: entered promiscuous mode [ 442.735043][T18205] netlink: 49 bytes leftover after parsing attributes in process `syz.4.3116'. [ 442.737610][T18199] xt_hashlimit: size too large, truncated to 1048576 [ 442.746157][T18205] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3116'. [ 442.754878][T13717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.762537][T18205] netlink: 49 bytes leftover after parsing attributes in process `syz.4.3116'. [ 442.780197][T18206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3116'. [ 442.793173][T18206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3116'. [ 442.802199][T13717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.811363][T18206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3116'. [ 443.052494][T18226] netlink: 'syz.0.3033': attribute type 97 has an invalid length. [ 443.611408][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.622418][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.633525][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.643837][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.653084][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 444.338413][T18263] netlink: 'syz.0.3131': attribute type 64 has an invalid length. [ 444.584101][T18271] netlink: 'syz.0.3134': attribute type 1 has an invalid length. [ 444.623826][T18238] lo speed is unknown, defaulting to 1000 [ 444.754625][ T5628] Bluetooth: hci0: command tx timeout [ 445.462065][T18298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.519425][T18299] gretap1: entered allmulticast mode [ 445.529531][T18299] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 445.552141][T18312] openvswitch: netlink: Message has 87 unknown bytes. [ 445.573274][T18312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.632549][T18309] netlink: 'syz.0.3140': attribute type 13 has an invalid length. [ 445.703408][T18320] __nla_validate_parse: 11 callbacks suppressed [ 445.703425][T18320] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3142'. [ 445.726007][ T5628] Bluetooth: hci4: command tx timeout [ 445.770768][T18319] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3142'. [ 446.027719][T18336] netlink: 'syz.0.3140': attribute type 2 has an invalid length. [ 446.063639][T18336] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3140'. [ 446.127225][T18238] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.149726][T18238] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.168374][T18238] bridge_slave_0: entered allmulticast mode [ 446.182485][T18238] bridge_slave_0: entered promiscuous mode [ 446.340797][T18238] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.361774][T18238] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.395402][T18238] bridge_slave_1: entered allmulticast mode [ 446.412892][T18238] bridge_slave_1: entered promiscuous mode [ 446.524194][T18349] dvmrp0: entered allmulticast mode [ 446.570785][T18324] lo speed is unknown, defaulting to 1000 [ 446.610013][T18238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.659236][T18238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.843891][T18238] team0: Port device team_slave_0 added [ 446.860489][T18238] team0: Port device team_slave_1 added [ 446.901432][T18359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3147'. [ 446.958466][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3147'. [ 447.128437][T18366] netlink: 'syz.0.3147': attribute type 4 has an invalid length. [ 447.159947][T18238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.167473][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.194075][T18238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.231511][T18238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.247306][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.284033][T18238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.426801][T18238] hsr_slave_0: entered promiscuous mode [ 447.457387][T18238] hsr_slave_1: entered promiscuous mode [ 447.482843][T18238] debugfs: 'hsr0' already exists in 'hsr' [ 447.504994][T18238] Cannot create hsr debugfs directory [ 447.673328][T18390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.797300][ T5628] Bluetooth: hci4: command tx timeout [ 448.000272][T18403] lo speed is unknown, defaulting to 1000 [ 448.062837][T18407] netlink: 'syz.0.3157': attribute type 4 has an invalid length. [ 448.080803][T18407] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3157'. [ 448.345236][T18238] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 448.377746][T18238] team0: Port device netdevsim1 removed [ 448.489128][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3161'. [ 448.505130][T18422] sctp: [Deprecated]: syz.1.3160 (pid 18422) Use of int in max_burst socket option. [ 448.505130][T18422] Use struct sctp_assoc_value instead [ 448.526032][T18415] pimreg: entered allmulticast mode [ 448.536463][T18424] netlink: 'syz.4.3163': attribute type 1 has an invalid length. [ 448.544389][T18424] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3163'. [ 448.565260][T18422] pimreg: left allmulticast mode [ 448.761572][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3164'. [ 448.787410][T18429] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3164'. [ 449.047912][T18238] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.128661][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.149192][T18238] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.183132][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.197457][T18439] lo: Caught tx_queue_len zero misconfig [ 449.317666][T18238] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.349073][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.363525][T18238] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.399035][T18238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.415815][T18446] xfrm0: Caught tx_queue_len zero misconfig [ 449.674091][T18238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.722088][T18238] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.800655][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.807878][T12875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.875309][ T5628] Bluetooth: hci4: command tx timeout [ 449.882463][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.889634][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.025376][T18480] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.033083][T18480] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.189539][T18480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.210646][T18480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.348821][T18488] vlan6: entered promiscuous mode [ 450.389681][T12875] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.418987][T12875] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.450493][T12875] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.474662][T12875] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.633440][T18507] syzkaller1: entered promiscuous mode [ 450.640213][T18507] syzkaller1: entered allmulticast mode [ 451.028592][T18238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.094286][T18238] veth0_vlan: entered promiscuous mode [ 451.124266][T18238] veth1_vlan: entered promiscuous mode [ 451.169159][T18238] veth0_macvtap: entered promiscuous mode [ 451.182507][T18238] veth1_macvtap: entered promiscuous mode [ 451.210030][T18238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.233962][T18238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.279323][ T6751] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.290072][ T6751] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.312796][ T6751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.341214][ T6751] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.362033][T18542] gretap1: entered promiscuous mode [ 451.531517][T18545] __nla_validate_parse: 6 callbacks suppressed [ 451.531536][T18545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3196'. [ 451.607055][T18548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 451.653935][T18548] netlink: 'syz.3.3198': attribute type 3 has an invalid length. [ 451.663591][T13717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.674153][T18548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3198'. [ 451.695270][T13717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.739691][T12875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.760369][T12875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.859323][T18559] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3200'. [ 451.955245][ T5628] Bluetooth: hci4: command tx timeout [ 452.002751][T18568] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 452.036259][T18562] lo speed is unknown, defaulting to 1000 [ 452.209746][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3206'. [ 452.255873][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3206'. [ 452.416730][T16178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.431542][T16178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.444396][T16178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.453085][T16178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.468495][T16178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.477688][ T9353] IPVS: starting estimator thread 0... [ 452.486379][T18591] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 452.636655][T18588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3208'. [ 452.647369][T18592] IPVS: using max 31 ests per chain, 74400 per kthread [ 452.773193][ T5635] syz_tun (unregistering): left allmulticast mode [ 452.785895][ T5635] syz_tun (unregistering): left promiscuous mode [ 452.792980][ T5635] bridge0: port 1(syz_tun) entered disabled state [ 452.793080][T18599] netlink: 'syz.0.3210': attribute type 1 has an invalid length. [ 452.815679][T18599] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3210'. [ 453.028243][T18615] netlink: 'syz.3.3215': attribute type 1 has an invalid length. [ 453.151872][T18621] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 453.175311][T18621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3216'. [ 453.201288][T18621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3216'. [ 453.245699][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 453.270067][T18621] hsr_slave_0: left promiscuous mode [ 453.290280][T18621] hsr_slave_1: left promiscuous mode [ 453.418895][T18589] lo speed is unknown, defaulting to 1000 [ 453.427717][T18635] netlink: 'syz.2.3219': attribute type 27 has an invalid length. [ 453.509460][ T5628] block nbd5: Receive control failed (result -32) [ 453.552307][T18639] netlink: 'syz.3.3221': attribute type 1 has an invalid length. [ 453.811553][T18655] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 453.968593][T18665] tipc: Enabling of bearer rejected, failed to enable media [ 454.270860][T18665] lo speed is unknown, defaulting to 1000 [ 454.329833][T18589] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.349469][T18589] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.368764][T18589] bridge_slave_0: entered allmulticast mode [ 454.388464][T18589] bridge_slave_0: entered promiscuous mode [ 454.466098][T18589] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.485171][T18589] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.494384][T18589] bridge_slave_1: entered allmulticast mode [ 454.512878][T18589] bridge_slave_1: entered promiscuous mode [ 454.598058][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 454.607977][ T5628] Bluetooth: hci2: command tx timeout [ 454.682716][T18687] syzkaller1: entered allmulticast mode [ 454.701696][T18690] netlink: 'syz.4.3231': attribute type 1 has an invalid length. [ 454.719812][T18589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.747774][T18589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.841113][T18697] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 454.943215][T18701] team0: left promiscuous mode [ 454.986735][T18701] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 455.016569][T18701] bridge0: left allmulticast mode [ 455.029581][T18701] ip6gre4: left promiscuous mode [ 455.034804][T18701] ip6gre4: left allmulticast mode [ 455.042297][T18701] bridge4: left allmulticast mode [ 455.112286][T18589] team0: Port device team_slave_0 added [ 455.120543][T18710] bridge_slave_0: left allmulticast mode [ 455.129157][T18710] bridge_slave_0: left promiscuous mode [ 455.135453][T18710] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.169616][T18710] bridge_slave_1: left allmulticast mode [ 455.176074][T18710] bridge_slave_1: left promiscuous mode [ 455.181867][T18710] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.200506][T18710] bond0: (slave bond_slave_0): Releasing backup interface [ 455.217785][T18710] bond0: (slave bond_slave_1): Releasing backup interface [ 455.233066][T18710] team0: Port device team_slave_0 removed [ 455.235431][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.267910][T18710] team0: Port device team_slave_1 removed [ 455.287159][T18710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.300160][T18710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.326831][T18710] bond1: (slave gretap1): Releasing backup interface [ 455.391437][T18589] team0: Port device team_slave_1 added [ 455.489686][T18589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.515350][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.560420][T18589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.600688][T18589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.641535][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.733481][T18589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.762065][T18732] IPVS: Unknown mcast interface: syzkaller0 [ 455.962465][T18589] hsr_slave_0: entered promiscuous mode [ 455.981595][T18589] hsr_slave_1: entered promiscuous mode [ 456.065921][T18751] bond1: option packets_per_slave: invalid value (1048582) [ 456.073291][T18751] bond1: option packets_per_slave: allowed values 0 - 65535 [ 456.082495][T18751] bond1 (unregistering): Released all slaves [ 456.675495][ T5628] Bluetooth: hci2: command tx timeout [ 456.900868][T18765] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 456.948033][T18768] gre0: entered promiscuous mode [ 456.953790][T18768] gre0: entered allmulticast mode [ 457.067673][T18772] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 457.076882][T18772] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 457.403546][T18589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.413204][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.421109][T18589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.429776][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.438192][T18589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.448207][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.456437][T18589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.469115][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.529430][T18589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.551184][T18589] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.563231][T13717] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.570347][T13717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.584168][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.591291][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.880866][T18589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.922450][T18589] veth0_vlan: entered promiscuous mode [ 457.933139][T18589] veth1_vlan: entered promiscuous mode [ 457.958399][T18589] veth0_macvtap: entered promiscuous mode [ 457.970766][T18589] veth1_macvtap: entered promiscuous mode [ 457.990624][T18589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.004064][T18589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.018673][T12875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.027509][T12875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.038527][T12875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.047595][T12875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.154145][ T3325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.163717][ T3325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.189977][T13717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.199945][T13717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.754711][ T5628] Bluetooth: hci2: command tx timeout [ 460.835404][ T5628] Bluetooth: hci2: command tx timeout [ 516.855867][T18805] __nla_validate_parse: 12 callbacks suppressed [ 516.855887][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3252'. [ 516.941101][T18808] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3252'. [ 516.974703][T18808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3252'. [ 517.149683][T18815] netlink: 'syz.4.3258': attribute type 21 has an invalid length. [ 517.187943][T18815] netlink: 'syz.4.3258': attribute type 21 has an invalid length. [ 517.276906][T16178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.298501][T16178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.312344][T16178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.338231][T16178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.347213][T16178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 517.403344][T18825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3261'. [ 517.481195][T18832] lo: entered allmulticast mode [ 517.505600][T18832] lo: left allmulticast mode [ 517.589207][T18832] lo speed is unknown, defaulting to 1000 [ 517.843099][T18850] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 518.113693][T18865] netlink: 211432 bytes leftover after parsing attributes in process `syz.2.3270'. [ 518.147689][T18866] openvswitch: netlink: nsh attr 14384 is out of range max 3 [ 518.189735][T18818] lo speed is unknown, defaulting to 1000 [ 518.197001][T18866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.397579][T18873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3272'. [ 518.424325][T18873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3272'. [ 518.438562][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3272'. [ 518.517772][T18883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3274'. [ 518.909114][T18893] xt_policy: neither incoming nor outgoing policy selected [ 519.298369][T18921] xt_hashlimit: size too large, truncated to 1048576 [ 519.355635][T18818] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.374338][T18818] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.379363][T18928] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3284'. [ 519.393567][T18818] bridge_slave_0: entered allmulticast mode [ 519.402607][ T5628] Bluetooth: hci3: command tx timeout [ 519.412405][T18818] bridge_slave_0: entered promiscuous mode [ 519.419236][T18928] netlink: 'syz.2.3284': attribute type 2 has an invalid length. [ 519.436976][T18932] netlink: 'syz.0.3283': attribute type 1 has an invalid length. [ 519.453347][T18818] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.459724][T18928] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old? [ 519.468702][T18818] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.476101][T18818] bridge_slave_1: entered allmulticast mode [ 519.485150][T18818] bridge_slave_1: entered promiscuous mode [ 519.504328][T18927] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.566847][T18927] bridge_slave_0 (unregistering): left allmulticast mode [ 519.578522][T18927] bridge_slave_0 (unregistering): left promiscuous mode [ 519.587258][T18927] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.632053][T18928] IPv6: sit1: Disabled Multicast RS [ 519.744348][T18818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.767823][T18818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.843835][T18818] team0: Port device team_slave_0 added [ 519.863204][T18818] team0: Port device team_slave_1 added [ 519.944596][T18818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.951648][T18818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.979051][T18818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.995615][T18818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.003294][T18818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.033509][T18818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.130293][T18818] hsr_slave_0: entered promiscuous mode [ 520.140391][T18818] hsr_slave_1: entered promiscuous mode [ 520.147831][T18818] debugfs: 'hsr0' already exists in 'hsr' [ 520.153748][T18818] Cannot create hsr debugfs directory [ 520.543838][T18983] ipt_ECN: cannot use operation on non-tcp rule [ 520.551028][T18983] ipt_ECN: cannot use operation on non-tcp rule [ 520.557751][T18983] ipt_ECN: cannot use operation on non-tcp rule [ 520.564232][T18983] ipt_ECN: cannot use operation on non-tcp rule [ 520.570855][T18983] ipt_ECN: cannot use operation on non-tcp rule [ 520.589352][T18983] ipt_ECN: cannot use operation on non-tcp rule [ 521.039576][T19001] x_tables: duplicate underflow at hook 2 [ 521.475436][ T5628] Bluetooth: hci3: command tx timeout [ 521.699082][T19018] syzkaller0: entered promiscuous mode [ 521.715318][T19018] syzkaller0: entered allmulticast mode [ 521.779866][T19020] lo speed is unknown, defaulting to 1000 [ 521.795237][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 522.182426][T19025] __nla_validate_parse: 6 callbacks suppressed [ 522.182445][T19025] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3301'. [ 522.197940][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3302'. [ 522.346864][T19031] netlink: 'syz.4.3303': attribute type 9 has an invalid length. [ 522.414368][T18818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 522.432080][T18818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.448117][T18818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 522.459137][T18818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.471715][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 522.573953][T18818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 522.611105][T18818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.619774][T19049] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3307'. [ 522.620483][T18818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 522.669119][T18818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.782180][T19063] netlink: 'syz.4.3310': attribute type 10 has an invalid length. [ 522.792259][T19063] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3310'. [ 522.833568][T19065] netlink: 'syz.4.3310': attribute type 10 has an invalid length. [ 522.860693][T19065] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3310'. [ 523.001605][T18818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.051818][T18818] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.081579][T13716] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.088768][T13716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.119118][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.126346][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.310204][T18818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.434030][T19094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3316'. [ 523.565135][ T5628] Bluetooth: hci3: command tx timeout [ 525.635469][T16178] Bluetooth: hci3: command tx timeout [ 526.431085][T19112] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.471729][T19120] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3322'. [ 526.531280][T19112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.546842][T19112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.659527][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'. [ 526.676569][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'. [ 526.737433][T19123] nbd: must specify at least one socket [ 526.752510][ T3325] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.783696][ T3325] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.827771][ T3325] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.866039][ T3325] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.907874][T18818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.915310][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.077320][T18818] veth0_vlan: entered promiscuous mode [ 527.113698][T18818] veth1_vlan: entered promiscuous mode [ 527.211715][T18818] veth0_macvtap: entered promiscuous mode [ 527.245312][T19144] lo speed is unknown, defaulting to 1000 [ 527.277014][T18818] veth1_macvtap: entered promiscuous mode [ 527.401918][T18818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.669380][T18818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.712263][T19156] netlink: 'syz.2.3331': attribute type 2 has an invalid length. [ 527.741118][T19156] __nla_validate_parse: 2 callbacks suppressed [ 527.741147][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 527.785779][ T6746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.818666][ T6746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.838159][ T6746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.876223][ T6746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.001612][T19164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3334'. [ 528.090658][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.116076][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.252716][ T6746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.292547][ T6746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.646180][T19186] netlink: 'syz.0.3340': attribute type 30 has an invalid length. [ 528.730414][T19186] bond1: option arp_missed_max: invalid value (0) [ 528.737428][T19186] bond1: option arp_missed_max: allowed values 1 - 255 [ 528.750306][T19186] bond1 (unregistering): Released all slaves [ 528.942223][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3344'. [ 528.976390][T19206] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3344'. [ 529.429381][T19225] syzkaller0: entered promiscuous mode [ 529.476679][T19225] syzkaller0: entered allmulticast mode [ 529.520736][T19225] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 529.544252][T19225] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 529.791592][T19258] ip6tnl0: Caught tx_queue_len zero misconfig [ 530.523552][T19260] bond1: option mode: invalid value (254) [ 530.544041][T19260] bond1 (unregistering): Released all slaves [ 530.811042][T19286] netlink: 'syz.2.3358': attribute type 10 has an invalid length. [ 530.983581][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'. [ 531.038702][T19286] bridge0: port 3(netdevsim1) entered blocking state [ 531.055747][T19286] bridge0: port 3(netdevsim1) entered disabled state [ 531.072294][T19286] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 531.104221][T19286] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 531.191338][T19285] netlink: 'syz.1.3359': attribute type 2 has an invalid length. [ 531.308520][T19309] netlink: 'syz.3.3363': attribute type 10 has an invalid length. [ 531.780458][T19320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.889213][T19325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3368'. [ 531.905137][T19325] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 531.930796][T19327] Bluetooth: MGMT ver 1.23 [ 532.030047][T19331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3371'. [ 532.058906][T19331] netlink: 'syz.2.3371': attribute type 1 has an invalid length. [ 532.110252][T19323] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.118119][T19323] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.240693][T19323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.257312][T19323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.319957][T19341] netlink: 'syz.2.3373': attribute type 3 has an invalid length. [ 532.396128][T19330] bridge_slave_1: left allmulticast mode [ 532.402131][T19330] bridge_slave_1: left promiscuous mode [ 532.417656][T19330] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.508387][ T6744] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.525899][ T6744] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.558976][ T6744] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.580878][ T6744] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.627244][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 532.727670][T19352] ip6gretap0: entered promiscuous mode [ 532.757317][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3378'. [ 532.823040][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'. [ 533.302183][T19374] tipc: Started in network mode [ 533.311170][T19374] tipc: Node identity ae7708f36573, cluster identity 4711 [ 533.337282][T19374] tipc: Enabled bearer , priority 0 [ 533.346451][T19374] syzkaller0: entered promiscuous mode [ 533.352097][T19374] syzkaller0: entered allmulticast mode [ 533.550901][T19376] tipc: Resetting bearer [ 533.570349][T19373] tipc: Resetting bearer [ 533.614321][T19373] tipc: Disabling bearer [ 533.801606][T19384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3387'. [ 533.871827][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3385'. [ 533.907603][T19391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3386'. [ 533.926480][T19392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3388'. [ 533.967725][T19394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3390'. [ 534.060358][T19385] team0: Port device team_slave_0 removed [ 534.172847][T19403] tipc: Enabled bearer , priority 0 [ 534.195608][T19403] syzkaller0: entered promiscuous mode [ 534.213730][T19403] syzkaller0: entered allmulticast mode [ 534.230456][T19403] tipc: Resetting bearer [ 534.263017][T19409] gtp0: entered allmulticast mode [ 534.286815][T19402] tipc: Resetting bearer [ 534.318979][T19402] tipc: Disabling bearer [ 534.341229][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'. [ 534.363815][ T5729] IPVS: starting estimator thread 0... [ 534.465647][T19414] IPVS: using max 30 ests per chain, 72000 per kthread [ 534.521465][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 534.539167][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 534.668616][T19431] syzkaller1: tun_chr_ioctl cmd 35108 [ 534.962754][T19442] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.971941][T19446] veth0_to_hsr: entered promiscuous mode [ 534.982415][ T9365] IPVS: starting estimator thread 0... [ 535.077154][T19449] IPVS: using max 41 ests per chain, 98400 per kthread [ 535.283218][T19459] syzkaller0: entered promiscuous mode [ 535.289022][T19459] syzkaller0: entered allmulticast mode [ 535.579938][T19479] openvswitch: netlink: Missing valid actions attribute. [ 535.624856][T19479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.659824][T19484] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 535.669755][T19477] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 536.205716][T19505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.466339][T19523] openvswitch: netlink: Flow key attr not present in new flow. [ 536.489424][T19523] atomic_op ffff88809fe96998 conn xmit_atomic 0000000000000000 [ 536.733078][T19532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.776941][T19486] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 536.821471][T19532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.134150][T19552] IPVS: length: 40 != 8 [ 537.502919][T19575] netlink: 'syz.0.3434': attribute type 1 has an invalid length. [ 537.717940][T19580] bond1: (slave veth1): Enslaving as an active interface with a down link [ 537.744331][T16178] block nbd6: Receive control failed (result -1) [ 537.823945][T19575] bond1: (slave veth3): Enslaving as an active interface with a down link [ 538.109474][T19588] syzkaller1: entered promiscuous mode [ 538.125303][T19588] syzkaller1: entered allmulticast mode [ 538.202791][T19607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.231776][T19610] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 538.365248][T19617] __nla_validate_parse: 16 callbacks suppressed [ 538.365268][T19617] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3443'. [ 538.481583][T19625] netlink: 'syz.3.3446': attribute type 3 has an invalid length. [ 538.498563][T19625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.691380][T19634] xt_hashlimit: size too large, truncated to 1048576 [ 538.970827][T19646] syzkaller0: entered promiscuous mode [ 538.976422][T19646] syzkaller0: entered allmulticast mode [ 538.988820][T19648] netlink: 'syz.3.3454': attribute type 1 has an invalid length. [ 539.223380][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 541.307638][T19679] syzkaller0: entered promiscuous mode [ 541.319580][T19679] syzkaller0: entered allmulticast mode [ 541.426784][T19689] xt_l2tp: unknown flags: 51 [ 541.571372][T19695] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 541.601475][T19695] netlink: 'syz.3.3466': attribute type 2 has an invalid length. [ 541.764092][T19708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3471'. [ 542.066633][T19705] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.076048][T19705] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.686097][T19729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'. [ 542.703474][T19705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.715064][T19705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.810277][T19708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3471'. [ 542.977801][T19729] bond2: entered promiscuous mode [ 542.978804][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 542.987782][T19729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.996312][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 543.015703][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.027688][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 543.047328][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.068060][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3478'. [ 543.136897][T19750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.144141][T19750] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 543.157774][T19750] bond2: (slave sit1): Error -95 calling set_mac_address [ 543.177304][T19747] netlink: 'syz.1.3477': attribute type 29 has an invalid length. [ 543.186548][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.263774][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.277300][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3478'. [ 543.499456][T19774] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3480'. [ 544.042492][T19801] netlink: 'syz.1.3484': attribute type 11 has an invalid length. [ 544.065484][T19801] netlink: 'syz.1.3484': attribute type 1 has an invalid length. [ 544.220086][T19808] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3486'. [ 544.352659][T19807] lo speed is unknown, defaulting to 1000 [ 544.638769][T19814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3487'. [ 544.674292][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3490'. [ 544.735897][T19821] ipip0: entered promiscuous mode [ 544.920902][T19827] ip6gretap0: left promiscuous mode [ 544.940733][T19822] nbd1: detected capacity change from 0 to 63 [ 545.030340][T19827] veth0_to_hsr: left promiscuous mode [ 545.073581][ T6751] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.080825][ T6751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.287304][T19855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.320697][T19855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3495'. [ 545.371161][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 545.460058][T16178] block nbd1: Receive control failed (result -104) [ 545.566701][T19873] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3500'. [ 545.633110][T19874] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3500'. [ 545.705853][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 546.029921][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'. [ 546.093094][T19899] netlink: 'syz.4.3507': attribute type 10 has an invalid length. [ 546.103324][T19899] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 546.420057][T19911] tipc: Started in network mode [ 546.426149][T19911] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 546.436132][T19911] tipc: Enabling of bearer rejected, failed to enable media [ 546.707722][T19925] geneve2: entered promiscuous mode [ 546.718293][T19925] geneve2: entered allmulticast mode [ 546.978392][T19941] xt_hashlimit: size too large, truncated to 1048576 [ 547.047403][T19946] [ 547.049770][T19946] ====================================================== [ 547.056798][T19946] WARNING: possible circular locking dependency detected [ 547.063833][T19946] syzkaller #0 Not tainted [ 547.068233][T19946] ------------------------------------------------------ [ 547.075239][T19946] syz.0.3520/19946 is trying to acquire lock: [ 547.081294][T19946] ffffffff8ea80d80 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 547.090430][T19946] [ 547.090430][T19946] but task is already holding lock: [ 547.097777][T19946] ffff8880355fe538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 547.107260][T19946] [ 547.107260][T19946] which lock already depends on the new lock. [ 547.107260][T19946] [ 547.117656][T19946] [ 547.117656][T19946] the existing dependency chain (in reverse order) is: [ 547.126660][T19946] [ 547.126660][T19946] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 547.134223][T19946] __might_fault+0xcb/0x130 [ 547.139250][T19946] _copy_from_user+0x28/0xb0 [ 547.144355][T19946] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 547.150849][T19946] ip_generic_getfrag+0x149/0x2d0 [ 547.156397][T19946] __ip6_append_data+0x3aef/0x4080 [ 547.162032][T19946] ip6_append_data+0x108/0x270 [ 547.167309][T19946] rawv6_sendmsg+0x1298/0x18c0 [ 547.172590][T19946] ____sys_sendmsg+0x853/0xa20 [ 547.177869][T19946] ___sys_sendmsg+0x2a5/0x360 [ 547.183056][T19946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 547.188508][T19946] do_syscall_64+0x174/0x580 [ 547.193613][T19946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.200017][T19946] [ 547.200017][T19946] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 547.207740][T19946] lock_sock_nested+0x41/0x100 [ 547.213019][T19946] inet_shutdown+0x6a/0x390 [ 547.218035][T19946] nbd_mark_nsock_dead+0x2cb/0x550 [ 547.223659][T19946] recv_work+0x1cef/0x1e10 [ 547.228592][T19946] process_scheduled_works+0xa8e/0x14e0 [ 547.234652][T19946] worker_thread+0xa47/0xfb0 [ 547.239749][T19946] kthread+0x389/0x470 [ 547.244324][T19946] ret_from_fork+0x514/0xb70 [ 547.249431][T19946] ret_from_fork_asm+0x1a/0x30 [ 547.254705][T19946] [ 547.254705][T19946] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 547.262354][T19946] __mutex_lock+0x19d/0x1590 [ 547.267459][T19946] nbd_queue_rq+0x373/0x1150 [ 547.272559][T19946] blk_mq_dispatch_rq_list+0x499/0x1990 [ 547.278615][T19946] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 547.285450][T19946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 547.291939][T19946] blk_mq_run_hw_queue+0x348/0x4f0 [ 547.297589][T19946] blk_mq_dispatch_list+0xd11/0xe10 [ 547.303296][T19946] blk_mq_flush_plug_list+0x45f/0x540 [ 547.309176][T19946] __blk_flush_plug+0x3ed/0x4d0 [ 547.314536][T19946] __submit_bio+0x465/0x560 [ 547.319549][T19946] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 547.325687][T19946] block_read_full_folio+0x599/0x830 [ 547.331479][T19946] filemap_read_folio+0x12c/0x3a0 [ 547.337014][T19946] do_read_cache_folio+0x354/0x590 [ 547.342635][T19946] read_part_sector+0xb6/0x2b0 [ 547.347903][T19946] adfspart_check_ICS+0xb1/0x960 [ 547.353349][T19946] bdev_disk_changed+0x82b/0x1780 [ 547.358882][T19946] blkdev_get_whole+0x372/0x510 [ 547.364241][T19946] bdev_open+0x324/0xd70 [ 547.368988][T19946] blkdev_open+0x461/0x600 [ 547.373913][T19946] do_dentry_open+0x816/0x1380 [ 547.379183][T19946] vfs_open+0x3b/0x340 [ 547.383758][T19946] path_openat+0x2e3b/0x3890 [ 547.388856][T19946] do_file_open+0x23e/0x4a0 [ 547.393867][T19946] do_sys_openat2+0x113/0x200 [ 547.399051][T19946] __x64_sys_openat+0x138/0x170 [ 547.404412][T19946] do_syscall_64+0x174/0x580 [ 547.409513][T19946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.415912][T19946] [ 547.415912][T19946] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 547.423112][T19946] __mutex_lock+0x19d/0x1590 [ 547.428214][T19946] nbd_queue_rq+0xc1/0x1150 [ 547.433228][T19946] blk_mq_dispatch_rq_list+0x499/0x1990 [ 547.439286][T19946] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 547.446123][T19946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 547.452618][T19946] blk_mq_run_hw_queue+0x348/0x4f0 [ 547.458251][T19946] blk_mq_dispatch_list+0xd11/0xe10 [ 547.463969][T19946] blk_mq_flush_plug_list+0x45f/0x540 [ 547.469858][T19946] __blk_flush_plug+0x3ed/0x4d0 [ 547.475223][T19946] __submit_bio+0x465/0x560 [ 547.480241][T19946] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 547.486388][T19946] block_read_full_folio+0x599/0x830 [ 547.492181][T19946] filemap_read_folio+0x12c/0x3a0 [ 547.497718][T19946] do_read_cache_folio+0x354/0x590 [ 547.503345][T19946] read_part_sector+0xb6/0x2b0 [ 547.508621][T19946] adfspart_check_ICS+0xb1/0x960 [ 547.514081][T19946] bdev_disk_changed+0x82b/0x1780 [ 547.519613][T19946] blkdev_get_whole+0x372/0x510 [ 547.524975][T19946] bdev_open+0x324/0xd70 [ 547.529724][T19946] blkdev_open+0x461/0x600 [ 547.534649][T19946] do_dentry_open+0x816/0x1380 [ 547.539928][T19946] vfs_open+0x3b/0x340 [ 547.544506][T19946] path_openat+0x2e3b/0x3890 [ 547.549609][T19946] do_file_open+0x23e/0x4a0 [ 547.554629][T19946] do_sys_openat2+0x113/0x200 [ 547.559829][T19946] __x64_sys_openat+0x138/0x170 [ 547.565187][T19946] do_syscall_64+0x174/0x580 [ 547.570283][T19946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.576682][T19946] [ 547.576682][T19946] -> #3 (set->srcu){.+.+}-{0:0}: [ 547.583792][T19946] __synchronize_srcu+0xc9/0x2f0 [ 547.589236][T19946] elevator_switch+0x1e8/0x7b0 [ 547.594505][T19946] elevator_change+0x2fa/0x480 [ 547.599776][T19946] elevator_set_default+0x375/0x440 [ 547.605487][T19946] blk_register_queue+0x3f3/0x4e0 [ 547.611021][T19946] __add_disk+0x6cb/0xe30 [ 547.615862][T19946] add_disk_fwnode+0xfb/0x4b0 [ 547.621048][T19946] nbd_dev_add+0x733/0xb60 [ 547.625972][T19946] nbd_init+0x15f/0x1e0 [ 547.630637][T19946] do_one_initcall+0x250/0x870 [ 547.635912][T19946] do_initcall_level+0x10a/0x1a0 [ 547.641360][T19946] do_initcalls+0x59/0xa0 [ 547.646202][T19946] kernel_init_freeable+0x29d/0x3e0 [ 547.651919][T19946] kernel_init+0x1d/0x1d0 [ 547.656762][T19946] ret_from_fork+0x514/0xb70 [ 547.661868][T19946] ret_from_fork_asm+0x1a/0x30 [ 547.667148][T19946] [ 547.667148][T19946] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 547.674961][T19946] __mutex_lock+0x19d/0x1590 [ 547.680067][T19946] elevator_change+0x1af/0x480 [ 547.685347][T19946] elevator_set_none+0xb5/0x140 [ 547.690708][T19946] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 547.697026][T19946] nbd_start_device+0x189/0xb30 [ 547.702389][T19946] nbd_genl_connect+0x1597/0x1c10 [ 547.707925][T19946] genl_family_rcv_msg_doit+0x233/0x340 [ 547.713986][T19946] genl_rcv_msg+0x614/0x7a0 [ 547.718999][T19946] netlink_rcv_skb+0x226/0x4a0 [ 547.724268][T19946] genl_rcv+0x28/0x40 [ 547.728762][T19946] netlink_unicast+0x7bb/0x940 [ 547.734039][T19946] netlink_sendmsg+0x813/0xb40 [ 547.739314][T19946] ____sys_sendmsg+0x9b9/0xa20 [ 547.744672][T19946] ___sys_sendmsg+0x2a5/0x360 [ 547.749857][T19946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 547.755306][T19946] do_syscall_64+0x174/0x580 [ 547.760411][T19946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.766811][T19946] [ 547.766811][T19946] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 547.775409][T19946] blk_alloc_queue+0x544/0x690 [ 547.780680][T19946] __blk_mq_alloc_disk+0x194/0x390 [ 547.786304][T19946] nbd_dev_add+0x494/0xb60 [ 547.791232][T19946] nbd_init+0x15f/0x1e0 [ 547.795897][T19946] do_one_initcall+0x250/0x870 [ 547.801167][T19946] do_initcall_level+0x10a/0x1a0 [ 547.806614][T19946] do_initcalls+0x59/0xa0 [ 547.811455][T19946] kernel_init_freeable+0x29d/0x3e0 [ 547.817162][T19946] kernel_init+0x1d/0x1d0 [ 547.821999][T19946] ret_from_fork+0x514/0xb70 [ 547.827097][T19946] ret_from_fork_asm+0x1a/0x30 [ 547.832373][T19946] [ 547.832373][T19946] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 547.839574][T19946] __lock_acquire+0x1520/0x2cd0 [ 547.844931][T19946] lock_acquire+0x106/0x350 [ 547.849939][T19946] fs_reclaim_acquire+0x71/0x100 [ 547.855393][T19946] prepare_alloc_pages+0x15b/0x650 [ 547.861028][T19946] __alloc_frozen_pages_noprof+0x12f/0x380 [ 547.867352][T19946] alloc_pages_mpol+0x212/0x380 [ 547.872716][T19946] folio_alloc_mpol_noprof+0x39/0x160 [ 547.878600][T19946] shmem_alloc_and_add_folio+0x43e/0xf60 [ 547.884742][T19946] shmem_get_folio_gfp+0x5b2/0x16c0 [ 547.890450][T19946] shmem_fault+0x179/0x390 [ 547.895375][T19946] __do_fault+0x138/0x2a0 [ 547.900215][T19946] do_pte_missing+0x228c/0x3540 [ 547.905580][T19946] handle_mm_fault+0x1b38/0x3080 [ 547.911028][T19946] do_user_addr_fault+0x744/0x1340 [ 547.916647][T19946] exc_page_fault+0x6a/0xc0 [ 547.921662][T19946] asm_exc_page_fault+0x26/0x30 [ 547.927019][T19946] rep_movs_alternative+0x4a/0x90 [ 547.932554][T19946] _copy_from_iter+0x21b/0x1660 [ 547.937915][T19946] sk_msg_memcopy_from_iter+0x35e/0x700 [ 547.943965][T19946] tls_sw_sendmsg+0x1a49/0x2860 [ 547.949327][T19946] __sys_sendto+0x4a3/0x710 [ 547.954345][T19946] __x64_sys_sendto+0xde/0x100 [ 547.959636][T19946] do_syscall_64+0x174/0x580 [ 547.964737][T19946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.971163][T19946] [ 547.971163][T19946] other info that might help us debug this: [ 547.971163][T19946] [ 547.981372][T19946] Chain exists of: [ 547.981372][T19946] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 547.981372][T19946] [ 547.993962][T19946] Possible unsafe locking scenario: [ 547.993962][T19946] [ 548.001391][T19946] CPU0 CPU1 [ 548.006738][T19946] ---- ---- [ 548.012088][T19946] rlock(&mm->mmap_lock); [ 548.016492][T19946] lock(sk_lock-AF_INET6); [ 548.023500][T19946] lock(&mm->mmap_lock); [ 548.030334][T19946] lock(fs_reclaim); [ 548.034303][T19946] [ 548.034303][T19946] *** DEADLOCK *** [ 548.034303][T19946] [ 548.042427][T19946] 3 locks held by syz.0.3520/19946: [ 548.047607][T19946] #0: ffff88807726f0e8 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x13c/0x2860 [ 548.057092][T19946] #1: ffff88804cee3860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x161/0x2860 [ 548.066836][T19946] #2: ffff8880355fe538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 548.076771][T19946] [ 548.076771][T19946] stack backtrace: [ 548.082659][T19946] CPU: 0 UID: 0 PID: 19946 Comm: syz.0.3520 Not tainted syzkaller #0 PREEMPT(full) [ 548.082678][T19946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.082690][T19946] Call Trace: [ 548.082697][T19946] [ 548.082708][T19946] dump_stack_lvl+0xe8/0x150 [ 548.082727][T19946] print_circular_bug+0x2e1/0x300 [ 548.082749][T19946] check_noncircular+0x12e/0x150 [ 548.082771][T19946] __lock_acquire+0x1520/0x2cd0 [ 548.082797][T19946] ? prepare_alloc_pages+0x15b/0x650 [ 548.082820][T19946] lock_acquire+0x106/0x350 [ 548.082835][T19946] ? prepare_alloc_pages+0x15b/0x650 [ 548.082859][T19946] ? __bfs+0x153/0x290 [ 548.082873][T19946] ? __pfx_hlock_conflict+0x10/0x10 [ 548.082893][T19946] fs_reclaim_acquire+0x71/0x100 [ 548.082914][T19946] ? prepare_alloc_pages+0x15b/0x650 [ 548.082936][T19946] prepare_alloc_pages+0x15b/0x650 [ 548.082961][T19946] __alloc_frozen_pages_noprof+0x12f/0x380 [ 548.082986][T19946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.083011][T19946] ? __pfx_policy_nodemask+0x10/0x10 [ 548.083039][T19946] alloc_pages_mpol+0x212/0x380 [ 548.083065][T19946] folio_alloc_mpol_noprof+0x39/0x160 [ 548.083091][T19946] shmem_alloc_and_add_folio+0x43e/0xf60 [ 548.083111][T19946] ? filemap_get_entry+0xcd/0x3f0 [ 548.083135][T19946] ? __pfx_filemap_get_entry+0x10/0x10 [ 548.083154][T19946] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 548.083175][T19946] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 548.083196][T19946] shmem_get_folio_gfp+0x5b2/0x16c0 [ 548.083222][T19946] shmem_fault+0x179/0x390 [ 548.083244][T19946] __do_fault+0x138/0x2a0 [ 548.083265][T19946] ? do_pte_missing+0x1403/0x3540 [ 548.083310][T19946] do_pte_missing+0x228c/0x3540 [ 548.083336][T19946] ? handle_mm_fault+0xec/0x3080 [ 548.083355][T19946] handle_mm_fault+0x1b38/0x3080 [ 548.083379][T19946] ? handle_mm_fault+0xec/0x3080 [ 548.083401][T19946] ? __pfx_handle_mm_fault+0x10/0x10 [ 548.083425][T19946] ? __lock_acquire+0x683/0x2cd0 [ 548.083441][T19946] ? lock_mm_and_find_vma+0xa7/0x340 [ 548.083463][T19946] do_user_addr_fault+0x744/0x1340 [ 548.083486][T19946] exc_page_fault+0x6a/0xc0 [ 548.083511][T19946] asm_exc_page_fault+0x26/0x30 [ 548.083526][T19946] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 548.083554][T19946] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 548.083568][T19946] RSP: 0018:ffffc90005be77f8 EFLAGS: 00050206 [ 548.083582][T19946] RAX: 00007ffffffff001 RBX: ffff888050ad000d RCX: 0000000000003000 [ 548.083594][T19946] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffff888050ad100d [ 548.083605][T19946] RBP: ffffc90005be7958 R08: ffff888050ad400c R09: 1ffff1100a15a801 [ 548.083617][T19946] R10: dffffc0000000000 R11: ffffed100a15a802 R12: ffffc90005be7db8 [ 548.083629][T19946] R13: 0000200000000000 R14: 0000000000004000 R15: 1ffff92000b7cfb7 [ 548.083649][T19946] _copy_from_iter+0x21b/0x1660 [ 548.083670][T19946] ? __pfx__copy_from_iter+0x10/0x10 [ 548.083689][T19946] ? sk_msg_clone+0xcec/0xd90 [ 548.083714][T19946] sk_msg_memcopy_from_iter+0x35e/0x700 [ 548.083735][T19946] tls_sw_sendmsg+0x1a49/0x2860 [ 548.083754][T19946] ? futex_unqueue+0x211/0x240 [ 548.083784][T19946] ? aa_sk_perm+0x6d5/0x900 [ 548.083805][T19946] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 548.083826][T19946] ? __pfx_aa_sk_perm+0x10/0x10 [ 548.083845][T19946] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 548.083869][T19946] ? sock_rps_record_flow+0x19/0x350 [ 548.083892][T19946] ? inet_send_prepare+0x5b/0x260 [ 548.083913][T19946] ? __pfx_inet6_sendmsg+0x10/0x10 [ 548.083929][T19946] ? inet6_sendmsg+0x101/0x120 [ 548.083943][T19946] ? __pfx_inet6_sendmsg+0x10/0x10 [ 548.083958][T19946] __sys_sendto+0x4a3/0x710 [ 548.083983][T19946] ? __pfx___sys_sendto+0x10/0x10 [ 548.084004][T19946] ? do_futex+0x333/0x420 [ 548.084034][T19946] ? rcu_is_watching+0x15/0xb0 [ 548.084055][T19946] __x64_sys_sendto+0xde/0x100 [ 548.084078][T19946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.084093][T19946] do_syscall_64+0x174/0x580 [ 548.084107][T19946] ? trace_irq_disable+0x3b/0x140 [ 548.084129][T19946] ? clear_bhb_loop+0x40/0x90 [ 548.084147][T19946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.084162][T19946] RIP: 0033:0x7f89a979ce59 [ 548.084176][T19946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.084189][T19946] RSP: 002b:00007f89aa61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 548.084204][T19946] RAX: ffffffffffffffda RBX: 00007f89a9a16090 RCX: 00007f89a979ce59 [ 548.084215][T19946] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000008 [ 548.084226][T19946] RBP: 00007f89a9832d6f R08: 0000000000000000 R09: 0000000000000000 [ 548.084236][T19946] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 548.084245][T19946] R13: 00007f89a9a16128 R14: 00007f89a9a16090 R15: 00007fff62920d98 [ 548.084265][T19946] [ 550.675422][T16178] Bluetooth: hci5: command 0x0406 tx timeout