last executing test programs: 5m16.452964336s ago: executing program 0 (id=11017): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000180)=""/169}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB="010000000000deff00001b20000008009a00"], 0x1c}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fff, 0x10001, 0x8}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="daf0b36c", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25070000000c00060003000000000000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40880) 5m14.618701569s ago: executing program 0 (id=11022): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x2000, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r3) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r5, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5m14.266617094s ago: executing program 0 (id=11029): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x100}}, 0x20048804) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0xffffffffffffffa0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r1], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRESOCT=r7, @ANYRES32=r2, @ANYBLOB="4ba1327e9b2e05ed2278b03a281945a75b8193dd7eaa430c2ae68964f6a947f327", @ANYBLOB="959047132adb9237445fb9cfa30ac8932a67c025627fc8c67921acb71b48bd8883e5f138e5fbc64f16b62b4b95d636c326d73dd82b431154fbff30132c1afcdf53d81379b31afa5e48aee8c8047319443cdd0e311bdf58ee71d77c95ffddf40f6d5dfc7c2e25cb80ad13d615669e9a1f61cf158089587f89207c558a640b64edbc67e3571ccce2bdd4240259a21e31954e55c3e963d8f8e28c396de05c98be988523085003377d704062312102e45578de405b", @ANYRES8=r0, @ANYRES32=r8], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) close(r9) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd56, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)={0x3, 'pimreg1\x00', {0x3}, 0x1}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x7}, "cdd2a5bc88e53dde", "08000000e0beca750400", "d75e73a5", "0200"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0xe) 5m14.064231418s ago: executing program 0 (id=11031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5m13.851230185s ago: executing program 0 (id=11036): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x11, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 5m13.723981389s ago: executing program 0 (id=11039): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x5) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 4m58.088794485s ago: executing program 32 (id=11039): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x5) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m36.280011726s ago: executing program 2 (id=12044): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 2m35.908531554s ago: executing program 2 (id=12046): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x21, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) r3 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000004c0)={r6, 0x3, 0x3, "2a9a9e"}, 0xb) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000005c0)=0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)=@expire={0x2dc, 0x18, 0x100, 0x70bd2b, 0x25dfdbff, {{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e21, 0x0, 0x4e20, 0x5, 0xa, 0x80, 0x20, 0x2f, 0x0, r7}, {@in6=@local, 0x4d3, 0x3c}, @in=@multicast2, {0x2, 0x3, 0xa, 0x1000, 0x7fff, 0x6, 0x9, 0xb}, {0x8, 0x567, 0x38ac000000000, 0xb2e7}, {0x9, 0xd3e1, 0xc660}, 0x70bd25, 0x3503, 0x2, 0x2, 0x1, 0x11}, 0x6}, [@algo_auth={0x73, 0x1, {{'poly1305-neon\x00'}, 0x158, "2faaefe6335c6a03486feefca95723af346e9d7a9180594e2794f1e5017e05470261f6065b2dab4f5b23c4"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd28, 0x70bd28, 0x70bd29, 0x70bd2b, 0x8, [0x8, 0x1, 0x6, 0x8]}}, @algo_auth={0x13b, 0x1, {{'sha224-ni\x00'}, 0x798, "6ff814f97705c3e6e9444d17bb7d8b460d545fad32af7472d5bf6ce73f128ad1fffd7f0067096823dd37a83c0fcab074de1da3b54d6a240ce8191a6da13f2fdb464cb1d796bee2e126de075cf2a1e52397f24790015d275bac4f598fd62d0707e39e11e0269b7494f749e84dc5c54a8eebf1ae782e20f1266307a0b0b90181cc2e80a65636176caf857d5d6debd98234a1e44341478b0540b1c6859a77b5c732b262b07deab33e0111a66ece38751ebbe3f1195cc1a299623848deffbe9b1d2f9d89279056d955ac4472d172fb9437c8bf25d477745f3509f2a84493e80b30d1d9823499bca462e3d4a5ecf7aa2f168275d811"}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x42810}, 0x28) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x13) 2m32.440385458s ago: executing program 2 (id=12064): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000003ec0)=""/44, 0x2c}], 0xb}, 0x10000fff}, {{0x0, 0x0, 0x0}, 0x10000004}], 0x2, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28}, 0x20) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x28, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x8000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) sendmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="19f5a8d79d83a2d1fc54392c986d6bcc833f9205af1731661bce808f71a906b331d9c2ec95e8bec7252f3fea2e1c4659e3d8bb46efda39e896a60de3af307790a247bcfb3a26f07d916280769ced0033e89a04b8cf3746ab2e618fd84eaad0a0bdcadca6c1eed56319760261b44732e40fc9ee25e8fdfb24104e3e78686883af9d804e13026b11e3a4678baf995d9624acadfecaeb36a48db19daa3a82193b2877f11efdb9209f4d6de7636c14208e4069ce8d68d97b49c5253bfc8fc7728acb303cb223397b03f8c17ad4a23d2cce3221c7e9e6459e295bfd1696a8c469e1f07d51ea7aa551a8a132", 0xe9}, {&(0x7f0000000180)="d0d4207abd457e4daabeabb2c01fba4efd1a50ed7ff1a3f389c37d9311e0cb", 0x1f}], 0x2, &(0x7f0000000200)=[{0x10, 0x1, 0x7}, {0x100, 0x118, 0x40, "e4495a2dc8c90c874cd33084439786c01201c96801929aa3b5279345e8c26feea5af31f17ea963cf719d2c5732fe6186ef90bbf1fdcad6a2933490cfd1b5c8c0f4d3f2126e1917070881073e5c7bd5e95837c0885f0b7c8fe36117002fd0f562bd808281183aa9c39e810b032948468582de36a171a4dbb8f6c38fcea6038aac97cd52a60eaf868f8ed34ab631a2fb3a2f19e0657eff769af1de442dc660d0088576c7de263a919f589f2538d90341efece2a1389d67e5295e1ef1e190acb64d5df2db3a1e924e34efd88673efc7890493e686f19036185de8768f3cb285f6f9fc5feb047d04ba5d795267615023"}, {0x30, 0x6, 0xffff, "a7ad8609299f99807953a78784390fcc48eb2506d7f03a51b7"}], 0x140}}, {{&(0x7f0000000340)=@nfc_llcp={0x27, r9, 0x0, 0x4, 0x1, 0x9, "5704de0f89969ce26fc10571f96c1532970b2603ff9c998ad0447e91c664a49243da7d5fe21c23ee42a1f9cda753c8750b64657620684af816d3f7f992cc06", 0x37}, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000003c0)="b970bf6ad4c4422a0db698f5a8f6040b42097dafdec47a7f9b10e3afb2599b35e6e54b13a88a8aa9ce93ae70c85c413bd0109c355cc8fd69db87aa65233ed957e1b517e6bda81b922762d7c11e1ba8b26581e8f051242435ff718f5f41c5cd25d4", 0x61}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="9dac7e3472598fe1f89b1384e68be332383671aea3f2239881a425bf70c7e00c20efb72ce8f2e60a35c750231a07105273cb39dbcdf0d04ed84aba81d0924f0ce30d641abf1adceda923349682cc13808abbb733c837b746e3631f4bf4aa7ea7d7bb94fa5359079f8ffa5fd445a77b6f97a1499de7e24bdc9e1c7fd0348f03860184e5fb245242d5317e16e9e34f120a9092b22609ab3adfc5630a42d7d61d4ddb18afa314b5c6167e83075dfa4afada2bf6a7bab82632b8c9345af568f5df0fcdd0da7139dc2ee071a97977a717d0f7d72e92530d8f7e8712f530e626e89ef7dff7200ec908cd207a93b6185ed313e49438f6", 0xf3}, {&(0x7f0000001800)="96600fc3d1ecddb272c8b514460094149bc5d9f4113ffb22110e62362e9e06c04c6340ef6b0b424b9526da8f82cfb9c5bf0271a24b01ed42e420c195a42b57bec97d542bdcd1cdafeb239fba7c01e775c3ce1550a5841e5363b5e25d76e0e532ad094e4e22d403b068b4ba3b9f4da9db70838af11d63a52aa04be290706d1e7eddb34b805960cab5696059858044ad3f0eda40f5548d8c6431f5d1056389a615a2edda9216c037154872646e32bf2ff65d45ed9dfa0fc5631e77730351983148f821cb2629a9d91b65298ab400120a8a2f28b6fde1", 0xd5}, {&(0x7f0000001900)="a31962590cb2b702631f437125b5db545c266123b9e4d51fb7c2a005daaed8dedbe27f6218731e64dfb4d5867a4d1a2860aa6e94586f6379ce4c5ee2902f6d29158ab33cce27fd0e66be41aa094d3c3adf3e7aaec13504fb61ade4d4f075c63dc2c2f147d61f0447af1f9006fd0eaa93ae1881ea0e07449c71067baaed0e5471fa4fb9afab6ccf60156dc59f59f6b2f14701616092e8397413", 0x99}, {&(0x7f00000019c0)="d3085fe7e2a1ea2be94340cc74f228b0b18e2a8537c13b99bc58600588127b9ca37468da07dd2b92614d357d8de725fb77241fdb711503352022a483024c100e29998d4a95d32e1ba2fbf6e73d40a80de9eeb9430af53307fea4f238e8881c2bfa", 0x61}, {&(0x7f0000001a40)="8afccbd352e7f55666ce4436cd15a2d620a59d48553004f9d8959e5a5b0905ee5fecb91449c39010ff7d25aa47b285f62cb7fb2e062c28e57b5d38dce3759715028ba0154f109695319780b8d8f8244d38e35b8eae", 0x55}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="4003b76ef7360ede2fa60384d5c50bafbf6c55a926ad5e49a86b2483842f16c4139c79e010dcf44947c51eda67c2bb82dd6c14f5d8ebee56afd19344bc11a44621d46f17218576773df59be0f6bc341f76503ed8b393dc3edadb982455e816b8af619af9acecb03253fe0fed210ba2dacc23adaa80c58e7550343bd5a20dcf948cf73d749321f53bd6be2f989550c94e1927c1ff6083bea77abcdf4750fd8f1ec7ee61c69b3cbbafd003738f2e1dd58de7f40da1fea3e147d8b3847cfcd553920253e3f55a04ff6a2718746d0c27e10a4bb984a8851e47", 0xd7}], 0x9}}, {{&(0x7f0000002c80)=@isdn={0x22, 0x64, 0x5, 0x9, 0x5}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="c13d755904211a0be3f0d8fabf522d7398de416ddfd272b2e80cd45fce88d4aa74ed102b4bd56ace06a899ef28c050b3d96da53215aa34294d65b0d3a9d57005cce70b303058ad2cc69b76a5cde6264f856da3018cf2fd83b3381f945449b94ea07c0d3f9fffcc88939456", 0x6b}, {&(0x7f0000003d80)="e039ec29698cd8ffce14110f5b54d781775541bc73f03613911fc3b2d3966abd1113c26136ab8aa1b75788e0b376884c1d4712", 0x33}], 0x3}}], 0x3, 0x40400d0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000004000)={r1, &(0x7f0000003f00)='GPL\x00', 0x80, &(0x7f0000003f40)={@align=0x3125, {0x5736, 0x619, 0x10001, 0x680}}, 0x3, &(0x7f0000003f80), &(0x7f0000003fc0)=0x1ff}) bind$l2tp(r10, &(0x7f0000004040)={0x2, 0x0, @remote}, 0x10) 2m31.838979933s ago: executing program 2 (id=12067): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) clock_gettime(0xb, &(0x7f0000000980)) 2m31.18752062s ago: executing program 2 (id=12070): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m30.955337946s ago: executing program 2 (id=12072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/110, &(0x7f00000000c0)=0x6e) r4 = socket(0x1e, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r4}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x80}}, 0x0) 2m17.783530984s ago: executing program 4 (id=12150): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6}}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000000000000000000301703b744dc5c6"], 0x0) 2m17.688201319s ago: executing program 4 (id=12152): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2, 0x2b5}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000400000000000000010ff02000000000000000000000000000189"], 0x340a) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0) 2m17.1713803s ago: executing program 4 (id=12156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x7, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "1f6c0af15fac9d91dfd48ac99ef34caf3271e4edf2d450f8973e71bc6ce9edbe", "16a635350587e15679d43a1a019b6e24a47b8bf3f8f235a8ab6ec3890af0d6e04fb139da90d7907750b8a2fe53402a2e", "5da8b59b2e23763769034ff9d65b8fc9637804e28346e4727d814b4b", {"eb0599e5b617bb25e0d2638e5e68c53d", "81be37dc3515d241aacd276bdbe9d6ff"}}}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r2, &(0x7f0000000380)="d115bee71c40c87dc393a506ff64b0757ab6172f38fc7579db4c47ce38f7dcd54ac2354c", &(0x7f0000000780)=""/180, 0x4}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000033080a00b80012800b00010c00fb7f0800310000000000"], 0x3c}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x27}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc084) 2m16.823902035s ago: executing program 4 (id=12160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wlan0\x00', @broadcast}) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) 2m16.676272686s ago: executing program 4 (id=12162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYBLOB="9f0b570e43ea0f11f2a09f5b41cf049c5222e7589b8ffd043f7eab50b70fcf6a6c9112bc84060b9f7a15bcde3f57a8de6e49db05fda953a35652147d72412721861950da3a875101832f277002e6e2f8162bee055d3c54457da2be74e313aa90b42b79d3c5aab7af7de9bac92eaf1efde898981f3c313798d9dc53aa617b906598a7ac20e9d46e03a6c31e762f5ca730fcf29b84670978935d48a8c946b8312ff98a8fcbf24d0a30549c6d8e30283c08b7f0be196148befecc4d3d34fc1473801d8fd7925a867e2e62f11fabdc77e620f1344ebab8cf", @ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r0], 0x64}}, 0x40805) 2m16.443037019s ago: executing program 4 (id=12165): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x3, 0x2, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94c14a302db5a73a5fc781743e22e051efbf6f709c978e202d8a852aa1dccc140ed6da8a8788c1843c400603420b1f225891e0d96aa55a7f2863c4"], 0xa4}, 0x1, 0x0, 0x0, 0x30058001}, 0x20040054) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x14, r5, 0x905, 0x70bd26, 0x0, {0x24}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8=r1], 0x80}}, 0x0) syz_emit_ethernet(0x28, &(0x7f0000000440)={@local, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x8864, @generic={{0x5, 0x4, 0x3, 0x4, 0x16, 0x68, 0x57, 0x9, 0x8, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}}, "ad31"}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@iter={&(0x7f0000000000)=@cgroup={0x0, 0xffffffffffffffff, 0x8}, 0x10}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='.\x00'}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r8, r9, 0x0, r10}, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r7) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a40)={0x16c, r11, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc81c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x95}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x68}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m15.85221074s ago: executing program 33 (id=12072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/110, &(0x7f00000000c0)=0x6e) r4 = socket(0x1e, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r4}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x80}}, 0x0) 2m1.364339717s ago: executing program 34 (id=12165): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x3, 0x2, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94c14a302db5a73a5fc781743e22e051efbf6f709c978e202d8a852aa1dccc140ed6da8a8788c1843c400603420b1f225891e0d96aa55a7f2863c4"], 0xa4}, 0x1, 0x0, 0x0, 0x30058001}, 0x20040054) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x14, r5, 0x905, 0x70bd26, 0x0, {0x24}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8=r1], 0x80}}, 0x0) syz_emit_ethernet(0x28, &(0x7f0000000440)={@local, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x8864, @generic={{0x5, 0x4, 0x3, 0x4, 0x16, 0x68, 0x57, 0x9, 0x8, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}}, "ad31"}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@iter={&(0x7f0000000000)=@cgroup={0x0, 0xffffffffffffffff, 0x8}, 0x10}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='.\x00'}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r8, r9, 0x0, r10}, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r7) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a40)={0x16c, r11, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc81c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x95}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x68}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1m51.557588154s ago: executing program 7 (id=12318): r0 = socket$netlink(0x10, 0x3, 0x0) pwritev(r0, &(0x7f0000001540)=[{&(0x7f0000000000)="ba096cdb853a2b84db36c27d9bb5b9733d5e3fa622974498fa77e2127503cd620d22ae2ea269362b2ba5714c9aeaae3ae514f52440fc7b1a94e8", 0x3a}, {&(0x7f0000000040)="40c511cbb9066b83acbaeeb9a4fb6999a50c5214a17377f1ce42b3cc1c4a7d87ef2b84f568c1ff1906faf8e26828d423b1ee5899b41c304625affc4a16541169d901c3afce3c454a216212ff532a15547c8e0c225bcdbde84e663ea95d8695893c77397538ac84ab636af534b5dd36e91f66675d630a14408eb572", 0x7b}, {&(0x7f0000000200)="f69963b0850d34b46befd784e365b80ceda007894d6e1620e6899ac7c75008e483d106cba62033b487526a25c8c2e16a78be1c6bd8a87827ba6f6815ad88eb17e43104a0ecbae9cdd78c230d859409b917a3129e3625a435f55e25fa6857500e08862bbfd635c55f51503473b714eca52d905e95741fac5bb0912716cdbe642f89cc947540140be2d75ed678d71de4c8958be37d8076b12174d21fbe597713bed7d9de1c7ab68775e8eb5598da98bbe48b3e74ce673d61367f01d2accf6ee235e2", 0xc1}, {&(0x7f0000000300)="83bb588b3bff372eac9156d4203fb7399420fe5d010ea40d03", 0x22}, {&(0x7f0000000340)="96c0a13128277ba8efc086a533f7a01f236f63769986ef909368966a52d10c0d9280a6acd2a6d2beadc439122f75d9a961d672c7a84d0646d8c85468c5985f7c656ca3a249ddf2484117332157218251349785a3838172c69225159df9e0e5fd9180bd2c4408d5793281eb4af41853d29227fe8a058978b51558dd31e177816e", 0x80}, {&(0x7f0000000540)="96abbad81899ae52dc9475c8f66c3d8eb418e2292a39ab978890b520f964c59ca4495d41a3200389fa90132e84a149f04b45c43ae9b3b11e3889e28ca7aefea3998f3991598d93515ad8f62e978030ed92517bce5a8e0bd7db89eb90d9e937fdd874df2ed0cca02b0798b17dcc377a51c29574622180d8ac67c875169125e9676453760fb574f0b7dcf284b2554ed8736e4d73a502981b447c0df4f6ba251d6846dfc25a124181c1301f6f025232427cf0c126b83c97ae88e9e06cbb24cbc4e8711bd2635bc366d477c3925548cbcbab4dffcf737b85b851a95904a62eb59e8dba5860b75ce5f88d730004f4268b46f2708606fe6edce206f97ea88443aa160b6343117719bd9fa64b47015e0b09ac3b289f903eaa1e6554730f49fc1b6192065196825ae847a4843f00b8708f627972258f614173a8c0ef43e35deabba7afcf8455ffdcdefb52e744dcbed7ebcca966fbea9e4217854c69872038477fccf3e7017ef6a85eb92380f688e49c21000004bc3ca368fb6441e040137a88dca2af526ea65e09ed04fe582319eaeae8b0e342de78124ee993916a6e64676d9daae6b20c2932ffe377678281dd4474f88cd1edd62814a44c0463057c89abaa018a60ef0d2f6966cbd634bdf894eee5eb9c7573631636a047c08bb7e6b22713ec086cfdd4747b78623b0b5e84a0f923c99d1915264047f04bc57c63df450c1187a632f3c41659c4ac3315f5366f5852e5191cddb3b149584fe112086ce4a67ec377ac4e840591d97fc15286ac94919b31b2e73589d20849ed0d5c417e1fe6b5010f20a5b72d64da73f4930ae35836307ce3a53ad50ecdb5f236d983c8bb5e2cbc5ea43f11b5c3b7dbc5d828fdfce92fb4bc5aa8ffe4a821e20a50ac11aca9de00e69da44e197e4789feee3c715342ff2a2592fb9832e047bc9e2236e105a59198e7547cd218096bdb7ce5ec436592ffedcd98790387f78c8def4e430b6d6d1d5d2f89a961b556e571ec2f6b9e2d0777e27cdc228482918ae7a4839c856dab7f0ad404dac7da26eb15377867aa6a647d61c47bda4b471a7e117d80876b7897b349e7065ff4e89b5a32cd86ac834f475f44c92322b7eace955c5bbcffd5a32a7c1daa028df88514a51bb6b689ccfe3aee498f23fa4e54790c5e3813fbe0b13bc050d03fa18de98a642fe69acf4282140c414802902cbd2cd3b656fb8d898ce07ada92ee097de685e67291dd24caca1a69356899ccdea2f46dd6401a4b3846f9049046c2ac3e823e9068878e90acc91c38417959c234af5bf1ef49ee321fcf3efea6d9f51750970fbe430e866713a0dd915e424d4f67705a20f128e56c0c7bac12cbe1b59af8fa305646b16f45ccf0098e1d5d3446e6051e5249b2cd707f18b6e31a92cf4ac9e28b7e8fe5fca6b57057942fed17e252d9290f7ea6a1e7cb11d70228487788047d46fdf578ff0265afed8f3f1ad4dc87098de75e95d303362efa49eaa4b9315120519a6c9019b494c3881619931e66a42f265b65a66e9c3bf41126f6b68cf76fcaccdb486996979bd9d5045e69e666e2d5dad52aac497a154e949bb3733cc6a78582d806cc4b32fce1dec694f770a2bbc73fd4c8849a49097149dee1e2b71dd2707b732f28c7c6e0cae12ab7787b4c7e47cc2b9dc5c80cb0927f1d48611f11ef9889cfe58254d28e56ffbbe14c13ca251e4d01f51d914f2272cc9aef02815f052a2836e5c951e268f5aa61cf268ab57ea01b1360975d80f175ce0a75bb028260644ca75038ef3ec4c218e009ac8e677da92a481db21cdeac5b01f07b846ae9fa5b45048c6492e54c5e11c5d0c0c17b0ffc0ad4ec44bc0b6fd3cd4abfc9c43691deeefed48e0171303da6ddc6c6c73db3e3ab393eef2c9f223f4392eb1d6de540ca1b3c93de0e1806a07173eb7291d73f8948de59c9f10210338d1eec64c9db4e7d300ca3b058cdca5caed965d696f3b1761ade34c3cb21d5275dfc7196846928cf6c5b8b7e0e6648435f936d04dc06714b7cd9ac4223a7781b8a32fbf61a093509acfc1138950b8fc49ec1664af24bce1b6c3f26e10fdd5e6fd1da4dd05691b1aa05bf93d3425c1a3ddb020389ce6001f998fe77ff148a2961fa3ba791d2c938bd30849aee270a4a0dae1084cf7d3631bc553bf13f6a0e0d02c0bfbafec3dfff8d686e57a4192f7f89ec6033c8d3d15a557b362d71d09f60f870dca7855bb976405251865c8988fb7962eaa8f310ab3bb03038b1a1fe808ae620c06f951190203f623a1e3b95e10f7ad3727f02ffc0be69da99e235c5d92adea29abb62fa955585863e5659cb56b2fec2cd39c04051e5db658ea276b38ffbc4a6987e1e08e8130210866f4d775fe55d3d77908ffc29984e2bd201f91a495a5a695649f9fc4bd03e26c54342dabf814d1fe89be15cfcde10dfd6a85bb3aa5a245f5234a21199d151f4720b72130cbf3d3665d1be721158f07fcd442d1d4bcd631bbde5baa6a1d07c6cc7263ec6f4540b8cb1b423de511005e9ce4963fbd79dc92bf772a4e06dcfbb8b3bbe4511f9650dbea20bcec8e9fd4c8e5e8be9f33ca14b24db62b427d8fc828b61ff7f5439940b5a3f03313bd9599253b2e8e4dc7bfeca84d7a6ab76700f88578171a0dfc342a2c7296cfdfd8f3a4b8880ed3b19413d106b4ff6eaecfa1b036e66fd751a12373ba4725b7cde0a91605a738213643b297f488197fef6d22fd4da391da3e7e4cca2a16d5f455cbccbbe3c4e769cec999e28f02894fe743cf3b38bbeb0101121eaccce54c9dad13bd4191c808e3445ebf20e6b0c4c64bdab7a0e1d828701287d0608fdc529ca96c20fec2f2935d793e9331d3aa7fb56279ae1c44b0a4b5293658e2df688c2c1c118ec4d56190a4ae63e0fde3d88a7ce2c145abc01fb06de6e8a9c3c8a924164efaf883bfbb11dce23706936e80c72625f7993020c2132cd450e797d4e2764311528d19581036113097e9b8e4601d1d5fa73968a16eda10fee2689acda09a723e1a82c65c448c1dcaeedc60261822830ddfc1ca3b9df24076a98cb29719e17cabc474f97399cd8ce147a0ba7184bf8b636544be3b1e1cf0c9c60b48b6af175a7a93283600c8bda1c2371cbec62110270d67dfc2ef95a890b7dfb13729b702b93be33a6cd4d6df376e93c008c6689b7c36f26c15b5773d95a8bf7e9b5dca5cc8db6a287df9dbff83a902442ada17ce431b3aac520739f76ad3679477194ca36f77fc0e90d964d04669ceec0f8834082be0d915713129a5be509678c2fc7d96904cb0b2439935bf034b609256b64bf3553fdc1007dae072331dbe2ad9f9bbacae574b86a13cf514f4f181372953a33e20bd2e5a53e5ca74128075d892740fb24af260b797f585f519ce78bf0b4a34cad8790b163b7a1838ed2d514fa84a56d50f019da49ab0245c818430ce4ef05d3533fa2b8cadbf9391b2c07a98665e71b7d338f8fe69e9699c5ab879a2a3963109ceb17b9badae27e2bb9df66139316cf0f000011c884aee795a34dbb0c7fc1925a178ed93715344be20e882177a5ffc10696ce01861cced9873d95b476323773a3c360e5766119ba63df1f5cc7e41a01c240ee7f68016ee93b6347d5a2379928c8ab34737374cb475d168887ba8e4d4c1a53fae2aa7393a1cfa0d0fc76f83b143e27b0451a42bb1aab7f388fd0acc1b78acb160dad30a6e4deb71a0effe7479611f280557cb51e1ba4e2b5a740681dfdf4a324bf32fc5767f22867173cc6b0e8c951c381c87a7a5f3dbf2683c87b47e5b09d3619ec5e69be52b1423f4ae29018cfb06aaddd56cc34130e27bd89321769056868744e4bde5a4c25aaa238cd66b8f177a72519fd8c37a8b4d2104605420a337e93441e7f23a35adaa7a56974153e00ecfc1cb48264d3ee003c18e47d1dd95d165ede7171b20c19f78993c990f1f8773cea19e537fd9de5239e4a40e124ac1a4cf5e34683ecf3d68750ea4929f51d7198bdeaad625cf8f4b95f5b473ea8c4bc87dedb41c1e2bfbd47528813201804108a7abc3d01e76cfc5a98bab1529d08a1f4c93825b702b4553ca47a3c7228a5e93d75dc2d20cf1d911431627f93b27e8e90b269621303228240d0769fc4a8a0bb02357bd24596b34cfb8ff347039f1aec955ce8bb5b25d119c587d57f563a7c38ae5e37979b668def2d94f0dfe69d5bfe4368d4c0ada71b842c219952c466f975d84d0eb2aaf32083548334ca78c88b67188220a5725cddd38f40c3c5ea52ef92c430f7fcbf02b1762feea12a0ee1652f19c646c7b6c72dec320c2108e9517019ffcf29b96aaacd3921a00ff8b0ab6e2b06ccd1b87bd1c2496cbdc883a3f1c1983205b0be290118adb6ed647d5ff9051d72a9856f5c4af29b42746bda09d003dc4a6116f0750cc5ce4668ca2e13e11e9adf8b01d80cdb6eaa910f0fede8c640cb02da3f993e72659374996b5f5773eae6d7bcdedd9c090a80d8ead39919bc7b29c30426de2e5a60390ac78a04ed10c3f4b6e4dfef66e766541df705eb8218dd419dda762a7776d15152545881400dc4474ebc0b673d7f4444093c94d8267cae4d7e99e48adec94bfe39d3620170c15a9c9997800a0912e548ea6bbffa7a6091dc2a994b9b20d1999df913083e0ccf038cc8de1c55657d5463b96f3984ba27b11599c7a49c94ebda3b13ef95531f5357d981731d7498c5f6f3e3c4d8dc5f689de6d32ce6ce45b279771c7d04cec6ae25402b762430e1cc5bf3545c56d8929ef9f11a8e5e07d32f38f3d85a58e9f7e32e1a3b28d287a28226bc57da315a1f0b595b85f87039d6aac09148dc50f01195e18dc1e520c3863248ece45ee3955574e583a3c16a413a94fec4df34311142de7802089e45e7c0ee18a78b93dbab1cf1214d6e7322e1d6d2e3c1ecd8a958688bbad20ad5002e2c2bcb0df6cc91cba9e6f701bd2ae92b365b1059756bbc288aa40b3fffe8fcf88d014b8ccfb07326aa107d5dd2156ac5a1bd5fe0d8deb2c39a944d27391255a6c1f2eb5f24ce925e788808b1ebff75b7bbf26c82f7a94e1f211525f47e6e875143b06f065dac425aba18c82f278f26c867b9484b76178f50a4ebd0b569f4d2592b238509b7df42ee20b540ea702273e33293438be1f68665baf8cd13b8605615cf011c6afff962423a68fc2dea64e23c3170bb485c66d3e1068d37602857b1eb0a99f32d4f1160f3e2d22d139272a34ac59fdfffda48dc428e5a92572d2931c68b2d3040384b0e3be245bac3631e8fbbf486bc5e1056c1ef8d3b8c00d96f4c2fbc457d75d1fbc5911ec956bcac4a6f3fa092be3fa7612ce83e94cccebe9b08853441dbe9434905d5e405cece4325c72b52ee3a55545ab460376d043342b205d0ac07117cd8dec935db78d5ea01af3dcc1c92433db47d50d36c3dd0566df667b337003776be8c81749ccf63a38e63f8661a8faea9dabfaeb31b14b562c7a79a30db4c0132b6361209b136c8fb4fb490f22bc4c07e1cbf1e4ebd234209c88d78d86187f6fcfa1b7a418c6c0e67da5cfdeb00aa3c2f5a954d829592427da107d87a0128649f0c3543324aa3730b8d0f25f69e831010aa53df26a20712598ab6a285172192345b30216fe1884bace68b3104f6c320089a9135061e1060f5eb35a5323d1a42143841b1e0fbe69712f949a822d97dd6c55121ecd626005618a2cd0df571e97fa39e8af7815d2417709028dc431a3305bb1d755b48b35d08d66c890d881a6a96c6e93005d15258bb73a76593dba390c9fd54813652c0954ae0c002dd69f7e8a0390a4548f9ba633e8d815722", 0x1000}], 0x10000039, 0x2, 0x60) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800ef012bbd7000000000000a200000de00000000000000140005000000000000000000000000000000002208000400", @ANYRES32=r2], 0x38}, 0x1, 0x11}, 0x0) 1m51.302813867s ago: executing program 7 (id=12436): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES8, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="8cef99d10c3d2b2a1bc5646de61108db6beb75438e819f25d64f5300bd0fbd4377ad48a42af1833824ed85a0ae3b542d8d782d1860a5d8923167d0390fea0a7670a9ce890c2a8d5449778c0ed65eafdc2bde63320b7ef98f3dc10e704db5d72ef00c403e8d70910c03cadd9be245223d", @ANYRESDEC=r0], 0x60}, 0x1, 0x7}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r2, 0x400, 0x1ff, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x24}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0xb0}}, 0x40000090) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1m50.856228117s ago: executing program 7 (id=12441): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001d000000000040b67f48d33bafa3a61a000000642b69f1d3b86716af23d61bdfee3e7b3b0e7f3e979bbf80dcfe472c1388d326faad35d67d95b46eacdf1acb97a8c6f3c3fcc7fb"], 0xffffffc2) 1m50.775544143s ago: executing program 7 (id=12443): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000400000000000a20000000000a01010000000000000000010000050900010073797a30000000002c000000030a010200000000000000000100ffff0900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c00028008000440000000160500030000000000080002"], 0xc8}}, 0x48800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x9, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990004000000170000001400040070696d36726567300000000000000000080005000600000014001780040003000400040004000400040001001400178004"], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m50.279583038s ago: executing program 7 (id=12448): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getpeername(r3, &(0x7f0000000400)=@un=@abs, &(0x7f0000000480)=0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25250000000a0001007770616e3000000005002a0080dc"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$x25(r2, &(0x7f0000000200), 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r5, &(0x7f0000000800)="a80a94d24224d232467c6b0edef6a9bb9b745bfa5e56f788f9116a0c5a841bc928520fcbf92b03406d19d061afa692238cc6dd6e1f88388cb455361985196eb14727fc3f4cae2d18edf52c0e471c159cc0725c99a153afc5bc1fa530d99104a968bab972c26206256b19956808ea0ceccc98d519eeee26d6c7520116f7225b6c460b033ea9899677aa49433eca597b55030e24e411dc8aeffed3", &(0x7f00000008c0)=""/241}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1m49.774190803s ago: executing program 7 (id=12458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="831008000000fcdb9f251608000018000180140002006e657464657673696d300000000000000500030001001300050004000100000005000400010000000500020001000000050002"], 0x54}, 0x1, 0x0, 0x0, 0x24000085}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m34.758328415s ago: executing program 35 (id=12458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="831008000000fcdb9f251608000018000180140002006e657464657673696d300000000000000500030001001300050004000100000005000400010000000500020001000000050002"], 0x54}, 0x1, 0x0, 0x0, 0x24000085}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2.927119234s ago: executing program 6 (id=13391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x281, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x42) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000080) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b19, &(0x7f0000000040)={'wlan0\x00'}) 2.273466548s ago: executing program 5 (id=13403): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400fe822e5c08b3060020000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff00000000010000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008007076", @ANYRES32=r4, @ANYBLOB="0c0002"], 0x3c}}, 0x2000c800) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.9661145s ago: executing program 5 (id=13406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) connect$qrtr(r1, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0xa49}, 0x8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000700)={@cgroup=r5, r4, 0x21}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xfff1, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xffffff63, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$TIPC_NL_MON_GET(r1, 0xffffffffffffffff, 0x8040) 1.844602246s ago: executing program 1 (id=13407): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6}, 0x10) close(0x3) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x76}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={r5, 0x1}, &(0x7f0000000400)=0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1414000000000000000050c70000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fffffffc6c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006c7a7300"/240], 0x138}}, 0x0) close(r0) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) connect$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r8, &(0x7f0000000040), r7, 0x0, 0x800000000ff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x4004014) recvmmsg(r9, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f00000072c0)=""/4108, 0x100c}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000e80)=""/103, 0x67}], 0x9}, 0x70004}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x100, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r10, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a00000405000100070000005d2556eb78f5f56ed4d27f06d708bb99f1d6ae683392646587030c1f5ad0643bd8147d2ee5c0904395804f9f5a5753b7cf01ebe431df8cd44ca3c7be452a3e0b860511da91a937b1388a5bd79f052263dbce1cd9e4eda5b995333b28e343cc7cc7d417dbe8f15667f4f892119c71c96faa043a81a5e2709c2ad2c4e97bfba211a0b0861d9175f85870d50ac102230c4e205f4905fdabce315322de941a5287ffc5ffdcc6bb97a494a3edf2b5157869f3db17d194fdff7d1ff9ed3a1451a00a02a8b4c952403c9b"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) connect$802154_dgram(r7, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) r11 = socket(0x15, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.826189518s ago: executing program 6 (id=13408): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0xfffe) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x200400c4) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x400005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.688417628s ago: executing program 5 (id=13410): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESHEX=r1], 0x44}}, 0x40000) 1.666601618s ago: executing program 3 (id=13411): syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x69}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvmmsg(r6, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0xfffffffffffffe9b}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006200)=@newtfilter={0x40, 0x2c, 0x800, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xfd4e, 0x5c9d}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @val={0x2, 0x80, 0x200, 0x8, 0xd, 0x85}, @ipv4=@tipc={{0x1f, 0x4, 0x0, 0x36, 0x9e, 0x67, 0x0, 0x3, 0x6, 0x0, @broadcast, @private=0xa010102, {[@lsrr={0x83, 0xf, 0x5e, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x38}]}, @rr={0x7, 0x7, 0x53, [@private=0xa010101]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x7, [0x0, 0x4]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x1, [{@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x1}, {@loopback, 0x8}, {@empty, 0xfffffffb}, {@rand_addr=0x64010100, 0x2}]}, @ra={0x94, 0x4}]}}, @payload_direct={{{{0x22, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x2, 0x74, 0x0, 0x1, 0x4, 0x4, 0x3, 0x6, 0x6, 0x2, 0x4e21, 0x4e20}, 0x0, 0x4}}, [0x0, 0x0]}}}, 0xa8) 1.526476312s ago: executing program 3 (id=13413): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd1, &(0x7f0000000080)=""/209}, 0x94) 1.487594121s ago: executing program 1 (id=13414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) 1.482610178s ago: executing program 8 (id=13415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) close(r5) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000144035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x40084) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000140)={0x1d, r8, 0x3, {0x0, 0xff}}, 0x18) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 1.363810988s ago: executing program 5 (id=13416): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x9) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0xffffff88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000080)) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x1) 1.344774408s ago: executing program 3 (id=13417): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) 1.130995202s ago: executing program 1 (id=13418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x231a8f2b33f8ce77}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd0, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000081}, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x20000005, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 927.619467ms ago: executing program 8 (id=13419): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) (async) r4 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="63202b3a2cdf2b200872"], 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r11, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106"], 0x40}}, 0x0) (async) sendto$packet(r5, &(0x7f0000000400)="05d936277c6f5422007f83", 0xb, 0x48880, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x4, 0x6, @local}, 0x14) (async, rerun: 64) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) (rerun: 64) 863.077344ms ago: executing program 1 (id=13420): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004800000cad25b59fd8b00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 800.339064ms ago: executing program 1 (id=13421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x1b4, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x1a0, 0x1, [@m_csum={0x19c, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0xac, 0x6, "4731fc6772af1d667bbe403089cacb17248c989fa826bf2d4acf4747676d77652dcf68adc5d6031f7d91658879ef36210c0d3cd615f45dd006f7d7d0aa9b38dc564d0409e35602fd67e073cb5416fdc5d57503d8a69a64db021431bde710f69d06f2878d0b6d0565abbfb69200dd6e3a521c6bd5b6e4cd2ab062604d120468dd820f13f3064b6317407baf7b33aa95e011346ae26c67256cc8e7b04e92a5d0a209462b1811186e6e"}, {0xc}, {0xc}}}]}]}, 0x1b4}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) 755.801134ms ago: executing program 8 (id=13422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xce}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffc01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c0000000e0a030000000000006d00000a0000060900162073797a31000000000900020073797a31000000002c0000000e0a010100000000000000000a000006b2a1981573797a31000000000943e50073797a3100000000140000001100010000000000000000000200000ab4fb20a28aeed5afd6d85e28177f9c89519a6f9888558a85eaaf19c57bb334d0506b1c4d23420d25e62cdd22858852e60f3ccc275404d967f9ce3e17936026edfd70701135cf1077c401357f575bd86d68666649cf05c6edc89304e5f6edbd0f36068b3f2c3df33d9a4b35dd053606b7"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300f8ffffffffffff05"], 0x1c}}, 0x0) 753.775347ms ago: executing program 6 (id=13423): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1a4, 0x1000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 656.126615ms ago: executing program 1 (id=13424): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r0, @ANYBLOB="36a2f4545dcc0000000000000000b703000000000000850000000c000000b7000000000000009500"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f00000000c0), 0x0}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)={r9, 0x1, 0x5, [0x6a, 0x0, 0x8, 0xfff1, 0xb]}, 0x12) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38d03be4}, [@map_fd={0x18, 0xb, 0x1, 0x0, r3}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f00000000c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x1, 0x10, 0x45b9a4e2}, 0x10, 0xffffffffffffffff, r2, 0x3, 0x0, &(0x7f0000000180)=[{0x3, 0x5, 0x8}, {0x2, 0x3, 0x9, 0x3}, {0x4, 0x4, 0xf, 0x4}], 0x10, 0x2}, 0x94) 500.591325ms ago: executing program 8 (id=13425): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x24004081) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000c006301e0ff400000004cbb1a096d7e0000a3eb4c454df0df6f74e7b7979e1718f464a3c5c9fd35befd38cf61984796953f4a709e1e77d57ef74430a057a7f262d717f87d7ffb18ec3935bd3c3666346bec19a4f5672b6e702e2368af67d72006374ba4fb469c0a90082f4a54658a"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000200003"], 0x33fe0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000000c0000000a20000000000a03000000000000000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021240011800b000100657874686472000014000280080007400000000008dd8456376755000648000000001400000010000100000000000000"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0xf4, 0x7, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, {0x20, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4044885}, 0x4040840) socket$nl_route(0x10, 0x3, 0x0) 443.008649ms ago: executing program 6 (id=13426): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20040054) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000140)={0x2}, 0x8) (async) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1, 0x4}}}, 0x32) (async) r3 = socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 386.285702ms ago: executing program 5 (id=13427): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x4f4ebbcd35cf5c16, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400000d) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 356.846234ms ago: executing program 3 (id=13428): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000140)=""/6, 0x2}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, r4, 0x329, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596cf"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', r7, 0x4, 0x5, 0x0, 0x0, 0x60, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x7800, 0xff, 0x100}}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r7, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) 271.215741ms ago: executing program 8 (id=13429): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb8, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0xa0, 0x1, 0x0, 0x1, [@nested={0x9c, 0x129, 0x0, 0x1, [@generic="5a5d82cf", @nested={0x89, 0xa8, 0x0, 0x1, [@generic="61fef901a3223f8425eabb0fb47319b3a099cabd5b5bd36ca78d9715f905fe129e76517489717c4f7ded3ce5e8ddac662f6e4b0e9646050611e128daca7052bfcc7aa9b2eec25a6ac6dafe", @nested={0x4, 0x2e}, @generic="156be09d72c63c3fbf6146fd7d6ee7", @generic="bc080db12eb141ed8d6af59e15c733e5ae5fcebde94a75e5f78b94916a6e77", @typed={0x8, 0x63, 0x0, 0x0, @fd=r2}]}, @nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0x116}]}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x34008098) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 245.505775ms ago: executing program 6 (id=13430): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 154.868328ms ago: executing program 3 (id=13431): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r0, 0x0, 0x32, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x1e, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x0, 0x3, 0x4, 0x9, 0xb, 0xda, 0xfffffffffffffffc}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x14}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x0, 0x9, 0x1f}, 0x10, 0xffffffffffffffff, r4, 0xa, 0x0, &(0x7f0000000480)=[{0x3, 0x3, 0xf, 0x8}, {0x0, 0x2, 0xa, 0xa}, {0x0, 0x1, 0x1, 0x7}, {0x3, 0x4, 0x3, 0x6}, {0x2, 0x4, 0x10, 0x3}, {0x4, 0x3, 0x3, 0x7}, {0x5, 0x4, 0x3, 0x7}, {0x0, 0x2, 0x1, 0x6}, {0x0, 0x1, 0x8, 0x3}, {0x1, 0x2, 0x8, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r5, 0xffffffffffffffff, 0xe, 0x0, @val=@netfilter={0x5, 0x1, 0x1, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000640)}, 0x10) 99.063868ms ago: executing program 5 (id=13432): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000040615000007"], 0xffffff88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r0, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000003400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x1, @a={0x5f, 0x3, 0x2, 0x0, 0x9, 0x6e, 0x40, {0x1, 0x90c, "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", 0x7, 0x40}, 0x9, 0x84, 0xb7, 0xef}}, 0x91f) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@rand_addr=0x64010101}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x4, 0x8, 0x9ba2bf28609cf708, 0x5, 0x0, 0x2, 0x441a, 0x81}, &(0x7f0000000240)=0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 97.750103ms ago: executing program 6 (id=13433): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x4102, 0x1, 0x10000}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a000000070021006161000005009200000000003400228004"], 0x58}}, 0x0) 17.530481ms ago: executing program 8 (id=13434): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0}], 0x1, 0x20040802) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000002c0)={0x1d, r6, 0x0, {0x1, 0xff}, 0x1}, 0x18) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x4, 0x700000000000000}, 0x2400409c) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x60}}, 0x8000) r10 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r10, 0x89ef, &(0x7f0000000080)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00000000000061106400000000009500c40000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 0s ago: executing program 3 (id=13435): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009090c040500feff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) kernel console output (not intermixed with test programs): 14986] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11595'. [ 1151.374960][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11597'. [ 1151.618695][T14993] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1151.777251][T14997] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1152.044862][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11604'. [ 1152.485728][T15025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.880279][T15039] Unsupported ieee802154 address type: 0 [ 1153.102817][T15043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11614'. [ 1153.151314][T15047] netlink: 'syz.3.11615': attribute type 21 has an invalid length. [ 1153.161249][T15047] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11615'. [ 1153.171079][T15047] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11615'. [ 1153.825774][T15066] gtp0: entered promiscuous mode [ 1153.830934][T15066] gtp0: entered allmulticast mode [ 1154.037306][T15074] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 1154.062168][T15074] bond9 (unregistering): Released all slaves [ 1154.285911][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11622'. [ 1154.529138][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11625'. [ 1154.717078][T15091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.329442][T15111] openvswitch: netlink: Message has 1 unknown bytes. [ 1155.336186][T15109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11630'. [ 1155.361183][T15111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.599496][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11636'. [ 1155.746220][T15120] netlink: 156 bytes leftover after parsing attributes in process `syz.5.11636'. [ 1155.756015][T15120] netlink: 156 bytes leftover after parsing attributes in process `syz.5.11636'. [ 1156.041197][T15135] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1156.279776][T15144] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11643'. [ 1156.483282][T15144] veth0_macvtap: left promiscuous mode [ 1157.043620][T15164] ipt_rpfilter: unknown options [ 1157.647695][T15184] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1157.868958][T15186] sctp: [Deprecated]: syz.1.11651 (pid 15186) Use of int in max_burst socket option. [ 1157.868958][T15186] Use struct sctp_assoc_value instead [ 1158.132712][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11654'. [ 1158.141877][T15194] netlink: 'syz.4.11654': attribute type 3 has an invalid length. [ 1158.574087][T15206] netlink: 'syz.5.11657': attribute type 14 has an invalid length. [ 1158.765037][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11656'. [ 1158.850798][T15212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11658'. [ 1159.029619][T15215] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1159.045842][T15215] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1159.297578][T15230] Cannot find add_set index 0 as target [ 1159.302246][T15227] syzkaller0: entered promiscuous mode [ 1159.316612][T15232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11663'. [ 1159.328785][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11664'. [ 1159.335728][T15227] syzkaller0: entered allmulticast mode [ 1159.346827][T15225] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1159.347354][T15230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11664'. [ 1159.519653][T15230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11664'. [ 1159.763366][T15244] sctp: [Deprecated]: syz.4.11666 (pid 15244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1159.763366][T15244] Use struct sctp_sack_info instead [ 1159.822945][T15244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11666'. [ 1160.012243][T15250] netlink: 'syz.1.11670': attribute type 15 has an invalid length. [ 1160.256816][T15257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11671'. [ 1160.649202][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11677'. [ 1160.665567][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11677'. [ 1160.885452][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11678'. [ 1161.343747][T15297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11683'. [ 1161.366436][T15297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.381152][T15297] netlink: 'syz.1.11683': attribute type 10 has an invalid length. [ 1161.722302][T15304] openvswitch: netlink: IP tunnel dst address not specified [ 1161.985659][T15313] netlink: 'syz.4.11688': attribute type 32 has an invalid length. [ 1162.123456][T15313] bond7: option coupled_control: invalid value (192) [ 1162.138335][T15313] bond7 (unregistering): Released all slaves [ 1162.630189][T15334] IPv6: NLM_F_CREATE should be specified when creating new route [ 1162.898552][T15343] netlink: 'syz.2.11697': attribute type 1 has an invalid length. [ 1164.603197][T15392] __nla_validate_parse: 9 callbacks suppressed [ 1164.603215][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11714'. [ 1164.620904][T15392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11714'. [ 1164.631314][T15395] xt_ecn: cannot match TCP bits for non-tcp packets [ 1165.049072][T15410] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11719'. [ 1165.058916][T15410] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11719'. [ 1165.068229][T15410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.075364][T15410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.079915][T15404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11716'. [ 1165.082860][T15410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.082993][T15410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.290685][T15404] netlink: 'syz.3.11716': attribute type 1 has an invalid length. [ 1165.323198][T15410] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11719'. [ 1165.374895][T15410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.382199][T15410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.413919][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11716'. [ 1165.432692][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11716'. [ 1165.814964][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11722'. [ 1165.839643][T15438] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11722'. [ 1167.002964][T15481] netlink: 'syz.2.11737': attribute type 5 has an invalid length. [ 1167.550877][T15496] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 1168.005818][T15504] netlink: 'syz.1.11745': attribute type 1 has an invalid length. [ 1168.153452][T15511] netlink: 'syz.1.11745': attribute type 29 has an invalid length. [ 1168.162027][T15511] netlink: 'syz.1.11745': attribute type 29 has an invalid length. [ 1168.923379][T15538] tipc: Enabled bearer , priority 0 [ 1169.127952][T15547] netlink: 'syz.3.11758': attribute type 1 has an invalid length. [ 1169.338815][T15538] syzkaller0: entered promiscuous mode [ 1169.344326][T15538] syzkaller0: entered allmulticast mode [ 1169.350694][T15538] tipc: Resetting bearer [ 1169.751919][ T69] tipc: Resetting bearer [ 1169.758503][T15545] netlink: 'syz.1.11755': attribute type 1 has an invalid length. [ 1169.799771][T15538] bond0: (slave bond_slave_0): Releasing backup interface [ 1169.938020][T15538] bond5: (slave veth0_to_bond): Releasing active interface [ 1169.946622][T15538] bond5: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1170.126847][T15537] tipc: Resetting bearer [ 1170.728357][T15573] netlink: 'syz.2.11765': attribute type 1 has an invalid length. [ 1170.736207][T15573] __nla_validate_parse: 10 callbacks suppressed [ 1170.736217][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11765'. [ 1170.751393][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11765'. [ 1175.693747][T15537] tipc: Disabling bearer [ 1175.720253][T15563] bond1: Unable to set up delay as MII monitoring is disabled [ 1175.729503][T15563] bond1 (unregistering): Released all slaves [ 1175.747047][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11765'. [ 1176.874729][ T50] Bluetooth: hci1: link tx timeout [ 1176.886606][ T50] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1177.045510][T15617] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1177.216445][T15596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1177.687422][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11782'. [ 1178.202119][T15656] xt_cgroup: path and classid specified [ 1178.346850][T15658] netlink: 'syz.3.11787': attribute type 1 has an invalid length. [ 1178.373567][T15658] netlink: 'syz.3.11787': attribute type 4 has an invalid length. [ 1178.381195][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11786'. [ 1178.402130][T15658] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.11787'. [ 1178.637247][T15669] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 1178.806540][T15675] netlink: 'syz.3.11793': attribute type 1 has an invalid length. [ 1179.004867][T15675] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1179.250299][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 1179.286245][T15675] bond10: (slave geneve4): making interface the new active one [ 1179.298481][T15675] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 1179.307475][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11793'. [ 1179.608207][T15703] netlink: 2032 bytes leftover after parsing attributes in process `syz.2.11795'. [ 1179.729900][T15680] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1179.737318][T15703] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1180.045310][T15708] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11797'. [ 1180.238269][T15712] netlink: 'syz.2.11798': attribute type 1 has an invalid length. [ 1180.511234][T15712] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1180.517105][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11799'. [ 1180.530637][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11799'. [ 1180.734123][T15719] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11801'. [ 1180.890712][T15722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11802'. [ 1181.379859][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11809'. [ 1181.388847][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11809'. [ 1181.793383][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11810'. [ 1181.802377][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11810'. [ 1182.680197][T15788] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1182.786832][T15798] openvswitch: netlink: IP tunnel dst address not specified [ 1183.474895][T15807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11825'. [ 1183.643590][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11826'. [ 1183.739304][T15821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.897575][T15820] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11826'. [ 1183.953973][T15831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11828'. [ 1184.365650][T15824] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1184.556653][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11830'. [ 1184.800149][T15846] netlink: 'syz.3.11830': attribute type 3 has an invalid length. [ 1185.477340][T15854] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1185.493049][T15854] bond7 (unregistering): Released all slaves [ 1187.911820][T15897] __nla_validate_parse: 3 callbacks suppressed [ 1187.911886][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11845'. [ 1188.066192][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11845'. [ 1188.752463][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11847'. [ 1188.877520][T15909] netlink: 'syz.4.11843': attribute type 1 has an invalid length. [ 1188.877576][T15909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11843'. [ 1189.074686][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11850'. [ 1189.262880][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11847'. [ 1189.993450][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11852'. [ 1190.253094][T15941] netlink: 'syz.1.11856': attribute type 1 has an invalid length. [ 1190.260943][T15941] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.11856'. [ 1190.465396][ T201] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1191.014148][T15932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1191.678688][T15970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.841189][T15997] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11869'. [ 1193.117688][T16006] netlink: 'syz.3.11874': attribute type 4 has an invalid length. [ 1193.648562][T16015] netlink: 'syz.2.11876': attribute type 1 has an invalid length. [ 1193.660431][T16015] netlink: 'syz.2.11876': attribute type 4 has an invalid length. [ 1193.691993][T16015] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.11876'. [ 1194.578203][T16057] Cannot find del_set index 3 as target [ 1194.788061][T16062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11891'. [ 1194.821365][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11893'. [ 1195.287391][T16073] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11895'. [ 1195.978031][T16102] netlink: 'syz.1.11900': attribute type 1 has an invalid length. [ 1195.987078][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11900'. [ 1196.232948][T16109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1196.518037][T16118] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11908'. [ 1196.625822][T16120] netlink: 'syz.4.11907': attribute type 13 has an invalid length. [ 1197.468470][T16134] mac80211_hwsim hwsim82 syzkaller0: Caught tx_queue_len zero misconfig [ 1197.888734][T16139] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1198.575907][T16158] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11915'. [ 1198.845958][T16162] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11917'. [ 1199.476274][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11920'. [ 1199.728501][T16179] vlan2: entered allmulticast mode [ 1199.734436][T16179] hsr0: entered allmulticast mode [ 1199.739596][T16179] hsr_slave_0: entered allmulticast mode [ 1199.746164][T16179] hsr_slave_1: entered allmulticast mode [ 1199.762123][T16184] lo: Caught tx_queue_len zero misconfig [ 1199.768798][T16184] sch_tbf: burst 21990 is lower than device lo mtu (32783) ! [ 1200.352263][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11927'. [ 1200.428694][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11927'. [ 1200.609664][T16200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1200.644442][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11930'. [ 1201.153737][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11931'. [ 1201.312185][T16223] sctp: [Deprecated]: syz.1.11934 (pid 16223) Use of int in max_burst socket option. [ 1201.312185][T16223] Use struct sctp_assoc_value instead [ 1201.368768][T16225] macvtap1: entered promiscuous mode [ 1201.374315][T16225] macvtap1: entered allmulticast mode [ 1201.614665][T16225] vlan0: entered allmulticast mode [ 1201.619819][T16225] veth0_vlan: entered allmulticast mode [ 1201.673492][T16232] netlink: 'syz.5.11935': attribute type 4 has an invalid length. [ 1201.830938][T16233] netlink: 'syz.5.11935': attribute type 4 has an invalid length. [ 1201.911505][T16235] nbd: must specify at least one socket [ 1202.120931][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11938'. [ 1202.343033][T16238] ip6t_srh: unknown srh invflags 4000 [ 1202.595958][T16238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1202.611549][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11940'. [ 1202.752908][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11940'. [ 1202.852901][T16281] netdevsim netdevsim5 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.861098][T16281] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.876051][T16281] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.887426][T16281] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.993002][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11943'. [ 1203.576232][T16276] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1204.048013][T16294] netlink: 'syz.3.11950': attribute type 1 has an invalid length. [ 1204.461634][T16294] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1204.490381][T16290] veth0_to_bond: left allmulticast mode [ 1204.507274][T16290] veth0_to_bond: left promiscuous mode [ 1204.521600][T16290] bridge1: port 2(veth0_to_bond) entered disabled state [ 1204.804972][ T5645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1204.826620][ T5645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1204.836294][ T5645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1204.844814][ T5645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1204.852905][ T5645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1204.864232][T16290] bond11: (slave veth0_to_bond): making interface the new active one [ 1205.324334][T16290] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1205.347993][T16303] bond11: entered promiscuous mode [ 1205.353527][T16303] veth0_to_bond: entered promiscuous mode [ 1205.359716][T16303] bond11: entered allmulticast mode [ 1205.365770][T16303] veth0_to_bond: entered allmulticast mode [ 1205.523350][T16310] macvlan2: entered promiscuous mode [ 1205.528824][T16310] macvlan2: entered allmulticast mode [ 1205.538417][T16310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1205.570372][T16310] bond11: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1205.958935][T16332] __nla_validate_parse: 1 callbacks suppressed [ 1205.958954][T16332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11959'. [ 1205.974150][T16332] netlink: 13 bytes leftover after parsing attributes in process `syz.2.11959'. [ 1206.028271][T16332] veth1: entered promiscuous mode [ 1206.252374][T16340] netlink: 'syz.2.11961': attribute type 17 has an invalid length. [ 1206.300369][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11961'. [ 1206.325598][T16340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11961'. [ 1206.356575][T16342] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11961'. [ 1206.718820][T16348] mac80211_hwsim hwsim82 syzkaller0: entered promiscuous mode [ 1206.726364][T16348] mac80211_hwsim hwsim82 syzkaller0: entered allmulticast mode [ 1207.060218][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11962'. [ 1207.107385][T16348] tunl0: Caught tx_queue_len zero misconfig [ 1207.116312][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11962'. [ 1207.134179][T16353] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1207.143807][ T5645] Bluetooth: hci6: command tx timeout [ 1207.155293][T16311] vxcan1 speed is unknown, defaulting to 1000 [ 1207.412388][T16353] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11962'. [ 1207.685674][T16355] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1207.892412][T16311] vxcan1 speed is unknown, defaulting to 1000 [ 1208.376429][T16381] netlink: 'syz.4.11969': attribute type 13 has an invalid length. [ 1209.302882][ T5645] Bluetooth: hci6: command tx timeout [ 1209.486821][T16406] bond3: option fail_over_mac: invalid value (16) [ 1209.642170][T16406] bond3 (unregistering): Released all slaves [ 1209.853456][T16410] IPv6: sit3: Disabled Multicast RS [ 1209.860266][T16410] sit3: entered allmulticast mode [ 1210.064720][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.075271][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.523960][T16433] mac80211_hwsim hwsim82 syzkaller0: left promiscuous mode [ 1210.531237][T16433] mac80211_hwsim hwsim82 syzkaller0: left allmulticast mode [ 1211.257949][T16457] sctp: [Deprecated]: syz.4.11986 (pid 16457) Use of int in max_burst socket option. [ 1211.257949][T16457] Use struct sctp_assoc_value instead [ 1211.485004][ T50] Bluetooth: hci6: command tx timeout [ 1211.900141][T16479] netlink: 'syz.3.11989': attribute type 1 has an invalid length. [ 1212.575926][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1212.586227][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.803671][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11991'. [ 1212.920646][T16500] xt_l2tp: unknown flags: 10 [ 1213.694737][ T50] Bluetooth: hci6: command tx timeout [ 1213.711170][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1213.856316][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.074981][T16311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.082121][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.089401][T16311] bridge_slave_0: entered allmulticast mode [ 1214.097206][T16311] bridge_slave_0: entered promiscuous mode [ 1214.105469][T16311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.112580][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.119814][T16311] bridge_slave_1: entered allmulticast mode [ 1214.124012][T16530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12002'. [ 1214.127512][T16311] bridge_slave_1: entered promiscuous mode [ 1214.202201][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11995'. [ 1214.779757][T16525] netlink: 81 bytes leftover after parsing attributes in process `syz.4.12002'. [ 1214.823460][T16525] bond0: Caught tx_queue_len zero misconfig [ 1215.491434][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.502173][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.523616][T16557] IPv6: NLM_F_CREATE should be specified when creating new route [ 1215.532131][T16557] netlink: 'syz.2.12006': attribute type 1 has an invalid length. [ 1215.577101][T16557] netlink: 'syz.2.12006': attribute type 1 has an invalid length. [ 1215.744676][T16557] netlink: 'syz.2.12006': attribute type 2 has an invalid length. [ 1215.760307][T16311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.799225][T16311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.239870][T16568] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1216.669459][T16311] team0: Port device team_slave_0 added [ 1216.678195][T16311] team0: Port device team_slave_1 added [ 1216.945369][T16590] mac80211_hwsim hwsim82 syzkaller0: Caught tx_queue_len zero misconfig [ 1217.397252][T16311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.404230][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.634016][T16311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.663776][T16590] ip6tnl0: Caught tx_queue_len zero misconfig [ 1217.936131][T16311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.944974][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.973370][T16311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.570521][ T48] bridge_slave_1: left allmulticast mode [ 1218.577199][ T48] bridge_slave_1: left promiscuous mode [ 1218.585299][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.605407][ T48] bridge_slave_0: left allmulticast mode [ 1218.611875][ T48] bridge_slave_0: left promiscuous mode [ 1218.618348][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.619943][T16641] netlink: 'syz.2.12020': attribute type 1 has an invalid length. [ 1219.459152][ T48] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 1219.870350][ T48] erspan0 (unregistering): left promiscuous mode [ 1219.995610][ T48] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1221.765500][ T48] bond7 (unregistering): (slave bridge6): Releasing active interface [ 1222.233373][ T48] bond0 (unregistering): Released all slaves [ 1222.246085][ T48] bond1 (unregistering): Released all slaves [ 1222.259391][ T48] bond2 (unregistering): Released all slaves [ 1222.273454][ T48] bond3 (unregistering): Released all slaves [ 1222.287516][ T48] bond4 (unregistering): Released all slaves [ 1222.303948][ T48] bond5 (unregistering): (slave bond6): Releasing active interface [ 1222.313549][ T48] bond5 (unregistering): Released all slaves [ 1222.331123][ T48] bond6 (unregistering): Released all slaves [ 1222.352124][ T48] bond7 (unregistering): Released all slaves [ 1222.371738][ T48] bond8 (unregistering): Released all slaves [ 1222.391583][ T48] bond9 (unregistering): Released all slaves [ 1222.515416][T16311] hsr_slave_0: entered promiscuous mode [ 1222.522169][T16311] hsr_slave_1: entered promiscuous mode [ 1222.529059][T16311] debugfs: 'hsr0' already exists in 'hsr' [ 1222.534810][T16311] Cannot create hsr debugfs directory [ 1222.971124][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1223.731413][T16692] netlink: 'syz.2.12028': attribute type 7 has an invalid length. [ 1223.742065][T16692] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12028'. [ 1223.926686][ T48] : left promiscuous mode [ 1223.931432][T16694] netlink: 'syz.4.12030': attribute type 1 has an invalid length. [ 1223.939262][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12030'. [ 1223.948259][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12030'. [ 1223.957205][T16694] netlink: 'syz.4.12030': attribute type 2 has an invalid length. [ 1223.965024][T16694] netlink: 'syz.4.12030': attribute type 2 has an invalid length. [ 1223.972859][T16694] netlink: 'syz.4.12030': attribute type 2 has an invalid length. [ 1224.174722][T16687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12028'. [ 1224.598829][ T48] : left promiscuous mode [ 1225.029180][T16708] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12034'. [ 1225.341288][T16715] bond10: Removing last ns target with arp_interval on [ 1226.040838][T16734] netem: change failed [ 1226.715272][ T48] tipc: Disabling bearer [ 1226.745310][ T48] tipc: Left network mode [ 1227.520336][T16761] SET target dimension over the limit! [ 1227.597762][T16761] netlink: 'syz.2.12046': attribute type 39 has an invalid length. [ 1228.364146][T26849] block nbd4: Receive control failed (result -110) [ 1228.536422][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12050'. [ 1229.293352][T16802] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.12055'. [ 1231.344276][T16311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1231.516706][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1231.524629][T16311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1231.720234][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1231.940554][T16311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1231.960764][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1232.166865][T16311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1232.186494][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1232.850209][T16311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.037449][T16909] bond12 (unregistering): Released all slaves [ 1233.217508][T16915] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12077'. [ 1233.255082][T16311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.270421][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.277685][T16281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.314369][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.321556][ T9571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.150911][T16969] netlink: 'syz.5.12085': attribute type 16 has an invalid length. [ 1235.171076][T16969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12085'. [ 1235.207587][T16311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.594538][T16311] veth0_vlan: entered promiscuous mode [ 1235.634270][T16311] veth1_vlan: entered promiscuous mode [ 1235.701075][T16311] veth0_macvtap: entered promiscuous mode [ 1235.838598][T16311] veth1_macvtap: entered promiscuous mode [ 1235.915183][T16978] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12088'. [ 1236.056069][T16980] netlink: 'syz.5.12088': attribute type 1 has an invalid length. [ 1236.064037][T16978] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12088'. [ 1236.262806][T16311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.274295][T16311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.459800][ T1020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.480711][ T1020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.545354][T16982] netlink: 'syz.3.12089': attribute type 3 has an invalid length. [ 1236.628890][T16911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.665522][T16911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.993509][T16986] netlink: 830 bytes leftover after parsing attributes in process `syz.5.12091'. [ 1237.727057][ T48] hsr_slave_0: left promiscuous mode [ 1237.733681][ T48] hsr_slave_1: left promiscuous mode [ 1237.740657][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.748769][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.757180][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.935130][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.193066][ T48] veth1_macvtap: left promiscuous mode [ 1238.199472][ T48] veth1_vlan: left promiscuous mode [ 1238.208197][ T48] veth0_vlan: left promiscuous mode [ 1238.937888][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1238.958788][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1239.217904][T17009] geneve0: Caught tx_queue_len zero misconfig [ 1239.317157][T16281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.370079][T16281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.509920][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.528161][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.531854][T17055] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12097'. [ 1239.838195][T17067] netlink: 'syz.1.11956': attribute type 1 has an invalid length. [ 1239.854197][T17067] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11956'. [ 1239.866907][T17067] netlink: 'syz.1.11956': attribute type 1 has an invalid length. [ 1239.889669][T17067] netlink: 11123 bytes leftover after parsing attributes in process `syz.1.11956'. [ 1239.910588][ T48] IPVS: stop unused estimator thread 0... [ 1240.886191][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1240.920346][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1240.928816][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1240.930941][T17112] netlink: 'syz.1.12108': attribute type 11 has an invalid length. [ 1240.961326][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1240.975905][T17112] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12108'. [ 1240.985392][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1241.002581][T17112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12108'. [ 1241.913271][T17148] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12115'. [ 1242.085481][T17110] vxcan1 speed is unknown, defaulting to 1000 [ 1242.245735][T17162] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.12119'. [ 1242.569198][T17180] netlink: 'syz.5.12123': attribute type 12 has an invalid length. [ 1242.595119][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12123'. [ 1242.671072][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12123'. [ 1242.686483][T17110] vxcan1 speed is unknown, defaulting to 1000 [ 1242.693187][T17180] netlink: 'syz.5.12123': attribute type 12 has an invalid length. [ 1242.711105][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12123'. [ 1242.898653][T17196] lo: Caught tx_queue_len zero misconfig [ 1243.064331][T26849] Bluetooth: hci5: command tx timeout [ 1243.096271][T17203] netlink: 120 bytes leftover after parsing attributes in process `syz.1.12128'. [ 1243.130403][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12129'. [ 1243.140667][T17203] netlink: 'syz.1.12128': attribute type 1 has an invalid length. [ 1243.174016][T17203] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12128'. [ 1243.187084][T17206] netlink: 'syz.4.12129': attribute type 30 has an invalid length. [ 1243.199449][T17212] netlink: 'syz.5.12130': attribute type 10 has an invalid length. [ 1243.215595][T17206] netlink: 'syz.4.12129': attribute type 8 has an invalid length. [ 1243.274218][T17212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1243.290110][T17212] team0: Port device netdevsim1 added [ 1243.314760][T17206] veth1_to_team: entered promiscuous mode [ 1243.322271][T17206] gretap0: entered promiscuous mode [ 1243.347083][T17206] hsr2: entered promiscuous mode [ 1243.910835][T17237] bridge_slave_0: default FDB implementation only supports local addresses [ 1243.974668][T17243] netlink: 'syz.5.12138': attribute type 1 has an invalid length. [ 1244.411364][T17110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.419292][T17110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.426832][T17110] bridge_slave_0: entered allmulticast mode [ 1244.435786][T17110] bridge_slave_0: entered promiscuous mode [ 1244.446263][T17110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.470939][T17110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.499999][T17110] bridge_slave_1: entered allmulticast mode [ 1244.511859][T17267] netlink: Unknown conntrack attr (type=2304, max=9) [ 1244.531296][T17110] bridge_slave_1: entered promiscuous mode [ 1244.667879][T17110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.729594][T17110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.077016][T17285] bond0 (unregistering): left promiscuous mode [ 1245.096546][T17285] bond_slave_0: left promiscuous mode [ 1245.102199][T17285] bond_slave_1: left promiscuous mode [ 1245.113222][T17285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.137702][T17285] bond_slave_0: left allmulticast mode [ 1245.142993][T26849] Bluetooth: hci5: command tx timeout [ 1245.158043][T17285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.168578][T17285] bond_slave_1: left allmulticast mode [ 1245.188991][T17285] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1245.200482][T17285] syz_tun: left allmulticast mode [ 1245.210028][T17285] bond0 (unregistering): Released all slaves [ 1245.236013][T17110] team0: Port device team_slave_0 added [ 1245.470929][T17110] team0: Port device team_slave_1 added [ 1245.629987][T17110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.654293][T17110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.686245][T17110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.715263][T17110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.727439][T17110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.756110][T17110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.857504][T17314] netlink: 'syz.1.12154': attribute type 11 has an invalid length. [ 1245.967329][T17110] hsr_slave_0: entered promiscuous mode [ 1245.985885][T17110] hsr_slave_1: entered promiscuous mode [ 1246.006073][T17110] debugfs: 'hsr0' already exists in 'hsr' [ 1246.030170][T17110] Cannot create hsr debugfs directory [ 1246.087220][T17321] __nla_validate_parse: 8 callbacks suppressed [ 1246.087238][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12157'. [ 1246.129537][T17324] vlan0: entered promiscuous mode [ 1246.163906][T17322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1246.164517][T17322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12156'. [ 1246.175351][T17321] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1246.547229][T17345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12161'. [ 1246.845388][T17110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1246.884001][T17110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1246.895927][T17110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.909167][T17110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1247.140219][T17110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1247.151443][T17110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1247.174445][T17110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.186309][T17110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1247.223172][T26849] Bluetooth: hci5: command tx timeout [ 1247.387309][T17110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1247.398308][T17110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1247.409595][T17110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.420633][T17110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1247.445293][T17384] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12169'. [ 1247.445304][T17385] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12169'. [ 1247.483075][T17381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.579153][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1247.614034][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1247.624084][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1247.638544][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1247.646861][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1247.777205][T17110] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1247.789864][T17110] netdevsim netdevsim3  (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1247.822572][T17110] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.847317][T17110] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1247.897297][T17396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.904543][T17396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.912078][T17396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.919312][T17396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.085146][T17412] vxcan0: tx address claim with dest, not broadcast [ 1248.134644][T17412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12175'. [ 1248.436422][T17418] syzkaller0: entered promiscuous mode [ 1248.442062][T17418] syzkaller0: entered allmulticast mode [ 1248.460471][T17424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12179'. [ 1248.470466][T16602] IPVS: starting estimator thread 0... [ 1248.483688][T17424] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1248.569173][T17392] vxcan1 speed is unknown, defaulting to 1000 [ 1248.585145][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12180'. [ 1248.595150][T17426] IPVS: using max 27 ests per chain, 64800 per kthread [ 1248.602143][T17428] netlink: 'syz.1.12180': attribute type 8 has an invalid length. [ 1248.610131][T17110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1248.648538][T17110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1248.717638][T17110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1248.745348][T17110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1248.775442][T17110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1248.813040][T17110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.838689][T17110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1248.884483][T17110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1248.991491][T17434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.017926][T17434] batadv_slave_1: entered promiscuous mode [ 1249.063197][T17437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12183'. [ 1249.093787][T17392] vxcan1 speed is unknown, defaulting to 1000 [ 1249.303552][T26849] Bluetooth: hci5: command tx timeout [ 1249.353977][T17110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.399035][T17110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.439021][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.446253][T16281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.495513][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.502732][T16281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.507225][T17452] netlink: 'syz.5.12186': attribute type 21 has an invalid length. [ 1249.540682][T17452] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12186'. [ 1249.582925][T17452] netlink: 'syz.5.12186': attribute type 5 has an invalid length. [ 1249.603359][T17452] netlink: 'syz.5.12186': attribute type 6 has an invalid length. [ 1249.703615][T26849] Bluetooth: hci4: command tx timeout [ 1249.737472][T17456] xt_limit: Overflow, try lower: 271964/0 [ 1250.250514][T17392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.288935][T17392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.313314][T17392] bridge_slave_0: entered allmulticast mode [ 1250.327936][T17392] bridge_slave_0: entered promiscuous mode [ 1250.354719][T17392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.364621][T17392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.372012][T17392] bridge_slave_1: entered allmulticast mode [ 1250.390674][T17392] bridge_slave_1: entered promiscuous mode [ 1250.487059][T17485] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1250.526676][T17485] bond3 (unregistering): Released all slaves [ 1250.547929][T17492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.614881][T17392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.630061][T17392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.696442][T17110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.775891][T17392] team0: Port device team_slave_0 added [ 1250.789245][T17392] team0: Port device team_slave_1 added [ 1250.850496][T17392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.857814][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.900738][T17392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.937277][T17392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.944738][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.976285][T17392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.089242][T17510] lo: entered promiscuous mode [ 1251.107569][T17510] tunl0: entered promiscuous mode [ 1251.116210][T17510] gre0: entered promiscuous mode [ 1251.141126][T17510] gretap0: entered promiscuous mode [ 1251.170745][T17510] erspan0: entered promiscuous mode [ 1251.180297][T17510] ip_vti0: entered promiscuous mode [ 1251.276183][T17392] hsr_slave_0: entered promiscuous mode [ 1251.291957][T17392] hsr_slave_1: entered promiscuous mode [ 1251.305629][T17392] debugfs: 'hsr0' already exists in 'hsr' [ 1251.319845][T17392] Cannot create hsr debugfs directory [ 1251.331786][T17110] veth0_vlan: entered promiscuous mode [ 1251.428297][T17522] __nla_validate_parse: 2 callbacks suppressed [ 1251.428313][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12203'. [ 1251.435288][T17110] veth1_vlan: entered promiscuous mode [ 1251.535067][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12204'. [ 1251.618575][T17110] veth0_macvtap: entered promiscuous mode [ 1251.781016][T17110] veth1_macvtap: entered promiscuous mode [ 1251.783629][T26849] Bluetooth: hci4: command tx timeout [ 1251.809873][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.819828][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.846032][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.866144][ T201] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1251.949009][T17110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.025314][T17110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.119329][ T7871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.136708][ T7871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.150356][ T7871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.161180][ T7871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.388762][T17545] netlink: 'syz.5.12211': attribute type 2 has an invalid length. [ 1252.458585][T16282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.468377][T16282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.476731][T17392] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1252.516206][T17392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1252.558548][T17392] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1252.584857][T17392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1252.624126][T17392] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1252.635540][T17392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1252.654163][T17392] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1252.676245][T17392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1252.708732][T16282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.749115][T16282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.792284][T17571] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12217'. [ 1252.836376][T17571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1252.881687][T17573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1252.889625][T17572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1252.943446][T17575] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1252.945047][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12104'. [ 1252.976509][T17392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.979165][T17575] netlink: 'syz.5.12218': attribute type 2 has an invalid length. [ 1253.031471][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12104'. [ 1253.050851][T17392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.087927][T17581] netlink: 232 bytes leftover after parsing attributes in process `syz.3.12104'. [ 1253.096409][T17580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12219'. [ 1253.112003][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.119183][T16281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.148335][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.155565][T16281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.166537][T17580] netlink: 288 bytes leftover after parsing attributes in process `syz.1.12219'. [ 1253.198608][T17584] x_tables: duplicate underflow at hook 1 [ 1253.253776][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12219'. [ 1253.531888][T17601] netlink: 'syz.3.12223': attribute type 1 has an invalid length. [ 1253.541407][T17601] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12223'. [ 1253.563859][T17601] netlink: 'syz.3.12223': attribute type 2 has an invalid length. [ 1253.758434][T17392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.822582][T17620] netlink: 'syz.3.12226': attribute type 1 has an invalid length. [ 1253.863298][T26849] Bluetooth: hci4: command tx timeout [ 1254.826759][T17628] kthread_run failed with err -4 [ 1255.037683][T17644] netlink: 'syz.5.12233': attribute type 3 has an invalid length. [ 1255.054798][T17392] veth0_vlan: entered promiscuous mode [ 1255.087116][T17392] veth1_vlan: entered promiscuous mode [ 1255.218177][T17392] veth0_macvtap: entered promiscuous mode [ 1255.256303][T17392] veth1_macvtap: entered promiscuous mode [ 1255.309371][T17659] netlink: 'syz.1.12238': attribute type 12 has an invalid length. [ 1255.318330][T17392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.330855][T17392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.377470][T17659] bond1: option primary_reselect: invalid value (255) [ 1255.411928][T17659] bond1 (unregistering): Released all slaves [ 1255.551135][ T201] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.568705][ T201] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.611674][ T201] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.635996][ T201] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.703478][T16281] wlan1: Trigger new scan to find an IBSS to join [ 1255.896318][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.924830][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.943086][T26849] Bluetooth: hci4: command tx timeout [ 1255.952053][T17682] erspan0: left promiscuous mode [ 1255.966940][T17682] erspan0: entered allmulticast mode [ 1256.015322][T15162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.091275][T15162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.575317][T17704] __nla_validate_parse: 8 callbacks suppressed [ 1256.575334][T17704] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12170'. [ 1256.594619][T17699] netlink: 'syz.3.12246': attribute type 10 has an invalid length. [ 1256.638055][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12170'. [ 1256.656491][T17699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.685942][T17699] bond0: (slave team0): Enslaving as an active interface with an up link [ 1256.831802][T17713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1256.928846][T17723] netlink: 80 bytes leftover after parsing attributes in process `syz.6.12252'. [ 1257.048940][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12254'. [ 1257.124451][T17742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12253'. [ 1257.913917][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12267'. [ 1258.490879][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12271'. [ 1258.527538][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12271'. [ 1258.634118][T17807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12272'. [ 1258.643947][T17798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1258.709589][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12272'. [ 1258.768160][T17810] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1258.840256][T17801] bond1 (unregistering): Released all slaves [ 1258.905620][T17815] nbd: must specify at least one socket [ 1259.001253][T17817] vlan2: entered promiscuous mode [ 1259.007892][T17817] bridge0: entered promiscuous mode [ 1259.165146][T17826] netlink: 'syz.6.12278': attribute type 1 has an invalid length. [ 1259.308886][T17834] netlink: 'syz.1.12283': attribute type 9 has an invalid length. [ 1259.627481][T17847] veth0_to_bridge: entered promiscuous mode [ 1259.650657][T17846] veth0_to_bridge: left promiscuous mode [ 1260.743010][ T9560] wlan1: Trigger new scan to find an IBSS to join [ 1261.644913][ T69] wlan1: Creating new IBSS network, BSSID 82:ab:b6:7d:9a:ef [ 1261.684707][T17952] tipc: Started in network mode [ 1261.692801][T17952] tipc: Node identity 3a6345dc1ba8, cluster identity 4711 [ 1261.701313][T17952] tipc: Enabled bearer , priority 0 [ 1261.713486][T17952] syzkaller0: entered promiscuous mode [ 1261.719123][T17952] syzkaller0: entered allmulticast mode [ 1261.749420][T17952] tipc: Enabled bearer , priority 10 [ 1261.776583][T17952] tipc: Resetting bearer [ 1261.787803][T17951] tipc: Resetting bearer [ 1261.870990][T17951] tipc: Disabling bearer [ 1261.910512][T17955] netlink: 'syz.1.12317': attribute type 29 has an invalid length. [ 1261.928931][T17959] __nla_validate_parse: 10 callbacks suppressed [ 1261.928949][T17959] netlink: 548 bytes leftover after parsing attributes in process `syz.1.12317'. [ 1261.962696][T17958] netlink: 'syz.1.12317': attribute type 29 has an invalid length. [ 1262.067134][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1262.080800][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1262.089327][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1262.098938][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1262.110577][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1262.438050][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12320'. [ 1262.472151][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12322'. [ 1262.517229][T17972] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1262.555950][T17972] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1262.565138][T17972] gretap1: entered promiscuous mode [ 1262.570384][T17972] gretap1: entered allmulticast mode [ 1262.583902][T17975] netlink: 1116 bytes leftover after parsing attributes in process `syz.3.12321'. [ 1262.610031][T17970] syzkaller0: entered promiscuous mode [ 1262.626474][T17970] syzkaller0: entered allmulticast mode [ 1262.946258][T17984] bond1: Removing last ns target with arp_interval on [ 1263.122376][T17986] bond1: entered promiscuous mode [ 1263.170382][T17986] bond1: entered allmulticast mode [ 1263.183627][T17986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1263.206424][T16602] tipc: Node number set to 566969820 [ 1263.277670][T17960] vxcan1 speed is unknown, defaulting to 1000 [ 1263.282229][T18011] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12333'. [ 1263.405543][T18015] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12334'. [ 1263.514311][T18020] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1263.826908][T18036] netlink: 156 bytes leftover after parsing attributes in process `syz.6.12339'. [ 1263.861188][T18036] netlink: 'syz.6.12339': attribute type 1 has an invalid length. [ 1263.884154][T18036] netlink: 244 bytes leftover after parsing attributes in process `syz.6.12339'. [ 1263.890649][T17960] vxcan1 speed is unknown, defaulting to 1000 [ 1263.978638][T18041] netlink: 'syz.3.12341': attribute type 1 has an invalid length. [ 1264.193987][T26849] Bluetooth: hci7: command tx timeout [ 1264.651817][T18074] netlink: 'syz.1.12350': attribute type 1 has an invalid length. [ 1264.864551][ T30] audit: type=1107 audit(1780471759.757:31): pid=18087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 1265.347142][T18117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12362'. [ 1265.486407][T18124] tipc: Started in network mode [ 1265.498554][T18124] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 1265.521373][T18124] tipc: Enabled bearer , priority 10 [ 1265.617786][T17960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.626405][T17960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.635367][T17960] bridge_slave_0: entered allmulticast mode [ 1265.651370][T17960] bridge_slave_0: entered promiscuous mode [ 1265.674982][T17960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.692283][T17960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.701752][T17960] bridge_slave_1: entered allmulticast mode [ 1265.713173][T17960] bridge_slave_1: entered promiscuous mode [ 1265.799395][T18142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1265.802205][T17960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.806669][T18142] IPv6: NLM_F_CREATE should be set when creating new route [ 1265.806722][T18142] IPv6: NLM_F_CREATE should be set when creating new route [ 1265.806744][T18142] IPv6: NLM_F_CREATE should be set when creating new route [ 1265.819748][T18142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1265.836134][T17960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.841621][T18146] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1266.038178][T17960] team0: Port device team_slave_0 added [ 1266.058184][T17960] team0: Port device team_slave_1 added [ 1266.076053][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12370'. [ 1266.122417][T17960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.130194][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.158930][T17960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.174887][T17960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.182027][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.219917][T17960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.242407][T18159] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1266.263388][T26849] Bluetooth: hci7: command 0x041b tx timeout [ 1266.263624][T18159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.276782][T18159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.455919][T17960] hsr_slave_0: entered promiscuous mode [ 1266.467899][T18170] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1266.488003][T17960] hsr_slave_1: entered promiscuous mode [ 1266.504510][T17960] debugfs: 'hsr0' already exists in 'hsr' [ 1266.516376][T17960] Cannot create hsr debugfs directory [ 1266.644402][T16570] tipc: Node number set to 4269801492 [ 1266.675602][T18182] bond0: Error: CAN devices cannot be enslaved [ 1267.054526][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12381'. [ 1267.083885][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12381'. [ 1267.095842][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12381'. [ 1267.509348][T17960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1267.514611][T18207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12384'. [ 1267.530073][T17960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1267.544714][T17960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1267.556926][T17960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1267.565652][T17960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1267.578095][T17960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1267.586200][T17960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1267.588297][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12385'. [ 1267.608676][T17960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1267.631579][T18209] tcf_pedit_act: 7 callbacks suppressed [ 1267.631653][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.645853][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.652339][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.658887][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.665425][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.671929][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.678477][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.685022][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.691542][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.698084][T18209] tc action pedit offset -2147483648 out of bounds [ 1267.704630][T18209] 0: reclassify loop, rule prio 0, protocol 800 [ 1267.760345][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12385'. [ 1267.916888][T17960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.949190][T17960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.966808][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.974039][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.995745][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.003006][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.309702][T18234] team0: No ports can be present during mode change [ 1268.346636][ T50] Bluetooth: hci7: command 0x041b tx timeout [ 1268.778212][T18259] openvswitch: netlink: Key type 8198 is out of range max 32 [ 1268.881662][T18262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1269.048520][T18269] IPv6: NLM_F_CREATE should be specified when creating new route [ 1269.116070][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12400'. [ 1269.147115][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12400'. [ 1269.218940][T17960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.916297][T18304] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12410'. [ 1269.928277][T18304] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12410'. [ 1270.050239][T17960] veth0_vlan: entered promiscuous mode [ 1270.114070][T17960] veth1_vlan: entered promiscuous mode [ 1270.154376][T18313] lo: entered promiscuous mode [ 1270.175528][T18313] tunl0: entered promiscuous mode [ 1270.211544][T18313] gre0: entered promiscuous mode [ 1270.262175][T18313] gretap0: entered promiscuous mode [ 1270.379014][T18313] erspan0: entered promiscuous mode [ 1270.405198][T18313] ip_vti0: entered promiscuous mode [ 1270.423237][ T50] Bluetooth: hci7: command 0x041b tx timeout [ 1270.536787][T18327] sctp: [Deprecated]: syz.5.12417 (pid 18327) Use of int in max_burst socket option. [ 1270.536787][T18327] Use struct sctp_assoc_value instead [ 1270.559829][T18327] openvswitch: netlink: Flow actions attr not present in new flow. [ 1270.588106][T17960] veth0_macvtap: entered promiscuous mode [ 1270.626003][T17960] veth1_macvtap: entered promiscuous mode [ 1270.692083][T17960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.750062][T17960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.790288][T16281] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.817533][T16281] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.851040][T16281] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.895898][T16281] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.211959][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.250130][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.366051][T16281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.395555][T16281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.729701][T18376] IPv6: NLM_F_CREATE should be specified when creating new route [ 1271.759313][T18374] gre1: entered promiscuous mode [ 1271.765097][T18376] IPv6: Can't replace route, no match found [ 1271.774384][T18386] netlink: 'syz.5.12434': attribute type 30 has an invalid length. [ 1271.781375][T18374] gre1: entered allmulticast mode [ 1272.148128][T18398] __nla_validate_parse: 8 callbacks suppressed [ 1272.148147][T18398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12437'. [ 1272.276584][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12440'. [ 1272.466543][T18414] : entered promiscuous mode [ 1272.503208][ T50] Bluetooth: hci7: command 0x041b tx timeout [ 1272.615830][T18403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12437'. [ 1272.680485][T18403] nbd: device at index 64 is going down [ 1272.809761][T16759] udevd[16759]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1272.850699][T16759] udevd[16759]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1273.241970][T18461] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1273.469488][T18472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12456'. [ 1273.507407][T18472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12456'. [ 1273.641048][T18480] Unsupported ieee802154 address type: 0 [ 1273.827241][T18494] netlink: 'syz.1.12465': attribute type 15 has an invalid length. [ 1273.856195][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12465'. [ 1273.875051][T18496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12466'. [ 1273.895013][T18498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12467'. [ 1273.927963][T16281] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1273.927989][T18494] netlink: 'syz.1.12465': attribute type 15 has an invalid length. [ 1273.944889][T16281] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1273.947043][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12465'. [ 1273.981803][T16281] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1274.018394][T16281] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1274.101588][T18504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1274.175615][T18506] tipc: Started in network mode [ 1274.191246][T18506] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1274.216042][T18506] tipc: Enabled bearer , priority 24 [ 1274.225276][T18511] netlink: 'syz.3.12472': attribute type 1 has an invalid length. [ 1274.299287][T18511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1274.315308][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12471'. [ 1274.331682][T18512] bond1: (slave veth0_to_bond): making interface the new active one [ 1274.341382][T18512] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1274.616946][T18530] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1275.005317][T18532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1275.332574][T16580] tipc: Node number set to 10136234 [ 1275.412077][T18557] can: request_module (can-proto-0) failed. [ 1275.599214][T18568] netlink: 'syz.6.12490': attribute type 1 has an invalid length. [ 1275.745630][T18573] bond2: (slave ip6erspan0): making interface the new active one [ 1275.758351][T18573] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1275.860009][T18580] syzkaller0: entered promiscuous mode [ 1275.881927][T18580] syzkaller0: entered allmulticast mode [ 1276.119520][T18590] syzkaller1: entered promiscuous mode [ 1276.141410][T18590] syzkaller1: entered allmulticast mode [ 1276.434664][T18608] netlink: 'syz.3.12505': attribute type 1 has an invalid length. [ 1276.894033][ T30] audit: type=1800 audit(1780471771.787:32): pid=18631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12512" name="memory.events" dev="tmpfs" ino=464 res=0 errno=0 [ 1277.176760][T18645] __nla_validate_parse: 7 callbacks suppressed [ 1277.176776][T18645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12515'. [ 1277.272245][T18653] mac80211_hwsim hwsim111 syzkaller0: entered promiscuous mode [ 1277.288353][T18653] mac80211_hwsim hwsim111 syzkaller0: entered allmulticast mode [ 1277.437844][T18658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12518'. [ 1277.480373][T18658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12518'. [ 1277.759412][T18670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12522'. [ 1277.797987][T18675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12522'. [ 1277.805976][T18676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 1277.917380][T18681] bond0: Error: Cannot enslave bond to itself. [ 1278.049537][T18685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12526'. [ 1278.093998][T18684] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12526'. [ 1278.242043][T18690] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 1278.259126][T18690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1278.555098][T18709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12534'. [ 1278.596745][T18711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12534'. [ 1279.029242][T18748] netlink: 'syz.3.12542': attribute type 1 has an invalid length. [ 1279.227365][T18757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1279.389032][T18764] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12548'. [ 1281.577925][T18712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1282.218907][T18802] x_tables: unsorted entry at hook 1 [ 1282.246153][T18801] x_tables: unsorted entry at hook 1 [ 1282.484807][T18820] syz_tun: entered allmulticast mode [ 1282.546806][T18819] syz_tun: left allmulticast mode [ 1282.554979][T18824] netlink: 'syz.1.12564': attribute type 5 has an invalid length. [ 1282.554987][T18826] __nla_validate_parse: 3 callbacks suppressed [ 1282.554998][T18826] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12566'. [ 1282.708833][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12566'. [ 1282.961607][T18837] netlink: 294 bytes leftover after parsing attributes in process `syz.1.12569'. [ 1282.984634][T18837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1283.014430][T18836] netlink: 'syz.1.12569': attribute type 1 has an invalid length. [ 1283.045216][T18836] netlink: 'syz.1.12569': attribute type 1 has an invalid length. [ 1283.109337][T18840] tipc: Failed to obtain node identity [ 1283.116762][T18840] tipc: Enabling of bearer rejected, failed to enable media [ 1283.347212][T18858] vet: renamed from veth0_vlan (while UP) [ 1283.527592][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12576'. [ 1283.799161][T18876] openvswitch: netlink: Invalid VLAN frame [ 1283.937389][T18878] tipc: Enabling of bearer rejected, failed to enable media [ 1284.041453][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12582'. [ 1284.410473][T18900] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1284.752725][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12593'. [ 1284.790189][T18917] netlink: 92 bytes leftover after parsing attributes in process `syz.5.12593'. [ 1284.835842][T18917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.918846][T18917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.001806][T18940] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1285.002155][T18929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1285.120513][T16596] IPVS: starting estimator thread 0... [ 1285.136563][T18950] IPVS: ip_vs_add_dest(): server weight less than zero [ 1285.168946][T18950] netlink: 'syz.3.12600': attribute type 13 has an invalid length. [ 1285.237231][T18950] gretap0: refused to change device tx_queue_len [ 1285.246152][T18951] IPVS: using max 35 ests per chain, 84000 per kthread [ 1285.261734][T18950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1285.537697][T18971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12607'. [ 1285.757998][T18983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12610'. [ 1286.007424][T19000] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1286.123477][T19006] xt_hashlimit: size too large, truncated to 1048576 [ 1286.180078][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12617'. [ 1286.772700][T19026] openvswitch: netlink: Flow actions attr not present in new flow. [ 1286.930128][T19034] netlink: 'syz.1.12625': attribute type 12 has an invalid length. [ 1286.990741][ T30] audit: type=1800 audit(1780471781.877:33): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12626" name="memory.events" dev="tmpfs" ino=426 res=0 errno=0 [ 1287.016684][ T30] audit: type=1804 audit(1780471781.877:34): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.12626" name="/newroot/80/memory.events" dev="tmpfs" ino=426 res=1 errno=0 [ 1287.054918][T19034] bond2: option primary_reselect: invalid value (255) [ 1287.067252][T19034] bond2 (unregistering): Released all slaves [ 1287.131117][T19040] netlink: 'syz.6.12627': attribute type 1 has an invalid length. [ 1287.306184][T19044] netlink: 'syz.5.12628': attribute type 1 has an invalid length. [ 1287.817482][T19066] nbd: couldn't find device at index 2958377 [ 1287.967276][T19073] syzkaller1: entered promiscuous mode [ 1287.974258][T19073] syzkaller1: entered allmulticast mode [ 1288.158698][T19081] __nla_validate_parse: 6 callbacks suppressed [ 1288.158715][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12643'. [ 1288.357648][T19089] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1288.634887][T19109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12652'. [ 1288.686499][T26849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1288.701473][T26849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1288.722663][T26849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1288.736461][T26849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1288.746319][T26849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1288.822358][T19113] GUP no longer grows the stack in syz.5.12651 (19113): 200000003000-20000000a000 (200000001000) [ 1288.870118][T19113] CPU: 0 UID: 0 PID: 19113 Comm: syz.5.12651 Not tainted syzkaller #0 PREEMPT(full) [ 1288.870144][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1288.870156][T19113] Call Trace: [ 1288.870164][T19113] [ 1288.870174][T19113] dump_stack_lvl+0xe8/0x150 [ 1288.870361][T19113] __get_user_pages+0x2378/0x2730 [ 1288.870462][T19113] ? __gup_longterm_locked+0xc4e/0x1630 [ 1288.870505][T19113] ? down_read_killable+0x1bb/0x340 [ 1288.870634][T19113] __gup_longterm_locked+0xdcf/0x1630 [ 1288.870661][T19113] ? lock_acquire+0x106/0x350 [ 1288.870731][T19113] gup_fast_fallback+0x1d84/0x20d0 [ 1288.870786][T19113] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1288.870810][T19113] ? is_valid_gup_args+0x11f/0x200 [ 1288.870835][T19113] ? get_user_pages_fast+0x4d/0xb0 [ 1288.870858][T19113] __iov_iter_get_pages_alloc+0x370/0xa10 [ 1288.870978][T19113] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1288.871040][T19113] iov_iter_get_pages2+0x5e/0xa0 [ 1288.871065][T19113] __se_sys_vmsplice+0x7c7/0x1620 [ 1288.871109][T19113] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1288.871132][T19113] ? __pfx_futex_wait+0x10/0x10 [ 1288.871262][T19113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.871283][T19113] do_syscall_64+0x174/0x580 [ 1288.871301][T19113] ? trace_irq_disable+0x3b/0x140 [ 1288.871342][T19113] ? clear_bhb_loop+0x40/0x90 [ 1288.871364][T19113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.871381][T19113] RIP: 0033:0x7f023099ce59 [ 1288.871401][T19113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.871415][T19113] RSP: 002b:00007f022ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1288.871453][T19113] RAX: ffffffffffffffda RBX: 00007f0230c15fa0 RCX: 00007f023099ce59 [ 1288.871466][T19113] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1288.871477][T19113] RBP: 00007f0230a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1288.871488][T19113] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1288.871499][T19113] R13: 00007f0230c16038 R14: 00007f0230c15fa0 R15: 00007ffcb5bc0008 [ 1288.871531][T19113] [ 1289.116964][T19113] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1289.524561][T19141] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.12658'. [ 1289.579117][T19110] vxcan1 speed is unknown, defaulting to 1000 [ 1289.915610][T19156] netlink: 'syz.6.12664': attribute type 1 has an invalid length. [ 1289.990692][T19156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1290.059308][T19161] bond3: (slave veth0_to_bond): making interface the new active one [ 1290.080069][T19161] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1290.145953][T19110] vxcan1 speed is unknown, defaulting to 1000 [ 1290.534634][T19181] ip6t_srh: unknown srh invflags 4000 [ 1290.820972][T19200] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1290.828767][T26849] Bluetooth: hci8: command tx timeout [ 1290.858630][T19203] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 1290.870795][T19200] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1291.109993][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12679'. [ 1291.279305][T19230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12683'. [ 1291.283531][T19221] netlink: 'syz.3.12682': attribute type 5 has an invalid length. [ 1291.333417][T19232] sctp: [Deprecated]: syz.5.12683 (pid 19232) Use of int in maxseg socket option. [ 1291.333417][T19232] Use struct sctp_assoc_value instead [ 1291.353961][T19233] netlink: 'syz.6.12681': attribute type 10 has an invalid length. [ 1291.424224][T19233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.458964][T19233] bond0: (slave team0): Enslaving as an active interface with an up link [ 1291.537941][ T9571] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 1291.575916][ T9571] bond1: now running without any active interface! [ 1291.708996][T15162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1291.876743][T19245] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1291.940135][T19253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1291.951974][T19110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.966827][T19110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.974649][T19110] bridge_slave_0: entered allmulticast mode [ 1291.983444][T19110] bridge_slave_0: entered promiscuous mode [ 1291.992216][T19110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.000148][T19110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.007689][T19110] bridge_slave_1: entered allmulticast mode [ 1292.018402][T19110] bridge_slave_1: entered promiscuous mode [ 1292.057949][T19110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.103679][T19110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.157340][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12692'. [ 1292.242334][T19110] team0: Port device team_slave_0 added [ 1292.329809][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12697'. [ 1292.409649][T19270] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1292.456854][T19270] bond2 (unregistering): Released all slaves [ 1292.532372][T19110] team0: Port device team_slave_1 added [ 1292.556136][T19285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12701'. [ 1292.757303][T19110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.783818][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.854179][T19304] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12702'. [ 1292.856649][T19110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.878276][T19302] netlink: 'syz.3.12704': attribute type 8 has an invalid length. [ 1292.892115][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12703'. [ 1292.904214][T26849] Bluetooth: hci8: command tx timeout [ 1292.949017][T19110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.978983][T19294] netlink: 'syz.1.12703': attribute type 2 has an invalid length. [ 1293.006200][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.023171][T19294] netlink: 'syz.1.12703': attribute type 2 has an invalid length. [ 1293.050899][T19110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.079665][T19302] veth1_to_team: entered promiscuous mode [ 1293.087147][T19302] gretap0: entered promiscuous mode [ 1293.094214][T19302] veth1_to_team: left promiscuous mode [ 1293.100814][T19302] gretap0: left promiscuous mode [ 1293.256701][T19110] hsr_slave_0: entered promiscuous mode [ 1293.279001][T19110] hsr_slave_1: entered promiscuous mode [ 1293.293676][T19110] debugfs: 'hsr0' already exists in 'hsr' [ 1293.316837][T19110] Cannot create hsr debugfs directory [ 1294.233816][T19353] veth1_macvtap: left promiscuous mode [ 1294.251157][T19353] macsec0: entered promiscuous mode [ 1294.274671][T19353] macsec0: entered allmulticast mode [ 1294.307995][T19345] veth1_macvtap: entered promiscuous mode [ 1294.315082][T19345] veth1_macvtap: entered allmulticast mode [ 1294.330401][T19345] macsec0: left promiscuous mode [ 1294.338804][T19345] macsec0: left allmulticast mode [ 1294.352064][T19345] veth1_macvtap: left allmulticast mode [ 1294.361277][T19361] sctp: [Deprecated]: syz.3.12714 (pid 19361) Use of int in max_burst socket option. [ 1294.361277][T19361] Use struct sctp_assoc_value instead [ 1294.630095][T19369] __nla_validate_parse: 2 callbacks suppressed [ 1294.630113][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12716'. [ 1294.861202][T19110] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1294.885757][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1294.906273][T19110] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1294.928140][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1294.983345][T26849] Bluetooth: hci8: command tx timeout [ 1295.087463][T19110] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1295.134249][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1295.151102][T19110] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1295.195209][T19110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1295.227923][T19393] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12722'. [ 1295.574590][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12724'. [ 1295.606996][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12723'. [ 1295.631316][T19409] veth1_macvtap: left promiscuous mode [ 1295.823495][T19425] netlink: 'syz.1.12727': attribute type 1 has an invalid length. [ 1295.850862][T19425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1295.857040][T19110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.858168][T19425] IPv6: NLM_F_CREATE should be set when creating new route [ 1295.928126][T19429] netlink: 'syz.1.12727': attribute type 1 has an invalid length. [ 1295.951343][T19429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1295.957639][T19110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.018619][T17685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.025837][T17685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.144012][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.151206][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.063573][T26849] Bluetooth: hci8: command tx timeout [ 1297.217886][T19110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.659890][T19110] veth0_vlan: entered promiscuous mode [ 1297.680938][T19110] veth1_vlan: entered promiscuous mode [ 1297.741757][T19110] veth0_macvtap: entered promiscuous mode [ 1297.755795][T19110] veth1_macvtap: entered promiscuous mode [ 1297.780233][T19110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.816876][T19110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.873547][ T6160] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.887456][ T6160] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.897186][ T6160] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.911686][ T6160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.788487][T19425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1299.098751][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.135349][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.158999][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12738'. [ 1299.306593][ T9560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.347665][ T9560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.941092][T19613] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1300.082980][T19611] xt_CT: No such helper "pptp" [ 1300.515740][T19642] tipc: Started in network mode [ 1300.536910][T19642] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 1300.567219][T19642] tipc: Enabled bearer , priority 10 [ 1300.647813][T19652] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12757'. [ 1300.685300][T19652] netlink: 320 bytes leftover after parsing attributes in process `syz.6.12757'. [ 1301.015558][T19671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12759'. [ 1301.347164][T19687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1301.666557][T19705] netlink: 104 bytes leftover after parsing attributes in process `syz.5.12769'. [ 1301.693881][T16592] tipc: Node number set to 4269801492 [ 1302.108601][T26849] Bluetooth: hci1: command 0x0406 tx timeout [ 1302.440156][T19741] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12776'. [ 1302.678817][T19753] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1302.916599][T19760] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 1303.118792][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12787'. [ 1303.266417][T19775] netlink: 212324 bytes leftover after parsing attributes in process `syz.8.12788'. [ 1303.298505][T19775] netlink: 212324 bytes leftover after parsing attributes in process `syz.8.12788'. [ 1303.330337][T19780] netlink: 'syz.6.12789': attribute type 11 has an invalid length. [ 1303.555299][T19784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1303.567072][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12793'. [ 1304.093896][T19817] netlink: 'syz.3.12801': attribute type 1 has an invalid length. [ 1304.319681][T19823] netlink: 220 bytes leftover after parsing attributes in process `syz.8.12804'. [ 1304.417898][T19834] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1304.494467][T19834] bond4: (slave lo): Enslaving as an active interface with an up link [ 1304.521341][T19834] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1305.485496][T19849] syzkaller0: entered promiscuous mode [ 1305.526540][T19849] syzkaller0: entered allmulticast mode [ 1305.620660][T19875] netlink: 'syz.6.12819': attribute type 10 has an invalid length. [ 1305.685441][T19885] bond1: option min_links: invalid value (18446744073709551614) [ 1305.693573][T19885] bond1: option min_links: allowed values 0 - 2147483647 [ 1305.712246][T19885] bond1 (unregistering): Released all slaves [ 1306.226506][T19909] __nla_validate_parse: 4 callbacks suppressed [ 1306.226524][T19909] netlink: 144 bytes leftover after parsing attributes in process `syz.6.12830'. [ 1306.292853][T19916] netlink: 'syz.1.12831': attribute type 1 has an invalid length. [ 1306.350257][T19916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.12831'. [ 1306.404404][T19916] netlink: 'syz.1.12831': attribute type 1 has an invalid length. [ 1306.409064][T19921] netlink: 'syz.6.12833': attribute type 12 has an invalid length. [ 1306.436841][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12831'. [ 1306.459290][T19921] netlink: 'syz.6.12833': attribute type 29 has an invalid length. [ 1306.477677][T19921] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12833'. [ 1306.518702][T19921] netlink: 59 bytes leftover after parsing attributes in process `syz.6.12833'. [ 1306.778339][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12837'. [ 1306.953738][T19944] netlink: 277 bytes leftover after parsing attributes in process `syz.1.12841'. [ 1307.013823][T19946] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12842'. [ 1307.088469][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12843'. [ 1328.561353][T19967] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12845'. [ 1329.566655][T20007] netlink: 'syz.6.12860': attribute type 1 has an invalid length. [ 1329.600999][T20007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1329.769134][T20016] netlink: 'syz.6.12866': attribute type 1 has an invalid length. [ 1329.780143][T20016] netlink: 280 bytes leftover after parsing attributes in process `syz.6.12866'. [ 1330.291230][T20036] netlink: 'syz.8.12870': attribute type 3 has an invalid length. [ 1330.299954][T20033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12868'. [ 1330.319481][T20036] netlink: 244 bytes leftover after parsing attributes in process `syz.8.12870'. [ 1330.338243][T20033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12868'. [ 1330.360389][T20034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12868'. [ 1330.416870][T20045] netlink: 'syz.8.12873': attribute type 1 has an invalid length. [ 1330.459421][T20045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1330.800074][T20059] netlink: 'syz.6.12875': attribute type 13 has an invalid length. [ 1330.833702][T20059] gretap0: refused to change device tx_queue_len [ 1330.840583][T20059] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1330.876767][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12876'. [ 1330.922958][T20058] netlink: 'syz.8.12876': attribute type 30 has an invalid length. [ 1330.931943][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12876'. [ 1330.960613][T20065] netlink: 'syz.8.12876': attribute type 30 has an invalid length. [ 1331.015898][T19573] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.046386][T19573] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.116640][T19573] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.150712][T19573] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.189843][T20074] netlink: 'syz.1.12880': attribute type 1 has an invalid length. [ 1331.381969][T20074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1331.462038][T20076] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1331.605508][T20083] bond2: (slave ip6gretap1): making interface the new active one [ 1331.634530][T20083] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1331.850766][T20096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12885'. [ 1331.897698][T20096] veth0: entered promiscuous mode [ 1331.916498][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12887'. [ 1331.983119][T20096] veth0: left promiscuous mode [ 1332.166740][T20105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1332.220484][T20125] netlink: 'syz.5.12890': attribute type 33 has an invalid length. [ 1332.348843][T20125] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1332.430775][T20125] bond5 (unregistering): Released all slaves [ 1332.596791][T19574] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1332.648166][T20148] : entered promiscuous mode [ 1335.420966][T20138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1335.668939][T20186] __nla_validate_parse: 3 callbacks suppressed [ 1335.668956][T20186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12906'. [ 1335.893366][T20202] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12914'. [ 1335.924670][T20202] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12914'. [ 1335.955184][T20205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1335.982063][T20205] team0: Port device batadv1 added [ 1336.144473][T20216] netlink: 'syz.8.12917': attribute type 21 has an invalid length. [ 1336.179863][T20216] netlink: 128 bytes leftover after parsing attributes in process `syz.8.12917'. [ 1336.199785][T20216] netlink: 3 bytes leftover after parsing attributes in process `syz.8.12917'. [ 1336.381428][T20227] netlink: 277 bytes leftover after parsing attributes in process `syz.6.12922'. [ 1336.420757][T20231] tipc: Enabling of bearer rejected, failed to enable media [ 1336.788665][T20247] IPv6: NLM_F_CREATE should be specified when creating new route [ 1336.928829][T20246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1336.946965][T20245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1337.615076][T20288] netlink: 'syz.6.12939': attribute type 83 has an invalid length. [ 1337.698200][T20288] xt_limit: Overflow, try lower: 271964/0 [ 1337.803527][T20297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12942'. [ 1337.919046][T20303] netlink: 'syz.6.12945': attribute type 6 has an invalid length. [ 1337.941295][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12943'. [ 1337.952187][T26849] Bluetooth: hci6: command 0x0406 tx timeout [ 1337.954033][T20304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12942'. [ 1338.051591][T20299] bond5 (unregistering): Released all slaves [ 1338.357924][T20324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12951'. [ 1338.441235][T20332] bond4: (slave lo): Releasing backup interface [ 1338.461655][T20332] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1338.548543][T20332] bond0: (slave team0): Releasing backup interface [ 1338.596786][T20332] bridge_slave_0: left allmulticast mode [ 1338.621050][T20332] bridge_slave_0: left promiscuous mode [ 1338.631496][T20332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.656999][T20332] bridge_slave_1: left allmulticast mode [ 1338.681748][T20332] bridge_slave_1: left promiscuous mode [ 1338.690724][T20332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.710498][T20332] bond3: (slave veth0_to_bond): Releasing active interface [ 1338.747904][T20332] bond0: (slave bond_slave_0): Releasing backup interface [ 1338.775623][T20332] bond0: (slave bond_slave_1): Releasing backup interface [ 1338.805783][T20332] team0: Port device team_slave_0 removed [ 1338.828162][T20332] team0: Port device team_slave_1 removed [ 1338.840333][T20332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.848614][T20332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.862027][T20332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.876777][T20358] netlink: 'syz.8.12958': attribute type 21 has an invalid length. [ 1338.885598][T20332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.896566][T20332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1339.082873][T20358] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1339.099151][T20358] bond2 (unregistering): Released all slaves [ 1339.101927][T20370] netlink: 'syz.6.12961': attribute type 1 has an invalid length. [ 1339.328162][T20377] netlink: 'syz.1.12963': attribute type 33 has an invalid length. [ 1339.447229][T20387] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1339.462356][T20387] netlink: 'syz.5.12967': attribute type 3 has an invalid length. [ 1339.465425][T20377] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1339.485041][T20377] bond3 (unregistering): Released all slaves [ 1339.687224][T20398] xt_TCPMSS: Only works on TCP SYN packets [ 1342.547959][T20391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1342.868104][T20437] __nla_validate_parse: 4 callbacks suppressed [ 1342.868124][T20437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12977'. [ 1343.150452][T20456] netlink: 'syz.6.12986': attribute type 10 has an invalid length. [ 1343.194306][T20456] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12986'. [ 1343.245635][T20460] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002 [ 1343.285457][T20456] team0: entered allmulticast mode [ 1343.294203][T20456] bridge0: port 1(team0) entered blocking state [ 1343.321366][T20456] bridge0: port 1(team0) entered disabled state [ 1343.350892][T20456] team0: entered promiscuous mode [ 1343.520419][T20472] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12989'. [ 1343.567016][T20475] veth0: entered promiscuous mode [ 1343.579567][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12990'. [ 1343.580116][T20477] netlink: 'syz.6.12991': attribute type 11 has an invalid length. [ 1343.589528][T20478] netlink: 'syz.6.12991': attribute type 1 has an invalid length. [ 1343.616138][T20478] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1343.830898][T20493] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12994'. [ 1343.975821][T20499] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1344.011513][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12997'. [ 1344.451951][T20532] netlink: 'syz.8.13006': attribute type 1 has an invalid length. [ 1344.482399][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13004'. [ 1344.486713][T20530] netlink: 'syz.5.13005': attribute type 1 has an invalid length. [ 1344.535427][T20532] bond2: (slave geneve3): making interface the new active one [ 1344.551767][T20532] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1344.566221][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13007'. [ 1344.579880][T20533] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13006'. [ 1344.601880][T20533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.610789][T19599] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1344.639427][T20543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.682242][T20543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.708345][T20543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.730738][T20557] xt_socket: unknown flags 0x8 [ 1344.776149][T20543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.048076][T19599] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1345.060127][T19599] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1345.261383][T19599] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1345.513267][T20591] IPv6: sit3: Disabled Multicast RS [ 1345.696066][T20601] netlink: 'syz.6.13025': attribute type 4 has an invalid length. [ 1345.801872][T20606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13027'. [ 1346.117027][T20625] netem: change failed [ 1346.509855][T20638] netlink: 'syz.8.13040': attribute type 1 has an invalid length. [ 1346.561281][T20638] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1346.585812][T20638] bond3 (unregistering): Released all slaves [ 1346.651818][T20643] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1347.102925][T20675] netlink: 'syz.1.13050': attribute type 1 has an invalid length. [ 1347.176268][T20675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1347.233735][T20675] bond3: (slave veth0_to_bond): making interface the new active one [ 1347.267070][T20675] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1347.336654][T20675] macvlan2: entered promiscuous mode [ 1347.354230][T20675] macvlan2: entered allmulticast mode [ 1347.370074][T20675] bond3: entered promiscuous mode [ 1347.397249][T20675] veth0_to_bond: entered promiscuous mode [ 1347.426465][T20675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1347.447131][T20675] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1347.492128][T20675] bond3: left promiscuous mode [ 1347.498139][T20675] veth0_to_bond: left promiscuous mode [ 1347.499507][T20691] openvswitch: netlink: Actions may not be safe on all matching packets [ 1347.768955][T20693] netlink: 'syz.6.13056': attribute type 4 has an invalid length. [ 1347.887750][T20697] __nla_validate_parse: 6 callbacks suppressed [ 1347.887769][T20697] netlink: 240 bytes leftover after parsing attributes in process `syz.8.13058'. [ 1348.037896][T20703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.052201][T20702] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.13061'. [ 1348.231349][T20708] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1348.256637][T20708] vlan2: entered allmulticast mode [ 1348.264927][T20708] bond0: entered allmulticast mode [ 1348.311738][T20710] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13064'. [ 1348.410450][T20715] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1348.601628][T20728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13070'. [ 1348.780616][T20741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13071'. [ 1349.237344][T20762] netlink: 'syz.6.13077': attribute type 49 has an invalid length. [ 1349.426882][T20779] netlink: 'syz.6.13084': attribute type 29 has an invalid length. [ 1349.434159][T20783] netlink: 'syz.5.13085': attribute type 39 has an invalid length. [ 1349.493566][T20779] netlink: 'syz.6.13084': attribute type 29 has an invalid length. [ 1349.895901][T20808] netlink: 'syz.3.13091': attribute type 20 has an invalid length. [ 1349.906842][T20808] IPv6: NLM_F_CREATE should be specified when creating new route [ 1350.171676][T20812] xt_HMARK: proto mask must be zero with L3 mode [ 1350.315639][T20831] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13099'. [ 1350.364492][T20834] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13098'. [ 1350.540250][T20849] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13101'. [ 1350.602576][T20849] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13101'. [ 1350.654894][T20857] sctp: [Deprecated]: syz.1.13105 (pid 20857) Use of int in max_burst socket option. [ 1350.654894][T20857] Use struct sctp_assoc_value instead [ 1350.748376][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13104'. [ 1351.030827][T20877] x_tables: duplicate underflow at hook 1 [ 1351.043590][T20877] x_tables: duplicate underflow at hook 2 [ 1351.050452][T20877] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002 [ 1351.081956][T20866] bond4 (unregistering): Released all slaves [ 1351.171231][T20886] xt_TCPMSS: Only works on TCP SYN packets [ 1351.312135][T20892] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1351.858340][T20912] netlink: 'syz.8.13124': attribute type 2 has an invalid length. [ 1352.101296][T20931] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20004 [ 1352.151409][T20931] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 1352.709441][T20961] openvswitch: netlink: Key type 132 is out of range max 32 [ 1353.134677][T20980] veth0: entered promiscuous mode [ 1353.257878][T20980] syzkaller0: entered promiscuous mode [ 1353.296862][T20980] syzkaller0: entered allmulticast mode [ 1353.341419][T20980] veth0: left promiscuous mode [ 1353.348729][T20992] __nla_validate_parse: 6 callbacks suppressed [ 1353.348744][T20992] netlink: 56 bytes leftover after parsing attributes in process `syz.8.13147'. [ 1353.410417][T20992] bond3 (unregistering): Released all slaves [ 1353.549092][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13149'. [ 1353.574971][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13149'. [ 1353.749562][T20999] Cannot find add_set index 4 as target [ 1353.833615][T21014] netlink: 'syz.1.13152': attribute type 32 has an invalid length. [ 1353.859435][T20998] syzkaller0: entered promiscuous mode [ 1353.902014][T20998] syzkaller0: entered allmulticast mode [ 1354.026047][T21026] netlink: 'syz.3.13154': attribute type 49 has an invalid length. [ 1354.809625][T19581] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 1355.185497][T21050] ip6t_rpfilter: unknown options [ 1355.192100][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13160'. [ 1358.029590][T21026] ip6gretap0: entered promiscuous mode [ 1358.041841][T21026] ip6gretap0: entered allmulticast mode [ 1358.097793][T21054] netlink: 'syz.5.13161': attribute type 29 has an invalid length. [ 1358.363643][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13162'. [ 1358.388652][T21067] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13163'. [ 1358.873588][T21087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13171'. [ 1358.888656][T21089] netlink: 'syz.6.13170': attribute type 21 has an invalid length. [ 1358.941425][T21089] netlink: 'syz.6.13170': attribute type 6 has an invalid length. [ 1358.981009][T21089] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13170'. [ 1359.079822][T21097] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1359.531923][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13178'. [ 1359.547772][T21115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13180'. [ 1359.667833][T21125] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13182'. [ 1359.696994][T21123] syzkaller0: entered promiscuous mode [ 1359.710647][T21123] syzkaller0: entered allmulticast mode [ 1359.910481][T21133] netlink: 'syz.6.13184': attribute type 9 has an invalid length. [ 1359.995135][T21135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13185'. [ 1360.672315][T21167] netlink: 252 bytes leftover after parsing attributes in process `syz.1.13193'. [ 1360.891914][T21178] netlink: 'syz.5.13198': attribute type 5 has an invalid length. [ 1361.246969][T21201] netlink: 'syz.8.13206': attribute type 1 has an invalid length. [ 1361.355407][T21201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1361.362323][T21206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.429959][T21206] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 1361.442320][T21206] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ2 [ 1361.482187][T21201] netlink: 'syz.8.13206': attribute type 10 has an invalid length. [ 1361.582078][T21201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1361.623721][T21201] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1361.670595][T21223] ip_vti0: entered promiscuous mode [ 1361.790001][T21226] netlink: 'syz.5.13211': attribute type 1 has an invalid length. [ 1361.808182][T21226] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13211'. [ 1361.823538][T21226] netlink: 'syz.5.13211': attribute type 1 has an invalid length. [ 1361.831505][T21226] netlink: 'syz.5.13211': attribute type 8 has an invalid length. [ 1362.287641][T21245] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1362.661070][T21265] policy can only be matched on NF_INET_PRE_ROUTING [ 1362.661090][T21265] unable to load match [ 1362.711328][T21265] team0: left allmulticast mode [ 1362.719771][T21265] team0: left promiscuous mode [ 1362.737989][T21265] bridge0: port 1(team0) entered disabled state [ 1362.795197][T21265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.838924][T21265] team0: entered allmulticast mode [ 1362.870961][T21265] bond0: (slave team0): Enslaving as an active interface with an up link [ 1363.120871][T21276] syzkaller0: entered promiscuous mode [ 1363.127664][T21276] syzkaller0: entered allmulticast mode [ 1363.160131][T21290] tipc: Started in network mode [ 1363.182258][T21290] tipc: Node identity 2ab037286ec, cluster identity 4711 [ 1363.210527][T21290] tipc: Enabled bearer , priority 0 [ 1363.296475][T21276] sch_tbf: burst 46 is lower than device syzkaller0 mtu (1514) ! [ 1363.397987][T21296] __nla_validate_parse: 2 callbacks suppressed [ 1363.398004][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13230'. [ 1363.512253][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13230'. [ 1363.542978][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 1369.240624][T19577] tipc: Resetting bearer [ 1369.288670][T21275] tipc: Resetting bearer [ 1369.325021][T21275] tipc: Disabling bearer [ 1369.340114][T16580] tipc: Node number set to 1148204840 [ 1369.756047][T21364] netlink: 312 bytes leftover after parsing attributes in process `syz.3.13248'. [ 1369.978785][T21380] lo: left promiscuous mode [ 1369.991263][T21382] validate_nla: 2 callbacks suppressed [ 1369.991279][T21382] netlink: 'syz.8.13252': attribute type 1 has an invalid length. [ 1370.017935][T21380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1370.249981][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13256'. [ 1370.292145][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13253'. [ 1370.332038][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13253'. [ 1370.379587][T21400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13253'. [ 1370.410720][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13253'. [ 1370.488938][T21407] netlink: 'syz.3.13261': attribute type 1 has an invalid length. [ 1370.501465][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13261'. [ 1370.540321][T21407] netlink: 658 bytes leftover after parsing attributes in process `syz.3.13261'. [ 1370.559105][T21407] netlink: 'syz.3.13261': attribute type 1 has an invalid length. [ 1370.576538][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13253'. [ 1370.616643][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13253'. [ 1370.622268][T19568] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.655633][T19577] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.680736][T19577] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.726520][T19577] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.842282][T21430] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1370.976484][T21435] netlink: 'syz.6.13266': attribute type 2 has an invalid length. [ 1370.989680][T21429] IPv6: NLM_F_CREATE should be specified when creating new route [ 1371.012100][T21429] netlink: 'syz.3.13264': attribute type 1 has an invalid length. [ 1371.281172][T21449] syzkaller1: entered promiscuous mode [ 1371.299914][T21449] syzkaller1: entered allmulticast mode [ 1371.423282][T21461] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1371.796933][T21484] netlink: 'syz.5.13277': attribute type 21 has an invalid length. [ 1371.883785][T21484] IPv6: NLM_F_CREATE should be specified when creating new route [ 1371.926932][T21492] netlink: 'syz.6.13278': attribute type 3 has an invalid length. [ 1371.959251][T21492] netlink: 'syz.6.13278': attribute type 1 has an invalid length. [ 1372.421566][T21496] team0: Cannot enslave team device to itself [ 1372.687446][T21521] syzkaller0: entered promiscuous mode [ 1372.702606][T21521] syzkaller0: entered allmulticast mode [ 1372.783772][T21524] netlink: 'syz.3.13291': attribute type 21 has an invalid length. [ 1372.806467][T21524] IPv6: NLM_F_CREATE should be specified when creating new route [ 1373.528754][T21566] siw: device registration error -23 [ 1373.783139][T26849] Bluetooth: hci4: command 0x0406 tx timeout [ 1373.860870][T21573] bond5: entered promiscuous mode [ 1374.345701][T21603] netlink: 'syz.8.13311': attribute type 1 has an invalid length. [ 1374.990773][T21636] __nla_validate_parse: 10 callbacks suppressed [ 1374.990792][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13318'. [ 1375.058524][T21639] Can't find ip_set type [ 1375.379924][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13325'. [ 1375.410674][T21659] gtp0: entered promiscuous mode [ 1375.438257][T21659] gtp0: entered allmulticast mode [ 1375.470770][T21664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.517975][T21664] bridge_slave_0 (unregistering): left allmulticast mode [ 1375.532389][T21664] bridge_slave_0 (unregistering): left promiscuous mode [ 1375.541765][T21664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.818007][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13327'. [ 1376.534720][T21721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13342'. [ 1376.551327][T21714] netlink: 'syz.5.13339': attribute type 11 has an invalid length. [ 1376.583896][T21725] openvswitch: netlink: IP tunnel dst address not specified [ 1376.631204][T21729] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13343'. [ 1376.644935][T21729] netlink: 'syz.8.13343': attribute type 3 has an invalid length. [ 1376.668423][T21721] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1376.681935][T21721] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1376.714356][T21721] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13342'. [ 1376.759358][T21727] netem: change failed [ 1376.778166][T21729] mac80211_hwsim hwsim118 : renamed from wlan1 (while UP) [ 1376.821592][T21733] openvswitch: netlink: Key type 358 is out of range max 32 [ 1376.936413][T21736] netlink: 'syz.1.13345': attribute type 1 has an invalid length. [ 1377.241855][T21753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13349'. [ 1377.396646][T21759] netlink: 'syz.6.13351': attribute type 11 has an invalid length. [ 1377.446251][T21759] netlink: 224 bytes leftover after parsing attributes in process `syz.6.13351'. [ 1377.532071][T21768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1377.682158][T21776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13355'. [ 1378.001825][T21790] netlink: 'syz.1.13359': attribute type 2 has an invalid length. [ 1378.289526][T21812] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.13362'. [ 1379.049620][T21856] netlink: 'syz.8.13372': attribute type 1 has an invalid length. [ 1379.164930][T21861] sctp: [Deprecated]: syz.5.13374 (pid 21861) Use of int in maxseg socket option. [ 1379.164930][T21861] Use struct sctp_assoc_value instead [ 1379.449483][T21873] netlink: 'syz.8.13379': attribute type 13 has an invalid length. [ 1379.475128][T21875] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1379.487314][T21879] tipc: Enabled bearer , priority 11 [ 1379.908274][T21904] netlink: 'syz.3.13387': attribute type 1 has an invalid length. [ 1379.908384][T21898] tipc: Enabled bearer , priority 0 [ 1380.006622][T21904] bond3: entered promiscuous mode [ 1380.013361][T21904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1380.039356][T21911] __nla_validate_parse: 5 callbacks suppressed [ 1380.039373][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13389'. [ 1380.045659][T21907] bond3: (slave bridge4): making interface the new active one [ 1380.045681][T21907] bridge4: entered promiscuous mode [ 1380.063048][T21907] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1380.064222][T21898] syzkaller0: MTU too low for tipc bearer [ 1380.101860][T21898] tipc: Disabling bearer [ 1380.110730][T21909] netlink: 56 bytes leftover after parsing attributes in process `syz.8.13388'. [ 1380.141940][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13389'. [ 1380.168071][T21911] vlan0: entered promiscuous mode [ 1380.278196][T21915] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1380.396795][T21919] syz_tun: entered allmulticast mode [ 1380.415424][T21919] syz_tun: left allmulticast mode [ 1380.550033][T21932] netlink: 81 bytes leftover after parsing attributes in process `syz.1.13395'. [ 1381.074947][ T5645] block nbd5: Receive control failed (result -32) [ 1381.435253][T21980] veth0: entered promiscuous mode [ 1381.558283][T21992] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13408'. [ 1381.601812][T21992] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13408'. [ 1381.615928][T21979] veth0: left promiscuous mode [ 1381.626799][T21992] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13408'. [ 1381.787406][T22003] netlink: 'syz.1.13414': attribute type 2 has an invalid length. [ 1381.809204][T22003] netlink: 'syz.1.13414': attribute type 2 has an invalid length. [ 1381.869934][T22003] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1381.885952][T22003] bond5 (unregistering): Released all slaves [ 1381.954334][T22004] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1382.054618][T22004] veth3: entered allmulticast mode [ 1382.110719][T22017] bond5: entered promiscuous mode [ 1382.158507][T22017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13418'. [ 1382.206628][T22017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13418'. [ 1382.228191][T22017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13418'. [ 1382.511549][T22032] netlink: 'syz.6.13423': attribute type 1 has an invalid length. [ 1382.575727][T22032] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1382.593323][T22036] bond7: (slave team_slave_0): Enslaving as a backup interface with an up link [ 1382.881468][T22047] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1382.959829][T22050] netlink: zone id is out of range [ 1382.972916][T22050] netlink: zone id is out of range [ 1382.978724][T22050] netlink: zone id is out of range [ 1382.985385][T22050] netlink: zone id is out of range [ 1382.990678][T22050] netlink: zone id is out of range [ 1382.997147][T22050] netlink: zone id is out of range [ 1383.003407][T22050] netlink: zone id is out of range [ 1383.015819][T22050] netlink: zone id is out of range [ 1383.038830][T22050] netlink: zone id is out of range [ 1383.069536][T22050] netlink: zone id is out of range [ 1383.224508][ T31] INFO: task syz.2.12072:16894 blocked for more than 143 seconds. [ 1383.253292][ T31] Not tainted syzkaller #0 [ 1383.259380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1383.271247][ T31] task:syz.2.12072 state:D stack:26808 pid:16894 tgid:16893 ppid:7154 task_flags:0x400040 flags:0x00080002 [ 1383.289356][ T31] Call Trace: [ 1383.292922][ T31] [ 1383.295956][ T31] __schedule+0x1821/0x5740 [ 1383.300577][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1383.306805][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 1383.314252][ T31] ? __pfx___schedule+0x10/0x10 [ 1383.319254][ T31] ? schedule+0x90/0x360 [ 1383.323794][ T31] schedule+0x164/0x360 [ 1383.328061][ T31] schedule_preempt_disabled+0x13/0x30 [ 1383.333959][ T31] __mutex_lock+0x7f7/0x1550 [ 1383.338922][ T31] ? __mutex_lock+0x608/0x1550 [ 1383.345294][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1383.349119][T22065] netlink: 'syz.5.13432': attribute type 12 has an invalid length. [ 1383.351377][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1383.364599][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1383.370169][ T31] ? genlmsg_put+0x137/0x2e0 [ 1383.375451][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1383.381092][ T31] ? __nla_parse+0x40/0x60 [ 1383.406427][T22065] netlink: 'syz.5.13432': attribute type 29 has an invalid length. [ 1383.406606][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1383.431649][T22065] netlink: 'syz.5.13432': attribute type 1 has an invalid length. [ 1383.437988][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1383.445991][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1383.452377][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1383.460133][ T31] ? __asan_memcpy+0x40/0x70 [ 1383.468828][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1383.479137][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1383.486246][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1383.491411][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1383.506154][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1383.511572][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1383.519471][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1383.524908][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1383.530204][ T31] ? down_read+0x270/0x2e0 [ 1383.534882][ T31] ? genl_rcv+0xd/0x40 [ 1383.538988][ T31] genl_rcv+0x28/0x40 [ 1383.545270][ T31] netlink_unicast+0x75c/0x8e0 [ 1383.550217][ T31] netlink_sendmsg+0x813/0xb40 [ 1383.555573][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1383.560883][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1383.567602][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1383.573185][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1383.578006][ T31] ? __might_fault+0xaf/0x130 [ 1383.583722][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1383.589057][ T31] ? import_iovec+0x73/0xa0 [ 1383.593844][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1383.598557][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1383.603604][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1383.608816][ T31] ? futex_wait+0x2a2/0x390 [ 1383.614097][ T31] ? __fget_files+0x2a/0x420 [ 1383.618702][ T31] ? __fget_files+0x3a0/0x420 [ 1383.623639][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1383.628673][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1383.634385][ T31] ? rcu_is_watching+0x15/0xb0 [ 1383.639297][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.645924][ T31] do_syscall_64+0x174/0x580 [ 1383.650603][ T31] ? trace_irq_disable+0x3b/0x140 [ 1383.657304][ T31] ? clear_bhb_loop+0x40/0x90 [ 1383.662027][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.668245][ T31] RIP: 0033:0x7fd2fd19ce59 [ 1383.673851][ T31] RSP: 002b:00007fd2fe0bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1383.682304][ T31] RAX: ffffffffffffffda RBX: 00007fd2fd415fa0 RCX: 00007fd2fd19ce59 [ 1383.690507][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1383.698947][ T31] RBP: 00007fd2fd232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1383.710717][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.718913][ T31] R13: 00007fd2fd416038 R14: 00007fd2fd415fa0 R15: 00007fff602483d8 [ 1383.739487][ T31] [ 1383.742837][ T31] [ 1383.742837][ T31] Showing all locks held in the system: [ 1383.769397][ T31] 1 lock held by khungtaskd/31: [ 1383.806594][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1383.819351][ T31] 2 locks held by getty/5387: [ 1383.824836][ T31] #0: ffff8880363ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1383.834724][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1383.845000][ T31] 3 locks held by kworker/1:17/16595: [ 1383.850402][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1383.866564][ T31] #1: ffffc900041bfc40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1383.877737][ T31] #2: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1383.887848][ T31] 2 locks held by syz.0.11039/12869: [ 1383.893241][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1383.901464][ T31] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1383.924602][ T31] 2 locks held by syz.2.12072/16894: [ 1383.929898][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1383.938249][ T31] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1383.953734][ T31] 2 locks held by syz.4.12165/17367: [ 1383.959083][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1383.967562][ T31] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1383.978940][ T31] 2 locks held by syz.7.12458/18475: [ 1383.984794][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1383.993205][ T31] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1384.003701][ T31] 3 locks held by kworker/u8:31/19585: [ 1384.009148][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1384.020960][ T31] #1: ffffc9000fe27c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1384.034092][ T31] #2: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1384.043288][ T31] 3 locks held by kworker/u8:38/19599: [ 1384.048746][ T31] #0: ffff888031937940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1384.060547][ T31] #1: ffffc9000fe37c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1384.074179][ T31] #2: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1384.084273][ T31] 4 locks held by syz.5.13432/22059: [ 1384.089555][ T31] #0: ffff8880a91c5880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1384.100504][ T31] #1: ffffffff8fe35828 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1384.115125][ T31] #2: ffff888052b904d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xe00 [ 1384.125807][ T31] #3: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1384.136884][ T31] 4 locks held by syz.5.13432/22062: [ 1384.142183][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1384.151241][ T31] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1384.160426][ T31] #2: ffff888028beb140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 1384.169717][ T31] #3: ffff88806264c348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 1384.179594][ T31] 1 lock held by syz.8.13434/22068: [ 1384.185218][ T31] #0: ffff8880a91c2a80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1384.195605][ T31] 2 locks held by syz.8.13434/22072: [ 1384.200929][ T31] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1384.209591][ T31] #1: ffffffff8fe37600 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1384.218928][ T31] 3 locks held by syz.8.13434/22073: [ 1384.224317][ T31] #0: ffffffff90323228 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1384.234598][ T31] #1: ffffffff8fdc7e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1384.243838][ T31] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1384.262277][ T31] [ 1384.279263][ T31] ============================================= [ 1384.279263][ T31] [ 1384.288004][ T31] NMI backtrace for cpu 0 [ 1384.288021][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1384.288062][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1384.288085][ T31] Call Trace: [ 1384.288100][ T31] [ 1384.288116][ T31] dump_stack_lvl+0xe8/0x150 [ 1384.288141][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1384.288265][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1384.288313][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1384.288336][ T31] sys_info+0x135/0x170 [ 1384.288353][ T31] watchdog+0xfd3/0x1030 [ 1384.288385][ T31] ? watchdog+0x1c9/0x1030 [ 1384.288411][ T31] kthread+0x389/0x470 [ 1384.288431][ T31] ? __pfx_watchdog+0x10/0x10 [ 1384.288449][ T31] ? __pfx_kthread+0x10/0x10 [ 1384.288469][ T31] ret_from_fork+0x514/0xb70 [ 1384.288517][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1384.288534][ T31] ? __switch_to+0xc79/0x1410 [ 1384.288559][ T31] ? __pfx_kthread+0x10/0x10 [ 1384.288579][ T31] ret_from_fork_asm+0x1a/0x30 [ 1384.288613][ T31] [ 1384.288620][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1384.403250][ C1] NMI backtrace for cpu 1 [ 1384.403266][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1384.403284][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1384.403294][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1384.403317][ C1] Code: eb 7e 02 e9 d3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 31 22 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1384.403332][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1384.403349][ C1] RAX: 00000000002b7567 RBX: ffffffff819a845a RCX: 0000000080000001 [ 1384.403362][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa3620 RDI: ffffffff8c28b6e0 [ 1384.403373][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1384.403385][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1384.403397][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 1384.403409][ C1] FS: 0000000000000000(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 1384.403422][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1384.403433][ C1] CR2: 000000110c3e074a CR3: 00000000784f4000 CR4: 00000000003526f0 [ 1384.403448][ C1] Call Trace: [ 1384.403454][ C1] [ 1384.403460][ C1] default_idle+0x9/0x20 [ 1384.403479][ C1] default_idle_call+0x72/0xb0 [ 1384.403498][ C1] do_idle+0x36a/0x5f0 [ 1384.403519][ C1] ? __pfx_do_idle+0x10/0x10 [ 1384.403542][ C1] cpu_startup_entry+0x43/0x60 [ 1384.403559][ C1] start_secondary+0x101/0x110 [ 1384.403574][ C1] common_startup_64+0x13e/0x147 [ 1384.403603][ C1] [ 1384.567490][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1384.574360][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1384.583466][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1384.593505][ T31] Call Trace: [ 1384.596771][ T31] [ 1384.599689][ T31] vpanic+0x56c/0xa60 [ 1384.603660][ T31] ? __pfx___schedule+0x10/0x10 [ 1384.608501][ T31] ? __pfx_vpanic+0x10/0x10 [ 1384.612989][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1384.619130][ T31] panic+0xc5/0xd0 [ 1384.622840][ T31] ? __pfx_panic+0x10/0x10 [ 1384.627259][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1384.632645][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1384.638815][ T31] watchdog+0x102c/0x1030 [ 1384.643158][ T31] ? watchdog+0x1c9/0x1030 [ 1384.647578][ T31] kthread+0x389/0x470 [ 1384.651633][ T31] ? __pfx_watchdog+0x10/0x10 [ 1384.656304][ T31] ? __pfx_kthread+0x10/0x10 [ 1384.660899][ T31] ret_from_fork+0x514/0xb70 [ 1384.665475][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1384.670569][ T31] ? __switch_to+0xc79/0x1410 [ 1384.675243][ T31] ? __pfx_kthread+0x10/0x10 [ 1384.679847][ T31] ret_from_fork_asm+0x1a/0x30 [ 1384.684620][ T31] [ 1384.687883][ T31] Kernel Offset: disabled [ 1384.692194][ T31] Rebooting in 86400 seconds..